Manuale d’uso / di manutenzione del prodotto DOMINION KSX II del fabbricante Raritan
Vai alla pagina of 362
Copyright © 2011 Raritan, Inc. DKSXII-v2.3.5- 0E - E March 2011 255 - 62 - 4030 - 00 Dominion KSX II User Guide 2.3.5.
This document contains p roprietary information that is protected by copyright. A ll rights reserved. No part of this document may be photo copied, reproduced, or t ranslated into another lan guage without express prior written con sent of Raritan, Inc.
iii Contents Chapter 1 Introduction 1 KSX II Overview ............................................................................................................................. 2 KSX II Help .........................................................
Contents iv Video Properties ................................................................................................................ 63 Mouse Options ............................................................................................
Contents v Users .......................................................................................................................................... 120 User List .................................................................................
Contents vi Configuring IP Access Cont r ol ................................................................................................... 1 99 SSL Certificates .....................................................................................
Contents vi i Target Connections and the CLI ................................................................................................ 236 Setting Emulation on a Target ...........................................................................
Contents viii Resetting the KSX II Using the Reset Button ............................................................................ 256 Chapter 14 Modem Configuration 257 Certified Modems for UNIX , Linux and MPC ...................................
Contents ix Setting the Registry to Permit Write Operations to the Schema ............................................... 296 Creating a New Attribute ....................................................................................................
Contents x Appendix D FAQs 316 General Questions ..................................................................................................................... 316 Serial Access ..................................................................
1 In This Chapter KSX II Overview ................................................................ ........................ 2 KSX II Help ................................................................................................ 4 KSX II Client Applications .
Chapter 1 : Introduction 2 KSX II Overview Raritan's Dominion KSX II is an ente rprise-class, secure digital de vice that provides a single integ rated solution for remote KVM (keyboard, video, mouse) server access a nd serial device manageme nt, as well as power control from anywh ere in the world from a we b browser.
Chapter 1 : Introduction 3 Diagram key Cat5 cable Remote virtual media USB drive(s) Computer Interface Module (CIM) Rack PDU (power strip) KSX II Local access Remote KVM and serial devices IP LAN/WAN .
Chapter 1 : Introduction 4 KSX II Help The KSX II help provides infor mation on how to ins tall, set up, and configure the KSX II. It also includes information on accessing t arget servers and power strips, u sing virtual media, managi ng users and security, and maintaining a nd diagnosing the KSX II.
Chapter 1 : Introduction 5 Virtual Media All KSX II models suppo rt virtual media. The benefit s of virtual media - mounting of remote drives/media o n the target server to support software installation and diagnosti cs - are now available in all of the KS X II models.
Chapter 1 : Introduction 6 Local serial port (RS232) for C LI-based administration and serial target access Integrated power control Dual dedicated power control ports LED indicators f.
Chapter 1 : Introduction 7 External Product Overview The following diagram indicate s the external components of the KSX II. Note that the KSX II 144 wi ll have 4 KVM ports and 4 serial ports as compared to the KSX I I 188 used in the diagram, which has 8 KVM ports and 8 serial ports.
Chapter 1 : Introduction 8 Item Description AC power cord plug See Power Control (on page 158 ) for additional information. Power on/off switch LAN 3 port Note: The LAN 3 port is rese rved for future use. LAN1 and LAN2 ports See Step 3: Connect t he Equipment for additional information.
Chapter 1 : Introduction 9 Terminology This manual uses the following t erminology for the components of a typical KSX II configuratio n:.
Chapter 1 : Introduction 10 Diagram key TCP/IP IPv4 and/or IPv6 KVM (Keyboard, Vi deo, Mouse) UTP Cable (Cat5/5e/6) KSX II Local Access Console Local User - an optional user co nsole (consisting of a .
Chapter 1 : Introduction 11 Diagram key serial port connected remotely via KSX II. Routers Dominion PX Rack PDU (Power Strip) Raritan rack PDUs accessed rem otely via the KSX I I. Package Contents Each KSX II ships as a f ully-configured stand-alone product in a standard 1U 19" rackmoun t chassis.
12 In This Chapter Overview .................................................................................................. 12 Default Login Information ........................................................................ 12 Getting Started ...
Chapter 2 : Installation and Configuration 13 Getting Started Step 1: Configure KVM T arget Servers KVM target servers are t he computers that will be a ccessed and controlled via the KSX II. Before installing the KSX I I, configure all KVM target servers to ensure opt imum performance.
Chapter 2 : Installation and Configuration 14 Operating System Mouse and Video Settings This section provides v ideo mode and mouse inf ormation specific to the operating system in use o n the target server.
Chapter 2 : Installation and Configuration 15 Windows Vista Settings To configure KVM target servers running Windo w s Vista ® operating system: 1. Configure the mouse settin gs: a. Choose Start > Settings > Control Panel > Mouse. b. Select "Advanced system settings" from the left nav igation panel.
Chapter 2 : Installation and Configuration 16 Set the mouse motion speed sett ing to exactly the middle speed. Disable the "Enhanced poi nter precision" option. Click OK. 2. Disable animation and fade effects: a. Select Control Panel > System and S ecurity.
Chapter 2 : Installation and Configuration 17 Deselect the "Use the following t ransition effect for menu s and tooltips" option. 3. Click OK and close the Control P anel. Linux Settings (Red Hat 4) Note: The following setting s are optimized for Standard Mou se mode only.
Chapter 2 : Installation and Configuration 18 SUSE Linux 10.1 Settings Note: Do not attempt to synchronize the m ouse at the SUSE Linux ® login prompt. You must be con nected to the target server t o synchronize the mouse cursors. To configure the mouse s ettings: 1.
Chapter 2 : Installation and Configuration 19 Tip : If you do not want to be prom pted upon log out, follow the se procedures instead. To make your settings pe rmanent in Linux (no pro mpt): 1. Choose Desktop > Control Center > System > Sessio ns.
Chapter 2 : Installation and Configuration 20 Display resolution Vertical refresh rate Aspect ratio 1280 x 1024 60,75,85 Hz 5:4 1152 x 864 75 Hz 4:3 1024 x 768 60,70,75,85 Hz 4:3 800 x 600 56,60,72,75,85 Hz 4:3 720 x 400 85 Hz 9:5 640 x 480 60, 72,75,85 Hz 4:3 3.
Chapter 2 : Installation and Configuration 21 4. Set the Threshold slider to 1.0. 5. Click OK. Accessing the Command Line 1. Right click. 2. Choose Tools > Terminal.
Chapter 2 : Installation and Configuration 22 IBM AIX 5.3 Settings Follow these steps to configure KVM target servers running IBM ® AIX ™ 5.3. To configure the mouse: 1. Go to Launcher. 2. Choose Style Manager. 3. Click Mouse. The Style Manage r - Mouse dialog appears.
Chapter 2 : Installation and Configuration 23 To take advantage of the KSX I I: The firewall must allo w inbound communicatio n on: Web-access capabilities Port 443 - standard TCP p ort for HTTPS communication Automatic redirection of HTTP requests to HTTPS (so the more common “http://xxx.
Chapter 2 : Installation and Configuration 24 B. Network Port The KSX II provides two E thernet ports for failover p urposes (not for load-balancing). By default, only LAN1 is active and the autom atic failover is disabled.
Chapter 2 : Installation and Configuration 25 You can use the Local Adm in port to connect the KSX II directly to a workstation to manage yo ur serial targets and config ure the system with a terminal emulation prog ram such as HyperTermi nal. The Local Admin port requires the use of a st andard null modem cable.
Chapter 2 : Installation and Configuration 26 4. Connect the rack PDU to an AC power source. 5. Power on the KSX II device. Important: When using CC-SG, the power ports should be inactive before attaching rack PDUs th at were s wapped between the power ports.
Chapter 2 : Installation and Configuration 27 F. Serial Target Ports To connect a serial target to the KSX II, use a Cat5 cable with a n appropriate serial adapter. The following table lists the neces sary KSX II hardware (ad apters and/or cables) for connecting the KSX II to common vend or/model combinations.
Ch apter 2 : Installation and Configuration 28 Go to the Support page on Ra ritan's website (www.raritan. com) to obtain a list of commonly used cable s and adapters.
Chapter 2 : Installation and Configuration 29 Assigning an IP Address These procedures describe how to assign an IP address o n the Network Settings page. For complet e information about all of t he fields and the operation of this page, see Network Settings .
Chapter 2 : Installation and Configuration 30 e. Link-Local IP Address. This addres s is automatically assigned t o the device. It is used for ne ighbor discovery or when n o routers are present. Read-Only f. Zone ID. This identifies the device with which the ad dress is associated.
Chapter 2 : Installation and Configuration 31 Naming Target Servers To name the target serv ers: 1. Connect all of the target server s if you have not alrea dy done so. See Step 3: Connect the Equipment for a description of con necting the equipment. 2.
Chapter 2 : Installation and Configuration 32 Configuring Direct Port Access via Telnet, IP Address or SSH The information in this topi c is specific to enabling dir ect port access for serial targets.
Chapter 2 : Installation and Configuration 33 3. Click OK to save this information. Once you have created th e direct port access, it can be connected in a client application such as P uTTY. Following is an example of how the direct port access informat ion would appear in PuTT Y.
Chapter 2 : Installati on and Configuration 34 Note to CC-SG Users Note to CC-SG Users If you are using the KSX II in a CC-SG configuration, perfor m the installation steps, and whe n finished, consult the Co mmandCenter Secure Gateway User Guide , Administra tor Gui de , or Deploy ment Guide to proceed (all foun d on Raritan's website, www.
Chapter 2 : Installation and Configuration 35 Create User Groups and Users As part of the initial configuration, you must define user group s and users in order for users to access t he KSX II. The KSX II uses system-supplie d default user groups and allows you to create groups and specify t he appropriate permissions to suit your needs.
36 In This Chapter Interfaces ................................................................................................ . 36 Proxy Server Configurat ion for use with MPC, VKC and A KC ................ 50 Virtual KVM Client (VKC) ...............
Chapter 3 : Working with Target Servers 37 The following sections of the user g uide contain information about using specific interfaces to conn ect to the KSX II and manage targets: KSX II Local .
Chapter 3 : Working with Target Serve rs 38 KSX II Remote Console Interfac e The KSX II Remote Console is a br owser-based graphical user int erface that allows you to log in to KV M target servers and serial targ ets connected to the KSX II and t o remotely administer the KSX II.
Chapter 3 : Working with Target Servers 39 Depending on your brows er and security settings, you may see various security and certificate wa rnings. It is necessary to accept these warnings to launch the KSX II Remote Console.
Chapter 3 : Working with Target Servers 40 Interface and Navigation KSX II Console Layout Both the KSX II Remote C onsole and the KSX II Local Console interfaces provide an HTML (web-ba sed) interface for configuratio n and administration, as well as target server list and selection.
