RMS-SNMP01B SNMP Card User Manual
RMS-SNMP01B SNMP Card User Manual
User Manual
Issue 10
Date 2020-03-20
and other Huawei trademarks are trademarks of Huawei Technologies Co., Ltd.
All other trademarks and trade names mentioned in this document are the property of their respective
holders.
Notice
The purchased products, services and features are stipulated by the contract made between Huawei and
the customer. All or part of the products, services and features described in this document may not be
within the purchase scope or the usage scope. Unless otherwise specified in the contract, all statements,
information, and recommendations in this document are provided "AS IS" without warranties, guarantees or
representations of any kind, either express or implied.
The information in this document is subject to change without notice. Every effort has been made in the
preparation of this document to ensure accuracy of the contents, but all statements, information, and
recommendations in this document do not constitute a warranty of any kind, express or implied.
Website: https://e.huawei.com
Purpose
This document describes the RMS-SNMP01B in terms of its features, appearance, installation,
usage, and operation.
The RMS-SNMP01B is an optional communications card which is designed for the
UPS2000-G-(1 kVA-3 kVA) and UPS2000-A-(1 kVA-3 kVA) series.
In this document, Simple Network Management Protocol (SNMP) card is short for
RMS-SNMP01B. UPS is short for uninterruptible power system.
Intended Audience
This document is intended for:
Sales engineer
Technical support engineer
System engineer
Hardware installation engineer
Commissioning engineer
Data configuration engineer
Maintenance engineer
Symbol Conventions
The symbols that may be found in this document are defined as follows.
Symbol Description
Indicates a hazard with a high level of risk which, if not
avoided, will result in death or serious injury.
Indicates a hazard with a medium level of risk which, if not
avoided, could result in death or serious injury.
Indicates a hazard with a low level of risk which, if not
avoided, could result in minor or moderate injury.
Symbol Description
Indicates a potentially hazardous situation which, if not
avoided, could result in equipment damage, data loss,
performance deterioration, or unanticipated results.
NOTICE is used to address practices not related to personal
injury.
Supplements the important information in the main text.
NOTE is used to address information not related to personal
injury, equipment damage, and environment deterioration.
Change History
Changes between document issues are cumulative. The latest document issue contains all the
changes made in earlier issues.
Issue 10 (2020-03-20)
Modified 2.1 Functions.
Issue 09 (2019-12-20)
Updated the safety information.
Issue 08 (2019-11-26)
Updated the SNMP version description.
Issue 07 (2019-07-29)
Deleted the Modbus-TCP feature.
Issue 06 (2016-12-15)
The software version has been updated in the following aspects:
Added the RCCMD feature.
Added the DHCP feature.
Added the dry contact feature.
Issue 05 (2016-05-15)
The output terminal of 3 kVA UPS changed to output socket (C19).
Issue 04 (2016-01-20)
Updated the 10 Changing the SSH Access Password.
Issue 03 (2015-07-27)
Updated the 4.2.2 Setting Internet Explorer Options.
Issue 02 (2015-05-10)
The software is upgraded.
Issue 01 (2014-10-27)
This is the first release.
Contents
6 Managing the UPS by Using the NMS Complying with Huawei Standard ................... 46
6.1 SNMP Card Versions .................................................................................................................................................. 46
6.2 Installing the UPS MIB Library .................................................................................................................................. 46
6.3 Managing the UPS by Using the NMS ....................................................................................................................... 46
6.3.1 Applying for Access Rights ..................................................................................................................................... 46
6.3.2 Managing the UPS ................................................................................................................................................... 46
7 Managing the UPS by Using the NMS Complying with RFC1628 Standard ................. 47
7.1 Installing the UPS MIB Library .................................................................................................................................. 47
7.2 Managing the UPS by Using the NMS ....................................................................................................................... 47
7.2.1 Applying for Access Rights ..................................................................................................................................... 47
7.2.2 Managing the UPS ................................................................................................................................................... 47
10 Troubleshooting ........................................................................................................................ 53
11 Upgrading the SNMP Card ..................................................................................................... 54
12 Changing the SSH Access Password ..................................................................................... 58
12.1 Maintenance Suggestions ......................................................................................................................................... 58
12.2 Changing an Authentication Password ..................................................................................................................... 59
1 Safety Information
1. Wear electrostatic discharge (ESD) gloves when you install the SNMP card.
2. Do not hot-swap the SNMP card that is connected to a temperature and humidity sensor.
3. Change the preset password in your first login to the SNMP card on the WebUI. For
details, see section 4.6.2 User Mgmt. Page.
