How to configure out-of-band management on Cradlepoint routers
This document introduces Advanced Out-of-band Management (OOBM) and provides instructions for configuring OOBM on supported Cradlepoint endpoints.
Use the following links to quickly navigate this document.
- Connection Methods
- SSH Hopping
- Create an OOBM Connection Profile
- Use an OOBM Connection Profile
This document provides information on configuring the Out-of-band via Remote Connect feature on Cradlepoint endpoints for the troubleshooting of attached devices, that can be managed via a standard RS232 console interface. Once enabled, Remote Connect is used to establish a remote session to a Cradlepoint endpoint, which then redirects the SSH or Telnet traffic to the attached console cable.
The Out-of-band Management feature requires a minimum NetCloud OS version of 6.1.0 and above.
To configure OOBM, you must set up the hardware (cabling and connectors) and then configure the endpoint for OOBM via NetCloud Manager (NCM).
Pleas refer to the following table to determine which products support Advanced Out-of-band Management(OOBM).
|Connection Type||Supported Endpoints||Type of Connector||Notes|
||RS-232 DB9 Female||Serial cables are available from 3rd-party suppliers.|
||USB Type-A Female||1, 2, 4, 8-port USB-to-serial hubs can be used for out of band management to multiple devices. USB-to-serial hubs or adapters must use the FTDI chipset to be compatible and are available from 3rd-party suppliers.
* 1, 2, 4 Port USB-to-Serial hubs supported on CR4250 USB3 port only. 8-Port hubs are not supported at present on the CR4250.
|RJ45 Serial Console||
Outbound Mgmt Only
Inbound Mgmt Only
|RJ45||Cradlepoint RJ45 Rollover Serial Console Cable
Note: “Out-of-band Manager” and “Connect to Device UI” are licensed features under Remote Connect. Feature entitlement for Remote Connect is based on the level and the subscription purchased. Please see the following table for license info.
|Remote Connect License||Solution Packaging|
|Advanced||Branch LTE Adapters|
Use the following steps to enable and configure a Cradlepoint router’s software settings for serial redirection.
NOTE: Software setup is not required for Cradlepoint routers using RJ45 console-port connections.
- Log into NetCloud Manager.
- On the DEVICES dashboard, click the checkbox for the router to connect, and then click on the Remote Connect drop-down menu.
- Select Connect to Device UI to open the Remote Connect dialog.
- Click on SYSTEM in the left-hand navigation menu, and then select Serial Redirector.
- Place a check mark next to Enabled in the Telnet to Serial Configuration area, and then click the Save button.
- In the USB Serial Adapter Configuration section, set the values to match those used by your device.
- Click the Submit button again if additional changes were made.
NOTE: Some routers require slightly different settings than the Cradlepoint’s default router settings. If the console window does not display text correctly (such as inserting a blank row between each line of text), change the Cradlepoint’s Linefeed setting to a different value and then try again.
Client software is required to open SSH/Telnet connections to Cradlepoint routers. The SSH/Telnet client software, PuTTY, is used in the following procedures. For more information on installing and using PuTTY, refer to Download PuTTY.
The recommended, secure method to access your hardware is to first establish an SSH session to the Cradlepoint router. Establishing SSH sessions to Cradlepoint routers can be done in any of the three following ways:
- Through client software (e.g PuTTY) – Refer to How to Configure Remote Administration on a Cradlepoint Router for more information.
- From the router’s NetCloud OS – Refer to NCOS: CLI – Out of Band Management for more information.
- From NCM:
- Open your SSH client software (PuTTY, in this example) and type in the public IP address and port for the Cradlepoint router in the Host Name (or IP Address) and Port fields.
- Select SSH for the Connection type.
- Click the Open button to establish an SSH connection to the Cradlepoint router.
- Once you have established an SSH connection to the router’s command-line interface (CLI), use the serial command to create a console session from the Cradlepoint router to the serially-connected device.
- If you are using a 1-to-4 USB-to-Serial adapter, use the serial # command format to initiate a serial connection to a specific client device. For example, to connect serially to a device connected to the third port of USB-to-Serial adapter, use serial 3.
- After the session is established, you have access to the console of your device.
- To exit the session, use either of the following commands:
- Use CTRL + W to break the connection to the device, but keep the SSH session up
- Use CTRL + Q to break the connection to the device and end the SSH session
The CBA850 router has a console port for Out of Band Management (OOBM) of third-party devices. Using console access from a CBA850 to the CLI of a third-party router/firewall requires the following:
- An SSH Client installed on your computer (e.g PuTTY)
- A Public Static/Dynamic IP address with your ISP
- A router/firewall with a console port
NOTE: The CBA850 console port requires the use of a rollover cable or adapter.
- Open your SSH Client (PuTTY, in this example) and type the public IP address for the CBA850 in the Host Name (or IP Address) field.
- Select SSH for the Connection type.
- Click the Open button to establish an SSH connection to the CBA850.
- Type the serial command.
- At the CBA850’s command line, prompt to start a session from the CBA850 to the device connected to the console port of the CBA850.
IMPORTANT: Cradlepoint recommends using the SSH-to-Serial connection method whenever possible because it is encrypted and requires a username and password. Cradlepoint does not recommend using Telnet-to-serial access unless the device is on a private network and is not accessible from the Internet.
- Open your SSH client software (PuTTY, in this example) and type in the public IP address for the Cradlepoint router in the Host Name (or IP Address) field.
- Type the Telnet port number in the Port field. This port number is listed on the router’s SYSTEM > Serial Redirector > Telnet to Serial Configuration area in the Server Port field.
- Select Telnet for the Connection type.
- Click the Open button to establish the Telnet session and interact directly with your hardware connected to the Cradlepoint router.
Users are able to SSH into any device on either the WAN or LAN that is running an SSH Server.
- Configurable Options: Port, login name, data compression, session ciphers
|Client uses the below ciphers by default for PCI-Compliance:|
Required arguments: Hostname (either the hostname or a [email protected] pair)
- -v Debug level. May be specified up to 3 times (-v, -vv, -vvv).
- -C Requests compression of all data.
- -1 Force ssh to try protocol version 1 only.
- -2 Force ssh to try protocol version 2 only.
- -l Specifies login name.
- -p Specifies port.
- -c Comma separated list of ciphers (e.g. aes256-ctr, aes192-ctr, aes128-ctr).
- When prompted if you trust the host key, make sure to type “yes” and not “y.”
- Only one session can be active at the a time. If a new session is opened (if the device is accessed by a different method, or by a second user) before the original one is stopped, you may receive garbled feedback.
This section provides the steps necessary to create and use OOBM connection profiles.
- From the Devices dashboard, select the router and then click the Remote Connect menu.
- Click Add/Edit for Out of Band Manager.
- From the Remote Connect screen, click the Add button in the Out of Band Manager area.
- On the Add Serial Profile dialog do the following:
- Type a name for the connection profile in the Name field.
- Select the serial port that the connection will use, from the Serial drop-down box.
- Click the Save button to save the OOBM connection profile.
OOBM Connection Profiles can be accessed and used with either of the following methods:
- From the Remote Connect menu, select the profile from the Out of Band Manager area in the Remote Connect menu.
- From the Remote Connect screen, click the Connect button next to the profile.
If you are experiencing issues using OOBM, try the following troubleshooting tips:
- Reseat the connectors.
- Disable/re-enable the Serial Redirect feature on the Cradlepoint router.
- Ensure you are able to access your device’s console directly through the USB-to-Serial adapter.
- Check the RS232 settings on your device and make sure they match.
- Reboot the hardware, including the Cradlepoint router and its client serial device.