Chapter 3 : Working with Target Servers 41 Left Panel The left panel of the KSX II interface contains the follo wing information. Note that some informatio n is conditional and will onl y be displayed if you are a certain of user, are using certain features, and so on.
Chapter 3 : Working with Target Servers 42 Information Description When displayed? Connected Users The users, identified by their username and IP address, who are currently connected to the KSX II. Always Online Help - User Guide Links to online help.
Chapter 3 : Working with Target Servers 43 Port Access Page After successfully logging o n to the KSX II Remote Consol e, the Port Access page appears. This page lists all of the KSX II ports, the connected KVM target se rvers, and their statu s and availability.
Chapter 3 : Working with Target Servers 44 Availability - The Availabili ty can be Idle, Connected, Busy, or Unavailable. Blade serve rs will have an availability of either shared or exclusive when a connectio n to that blade is in pla ce. 3. Click View by Port, View by Group or View by Search to switch between views.
Chapter 3 : Working with Target Servers 45 Power On - Powers on the target server through the a ssociated outlet. This option is visible only whe n there are one or mo re power associations to the target. Power Off - Powers off t he target server through the a ssociated outlets.
Chapter 3 : Working with Target Servers 46 Managing Favorites A Favorites feature is provided s o you can organize and qui ckly access the devices you use frequently .
Chapter 3 : Working with Target Servers 47 Note: Both IPv4 and IPv6 a ddresses are supported. Manage Favorites Page To open the Manage Favorites pa ge: Click the Manage button in the left panel. The Manage Fav orites page appears and contain s the following: Use: To: Favorites List Manage your list of favorite devices.
Chapter 3 : Working with Target Servers 48 c. Click Save. 3. Click Refresh. The list of dev ices on the local subnet is refr eshed. To add devices to y our Favorites List: 1.
Chapter 3 : Working with Target Servers 49 Adding, Deleting and Editing Favorites To add a device to y our favorites list: 1. Choose Manage > Add New D evice to Favorites. Th e Add New Favorite page appears. 2. Type a meaningful description. 3. Type the IP Address/Host Name for the device.
Chapter 3 : Working with Target Servers 50 Proxy Server Configuration for use with MPC, VKC and AKC When the use of a Proxy Server i s required, a SOCKS proxy must also be provided and configured on the remote client PC. Note: If the installed prox y server is only capable of the HTTP proxy protocol, you cannot conne ct.
Chapter 3 : Working with Target Servers 51 start javaw -Xmn128M -Xm x512M -XX:MaxHeapFree Ratio=70 -XX:MinHeapFreeRatio=50 -Dsun.java2d.noddraw=tr ue -DsocksProxyHost=192.1 68.99.99 -DsocksProxyPo rt=1080 -classpath .sdeploy.jar;.sFoxt rot.jar;.jaws.jar;.
Chapter 3 : Working with Target Servers 52 Button Button Name Description Video Settings Opens the Video Setting s dialog, allowing you to manually adjust video con version parameters. Color Calibration Adjusts color setting s to reduce excess color noise.
Chapter 3 : Working with Target Servers 53 Switching Bet ween KVM Target Servers With the KSX II, you can a ccess several KVM target servers. The KSX I I provides the ability to switch from o ne target server to anothe r. Note: This feature is avail able in the KSX I I Remote Console only.
Chapter 3 : Working with Target Servers 54 Disconnecting KVM Target Serv ers Note: This item is not avail able on the KSX II Local C onsole. The only way to disconnect from the switche d target in the Local Console i s to use the hot key. To disconnect a target s erver: 1.
Chapter 3 : Working with Target Servers 55 Connection Properties The dynamic video compre ssion algorithms maintain K VM console usability under varying ban dwidth constraints. The de vices optimize KVM output not only for LAN use, but also for WAN use.
Chapter 3 : Working with Target Servers 56 256 Kb (Cable) 128 Kb (Dual ISDN) 56 kb (ISP Modem) 33 kb (Fast Modem) 24 kb (Slow Modem) Note that these settings a re an optimization f or specific conditions rather than an exact spee d.
Chapter 3 : Working with Target Servers 57 Connection Information To obtain information about y our Virtual KVM Client connection: Choose Connection > Info.. . The Connection Info window opens. The following information is display ed about the current conne ction: Device Name - The name of t he device.
Chapter 3 : Working with Target Servers 58 Import/Export Keyboard Macros Macros exported from Active KVM Client (AKC) cannot be imported into Multi-Platform Client (MPC) o r Virtual KVM Client (VK C). Macros exported from MPC or VKC cannot be imported into AKC.
Chapter 3 : Working with Target Servers 59 Click Yes to replace the ex isting macro with the imported version. Click Yes to All to replace the curre ntly selected and any other duplicate macros t hat are found.
Chapter 3 : Working with Target Servers 60 3. Click Ok. The Export Key board Macro. A dialog from which to locate and select the macro file a ppears. By default, the macro exists o n your desktop. 4. Select the folder to save the macro file to, enter a name f or the file and click Save.
Chapter 3 : Working with Target Servers 61 Press Left Ctrl Release Left Ctrl Press Esc Release Esc 8. Review the Macro Sequen ce field to be sure the ma cro sequence is defined correctly. a. To remove a step in the sequence, select it and click Rem ove.
Chapter 3 : Working with Target Servers 62 Running a Keyboard Macro Once you have created a keyboard macro, execute i t using the keyboard macro you assigned to it or by choosing it from t he Keyboard menu. Run a Macro from the Menu Bar When you create a macro, it appears under the Keyb oard menu.
Chapter 3 : Working with Target Servers 63 3. Set the language and mouse s ettings. 4. Exit the menu to return to n ormal CIM functionality. Video Properties Refreshing the Screen The Refresh Screen com mand forces a refresh of t he video screen.
Chapter 3 : Working with Target Servers 64 Calibrating Color Use the Calibrate Color command to optimize the colo r levels (hue, brightness, saturation) of t he transmitted video imag es. The color settings are on a target s erver-basis. Note: The Calibrate Colo r command applies to the current connection only.
Chapter 3 : Working with Target Servers 65 c. Brightness: Use this setting to adjust the brightness of the target server display. d. Brightness Red - Controls the brightness of the t arget server display for the red signal. e. Brightness Green - Controls the bri ghtness of the green sign al.
Chapter 3 : Working with Target Servers 66 Note: Some Sun background sc reens, such as scre ens with very dark borders, may not center precisel y on certain Sun servers. Use a different background or place a light er colored icon in the upper left corner of the screen.
Chapter 3 : Working with Target Servers 67 Using Screenshot from Target You are able to take a scre enshot of a target serve r using the Screenshot from Target server c ommand. If needed, save this screenshot to a file location of your choosing as a bit map, JPEG or PNG file.
Chapter 3 : Working with Target Servers 68 Changing the Maximum Refresh Rate If the video card you are u sing on the target uses cust om software and you are accessing the targ et through MPC or VKC, you may need to change the maximum refre sh rate of the monitor in order f or the refresh rate to take effect on the target .
Chapter 3 : Working with Target Servers 69 Mouse Pointer Synchronization When remotely v iewing a target server that uses a m ouse, two mouse cursors are displayed: one belonging to your remote cl ient workstation and the other belonging to t he target server.
Chapter 3 : Working with Target Servers 70 Additional Notes for Intelligent Mouse Mode Be sure that there are no ic ons or applications in the upper left section of the screen since that is where the synchron ization routine takes place. Do not use an animated mous e.
Chapter 3 : Working with Target Servers 71 Intelligent Mouse Mode In Intelligent Mouse mode, the device can detect the target mou se settings and synchronize t he mouse cursors accordingly, allowing mouse acceleration on the target. Intelligent mouse mode is t he default for non -VM targets.
Chapter 3 : Working with Target Servers 72 Please note that mouse co nfigurations will vary on di fferent target operating systems. Cons ult your OS guidelines for furt her details. Also note that intelligent mouse synchr onization does not work with UNIX targets.
Chapter 3 : Working with Target Servers 73 2. Click the Single/Double Mouse Cursor button in the toolbar. To exit single mouse mo de: 1. Press Ctrl+Alt+O on your k eyboard to exit single mouse mode. VKC Virtual Media See the chapter on Virtual Media (on page 90 ) for complete info rmation about setting up and using virtual medi a.
Chapter 3 : Working with Target Servers 74 Smart Cards For a list of supported smart cards, smart card readers, and ad ditional system requirements, see Supported and Unsuppo rted Smart Card Readers (on page 283 ). When accessing a server remotely, you will have the opportunity to select an attached smart card reader and mount it onto the server.
Chapter 3 : Working with Target Servers 75 4. A progress dialog will open. Check the 'Mount selected card r eader automatically on connection t o targets' checkbox to mount the smart card reader automatically the next time you connect t o a target.
Chapter 3 : Working with Target Servers 76 Tool Options From the Tools menu, you can specify certain option s for use with the Virtual KVM Client, includi ng logging, setting the keyboa rd type, and defining hot keys for exitin g Full Screen mode and Single C ursor mode.
Chapter 3 : Working with Target Servers 77 4. Exit Full Screen Mode - Hotkey. When y ou enter Full Screen mo de, the display of the target server be comes full screen and acqui res the same resolution as the ta rget server. This is the hot k ey used for exiting this mode.
Chapter 3 : Working with Target Servers 78 Language Configuration method Japanese System Settings (Control Center) UK System Settings (Control Center) Korean System Settings (Control Center) Belgian K.
Chapter 3 : Working with Target Servers 79 View Options View Toolbar You can use the Virtual KVM client with or without the toolbar display. To toggle the display of the toolbar (on and off): Choose View > View Toolb ar. Scaling Scaling your target window allow s you to view the entire content s of the target server window.
Chapter 3 : Working with Target Servers 80 Help Options About Raritan Virtual KVM Client This menu command provi des version informatio n about the Virtual KVM Client, in case you require assistance from Raritan T echnical Support. To obtain version information: 1.
Chapter 3 : Working with Target Servers 81 AKC Supported .NET Frame w ork, Operating Systems and Browser s .NET Framework AKC requires Windows .N ET ® version 3.5, and will work with both 3.5 and 4.0 installed. Operating Systems AKC is compatible with the followin g platforms running .
Chapter 3 : Working with Target Servers 82 Prerequisites for Using AKC In order to use AKC: Ensure the cookies from the I P address of the device t hat is being accessed are not currently being bl ocked.
Chapter 3 : Working with Target Servers 83 Note: The Alt+Tab comm and toggles between windows o nly on the local system. When MPC opens, the Rar itan devices that were automatically detected and which are f ound on your subnet are displ ayed in the Navigator in tree format.