4. Change the preset password in your first login to the SNMP card over Secure Shell
(SSH). For details, see chapter 12.2 Changing an Authentication Password.
5. Change the user account password regularly. You are suggested to change the password
every six months.
6. Exercise caution when manually shutting down the UPS inverter for transferring to
bypass mode, or when adjusting the UPS output voltage level or frequency. Doing so
may affect the power supply to equipment.
7. Exercise caution when setting battery parameters. Incorrect settings will affect the power
supply and battery lifespan.
2 Overview
2.1 Functions
The SNMP card is an optional monitoring component of the UPS. It provides SNMP agent
and web management functions. The SNMP card allows users to remotely manage the UPS by
using an NMS, Huawei NetEco, or a web browser on a computer network. A maximum of 16
SNMPv3 users and 80 NMS users can manage the UPS. A maximum of 2 WebUI users can
manage the UPS online.
The SNMP card has an exquisite, advanced, and unique design, and features high
performance and reliability. It has the following functions and features:
Supports UPS2000-A-(1 kVA-3 kVA) and UPS2000-G-(1 kVA-3 kVA) series.
Adapts to the 10 Mbit/s, 100 Mbit/s fast Ethernet (FE).
Supports SNMP, HTTPS, and SSH.
Supports SNMP agent v1, v2c, and v3. The UPS MIB library can be downloaded from
its own web page, instead of any CD-ROM.
Supports remote management on Windows or Linux using a web browser. The supported
web browsers include Internet Explorer 8, Internet Explorer 9, Internet Explorer 10,
Internet Explorer 11, Firefox 33.1, and Chrome 39.0.2171.71.
Provides an access security mechanism, assigns rights to users based on roles, and
implements IP address control over HTTPS, SNMPv3, and SNMP access to prevent
unauthorized access.
Provides comprehensive UPS management, such as producing an energy flow diagram,
displaying alarms, controlling UPS running, collecting performance data statistics, as
well as allowing users to view, retrieve historical alarms and operation logs.
Supports optional environment monitoring components such as temperature and
humidity modules, and external dry contact card.
Works with NetShutdown, a computer and server security shutdown program developed
by Huawei, to automatically shut down the computers and servers where NetShutdown is
installed to protect customer data and reduce loss.
Works with RCCMD, a client shutdown software developed by Generex, to
automatically and safely shut down the client that is installed with the RCCMD, thereby
protecting customers' data and preventing loss.
Alarm information is sent to the specified user mailbox at the specified time.
Change the preset password in your first login to the SNMP card. For details of WebUI, see section 4.6.2
User Mgmt. Page. For details of SSH, see section 12.2 Changing an Authentication Password.
(1) Port for southbound device (2) Ethernet network port (10/100BASE-T)
The SNMP Ethernet network port is an RJ45 port. It communicates with the 10 Mbit/s or 100
Mbit/s Ethernet over a standard network cable. The indicators show the communication status.
Table 2-1 describes the ports and indicators.
The Ethernet network port is protected by a security mechanism. The port for monitoring the ambient
temperature and humidity sensor use Modbus protocol, without reference to the access authentication
mechanism.
The SNMP card equipped with a temperature and humidity sensor can monitor the
temperature and humidity over an RS485 bus. Table 2-2 lists the port definition.
3.1 Preparations
Before installing the SNMP card, prepare materials and tools listed in Table 3-1.
Tools
SNMP card Temperature Network cable Phillips Electrostatic
and humidity (RJ45 screwdriver discharge
sensor cable connectors on (ESD) gloves
(one end is an both ends)
RJ45 connector,
and the other
end is an RJ11
connector,
delivered with
SNMP card)
3.2 Precautions
The SNMP card supports hot swap (the SNMP card does not support hot swap, when it is
equipped with a temperature and humidity sensor), but temperature and humidity sensors
do not.
Some electronic components in the SNMP card are sensitive to ESD. Do not use your
hands or electrical objects to touch electronic components or circuits in the SNMP card,
preventing ESD from damaging the SNMP card. Hold the edges of the SNMP card when
you move or install it.
Wear ESD gloves when you install the SNMP card.
Procedure
Step 1 Remove the cover of the optional card slot at the rear of the UPS and keep the screws.
