Raritan Computer DKSXII-V2.3.0-0D-E manual

Copyright © 2010 Raritan, Inc. DKSXII-v2.3.0- 0D - E December 2010 255 - 62 - 4030 - 00 Dominion KSX II User Guide Release 2.3.0[...]

This document contains p roprietary information that is protected by copyright. A ll rights reserved. No part of this document may be photo copied, reproduced, or t ranslated into another lan guage without express prior written con sent of Raritan, Inc. © Copyright 2010 Raritan, Inc. All third-party software and hardware mentione d in this documen[...]

iii Contents Chapter 1 Introduction 1 KSX II Overview ............................................................................................................................. 2 What's New in Help ........................................................................................................................ 4 KSX II Help .........[...]

Contents iv Connection Information ..................................................................................................... 60 Keyboard Options .............................................................................................................. 60 Video Properties ..............................................................[...]

Contents v Adding a New User Grou p ............................................................................................... 114 Modifying an Existing User Grou p ................................................................................... 119 Users ......................................................................................[...]

Contents vi Encryption & Share .......................................................................................................... 193 Enabling FIPS 140-2 ....................................................................................................... 196 Configuring IP Access Cont rol .............................................[...]

Contents vii CLI Prompts ............................................................................................................................... 234 CLI Commands .......................................................................................................................... 234 Security Issues .....................................[...]

Contents viii Resetting the KSX II Using the Reset Button ............................................................................ 254 Chapter 14 Modem Configuration 256 Certified Modems for UNIX , Linux and MPC ................................ ............................................. 256 Low Bandwidth KVM Settings ........................[...]

Contents ix Setting the Registry to Permit Write Operations to the Schema ............................................... 295 Creating a New Attribute ............................................................................................................ 295 Adding Attributes to the Class ................................ ......................[...]

Contents x Appendix D FAQs 314 General Questions ..................................................................................................................... 315 Serial Access ............................................................................................................................. 317 Universal Virtual Media ...........[...]

1 In This Chapter KSX II Overview ........................................................................................ 2 What's New in Help ................................................................................... 4 KSX II Help ................................................................................................ 5 KSX [...]

Chapter 1 : Introduction 2 KSX II Overview Raritan's Dominion KSX II is an ente rp rise-class, secure digital de vice that provides a single integ rated solution for remote KVM (keyboard, video, mouse) server access a nd serial device manageme nt, as well as power control from anywh ere in the world from a we b browser. At the rack, the KSX II[...]

Chapter 1 : Introduction 3 Diagram key Cat5 cable Remote virtual media USB drive(s) Computer Interface Module (CIM) Rack PDU (power strip) KSX II Local access Remote KVM and serial devices IP LAN/WAN Modem access PSTN Remote (network) access[...]

Chapter 1 : Introduction 4 What's New in Help The following information has be en added based on enhance ments and changes to the equipment and/or user documentation .  You are able to configure HTTP and/or HTTPS ports used by the KSX II. See HTTP and HTTPS Port Settings (on page 141 ).  Information on the new KS X II support for smart c[...]

Chapter 1 : Introduction 5 KSX II Help The KSX II help provides infor mation on how to install, set up, and configure the KSX II. It also includes information on accessing t arget servers and power strips, u sing virtual media, managi ng users and security, and maintaining a nd diagnosing the KSX II. A PDF version of the help can be do wn loaded fr[...]

Chapter 1 : Introduction 6 Virtual Media All KSX II models suppo rt virtual media. The benefits of vi rtual media - mounting of remote drives/media o n the target server to support software installation and diagnosti cs - are now available in all of the K SX II models. Virtual media sessions ca n be secured by usi ng 128-bit and 2 56 -bit AES or RC[...]

Chapter 1 : Introduction 7 KSX II 144 and 188 CIM Serial Adapter Product Features Hardware  KVM and serial remote acc ess over IP  1U rack-mountable; bracket s included  DKSX2-144 - 4 serial/4 KVM server ports  DKSX2-188 - 8 serial/8 KVM server ports  1 KVM channel shareable by 8 users, multiple serial u sers.  UTP (Cat5/5e/6) ser[...]

Chapter 1 : Introduction 8 Software  Virtual media with D2CIM-VUSB and D 2C IM-DVUSB CIMs  Absolute Mouse Synchroni zation with D2CIM-VUSB CIM and D2CIM-DVUSB CIMs  Plug-and-Play  W eb -based access and m anagement  Intuitive Graphical User Int er face (GUI)  256 -bit encryption of com plete KVM signal, inclu ding video and virtua[...]

Chapter 1 : Introduction 9 Item Description USB port Remote indicator light LAN1 and LAN2 indicato r lights Power indicator light[...]

Chapter 1 : Introduction 10 Item Description AC power cord plug See Power Control (on page 158 ) for additional information. Power on/off switch LAN 3 port Note: The LAN 3 port is rese rved for future use. LAN1 and LAN2 ports See Step 3: Connect the Equipment (on page 25 ) for additional information. Admin port See Step 3: Connect the Equipment (on[...]

Chapter 1 : Introduction 11 Terminology This manual uses the following t erminology for the components of a typical KSX II configuratio n:[...]

Chapter 1 : Introduction 12 Diagram key TCP/IP IPv4 and/or IPv6 KV M (Keyboard, Video, Mouse) UTP Cable (Cat5/5e/6) KSX II Local Access Console Local User - an optional user co nsole (consisting of a keyboard, mouse, and mult i-sync VGA monitor) attached directly to the KSX II to control KVM target servers a nd serial targets locally (directly at t[...]

Chapter 1 : Introduction 13 Diagram key serial port connected remotely via KSX II. Routers Dominion PX Rack PDU (Power Strip) Raritan rack PDUs accessed rem otely via the KSX II. Package Contents Each KSX II ships as a f ully-configured stand-alone product in a standard 1U 19" rackmoun t chassis. Each KSX I I device ships with the following co[...]

14 In This Chapter Overview .................................................................................................. 14 Default Login Information ........................................................................ 14 Getting Started ........................................................................................ 15 Overview T[...]

Chapter 2 : Installation and Configuration 15 Getting Started Step 1: Configure KVM T arget Servers KVM target servers are t he computers that will be a ccessed and controlled via the KSX II. Before installing the KSX I I , configure all KVM target servers to ensure opt imum performance. This configuration applies only to KVM target server s, not t[...]

Chapter 2 : Installation and Configuration 16 Operating System Mouse and Video Settings This section provides v ideo mode and mouse inf ormation specific to the operating system in use o n the target server. Windows XP, Windows 2003 and Windows 2008 Settings To configure KVM target servers running Windows XP ® , Windows 2003 ® and Windo w s 2008 [...]

Chapter 2 : Installation and Configuration 17 Windows Vista Settings To configure KVM target servers running Windows Vista ® operating system: 1. Configure the mouse settin gs : a. Choose Start > Settings > Control Panel > Mouse. b. Select "Advanced system settings" from the left navigation panel. The System Properties di alog o[...]

Chapter 2 : Installation and Configuration 18  Set the mouse motion speed sett ing to exactly the middle speed.  Disable the "Enhanced poi nter precision" option.  Click OK. 2. Disable animation and fade effects: a. Select Control Panel > Syst em and Security. b. Select System and then select "Advanced system set tings&qu[...]

Chapter 2 : Installation and Configuration 19  Deselect the "Use the follo wing transition effect for menu s and tooltips" option. 3. Click OK and close the Control P anel. Linux Settings (Red Hat 4) Note: The following setting s are optimized for Standard Mou se mode only. To configure KVM target servers running Linux ® (graphical us[...]

Chapter 2 : Installation and Configuration 20 SUSE Linux 10.1 Settings Note: Do not attempt to synchronize the m ouse at the SUSE Linux ® login prompt. You must be con nected to the target server t o synchronize the mouse cursors. To configure the mouse s ettings: 1. Choose Desktop > Control Center. The Desktop P references dialog appears. 2. C[...]

Chapter 2 : Installation and Configuration 21 Tip: If you do not want to b e prompted upon log out, follow the se procedures instead. To make your settings pe rmanent in Linux (no pro mpt): 1. Choose Desktop > Control Ce nter > System > Sessio ns. 2. Click the Session Options tab. 3. Deselect the "Prompt on th e log off" checkbox[...]

Chapter 2 : Installation and Configuration 22 Display resolution Vertical refresh rate Aspect ratio 1280 x 1024 60,75,85 Hz 5:4 1152 x 864 75 Hz 4:3 1024 x 768 60,70,75,85 Hz 4:3 800 x 600 56,60,72,75,85 Hz 4:3 720 x 400 85 Hz 9:5 640 x 480 60,72,75,85 Hz 4:3 3. KVM target servers runni ng the Solaris operating syst em must output VGA video (H-and-[...]

Chapter 2 : Installation and Configuration 23 4. Set the Threshold slider to 1.0. 5. Click OK. Accessing the Command Line 1. Right click. 2. Ch oose Tools > Te rminal. A terminal window ope ns. (It is best to be at the root to issue commands. ) Video Settings (POST) Sun systems have two differe nt resolution settings: a POST resolution and a GUI[...]

Chapter 2 : Installation and Configuration 24 IBM AIX 5.3 Settings Follow these steps to configure KVM target servers running IBM ® AIX ™ 5.3. To configure the mouse: 1. Go to Launcher. 2. Choose Style Manager. 3. Click Mouse. The Style Manage r - Mouse dialog appears. 4. Use the sliders to set the M ouse acceleration to 1.0 and Thr eshold to 1.[...]

Chapter 2 : Installation and Configuration 25 To take advantage of the KSX I I: The firewall must allo w inbound communicatio n on: Web-access capabilities Port 443 - standard TCP p ort for HTTPS communication Automatic redirection of HTTP requests to HTTPS (so the more common “http://xxx.xxx.xxx.x xx” can be used instead of “https://xxx.xxx.[...]

Chapter 2 : Installation and Configuration 26 B. Network Port The KSX II provides two E thernet ports for failover p urposes (not for load-balancing). By default, only LAN1 is active and the autom atic failover is disabled. When enabled, if the KSX II internal network interface or the network swi tch to which it is connected becom es unavailable, L[...]

Chapter 2 : Installation and Configuration 27 Connection Description Mouse Attach either a standard PS /2 mouse to the Mini-DIN6 (female) mou se port or a standard USB mouse to one of the USB Type A (female) port s. You can use the Local Adm in port to connect the KSX II directly to a workstation to manage yo ur serial targets and config ur e the s[...]

Chapter 2 : Installation and Configuration 28 E. Rack PDU (Power Strip) To connect the Dominion PX to the KSX II: 1. Plug one end of a Cat5 cable into the Serial port on the front of the Dominion PX. 2. Connect the other end of the Cat5 cable to either the Power Ctrl. 1 or Power Ctrl. 2 ports on the back of the KSX I I. 3. Attach an AC power cord t[...]

Chapter 2 : Installation and Configuration 29 Diagram key KSX II PX serial port KSX II Power Ctrl. 1 Port or Power Ctrl. 2 Port Cat5 cable PX F. Serial Target Ports To connect a serial target to the KSX II, use a Cat5 cable with a n appropriate serial adapter. The following table lists the neces sary KSX II hardware (adapters and/or cables) for con[...]

Chapter 2 : Installation and Configuration 30 Vendor Device Console connector Serial connection Graphics Sun ™ SPARCStation DB25F ASCSDB25M adapter and a CAT 5 cable Sun Netra T1 RJ - 45 CRLVR-15 cable; or CRLVR- 1 adapter and a CAT5 cable Sun Cobalt DB9M ASCSDB9F adapter and a CAT 5 cable Various Windows NT ® Go to the Support page on Ra ritan&[...]

Chapter 2 : Installation and Configuration 31 5. Click Apply. 6. You will receive confirmation that the password was successfully changed. Click OK. The Po rt Access page is displayed. Note: The default passwor d can also be changed fr om the Raritan Multi-Platform Client (MPC). Fo r more information, r efer to Changing a Password. Assigning an IP [...]

Chapter 2 : Installation and Configuration 32 a. Select the IPv6 checkbox to activate the fields in the section. b. Enter a Global/Unique IP Addre ss. This is the IP address assigned to the KSX II. c. Enter the Prefix Length. This is t he number of bits used in the IPv6 address. d. Enter the Gateway IP Address. e. Link-Local IP Address. This addres[...]

Chapter 2 : Installation and Configuration 33 See LAN Interface Settin gs (on page 138 ) for information in configuring this section of the Network Set tings page. Note: In some environments, t he default LAN Interface Speed & Duplex setting Autodetect (autonegotiator ) does not properly set the network parameters, which result s in network iss[...]

Chapter 2 : Installation and Configuration 34 Character Description Character Description . Period | Pipe sign / Forward slash } Right brace < Less than sign ~ Tilde : Colon Configuring Direct Port Access via Telnet, IP Address or SSH The information in this topi c is specific to enabling direct port access for serial targets. Use the Ena ble Di[...]

Chapter 2 : Installation and Configuration 35 Configure the SSH TCP port as "7888". Once this is d one, connection to the target can be done by using “ssh – l <login> <KSX II device IP address> - p 7888 ”. 3. Click OK to save this information. Once you have created th e direct port access, it can be connected in a client[...]

Chapter 2 : Installation and Configuration 36 Note to CC-SG Users Note to CC-SG Users If you are using the KSX II in a CC-SG configuration, perfor m the installation steps, and whe n finished, consult the CommandCenter Secure Gateway User Guide , Administra tor Guide , or Deploy ment Guide to proceed (all foun d on Raritan's website, www.ra ri[...]

Chapter 2 : Installation and Configuration 37 Create User Groups and Users As part of the initial configuration, you must define user gr oups and users in order for users to access t he KSX II. The KSX II uses system-supplie d default user groups and allows you to create groups and specify t he appropriate permissions to suit your needs. User names[...]