Chapter 3 : Working with Target Servers 84 Note: A security pop-up screen ap pears only if you used htt ps to connect to the RSC. 3. If you're using Dominion DSX : Click Yes. A Warning - Security pop-up screen appears. Click Yes to access the Raritan Serial Console from th e Port page.
Chapter 3 : Working with Target Servers 85 5. Click OK to log on..
86 In This Chapter Overview .................................................................................................. 86 Turning Outlets On/Off and Cycling Power ............................................. 87 Overview The KSX II allows you to co ntrol Raritan PX and RPC series rack PDU (power strip) outlets.
Chapter 4 : Rack PDU (Power Strip) Outlet Control 87 Initially, when you open the Powerstrip page, the po wer strips that are currently connected to the K SX II are displayed in the Powerstrip drop-down. Additionally, informatio n relating to the currently selected power strip is displayed.
Chapter 4 : Rack PDU (Power Strip) Outlet Control 88 5. Click OK to close the Power On confirmation dialog. T he outlet will be turned on and its state will be displayed as 'on'. To turn an outlet off: 1. Click Off. 2. Click OK on the Power Off dialog.
Chapter 4 : Rack PDU (Power Strip) Outlet Control 89 2. Click OK. The outlet will then cycl e (note that this may take a few seconds). 3. Once the cycling is complete the dialog will open.
90 In This Chapter Overview .................................................................................................. 91 Prerequisites for Using Virt ual Media ...................................................... 94 Using Virtual Media via VKC and A KC in a Windows Environm ent .
Chapter 5 : Virtual Media 91 Overview Virtual media extends KVM capabilities by enabling KVM target serve rs to remotely access media f rom a client PC and networ k file servers. With this feature, media mount ed on a client PC and net work file servers is essentially "mounted virtual ly" by the target serve r.
Chapter 5 : Virtual Media 92.
Chapter 5 : Virtual Media 93 Diagram key Desktop PC CD/DVD drive KSX II USB mass storage device CIM PC hard drive Target server Remote file server (ISO images).
Chapter 5 : Virtual Media 94 Prerequisites for Using Virtual Media With the virtual media feat ure, you can mount up to t wo drives (of different types) that are suppo rted by the USB profile currently applied to the target. These drives are accessible for the duratio n of the KVM session.
Chapter 5 : Virtual Media 95 Using Virtual Media via VKC and AKC in a Windows Environment Windows XP ® operating system admi nistrator and standard u ser privileges vary from those of the Windows Vista ® operating system and the Windows 7 ® operating system.
Chapter 5 : Virtual Media 96 Using Virtual Media With the KSX II virtual med ia feature, you can m ount up to two drives ( of different types). These d rives are accessible fo r the duration of the K VM session. For example, you can mount a specific CD-ROM, use it, and then disconnect it when you are done.
Chapter 5 : Virtual Media 97 Target Server KVM target servers must s upport USB connected driv es. KVM target servers runnin g the Windows 2000 ® operating system must have all of the recent patches installed. 1. USB 2.0 ports are both fast er and preferred.
Chapter 5 : Virtual Media 98 File Server Setup (File Server ISO Images Only) Note: This feature is only r equired when using virtu al media to access file server ISO images. ISO9660 f ormat is the standard suppo rted by Raritan. However, other C D-ROM extensions may also work.
Chapter 5 : Virtual Media 99 Note: You cannot acces s a remote ISO image via virtual media using an IPv6 address due to techni cal limitations of third-party soft ware used by the by the KX, KSX or K X101 G2 device.
Chap ter 5 : Virtual Media 100 Connecting to Virtual Media Local Drives This option mounts an entir e drive, which means the e ntire disk drive is mounted virtually onto the targ et server. Use this option f or hard drives and external drives only. It does not include network drives, CD-ROM, or DVD-ROM drives.
Chapter 5 : Virtual Media 101 WARNING: Enabling Read /Write access can be dangero us! Simultaneous access to the same dri ve from m ore than one entity can result in data corruption. If you do not require Write access, leave this option unselecte d. 4.
Chapter 5 : Virtual Media 102 2. For internal and external C D-ROM or DVD-ROM drives: a. Choose the Local CD/ DVD Drive option. b. Choose the drive from the Local CD/DVD Drive dro p-down list. All available internal and e xternal CD and DVD drive name s will be populated in the drop-down list.
Chapter 5 : Virtual Media 103 Disconnecting Virtual Media To disconnect the virtual media drives: For local drives, choose Vi rtual Media > Disconnect D rive. For CD-ROM, DVD-ROM, and ISO images, choose V irtual Media > Disconnect CD-ROM/ISO Image.
104 In This Chapter Overview ................................................................................................ 104 CIM Compatibility .................................................................................. 105 Available USB Profiles .
Chapter 6 : USB Profiles 105 CIM Compatibility In order to make use of USB profiles, you must use a D2CIM-V USB or D2CIM-DVUSB with updated f irmware. A VM-CIM that has not had its firmware upgraded w.
Chapter 6 : USB Profiles 106 USB profile Description Restrictions: USB bus speed limited to full-speed (12 MBit/s) No virtual media support BIOS DellPowerEdge Keyboard Only Dell PowerEdge BIOS A ccess (Keyboard Only) Use this profile to have key board functionality for the Dell Powe rEdge BIOS when using D2CIM-VUSB .
Chapter 6 : USB Profiles 107 USB profile Description BIOS Generic BIOS Generic Use this profile when Gen eric OS profile does not work on th e BIOS. WARNING: USB enumeration will trigger whenever virtual media is connected or disconnected.
Chapter 6 : USB Profiles 108 USB profile Description Module D2CIM-DVUSB is connected t o the Advanced Management Module. Restrictions: Virtual CD-ROM and disk drive s cannot be used simultaneously.
Chapter 6 : USB Profiles 109 USB profile Description Installation) Use this profile for t he HP Proliant DL360/DL380 G4 series server when in stalling Windows 2003 Server without the help of HP SmartSt art CD.
Chapter 6 : USB Profiles 110 USB profile Description Restrictions: Virtual CD-ROM and disk drive s cannot be used simultaneously Suse 9.2 SuSE Linux 9.
Chapter 6 : USB Profiles 111 USB profile Description Virtual CD-ROM and disk drive s cannot be used simultaneously WARNING: USB enumeration will trigger whenever virtual media is connected or disconnected.
Chapter 6 : USB Profiles 112 Mouse Modes when Using the Mac OS-X USB Profile w ith a DCIM-VUSB If you are using a DCIM-VUSB, using a Mac OS-X ® USB profile, and running Mac OS-X 10.4.9 ( or later), when you reboot you must be in Single Mouse mode to use the mou se at the Boot menu.
113 In This Chapter User Groups .......................................................................................... 113 Users ..................................................................................................... 120 Authentication Settings .
Chapter 7 : User Management 114 User Group List User groups are used with local and remote authentication (via RADIUS or LDAP/LDAPS). I t is a good idea to define user g roups before creating individual users since, whe n you add a user, you must assign that user to an existing user group.
Chapter 7 : User Management 115 The Group page is organized into t he following cate gories: Group, Permissions, Port Permissi ons, and IP ACL. 2. Type a descriptive name fo r the new user group into the Group Name field (up to 64 character s). 3. Set the permissions for the group.
Chapter 7 : User Management 116 3. Select the appropriate permis sions. 4. Click OK. Note: See Alternate RADIUS A uthentication Settings for inform ation on additional settings if you ar e using Alternate RADIUS A uthentication.
Chapt er 7 : User Management 117 Permission Description Management authentication (LDAP/LDA PS/RADIUS), login settings Port Permissions For each server port, you can specify the access type t he group has, as well as the type of port a ccess to the virtual media an d the power control.
Chapter 7 : User Management 118 Group-Based IP ACL (Access Control List) Important: Exercise cau tion when using group-based I P access control. It is possible to be l ocked out of your KSX II if your IP address is within a range that has been denied access.
Chapter 7 : User Management 119 4. Click Insert. If the rule num ber you just typed equals an existing rule number, the new rule is pl aced ahead of the exit ing rule and all rules are moved down in the list. To replace a rule: 1. Specify the rule number yo u want to replace.
Chapter 7 : User Management 120 4. Set the IP ACL (optional). This f eature limits access t o the KSX II device by specifying IP add resses. See Group -Base d IP ACL (Access Control List) .
Chapter 7 : User Management 121 Adding a New User It is a good idea to define u ser groups before creating K SX II users because, when you add a user, y ou must assign that user to an existing user group. Refer to Adding a New User Group (on page 114) fo r more information.
Chapter 7 : User Management 122 Modifying an Existing U ser To modify an existing us er: 1. Open the User List page by choosing User Management > User List. 2. Locate the user from among t hose listed on the User List page. 3. Click the user name. The U ser page opens.
Chapter 7 : User Management 123 Authentication Settings Authentication is the proce ss of verifying that a user is who he says he is. Once a user is authenticated, t he user's group is used t o determine his system and port permi ssions. The user's assigned privileges determine what type of access is allowed.
Chapter 7 : User Management 124 Implementing LDAP/LDAPS Remote Authentication Lightweight Directory Access Pr otocol (LDAP/LDAPS) is a networking protocol for querying and modifying directory services r unning over TCP/IP. A client starts an LDAP session by connecting t o an LDAP/LDAPS server (thro ugh the default TCP port is 389).
Chapter 7 : User Management 125 9. In the User Search DN field, enter the Distinguished Nam e of where in the LDAP database you want to begin searching for u ser information. Up to 64 char acters can be used. An example base search value might be: cn=Users,dc=raritan,dc=com .
Chapter 7 : User Management 126 13. Select the Enable Secure LDAP checkbox if you would like to us e SSL. This will enable the E nable LDAPS Server C ertificate Validation checkbox. Secure Socket s Layer (SSL) is a cryptogr aphic protocol that allows KSX II to communicate sec urely with the LDAP/LDAP S server.
Chapter 7 : User Management 127 18. The KSX II provides you with the ability to test the LDA P configuration from the Auth entication Settings page du e to the complexity sometimes encounte red with successfully configuring the LDAP server and KSX II for remote authentication.
Chapter 7 : User Management 128 4. From the KSX II , enable and configure your A D server properly. See Implementing LDAP/LDAP S Remote Authentication. Important Notes Group Name is case sensit ive. The KSX II provides the foll owing default groups that cannot be changed or deleted: Admin and < Unknown>.
Chapter 7 : User Management 129 The timeout is the length of time the KSX II waits f or a response from the RADIUS server before sendi ng another authentication re quest. 9. The default number of retries is 3 Retries. This is the number of time s the KSX II will send a n authentication request to the RADIUS serv er.
Chapter 7 : User Management 130 CHAP - With CHAP, authentication can be requested by the server at any time. CHAP p rovides more security than PAP.