Step 2 Insert the card into the optional card slot and secure the card using the screws, as shown in
Figure 3-1.
Step 3 (Optional) If there is a temperature and humidity sensor, connect the RJ45 connector to the
port for monitoring the ambient temperature and humidity sensor on the SNMP card. For the
method about how to connect the other end of the cable, see the user manual related to the
temperature and humidity sensor.
Step 4 Connect one end of the network cable to the Ethernet network port on the SNMP card and the
other end to an Ethernet port. If the green indicator turns on and the yellow indicator blinks,
the SNMP card is successfully installed and is properly communicating with the Ethernet.
----End
If the SNMP card is equipped with a temperature and humidity sensor, you can view the UPS
temperature and humidity on the Monitoring page on the WebUI of SNMP card, as shown in Figure
4-9 . If the SNMP card is not equipped with a temperature and humidity sensor, NA is displayed.
Set the temperature and humidity sensor address to 1 (DIP switch 1 is ON, the other DIP switch is
OFF, as shown in Figure 3-2) and baud rate to 9600.
Figure 3-2 DIP switch on the ambient temperature and humidity sensor
(1) External dry contact (2) RUN indicator (3) ALM indicator
card
(4) RS485_IN port (5) RS485_OUT port (6) Dry contact
(7) Reset button (8) Dual in-line package (DIP) (9) Wall-mounted
switch base
The external dry contact card connects to the UPS over an SNMP card. Figure 3-4 shows how
to connect cables to the external dry contact card.
RMS-SNMP01A card does not support connection to a temperature and humidity sensor and
an external dry contact card at the same time.
Refer to the external dry contact card user manual and set the card address to 8. Figure 3-5shows the DIP
switch status of the RMS-RELAY02B. 1 is set to ON and other toggle switches are set to OFF. The baud
rate is set to 9600.
The user interface (UI) snapshots in this document correspond to the software version
UPS2000 V200R001C01SPC300. The UI snapshots are subject to change without notice.
Contact Huawei technical support to obtain the latest snapshots if you need.
Monitoring page
− The Active Alarms page displays active alarms generated for the UPS.
− The Real-Time Data page displays real-time running data of UPS modules.
− The Param. Settings page allows you to set the UPS temperature and humidity
alarm parameters.
− The Control page allows you to start or shut down the UPS.
Query page
− The Logs page allows you to query users' operation information to know recent
operations.
− The Performance Data page displays the performance data of UPS. You can query
and export the performance data of a selected UPS.
− The Historical Alarms page displays alarms of UPS. You can query and export the
historical alarms of the selected UPS.
Config page
− The Comm. Config page allows you to configure the IP address of SNMP card,
NAT mapping, Sender's Email Settings, and Alarm Notification.
− The User Mgmt page allows you to create, change, and delete users.
− The Site Config page allows you to set the system parameters, change the system
date and time, select a time zone, synchronize the local clock, and import the SSL
certificate.
− The Performance Data page allows you to set the performance data save period.
− The SNMP page allows you to change the SNMP card version, add an NMS, and
configure the SNMP TRAP.
− The RCCMD page allows you to configure the ESN, shut down RCCMD, perform
SSL encrypted transmission, configure the client, configure events, and manage the
RCCMD certificate.
Maintenance page
− The Data Maintenance page allows you to export the users' operation records,
export the performance data, historical alarms, and serviceability data of UPS over
WebUI, and delete the performance data and historical alarms of UPS.
− The Upgrade page allows you to upgrade the SNMP card software.
After you select Continue to this website (not recommended) in Figure 4-1, click
Certificate Error in the upper right corner. A dialog box is displayed, as shown in Figure 4-2.
You can identify the cause of the following certificate error messages according to Figure 4-3.
The security certificate presented by this website was not issued by a certificate
authority.
The security certificate presented by this website has expired or is not yet valid.
The security certificate presented by this website was issued for a different website's
address.
The solutions are as follows:
1. The following are two methods to address the "The security certificate presented by this
website was not issued by a certificate authority" problem:
− Method 1: The user purchases a digital certificate from the known CA vendor
provided by Windows as the web server security certificate.
− Method 2: Install the root certificate for the digital certificate of the web server in
the Trusted Root Certification Authorities folder on the Windows computer. The
installation procedure is as follows:
Click Install Certificate, as shown in Figure 4-3. Choose Place all certificates in
the following store, and install the certificate in the Trusted Root Certification
Authorities folder, as shown in Figure 4-4.