38 In This Chapter Interfaces ................................................................................................ . 38 Proxy Server Configuration for use with KSX II, MPC, VKC and AKC ... 52 Virtual KVM Client (VKC) ......................................................................... 53 Active KVM Client (AKC) ....................[...]

Chapter 3 : Working with Target Servers 39 The following sections of the user g uide contain information about using specific interfaces to conn ect to the KSX II and manage targets:  KSX II Local Console Inte rface: KSX II Devices (see " KSX II Local Console: KSX II Devices " on page 39 )  KSX II Remote Console Interfac e (on page [...]

Chapter 3 : Working with Target Servers 40 KSX II Remote Console Interfac e The KSX II Remote Console is a br owser-based graphical user int erface that allows you to log in to KV M target servers and serial targ ets connected to the KSX II and t o remotely administer the KSX II. The KSX II Remote Console provid es a digital connection t o your con[...]

Chapter 3 : Working with Target Servers 41 Depending on your brows er and security settings, you may see various security and certificate wa rnings. It is necessary to accept these warnings to launch the KSX II Remote Console. You can reduce the numbe r of warning messages du ring subsequent log ins by checking the following option s on the securit[...]

Chapter 3 : Working with Target Servers 42 Interface and Navigation KSX II Console Layout Both the KSX II Remote C onsole and the KSX II Local Console interfaces provide an HTML (web-ba sed) interface for configuratio n and administration, as well as target server list and selection. The options are organized into various tab s. After successful lo[...]

Chapter 3 : Working with Target Servers 43 Left Panel The left panel of the KSX II interface contains the follo wing information. Note that some information is co nditional and will only be displayed if you are a certain of user, are using certain features, and so on. This conditional information is n oted here. Information Description When display[...]

Chapter 3 : Working with Target Servers 44 Information Description When displayed? Connected Users The users, identified by their username and IP address, who are currently connected to the KSX II. Always Onl ine Help - User Guide Links to online help. Always Favorite Devices See Managing Favorites (on page 48 ). Always FIPS Mode FIPS Mode: Enabled[...]

Chapter 3 : Working with Target Servers 45 Port Access Page After successfully logging o n to the KSX II Remote Consol e, the Port Access page appears. This page lists all of the KSX II ports, the connected KVM target se rvers, and their statu s and availability. The Port Access page provides a ccess to the KVM target se rvers connected to the KSX [...]

Chapter 3 : Working with Target Servers 46  Availability - The Availabili ty can be Idle, Connected, Busy, or Unavailable. Blade servers will have an availability of either shared or exclusive when a connectio n to that blade is in place. 3. Click View by Port, View by Group or View by Search to switch between views. 4. Click the Port Name of th[...]

Chapter 3 : Working with Target Servers 47  Power On - Powers on the target server through the associated outlet. This option is visible only whe n there are one or mo re power associations to the target.  Power Off - Powers off t he target server through the associated outlets. This option is visib le only when there are one or more power as[...]

Chapter 3 : Working with Target Servers 48 Managing Favorites A Favorites feature is provided s o you can organize and qui ck ly access the devices you use frequently . The Favorite Devices section is located in the lower left side (side bar) of the Port Access page and p rovides the ability to:  Create and manage a list of favorite devices  [...]

Chapter 3 : Working with Target Servers 49 Note: Both IPv4 and IPv6 a ddresses are supported. Manage Favorites Page To open the Manage Favorites pa ge:  Click the Manage button in the left panel. The Manage Fav or ites page appears and contain s the following: Use: To: Favorites List Manage your list of favorite devices. Discover Devices - Local[...]

Chapter 3 : Working with Target Servers 50 c. Click Save. 3. Click Refresh. The list of dev ices on the local subnet is refreshed. To add devices to y our Favorites List: 1. Select the checkbox next to the device name/IP addr ess. 2. Click Add. Tip: Use the Select All and Desele ct All buttons to quickly select all (or deselect all) devices in the [...]

Chapter 3 : Working with Target Servers 51 Adding, Deleting and Editing Favorites To add a device to y our favorites list: 1. Choose Manage > Add New Device t o Favorites. The A dd New Favorite page appears. 2. Type a meaningful description. 3. Type the IP Address/Host Name for the device. 4. Change the discovery Port (if necessary). 5. Select t[...]

Chapter 3 : Working with Target Servers 52 Proxy Server Configuration for use with KSX II, MPC, VKC and AKC When the use of a Proxy Server i s re quired, a SOCKS proxy must also be provided and configured on the remote client PC. Note: If the installed prox y server is only capable of the HTTP pr oxy protocol, you will not be abl e to connect. To c[...]

Chapter 3 : Working with Target Servers 53 start javaw -Xmn128M -Xm x512M -XX:MaxHeapFree Ra tio=70 -XX:MinHeapFreeRatio=50 -Dsun.java2d.noddraw=tr ue -DsocksProxyHost=192.1 68.99.99 -DsocksProxyPort=1080 -classpath .sdeploy.jar;.sFoxt rot.jar;.jaws.jar;.sMpc.jar com.raritan.rrc.ui.RRCAppl ication %1 Virtual KVM Client (VKC) Please note this cl[...]

Chapter 3 : Working with Target Servers 54 Toolbar Note: The KX II-101 VK C interface is different from the other Dominion KX products. See VKC Too lbar for the KX II- 101. Button Button Name Description Connection Properties Opens the Modify Connect ion Properties dialog from which you can man ually adjust bandwidth options (such as connection spe[...]

Chapter 3 : Working with Target Servers 55 Button Button Name Description Full Screen Mode Maximizes the screen real estate to view the target server desktop. Scaling Increases or reduces the target vi deo size so you can view the entire contents of the target server window without using the scr oll bar. Switching Bet ween KVM Target Servers With t[...]

Chapter 3 : Working with Target Servers 56 To power off a target serv er: 1. From the KSX II Remote Console, click the Port Ac cess tab to open it. The Port Access page open s. 2. Click the port name of the appropri ate target server. The P ort Action menu appears. 3. Choose Power Off. A confirmation message appear s. Disconnecting KVM Target Serv [...]

Chapter 3 : Working with Target Servers 57 After you have connected to a target server, you can change the USB profile as necessary. B y default, the profiles that appe ar under the USB Profile menu in the VKC are those that you are most likely t o use . These profiles have been presele cted by the administrator for use with the connected target se[...]

Chapter 3 : Working with Target Servers 58 Connection Properties The dynamic video compre ssion algorithms maintain K VM console usability under varying ban dwidth constraints. The de vices optimize KVM output not only for LAN use, but also for WAN use. Th ese devices can also control color depth an d limit video output, offering an optimal balance[...]

Chapter 3 : Working with Target Servers 59  100 Mb Ethernet  10 Mb Ethernet  1.5 Mb (MAX DSL/T1)  1 Mb (Fast DSL/T1)  512 Kb (Medium DSL/T1)  384 Kb (Slow DSL/T1)  256 Kb (Cable)  128 Kb (Dual ISDN)  56 kb (ISP Modem)  33 kb (Fast Modem)  24 kb (Slow Modem) Note that these settings a re an optimization for specif ic[...]

Chapter 3 : Working with Target Servers 60 Connection Information To obtain information about y our Virtual KVM Client connection:  Choose Connection > Con nection Info. The Connecti on Info window opens. The following information is display ed about the current conne ction:  Device Name - The name of t he device.  IP Address - The IP a[...]

Chapter 3 : Working with Target Servers 61 Building a Keyboard Macro To build a macro: 1. Click Keyboard > Keyboard Macros. The Keyboard Mac ros dialog appears. 2. Click Add. The Add Keyboard Ma cro dialog appears. 3. Type a name for the macro in the Keyboard Macro Name f ield. This name will appear in the Keyboar d menu after it is crea ted. 4.[...]

Chapter 3 : Working with Target Servers 62 10. Click Close to close the Ke yboard Macros dialog. The macro will now appear on the Keyboard menu in the a pplication. Select the new macro on the menu to run it or us e the keystrokes you assigned t o the macro. Running a Keyboard Macro Once you have created a keyboard macro, execute i t using the keyb[...]

Chapter 3 : Working with Target Servers 63 5. Click OK. To remove a macro: 1. Choose Keyboard > Keyboard Ma cros. The Keyboard Macros dialog appears. 2. Choose the macro from among tho se listed. 3. Click Remove. The macro is deleted. Hot-key combinations that coincide with blade chassis switching key sequences will not be sent to blades housed [...]

Chapter 3 : Working with Target Servers 64 Auto-Sense Video Settings The Auto-sense Video S ettings command forces a r e-sensing of the video settings (resolution, refresh rate) and redra ws the video screen. Note: VKC for the KX II -101 uses an icon set that differ s from the icon set used in VKC for othe r Dominion KX products. See VKC Toolbar fo[...]

Chapter 3 : Working with Target Servers 65 The device can filter out the elect rical interference of video output from graphics cards. Thi s feature optimizes picture q uality and reduces bandwidth. Higher sett ings transmit variant pixels only if a large color variation exi sts in comparison to the neig hboring pixels. However, setting th e thresh[...]

Chapter 3 : Working with Target Servers 66  Best possible video mode The device will perform the full Auto Sense process w hen switching targets or target r esolutions. Selecting this o ption calibrates the video for the best ima ge quality.  Quick sense video mode With this option, the device will us e a quick video Auto Sense in order to sh[...]

Chapter 3 : Working with Target Servers 67 Note: Some Sun backgro und screens, such as scr eens with very dark borders, may not center precisel y on certain Sun servers. Use a diff erent background or place a light er colored icon in the upper left corner of the screen. Note: VKC for the KX II -101 uses an icon set that differ s from the icon set u[...]

Chapter 3 : Working with Target Servers 68 Using Screenshot from Target You are able to take a scre enshot of a target server using the Screenshot from Target server c ommand. You can th en save this screenshot to a file location of your choosing as a bit map, JPEG or PNG file. Note: The Screenshot from Target function is not available for the KX I[...]

Chapter 3 : Working with Target Servers 69 Changing the Maximum Refresh Rate If the video card you are u sing on the target uses cust om software and you are accessing the targ et through MPC or VKC, you may need to change the maximum refre sh rate of the monitor in order f or the refresh rate to take effect on the target . To adjust the monitor re[...]

Chapter 3 : Working with Target Servers 70 Mouse Pointer Synchronization When remotely v iewing a target server that uses a m ouse, you will see two mouse cursors: one b elonging to your remote client workstation and the other belonging to the targ et server. When the mouse p ointer lies within the Virtual KVM Clie nt target server window, mouse m [...]

Chapter 3 : Working with Target Servers 71 Additional Notes for Intelligent Mouse Mode  Be sure that there are no ic ons or applications in the upper left section of the screen since that is where the synchron ization routine takes place.  Do not use an animated mous e.  Disable active desktop on KVM target servers. Synchronize Mouse In du[...]

Chapter 3 : Working with Target Servers 72 Intelligent Mouse Mode In Intelligent Mouse mode, the device can detect the target mouse settings and synchronize t he mouse cursors accordin gly, allowing mouse acceleration on the target. Intelligent mouse mode the default for non-VM targets. In this mode, the mouse c ursor does a “dance” in the top [...]

Chapter 3 : Working with Target Servers 73 Please note that mouse co nfigurations will vary on di fferent target operating systems. Cons ult your OS guidelines for furt her details. Also note that intelligent mouse synchr onization does not work with UNIX targets. Absolute Mouse Mode In this mode, absolute coo rdinates are used to k eep the client [...]

Chapter 3 : Working with Target Servers 74 2. Click the Single/Double Mouse Cursor button in the toolbar. To exit single mouse mo de: 1. Press Ctrl+Alt+O on your k eyboard to exit single mouse mode. VKC Virtual Media See the chapter on Virtual Media (on page 90 ) for complete info rmation abo ut setting up and using vi rtual media.[...]

Chapter 3 : Working with Target Servers 75 Smart Cards For a list of supported smart cards, smart card readers, and ad ditional system requirements, see Supported and Unsuppo rted Smart Card Readers (on page 282 ). When accessing a server remotely, you will have the opportunity to select an attached smart card reader and mount it onto the server. S[...]

Chapter 3 : Working with Target Servers 76 To update the smart card in the Select Smart Card Reader dialog:  Click Refresh List if a new sma rt card reader has been att ached to the client PC. To send smart card remo ve and reinsert notifications to th e target:  Select the smart card reader that is currently mounted and cli ck the Remove/Rei[...]

Chapter 3 : Working with Target Servers 77  US/International  French (France)  German (Germany)  Japanese  United Kingdom  Korean (Korea)  French (Belgium)  Norwegian (Norway)  Portuguese (Portugal)  Danish (Denmark)  Swedish (Sweden)  German (Switzerland)  Hungarian (Hungary)  Spanish (Spain)  Italian ([...]

Chapter 3 : Working with Target Servers 78 a. To configure the monitor on which the target viewer is l aunched:  Select 'Monitor Client Was Laun ched from' if you want the target viewer to be launched usin g the same display as the appli ca tion that is being used on the client (for example, a web browser o r applet). 8. Use Select Fro[...]

Chapter 3 : Working with Target Servers 79 Note: The Keyboard Indica tor should be used on Linu x systems using Gnome as a desktop envir onment. View Options Vi ew Toolbar You can use the Virtual KVM client with or without the toolbar display. To toggle the display of the toolbar (on and off):  Choose View > View Toolb ar. Scaling Scaling you[...]

Chapter 3 : Working with Target Servers 80 Help Options About Raritan Virtual KVM Client This menu command provi des version informatio n about the Virtual KVM Client, in case you require assistance from Raritan T ec hnical Support. To obtain version information: 1. Choose Help > About Rarit an Virtual KVM Client. 2. Use the Copy to Clipboard bu[...]

Chapter 3 : Working with Target Servers 81 AKC Supported .NET Frame w ork, Operating Systems and Browsers .NET Framework AKC requires Windows .N ET ® version 3.5, and will work with both 3.5 and 4.0 installed. Operating Systems AKC is compatible with the followin g platforms running . NET Framework 3.5:  Windows XP ® operating system  Windo[...]