Chapter 7 : User Management 131 Cisco ACS 5.x for RADIUS Authentication If you are using a Cisco ACS 5. x server, aft er you have configured the KSX II for RADIUS authent ication, complete the followi ng steps on the Cisco ACS 5.x server. Note: The following steps i nclude the Cisco menus and m enu items used to access each page.
Chapter 7 : User Management 132 Returning User Group Informa tion via RADIUS When a RADIUS authentication at tempt succeeds, the KSX II determines the permissions for a given user based on t he permissions of the user's group.
Chapter 7 : User Management 133 Attribute Data Log out Accounting-Request(4) Acct-Status (40) Stop(2) - Stops the accounting NAS-Port-Type (61) VIRTUAL (5) for network connection s. NAS-Port (5) Always 0. NAS- IP -Address (4) The IP address for the KS X II.
Chapter 7 : User Management 134 User Authentication Proc ess Remote authentication follows t he process specified in the flowchart below:.
Chapter 7 : User Management 135 Changing a Password To change your pass word: 1. Choose User Management > Chang e Password. The Change Password page opens. 2. Type your current password in the Old Password field. 3. Type a new password in the New Password field.
136 In This Chapter Network Settin gs ................................................................................... 136 Device Services ..................................................................................... 141 Configuring Modem Setti ngs .
Chapter 8 : Device Management 137 Network Basic Settings These procedures describe how to assign an IP address o n the Network Settings page. For complet e information about all of t he fields and the operation of this page, see Network Settings . To assign an IP address: 1.
Chapter 8 : Device Management 138 e. Link-Local IP Address. This addres s is automatically assigned t o the device. It is used for ne ighbor discovery or when n o routers are present. Read-Only f. Zone ID. This identifies the device with which the address is associated.
Chapter 8 : Device Management 139 See LAN Interface Settin gs (on page 139 ) for informati on in configuring this section of the Network Set tings page. Note: In some environments, t he default LAN Interface Speed & D uplex setting Autodetect (autonegotiator ) does not properly set the network parameters, which result s in network issues.
Chapter 8 : Device Management 140 Autodetect (default option) 10 Mbps/Half - Both LEDs blink 10 Mbps/Full - Both LEDs blink 100 Mbps/Half - Yellow LE D blinks 100 Mbps/Full - Yello.
Chapter 8 : De vice Management 141 Device Services The Device Services page allows you to configure the followin g functions: Enabling Telnet Enabling SSH access Configuring HTTP and HTT P.
Chapter 8 : Device Management 142 HTTP and HTTPS Port Setting s You are able to configure HTTP and/or HTTPS ports used by the KSX I I. For example, if you are using t he default HTTP port 80 f or another purpose, changing the port will ensure the device doe s not attempt to use it.
Chapter 8 : Device Management 143 Enabling Direct Port Acc ess via URL Direct port access allows u sers to bypass having to u se the device's Login dialog and Port Acces s page. This feature also provides the ability to enter a username and passwor d directly and proceed to the target if the username and passwor d is not contained in the URL.
Chapter 8 : Device Management 144 Configuring Direct Port Access v ia Telnet, IP Address or SSH The information in this topi c is specific to enabling dir ect port access for serial targets. Use the En able Direct Port Access via URL option on the Device Services page to en able direct port access for a KVM/serial port connect to the KSX I I.
Chapter 8 : Device Management 145 3. Click OK to save this information. Once you have created th e direct port access, it can be connected in a client application such as P uTTY. Following is an example of ho w the direct port access informat ion would appear in PuTT Y.
Chapter 8 : Device Management 146 Enabling the AKC Do wnload Server Certificate V alidation If you are using the AKC cl ient, you can choose to use the Enable AKC Download Server Certificate Validation feature or opt not to use this feature.
Chapter 8 : Device Management 147 3. Click OK. Configuring Modem Settings To configure modem sett ings: 1. Click Device Settings > Modem Set tings to open the Modem S ettings page. 2. Check Enable Modem, if neede d. 3. Enter the PPP server IP address.
Chapter 8 : Device Management 148 Configuring Date/Time Settings Use the Date/Time Settings page to specify the date and t ime for the KSX II. There are two ways to do this: Manually set the date and t ime. Synchronize the date and time wit h a Network Time Protocol (NTP) server.
Chapter 8 : Device Management 149 6. Click OK. Event Management The KSX II Event Manage ment feature allows you en able and disable the distribution of system e vents to SNMP Manager s, the Syslog and the audit log. These events are categorized, and for each event you can determine whether you want the event sent to one or seve ral destinations.
Chapter 8 : Device Management 150 Configuring Event Management S ettings SNMP Configuration Simple Network Management Protocol (SNMP) is a proto col governing network management and the monitoring of network device s and their functions. KSX II offers SN MP Agent support through Event Management.
Chapter 8 : Device Management 151 4. Type the Agent Community String (the device's string). An SNMP community is the group that devices and management stat ions running SNMP belong to. It helps define where inf ormation is sent. The community name is used to identify the group.
Chapter 8 : Device Management 152 Configuring Event Management - Destinations System events, if enabled, can g enerate SNMP notific ation events (traps), or can be logged to syslog or a udit log. Use the Event Management - Destinations page to select which system ev ents to track and where to send this information.
Chapter 8 : Device Management 153 SNMP Trap Configuration SNMP provides the ability to send traps, or notifications, t o advise a n administrator when one o r more conditions hav e been met. The followin g table lists the KSX II S NMP traps: Trap name Description cimConnected A CIM is plugged into to the KS X II port.
Chapter 8 : Device Management 154 Trap name Description network. networkParameterChange d A change has been made t o the network parameters. passwordSettingsChanged Strong password settings h ave changed. portConnect A previously authenticated use r has begun a KVM session.
Chapter 8 : Device Management 155 Trap name Description userAuthenticationFailure A user attempted to log in without a correct username and/or p assword. userConnectionLost A user with an active sessi on has experienced an abnormal se ssion termination.
Chapter 8 : Device Management 156 Port Name - The name assigned t o the port. A port name displayed in black indicate s that you cannot change th e name and that the port cannot be edited; port names display ed in blue can be edited. Note: Do not use apostrop hes for the Port (CIM) Nam e.
Chapter 8 : Device Management 157 For serial ports, the Port page for serial ports is opened..
Chapter 8 : Device Management 158 Power Control Power control is configured on the Port page. The Port page open s when you select a port that is co nnected to a target server from t he Port Configuration page. From the Port page, you can make power associations and ch ange the port name to something more d escriptive.
Chapter 8 : Device Management 159 Assigning a Name to the PX The Port page opens whe n you select a port on the Port Configuration page. The port appears on this page when connected to a Raritan remote rack PDU (power strip ). The Type and the Name f ields are prepopulated.
Chapter 8 : Device Management 160 To remove a rack PDU association : 1. Se lect the appropriate rack PDU from the Power Strip Name drop-down list. 2. For that rack PDU, select t he appropriate outlet from the Outlet Name drop-down list. 3. From the Outlet Name drop-down li st, select None.
Chapter 8 : Device Management 161 Configuring Blade Chass is In addition to standard servers and r ack PDUs (power strips), y ou can control blade chassis that a re plugged into a Domi nion device port. Up to eight blade chassis can be managed at a given time.
Chapter 8 : Device Management 162 The use of hot key sequen ces to switch KVM access to a blade chassis is also supported. For blade chas sis that allow users t o select a hot key sequence, those option s will be provided on the P ort Configuration page.
Chap ter 8 : Device Management 163 3. On the Port Configuration p age, click on the name of t he blade chassis you want to configure. The Port page will open. 4. Select the Blade Chassis radio button. The page will then display the necessary fields to configur e a blade chassis.
Chapter 8 : Device Management 164 c. Username - Enter the use rname used to access the interfa ce. Optional d. Password - Enter the pass word used to access the int erface. Optional Note: Leave the usernam e and password fields blank for DRAC, ILO, and RSA web applications or the c onnection will fail.
Chapter 8 : Device Management 165 To configure a Dell P owerEdge M1000e: 1. If you selected Dell Power Edge ™ M1000e, au to -discovery is available. Configure the bl ade chassis as applicable.
Chapter 8 : Device Management 166 The first URL link is intended f or use to connect to t he blade chassis Administration Module GU I. Note: Access to the URL li nks entered in this section of the page is governed by the blade cha ssis port permissions.
Chapter 8 : Device Management 16 7 b. Maximum Number of Slots - The default maximum number of slots available on the blade chas sis is automatically entered. c. Administrative Module Pri mary IP Address/Host Na me - Not applicable. d. Port Number - The default port number for the blade chassi s is 22.
Chapter 8 : Device Management 168 e. The Username Field and P assword Field, which are both optional, contain the labels that are expected to be a ssociated with the username and password e ntries. It is in these fields you should enter the field name s for the username and password fields used on the login screen f or the web application.
Chapter 8 : Device Management 169 d. Port Number - The default port number for the blade chassi s is 22. Change the port numb er if applicable. Required f or auto-discovery mode e. Username - Enter the use rname used to access the blade chassis. Required for aut o-discovery mode f.
Chapter 8 : Device Management 170 Note: Leave the usernam e and password fields blank for DRAC, ILO, and RSA web applications or the c onnection will fail. e. The Username Field and P assword Field, which are both optional, contain the labels that are expected to be asso ciated with the username and password e ntries.
Chapter 8 : Device Management 171 4. In the Blade Chassis Managed Li nks section of the page, you are able to configure the con nection to a blade chassis web browser interface if one is available. Click the Blade Chassis M anaged Links icon to expand the section on the page.
Chapter 8 : Device Management 172 Tips for Adding a Web Browser Interface You can add a Web Brows er Interface to create a co nnection to a device with an embedded web server. A Web Browser interface can al so be used to connect to any web application, such as the web application associated with an RSA, DRAC o r ILO Processor card .
Chapter 8 : Device Management 173 HP Blade Chassis Configuration (Port Group Management) The KSX II supports the aggregatio n of ports connect ed to certain types of blades into a group repr esenting the blade cha ssis.
Chapter 8 : Device Management 174 3. Enter a Port Group Name. The port group name is not case sensitive and can contain up to 32 characte rs. 4. Select the Blade Server Grou p checkbox.
Chapter 8 : Device Management 175 To delete a port group: 1. Click on the Port Group M anagement page, select th e checkbox of the port group you want to delete.
Chapter 8 : Device Ma nagement 176 Supported CIMs for Blade Chassis The following CIMs are supported f or blade chassis being ma naged through the KSX II: DCIM- PS2 DCIM-USBG2 D2CIM-VUSB D2CIM-DVUSB Following is a table contai ning supported CIMs for each blade chassis model that the KSX I I supports.
