Serial Mode
Serial mode allows you to connect to network devices using a USB-to-serial console cable. This is essential for initial device setup, password recovery, and out-of-band management when SSH is not available.
Prerequisites
- A USB-to-serial console cable (RJ45-to-USB or DB9-to-USB)
- The USB cable connected to the probe's USB port
- Physical access to the network device's console port
- The correct baud rate for the target device
Supported Console Cable Types
| Cable Type | Connector | Common Use |
|---|---|---|
| RJ45-to-USB | RJ45 console port | Cisco, Juniper, Aruba |
| DB9-to-USB | DB9 serial port | Older switches, industrial devices |
| USB-C/USB-A to RJ45 | RJ45 console port | Modern console cables |
| USB-C to USB-C | USB-C console port | Some newer devices |
Recommended Chipsets
For reliable serial communication, use cables with these chipsets:
- FTDI FT232R — most compatible, recommended
- Prolific PL2303 — widely available
- Silicon Labs CP210x — good compatibility
Avoid counterfeit FTDI cables, as they may not work reliably.
Setting Up a Serial Connection
Step 1: Connect the Cable
- Connect the USB end of the console cable to the probe's USB port
- Connect the RJ45/DB9 end to the network device's console port
- Verify the cable is detected by the probe
Step 2: Add the Device
- Navigate to CMod > Devices
- Click Add Device
- Select Serial as the connection type
- Configure the serial parameters:
| Field | Description | Default |
|---|---|---|
| Name | Friendly device name | — |
| Serial Port | Detected USB serial device | /dev/ttyUSB0 |
| Baud Rate | Communication speed | 9600 |
| Data Bits | Number of data bits | 8 |
| Parity | Parity checking | None |
| Stop Bits | Number of stop bits | 1 |
| Flow Control | Hardware/software flow control | None |
| Device Type | Vendor/OS (for template matching) | — |
- Click Save & Test
Step 3: Open Terminal
- Click the device in the CMod device list
- Click Terminal
- An interactive serial terminal opens in your browser
- Press Enter to wake the device console
Baud Rate Reference
Common baud rates by vendor:
| Vendor / Device | Default Baud Rate |
|---|---|
| Cisco IOS / IOS-XE | 9600 |
| Cisco NX-OS | 9600 |
| Juniper Junos | 9600 |
| HP/Aruba ProCurve | 9600 |
| MikroTik RouterOS | 115200 |
| Fortinet FortiOS | 9600 |
| Palo Alto PAN-OS | 9600 |
| Ubiquiti EdgeOS | 115200 |
| Linux (generic) | 115200 |
If you see garbled text in the terminal, the baud rate is likely incorrect. Try the common rates: 9600, 19200, 38400, 57600, 115200.
Serial Communication Settings
Standard 8N1 Configuration
Most network devices use the "8N1" standard:
- 8 data bits
- N (no) parity
- 1 stop bit
This is the default in CMod and should work with the vast majority of devices.
Flow Control
| Type | When to Use |
|---|---|
| None | Default; works for most devices |
| Hardware (RTS/CTS) | Required by some industrial and older devices |
| Software (XON/XOFF) | Rarely used; some legacy terminal servers |
Serial Port Detection
When a USB serial cable is connected, CMod automatically detects it:
- Navigate to CMod > Devices > Add Device > Serial
- The Serial Port dropdown lists all detected USB serial devices
- If multiple cables are connected, each appears as a separate port (e.g.,
/dev/ttyUSB0,/dev/ttyUSB1)
If no ports are detected:
- Verify the cable is fully inserted
- Try a different USB port on the probe
- Check the probe's system log for USB device detection errors
Use Cases
Initial Device Setup
When configuring a new-out-of-box switch or router that has no IP address configured:
- Connect via serial console
- Complete the initial configuration (assign management IP, enable SSH)
- Switch to SSH mode for ongoing management
Password Recovery
When locked out of a device:
- Connect via serial console
- Follow the vendor's password recovery procedure
- Reset the password and regain access
Out-of-Band Management
When a device's management interface is unreachable:
- Connect via serial console
- Diagnose the issue (interface down, routing problem, etc.)
- Apply corrective configuration
Firmware Upgrades
Some devices require console access during firmware upgrades:
- Connect via serial console
- Monitor the upgrade process in real-time
- Intervene if the upgrade encounters errors
Troubleshooting
No output in terminal
- Press Enter several times to wake the console
- Verify the baud rate matches the device's configuration
- Try reversing the console cable (some cables are wired differently)
- Ensure the cable's USB driver is loaded (check probe system logs)
Garbled text
- The baud rate is incorrect; try 9600 first, then 115200
- Check data bits, parity, and stop bits settings
- Try a different console cable
"Permission denied" on serial port
- The CMod service requires access to
/dev/ttyUSB*devices - This is configured automatically during NetRecon OS setup
- If using a custom installation, add the CMod service user to the
dialoutgroup
Intermittent disconnections
- The USB cable may be loose; ensure a firm connection
- Some long USB cables cause signal degradation; use a cable under 3 meters
- USB hubs can cause issues; connect directly to the probe's USB port
FAQ
Q: Can I use serial mode remotely via Admin Connect? A: Yes. The serial terminal is accessible through the web dashboard, which is reachable via Cloudflare Tunnel. You get the same interactive terminal experience remotely.
Q: How many serial connections can the probe handle simultaneously? A: One serial connection per USB port. Most probe hardware supports 2-4 USB ports. Use a powered USB hub for additional connections, though direct connections are more reliable.
Q: Can I automate serial console commands? A: Yes. Command templates work with serial connections just as they do with SSH. You can create templates for repetitive serial tasks like password recovery or initial setup.
For additional help, contact support@netreconapp.com.