Instruction/ maintenance manual of the product DKSXII-V2.3.0-0D-E Raritan Computer
Go to page of 362
Copyright © 2010 Raritan, Inc. DKSXII-v2.3.0- 0D - E December 2010 255 - 62 - 4030 - 00 Dominion KSX II User Guide Release 2.3.0.
This document contains p roprietary information that is protected by copyright. A ll rights reserved. No part of this document may be photo copied, reproduced, or t ranslated into another lan guage without express prior written con sent of Raritan, Inc.
iii Contents Chapter 1 Introduction 1 KSX II Overview ............................................................................................................................. 2 What's New in Help .............................................
Contents iv Connection Information ..................................................................................................... 60 Keyboard Options ..............................................................................................
Contents v Adding a New User Grou p ............................................................................................... 114 Modifying an Existing User Grou p .................................................................................
Contents vi Encryption & Share .......................................................................................................... 193 Enabling FIPS 140-2 .....................................................................................
Contents vii CLI Prompts ............................................................................................................................... 234 CLI Commands .................................................................................
Contents viii Resetting the KSX II Using the Reset Button ............................................................................ 254 Chapter 14 Modem Configuration 256 Certified Modems for UNIX , Linux and MPC ................................ ..
Contents ix Setting the Registry to Permit Write Operations to the Schema ............................................... 295 Creating a New Attribute ....................................................................................................
Contents x Appendix D FAQs 314 General Questions ..................................................................................................................... 315 Serial Access ..................................................................
1 In This Chapter KSX II Overview ........................................................................................ 2 What's New in Help ................................................................................... 4 KSX II Help ....
Chapter 1 : Introduction 2 KSX II Overview Raritan's Dominion KSX II is an ente rp rise-class, secure digital de vice that provides a single integ rated solution for remote KVM (keyboard, video, mouse) server access a nd serial device manageme nt, as well as power control from anywh ere in the world from a we b browser.
Chapter 1 : Introduction 3 Diagram key Cat5 cable Remote virtual media USB drive(s) Computer Interface Module (CIM) Rack PDU (power strip) KSX II Local access Remote KVM and serial devices IP LAN/WAN .
Chapter 1 : Introduction 4 What's New in Help The following information has be en added based on enhance ments and changes to the equipment and/or user documentation . You are able to configure HTTP and/or HTTPS ports used by the KSX II. See HTTP and HTTPS Port Settings (on page 141 ).
Chapter 1 : Introduction 5 KSX II Help The KSX II help provides infor mation on how to install, set up, and configure the KSX II. It also includes information on accessing t arget servers and power strips, u sing virtual media, managi ng users and security, and maintaining a nd diagnosing the KSX II.
Chapter 1 : Introduction 6 Virtual Media All KSX II models suppo rt virtual media. The benefits of vi rtual media - mounting of remote drives/media o n the target server to support software installation and diagnosti cs - are now available in all of the K SX II models.
Chapter 1 : Introduction 7 KSX II 144 and 188 CIM Serial Adapter Product Features Hardware KVM and serial remote acc ess over IP 1U rack-mountable; bracket s included DKSX2-144 - 4 serial/4 KVM server ports DKSX2-188 - 8 serial/8 KVM server ports 1 KVM channel shareable by 8 users, multiple serial u sers.
Chapter 1 : Introduction 8 Software Virtual media with D2CIM-VUSB and D 2C IM-DVUSB CIMs Absolute Mouse Synchroni zation with D2CIM-VUSB CIM and D2CIM-DVUSB CIMs Plug-and-Play W eb -ba.
Chapter 1 : Introduction 9 Item Description USB port Remote indicator light LAN1 and LAN2 indicato r lights Power indicator light.
Chapter 1 : Introduction 10 Item Description AC power cord plug See Power Control (on page 158 ) for additional information. Power on/off switch LAN 3 port Note: The LAN 3 port is rese rved for future use. LAN1 and LAN2 ports See Step 3: Connect the Equipment (on page 25 ) for additional information.
Chapter 1 : Introduction 11 Terminology This manual uses the following t erminology for the components of a typical KSX II configuratio n:.
Chapter 1 : Introduction 12 Diagram key TCP/IP IPv4 and/or IPv6 KV M (Keyboard, Video, Mouse) UTP Cable (Cat5/5e/6) KSX II Local Access Console Local User - an optional user co nsole (consisting of a .
Chapter 1 : Introduction 13 Diagram key serial port connected remotely via KSX II. Routers Dominion PX Rack PDU (Power Strip) Raritan rack PDUs accessed rem otely via the KSX II. Package Contents Each KSX II ships as a f ully-configured stand-alone product in a standard 1U 19" rackmoun t chassis.
14 In This Chapter Overview .................................................................................................. 14 Default Login Information ........................................................................ 14 Getting Started ...
Chapter 2 : Installation and Configuration 15 Getting Started Step 1: Configure KVM T arget Servers KVM target servers are t he computers that will be a ccessed and controlled via the KSX II. Before installing the KSX I I , configure all KVM target servers to ensure opt imum performance.
Chapter 2 : Installation and Configuration 16 Operating System Mouse and Video Settings This section provides v ideo mode and mouse inf ormation specific to the operating system in use o n the target server.
Chapter 2 : Installation and Configuration 17 Windows Vista Settings To configure KVM target servers running Windows Vista ® operating system: 1. Configure the mouse settin gs : a. Choose Start > Settings > Control Panel > Mouse. b. Select "Advanced system settings" from the left navigation panel.