2. The following are two methods to address the "The security certificate presented by this
website has expired or is not yet valid" problem:
− Method 1: If the certificate is issued by a CA authority, choose Continue to this
website (not recommended). The WebUI runs properly, with no connection
interrupted.
− Method 2: Apply for a digital certificate again.
3. The following are two methods to address the "The security certificate presented by this
website was issued for a different website's address" problem:
− Method 1: In Internet Explorer, choose Internet Options > Advanced. Deselect
Warn about certificate address mismatch*, as shown in Figure 4-5.
− Method 2: Apply for a digital certificate again.
If Use TLS 1.2 is selected in Internet Explorer 8 or Internet Explorer 9, web pages cannot be
accessed.
If Internet Explorer 10 or Internet Explorer 11 needs to be used to access web pages, you must add
the compatibility view settings. Choose Page > Compatibility View Settings and add the SNMP
card IP address. If the SNMP card IP address is not changed, add 192.168.0.10, as shown in Figure
4-7.
Before performing any maintenance or change operations, Huawei engineers must obtain
the formal written authorization from the customer, and must perform operations in
compliance with local laws and regulations.
If data required for fault locating needs to be transmitted out of the carrier's network,
engineers must obtain official approval from the customer, anonymize the user information
in accordance with national or local legal requirements, and delete recorded files after the
fault locating is complete.
The UPS2000 system logs, email sending function may involve system or personal
information.
Log
To facilitate fault location, the UPS2000 system may record the following information in
logs: detailed data exchange and processing procedures and related system and personal
user information, including the user account, IP address, email address, software version,
device information, and location.
The system anonymizes personal data or displays part of the involved personal data, such
as displaying the email address [email protected] as us*****[email protected].
Email
The UPS2000 can send alarm notification emails. When an alarm is generated or cleared,
the system sends an alarm email to the user. This function may involve system and
personal information, including the email address and email password.
On the WebUI, only part of the email address is displayed. For example,
[email protected] is displayed as su****[email protected]. The email password is
displayed as ciphertext *****.
The system provides the personal data encryption protection. The email address and
password are encrypted using a secure encryption algorithm with a cipher key.
The email sending function is disabled by default. Users need to configure the email
server address and enable this function.
When using the preceding functions, you are obligated to take considerable measures, in
compliance with the laws of the countries concerned and the user privacy policies of your
company, to ensure that the personal data of users is fully protected. For example, you need to
anonymize user personal information and delete source files in time.
Step 2 Set the language, user name, password, and verify code. The default user name is admin, and
the preset password is Changeme. Table 4-1 describes UPS users.
There is no verification code on the login page by default. After three login failures, a verification
code is required.
If you enter incorrect passwords for five consecutive times, your account is locked for 1 hour.
Step 3 Click Login. The Monitoring page is displayed, as shown in Figure 4-9.
----End
The Param. Settings is active only the SNMP card is equipped with a temperature and humidity sensor.
Select the device, set the start time, end time, and click Query. The page then displays the
performance data in the specified time period for the selected UPS. The time interval is
configured in Config > Performance Data. The fault value is 30s, as shown in Figure 4-15.
Select an alarm severity (critical, major, minor, or warning), select the device, set the start
time and end time, and click Query. The page displays historical alarms in the specified time
period for the selected UPS, as shown in Figure 4-17.
System IP Settings
Under System IP Settings, change the SNMP card IP address and click Submit, as shown in
Figure 4-18. Log in to the WebUI with the new IP address.
If the UPS monitor does not support the DHCP function, after the DHCP is selected for the
SNMP card, the IP address of the SNMP card will be reallocated and the DHCP will be set to
deselected state. You cannot view the IP address of the SNMP card on the UPS monitor. You
are advised to update the version of the UPS monitor.
On the WebUI, the MAC address of the SNMP card is displayed. You can select DHCP and
click Submit to apply for a dynamic IP address to the DHCP server. After that, log in to the
WebUI using the newly applied IP address. If you select When the IP address is
automatically assigned, send an email., the SNMP card will send an email to you to notify
the IP address change.
You are advised to select When the IP address is automatically assigned, send an email.
If DHCP fails to be allocated, the IP address of the SNMP card will restore to the default IP address
192.168.0.10 and the DHCP will be deselected.
If DHCP is selected and the IP address expires during SNMP card power-off, the IP address will be
reallocated after the SNMP card starts.