Chapter 3 : Working with Target Servers 82 Prerequisites for Using AKC In order to use AKC:  Ensure the cookies from the I P address of the device t hat is being accessed are not currently being bl ocked.  Windows Vista, Windows 7 and Windows 2008 server users should ensure that the IP address of the device being acce ssed is included in thei[...]

Chapter 3 : Working with Target Servers 83 1. To open MPC from a client running any supported browser, ty pe http://IP-ADDRESS/mpc in to the address line, where IP-ADDRESS is the IP address of your Raritan device. MPC will open in a new window. Note: The Alt+Tab comm and will toggle between windows onl y on the local system. When MPC opens, the Rar[...]

Chapter 3 : Working with Target Servers 84 Opening RSC from the Remote Console To open the Raritan Serial Console (RSC) from the Remo te Console: 1. Select the Port Access tab. 2. Click the name of the seri al port you want to access for the RSC. Note: A security pop-up screen ap pears only if you used https to connect to the RSC. 3. If you're[...]

Chapter 3 : Working with Target Servers 85 2. Enter the device's IP addr ess, account information, an d the desired target (port). 3. Click Start. RSC opens with a connection to the port. Note: If you experience unrecognized characters or bl ur ry pages in the RSC window due to localization su pport, try changing the font to Courier New. Click[...]

86 In This Chapter Overview .................................................................................................. 86 Turning Outlets On/Off and Cycling Power ............................................. 87 Overview The KSX II allows you to co ntrol Raritan PX and RPC series rack PDU (power strip) outlets. On ce a PX or RPC series i s [...]

Chapter 4 : Rack PDU (Power Strip) Outlet Control 87 Initially, when you open the Powerstrip page, the po wer strips that are currently connected to the K SX II are displayed in the Powerstrip drop-down. Additionally, informatio n relating to the currently selected power strip is displayed. If no power strips are connected to the KSX II, a message [...]

Chapter 4 : Rack PDU (Power Strip) Outlet Control 88 5. Click OK to close the Power On confirmation dialog. T he outlet wi ll be turned on and its state will be displayed as 'on'. To turn an outlet off: 1. Click Off. 2. Click OK on the Power Off dialog. 3. Click OK on the Power Off confirmation dialog. The o utlet will be turned off and i[...]

Chapter 4 : Rack PDU (Power Strip) Outlet Control 89 2. Click OK. The outlet will then cycl e (note that this may take a few seconds). 3. Once the cycling is complete the dialog will open. Click OK to close the dialog.[...]

90 In This Chapter Overview .................................................................................................. 91 Prerequisites for Using Virt ual Media ...................................................... 94 Using Virtual Media via VKC and A KC in a Windows Environm ent ........ 95 Using Virtual Media ............................[...]

Chapter 5 : Virtual Media 91 Overview Virtual media extends KVM capabilities by enabling KVM target servers to remotely access media from a client PC and network file servers. With this feature, media mount ed on a client PC and net work file servers is essentially "mounted virtual ly" by the target server. The target server can then read[...]

Chapter 5 : Virtual Media 92[...]

Chapter 5 : Virtual Media 93 Diagram key Desktop PC CD/DVD drive KSX II USB mass storage device CIM PC hard drive Target server Remote file server (ISO images)[...]

Chapter 5 : Virtual Media 94 Prerequisites for Using Virtual Media With the virtual media feat ure, you can mount up to two d rives (of different types) that are suppo rted by the USB profile currently applied to the target. These drives are accessible for the duratio n of the KVM session. For example, you can mount a specific CD-ROM, use it, and t[...]

Chapter 5 : Virtual Media 95 Using Virtual Media via VKC and AKC in a Windows Environment Windows XP ® operating system admi nistrator and standard user privileges vary from those of the Windows Vista ® operating system and the Windows 7 ® operating system. When enabled in Vista or Windows 7, User Access Control ( UAC) will provide the lowest le[...]

Chapter 5 : Virtual Media 96 Using Virtual Media With the KSX II virtual med ia feature, you can m ount up to two drives ( of di fferent types). These d rives are accessible fo r the duration of the KVM session. For example, you can mount a specific CD-ROM, use it, and then disconnect it when you are done. The CD- ROM virtua l media “channel” w[...]

Chapter 5 : Virtual Media 97 Target Server  KVM target servers must s upport USB connected driv es .  KVM target servers runnin g the Windows 2000 ® operating system must have all of the recent patches installed. 1. USB 2.0 ports are both fast er and preferred.. 2. If you plan to access file se rver ISO images, identif y those file servers a[...]

Chapter 5 : Virtual Media 98 File Server Setup (File Server ISO Images Only) Note: This feature is only r equired when using virtu al media to access file server ISO images. ISO9660 f ormat is the standard suppo rted by Raritan. However, other C D-ROM extensions may also work. Note: SMB/CIFS support is requi red on the file server. Use the Remote C[...]

Chapter 5 : Virtual Media 99 Note: You cannot acces s a remote ISO image via virtual media using an IPv6 address due to techni ca l limitations of third-party software u sed by the by the KX, KSX or K X101 G2 device. Note: If you are connectin g to a Windows 2003 ® server and attempt to load an ISO image from the server, you may receive an er ror [...]

Chapter 5 : Virtual Media 100 Connecting to Virtual Media Local Drives This option mounts an entir e drive, which means the entire disk drive is mounted virtually onto the targ et server. Use this option f or hard drives and external drives only. It does not include network dr ives, CD-ROM, or DVD-ROM drives. This is the only option for which R ead[...]

Chapter 5 : Virtual Media 101 WARNING: Enabling Read /Write access can be dangero us! Simultaneous access to the sam e drive from m ore than one entity can result in data corruption. If you do not require Write access, leave this option unselecte d. 4. Click Connect. The media will be mo unted on the target se rver virtually. You can access th e me[...]

Chapter 5 : Virtual Media 102 2. For internal and external C D-ROM or DVD-ROM drives: a. Choose the Local CD/ DVD Drive option. b. Choose the drive from the Local CD/DVD Drive drop-down list. All available internal and e xternal CD and DVD drive name s will be populated in the drop-down li st. c. Click Connect. 3. For ISO images: a. Choose the ISO [...]

Chapter 5 : Virtual Media 103 Disconnecting Virtual Media To disconnect the virtual media drives:  For local drives, choose Vi rtual Media > Disconnect D rive.  For CD-ROM, DVD-ROM, and ISO images, choose Virtual Media > Disconnect CD-ROM/ISO Im age. Note: In addition to discon necting the virtual media u sing the Disconnect command, si[...]

104 In This Chapter Overview ................................................................................................ 104 CIM Compatibility .................................................................................. 105 Available USB Profiles ........................................................................... 105 Selecting Pr[...]

Chapter 6 : USB Profiles 105 CIM Compatibility In order to make use of USB profiles, you must use a D2 CIM-VUSB or D2CIM-DVUSB with updated f irmware. A VM-CIM that has not had its firmware upgraded will sup port a broad range of confi gurations (Keyboard, Mouse, CD-ROM , and Removable Drive) but will not be able to make use of profile s optimized [...]

Chapter 6 : USB Profiles 106 USB profile Description Restrictions:  USB bus speed limited to full-speed (12 MBit/s)  No virtual media support BIOS DellPowerEdge Keyboard Only Dell PowerEdge BIOS A ccess (Keyboard Only) Use this profile to have key board functionality for the Dell Powe rEdge BIOS when using D2CIM-VUSB . When using the new D2CI[...]

Chapter 6 : USB Profiles 107 USB profile Description BIOS Generic BIOS Generic Use this profile when Gen eric OS profile does not work on th e BIOS. WARNING: USB enumeration will trigger whenever virtual media is connected or disconnected. Restrictions:  USB bus speed limited to full-speed (12 MBit/s)  Absolute mouse synchronizat ion™ not s[...]

Chapter 6 : USB Profiles 108 USB profile Description Module D2CIM-DVUSB is connected t o the Advanced Management Module. Restrictions:  Virtual CD-ROM and disk drive s cannot be used simultaneously BIOS Lenovo ThinkPad T6 1 & X61 BIOS Lenovo ThinkPad T6 1 and X61 (boot from virtual media) Use this profile to boot the T61 and X61 series lapto[...]

Chapter 6 : USB Profiles 109 USB profile Description Installation) Use this profile for t he HP Proliant DL360/DL380 G4 series server when installing Windows 2003 S erver without the help of HP SmartSt art CD. Restrictions:  USB bus speed limited to full-speed (12 MBit/s) Linux ® Generic Linux profile This is the generic Linux profile; use it f[...]

Chapter 6 : USB Profiles 110 USB profile Description Restrictions:  Virtual CD-ROM and disk drive s cannot be used simultaneously Suse 9.2 SuSE Linux 9.2 Use this for SuSE Linux 9. 2 distribution. Restrictions:  Absolute mouse synchronizat ion™ not supported  USB bus speed limited to full-speed (12 MBit/s) Troubleshooting 1 Troubleshooti[...]

Chapter 6 : USB Profiles 111 USB profile Description  Virtual CD-ROM and disk drive s cannot be used simultaneously WARNING: USB enumeration will trigger whenever virtual media is connected or disconnected. Use Full Speed for Virtual Me dia CIM Use Full Speed for virtual media CIM This profile resemble s the behavior of the original KX2 release [...]

Chapter 6 : USB Profiles 112 Mouse Modes when Using the Mac OS-X USB Profile w ith a DCIM-VUSB If you are using a DCIM-VUSB, using a Mac OS-X ® USB profile, and running Mac OS-X 10.4.9 ( or later), when you reboot you must be in Single Mouse mode to use the mou se at the Boot menu. To configure the mouse to w ork at the Boot menu : 1. Reboot the M[...]

113 In This Chapter User Groups .......................................................................................... 113 Users ..................................................................................................... 120 Authentication Settings .......................................................................... 123 Changing[...]

Chapter 7 : User Management 114 User Group List User groups are used with local and remote authentication (via RADIUS or LDAP/LDAPS). I t is a good idea to define user g roups before creating individual users since, whe n you add a user, you must ass ign that user to an existing user group. The User Group List page dis plays a list of all user g ro[...]

Chapter 7 : User Management 115 The Group page is organized into t he following cate gories: Group, Permissions, Port Permissions, an d IP ACL. 2. Type a descriptive name fo r the new user group into the Group Name field (up to 64 character s). 3. Set the permissions for the group. Select the checkbo xes before the permissions you want to as sign t[...]

Chapter 7 : User Management 116 3. Select the appropriate permis sions. 4. Click OK. Note: See Alternate RADIUS A uthentication Settings for information on additional settings if you ar e using Alternate RADIUS A uthentication. Permissions Important: Selecting the Us er Management checkbox al low s the members of the group to change the permissions[...]

Chapter 7 : User Management 117 Permission Description Management authentication (LDAP/LDA PS/RADIUS), login settings Port Permissions For each server port, you can specify the access type t he group has, as well as the type of port a ccess to the virtual media an d the power control. Please note that the default setting for all permission s is Den[...]

Chapter 7 : User Management 118 Group-Based IP ACL (Access Control List) Important: Exercise cau tion when using group-based I P access control. It is possible to be l ocked out of your KSX II if your IP address is within a range that has been denied access. This feature limits access t o the KSX II device by users in the selected group to specific[...]

Chapter 7 : User Management 119 4. Click Insert. If the rule num ber you just typed equals an existing rule number, the new rule is pl aced ahead of the exit ing rule and all rules are moved down in the list. To replace a rule: 1. Specify the rule number yo u want to replace. 2. Type the Starting IP and E nding IP fields. 3. Choose the Action from [...]

Chapter 7 : User Management 120 4. Set the IP ACL (optional). This feature limits acce ss to the KSX II device by specifying IP add resses. See Group -Base d IP ACL (Access Control List) . 5. Click OK. To delete a user group: Important: If y ou delete a group with users in it, the users are automatically assigned to the <unkno w n> user group[...]

Chapter 7 : User Management 121 Adding a New User It is a good idea to define u ser groups before creating K SX II users because, when you add a user, y ou must assign that user to an existing user group. Refer to Adding a New User Group (on page 114) fo r more information. From the User page, you can add new users, modify user information, and rea[...]

Chapter 7 : User Management 122 Modifying an Existing U ser To modify an existing us er: 1. Open the User List page by choosing User Management > User List. 2. Locate the user from among t hose listed on the User List page. 3. Click the user name. The U ser page opens. 4. On the User page, change t he appropriate fields. See Adding a New User fo[...]

Chapter 7 : User Management 123 Authentication Settings Authentication is the proce ss of verifying that a user i s who he says he is. Once a user is authenticated, t he user's group is used t o determine his system and port permi ssions. The user's assigned privileges determine what type of ac cess is allowed. This is call ed authorizati[...]

Chapter 7 : User Management 124 Implementing LDAP/LDAPS Remote Authentication Lightweight Directory Access Pr otocol (LDAP/LDAPS) is a networking protocol for querying and modifying directory services r unning over TCP/IP. A client starts an LDAP session by connecti ng to an LDAP/LDAPS server (thro ugh the default TCP port is 389). The client then [...]

Chapter 7 : User Management 125 9. In the User Search DN field, enter the Distinguished Nam e of where in the LDAP database you want to begin searching for u ser information. Up to 64 char acters can be used. An example base search value might be: cn=Users,dc=raritan,dc=com . Consul t your authentication server administrator for the appropriate val[...]

Chapter 7 : User Management 126 13. Select the Enable Secure LDAP checkbox if you would like to us e SSL. This will enable the E nable LDAPS Server C ertificate Validation checkbox. Secure Socket s Layer (SSL) is a cryptogr aphic protocol that allows KSX II to communi cate securely with the LDAP/LDAP S server. 14. The default Port is 389. Either u [...]