Chapter 8 : Device Management 177 Blade chassis Connection method Recommended CIM(s) custom cable provided wit h the system). Source: Dell PowerEdge 1 955 Owner's Manual Dell PowerEdge M1000e The KVM Switch Module (i KVM) is Integrated with this chassi s.
Chapter 8 : Device Management 178 Blade chassis Connection method Recommended CIM(s) Management Module. Source: IBM BladeCenter Produ cts and Technology IBM BladeCenter E The current model Blade Center E chassis (8677-3Rx) ships stand ard with one Advanced Management Module.
Chapter 8 : Device Management 179 Required and Recommended Blade Chassis Configurations This table contains information on limitations and constr aints that apply to configuring blade chassi s to work with the KSX II. Raritan recommends that all of the information below is follow ed.
Chapter 8 : Device Management 180 Blade chassis Required/recommended action Do not designate any slots for scan operations in the iK VM GUI Setup Scan menu or the iKVM may not work properly. To avoid having the iKVM GUI display upon connecti ng to the blade chassis, set the Screen Del ay Time to 8 seconds.
Chapter 8 : Device Management 181 Blade chassis Sample URL format Username: root Username Field: TEXT_USER_NAME Password: calvin Password Field: TEX T_PASSWORD IBM ® BladeCenter ® E or H http://192.
Chapter 8 : Device Management 182 Shift-Click and drag to select seve ral continuous profi les. Ctrl- Cl ick to select several discontinuous profiles. 2. Click Add. The selected profiles ap pear in the Selecte d list. These are the profiles that can be used for the KVM target s erver connected to the port.
Chapter 8 : Device Management 183 2. Click Remove. The select ed profiles appear in the A vailable list. These profiles are no long er available for a KVM target server connected to this port.
Chapter 8 : Device Management 184 German (Germany) JIS (Japanese Industry Standard) Simplified Chinese Traditional Chinese Dubeolsik Hangul (Korean) German (Switzerland) Po.
Chap ter 8 : Device Management 185 a. Select the Power Save Mo de checkbox. b. Set the amount of tim e (in minutes) in which Power S ave Mode will be initiated. 8. Choose the resolution for t he KSX II Local Consol e from the drop-down list. The browser will be r estarted when this chang e is made.
Chapter 8 : Device Management 186 Port Keywords Port keywords work as a fil ter. If a keyword is detecte d, a corresponding message be logged in a lo cal port log and a correspo nding trap will be sent via SNMP (if configur ed). Defining keywords guarantees that only messages th at contain those keywords are logged for the local port.
Chapter 8 : Device Management 187 2. Define a keyword for the f irst time, by clicking the Add but ton on the Port Keyword List page. Th e Add Keyword page will t hen open. Follow steps 3 - 5 to create new keywords. 3. Type a keyword in the Ke yword field and then click t he Add button.
Chapter 8 : Device Management 188 Port Group Management This function is specific to HP blad e chassis configurat ion. See HP Blade Chassis Configur ation (Port Group M anagement) (on page 173 ).
189 In This Chapter Security Settings .................................................................................... 189 Configuring IP Access Cont rol .............................................................. 199 SSL Certificates .........
Chapter 9 : Security Ma nagement 190 To reset back to defaults: Click Reset to Defaults. Login Limitations Using login limitations, yo u can specify restrictions for single login, password aging, and the logging o ut idle users.
Chapter 9 : Security Management 191 Limitation Description change is required. The de fault is 60 days. Log out idle users, After (1-365 minutes) Select the "Log off idle user s" checkbox to automatically disconnect us ers after the amount of time you specify in the "A fter (1-365 minutes)" field.
Chapter 9 : Security Management 192 Strong Passwords Strong passwords provide more secure local authenti cation for the system. Using strong password s, you can specify the f ormat of valid KSX II local passwords such as minimum and maximum le ngth, required characters, and password history retention.
Chapter 9 : Security Management 193 User Blocking The User Blocking options specify the criteria by whi ch users are blocked from accessing the system aft er the specified number of un successful login attempts. The three options are mutu ally exclusive: Option Description Disabled The default option.
Chapter 9 : Security Management 194 Option Description Timer Lockout Users are denied access to the system for the specified amount of time af ter exceeding the specified number of unsucces sful login attempts.
Chapter 9 : Security Management 195 Encryption & Share Using the Encryption & S hare settings you can specif y the type of encryption used, PC and V M share modes, and the ty pe of reset performed when the KSX II Reset button is pressed.
Chapter 9 : Security Management 196 Encryption mode Description a National Institute of St andards and Technology specification fo r the encryption of electronic data. 256 is the key length. When AES -256 is specified, be certain that y our browser supports it, other wise you will not be able to connect.
Chapter 9 : Security Management 197 Local device reset mode Description Enable Local Factory Reset (default) Returns the KSX II dev ice to the factory defaults. Enable Local Admin Password Reset Resets the local administrator pa ssword only. The password is reset to raritan.
Chapter 9 : Security Management 198 Enabling FIPS 140-2 For government and other high se curity environments, enabli ng FIPS 140 -2 mode may be desirable. The KSX II uses an e mbedded FIPS 140 -2-validated cryptograp hic module running on a Linux ® platform per FIPS 140-2 Implementation Guida nce section G.
Chapter 9 : Security Management 199 FIPS 140-2 should be enabled on t he client computer and in Internet Explorer. To enable FIPS 140-2 on a Windows client: 1. Select Control Panel > Administrativ e Tools > Local Security Policy to open the Local Security S ettings dialog.
Chapter 9 : Security Management 200 To add (append) rules: 1. Type the IP address and subnet mask in the IPv4/ Mask or IPv6/Prefix Length field. Note: The IP address sho uld be entered using CID R (Classless Inter-Domain Routing notat ion, in which the first 24 bit s are used as a network address).
Chapter 9 : Security Management 201 3. You are prompted to confi rm the deletion. Click OK. SSL Certificates The KSX II uses the Secure S ocket Layer (SSL) prot ocol for any encrypted network traffic betwee n itself and a connected client.
Chapter 9 : Security Management 202 b. Organizational unit - This field is u sed for specifying t o which department within an organization the KSX II belongs. c. Organization - The name o f the organization to which the KSX II bel ongs. d. Locality/City - The city where t he organization is locate d.
Chapter 9 : Security Management 203 Note: The CSR and the private key file a re a matched set and should be treated accordingly. If the sig ned certificate is not matched with the private key used to gen erate the original CSR, t he certificate will not be useful.
Chapter 9 : Security Management 204 4. If needed, change the banner titl e. This information will be displayed to users as part of the ban ner. Up to 64 characters ca n be used. 5. Edit the information in the Restri cted Services Banner Message text box.
205 In This Chapter Maintenance Features (Lo cal/Remote Console) ................................ ... 205 Audit Log ................................................................................................ 206 Device Information ...............
Chapter 10 : Maintenance 206 Audit Log A log is created of the KS X II system events. To view the audit log for your KSX II: 1. Choose Maintenance > Audit Log. The Audit Log page opens. The Audit Log page displa ys events by date and time (most r ecent events listed first).
Chapter 10 : Maintenance 207 Device Information The Device Information pa ge provides detailed info rmation about your KSX II device and the CIM s in use. This information i s helpful should you need to contact Raritan Te chnical Support. To view information abo ut your Dominion KSX II and CIMs: Choose Maintenance > Dev ice Information.
Chapter 10 : Maintenance 208 Backup and Restore From the Backup/Restore page, you can backup and resto re the settings and configuration for your KSX II. In addition to using backup and re store for business continuity pur poses, you can use this featu re as a time-saving mechanism.
Chapter 10 : Maintenance 209 If you are using Internet Expl orer 6 or higher, to backup y our KSX II: 1. Click Backup. A File Downl oad dialog appears that co ntains an Open button. Do not click Open. In IE 6 and higher, IE is used as the default application t o open files, so you are prompted to open t he file versus save the file.
Chapter 10 : Maintenance 210 2. Navigate to and select the appropriate backup file an d click Open. The selected file is listed in the Restore File field.
Chapter 10 : Maintenance 211 Note: If an error or warning is dis played during the upload pr ocess (for example. overwriting an exi sting custom profile), you m ay continue with the upload by clicking Upload or cancel it by clicking o n Cancel. To delete a custom profile to y our KS X II: 1.
Chapter 10 : Maintenance 212 Upgrading CIMs Use this procedure to upg rade CIMs using t he firmware versions st ored in the memory of your KSX II device. In general, all CIM s are upgraded when you upgrade the dev ice firmware using t he Firmware Upgrade page.
Chapter 10 : Maintenance 213 To upgrade your KSX II: 1. Locate the appropriate Rari tan firmware distribution f ile (*.RFP), found on the Raritan Firmware U pgrades webpage: http://www.raritan.com/sup port/firmwareupgrad es and download the file. 2. Unzip the file.
Chapter 10 : Maintenance 214 8. Click Upgrade and wait for the upgrade to complete. S tatus information and progress b ars are displayed during t he upgrade.
Chapter 10 : Maintenance 215 Upgrade History The KSX II provides inform ation about upgrades performed on the KSX II and attached CIMS. To view the upgrade history : Choose Maintenance > Upgra de History.
Chapter 10 : Maintenance 216 To reboot your KSX I I: 1. Choose Maintenance > Reboot. The Reboot page opens. 2. Click Reboot. You are prom pted to confirm the action .
Chapter 10 : Maintenance 217 Stopping CC-SG Management While the KSX II is under CC-SG ma nagement, if y ou try to access the device directly, you are notified that it the device is un der CC-SG management.
Chapter 10 : Maintenance 218 3. Click Yes to remove the device C C-SG management. Once CC-S G management has ended, a confi rmation will be displayed..
219 The Diagnostics pages a re used for troubleshooting a nd are intended primarily for the administra tor of the KSX II device. All of the Diagnostics pages (except Device Diag nostics) run standard net working commands and the information that is displayed is the output of thos e commands.
Chapter 11 : Diagnostics 220 Network Interface Page The KSX II provides inform ation about the status of yo ur network interface. To view information abo ut your network interface : Choose Diagnostics > Net work Interface. The Net work Interface page opens.
Chapter 11 : Diagnostics 221 Statistics - Produces a page similar to the one displayed here. Interfaces - Produces a pa ge similar to the one displ ayed here.
Chapter 11 : Diagnostics 222 Route - Produces a page simila r to the one displayed here. 3. Click Refresh. The relevant inf ormation is displayed in t he Result field. Ping Host Page Ping is a network tool used to test whether a particul ar host or IP address is reachable acro ss an IP network.
Chapter 11 : Diagnostics 223 2. Type either the hostname o r IP address into the Hostname or I P Address field. 3. Click Ping. The results of the ping are displayed in the Result field. Trace Route to Host Page Trace route is a network tool use d to determine the route taken t o the provided hostname or IP address.