Chapter 2 : Installation and Configuration 18 Set the mouse motion speed sett ing to exactly the middle speed. Disable the "Enhanced poi nter precision" option. Click OK. 2. Disable animation and fade effects: a. Select Control Panel > Syst em and Security.
Chapter 2 : Installation and Configuration 19 Deselect the "Use the follo wing transition effect for menu s and tooltips" option. 3. Click OK and close the Control P anel. Linux Settings (Red Hat 4) Note: The following setting s are optimized for Standard Mou se mode only.
Chapter 2 : Installation and Configuration 20 SUSE Linux 10.1 Settings Note: Do not attempt to synchronize the m ouse at the SUSE Linux ® login prompt. You must be con nected to the target server t o synchronize the mouse cursors. To configure the mouse s ettings: 1.
Chapter 2 : Installation and Configuration 21 Tip: If you do not want to b e prompted upon log out, follow the se procedures instead. To make your settings pe rmanent in Linux (no pro mpt): 1. Choose Desktop > Control Ce nter > System > Sessio ns.
Chapter 2 : Installation and Configuration 22 Display resolution Vertical refresh rate Aspect ratio 1280 x 1024 60,75,85 Hz 5:4 1152 x 864 75 Hz 4:3 1024 x 768 60,70,75,85 Hz 4:3 800 x 600 56,60,72,75,85 Hz 4:3 720 x 400 85 Hz 9:5 640 x 480 60,72,75,85 Hz 4:3 3.
Chapter 2 : Installation and Configuration 23 4. Set the Threshold slider to 1.0. 5. Click OK. Accessing the Command Line 1. Right click. 2. Ch oose Tools > Te rminal.
Chapter 2 : Installation and Configuration 24 IBM AIX 5.3 Settings Follow these steps to configure KVM target servers running IBM ® AIX ™ 5.3. To configure the mouse: 1. Go to Launcher. 2. Choose Style Manager. 3. Click Mouse. The Style Manage r - Mouse dialog appears.
Chapter 2 : Installation and Configuration 25 To take advantage of the KSX I I: The firewall must allo w inbound communicatio n on: Web-access capabilities Port 443 - standard TCP p ort for HTTPS communication Automatic redirection of HTTP requests to HTTPS (so the more common “http://xxx.
Chapter 2 : Installation and Configuration 26 B. Network Port The KSX II provides two E thernet ports for failover p urposes (not for load-balancing). By default, only LAN1 is active and the autom atic failover is disabled.
Chapter 2 : Installation and Configuration 27 Connection Description Mouse Attach either a standard PS /2 mouse to the Mini-DIN6 (female) mou se port or a standard USB mouse to one of the USB Type A (female) port s.
Chapter 2 : Installation and Configuration 28 E. Rack PDU (Power Strip) To connect the Dominion PX to the KSX II: 1. Plug one end of a Cat5 cable into the Serial port on the front of the Dominion PX. 2. Connect the other end of the Cat5 cable to either the Power Ctrl.
Chapter 2 : Installation and Configuration 29 Diagram key KSX II PX serial port KSX II Power Ctrl. 1 Port or Power Ctrl. 2 Port Cat5 cable PX F. Serial Target Ports To connect a serial target to the KSX II, use a Cat5 cable with a n appropriate serial adapter.
Chapter 2 : Installation and Configuration 30 Vendor Device Console connector Serial connection Graphics Sun ™ SPARCStation DB25F ASCSDB25M adapter and a CAT 5 cable Sun Netra T1 RJ - 45 CRLVR-15 ca.
Chapter 2 : Installation and Configuration 31 5. Click Apply. 6. You will receive confirmation that the password was successfully changed. Click OK. The Po rt Access page is displayed. Note: The default passwor d can also be changed fr om the Raritan Multi-Platform Client (MPC).
Chapter 2 : Installation and Configuration 32 a. Select the IPv6 checkbox to activate the fields in the section. b. Enter a Global/Unique IP Addre ss. This is the IP address assigned to the KSX II. c. Enter the Prefix Length. This is t he number of bits used in the IPv6 address.
Chapter 2 : Installation and Configuration 33 See LAN Interface Settin gs (on page 138 ) for information in configuring this section of the Network Set tings page.
Chapter 2 : Installation and Configuration 34 Character Description Character Description . Period | Pipe sign / Forward slash } Right brace < Less than sign ~ Tilde : Colon Configuring Direct Port Access via Telnet, IP Address or SSH The information in this topi c is specific to enabling direct port access for serial targets.
Chapter 2 : Installation and Configuration 35 Configure the SSH TCP port as "7888". Once this is d one, connection to the target can be done by using “ssh – l <login> <KSX II device IP address> - p 7888 ”. 3. Click OK to save this information.
Chapter 2 : Installation and Configuration 36 Note to CC-SG Users Note to CC-SG Users If you are using the KSX II in a CC-SG configuration, perfor m the installation steps, and whe n finished, consult the CommandCenter Secure Gateway User Guide , Administra tor Guide , or Deploy ment Guide to proceed (all foun d on Raritan's website, www.
Chapter 2 : Installation and Configuration 37 Create User Groups and Users As part of the initial configuration, you must define user gr oups and users in order for users to access t he KSX II. The KSX II uses system-supplie d default user groups and allows you to create groups and specify t he appropriate permissions to suit your needs.
38 In This Chapter Interfaces ................................................................................................ . 38 Proxy Server Configuration for use with KSX II, MPC, VKC and AKC ... 52 Virtual KVM Client (VKC) ......................