If DHCP is selected and DHCP fails to be allocated after the SNMP card restarts, the IP address of
the SNMP card will restore to the default IP address 192.168.0.10.
The NAT uses a few public IP addresses to represent a large number of private IP addresses so
that the SNMP card in the internal network can be accessed through the external network.
This function is disabled by default. If this function is enabled, you can access the SNMP card
in the internal network through the external network by using a router with the NAT function.
For UPS2000 V200R001C31SPC100 and earlier versions, if Yes is selected for Receive periodical
email notifications under Alarm Notification Settings before version upgrade and you need
scheduled email notification, you need to select it again after version upgrade.
You can delete the sender's email configurations.
shown in Figure 4-18. Information such as the user name and email notification address can
be configured on the User Mgmt. page.
If you enable alarm notification by email, when there is an alarm, the system will send emails
to the receiver at 8:00, 12:00, 16:00, and 20:00. If the SNMP card is powered on within one
hour after 8:00, 12:00, 16:00, or 20:00, the system will check whether the alarm notification
has been sent at the previous hour after power-on. If the notification has not been sent, the
system will send it. If the notification has been sent, the system will not send again. If the
SNMP card is powered on more than one hour after 8:00, 12:00, 16:00, or 20:00, the alarm
notification will not be sent, and it will be sent at the next specified hour.
The alarm content includes the alarm device, alarm severity, alarm ID, alarm cause ID, alarm name,
generation time, and clearance time.
Alarm sending example: If the SNMP card is powered on between 8:00 and 8:59, the SNMP card
will check whether the alarm notification has been sent at 8:00. If it has been sent, the SNMP card
will not send again. If it has not been sent, the SNMP card will send it. If the SNMP card is powered
on between 9:00 and 11:59, the alarm notification will not be sent. It will be sent at 12:00.
RMS-RELAY02B Configurations
RMS-RELAY02B configurations are used to associate the DI/DO status of the external dry
contact card and UPS status. You can disable the functions of the external dry contact card by
disabling RMS-RELAY02B input. The SNMP card changes the DO output status by setting
the DO type and associated event. The SNMP card controls UPS startup/shutdown based on
the configured DI type and DI input status.
For DO1 to DO4:
The NO and COM pins of DO are closed, and the NC and COM pins of DO are open,
when the associated event is consistent with the UPS status; otherwise, the NC and COM
pins of DO are closed, and the NO and COM pins of DO are open.
For DI1 and DI2:
If Type is set to NO, the UPS executes the configured associated event when DI has a
12–24 V DC input; otherwise, the UPS does not execute the associated event. If Type is
set to NC, the UPS does not execute the configured associated event when DI has a
12–24 V DC input; otherwise, the UPS executes the associated event.
The UPS performs the shutdown command if Type is set to NO, DI1 is set to Startup, DI2 is set to
Shutdown, and there is a 12–24 V DC input. If the UPS is faulty, it does not perform the startup
command when DI is set to Startup. Rectify the UPS fault first.
Using DI1 and DO1 as examples, Table 4-4 and Table 4-5 list the association between DI/DO
status and UPS status.
Click Add. The Add User dialog box appears, as shown in Figure 4-22. In the Add User
dialog box, enter a user name, select a group (admin by default), set a password, select a
receiver's email language (multiple languages are available; this language is used in the
received emails), enter an email address (receives alarm notifications, and choose whether to
send a test mail for verifying configurations). Click Submit to add the user.
The user name cannot exceed 20 characters and can contain only uppercase and lowercase letters, digits,
and underscores. The password contains 6 to 20 characters and at least two types of uppercase letters,
lowercase letters, digits, and underscores.
Click Modify. The Modify User dialog box appears, as shown in Figure 4-23. You can
change the password, email language, email address. The initial password is required when
you make changes. Click Submit to submit the changes.
4.6.5 SNMP
On the SNMP tab, you can configure the SNMP version, SNMP port, SNMPv1&SNMPv2c
read and write communities, SNMPv3 user and NMS address and permission setting, as
shown in Figure 4-30.
The SNMP page configures the SNMP version, SNMP port, SNMPv1&SNMPv2c read and
write communities, and SNMPv3 user, as shown in Figure 4-31 and Figure 4-32.
If you manage the UPS by using the NMS, pay attention to this topic.
SNMP version has three options: SNMPv1&SNMPv2c, SNMPv3, and ALL. Different
versions support different NMS access mechanisms.