Chapter 11 : Diagnostics 224 Device Diagnostics Note: This page is for use by Raritan field enginee rs or when you are directed by Raritan Techni cal Support. Device Diagnostics downlo ads the diagnostics information f rom KSX II to the client machine.
Chap ter 11 : Diagnostics 225 f. Send this file to Rarita n Technical Support usi ng step 4. 3. To create a diagnostics file to send to Raritan Technical Support: a. Click the Save to File button. The File Download dialog appe ars. b. Click Save. The Save As dialog ap pears.
226 In This Chapter Overview ................................................................................................ 227 Accessing the KSX II Using CLI ............................................................ 228 SSH Connection to the KSX II .
Chapter 12 : Command Line Interface (CLI) 227 Overview The KSX II Serial Con sole supports all serial device s such as: Servers, including Window s Server 2003 ® when using the Emergency Management Con sole (EMS-) Special A dministration Console, or SAC with BIOS redirection in the server BI OS.
Chapter 12 : Command Line Interfac e (CLI) 228 Accessing the KSX II Using CLI Access the KSX II by using one of the following methods: Telnet via IP connection SSH (Secure Shell) via IP connec.
Chapter 12 : Command Line Interfac e (CLI) 229 Telnet Connection to the KSX II Due to the lack of security, user name, password and all traffic is in clear-text on the wire. Telnet access is disabled by default . Enabling Telnet If you wish to use Telnet to ac cess the KSX II, first access the KSX II from the CLI or a browser.
Chapter 12 : Command Line Interfac e (CLI) 230 Port Settings Ensure that the port settin gs (serial communication parameters) are configured as follows: Data bits = 8 Parity = None Stop bits =1 Flow Control = None Bits per second = 9600 Logging On To log in, enter the user name admin as sho wn: 1.
Chapter 12 : Command Line Interface (CLI) 231 After reviewing the followin g Navigation of the CLI (on page 2 32 ) section, perform the Initial Configuration tasks.
Chapter 12 : Command Line Interfac e (CLI) 232 login as: Janet Password: Authentication successful. ---------------------------------------------------- ------------ Welcome to the KSX II [Model: KSX2] UnitName:KSX II Firmware Version:3.0.0.5.1 Serial:WACEA00008 IP Address:192.
Chapter 12 : Command Line Interface (CLI) 233 CLI Syntax -Tips and Shortcuts Tips Commands are listed in al phabetical order. Commands are not case sensitiv e. Parameter names are singl e word without underscore . Commands without arguments default to show current sett ings for the command.
Chapter 12 : Command Line Interfac e (CLI) 234 Initial Configuration Using CLI Note: These steps, which use the CLI, are optional since the same configuration can be done via K VM. See Getting Started f or more information. KSX II devices come from t he factory with default fact ory settings.
Chapter 12 : Command Li ne Interface (CLI) 235 The KSX II now has the b asic configuration and can be accessed remotely via SSH, GUI, or locally using the local serial port. The administrator needs to co nfigure the users and groups, servi ces, security, and serial ports to which the serial targets ar e attached to the KSX II.
Chapter 12 : Command Line Interfac e (CLI) 236 Security Issues Elements to consider when addr essing security for co nsole servers: Encrypting the data traffic sent between the operator console and the KSX II device. Providing authentication and autho rization for users.
Chapter 12 : Command Line Interface (CLI) 237 Port Sharing Using CLI It is possible for access clie nt users to share ports with other authenticated and authorized users, regardless of whether they are access client users (RS C) or SSH/Telnet users. Port sharing is used for training or for troubleshooti ng applications.
Chapter 12 : Command Line Interfa ce (CLI) 238 Interface Command The Interface command is used to configure the KS X II network interface. The syntax of the interface command is: interface [ipauto <.
Chapter 12 : Command Line Interface (CLI) 239 Connect Commands The connect commands p rovide a means to access ports and their history. Command Description connect Connect to a port. The po rt sub-menu, reached using escape key sequence. clearhistory Clear history buffer for this port.
Chapter 12 : Command Line Interfac e (CLI) 240 IPv6 Command Use the IPv6_command to set I Pv6 network paramet ers and retrieve existing IPv6 parameters.
241 In This Chapter Overview ................................................................................................ 241 Using the KSX II Local Consol e ............................................................ 241 KSX II Local Console I nterface .
Chapter 13 : KSX II Local Console 242 KSX II Local Console Interface When you are located at t he server rack, the K SX II provides standard KVM management and ad ministration via the KSX I I Local Console.
Chapter 13 : KSX II Local Console 243 Local Console Smart Card Access To use a smart card to acces s a server at the Local Con sole, plug a USB smart card reader into the KS X II using one of the USB ports located on the KSX II. Once a smart card r eader is plugged in or unplu gged from the KSX II, the KSX I I autodetects it.
Chapter 13 : KSX II Local Console 244 To update the Card Read ers Detected list: Click Refresh if a new smart card has been mounted. The C ard Readers Detected li st will be refreshed to reflect the newly added smart card reader.
Chapter 13 : KSX II Local Console 245 3. Click OK. The USB profile will be applied to the local port and will appear in the Profile In Use field. Available Resolutions The KSX II Local Console provid .
Chapter 13 : KSX II Local Console 246 Port Access Page (Local Console Server Display) After you login to the KSX II Local Console, the Port Acces s page opens. This page lists all of the KS X II ports, the connected KVM target servers, and their status and availa bility.
Chapter 13 : KSX II Local Console 247 In addition to the Port Number, Port Name, Status, T ype, and Availability, a Group column is als o displayed on the View by Group tab. This column contains the p ort groups that are available. 3. Click the Port Name of the target server you want to a ccess.
Chapter 13 : KSX II Local Console 248 The KVM and serial target servers are initially sorted by Port Number; you can change the displa y to sort on any of the columns. Port Number - Numbered f rom 1 to the total number o f ports available for the KSX II .
Chapter 13 : KSX II Local Console 249 Standard servers Connect key action Key sequence example the local port GUI connected to target): Double Click Scroll Lock Blade chassis Connect key action Ke.
Chapter 13 : KSX II Local Consol e 250 Language Regions Keyboard layout US English International United States of America a nd most of English-speaking countries: for example, Netherlands US Keyboard layout UK English United Kingdom UK layout keyboard Chinese Traditional Hong Kong S.
Chapter 13 : KSX II Local Console 251 Sun key Local port key combination Undo Ctrl + Alt +F4 Stop A Break a Front Ctrl + Alt + F5 Copy Ctrl + Alt + F6 Open Ctrl + Alt + F7 Find Ctrl + Alt + F9 Cut Ctr.
Chapter 13 : KSX II Local Console 252 Local Port Administration The KSX II can be managed by either t he KSX II Local Console or the KSX II Remote Console. Note that the KSX II Local C onsole also provides access to: Factory Reset Local Port Settings Note: Only users with administrative p rivileges can access thes e functions.
Chapter 13 : KSX II Local Console 253 Note: Keyboard use for Chi nese, Japanese, and Korean is for display only. Local lang uage input is not supported at this time f or KSX II Local Console f unctions.
Chapter 13 : KSX II Local Console 254 Note: If you initially choose not to ignore CC Manage m ode on the local port but later want local port access, you will ha ve to remov e the device from under C C-SG management (from within CC-SG). You will then be able to ch eck this checkbox.
Chapter 13 : KSX II Local Console 255 KSX II Local Console Factory Reset Note: This feature is avail able only on the KSX I I Local Console. The KSX II offers several t ypes of reset modes from t he Local Console user interface. Note: It is recomm ended that you save the audit log prior to pe rforming a factory reset.
Chapter 13 : KSX II Local Console 256 Resetting the KSX II Using the Reset Button On the back panel of the d evice, there is a Reset button. It is recessed to prevent accidental reset s (you will need a pointed obj ect to press this button ).
257 In This Chapter Certified Modems for UNIX , Linux and MPC ......................................... 257 Low Bandwidth KVM Settings ............................................................... 258 Client Dial-Up Networking Config uration .......
Chapter 14 : Modem Configuration 258 Low Bandwidth KVM Settings Following are the settings t hat Raritan recommends in order to achieve optimum performance whe n using KVM over lo w bandwidth speeds typical of DSL connection s. This information applies to both virtual KVM and MPC.
Chapter 14 : Modem Configuration 259 Setting To achieve optimum perform ance: Select the "Quick sense video mo de" radio to enabl e this option. Client Dial-Up Networking Configuration Configuring Microsoft Win dows ® Dial-Up Networking for use with KSX II allows configuration of a PC t o reside on the same P PP network as the KSX II.
Chapter 14 : Modem Configuration 260 2. Double-click the Make New Connection icon when the Network and Dial-Up Connections window app ears. 3. Click Next and follow the steps in the Network Connect ion Wizard dialog to create custom dia l-up network profiles.
Chapter 14 : Modem Configuration 261 4. Click the Dial-up to private network radio button and cl ick Next. 5. Select the checkbox befor e the modem that you want to use to connect to the KSX I I and then click Next. 6. Type the area code and phone numb er you wish to dial in the appropriate fields.
Chapter 14 : Modem Configuration 262 7. Click the Country/region code dr op-down arrow and select the country or region from the list. 8. Click Next. The Connectio n Availability dialog appears. 9. Click the Only for myself radio butt on in the Connection Availabilit y dialog.
Chapter 14 : Modem Configuration 263 10. Click Next. The Network Connection has been create d. 11. Type the name of the Dial-up conne ction. 12. Click Finish. 13. Click Dial to connect to t he remote machine when the Dial dialog appears. A dialog indicating t hat a successful connection has b een established will appear.
Chapter 14 : Modem Configuration 264 Windows XP Dial-Up Networking Configuration 1. Choose Start > Programs > Accessories > Communi cations > New Connection Wizard. 2. Click Next and follow the steps in the New Connection Wizard to create custom dial-up network p rofiles.
Chapter 14 : Modem Configuration 265 4. Click the "Set up my connection ma nually" radio button and cli ck Next..
Chapter 14 : Modem Configuration 266 5. Click the "Connect using a dial-up modem" radio button and click Next..
Chapter 14 : Modem Configuration 267 6. Type a name to identify this particular connection in th e ISP Name field and click Next..
Chapter 14 : Modem Configuration 268 7. Type the phone number for the connection in the Pho ne number field and click Next. 8. Type your ISP information. Type the user name and password in the appropriate fields, and rety pe the password to confirm it .
Chapter 14 : Modem Configuration 269 9. Select the checkbox befor e the appropriate option be low the fields and click Next. 10. Click Finish. 11. Click Dial to connect to the remote machine when t he Dial dialog appears. A dialog indicating t hat you connected successfully appears.
270 In This Chapter Physical Specifications .......................................................................... 270 Supported Operating Systems ( Clients) ................................................ 271 Supported Operating Systems a nd CIMs (KVM Target Servers) .