Chapter 3 : Working with Target Servers 39 The following sections of the user g uide contain information about using specific interfaces to conn ect to the KSX II and manage targets: KSX II Local .
Chapter 3 : Working with Target Servers 40 KSX II Remote Console Interfac e The KSX II Remote Console is a br owser-based graphical user int erface that allows you to log in to KV M target servers and serial targ ets connected to the KSX II and t o remotely administer the KSX II.
Chapter 3 : Working with Target Servers 41 Depending on your brows er and security settings, you may see various security and certificate wa rnings. It is necessary to accept these warnings to launch the KSX II Remote Console.
Chapter 3 : Working with Target Servers 42 Interface and Navigation KSX II Console Layout Both the KSX II Remote C onsole and the KSX II Local Console interfaces provide an HTML (web-ba sed) interface for configuratio n and administration, as well as target server list and selection.
Chapter 3 : Working with Target Servers 43 Left Panel The left panel of the KSX II interface contains the follo wing information. Note that some information is co nditional and will only be displayed if you are a certain of user, are using certain features, and so on.
Chapter 3 : Working with Target Servers 44 Information Description When displayed? Connected Users The users, identified by their username and IP address, who are currently connected to the KSX II. Always Onl ine Help - User Guide Links to online help.
Chapter 3 : Working with Target Servers 45 Port Access Page After successfully logging o n to the KSX II Remote Consol e, the Port Access page appears. This page lists all of the KSX II ports, the connected KVM target se rvers, and their statu s and availability.
Chapter 3 : Working with Target Servers 46 Availability - The Availabili ty can be Idle, Connected, Busy, or Unavailable. Blade servers will have an availability of either shared or exclusive when a connectio n to that blade is in place. 3. Click View by Port, View by Group or View by Search to switch between views.
Chapter 3 : Working with Target Servers 47 Power On - Powers on the target server through the associated outlet. This option is visible only whe n there are one or mo re power associations to the target. Power Off - Powers off t he target server through the associated outlets.
Chapter 3 : Working with Target Servers 48 Managing Favorites A Favorites feature is provided s o you can organize and qui ck ly access the devices you use frequently .
Chapter 3 : Working with Target Servers 49 Note: Both IPv4 and IPv6 a ddresses are supported. Manage Favorites Page To open the Manage Favorites pa ge: Click the Manage button in the left panel. The Manage Fav or ites page appears and contain s the following: Use: To: Favorites List Manage your list of favorite devices.
Chapter 3 : Working with Target Servers 50 c. Click Save. 3. Click Refresh. The list of dev ices on the local subnet is refreshed. To add devices to y our Favorites List: 1.
Chapter 3 : Working with Target Servers 51 Adding, Deleting and Editing Favorites To add a device to y our favorites list: 1. Choose Manage > Add New Device t o Favorites. The A dd New Favorite page appears. 2. Type a meaningful description. 3. Type the IP Address/Host Name for the device.
Chapter 3 : Working with Target Servers 52 Proxy Server Configuration for use with KSX II, MPC, VKC and AKC When the use of a Proxy Server i s re quired, a SOCKS proxy must also be provided and configured on the remote client PC. Note: If the installed prox y server is only capable of the HTTP pr oxy protocol, you will not be abl e to connect.
Chapter 3 : Working with Target Servers 53 start javaw -Xmn128M -Xm x512M -XX:MaxHeapFree Ra tio=70 -XX:MinHeapFreeRatio=50 -Dsun.java2d.noddraw=tr ue -DsocksProxyHost=192.1 68.99.99 -DsocksProxyPort=1080 -classpath .sdeploy.jar;.sFoxt rot.jar;.jaws.jar;.
Chapter 3 : Working with Target Servers 54 Toolbar Note: The KX II-101 VK C interface is different from the other Dominion KX products. See VKC Too lbar for the KX II- 101.
Chapter 3 : Working with Target Servers 55 Button Button Name Description Full Screen Mode Maximizes the screen real estate to view the target server desktop. Scaling Increases or reduces the target vi deo size so you can view the entire contents of the target server window without using the scr oll bar.
Chapter 3 : Working with Target Servers 56 To power off a target serv er: 1. From the KSX II Remote Console, click the Port Ac cess tab to open it. The Port Access page open s. 2. Click the port name of the appropri ate target server. The P ort Action menu appears.
Chapter 3 : Working with Target Servers 57 After you have connected to a target server, you can change the USB profile as necessary. B y default, the profiles that appe ar under the USB Profile menu in the VKC are those that you are most likely t o use .
Chapter 3 : Working with Target Servers 58 Connection Properties The dynamic video compre ssion algorithms maintain K VM console usability under varying ban dwidth constraints. The de vices optimize KVM output not only for LAN use, but also for WAN use.
Chapter 3 : Working with Target Servers 59 100 Mb Ethernet 10 Mb Ethernet 1.5 Mb (MAX DSL/T1) 1 Mb (Fast DSL/T1) 512 Kb (Medium DSL/T1) 384 Kb (Slow DSL/T1) 256 Kb (Cable) .
Chapter 3 : Working with Target Servers 60 Connection Information To obtain information about y our Virtual KVM Client connection: Choose Connection > Con nection Info. The Connecti on Info window opens. The following information is display ed about the current conne ction: Device Name - The name of t he device.