Chapter 7 : User Management 127 18. The KSX II provides you with the ability to test the LDAP configuration from the Auth entication Settings page due to the complexity sometimes encounte red with successfully configuring the LDAP server and KSX II fo r remote authentication. To test the LDAP configuration, enter the logi n name and password in the[...]

Chapter 7 : User Management 128 4. From the KSX II , enable and configure your A D server properly. See Implementing LDAP/LDAP S Remote Authentication. Important Notes:  Group Name is case sensit ive.  The KSX II provides the foll owing default groups that cannot be changed or deleted: Admin and < Unknown>. Verify that your Active Direc[...]

Chapter 7 : User Management 129 8. The Timeout is recorded in secon ds and default timeo ut is 1 second, but can be changed as required. The timeout is the length of time the KSX II waits for a response from the RADIUS server before sendi ng another authentication re quest. 9. The default number of retries is 3 Retries. This is the number of time s[...]

Chapter 7 : User Management 130  CHAP - With CHAP, authentication ca n be requested by the server at any time. CHAP p rovides more security than PAP.[...]

Chapter 7 : User Managem ent 131 Returning User Group Informa tion via RADIUS When a RADIUS authentication at tempt succeeds, the KSX II determines the permissions for a given user based on the permissions of the user's group. Your remote RADIUS server can provide these user group names by returning an attribute, implemente d as a RADIUS FILTE[...]

Chapter 7 : User Management 132 Attribute Data Lo g out Accounting-Request(4) Acct-Status (40) Stop(2) - Stops the accounting NAS-Port-Type (61) VIRTUAL (5) for network c onnections. NAS-Port (5) Always 0. NAS- IP -Address (4) The IP address for the KS X II. User-Name (1) The user name entered a t the login screen. Acct-Session-ID (44) Session ID f[...]

Chapter 7 : User Management 133 User Authentication Proc ess Remote authentication follows t he process specified in the flowchart below:[...]

Chapter 7 : User Management 134 Changing a Password To change your pass w ord: 1. Choose User Management > Chang e Password. The Change Password page opens. 2. Type your current password in the Old Password field. 3. Type a new password in the New Password field. Rety pe the new password in the Confirm New Pa ssword field. Passwords can be up to[...]

135 In This Chapter Network Settings ................................................................................... 135 Device Services ..................................................................................... 140 Configuring Modem Setti ngs ................................................................ . 147 Configuring Date/Tim[...]

Chapter 8 : Device Management 136 Network Basic Settings These procedures describe how to assign an IP address o n the Networ k Settings page. For complet e information about all of the fields and the operation of this page, see Network Settings . To assign an IP address: 1. Choose Device Setting s > Network. The Networ k Settings page opens. 2.[...]

Chapter 8 : Device Management 137 d. Enter the Gateway IP A ddress. e. Link-Local IP Address. This addres s is automatically assigned t o the device. It is used for ne ighbor discovery or when no route rs are present. Read-Only f. Zone ID. This identifies the device with which the ad dress is associated. Read-Only g. Select the IP Auto Configurat i[...]

Chapter 8 : Device Management 138 See LAN Interface Settin gs (on page 138 ) for information in configuring this section of the Network Set tings page. Note: In some environments, t he default LAN Interface Speed & Duplex setting Autodetect (autonegotiator ) does not properly set the network parameters, which result s in network issues. In thes[...]

Chapter 8 : Device Management 139  Autodetect (default option)  10 Mbps/Half - Both LEDs blink  10 Mbps/Full - Both LEDs blink  100 Mbps/Half - Yellow LE D blinks  100 Mbps/Full - Yellow LED blin ks  1000 Mbps/Full (gigabit) - Green LED bl inks  Half-duplex provides for co mmunication in both directi ons , but only one directio[...]

Chapter 8 : Device Management 140 Device Services The Device Services page allows you to configure the followin g functions:  Enabling Telnet  Enabling SSH access  Configuring HTTP and HTT Ps port settings  Enabling Serial Console A ccess  Configuring the discovery port access  Enabling direct port access  Enabling the AKC Down[...]

Chapter 8 : Device Management 141 HTTP and HTTPS Port Setting s You are able to configure HTTP and/or HTTPS ports used by the KSX I I . For example, if you are using t he default HTTP port 80 f or another purpose, changing the port will ensure the KSX II does not attempt to use it. To change the HTTP and/or HTTPS port settings: 1. Choose Device Set[...]

Chapter 8 : Device Management 142 Enabling Direct Port Acc ess via URL Direct port access allows u sers to bypass having to u se the device's Login dialog and Port Acces s page. This feature also provides the ability to enter a username and passwor d directly and proceed to the target if the username and passwor d is not contained in the URL. [...]

Chapter 8 : Device Management 143 3. Click OK. Configuring Direct Port Access v ia Telnet, IP Address or SSH The information in this topi c is specific to enabling dir ect port access for serial targets. Use the En able Direct Port Access via URL option on the Device Services page to en able direct port access for a KVM/serial port connect to the K[...]

Chapter 8 : Device Management 144 Configure the Telnet TCP Port as "7770". Once this is done, connection to the target can be done using "telnet <KSX II device IP address> 7770".  Direct Port Access via SSH Port: Configure the SSH TCP port as "7888". Once this is d one, connection to the target can be done by [...]

Chapter 8 : Device Management 145 Once you have created th e direct port access, it can be connected in a client application such as P uTTY. Following is an example of how the direct port access informat ion would appear in PuTT Y. Note that PuTT Y is not the only client applicat ion that can be used. It is used here for sample purposes only.[...]

Chapter 8 : Device Management 146 Enabling the AKC Do w nload Server Certificate V alidation If you are using the AKC cl ient, you can choose to use the Enable AKC Download Server Certificate Validation feature or opt not to use this feature. Option 1: Do Not Enable AKC Download Serv er Certificate Validation (default settin g) If you do not enable[...]

Chapter 8 : Device Management 147 3. Click OK. Configuring Modem Settings To configure modem sett ings: 1. Click Device Settings > Modem Set tings to open the Modem Settings page. 2. Check Enable Modem, if neede d. 3. Enter the PPP server IP address. The internet addre ss assigned to the KSX II when a connecti on is established via dial-up. Re q[...]

Chapter 8 : Device Management 148 Configuring Date/Time Settings Use the Date/Time Settings page to specify the date and t ime for the KSX II. There are two ways to do this:  Manually set the date and t ime.  Synchronize the date and time wit h a Network Time Protocol (N TP) server. To set the date and time : 1. Choose Device Setting s > D[...]

Chapter 8 : Device Management 149 6. Click OK. Event Management The KSX II Event Manage ment feature allows you enable and disable the distribution of system event s to SNMP Managers, the Syslog and the audit log. These events are categorized, and for each event you can determine whether you want the event sent to one or seve ra l destinations.[...]

Chapter 8 : Device Management 150 Configuring Event Management S ettings SNMP Configuration Simple Network Management Protocol (SNMP) is a proto col governing network management and the monitoring of network device s and their functions. KSX II offers SN MP Agent support through Event Management. To configure SNMP (enable SNMP logging): 1. Choose D[...]

Chapter 8 : Device Management 151 4. Type the Agent Community String (the device's string). An SNMP community is the group that devices and management stat ions running SNMP belong to. It helps define where inf ormation is sent. The community name is used to identify the group. The SNMP device or agent may belong to more than one SNMP communit[...]

Chapter 8 : Device Management 152 Configuring Event Management - Destinations System events, if enabled, can g enerate SNMP notific ation events (traps), or can be logged to syslog or a udit log. Use the Event Management - Destinations page to select which system ev ents to track and where to send this information. Note: SNMP traps will only be gen[...]

Chapter 8 : Device Management 153 SNMP Trap Configuration SNMP provides the ability to send traps, or notifications, to advise an administrator when one o r more conditions hav e been met. The followin g table lists the KSX II S NMP traps: Trap name Description cimConnected A CIM is plugged into to the KS X II port. cimDisconnected A CIM is either [...]

Chapter 8 : Device Managem ent 154 Trap name Description network. networkParameterChange d A change has been made to t he network parameters. passwordSettingsChanged Strong password settings h ave changed. portConnect A previously authenticated use r has begun a KVM session. portConnectionDenied A connection to the target port was denied. portDisco[...]

Chapter 8 : Device Management 155 Trap name Description userAuthenticationFailure A user attempted to log in without a correct username and/or p assword. userConnectionLost A user with an active sessi on has experienced an abnormal se ssion termination. userDeleted A user account has been d eleted. userLogin A user has successfully log ged into the[...]

Chapter 8 : Device Management 156  Port Name - The name assigned t o the port. A port name displayed in black indicate s that you cannot change th e name and that the port cannot be edited; port names displayed in blue can be edited. Note: Do not use apostrop hes for the Port (CIM) Nam e.  Port Type Port type Description DCIM Dominion CIM Not[...]

Chapter 8 : Device Management 157  For serial ports, the Port page for serial ports is opened.[...]

Chapter 8 : Device Management 158 Power Control Power control is configured on the Port page. The Port page op ens when you select a port that is co nnected to a target server from t he Port Configuration page. Fr om the Port page, you can make power associations and ch ange the port name to something more d escr iptive. A server can have up to fou[...]

Chapter 8 : Device Management 159 Assigning a Name to the PX The Port page opens whe n you select a port on the Port Configuration page. The port appears on this page when connected to a Raritan remote rack PDU (power strip ). The Type and the Name f ields are prepopulated. Use this page to name the ra ck PDU and its outlets; all name s can be up t[...]

Chapter 8 : Device Management 160 To remove a rack PDU association : 1. Select the appropriate rack PDU from the Power Strip Name drop-down list. 2. For that rack PDU, select t he appropriate outlet from the Outlet Name drop-down list. 3. From the Outlet Name drop-down li st, select None. 4. Click OK. The rack PDU/o utlet association is removed and[...]

Chapter 8 : Device Management 161 Configuring Blade Chass is In addition to standard servers and r ack PDUs (power strips), y ou can control blade chassis that a re plugged into a Dominion device port. Up to eight blade chassis can be managed at a given time. As with standard server s, blade chassis are autodete cted once they are connected. When a[...]

Chapter 8 : Device Management 162 The use of hot key sequen ces to switch KVM access to a blade chassis is also supported. For blade chas sis that allow users t o select a hot key sequence, those option s will be provided on the P ort Configuration page. For blade chassis that com e with predefined hot key s equences, those sequences will be prepop[...]

Chapter 8 : Device Management 163 3. On the Port Configuration p age, click on the name of t he blade chassis you want to configure. The Port page will open. 4. Select the Blade Chassis radio button. The page will then display the necessary fields to configur e a blade chassis. 5. Select Generic from the Bl ade Server Chassis Model drop-down. 6. Co[...]

Chapter 8 : Device Management 164 c. Username - Enter the use rname used to access the interfa ce . Optional d. Password - Enter the pass word used to access the int erface. Optional Note: Leave the usernam e and password fields blank for DRAC, ILO, and RSA web applications or the c onnection will fail. e. The Username Field and P assword Field, wh[...]

Chapter 8 : Device Management 165 To configure a Dell P owerEdge M1000e: 1. If you selected Dell Power Edge ™ M1000e, auto-discovery is available. Configure the bl ade chassis as applicable. P rior to configuring a blade chassis that can be auto-discovered, it must be configured to enable SSH connection s on the designated port number (see Device[...]

Chapter 8 : Device Management 166 The first URL link is intended f or use to connect to t he blade chassis Administration Module GU I. Note: Access to the URL li nks entered in this section of the page is governed by the blade cha ssis port permissions. a. Active - To activate the link once it is configured, select the Active checkbox. Leave t he c[...]

Chapter 8 : Device Management 167 b. Maximum Number of Slots - The default maximum number of slots available on the blade chas sis is automatically entered. c. Administrative Module Pri mary IP Address/Host Na me - Not applicable. d. Port Number - The default port number for the blade chassi s is 22. Not applicable. e. Username - Not applicabl e. f[...]

Chapter 8 : Device Management 168 e. The Username Field and P assword Field, which are both optional, contain the labels that are expected to be associated with the username and password e ntries. It is in these fields you should enter the field name s for the username and password fields used on the login scree n for the web application. You can v[...]

Chapter 8 : Device Management 169 d. Port Number - The default port number for the blade chassi s is 22. Change the port numb er if applicable. Required f or auto-discovery mode e. Username - Enter the use rname used to access the blade chassis. Required for aut o-discovery mode f. Password - Enter the pass word used to access the bl ade chassis. R[...]

Chapter 8 : Device Management 170 Note: Leave the usernam e and password fields blank for DRAC, ILO, and RSA web applications or the c onnection will fail. e. The Username Field and P assword Field, which are both optional, contain the labels that are expected to be associated with the username and password e ntries. It is in these fields you shoul[...]

Chapter 8 : Device Management 171 4. In the Blade Chassis Managed Li nks section of the page, you are able to configure the con nection to a blade chassis web browser interface if one is availabl e. Click the Blade Chassis M anaged Links icon to expand the section on the page. The first URL link is intended f or use to connect to t he blade chassis[...]

Chapter 8 : Device Management 172 Tips for Adding a Web Browser Interface You can add a Web Brows er Interface to create a co nnection to a device with an embedded web ser ver. A Web B rowser interface can also be used to connect to any web application, such as the web application associated with an RSA, DRAC o r ILO Processor card. You must have D[...]

Chapter 8 : Device Management 173 HP Blade Chassis Configuration (Port Group Management) The KSX II supports the aggregatio n of ports connected t o certain types of blades into a group repr esenting the blade cha ssis. Specifically, HP ® BladeServer blades and D ell ® PowerEdge ™ 1855/1955 blades whe n the Dell PowerEdge 1855/195 5 is connecte[...]

Chapter 8 : Device Management 174 3. Enter a Port Group Name. The port group name is not case sensitive and can contain up to 32 characte rs . 4. Select the Blade Server Grou p checkbox. If you want to designate th at these ports are attached to blades housed in a blade chassis (for ex ample, HP c3000 or Dell PowerEdge 1855), select the Blade Serve[...]

