Knowledgebase

Issue:

Configuring and using the Easy Port Access menu for the CS9000

Solution:

This is a general overview of configuring the Easy Port Access feature on the CS9000 console server (this function available for units running firmware version 3.4.0 or higher).

The Easy Port Access feature allows a normal user to Telnet/SSH to the CS9000 and be presented with a menu to access any port configured for Reverse sessions.
The Telnet or SSH client must be able to emulate a VT100 terminal type.
Ensure that your client is configured to emulate VT100 or the menu will not be available. With most Unix OS's you must set the TERM environment variable:
example # TERM = vt100

Note: some Unix/Linux console's will not emulate other personalities by setting the TERM variable.

Windows clients require a configurable terminal emulation option.

The following instructions are based on using the 'screen' menu for configuration, and that the Lines have already been configured for Reverse services.

Step 1. Configure a user for the Easy Port Acces menu option.
Note the internal 'Admin' user cannot be configured for menu access.

Main Menu -> Users
Add a user
Change a user
Select the user
Set the LEVEL to 'menu'

    lqqqqqqqqqqqqqqqqqqqqqqqqqqqq+user Keith+qqqqqqqqqqqqqqqqqqqqqqqqqqqqqk
    x         username Keith                                              x
    x    screen switch[  ]                         level[menu      ]      x
    x          service[csprompt ]                ip_host[               ] x
    x         tcp port[23   ]                   callback[off]             x
    x     phone number[                               ]                   x
    x       idle timer[       ]            session timer[       ]         x
    x        framed ip[255.255.255.254]   framed netmask[               ] x
    x       framed mtu[1500]          framed compression[on ]             x
    mqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqj

Step 2. Configuring the port access permissions for each user.

Main Menu -> Users
Select Line Access
Select the user
By default all ports are enabled for access. To disable access, select the port and press the space bar.

                  lqqqqqqqqq+line access for Keith+qqqqqqqqqk             
                  x 1  [X]     2  [X]     3  [X]     4  [X] x             
                  x 5  [ ]     6  [ ]     7  [ ]     8  [ ] x             
                  x 9  [ ]     10 [ ]     11 [ ]     12 [ ] x             
                  x 13 [X]     14 [X]     15 [ ]     16 [ ] x             
                  x 17 [ ]     18 [ ]     19 [ ]     20 [ ] x             
                  x 21 [ ]     22 [X]     23 [ ]     24 [X] x             
                  mqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqj             

Step 3 (optional). Configure a Line Name to be displayed in the Easy Port Access Menu.

Main Menu -> Line Configuration
Change line
Configure the 'line name' text that will displayed in the Easy Port Access Menu.

       lqqqqqqqqqqqqqqqqqqqqqqqqqqqq+line 1+qqqqqqqqqqqqqqqqqqqqqqqqqqqqk
       x        service[rev tel]         line name[cisco              ] x
       x                                                                x
       x          speed[9600  ]           terminal[dumb  ]              x
       x           flow[none]                                           x
       x           bits[8]                    user[                ]    x
       x         parity[none]             hostname[gw            ]      x
       x           stop[1]               host port[23   ]               x
       x       security[on ]               CS port[10001]               x
       x                                                                x
       x           dial[none ]          modem name none                 x
       x   phone number[                               ]                x
       x                                                                x
       x     idle timer[       ]     session timer[       ]             x
       mqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqj

Note: if you configure the CS port number to 0 then Telnet/SSH directly to the port is disabled and only Easy Port Access is available to connect to the serial port.

Remember to save your configuration to Flash and kill any line that has been changed.

The User(s) will now be able to Telnet/SSH to the CS9000 and be presented with the Easy Port Access Menu:

+-----------------------------------------------------------------------------+
| user [Keith           ]   server [cs9000        ]                 telnet 2  |
+-----------------------------------------------------------------------------+

                       lqqqqqqqq+line selection+qqqqqqqqk
                       x ** logout **                   x
                       x  1 cisco               rev-tel x
                       x  2 Solaris             rev-ssh x
                       x  3 AIX                 rev-ssh x
                       x  4 Cisco Switch        rev-ssh x
                       x 13                     rev-ssh x
                       x 14 NortelPBX           rev-ssh x
                       x 22                     rev-tel x
                       x 24                     rev-ssh x
                       mqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqj

+-----------------------------------------------------------------------------+
| ?: help, esc: exit menu, arrows: move, enter: select                        |
+-----------------------------------------------------------------------------+

Note: only ports configured for Reverse Telnet or Reverse SSH will be displayed in the Easy Port Access menu.

To disconnect the session the user will enter the 'Line Menu String' as defined in the CS9000 Server Configuration. By default the string is "~menu".
When typed the session to the port will be closed and the user brought back to the Easy Port Access menu screen.

Note that a user can only connect to a port that matches the connection type of their Client.
Example a Telnet client can only access ports configured for Reverse Telnet.

Techtip:
You can dedicate a serial port to access the Easy Port Menu by attaching a dumb terminal to the port and configuring the port to login to the CS9000.

Add the CS9000 to it's host table
Configure the port service to Silent Telnet
Select VT100 for the Terminal Type
Select the CS9000 host table entry for the Host field
Enter 23 as the Host Port
The dumb terminal attached to the serial port will be presented with a login prompt for the CS9000. If the user ID is configured as Level = Menu then the Easy Port Menu will be presented when they login.
Note that ports configured for Rev SSH are not accessable in this type of configuration.

Related Articles:
1.) VT100 emulation does not appear to draw screen properly