Chapter 3 : Working with Target Servers 61 Building a Keyboard Macro To build a macro: 1. Click Keyboard > Keyboard Macros. The Keyboard Mac ros dialog appears. 2. Click Add. The Add Keyboard Ma cro dialog appears. 3. Type a name for the macro in the Keyboard Macro Name f ield.
Chapter 3 : Working with Target Servers 62 10. Click Close to close the Ke yboard Macros dialog. The macro will now appear on the Keyboard menu in the a pplication. Select the new macro on the menu to run it or us e the keystrokes you assigned t o the macro.
Chapter 3 : Working with Target Servers 63 5. Click OK. To remove a macro: 1. Choose Keyboard > Keyboard Ma cros. The Keyboard Macros dialog appears.
Chapter 3 : Working with Target Servers 64 Auto-Sense Video Settings The Auto-sense Video S ettings command forces a r e-sensing of the video settings (resolution, refresh rate) and redra ws the video screen. Note: VKC for the KX II -101 uses an icon set that differ s from the icon set used in VKC for othe r Dominion KX products.
Chapter 3 : Working with Target Servers 65 The device can filter out the elect rical interference of video output from graphics cards. Thi s feature optimizes picture q uality and reduces bandwidth. Higher sett ings transmit variant pixels only if a large color variation exi sts in comparison to the neig hboring pixels.
Chapter 3 : Working with Target Servers 66 Best possible video mode The device will perform the full Auto Sense process w hen switching targets or target r esolutions.
Chapter 3 : Working with Target Servers 67 Note: Some Sun backgro und screens, such as scr eens with very dark borders, may not center precisel y on certain Sun servers. Use a diff erent background or place a light er colored icon in the upper left corner of the screen.
Chapter 3 : Working with Target Servers 68 Using Screenshot from Target You are able to take a scre enshot of a target server using the Screenshot from Target server c ommand. You can th en save this screenshot to a file location of your choosing as a bit map, JPEG or PNG file.
Chapter 3 : Working with Target Servers 69 Changing the Maximum Refresh Rate If the video card you are u sing on the target uses cust om software and you are accessing the targ et through MPC or VKC, you may need to change the maximum refre sh rate of the monitor in order f or the refresh rate to take effect on the target .
Chapter 3 : Working with Target Servers 70 Mouse Pointer Synchronization When remotely v iewing a target server that uses a m ouse, you will see two mouse cursors: one b elonging to your remote client workstation and the other belonging to the targ et server.
Chapter 3 : Working with Target Servers 71 Additional Notes for Intelligent Mouse Mode Be sure that there are no ic ons or applications in the upper left section of the screen since that is where the synchron ization routine takes place. Do not use an animated mous e.
Chapter 3 : Working with Target Servers 72 Intelligent Mouse Mode In Intelligent Mouse mode, the device can detect the target mouse settings and synchronize t he mouse cursors accordin gly, allowing mouse acceleration on the target. Intelligent mouse mode the default for non-VM targets.
Chapter 3 : Working with Target Servers 73 Please note that mouse co nfigurations will vary on di fferent target operating systems. Cons ult your OS guidelines for furt her details. Also note that intelligent mouse synchr onization does not work with UNIX targets.
Chapter 3 : Working with Target Servers 74 2. Click the Single/Double Mouse Cursor button in the toolbar. To exit single mouse mo de: 1. Press Ctrl+Alt+O on your k eyboard to exit single mouse mode. VKC Virtual Media See the chapter on Virtual Media (on page 90 ) for complete info rmation abo ut setting up and using vi rtual media.
Chapter 3 : Working with Target Servers 75 Smart Cards For a list of supported smart cards, smart card readers, and ad ditional system requirements, see Supported and Unsuppo rted Smart Card Readers (on page 282 ). When accessing a server remotely, you will have the opportunity to select an attached smart card reader and mount it onto the server.
Chapter 3 : Working with Target Servers 76 To update the smart card in the Select Smart Card Reader dialog: Click Refresh List if a new sma rt card reader has been att ached to the client PC.
Chapter 3 : Working with Target Servers 77 US/International French (France) German (Germany) Japanese United Kingdom Korean (Korea) French (Belgium) Norwegian (Norway) .
Chapter 3 : Working with Target Servers 78 a. To configure the monitor on which the target viewer is l aunched: Select 'Monitor Client Was Laun ched from' if you want the target viewer to be launched usin g the same display as the appli ca tion that is being used on the client (for example, a web browser o r applet).
Chapter 3 : Working with Target Servers 79 Note: The Keyboard Indica tor should be used on Linu x systems using Gnome as a desktop envir onment. View Options Vi ew Toolbar You can use the Virtual KVM client with or without the toolbar display. To toggle the display of the toolbar (on and off): Choose View > View Toolb ar.
Chapter 3 : Working with Target Servers 80 Help Options About Raritan Virtual KVM Client This menu command provi des version informatio n about the Virtual KVM Client, in case you require assistance from Raritan T ec hnical Support. To obtain version information: 1.
Chapter 3 : Working with Target Servers 81 AKC Supported .NET Frame w ork, Operating Systems and Browsers .NET Framework AKC requires Windows .N ET ® version 3.5, and will work with both 3.5 and 4.0 installed. Operating Systems AKC is compatible with the followin g platforms running .
Chapter 3 : Working with Target Servers 82 Prerequisites for Using AKC In order to use AKC: Ensure the cookies from the I P address of the device t hat is being accessed are not currently being bl ocked.