Appendix A : Specifications 271 Supported Operating Systems (Clients) The following operating system s are supported on the Virtual K VM Client and Multi-Platform Client ( MPC): Client operating sy st.
Appendix A : Specifications 272 Mode Operating system Browser Windows Server 2003 ® Internet Explorer 6.0 SP1++, IE 7, IE 8 Firefox 1.06 - 3 Windows Vista ® Internet Explorer 7.0 or 8.0 Windows 7 ® Internet Explorer 7.0 or 8.0 Firefox 1.
Appendix A : Specifications 273 Supported Dominion CIMs & D2CIMs Operating system and serial devices ( where applicable) Virtual media Absolute mouse mode Intelligent mouse mode Standard mouse mod.
Appendix A : Specifications 274 Target server Supported CIMs Mouse modes 4.0 and 5.0 DCIM-USB G2 Workstation 3.0) SUSE Linux Professional 9.2 and 10 DCIM- PS2 DCIM-USB DCIM-USB G2 D2CIM-VUSB Fedora ®.
Appendix A : Specifications 275 Supported Browsers KSX II supports the followi ng browsers: Internet Explorer ® 6, 7 and 8 Firefox ® 1.5, 2.0, and 3.
Appendix A : Specifications 276 Supported Paragon CIMS and Configurations The KSX II supports the P2CIM-APS2 DUAL and P2CIM-AUSB DUAL CIMs, which provide two RJ45 connections to differe nt KVM switches. Support of these CIMs prov ides a second path to acc ess the target in the event that one of the KVM switche s is blocked or fails.
Appendix A : Specifications 277 KSX II to KSX II Guidelines The following system confi guration guidelines should be followed when you are using Paragon CI Ms in a KSX II to KSX I I configuration: Con.
Appendix A : Specifications 278 If a connection to the t arget is in place from the other KSX II, the availability is checked when a connection is attempted. Access is denied or allowed consistent with the P C-Share policy in place for the K SX II. Until that time, the availability is not be updated on the ot her K SX II.
Appendix A : Specifications 279 Paragon II operation mode Mode description Supported? indicate „available‟. PC Share A server or other device on a specific channel port can be selected and controlled by more than one user, but only one user has keyboard and mouse control at any one time.
Appendix A : Specifications 280 Supported Video Resolutions Ensure that each target ser ver's video resolution and refresh rate are supported by the KSX I I and that the signal is noninte rlaced. Video resolution and cable length a re important factor s in the ability to obtain mouse synchronization.
Appendix A : Specifications 281 Resolutions 1024x768@70 1680x1050@60Hz 1024x768@72 1920x1080@60Hz Note: Composite Sync and Sync- on -Green video require an a dditional adapter. Note: Some resolutions m ay not be available by default. If you do not see a resolution, plug in th e monitor first, rem ove the monitor and then plug in the CIM.
Appendix A : Specifications 282 Port Description HTTP, Port 80 This port can be configured as needed. See HTTP and HTTPS P ort Settings (on page 142). B y default, all requests recei ved by the KSX II via HTTP (port 80) are automatic ally forwarded to HTTPS for complete security.
Appendix A : Specifications 283 Smart Card Readers Supported and Unsuppo rted Smart Card Readers External, USB smart card readers are supported. Supported Smart Card Readers Type Vendor Model Verified USB SCM Microsystems SCR331 Verified on local and remote USB ActivIdentity ® ActivIdentity USB Reader v2.
Appendix A : Specifications 284 This table contains a list of read ers that Raritan has tested a nd found not to work with the Raritan d evice, therefore they are unsupported.
Appendix A : Specifications 285 Windows XP ® operating system t argets must be running Windo ws XP SP3 in order to use smart cards with the KSX II. If you are working with .NET 3.5 in a Windows XP env ironment on the target server, you must be using SP1.
Appendix A : Specifications 286 Fedora ® Core 10 pcsc-lite-1.4.102.3.fc10.i386 Create a Java ™ Library Link A soft link must be create d to the libpcsclite.so after up grading RHEL 4, RHEL 5 and FC 10. Fo r example, ln – s /usr/lib/libpcsclite.
Appendix A : Specifications 287 See Connectivity (on pag e 291 ) for a list of necessary KSX II hardware (adapters and/or cables) f or connecting the K SX II to common Vendor/Model combination s. Electrical Specifications Parameter Value Input Nominal Frequencies 50/60 Hz Nominal Voltage Range 100/240 VAC Maximum Current A C RMS 0.
Appendix A : Specifications 288 Port Description HTTPS, Port 443 This port is used for the act ual KVM-over- IP communication from the K SX II device to the KVM client on the user' s desktop.
Appendix A : Specifications 289 Port Description Te lnet Telnet port can be configur ed but is not recommended. The default port is 23. Target Server Connection Distance and Video Resolution The maxim.
Appendix A : Specifications 290 Network Speed Settings KSX II network speed set ting Network switch port setting Auto 1000/Full 100/Full 100/Half 10/Full 10/Half Auto Highest Available Speed 1000/Full.
Appendix A : Specifications 291 communicate, but collision s will occur Per Ethernet specification, these should be “no communication,” howeve r, note that the KSX II behavior deviates from expected be havior Note: For reliable network communication, configure the KS X II and the LAN switch to the same LAN Int erface Speed and Duplex.
Appendix A : Specifications 292 Vendor Device Console connector Serial connection CAT 5 cable Sun Netra T1 RJ - 45 CRLVR-15 cable; or CRLVR- 1 adapter and a CAT5 cable Sun Cobalt DB9M ASCSDB9F adapter and a CAT 5 cable Various Windows NT ® Go to the Support page on Ra ritan's website (www.
Appendix A : Specifications 293 RJ -45 (female) DB9 (female) 3 2 4 SHELL 5 5 6 3 7 4 8 7 DB9M Nulling Serial Ada pter Pinouts RJ -45 (female) DB9 (male) 1 8 2 1, 6 3 2 4 SHELL 5 5 6 3 7 4 8 7 DB25F Nu.
Appendix A : Specifications 294 DB25M Nulling Serial Ad apter Pinouts RJ -45 (female) DB25 (male) 1 5 2 6, 8 3 3 4 1 5 7 6 2 7 20 8 4.
295 IMPORTANT: The procedures i n this chapter should be attempted only by experienced user s. In This Chapter Returning User Group Inf ormation ........................................................ 295 Setting the Registry to Permit Write Operations to the Schem a .
Appendix B : Updating the LDAP/L DAPS Schema 296 Setting the Registry to Permit Write Operations to the Schema To allow a domain controller t o write to the schema, you mu st set a registry entry that permits schema updates. To permit write operations to the schema: 1.
Appendix B : Updating the LDAP/LDAP S Schema 297 3. Click New and then choo se Attribute. When the warni ng message appears, click Continue and t he Create New Attribute dialog appears. 4. Type rciusergroup in the C ommon Name field. 5. Type rciusergroup in the L DAP Display Name field.
Appendix B : Updating the LDAP/L DAPS Schema 298 2. Scroll to the user class in the right pane and right-click it. 3. Choose Properties from th e menu.
Appendix B : Up dating the LDAP/LDAP S Schema 299 6. Choose rciusergroup f rom the Select Schema Object list. 7. Click OK in the Select Sch ema Object dialog. 8. Click OK in the User Prope rties dialog. Updating the Schema Cache To update the schema ca che: 1.
Appendix B : Updating the LDAP/L DAPS Schema 300 3. Go to the directory where the suppo rt tools were installed. Run adsiedit.msc. The ADSI Edit window opens.
Appendix B : Updating the LDAP/LDAP S Schema 301 5. In the left pane of the window, sel ect the CN=Users folder. 6. Locate the user name whose p roperties you want to a djust in the right pane.
Appendix B : Updating the LDAP/L DAPS Schema 302 7. Click the Attribute Editor tab if it is not already open. Choose rciusergroup from the Attrib utes list. 8. Click Edit. The String Attribute Editor dialog appears. 9. Type the user group (created in the KSX II) in the E dit Attribute field.
303 In This Chapter Overview ................................................................................................ 303 Java ....................................................................................................... 303 IPv6 Support Notes .
Appendix C : Informational Notes 304 Applications Prerequisites Supported MPC Applet Requires installation of Java Cryptography Extension (JCE) Unlimited Strength Jurisdiction Policy Files + Browser Supported Firefox ® 2.
Appendix C : Informational Notes 305 The KSX II Remote Console and MPC require JRE ™ to function. Java Runtime Environment ™ (JRE) v ersion 1.6.x or higher are supported. The KSX II Remote Console checks the Java version. If the version is incorrect or outdated, y ou will be prompted to download a co mpatible version.
Appendix C : Informational Notes 306 Keyboards Non-US Keyboards French Keyboard Caret Symbol (Linux ® Clients Only) The Virtual KVM Client an d the Multi-Platform Client (MPC ) do not process the key combinati on of Alt Gr + 9 as the care t symbol (^) when using French keyboards with Linux clients.
Appendix C : Informational Notes 307 Tilde Symbol From the Virtual KVM Clie nt and the Multi-Platform Client, the key combination of Alt Gr + 2 does not produce the tilde ( ~) symbol when using a French keyboard. To obtain the tilde sy mbol: Create a macro consisting of the following commands: Press right Alt.
Appendix C : Informational Notes 308 Note: The Keyboard Indica tor should be used on Linu x systems using Gnome as a desktop envir onment. When using a Hungarian keyboa rd from a Linux client, the Latin letter U with Double Acute and the Latin letter O with Double A cute work only with JRE 1.
Appendix C : Informational Notes 309 Macintosh Keyboard When a Macintosh ® is used as t he client, the following keys on t he Mac ® keyboard are not captured by the Java ™ Runtime Environment ( JR.
Appendix C : Informational Notes 310 Fedora Resolving Fedora Core Focus Using the Multi-Platform Client (MPC), occasionally there i s an inability to log in to a KSX II device or to access KVM target serv ers (Windows ® , SUSE, and so forth). In ad dition, the Ctrl+Alt+M key c ombination may not bring up the Keyboard S hortcut menu.
Appendix C : Informational Notes 311 USB Ports and Profiles VM -CIMs and DL360 USB Ports HP ® DL360 servers have o ne USB port on the back o f the device and another on the front of the device. With the DL360, bo th ports cannot be used at the same time.
Appendix C : Informational Notes 312 USB profile help appears i n the USB Profile Help window. Fo r detailed information about specifi c USB profiles, see Available USB P rofiles (on page 105 ). Raritan provides a standard selection of USB configuration profil es for a wide range of operating sy stem and BIOS level serve r implementations.
Appendix C : Informational Notes 313 Changing a USB Profile when U sing a Smart Card Read er There may be certain circumsta nces under which y ou will need to change the USB profile for a target server.