The default value is SNMPv3. The configured user name, authentication protocol
(MD5/SHA password), and proprietary protocol (DES/AES password) are used by the
NMS to access the SNMP card and add SNMPv3 users, as shown in Figure 4-31.
For the SNMPv1&SNMPv2c option, enter the read and write communities. If this option
is selected, the NMS needs to connect to the SNMP card through the read and write
communities set here. When setting the read and write communities for the first time,
you can directly enter them, as shown in Figure 4-32. If the read and write communities
have been set before and need to be modified, select Modify SNMP community first
and modify the read and write communities, as shown in Figure 4-33.
If you select ALL, the NMS can connect to the SNMP card by using either of the
preceding methods. Set NMS Address and Permission Setting for any of the three
options.
You are advised to use the secure protocol SNMPv3. When SNMPv3 is changed to
ALL/SNMPv1&SNMPv2c, the system prompts "SNMP V1/V2 is insecure protocol". When
SNMPv1&SNMPv2c is used, the correct read/write community name must be configured for the
NMS to connect to the SNMP card.
The standard encryption algorithms MD5 and DES have security risks. You are advised to use the
secure encryption algorithms SHA and AES.
Before you add a SNMPv3 user, set SNMP version to SNMPv3 or ALL.
When you choose SNMPv1&SNMPv2c to manage the UPS, the read community and write
community must be the same as those for the SNMP card. The read community must be different
from the write community.
Figure 4-32 Page for setting read and write communities for SNMPv1&SNMPv2c
Figure 4-33 Page for setting read and write communities for SNMPv1&SNMPv2c (not first time
setting)
Click Download UPS-RFC1628-MIB on the page to download the MIB file which allows a
third-party NMS complying with the RFC1628 standard, such as UNMS of Generex, to
manage the UPS remotely.
Click Download HUAWEI-UPS-MIB to download the MIB file which allows a third-party
NMS complying with Huawei standard to manage the UPS remotely.
If a third-party NMS complying with the RFC1628 standard, such as UNMS of Generex, is adopted,
download the UPS-RFC1628-MIB file. For details about how a third-party NMS manages the UPS,
see 7 Managing the UPS by Using the NMS Complying with RFC1628 Standard.
If a third-party NMS complying with Huawei standard is adopted, download the
HUAWEI_UPS_MIB file. For details about the function of a third-party NMS managing UPS, see 6
Managing the UPS by Using the NMS Complying with Huawei Standard.
Under NMS Address and Permission Settings, you can add NMS information for accessing
the SNMP card. The information includes NMS Addr., Permission, and Trap port, as shown
in Figure 4-34 and Figure 4-35.
4.6.6 RCCMD
The UPS2000 SNMP card integrates the functions of the Generex RCCMD server:
When the UPS generates an alarm, the SNMP card sends a shutdown command or
notification message to the RCCMD client.
The SNMP card configures and saves the address and port for receiving the shutdown
command, and the message sending mechanism.
ESN Configuration
For a single UPS, the ESN of the UPS is displayed on the Config > RCCMD > ESN
Configuration page by default, as shown in Figure 4-36.
RCCMD
RCCMD shutdown is Disabled by default, as shown in Figure 4-37. If required, set it to
Enabled upon first login. After you submit successfully, the page refreshes. The controls such
as SSL Encrypted Transmission and Client Configuration will be displayed on the page, as
shown in Figure 4-38.
The SSL encrypted transmission set on the UPS2000 SNMP card page must be the same as
the setting on the RCCMD client.
The SSL Encrypted Transmission is Enabled by default, as shown in Figure 4-39. If it is set
to Disabled, the RCCMD certificate controls will not be displayed on the page, as shown in
Figure 4-40. If the SSL Encrypted Transmission is set to Disabled, a message indicating
there is a risk will be displayed.
Event Configuration
The SNMP card supports 17 alarm events, and a maximum of 50 jobs can be added for each
event, as shown in Figure 4-41.
Figure 4-41 shows the buttons on the Event Configuration page, and Table 4-6 describes
these buttons.
Number of jobs = Number of RCCMD Shutdown jobs + Number of RCCMD Message jobs + Number
of RCCMD Execute jobs + Number of RCCMD TRAP jobs.
Figure 4-42 shows the buttons after one event is expanded and Table 4-7 describes these
buttons.
Adding one job for one event: Select one event (for example, Inverter on), click the button
for adding one job, and the page for adding a job for the event is displayed.