Chapter 8 : Device Management 175 To delete a port group: 1. Click on the Port Group M anagement page, select th e checkbox of the port group you want to delete. 2. Click the Delete button. 3. Click OK on the warning m essage. Supported Blade Chassis Models This table contains the bla de chassis models that are supported by the KSX II and the corre[...]

Chapter 8 : Device Man agement 176 Supported CIMs for Blade Chassis The following CIMs are supported f or blade chassis being ma naged through the KSX II:  DCIM- PS2  DCIM-USBG2  D2CIM-VUSB  D2CIM-DVUSB Following is a table contai ning supported CIMs for each blade chassis model that the KSX I I supports. Blade chassis Connection method[...]

Chapter 8 : Device Management 177 Blade chassis Connection method Recommended CIM(s) M1000e with this chassis. The iKVM is compatible wi th the following peripherals:  USB keyboards, USB pointing devic es  VGA monitors with DDC support. Source: Dell Chassis Man agement Controller, Firmware Version 1.0, User Guide HP ® BladeSystem c3000 The H[...]

Chapter 8 : Device Management 178 Blade chassis Connection method Recommended CIM(s) one Advanced Management Module. In contrast to the standard B ladeCenter chassis, the KVM module and the Management Module in the BladeCenter T chassis are separate comp onen ts. The front of the Management Module o nly features the LEDs for displaying status. A ll[...]

Chapter 8 : Device Management 179 Blade chassis Required/recommended action Slot, not by Name. iKVM may not work correctly if t his is not done.  Do not designate any slots for scan operations in the iK VM GUI Setup Scan menu. iKVM may not work correctly ot herwise.  Do not designate any slots for broad cast keyboard/mouse operations in the i[...]

Chapter 8 : Device Management 180 Blade chassis Required/recommended action management module.  The SSH port configured on t he blade chassis mana gement module and the port numb er entered on the P ort Configuration page must match. IBM KX2 Virtual Media  Raritan KSX II virtual media is suppo rted only on IBM BladeCenter ® Models H and E. T[...]

Chapter 8 : Device Management 181 Configuring USB Profiles (Port Page) You choose the available USB profile s for a port in the Select USB Profiles for Port section of the Port page. The USB prof iles chosen in the Port page become the prof iles available to the user in VKC when connecting to a KVM target server from the port. The default is t he W[...]

Chapter 8 : Device Management 182  Ctrl-Click to select several discontin uous profiles. 2. Click Add. The selected profiles ap pear in the Selecte d list. These are the profiles that can be used for the KVM target s erver connected to the port. To specify a preferred US B profile: 1. After selecting the availabl e profiles for a port, choose on[...]

Chapter 8 : Device Management 183 2. Click Remove. The select ed profiles appear in the Av ailable list. These profiles are no long er available for a KVM target server connected to this port. To apply a profile selection to multiple ports: 1. In the Apply Selected P rofiles to Other Ports sectio n, select the Apply checkbox for each K VM port you [...]

Chapter 8 : Device Management 184  German (Germany)  JIS (Japanese Industry Standard)  Simplified Chinese  Traditional Chinese  Dubeolsik Hangul (Korean)  German (Switzerland)  Portuguese (Portugal)  Norwegian (Norway)  Swedish (Sweden)  Danish (Denmark)  Belgian (Belgiu m) Note: Keyboard use for Chi nese, Japanese,[...]

Chapter 8 : Device Management 185 a. Select the Power Save Mo de checkbox. b. Set the amount of tim e (in minutes) in which Power S ave Mode will be initiated. 8. Choose the resolution for t he KSX II Local Console from the drop-down list. The browser will be r estarted when this change is made.  800x600  1024x768  1280x1024 9. Choose the [...]

Chapter 8 : Device Management 186 Port Keywords Port keywords work as a fil ter. If a keyword is detected, a corresponding message be logged in a lo cal port log and a correspo nding trap will be sent via SNMP (if configur ed). Defining keywords guarantees that only messages th at contain those keywords are logged for the local port. You can create[...]

Chapter 8 : Device Management 187 2. Define a keyword for the f irst time, by clicking the Add but ton on the Port Keyword List page. Th e Add Keyword page will then op en. Follow steps 3 - 5 to create new keywords. 3. Type a keyword in the Ke yword field and then click t he Add button. The keyword will be added to the page directly under t he Keyw[...]

Chapter 8 : Device Management 188 Port Group Management This function is specific to HP blade chassis configurat ion. See HP Blade Chassis Configur ation (Port Group M anagement) (on page 173 ).[...]

189 In This Chapter Security Settings .................................................................................... 1 89 Configuring IP Access Cont rol .............................................................. 198 SSL Certificates ..................................................................................... 200 Security Banner .[...]

Chapter 9 : Security Management 190 To reset back to defaults:  Click Reset to Defaults. Login Limitations Using login limitations, yo u can specify restrictions for single login, password aging, and the logging o ut idle users. Limitation Description Enable single login limitation When selected, only one lo gin per user name is allowed at any t[...]

Chapter 9 : Security Management 191 Limitation Description change is required. The de fault is 60 days. Log out idle users, After (1-365 minutes) Select the "Log off idle user s" checkbox to automatically disconnect us ers after the amount of time you specify in the "A fter (1-365 minutes)" field. If there is no activity fr om t[...]

Chapter 9 : Security Management 192 Field Description numeric character character is required in the password. Enforce at least one printable special character When checked, at least one special character (printable) is req uired in the password. Number of restricted passwords based on histo ry This field represents the pa ssword history depth. Tha[...]

Chapter 9 : Security Management 193 Option Description Timer Lockout Users are denied access to the system for the specified amount of time af ter exceeding the specified number of unsuccessful logi n attempts. When selected, the following f ields are enabled:  Attempts - The number of unsuccessful login attempts after which the user will b e lo[...]

Chapter 9 : Security Management 194 Encryption mode Description Auto This is the recommended option. The KSX I I autonegotiates to the highest level of encryption possible. You must select Auto in order f or the device and client to successfully negotiate the use of FIPS compliant algorithms. RC4 Secures user names, passwo rds and KVM data, includi[...]

Chapter 9 : Security Management 195 2. Apply Encryption Mode to KVM and Virtual Media. W hen selected, this option applies the sele cted encryption mode to both KVM and virtual media. After authentication, K VM and virtual media data is also transferred with 128-b it encryption. 3. For government and other high se curity environments, enable FIPS 1[...]

Chapter 9 : Security Management 196 Checking Your Browser for AES Encryption The KSX II supports AES-256. I f you do not know if your b rowser uses AES, check with the browser manufa cturer or navigate to the https://www.fortify.net/sslchec k.html website using t he browser with the encryption method you wa nt to check. This website d etects your b[...]

Chapter 9 : Security Management 197 For additional security, you can al so create a new Certificate Signi ng Request once FIPS mode is activ ated. This will be cr eated using the required key ciphers. Upl oad the certificate af ter it is signed or create a self-signed certificate. Th e SSL Certificate status will updated from 'Not FIPS Mode Co[...]

Chapter 9 : Security Managem ent 198 Configuring IP Access Contr ol Using IP access control, you can control access to your KSX II. By setting a global Access Co ntrol List (ACL) you are ensuring that your device does not respond to packet s being sent from disallowed IP addresses. The IP access co ntrol is global, aff ecting the KSX II as a whole,[...]

Chapter 9 : Security Management 199 4. Click Insert. If the rule # yo u just typed equals an existing rule #, the new rule is placed ahe ad of the exiting rule and all rules are moved down in the list. Tip: The rule numbers allow you to have more control ov er the order in which the rules are c reated. To replace a rule: 1. Specify the rule # you w[...]

Chapter 9 : Security Management 200 SSL Certificates The KSX II uses the Secure S ocket Layer (SSL) prot ocol for any encrypted network traffic between it se lf and a connected client. Wh en establishing a connection, the KSX II has to identif y itself to a client using a cryptographic certificate. It is possible to generate a Certificate Signing R[...]

Chapter 9 : Security Management 201 j. Key length - The length of the generated key in bits. 1024 is the default. k. Select the Create a Self-Si gned Certificate checkbox (if applicable). 3. Click Create to generate th e Certificate Signing Req uest (CSR). To download a CSR certificate : 1. The CSR and the file containing t he private key used whe [...]

Chapter 9 : Security Management 202 Security Banner KSX II provides you with the abilit y to add a security banne r to the KSX II login process. This feature requires users to either a ccept or decline a security agreement before they can access the KSX II. The information provided in a security banner will be displayed in a Restricted Service Agre[...]

Chapter 9 : Security Management 203 Note: You cannot upload a text file from the local p ort.[...]

204 In This Chapter Maintenance Features (Local/Remote Console) ................................... 204 Audit Log ................................................................................................ 205 Device Information ................................................................................. 206 Backup and Restore ...........[...]

Chapter 10 : Maintenance 205 Audit Log A log is created of the KS X II system events. To view the audit log for your KSX II: 1. Choose Maintenance > Audit Log. The Audit Log page opens. Th e Audit Log page displays ev ents by date and time (most recent events listed first). The Aud it Log provides the followi ng information:  Date - The date [...]

Chapter 10 : Maintenance 206 Device Information The Device Information pa ge provides detailed info rmation about your KSX II device and the CIM s in use. This information i s helpful should you need to contact Raritan Te chnical Support. To view information abo ut your Dominion KSX II and CIMs:  Choose Maintenance > Dev ice Information. The [...]

Chapter 10 : Maintenance 207 Backup and Restore From the Backup/Restore page, you can backup and resto re the settings and configuration for your KSX II. In addition to using backup and re store for business continuity pur poses, you can use this featu re as a time-saving mechanism. For ins tance, you can quickly provide access to your team from an[...]

Chapter 10 : Maintenance 2 08 If you are using Internet Expl orer 6 or higher, to backup y o ur KSX II: 1. Click Backup. A File Downl oad dialog appears that co ntains an Open button. Do not click Open. In IE 6 and higher, IE is used as the default application t o open files, so you are prompted to open t he file versus save the file. To avoid this[...]

Chapter 10 : Maintenance 209  Full Restore - A complete r estore of the entire system. Gene rally used for traditional backup and restore purposes.  Protected Restore - Everything is restored except device-specific information such as IP add ress, name, and so forth. With t his option, you can setup one KSX I I and copy the configuration to m[...]

Chapter 10 : Maintenance 210 USB Profile Management From the USB Profile Managem ent page, you can upload custo m profiles provided by Raritan t ech support. These profiles are designed to address the needs of your t arget server ‟s configuration, in the event that the set of standard prof iles does not already address them. Raritan tech support [...]

Chapter 10 : Maintenance 211 As noted, you may delete a custom profile from the system while it is still designated as an active prof ile. Doing so will terminate any vi rtual media sessions that were i n place. Handling Conflicts in P rofile Names A naming conflict between custom an d standard USB profiles may occur when a firmware upgrade is pe r[...]

Chapter 10 : Maintenance 212 3. Click the Upgrade button. You are prompted to confir m the upgrade. 4. Click OK to continue the upgrade. Progress bars are displayed during the upgrade. Upgrading tak es approximately 2 minutes o r less per CIM. Upgrading Firmware Use the Firmware Upgrade page t o upgrade the firm ware for your KSX II and all attache[...]

Chapter 10 : Maintenance 213 7. Click Upload from the Firmware U pgrade page. Information about the upgrade and version n umbers is displayed (if you opted to review CIM information, that inform ation is displayed as well) . Note: At this point, conne cted users are logged off and new login attempts are blocked. 8. Click Upgrade and wait for the up[...]

Chapter 10 : Maintenance 214 9. As prompted, close the bro wser and wait approximatel y 5 minutes before logging on to the K SX II again. Upgrade History The KSX II provides inform ation about upgrades performed on t he KSX II and attached CIMS. To view the upgrade history :  Choose Maintenance > Upgra de History. The Upgrade Histo ry page op[...]

Chapter 10 : Maintenance 215 Information is provided abo ut the KSX II upgrade(s) th at have been run, the final status of the upgrade, the start and end times, and the previous and current firmware versions. Inf ormation is also prov ided about the CIMS, which can be obtained by clicking the show link for an upg rade. The CIM information provid ed[...]

Chapter 10 : Maintenance 216 2. Click Reboot. You are prom pted to confirm the action . Click Yes to proceed with the reboot. CC Unmanage When a KSX II device is un der CommandCenter Se cure Gateway control and you attempt to access the device directly using the KSX II Remote Console, the following me ssage appears (after entry of a valid user name[...]

Chapter 10 : Maintenance 217 Stopping CC-SG Management While the KSX II is under CC-SG ma nagement, if you try to access the device directly, y ou are notified that it the device is under CC -SG management. If you are managing the KSX II through CC-SG and connectivity between CC -SG and the KSX I I is los t after the specified time out interval (ty[...]

Chapter 10 : Maintenance 218 3. Click Yes to remove the device C C-SG management. Once CC-S G management has ended, a confi rmation will be displayed.[...]

219 The Diagnostics pages a re used for troubleshooting a nd are intended primarily for the administra tor of the KSX II device. All of the Diagnostics pages (except Device Diag nostics) run standard net working commands and the information that is displayed is the output of thos e commands. The Diagnostics menu options h elp you debug and conf igu[...]

Chapter 11 : Diagnostics 220  Statistics - Produces a page similar to the one displayed here.  Interfaces - Produces a pa ge similar to the one displayed here.[...]

Chapter 11 : Diagnostics 221  Route - Produces a page simila r to the one displayed here. 3. Click Refresh. The relevant inf or mation is displayed in t he Result field. Ping Host Page Ping is a network tool used to test whether a particular host or IP address is reachable acro ss an IP network. Using t he Ping Host page, you can determine if a [...]