Chapter 3 : Working with Target Servers 83 1. To open MPC from a client running any supported browser, ty pe http://IP-ADDRESS/mpc in to the address line, where IP-ADDRESS is the IP address of your Raritan device. MPC will open in a new window. Note: The Alt+Tab comm and will toggle between windows onl y on the local system.
Chapter 3 : Working with Target Servers 84 Opening RSC from the Remote Console To open the Raritan Serial Console (RSC) from the Remo te Console: 1. Select the Port Access tab. 2. Click the name of the seri al port you want to access for the RSC. Note: A security pop-up screen ap pears only if you used https to connect to the RSC.
Chapter 3 : Working with Target Servers 85 2. Enter the device's IP addr ess, account information, an d the desired target (port). 3. Click Start. RSC opens with a connection to the port. Note: If you experience unrecognized characters or bl ur ry pages in the RSC window due to localization su pport, try changing the font to Courier New.
86 In This Chapter Overview .................................................................................................. 86 Turning Outlets On/Off and Cycling Power ............................................. 87 Overview The KSX II allows you to co ntrol Raritan PX and RPC series rack PDU (power strip) outlets.
Chapter 4 : Rack PDU (Power Strip) Outlet Control 87 Initially, when you open the Powerstrip page, the po wer strips that are currently connected to the K SX II are displayed in the Powerstrip drop-down. Additionally, informatio n relating to the currently selected power strip is displayed.
Chapter 4 : Rack PDU (Power Strip) Outlet Control 88 5. Click OK to close the Power On confirmation dialog. T he outlet wi ll be turned on and its state will be displayed as 'on'. To turn an outlet off: 1. Click Off. 2. Click OK on the Power Off dialog.
Chapter 4 : Rack PDU (Power Strip) Outlet Control 89 2. Click OK. The outlet will then cycl e (note that this may take a few seconds). 3. Once the cycling is complete the dialog will open.
90 In This Chapter Overview .................................................................................................. 91 Prerequisites for Using Virt ual Media ...................................................... 94 Using Virtual Media via VKC and A KC in a Windows Environm ent .
Chapter 5 : Virtual Media 91 Overview Virtual media extends KVM capabilities by enabling KVM target servers to remotely access media from a client PC and network file servers. With this feature, media mount ed on a client PC and net work file servers is essentially "mounted virtual ly" by the target server.
Chapter 5 : Virtual Media 92.
Chapter 5 : Virtual Media 93 Diagram key Desktop PC CD/DVD drive KSX II USB mass storage device CIM PC hard drive Target server Remote file server (ISO images).
Chapter 5 : Virtual Media 94 Prerequisites for Using Virtual Media With the virtual media feat ure, you can mount up to two d rives (of different types) that are suppo rted by the USB profile currently applied to the target. These drives are accessible for the duratio n of the KVM session.
Chapter 5 : Virtual Media 95 Using Virtual Media via VKC and AKC in a Windows Environment Windows XP ® operating system admi nistrator and standard user privileges vary from those of the Windows Vista ® operating system and the Windows 7 ® operating system.
Chapter 5 : Virtual Media 96 Using Virtual Media With the KSX II virtual med ia feature, you can m ount up to two drives ( of di fferent types). These d rives are accessible fo r the duration of the KVM session. For example, you can mount a specific CD-ROM, use it, and then disconnect it when you are done.
Chapter 5 : Virtual Media 97 Target Server KVM target servers must s upport USB connected driv es . KVM target servers runnin g the Windows 2000 ® operating system must have all of the recent patches installed. 1. USB 2.0 ports are both fast er and preferred.
Chapter 5 : Virtual Media 98 File Server Setup (File Server ISO Images Only) Note: This feature is only r equired when using virtu al media to access file server ISO images. ISO9660 f ormat is the standard suppo rted by Raritan. However, other C D-ROM extensions may also work.
Chapter 5 : Virtual Media 99 Note: You cannot acces s a remote ISO image via virtual media using an IPv6 address due to techni ca l limitations of third-party software u sed by the by the KX, KSX or K X101 G2 device.
Chapter 5 : Virtual Media 100 Connecting to Virtual Media Local Drives This option mounts an entir e drive, which means the entire disk drive is mounted virtually onto the targ et server. Use this option f or hard drives and external drives only. It does not include network dr ives, CD-ROM, or DVD-ROM drives.
Chapter 5 : Virtual Media 101 WARNING: Enabling Read /Write access can be dangero us! Simultaneous access to the sam e drive from m ore than one entity can result in data corruption. If you do not require Write access, leave this option unselecte d. 4.
Chapter 5 : Virtual Media 102 2. For internal and external C D-ROM or DVD-ROM drives: a. Choose the Local CD/ DVD Drive option. b. Choose the drive from the Local CD/DVD Drive drop-down list. All available internal and e xternal CD and DVD drive name s will be populated in the drop-down li st.
Chapter 5 : Virtual Media 103 Disconnecting Virtual Media To disconnect the virtual media drives: For local drives, choose Vi rtual Media > Disconnect D rive. For CD-ROM, DVD-ROM, and ISO images, choose Virtual Media > Disconnect CD-ROM/ISO Im age.
104 In This Chapter Overview ................................................................................................ 104 CIM Compatibility .................................................................................. 105 Available USB Profiles .
Chapter 6 : USB Profiles 105 CIM Compatibility In order to make use of USB profiles, you must use a D2 CIM-VUSB or D2CIM-DVUSB with updated f irmware. A VM-CIM that has not had its firmware upgraded w.