When adding a job, the job types to be selected are: RCCMD Shutdown, RCCMD Message,
RCCMD Execute, and RCCMD TRAP. RCCMD Shutdown is selected by default. For
different job types, you need to enter different contents.
RCCMD Shutdown: You need to specify the RCCMD client IP address and port. When
the RCCMD client receives the job, it will shut down the terminal which is installed with
the RCCMD software.
RCCMD Message: Specify the RCCMD client IP address, port, and message to be
conveyed. The RCCMD client will receive the message. For example, enter "This is a
test message".
RCCMD Execute: Specify the RCCMD client IP address, port, and command to be
executed. For example, enter SHUTDOWN, and the RCCMD client will shut down the
terminal which is installed with the RCCMD software after receiving the message.
RCCMD TRAP: When the event happens, the SNMP card will send the TRAP message
to all connected RCCMD clients based on the sending mechanism.
If you want to define the TRAP message by yourself, you can use the TRAP signal to
display the UPS information. For example, if you enter #INVOLT, the RCCMD client
will receive the UPS input voltage value (for example, single-phase 220; three-phase A:
220, B: 220, C: 220). Table 4-8 lists the signal names that can be entered.
When you add a job, five sending methods are available. The latter three methods can take
effect only when event condition is still true after the specified seconds.
Immediately, once: After the event happens, the job will be sent to the RCCMD client
immediately.
Scheduled in X seconds: After the event happens, the job will be sent to the RCCMD
client once in X seconds. No matter whether the event disappears or not within X
seconds, the job will be sent.
After X seconds, repeat all Y Specify the interval: After the event happens, the job will
be sent once in X seconds, and then be sent once every Y seconds.
After X seconds on Battery: After the battery mode is activated for X seconds, the job
will be sent to the RCCMD client once.
At X seconds remaining time: When the battery backup time has only X seconds left,
the job will be sent to the RCCMD client once.
After the certificate is replaced, the RCCMD client certificate needs to replaced too.
Otherwise, communication will fail. For details about the replacing method, see the
RCCMD user manual.
The default certificate provided by the system has expired. Replace the certificate
immediately.
If the used RCCMD certificate key has been encrypted, enable it and enter the key password.
Taking the Export UPS operation record option as an example, when you click the Export
button, a file download dialog box appears. You can open or save the file.
For details about the upgrade, see chapter 11 Upgrading the SNMP Card.
The standard protocols SNMPv1 and SNMPv2 have security risks. You are advised to use the secure
protocol SNMPv3.
The UPS-RFC1628-MIB has more alarms than RFC1628. Download the UPS-RFC1628-MIB before
using.
Figure 9-1 Setting the SNMP card IP address on the RCCMD client and SSL encrypted
transmission mode
Step 2 On the SNMP card WebUI, choose Config > RCCMD, and set RCCMD shutdown to
Enabled. For details, see 4.6.6 RCCMD.
Step 3 On the SNMP card WebUI, the SSL encryption is Enabled by default and does not need to be
set. If the RCCMD client is set to the unencrypted mode, you need to set the SSL encryption
to Disabled on the SNMP card WebUI.
Step 4 Configure events. If you set the job type to RCCMD Message under Inverter on, specify the
IP address and port of the RCCMD client. The port is 6003 by default. If you need to modify
the port, modify the port on the RCCMD client at the same time to keep them the same. Enter
the message to be sent and set the message sending mechanism. For example, set it to
Immediately, once.
Step 5 On the Monitoring > Control page, start the UPS, and the inverter mode will be triggered.
Send the message indicating that the inverter is on.
Step 6 On the RCCMD client, you can check the log in the upper left corner of the RCCMD client
page.
----End
Whether the RCCMD SSL encrypted transmission is enabled on the WebUI of UPS2000
SNMP card and RCCMD client is irrelevant to the heartbeat detection function. Only when
the SSL encryption is enabled on the RCCMD client, the logs recorded by the RCCMD client
are marked with "(SSL...)".
On the RCCMD client, the IP address of the SNMP card that detects heartbeat needs to be
added. Then the UPS alive check function is supported and the RCCMD can check whether
the UPS and RCCMD communicate properly. The RCCMD client can also receive messages
sent by the SNMP card.
Procedure
Step 1 On the RCCMD client, add the IP address of the SNMP card that detects heartbeat, as shown
in Figure 9-1.