Chapter 11 : Diagnostics 222 3. Click Ping. The results of the ping are displayed in the Result field. Trace Route to Host Page Trace route is a network tool use d to determine the route taken to t he provided hostname or IP address. To trace the route to the host : 1. Choose Diagnostics > Trace R oute to Host. The Trace Route to Host page opens[...]

Chapter 11 : Diagnostics 223 Device Diagnostics Note: This page is for use by Raritan field engineers o r when you are directed by Raritan Techni cal Support. Device Diagnostics downlo ads the diagnostics inform ation from KSX II to the client machine. Two operat ions can be performe d on this page: Operation Description Diagnostics Scripts Execute[...]

Chapter 11 : Diagnostics 224 3. To create a diagnostics file to send to Raritan Technical Support: a. Click the Save to File butt on. The File Download dialog appe ars. b. Click Save. The Save As dialog ap pears. c. Navigate to the desired directo ry and click Save. 4. Email this file as directed b y Raritan Technical Support .[...]

225 In This Chapter Overview ................................................................................................ 226 Accessing the KSX II Using CLI ............................................................ 227 SSH Connection to the KSX II ............................................................... 227 Telnet Connection to the KS[...]

Chapter 12 : Command Line Interfac e (CLI) 226 Overview The KSX II Serial Con sole supports all serial device s such as:  Servers, including Window s Server 2003 ® when using the Emergency Management Con sole (EMS-) Special A dministration Console, or SAC with BIOS redirectio n in the server BIOS.  Routers  Layer 2 switches  Firewalls [...]

Chapter 12 : Command Line Interface (CLI) 227 Accessing the KSX II Using CLI Access the KSX II by using one of the following methods:  Telnet via IP connection  SSH (Secure Shell) via IP connection  Local Port-via RS-232 serial i nterface A number of SSH/Telnet clients a re available and can be obtained from the following locations:  Pu[...]

Chapter 12 : Command Line Interfac e (CLI) 228 Telnet Connection to the KSX II Due to the lack of security, user name, password and all traffic is in clear-text on the wire. Telnet access is disabled by default . Enabling Telnet If you wish to use Telnet to ac cess the KSX II, first acce ss the KSX II from the CLI or a browser. To enable Telnet: 1.[...]

Chapter 12 : Command Line Interface (CLI) 229 Port Settings Ensure that the port settin gs (serial communication parameters) are configured as follows:  Data bits = 8  Parity = None  Stop bits =1  Flow Control = None  Bits per second = 9600 Logging On To log in, enter the user name admin as sho w n: 1. Log in as admin 2. The Password[...]

Chapter 12 : Command Line Interfac e (CLI) 230 After reviewing the followin g Navigation of the CLI (on page 2 31 ) section, perform the Initial Configuration tasks. Welcome! 192.168.59.202 login: admin Passwd: ---------------------------------------------------- ---------------------------- Device Type: Dominion KSX2 Model: DKSX2_188 Device Name: [...]

Chapter 12 : Command Line Interface (CLI) 231 login as: Janet Password: Authentication successful. ---------------------------------------------------- ------------ Welcome to the KSX II [Model: KSX2] UnitName:KSX II Firmware Version:3.0.0.5.1 Serial:WACEA00008 IP Address:192.168.51.194 UserIdletimeout:99min ----------------------------------------[...]

Chapter 12 : Command Line Interfac e (CLI) 232 CLI Syntax -Tips and Shortcuts Tips  Commands are listed in al phabetical order.  Commands are not case sensitiv e.  Parameter names are singl e word without underscore .  Commands without arguments default to show current sett ings for the command.  Typing a question mark ( ? ) after a [...]

Chapter 12 : Command Line Interface (CLI) 233 Initial Configuration Using CLI Note: These steps, which us e the CLI, are optional since the same configuration can be done via K VM. See Getting Started f or more information. KSX II devices come from t he factory with default factory settings. When you first power up and con nect to the device, you m[...]

Chapter 12 : Command Line Interfac e (CLI) 234 The KSX II now has the b asic configuration and can be accessed remotely via SSH, GUI, or locally using the local serial port. The administrator needs to co nfigure the users and group s, services, security, and serial ports to which the serial targets ar e attached to the KSX II. CLI Prompts The Comma[...]

Chapter 12 : Command Line Interfac e (CLI) 235 Security Issues Elements to consider when addr essing security for co nsole servers:  Encrypting the data traffic sent between the operator co nsole and the KSX II device.  Providing authentication and autho rization for users.  Security profile. The KSX II supports each of these elements; how[...]

Chapter 12 : Command Line Interfac e (CLI) 236 Port Sharing Using CLI It is possible for access clie nt users to share p orts with other authenticated and authorized users, regardless of whether they are access client users (RS C) or SSH/Telnet users. Port sharing is used for training or for troubleshooti ng applications.  Users are notified in [...]

Chapter 12 : Command Line Interface (CLI) 237 Interface Command The Interface command is used to configure the KSX II network interface. The syntax of the interface command is: interface [ipauto <none|dhcp>] [ip <ipaddress>] [mask <subnetmask>] [gw <ipaddress>] [mode <mode>] Set/Get ethernet parameters ipauto <none|[...]

Chapter 12 : Command Line Interf ace (CLI) 238 Connect Commands The connect commands p rovide a means to access ports and their history. Command Description connect Connect to a port. The po rt sub-menu, reached using escape key sequence. clearhistory Clear history buffer for this port. Only available to users who have Write a ccess. clientlist Dis[...]

Chapter 12 : Command Line Interface (CLI) 239 IPv6 Command Use the IPv6_command to set I Pv6 network parameters and retrieve existing IPv6 parameters.[...]

240 In This Chapter Overview ................................................................................................ 240 Using the KSX II Local Consol e ............................................................ 240 KSX II Local Console I nterface ............................................................. 241 Security and Authenticati[...]

Chapter 13 : KSX II Local Console 241 KSX II Local Console Interface When you are located at t he server rack, the K SX II provides standard KVM management and ad ministration via the KSX I I Local Console. The KSX II Local Console pr ovides a direct KVM (anal og) connection to y our connected servers; the perf ormance is exactly as if y ou were di[...]

Chapter 13 : KSX II Local Console 242 Local Console Smart Card Access To use a smart card to acces s a server at the Local Con sole, plug a USB smart card reader into the KS X II using one of the USB por ts located on the KSX II. Once a smart card r eader is plugged in or unplugged from the KSX II, the KSX I I autodetects it. For a list of supporte[...]

Chapter 13 : KSX II Local Console 243 To update the Card Read ers Detected list:  Click Refresh if a new smart card has been mounted. The C ard Readers Detected li st will be refreshed to reflect the new ly added smart card reader. Local Console USB Profile Options From the USB Profile Options section of the Tools page, you can choose from the a[...]

Chapter 13 : KSX II Local Console 244 3. Click OK. The USB profile will be applied to the local port and will appear in the Profile In Use field. Available Resolutions The KSX II Local Console provid es the following resol utions to support various monitors:  800x600  1024x768  1280x1024 Each of these resolutions suppo rts a refresh rate o[...]

Chapter 13 : KSX II Local Console 245 Port Access Page (Local Console Server Display) After you login to the KSX II Local Console, the Port Acces s page opens. This page lists all of the KS X II ports, the connected KVM target servers, and their status and availa bility. Also displayed on the Port Acces s page are blade cha ssis that have been conf[...]

Chapter 13 : KSX II Local Console 246 3. Click the Port Name of the target server you want to a ccess. The Port Action Menu appear s. See Port Action Menu (on page 46 ) for details on available menu option s. 4. Choose the desired menu co mmand from the Port Action Menu. To change the display s ort order:  Click the column heading by wh ich you [...]

Chapter 13 : KSX II Local Console 247  Status - Th e Status is eith er up or down. To change the sort orde r:  Click the column heading y ou want to sort by. The list of KVM target servers is sorted by that column. Hot Keys and Connect Keys Because the KSX II Local Console interface is compl etely replaced by the interface for the target serv[...]

Chapter 13 : KSX II Local Console 248 Blade chassis Connect key action Key sequence example Switch between ports Switch from target port 5, slot 2 t o port 5, slot 11:  Press Left ALT > Press a nd Release 5 > Press and Release - > Press a nd Release 1 > Press and Release 1 > Re lease Left ALT Disconnect from a target and return to[...]

Chapter 13 : KSX II Local Console 249 Language Regions Keyboard layout Japanese Japan JIS Keyboard French France French (AZERTY) layout keyboard. German Germany and Austria German keyboard (QWERTZ layout) Belgian Belgium Belgian Norwegian Norway Norwegian Danish Denmark Danish Swedish Sweden Swedish Hungarian Hungary Hungarian Slovenian Slovenia Sl[...]

Chapter 13 : KSX II Local Consol e 250 Sun key Local port key combination Compose Ctrl+ Alt + KPAD * Vol + Ctrl + Alt + KPAD + Vol - Ctrl + Alt + KPAD - Stop No key combination Power No key combination Accessing a Target Server To access a target serv er : 1. Click the Port Name of the target you want to access. The Port Action Menu is displayed. 2[...]

Chapter 13 : KSX II Local Console 251 KSX II Local Console Loc al Port Settings From the Local Port Settings pa ge, you can customize many settings for the KSX II Local Console i ncluding keyboard, local p ort hot key, video switching delay, power sav e mode, local user interface resolut ion settings, and local user aut hentication. Note: This feat[...]

Chapter 13 : KSX II Local Console 252 Hot key: Take this action: Double Click Caps Lock Press Caps Lock key twice quickly Double Click Left Alt key Press the left Alt key twice quickly Double Click Left Shift key Press the left Shift key twic e quickly Double Click Left Ctrl key Press the left Ctrl key twice quic kly 4. Set the Video Switching Dela[...]

Chapter 13 : KSX II Local Console 253 10. Click OK. To reset back to defaults:  Click Reset to Defaults. KSX II Local Console Factory Reset Note: This feature is avail able only on the KSX II Loc al Console. The KSX II offers several t ypes of reset modes from the Local Console user interface. Note: It is recomm ended that you save the audit log[...]

Chapter 13 : KSX II Local Consol e 254  Full Factory Reset - Removes t he entire configuratio n and resets the device completely t o the factory defaults. Note that any management associations with Comman dCenter will be broken. Becau se of the complete nature of this reset , you will be prompted to confi rm the factory reset.  Network Parame[...]

Chapter 13 : KSX II Local Console 255 2. Use a pointed object to press and h old the Reset button. 3. While continuing to hold th e Reset button, power the KSX II device back on. 4. Continue holding the Reset button for 10 seconds. Once the device has been reset, two short beeps signal its completion.[...]

256 In This Chapter Certified Modems for UNIX , Linux and MPC ......................................... 256 Low Bandwidth KVM Settings ............................................................... 257 Client Dial-Up Networking Config uration ............................................... 258 Windows 2000 Dial-Up Net working Configuration .......[...]

Chapter 14 : Modem Configuration 257 Low Bandwidth KVM Settings Following are the settings t hat Raritan recommends in order to achieve optimum performance whe n using KVM over low bandwidth speeds typical of DSL connection s. This information applies to both virtual KVM and MPC. Setting To achieve optimum perform ance: Connection speed Select Conn[...]

Chapter 14 : Modem Configuration 258 Setting To achieve optimum perform ance: enable this option. Client Dial-Up Networking Configuration Configuring Microsoft Win dows ® Dial-Up Networking for use with KSX II allows configuration of a PC t o reside on the same P PP network as the KSX II. After the dial-up conne ction is established, connecting to[...]

Chapter 14 : Modem Configuration 259 3. Click Next and follow the steps in the Network Connection Wizard dialog to create custom dia l -up network profiles. 4. Click the Dial-up to private network radio button and cl ick Next. 5. Select the checkbox befor e the modem that you want to use to connect to the KSX I I and then click Next.[...]

Chapter 14 : Modem Configuration 260 6. Type the area code and phone numb er you wish to dial in the appropriate fields. 7. Click the Country/region code dr op-down arrow and select the country or region from the list. 8. Click Next. The Connectio n Availability dialog appears.[...]

Chapter 14 : Modem Configuration 261 9. Click the Only for myself radio butt on in the Connection Availabilit y dialog. 10. Click Next. The Network Connection has been create d. 11. Type the name of the Dial-up conne ction. 12. Click Finish. 13. Click Dial to connect to the remote machine when the Dial dialog appears. A dialog indicating t hat a su[...]

Chapter 14 : Modem Configuration 262 Note: In order to access the K SX II, the username and pass word cannot use a (backslash). 7. Click Connect. Windows XP Dial-Up Networking Configuration 1. Choose Start > Programs > Acc essories > Communicat ions > New Connection Wizard. 2. Click Next and follow the steps in the New Connection Wiza[...]

Chapter 14 : Modem Configuration 263 3. Click the Connect to the Intern et radio button and click Next.[...]

Chapter 14 : Modem Configuration 264 4. Click the "Set up my connection ma nually" radio button and click Next.[...]

Chapter 14 : Modem Configuration 265 5. Click the "Connect using a dial-up modem" radio button and click Next.[...]

Chapter 14 : Modem Configuration 266 6. Type a name to identify this particular connection in th e ISP Name field and click Next.[...]

Chapter 14 : Modem Configuration 267 7. Type the phone number for the connection in the Pho ne number field and click Next. 8. Type your ISP information. Type the user name and password in the appropriate fields, and rety pe the password to confirm it .[...]

Chapter 14 : Modem Configuration 268 9. Select the checkbox befor e the appropriate option be low the fields and click Next. 10. Click Finish. 11. Click Dial to connect to the remote machine when t he Dial dialog appears. A dialog indicating t hat you connected successfully appe ars. If you get any errors, consult Windows XP ® Dial- up Networking [...]

269 In This Chapter Physical Specifications .......................................................................... 269 Supported Operating Systems ( Clients) ................................................ 270 Supported Operating Systems a nd CIMs (KVM Target Server s) .......... 271 Supported Browsers .........................................[...]