Chapter 6 : USB Profiles 106 USB profile Description Restrictions: USB bus speed limited to full-speed (12 MBit/s) No virtual media support BIOS DellPowerEdge Keyboard Only Dell PowerEdge BIOS A ccess (Keyboard Only) Use this profile to have key board functionality for the Dell Powe rEdge BIOS when using D2CIM-VUSB .
Chapter 6 : USB Profiles 107 USB profile Description BIOS Generic BIOS Generic Use this profile when Gen eric OS profile does not work on th e BIOS. WARNING: USB enumeration will trigger whenever virtual media is connected or disconnected.
Chapter 6 : USB Profiles 108 USB profile Description Module D2CIM-DVUSB is connected t o the Advanced Management Module. Restrictions: Virtual CD-ROM and disk drive s cannot be used simultaneously.
Chapter 6 : USB Profiles 109 USB profile Description Installation) Use this profile for t he HP Proliant DL360/DL380 G4 series server when installing Windows 2003 S erver without the help of HP SmartSt art CD.
Chapter 6 : USB Profiles 110 USB profile Description Restrictions: Virtual CD-ROM and disk drive s cannot be used simultaneously Suse 9.2 SuSE Linux 9.
Chapter 6 : USB Profiles 111 USB profile Description Virtual CD-ROM and disk drive s cannot be used simultaneously WARNING: USB enumeration will trigger whenever virtual media is connected or disconnected.
Chapter 6 : USB Profiles 112 Mouse Modes when Using the Mac OS-X USB Profile w ith a DCIM-VUSB If you are using a DCIM-VUSB, using a Mac OS-X ® USB profile, and running Mac OS-X 10.4.9 ( or later), when you reboot you must be in Single Mouse mode to use the mou se at the Boot menu.
113 In This Chapter User Groups .......................................................................................... 113 Users ..................................................................................................... 120 Authentication Settings .
Chapter 7 : User Management 114 User Group List User groups are used with local and remote authentication (via RADIUS or LDAP/LDAPS). I t is a good idea to define user g roups before creating individual users since, whe n you add a user, you must ass ign that user to an existing user group.
Chapter 7 : User Management 115 The Group page is organized into t he following cate gories: Group, Permissions, Port Permissions, an d IP ACL. 2. Type a descriptive name fo r the new user group into the Group Name field (up to 64 character s). 3. Set the permissions for the group.
Chapter 7 : User Management 116 3. Select the appropriate permis sions. 4. Click OK. Note: See Alternate RADIUS A uthentication Settings for information on additional settings if you ar e using Alternate RADIUS A uthentication.
Chapter 7 : User Management 117 Permission Description Management authentication (LDAP/LDA PS/RADIUS), login settings Port Permissions For each server port, you can specify the access type t he group has, as well as the type of port a ccess to the virtual media an d the power control.
Chapter 7 : User Management 118 Group-Based IP ACL (Access Control List) Important: Exercise cau tion when using group-based I P access control. It is possible to be l ocked out of your KSX II if your IP address is within a range that has been denied access.
Chapter 7 : User Management 119 4. Click Insert. If the rule num ber you just typed equals an existing rule number, the new rule is pl aced ahead of the exit ing rule and all rules are moved down in the list. To replace a rule: 1. Specify the rule number yo u want to replace.
Chapter 7 : User Management 120 4. Set the IP ACL (optional). This feature limits acce ss to the KSX II device by specifying IP add resses. See Group -Base d IP ACL (Access Control List) .
Chapter 7 : User Management 121 Adding a New User It is a good idea to define u ser groups before creating K SX II users because, when you add a user, y ou must assign that user to an existing user group. Refer to Adding a New User Group (on page 114) fo r more information.
Chapter 7 : User Management 122 Modifying an Existing U ser To modify an existing us er: 1. Open the User List page by choosing User Management > User List. 2. Locate the user from among t hose listed on the User List page. 3. Click the user name. The U ser page opens.
Chapter 7 : User Management 123 Authentication Settings Authentication is the proce ss of verifying that a user i s who he says he is. Once a user is authenticated, t he user's group is used t o determine his system and port permi ssions. The user's assigned privileges determine what type of ac cess is allowed.
Chapter 7 : User Management 124 Implementing LDAP/LDAPS Remote Authentication Lightweight Directory Access Pr otocol (LDAP/LDAPS) is a networking protocol for querying and modifying directory services r unning over TCP/IP. A client starts an LDAP session by connecti ng to an LDAP/LDAPS server (thro ugh the default TCP port is 389).
Chapter 7 : User Management 125 9. In the User Search DN field, enter the Distinguished Nam e of where in the LDAP database you want to begin searching for u ser information. Up to 64 char acters can be used. An example base search value might be: cn=Users,dc=raritan,dc=com .
Chapter 7 : User Management 126 13. Select the Enable Secure LDAP checkbox if you would like to us e SSL. This will enable the E nable LDAPS Server C ertificate Validation checkbox. Secure Socket s Layer (SSL) is a cryptogr aphic protocol that allows KSX II to communi cate securely with the LDAP/LDAP S server.
Chapter 7 : User Management 127 18. The KSX II provides you with the ability to test the LDAP configuration from the Auth entication Settings page due to the complexity sometimes encounte red with successfully configuring the LDAP server and KSX II fo r remote authentication.
Chapter 7 : User Management 128 4. From the KSX II , enable and configure your A D server properly. See Implementing LDAP/LDAP S Remote Authentication. Important Notes: Group Name is case sensit ive. The KSX II provides the foll owing default groups that cannot be changed or deleted: Admin and < Unknown>.