Step 2 The UPS2000 SNMP card supports both ways of detecting heartbeats. If the job configured
for the SNMP card event is set to RCCMD TRAP, the RCCMD client needs to be set to by
the use of CS121/UPSMAN Traps. If by polling CS121/UPSMAN every x seconds… is
selected as the method of detecting heartbeats, set the detection method. The default interval
is 1800s and detection is performed 100 times, as shown in Figure 9-2.
You can also manually detect heartbeat by clicking Run alive check now..., as shown in
Figure 9-3.
----End
10 Troubleshooting
The Upgrade page allows you to upgrade the SNMP card software. This chapter briefly
introduces the procedure for upgrading the SNMP card.
Procedure
Step 1 On the Upgrade page, click Browse and select a software upgrade package.
For versions earlier than UPS2000 V200R001C31SPC100, the upgrade package needs to be
decompressed. Select the file whose file name extension is .bin after decompression. For UPS2000
V200R001C31SPC100 and later versions, the upgrade package does not need to be decompressed.
Select the compressed package whose file name extension is .tar.gz.
Step 2 Click Send. The "File loading may take several minutes. Continue?" message is displayed, as
shown in Figure 11-2.
Step 3 Click OK to upload the file. The "Upload succeeded" message is displayed, as shown in
Figure 11-3.
Step 4 Click OK. On the Activate Upgrade Package page, select the upgrade package under
Available Package Version (when a package is selected, it turns blue). Then click Activate
to start the upgrade, as shown in Figure 11-4.
When Upgrade progress reaches 100% and Upgrade Result is Inactive, the upgrade is
complete, as shown in Figure 11-5. Then the software restarts.
When Upgrade progress is 100% for SNMP card software, log in again if the "Connection with the
UPS failed. Check network connectivity and log in again." message is displayed.
If the upgrade fails and the UPS and the SNMP card do not power off, click Activate
again to restart the upgrade, as shown in Figure 11-6.
If a power failure occurs during the upgrade, power on the UPS and SNMP card again. After
you log in to the WebUI again, click Go to Step 3 to perform the upgrade again, as shown in
Figure 11-7 (you can skip Step 1, Step 2, and Step 3).
----End
When the SNMP card is accessed over SSH, you need to use client software such as PuTTY.
Security information involved in Secure Shell (SSH) login is the command line user
name and password.
System accounts are as follows:
− Administrator root: Direct login is not supported. Log in as enspire and run su to
switch to the root account. The user name cannot be modified. The preset password
is Changeme, which can be modified.
− Common user enspire: The user name cannot be modified. The preset password is
Changeme, which can be modified.
− Common user prorunacc: The user account is used to run service programs. Login
with a password is not supported. Log in as root and run su to switch to the
prorunacc account.
Change the password immediately upon first SSH login.
Use the password with certain complexity.
Avoid using the preset password or low-complexity passwords that are prone to attacks
and cracking by unauthorized users, which will affect the device security. To ensure
system security, confirm that the password length and complexity meet requirements
when maintenance engineers are changing passwords. The password setting
requirements are as follows:
− Change the preset password immediately after the system goes online.
− Do not use a weak password such as password, admin, and 123456.
− The password must contain at least eight characters.
− At least two types of the following are required in the password: digits, uppercase
letters, lowercase letters, or special characters (`~!@#$%^&*-_=+;:'",.? or space).
− The password must be different from the previous five passwords.
− The password must be different from the user name or its reverse.
− Periodically change the password of the user account.
A password that has been used for a long time is more likely to be stolen or cracked,
and the risk increases along with the time of use. Change the password at least once
half a year.
The new password must meet complexity requirements. When changing a password, you can press
Ctrl+C to stop this operation.
Step 4 Run the su command to switch to the root user and enter the root user password, as shown in
Figure 12-2.
Step 5 Run the passwd root command to change the root user password. Enter a new password and
re-enter it as instructed and press Enter. Figure 12-3 shows the operation screen.
Record and keep the password properly. If you forgot the password, you cannot access the
SNMP card through SSH.
----End
A
AES Advanced Encryption Standard
D
DES Data Encryption Standard
DHCP Dynamic Host Configuration Protocol
H
HTTPS Hypertext Transfer Protocol Secure
N
NAT Network Address Translation
NMS Network Management System
R
RJ11 Registered Jack 11
RJ45 Registered Jack 45
RS485 Recommended Standard 485
S
SHA secure hash algorithm
U
UPS uninterruptible power system