Appendix A : Specifications 270 Supported Operating Systems (Clients) The following operating system s ar e supported on the V irtual KVM Client and Multi-Platform Client ( MPC): Client operating sy stem Virtual media (VM) supp ort on client Windows 7 ® Yes Windows XP ® Yes Windows 2008 ® Yes Windows Vista ® Yes Windows 2000 ® SP4 S erver Yes [...]

Appendix A : Specifications 271 Mode Operating system Browser Windows Server 2003 ®  Internet Explorer 6.0 SP1++, IE 7, IE 8  Firefox 1.06 - 3 Windows Vista ®  Internet Explorer 7.0 or 8.0 Windows 7 ®  Internet Explorer 7.0 or 8.0  Firefox 1.06 - 3 Windows x64 64 -bit mode Windows XP 64bit OS, 32bit browsers:  Internet Explorer[...]

Appendix A : Specifications 272 Supported Dominion CIMs & D2CIMs Operating system and serial devices ( where applicable) Virtual media Absolute mouse mode Intelligent mouse mode Standard mouse mode  DCIM- PS2  DCIM- PS2  DCIM-USB  DCIM-USB G2  Windows XP ® operating system  Windows 2000 ® operating system  Windows 2000 Se[...]

Appendix A : Specifications 273 Target server Supported CIMs Mouse modes 4.0 and 5.0 DCIM-USB G2 Workstation 3.0) SUSE Linux Professional 9.2 and 10 DCIM- PS2 DCIM-USB DCIM-USB G2 D2CIM-VUSB Fedora ® Core 3 ® and above DCIM- PS2 DCIM-USB DCIM-USB G2 D2CIM-VUSB Mac OS DCIM-USB DCIM-USB G2 D2CIM-VUSB All Solaris OSs supported in Dominion KSX II DCI[...]

Appendix A : Specifications 274 Supported Browsers KSX II supports the followi ng browsers:  Internet Explorer ® 6, 7 and 8  Firefox ® 1.5, 2.0, and 3.0 (up t o build 3.0.10)  Safari ® Computer Interface Modules (CIMs) Part number Line item description UPC code Weight Product dimensions (WxDxH) Shipping weight Shipping dimensions (WxDxH[...]

Appendix A : Specifications 275 Supported Paragon CIMS and Configurations The KSX II supports the P2CIM-APS2 DUAL and P2CIM-AUSBDUAL CIMs, which provide two RJ45 co nnections to different KV M switches. Support of these CIMs prov ides a second path to acc ess the target in the event that one of the KVM switche s is blocked or fails. Paragon CIM Sup[...]

Appendix A : Specifications 276 KSX II to KSX II Guidelines The following system confi guration guidelines should be followed when you are using Paragon CI Ms in a KSX II to KSX II configuration: Concurrent Acce ss Both KSX II KVM switche s should be configured with the same policy for concurrent access to target s, either both PC-Share or both P r[...]

Appendix A : Specifications 277 If a connection to the t arget is in place from the other KS X II, the availability is checked when a connection is attempted. Access is denied or allowed consistent with the P C-Share policy in place for the K SX II. Until that time, the availability is not be updated on the other KSX II. If access is denied because[...]

Appendix A : Specifications 278 Paragon II operation mode Mode description Supported? PC Share A server or other device on a specific channel port can be selected and controlled by more than one user, but only one user has keyboard and mouse control at any one time. Supported. However, PC Share Idle Timeout, which is configured on the Paragon II, i[...]

Appendix A : Specifications 279 Supported Video Resolutions Ensure that each target ser ver's video resolution and refresh rate are supported by the KSX I I and that the signal is noninte rlaced. Video resolution and cable length a re important factors in t he ability to obtain mouse synchronization. See Target Server Connection Distance and V[...]

Appendix A : Specifications 280 Note: Composite Sync and Sync-on-Green video require an a dditional adapter. Note: Some resolutions m ay not be available by default. If you do not see a resolution, plug in th e monitor first, rem ove the monitor and then plug in the CIM. Note: If the 1440x900 and 1680x1050 resolutions a re not displayed but are sup[...]

Appendix A : Specifications 281 Port Description HTTP, Port 80 This port can be configured as needed. See HTTP and HTTPS P ort Settings (on page 141). B y default, all requests recei ved by the KSX II via HTTP (port 80) are automatic ally forwarded to HTTPS for complete security. The KSX I I responds to Port 80 for user con venience, relieving user[...]

Appendix A : Specifications 282 Smart Card Readers Supported and Unsuppo rted Smart Card Readers Only USB type external smart card readers are sup ported by the KSX II. Supported Smart Card Readers Type Vendor Model Verified USB SCM Microsystems SCR331 Verified on local and remote USB ActivIdentity ® ActivIdentity USB Reader v2.0 Verified on local[...]

Appendix A : Specifications 283 This table contains a list of read ers that Raritan has tested with the KSX II and we know not to work, therefor e they are unsup ported. If a smart card reader does not appear in the supported smart card r eaders table or in the unsupported smart card r eaders table, Raritan can not guarantee it will function with t[...]

Appendix A : Specifications 284 Windows XP ® operating system t argets must be running Win dows XP SP3 in order to use smart cards with the KSX II. If you are working with .NET 3.5 in a Windows XP env ironment on the target server, you must be using SP1. Linux Targets If you are using a Linux ® target, the following requirements mu st be met to u[...]

Appendix A : Specifications 285 SuSE 11 pcsc-lite-1.4.102-1.24 Fedora ® Core 10 pcsc-lite-1.4.102.3.fc10.i386  Create a Java ™ Library Link A soft link must be created t o the libpcsclite.so after upgra ding RHEL 4, RHEL 5 and FC 10. Fo r example, ln – s /usr/lib/libpcsclite. so.1 /usr/lib/libpcsclite.so, assu ming installing the packag e p[...]

Appendix A : Specifications 286 Local access Local Access for “crash - cart” appli cations. See Connectivity (on pag e 290 ) for a list of necessary KSX II hardware (adapters and/or cables) f or connecting the K SX II to common Vendor/Model combination s. Electrical Specifications Parameter Value Input Nominal Frequencies 50/60 Hz Nominal Volta[...]

Appendix A : Specifications 287 Port Description field to access the KSX I I, but while still preserving complete securi ty. HTTPS, Port 443 This port is used for the act ual KVM- over- IP communication from the K SX II device to the KVM client on the user' s desktop. It cannot be changed. KSX II (Raritan KVM -over-IP) Protocol, Configurable P[...]

Appendix A : Specifications 288 Port Description The default is port 22. Telnet Telnet port can be configur ed but is not recommended. The default port is 23. Target Server Connection Distance and Video Resolution The maximum supported distan ce is a function of ma ny factors including the type/quality of Cat5 cable, server type and manufactu rer, [...]

Appendix A : Specifications 289 Network Speed Settings KSX II network speed set ting Network switch port setting Auto 1000/Full 100/Full 100/Half 10/Full 10/Half Auto Highest Available Speed 1000/Full KSX II: 100/Full Switch: 100/Half 100/Half KSX II: 10/Full Switch: 10/Half 10/Ha lf 1000/Full 1000/Full 1000/Full No Communica tion No Communicat ion[...]

Appendix A : Specifications 290 Functions; not recommen ded NOT supported by Ethern et specification; product will communicate, but collision s will occur Per Ethernet specification, these sh ould be “no communication,” howeve r, note that the KSX II behavior deviates from expected be havior Note: For reliable network communication, config ure [...]

Appendix A : Specifications 291 Vendor Device Console connector Serial connection Silicon Graphics Origin CAT 5 cable Sun ™ SPARCStation DB25F ASCSDB25M adapter and a CAT 5 cable Sun Netra T1 RJ - 45 CRLVR-15 cable; or CRLVR- 1 adapter and a CAT5 cable Sun Cobalt DB9M ASCSDB9F adapter and a CAT 5 cable Various Windows NT ® Go to the Support page[...]

Appendix A : Specifications 292 RJ -45 (female) DB9 (female) 1 8 2 1, 6 3 2 4 SHELL 5 5 6 3 7 4 8 7 DB9M Nulling Serial Ada pter Pinouts RJ -45 (female) DB9 (male) 1 8 2 1, 6 3 2 4 SHELL 5 5 6 3 7 4 8 7 DB25F Nulling Serial Ad apter Pinouts RJ -45 (female) DB25 (female) 1 5 2 6, 8 3 3 4 1 5 7 6 2 7 20[...]

Appendix A : Specifications 293 RJ -45 (female) DB25 (female) 8 4 DB25M Nulling Serial Ad apter Pinouts RJ -45 (female) DB25 (male) 1 5 2 6, 8 3 3 4 1 5 7 6 2 7 20 8 4[...]

294 IMPORTANT: The procedures i n this chapter should be attempted only by experienced user s. In This Chapter Returning User Group Inf ormation ........................................................ 294 Setting the Registry to Permit Write Operations to the Schema ........... 295 Creating a New Attribute .........................................[...]

Appendix B : Updating the LDAP/LDAP S Schema 295 Setting the Registry to Permit Write Operations to the Schema To allow a domain controller t o write to the schema, you mu st set a registry entry that permits schema updates. To permit write operations to the schema: 1. Right-click the Active Directory ® Schema root no de in the left pane of the wi[...]

Appendix B : Upd ating the LDAP/L DAPS Schema 296 3. Click New and then choo se Attribute. When the warni ng message appears, click Continue and t he Create New Attribute dialog appears. 4. Type rciusergroup in the C ommon Name field. 5. Type rciusergroup in the L DAP Display Name field. 6. Type 1.3.6.1.4.1.13742.50 in t he Unique x5000 Object ID f[...]

Appendix B : Updating the LDAP/LDAP S Schema 297 2. Scroll to the user class in the right pane and right-click it. 3. Choose Properties from th e menu. The user Properti es dialog appears. 4. Click the Attributes tab to open it. 5. Click Add.[...]

Appendix B : Updating the LDAP/L DAPS Schema 298 6. Choose rciusergroup f rom the Select Schema O bject list. 7. Click OK in the Select Sch ema Object dialog. 8. Click OK in the User Prope rties dialog. Updating the Schema Cache To update the schema ca che: 1. Right-click Active Directory ® Schema in the left pane of the window and select Reload t[...]

Appendix B : Updating the LDAP/LDAP S Schema 299 3. Go to the directory where the suppo rt tools were installed. Run adsiedit.msc. The ADSI Edit window opens. 4. Open the Domain. 5. In the left pane of the window, select the CN=Users folder.[...]

Appendix B : Updating the LDAP/L DAPS Schema 300 6. Locate the user name whose p roperties you want to a djust in the right pane. Right-click the user name and select Prop erties. 7. Click the Attribute Editor tab if it is not already open. Choose rciusergroup from the Attrib utes list. 8. Click Edit. The String Attribute Editor dialog appears. 9. [...]

301 In This Chapter Overview ................................................................................................ 301 Java ....................................................................................................... 301 IPv6 Support Notes ............................................................................... 303 Keyb[...]

Appendix C : Informational Notes 302 Applications Prerequisites Supported MPC Applet Requires installation of Java Cryptography Extension (JCE) Unlimited Strength Jurisdiction Policy Files + Browser Supported Firefox ® 2.0.0.7 Yes Firefox 3.0.x Yes Internet Explorer ® 6* No Internet Explorer 7 Yes Internet Explorer 8 Yes HTML access client Requir[...]

Appendix C : Informational Notes 303 The KSX II Remote Console and MPC require JRE ™ to function. Java Runtime Environment ™ (JRE) v ersion 1.6.x or higher are supported. The KSX II Remote Console checks the Ja va version. If the version is incorrect or outdated, y ou will be prompted to downlo ad a compatible version. Note: In order for m ulti[...]

Appendix C : Informational Notes 304 Keyboards Non-US Keyboards French Keyboard Caret Symbol (Linux ® Clients Only) The Virtual KVM Client an d the Multi-Platform Client (MPC ) do not process the key combinati on of Alt Gr + 9 as the caret symbol (^) when using French keyboards with Linux clients. To obtain the caret sy mbol: From a French keyboar[...]

Appendix C : Informational Notes 305 Tilde Symbol From the Virtual KVM Clie nt and the Multi-Platform Client, the key combination of Alt Gr + 2 does not produce the tilde (~) symbol when using a French keyboard. To obtain the tilde sy mbol: Create a macro consisting of the following commands:  Press right Alt.  Press 2.  Release 2.  Rel[...]

Appendix C : Informational Notes 306 Note: The Keyboard Indica tor should be used on Linu x systems using Gnome as a desktop envir onment. When using a Hungarian keyboa rd from a Linux client, the Latin letter U with Double Acute and the Latin letter O with Double A cute work only with JRE 1.6. There are several methods that ca n be used to set the[...]

Appendix C : Informational Notes 307 Macintosh Keyboard When a Macintosh ® is used as t he client, the following keys o n the Mac ® keyboard are not captured by the Java ™ Runtime Environment ( JRE ™ ):  F9  F10  F11  F14  F15  Volume Up  Volume Down  Mute  Eject As a result, the Virtual KVM Client and the Multi-Pla[...]

Appendix C : Informational Notes 308 Fedora Resolving Fedora Core Focus Using the Multi-Platform Client (MPC), occasionally there i s an inability to log in to a KSX II device or to access KVM target serv ers (Windows ® , SUSE, and so forth). In ad dition, the Ctrl+Alt+M key c ombination may not bring up the Keyboard S hortcut menu. This situation[...]

Appendix C : Informational Notes 309 USB Ports and Profiles VM -CIMs and DL360 USB Ports HP ® DL360 servers have o ne USB port on the back of the device and another on the front of the device. With the DL360, bo th ports cannot be used at the same time. Th erefore, a dual VM-CIM ca nnot be used on DL360 servers. However, as a workaround, a USB2 hu[...]

Appendix C : Informational Notes 310 USB profile help appears i n the USB Profile Help window. Fo r detailed information about specifi c USB profiles, see Available USB P rofiles (on page 105 ). Raritan provides a standard selection of USB configuration profiles for a wide range of operating sy stem and BIOS level server implementations. These are [...]