Chapter 7 : User Management 129 8. The Timeout is recorded in secon ds and default timeo ut is 1 second, but can be changed as required. The timeout is the length of time the KSX II waits for a response from the RADIUS server before sendi ng another authentication re quest.
Chapter 7 : User Management 130 CHAP - With CHAP, authentication ca n be requested by the server at any time. CHAP p rovides more security than PAP.
Chapter 7 : User Managem ent 131 Returning User Group Informa tion via RADIUS When a RADIUS authentication at tempt succeeds, the KSX II determines the permissions for a given user based on the permissions of the user's group.
Chapter 7 : User Management 132 Attribute Data Lo g out Accounting-Request(4) Acct-Status (40) Stop(2) - Stops the accounting NAS-Port-Type (61) VIRTUAL (5) for network c onnections. NAS-Port (5) Always 0. NAS- IP -Address (4) The IP address for the KS X II.
Chapter 7 : User Management 133 User Authentication Proc ess Remote authentication follows t he process specified in the flowchart below:.
Chapter 7 : User Management 134 Changing a Password To change your pass w ord: 1. Choose User Management > Chang e Password. The Change Password page opens. 2. Type your current password in the Old Password field. 3. Type a new password in the New Password field.
135 In This Chapter Network Settings ................................................................................... 135 Device Services ..................................................................................... 140 Configuring Modem Setti ngs .
Chapter 8 : Device Management 136 Network Basic Settings These procedures describe how to assign an IP address o n the Networ k Settings page. For complet e information about all of the fields and the operation of this page, see Network Settings . To assign an IP address: 1.
Chapter 8 : Device Management 137 d. Enter the Gateway IP A ddress. e. Link-Local IP Address. This addres s is automatically assigned t o the device. It is used for ne ighbor discovery or when no route rs are present. Read-Only f. Zone ID. This identifies the device with which the ad dress is associated.
Chapter 8 : Device Management 138 See LAN Interface Settin gs (on page 138 ) for information in configuring this section of the Network Set tings page. Note: In some environments, t he default LAN Interface Speed & Duplex setting Autodetect (autonegotiator ) does not properly set the network parameters, which result s in network issues.
Chapter 8 : Device Management 139 Autodetect (default option) 10 Mbps/Half - Both LEDs blink 10 Mbps/Full - Both LEDs blink 100 Mbps/Half - Yellow LE D blinks 100 Mbps/Full - Yello.
Chapter 8 : Device Management 140 Device Services The Device Services page allows you to configure the followin g functions: Enabling Telnet Enabling SSH access Configuring HTTP and HTT Ps.
Chapter 8 : Device Management 141 HTTP and HTTPS Port Setting s You are able to configure HTTP and/or HTTPS ports used by the KSX I I . For example, if you are using t he default HTTP port 80 f or another purpose, changing the port will ensure the KSX II does not attempt to use it.
Chapter 8 : Device Management 142 Enabling Direct Port Acc ess via URL Direct port access allows u sers to bypass having to u se the device's Login dialog and Port Acces s page. This feature also provides the ability to enter a username and passwor d directly and proceed to the target if the username and passwor d is not contained in the URL.
Chapter 8 : Device Management 143 3. Click OK. Configuring Direct Port Access v ia Telnet, IP Address or SSH The information in this topi c is specific to enabling dir ect port access for serial targets.
Chapter 8 : Device Management 144 Configure the Telnet TCP Port as "7770". Once this is done, connection to the target can be done using "telnet <KSX II device IP address> 7770". Direct Port Access via SSH Port: Configure the SSH TCP port as "7888".
Chapter 8 : Device Management 145 Once you have created th e direct port access, it can be connected in a client application such as P uTTY. Following is an example of how the direct port access informat ion would appear in PuTT Y. Note that PuTT Y is not the only client applicat ion that can be used.
Chapter 8 : Device Management 146 Enabling the AKC Do w nload Server Certificate V alidation If you are using the AKC cl ient, you can choose to use the Enable AKC Download Server Certificate Validation feature or opt not to use this feature.
Chapter 8 : Device Management 147 3. Click OK. Configuring Modem Settings To configure modem sett ings: 1. Click Device Settings > Modem Set tings to open the Modem Settings page. 2. Check Enable Modem, if neede d. 3. Enter the PPP server IP address.
Chapter 8 : Device Management 148 Configuring Date/Time Settings Use the Date/Time Settings page to specify the date and t ime for the KSX II. There are two ways to do this: Manually set the date and t ime. Synchronize the date and time wit h a Network Time Protocol (N TP) server.
Chapter 8 : Device Management 149 6. Click OK. Event Management The KSX II Event Manage ment feature allows you enable and disable the distribution of system event s to SNMP Managers, the Syslog and the audit log. These events are categorized, and for each event you can determine whether you want the event sent to one or seve ra l destinations.
Chapter 8 : Device Management 150 Configuring Event Management S ettings SNMP Configuration Simple Network Management Protocol (SNMP) is a proto col governing network management and the monitoring of network device s and their functions. KSX II offers SN MP Agent support through Event Management.
Chapter 8 : Device Management 151 4. Type the Agent Community String (the device's string). An SNMP community is the group that devices and management stat ions running SNMP belong to. It helps define where inf ormation is sent. The community name is used to identify the group.