Appendix C : Informational Notes 314 Virtual Media Dell OptiPlex and Dimen sion Comput ers From certain Dell OptiPlex ™ and Dimension computers, it may not be possible to boot a target server fr om .
Appendix C : Informational Notes 315 CC - SG Virtual KVM Client Version Not Known from CC-SG Proxy Mode When the Virtual KVM Client is launched from Command Center Secure Gateway (CC-SG) in proxy m ode, the Virtual KVM Client version is unknown. In the About Rari tan Virtual KVM Client dial og, the version is displayed as “Version Unknow n”.
316 In This Chapter General Questions ................................................................................. 316 Serial Access ......................................................................................... 318 Universal Virtual Media .
Appendix D : FAQs 317 OS - and hardware-independent - The KSX II can be used to manage servers running many pop ular operating systems, incl uding Intel ® , Sun ™ , PowerPC running Windows ® , Linux ® , Solaris ™ , etc.
Appendix D : FAQs 318 Serial Acce ss My Dominion KSX I I has just been configured w ith a network address and I can successfully ping the IP, but when I try to access it using a web bro w ser, the message reads "Page cannot be fo und or server error, contact S ystem Administrator.
Appendix D : FAQs 319 You will need to purchase a 3rd party RS232 to RS4 22/485 converter for each end (two units total) - one at the Dominion end and on e connected to the device.
Appendix D : FAQs 320 All Dominion KSX II units are S UN "break-safe" for use with S UN Solaris. I have lost my Admin pass w ord to the Dominion KSX I I.
Appendix D : FAQs 321 No. Dominion KSX II is truly "Plug- and -Play" m aking installation quick and set-up easy. It is not necessary to buy any additional cli ent software or hardware. In addition, n o special networking equi pment or design is necessary.
Appendix D : FAQs 322 Can I get the buffered off -line data from a serial port w hen using Telnet? Yes. Can I use KSX II ov er a VPN connection? Yes, KSX II fits into most a ny network configuration utilizing TCP/IP. K SX II uses standard Internet Proto col (IP) technologies fr om Layer 1 through Layer 4.
Appendix D : FAQs 323 Go to the Raritan website ( www.raritan.com) Support page to find the latest information about the KSX II serial pinouts (RJ-45).
Appendix D : FAQs 324 USB Profiles What is a USB profile? Certain servers require a specifically configured USB int erface for USB based services such as vir tual media. The USB Profile tailors the K SX II‟s USB interface to the serv er to accommodate these server specific characteristics.
Appendix D : FAQs 325 Do I need a special CIM t o use USB profiles? You must use a D2CIM-VUSB or D2CIM-DVUSB with updated firm ware. Will Raritan provide USB profiles for other target server configurations? Raritan will provide new USB profiles to suit customer nee ds.
Appendix D : FAQs 326 IPv6 Networking What is IPv6? IPv6 is the acronym for “Int ernet Protocol Version 6”. IPv6 is the “next generation” IP protocol which will replace the current I P Version 4 (IPv4) protocol. IPv6 addresses a number of problems in IPv4, such as the limited number of IPv4 addresses .
Appendix D : FAQs 327 Where can I get more information on IPv6? See www.ipv6.org for general inf ormation on IPv6. The KSX II User Guide describes the KSX I I‟s support for IPv6.
Appendix D : FAQs 328 Speed Description Time 60Mbps Likely practical 100Mbit network speed 0.08 seconds 10Mbps Theoretical 10Mbit network sp eed .4 seconds 6Mbps Likely practical 10Mbit network speed .
Appendix D : FAQs 329 Ethernet and IP Networking Does the KSX II offer dua l gigabit Ethernet ports to prov ide redundant fail-over, or load balancing? Yes.
Appendix D : FAQs 330 Use case Required bandwidth Idle Windows Desktop 0 Mbps Navigate Start Menu 0.49Mbps Scroll an Entire Page of Text 1.23Mbps Run 3D Maze Screensaver 1.
Appendix D : FAQs 331 What is the slowest connect ion (lowest bandwidth) over w hich the KSX II can operate? (Shared) 33Kbps or above is recom mended for acceptable KSX II performance over a modem connection .
Appendix D : FAQs 332 If an external authentication se rver (such as LDAP/LDAP S, Active Directory, RADIUS, and so forth) is used, the KSX II allows this as well, and will even failover to its own inte rnal authentication should the external authentication se rver become unavailable.
Appendix D : FAQs 333 Servers Does the KSX II depend on a Windows ® server to opera te? No. The KSX II is completel y independent. Even if a user chooses to configure the KSX II t o authenticate agai.
Appendix D : FAQs 334 Blade Servers Can I connect blade servers to t he KSX II? Yes. The KSX II supports popul ar blade server model s from the leading blade server manufacturer s: HP ® , IBM ® and Dell ® .
Appendix D : FAQs 335 For KX II's, Raritan recommend s connecting up to tw o times the number of remote connections sup ported by the device. For example, with a KX2 -216 with two remote channels, we recommend connecting u p to 4 blade server chassis.
Appendix D : FAQs 336 Installation Besides the device itself, what do I need to orde r from Raritan to install the KSX II? Each server that connects to the KSX II requires a D ominion Computer Interface Module (CIM), a s erial cable adapter, an d an adapter that connects directly to t he keyboard, video, and mouse p orts of the server.
Appendix D : FAQs 337 The KSX II models range fr om 4 to 8 server ports in a 1U c hassis. This is the industry's highest digital KVM switch port density.
Appendix D : FAQs 338 Local Po rt Can I access my serv ers directly from the rack? Yes. At the rack, the KSX I I functions just like a traditio nal KVM switch - allowing control of up to 16 serv ers using a single keyb oard, monitor, and mouse. When I am using the local port, do I prevent other users from accessing servers remotely ? No.
Appendix D : FAQs 339 Yes. The local port present ation is identical and completely in sync with remote access clients, as well as Raritan's optional CommandCenter Secure Gateway management devic e.
Appendix D : FAQs 340 Power Control Does the power supply used by the KSX II automa tically detect voltage settings? Yes. The KSX II's power supply can be used in AC voltage r anges from 100 -240 volts, at 50-60 Hz.
Appendix D : FAQs 341 Scalability How do I connect multipl e KSX II devices togethe r into one solution? Multiple KSX II devices do not need to be physically c onnected together.
Appendix D : FAQs 342 Security Is the KSX II FIPS 140-2 Certified ? The KX II 2.2.0 and later, and t he KSX II 2.3.0 and later, provid es users with the option to use an embed ded FIPS 140-2-validated cryptogr aphic module running on a Linux platform per FIPS 140-2 impleme ntation guidelines.
Appendix D : FAQs 343 Yes, the KSX II has admini strator-configurable, strong password checking to ensure that u ser-created passwords meet corporate and/or government standards and are r esistant to brute force hacking.
Appendix D : FAQs 344 Smart Cards and CAC Authentication Does the KSX II support smart c ard and CAC auth entication? Yes, smart cards and DoD Comm on Access Card (CA C) authentication to target servers is support ed in release KX I I 2.1.10 and later, and KSX II 2.
Appendix D : FAQs 345 Managability Can the KSX II be rem otely managed and configur ed via web browser? Yes, the KSX II can be co mpletely configured remotely via web browser. Note that this does require that the workstation have an appropriate Java Runtime Environment (JRE) v ersion installed.
Appendix D : FAQs 346 Miscellaneous What is the KSX II's defaul t IP address? 192.168.0.192 What is the KSX II's defaul t user name and pass w ord? The KSX II's default user n ame is admin and the defa ult password is raritan [all lower case].
347 A A. AC Power • 23 Absolute Mouse Mode • 72 Accessing a Target Server • 251 Accessing Telnet from a W indows PC • 229 Accessing the KSX II Using CLI • 228 Accessing Virtual Media on a Wi.
Index 348 Connectivity • 287, 291 Create User Groups and User s • 35 Creating a New Attribute • 296 D D. KVM Target Server Port s • 25 DB25F Nulling Serial Adap ter Pinouts • 293 DB25M Nulli.
Index 349 J Java • 303 Java Runtime Environment (JRE) • 304 K Key Combinations and the Java Runtime Environment (JRE) • 308 Keyboard Language Preference ( Fedora Linux Clients) • 3 07 Keyboard.
Index 350 Ping Host Page • 222 Port Access Page • 43 Port Access Page (Local Con sole Server Display) • 246 Port Action Menu • 44, 247 Port Group Management • 188 Port Keywords • 186 Port .
Index 351 Supported Blade Chassis Model s • 162, 164, 168, 175 Supported Browsers • 275 S upported CIMs for Blade Chassis • 176 Supported Keyboard Langu ages • 249 Supported Operating Systems .
U.S./Canada/Latin Americ a Monday - Friday 8 a.m. - 6 p.m. ET Phone: 800- 724 -8090 or 732- 764 -8886 For CommandCenter NOC: Press 6, then Press 1 For CommandCenter Secure Gateway: Press 6, then Press 2 Fax: 732-764-8887 Email for CommandCenter NOC: tech-ccnoc@raritan.
Un punto importante, dopo l’acquisto del dispositivo (o anche prima di acquisto) è quello di leggere il manuale. Dobbiamo farlo per diversi motivi semplici:
Se non hai ancora comprato il Raritan DOMINION KSX II è un buon momento per familiarizzare con i dati di base del prodotto. Prime consultare le pagine iniziali del manuale d’uso, che si trova al di sopra. Dovresti trovare lì i dati tecnici più importanti del Raritan DOMINION KSX II - in questo modo è possibile verificare se l’apparecchio soddisfa le tue esigenze. Esplorando le pagine segenti del manuali d’uso Raritan DOMINION KSX II imparerai tutte le caratteristiche del prodotto e le informazioni sul suo funzionamento. Le informazioni sul Raritan DOMINION KSX II ti aiuteranno sicuramente a prendere una decisione relativa all’acquisto.
In una situazione in cui hai già il Raritan DOMINION KSX II, ma non hai ancora letto il manuale d’uso, dovresti farlo per le ragioni sopra descritte. Saprai quindi se hai correttamente usato le funzioni disponibili, e se hai commesso errori che possono ridurre la durata di vita del Raritan DOMINION KSX II.
Tuttavia, uno dei ruoli più importanti per l’utente svolti dal manuale d’uso è quello di aiutare a risolvere i problemi con il Raritan DOMINION KSX II. Quasi sempre, ci troverai Troubleshooting, cioè i guasti più frequenti e malfunzionamenti del dispositivo Raritan DOMINION KSX II insieme con le istruzioni su come risolverli. Anche se non si riesci a risolvere il problema, il manuale d’uso ti mostrerà il percorso di ulteriori procedimenti – il contatto con il centro servizio clienti o il servizio più vicino.