Appendix C : Informational Notes 311 Changing a USB Profile when U sing a Smart Card Reader There may be certain circumsta nces under which y ou will need to change the USB profile for a target server. For example, you may need to change the connection speed t o "Use Full Speed for Virtual Medi a CIM" when the target has p roblems with th[...]

Appendix C : Informational Notes 312 Virtual Media Dell OptiPlex and Dimen sion Computers From certain Dell OptiPlex ™ and Dimension computers, it may not be possible to boot a target server fr om a redirected drive/I SO image, or to access the target server BI OS when a virtual media s ession is active (unless the Use Full Speed for Virtual Medi[...]

Appendix C : Informational Notes 313 CC - SG Virtual KVM Client Version Not Known from CC-SG Proxy Mode When the Virtual KVM Client is launched from Command Center Secure Gateway (CC-SG) in proxy m ode, the Virtual KVM Client version is unknown. In the About Rari tan Virtual KVM Client dialo g, the version is displayed as “Version Unknow n”. Si[...]

314 In This Chapter General Questions ................................................................................. 315 Serial Access ......................................................................................... 317 Universal Virtual Media .......................................................................... 322 USB Profiles ..[...]

Appendix D : FAQs 315 General Questions What is KSX II ? The KSX II is a second generatio n digital KVM (Keyboard, Video Mouse) switch that enables IT admi nistrators to access and control 8, 16, 32, or 64* servers over the netwo rk with BIOS-level functionality. The KSX II is completely hardware an d OS-independent; users can troubl eshoot and rec[...]

Appendix D : FAQs 316 In general, customers can continue to use their existi ng switches for many years. As their data cente rs expand, customer s can purchase and use the new KSX II models. Ra ritan's centralized management unit, CommandCenter Secure Gatew ay, and the Multi-Platform Client (MPC) both support KSX I and K SX II switches seamles[...]

Appendix D : FAQs 317 Serial Access My Dominion KSX I I has just been configured w ith a network address and I can successfully ping the IP, but when I try to access it using a web bro w ser, the message reads "Page canno t be found or server error, contact S ystem Administrator." Check your web browse r settings and confirm that a proxy [...]

Appendix D : FAQs 318 Can I open multiple w indows and "tile" to monito r multiple servers and other IT equipment? Yes, you may monitor and "tile" as many windows as there are serial ports on the Dominion KS X II. I manage many servers. How do I select a serv er to connect to? From a browser, a simple menu provi des the user-ass[...]

Appendix D : FAQs 319 I have lost my Admin pass w ord to the Dominion KSX II. Is there a back door or secret pas sword? There is no back-door password. The only option is to restore t he unit to its factory default setting s and create the administrator u se r name and password again. A hardware re set function to restore the unit to factory defaul[...]

Appendix D : FAQs 320 What is the name of the termi nal emulation pack age included with Dominion KSX II? Raritan Serial Console. What Authentication mechanisms do es the Dominion KSX II support? Local database, RADIUS, LDAP/S, Active Directory. Does Dominion KSX II support S NMP? Yes. Dominion KSX I I supports SNMP traps via the Raritan Ente rp ri[...]

Appendix D : FAQs 321 Yes. Can I use KSX II ov er a VPN connection? Yes, KSX II fits into most a ny network configuration util izing TCP/IP. KSX II uses standard Internet Proto col (IP) technologies fr om Layer 1 through Layer 4. Set up the VPN (t ypically IPSec) connection then start the web-browser and enter the URL for the Dominion device. The s[...]

Appendix D : FAQs 322 Go to the Raritan website ( www.raritan.com) Support page to find the latest information about the KSX II serial pinouts (RJ-45). The Dominion KSX II uses the w eb bro w ser to access serial devices. What are the ad vantages of Java-enabled w eb browser access? For many Solaris/Unix/Linu x system administrators, t he de facto [...]

Appendix D : FAQs 323 USB Profiles What is a USB profile? Certain servers require a specifically configured USB interface for USB based services such as vir tual media. The USB Profile tailors the K SX II‟s USB interface to the serv er to accommodate these server specific characteristics. Why would I use a USB profile? USB Profiles are most often[...]

Appendix D : FAQs 324 Do I need a special CIM t o use USB profiles? You must use a D2CIM-VUSB or D2CIM-DVUSB with updated firmware. Will Raritan provide USB profiles for other target server configurations? Raritan will provide new USB profiles to suit customer needs. As these profiles become available, they will be included in firmware up grades.[...]

Appendix D : FAQs 325 IPv6 Networking What is IPv6? IPv6 is the acronym for “Int ernet Protocol Version 6”. IPv6 is the “next generation” IP protocol which will re place the current IP Vers ion 4 (IPv4) protocol. IPv6 addresses a number of problems in IPv4, such as the limit ed number of IPv4 addresses . It also improves IPv4 in areas such [...]

Appendix D : FAQs 326 Where can I get more information on IPv6? See www.ipv6.org for general inf ormation on IPv6. The KSX II User Guide describes the KSX I I‟s support for IPv6. Remote Access How many users can remotely access servers on each KSX II? Up to 8 KVM users can sh are one KVM channel and up to 8 serial users can share 8 serial cha nne[...]

Appendix D : FAQs 327 Speed Description Time 60Mbps Likely practical 100Mbit network speed 0.08 seconds 10Mbps Theoretical 10Mbit network sp eed .4 seconds 6Mbps Likely practical 10Mbit net work speed .8 seconds 512Kbps Cable modem download speed (typical) 8 seconds How do I access servers conne cted to the KSX II if t he network ever becomes unava[...]

Appendix D : FAQs 328 Ethernet and IP Networking Does the KSX II offer dua l gigabit Ethernet ports to prov ide redundant fail-over, or load balancing? Yes. The KSX II features dual gig abit Ethernet ports to provide redundant failover capabilities. Should the primary Ethern et port (or the switch/router to which it is con nected) fail, the KSX II [...]

Appendix D : FAQs 329 Use case Required bandwidth Idle Windows Desktop 0 Mbps Move Static 400x600 Window/Dialog 0.35Mbps Navigate Start Menu 0.49Mbps Scroll an Entire Page of Text 1.23Mbps Run 3D Maze Screensaver 1.55Mbps[...]

Appendix D : FAQs 330 What is the slo w est connection (lo west bandwidth) over w hich the KSX II can operate? 33Kbps or above is recom mended for acceptable KSX I I performance over a modem connection . What is the speed of the KSX II's Ethernet interfaces? The KSX II supports two 1 0/100/1000 speed Ethernet interfaces, with configurable spee[...]

Appendix D : FAQs 331 If an external authentication se rver (such as LDAP/LDAP S, Active Directory, RADIUS, and so forth) is used, the KSX II allows this as well, and will even failover to its own inte rnal authentication should the external authentication ser ver become unavailable. In this way, the KSX II's design philosophy is opt imized to[...]

Appendix D : FAQs 332 Servers Does the KSX II depend on a Window s ® server to operate? No. The KSX II is completel y independent. Even if a user chooses to configure the KSX II t o authenticate against an Active Directory server - if that Active Directory server becom es unavailable, the K SX II's own authentication will be activat ed and fu[...]

Ap pendix D : FAQs 333 Are the Paragon Blade CIMs used? No, the Paragon II Blade CIM will not work with the KSX II. Which CIM should I use? It depends on the type of KVM ports on the specific m ake and model of the blade server you are u sing. The following CIM s are supported: DCIM-PS2, DCIM-USBG2, D2 CIM-VUSB and D2CIM-DVUSB. What types of access[...]

Appendix D : FAQs 334 I'm running VM ware on some of my blade servers. Is this supported? Yes, with CC-SG you can display and access virtual machine s running on blade servers. Is virtual media supported? We support VM on IBM BladeC enter ® Model H and E with the D2CI M - DVUSB. Is Absolute Mouse Sy nchronization supported? Servers with inter[...]

Appendix D : FAQs 335 Installation Besides the device itself, what do I need to orde r from Raritan to install the KSX II? Each server that connects to the KSX II requires a D ominion Computer Interface Module (CIM), a s erial cable adapter, and an adapte r that connects directly to t he keyboard, video, and mouse p or ts of the server. What kind o[...]

Appendix D : FAQs 336 The KSX II models range fr om 4 to 8 server ports in a 1U cha ssis. This is the industry's highest digital KVM switch port density. What happens if I disconnect a s erver from the KSX II and reconnect it to another KSX II device, or conne ct it to a different port on the same KSX II device? The KSX II will automaticall y [...]

Appendix D : FAQs 337 Local Port Can I access my serv ers directly from the rack? Yes. At the rack, the KSX I I functions just like a traditio nal KVM switch - allowing control of up to 16 serv ers using a single keyb oard, monitor, and mouse. When I am using the local port, do I prevent other users from accessing servers remotely ? No. The KSX II [...]

Appendix D : FAQs 338 Yes. The local port present ation is identical and completely in sync with remote access clients, as well as Raritan's optional CommandCenter Secure Gateway management device. To be clear, if the name of a server via the KSX II onscreen display is changed, this updat es all remote clients and exte rnal management servers [...]

Appendix D : FAQs 339 Power Control Does the power supply used by the KSX II automa tically detect voltage settings? Yes. The KSX II's power supply can be used in AC voltage r anges from 100 -240 volts, at 50-60 Hz. What type of po wer control capabilities does the KSX II offer? Raritan's Remote Power Cont ro l power strips can be conne c[...]

Appendix D : FAQs 340 Scalability How do I connect multipl e KSX II devices together into one solution? Multiple KSX II devices do not need to be physically c onnected together. Instead, each KSX II device connects to the network. They automatically work together as a single solution if deployed with Raritan's optional CommandCenter Secure Gat[...]

Appendix D : FAQs 341 Security Is the KSX II FIPS 140-2 Certified ? The KX II 2.2.0 and later, and t he KSX II 2.3.0 and later, provides user s with the option to use an embed ded FIPS 140-2-validated cryptogr aphic module running on a Linux platform per FIPS 140-2 impleme ntation guidelines. This cryptographic m odule is used for en cryption of KV[...]

Appendix D : FAQs 342 Yes, the KSX II has admini strator-configurable, strong password checking to ensure that u ser-created passwords meet corporate and/or government standards and are resistant to brute force hacking. If the KSX II Encry ption Mode is set to Auto, w hat level of encryption is achieved? The KSX II has the ability t o support AES-2[...]

Appendix D : FAQs 343 Smart Cards and CAC Authentication Does the KSX II support smart c ard and CAC authentication? Yes, smart cards and DoD Comm on Access Card (CA C) authentication to target servers is support ed in release KX I I 2.1.10 and later, and KSX II 2.3.0 and later. What KSX II models support smar t cards/CAC? All KSX II models are sup[...]

Appendix D : FAQs 344 Managability Can the KSX II be rem otely managed and configur ed via web browser? Yes, the KSX II can be co mpletely configured remotely via web browser. Note that this does require that the workstation have an appropriate Java Runtime Environment (JRE) v er sion installed. Besides the initial setting o f the KSX II's IP [...]

Appendix D : FAQs 345 Miscellaneous What is the KSX II's defaul t IP address? 19 2.168.0.192 What is the KSX II's defaul t user name and pass w ord? The KSX II's default user n ame is admin and the defa ult password is raritan [all lower case]. Howeve r, for the highest level of security , the KSX II forces the administr ator to chan[...]

[...]

347 A A. AC Power • 25 Absolute Mouse Mode • 73 Accessing a T arget Server • 250 Accessing Telnet from a W indows PC • 228 Accessing the KSX II Using CLI • 227 Accessing Virtual Media on a Windows 2000 Server Using a D2CIM- VU SB • 312 Active KVM Client (AKC) • 4, 39, 80 Adding a New User • 121 Adding a New User Grou p • 114, 121 [...]

Index 348 Create User Groups and User s • 37 Creating a New Attribute • 295 D D. KVM Target Server Port s • 27 DB25F Nulling Serial Adap ter Pinouts • 292 DB25M Nulling Serial Adap ter Pinouts • 293 DB9F Nulling Serial Ada pter Pinout s • 291 DB9M Nulling Serial Adapt er Pinouts • 292 Default Login Information • 14 Dell Blade Chassi[...]

Index 349 K Key Combinations and the Java Runtime Environment (JRE) • 306 Keyboard Language Preference ( Fedora Linux Clients) • 305 Keyboard Macros • 60 Keyboard Options • 60 Keyboards • 304 KSX II Client Applications • 5 K SX II Console Layout • 42 KSX II Help • 5 KSX II Local Console • 240 KSX II Devices • 39 KSX II Local Con[...]

Index 350 Port Action Menu • 46, 246 Port Group Management • 188 Port Keywords • 186 Port Permissions • 115, 117 Port Settings • 229 Port Sharing Using CLI • 236 Ports Used • 286 Power Control • 10, 158, 339 Power Con trolling a Target Server • 55 Prerequisites for Using AK C • 82 Prerequisites for Using Virt ual Media • 94, 9[...]

Index 351 Supported CIMs for Blade Cha ssis • 162, 164, 168, 176 Supported Keyboard Langu ages • 248 Supported Operating Systems ( Clients) • 4, 270 Supported Operating Systems a nd CIMs (KVM Target Servers) • 4, 27, 271, 316 Supported Paragon CIMS and Configurations • 4, 195, 275 Supported Protocols • 36 Supported Vi deo Resolutions ?[...]

U.S./Canada/Latin Americ a Monday - Friday 8 a.m. - 6 p.m. ET Phone: 800- 724 -8090 or 732- 764 -8886 For CommandCenter NOC: Press 6, then Press 1 For CommandCenter Secure Gateway: Press 6, then Press 2 Fax: 732-764-8887 Email for CommandCenter NOC: tech-ccnoc@raritan.com Email for all other products: tech@raritan.com China Beijing Monday - Friday [...]