Chapter 8 : Device Management 152 Configuring Event Management - Destinations System events, if enabled, can g enerate SNMP notific ation events (traps), or can be logged to syslog or a udit log. Use the Event Management - Destinations page to select which system ev ents to track and where to send this information.
Chapter 8 : Device Management 153 SNMP Trap Configuration SNMP provides the ability to send traps, or notifications, to advise an administrator when one o r more conditions hav e been met. The followin g table lists the KSX II S NMP traps: Trap name Description cimConnected A CIM is plugged into to the KS X II port.
Chapter 8 : Device Managem ent 154 Trap name Description network. networkParameterChange d A change has been made to t he network parameters. passwordSettingsChanged Strong password settings h ave changed. portConnect A previously authenticated use r has begun a KVM session.
Chapter 8 : Device Management 155 Trap name Description userAuthenticationFailure A user attempted to log in without a correct username and/or p assword. userConnectionLost A user with an active sessi on has experienced an abnormal se ssion termination.
Chapter 8 : Device Management 156 Port Name - The name assigned t o the port. A port name displayed in black indicate s that you cannot change th e name and that the port cannot be edited; port names displayed in blue can be edited. Note: Do not use apostrop hes for the Port (CIM) Nam e.
Chapter 8 : Device Management 157 For serial ports, the Port page for serial ports is opened..
Chapter 8 : Device Management 158 Power Control Power control is configured on the Port page. The Port page op ens when you select a port that is co nnected to a target server from t he Port Configuration page. Fr om the Port page, you can make power associations and ch ange the port name to something more d escr iptive.
Chapter 8 : Device Management 159 Assigning a Name to the PX The Port page opens whe n you select a port on the Port Configuration page. The port appears on this page when connected to a Raritan remote rack PDU (power strip ). The Type and the Name f ields are prepopulated.
Chapter 8 : Device Management 160 To remove a rack PDU association : 1. Select the appropriate rack PDU from the Power Strip Name drop-down list. 2. For that rack PDU, select t he appropriate outlet from the Outlet Name drop-down list. 3. From the Outlet Name drop-down li st, select None.
Chapter 8 : Device Management 161 Configuring Blade Chass is In addition to standard servers and r ack PDUs (power strips), y ou can control blade chassis that a re plugged into a Dominion device port. Up to eight blade chassis can be managed at a given time.
Chapter 8 : Device Management 162 The use of hot key sequen ces to switch KVM access to a blade chassis is also supported. For blade chas sis that allow users t o select a hot key sequence, those option s will be provided on the P ort Configuration page.
Chapter 8 : Device Management 163 3. On the Port Configuration p age, click on the name of t he blade chassis you want to configure. The Port page will open. 4. Select the Blade Chassis radio button. The page will then display the necessary fields to configur e a blade chassis.
Chapter 8 : Device Management 164 c. Username - Enter the use rname used to access the interfa ce . Optional d. Password - Enter the pass word used to access the int erface. Optional Note: Leave the usernam e and password fields blank for DRAC, ILO, and RSA web applications or the c onnection will fail.
Chapter 8 : Device Management 165 To configure a Dell P owerEdge M1000e: 1. If you selected Dell Power Edge ™ M1000e, auto-discovery is available. Configure the bl ade chassis as applicable.
Chapter 8 : Device Management 166 The first URL link is intended f or use to connect to t he blade chassis Administration Module GU I. Note: Access to the URL li nks entered in this section of the page is governed by the blade cha ssis port permissions.
Chapter 8 : Device Management 167 b. Maximum Number of Slots - The default maximum number of slots available on the blade chas sis is automatically entered. c. Administrative Module Pri mary IP Address/Host Na me - Not applicable. d. Port Number - The default port number for the blade chassi s is 22.
Chapter 8 : Device Management 168 e. The Username Field and P assword Field, which are both optional, contain the labels that are expected to be associated with the username and password e ntries. It is in these fields you should enter the field name s for the username and password fields used on the login scree n for the web application.
Chapter 8 : Device Management 169 d. Port Number - The default port number for the blade chassi s is 22. Change the port numb er if applicable. Required f or auto-discovery mode e. Username - Enter the use rname used to access the blade chassis. Required for aut o-discovery mode f.
Chapter 8 : Device Management 170 Note: Leave the usernam e and password fields blank for DRAC, ILO, and RSA web applications or the c onnection will fail. e. The Username Field and P assword Field, which are both optional, contain the labels that are expected to be associated with the username and password e ntries.
Chapter 8 : Device Management 171 4. In the Blade Chassis Managed Li nks section of the page, you are able to configure the con nection to a blade chassis web browser interface if one is availabl e. Click the Blade Chassis M anaged Links icon to expand the section on the page.
Chapter 8 : Device Management 172 Tips for Adding a Web Browser Interface You can add a Web Brows er Interface to create a co nnection to a device with an embedded web ser ver. A Web B rowser interface can also be used to connect to any web application, such as the web application associated with an RSA, DRAC o r ILO Processor card.
Chapter 8 : Device Management 173 HP Blade Chassis Configuration (Port Group Management) The KSX II supports the aggregatio n of ports connected t o certain types of blades into a group repr esenting the blade cha ssis.
Chapter 8 : Device Management 174 3. Enter a Port Group Name. The port group name is not case sensitive and can contain up to 32 characte rs . 4. Select the Blade Server Grou p checkbox.
Chapter 8 : Device Management 175 To delete a port group: 1. Click on the Port Group M anagement page, select th e checkbox of the port group you want to delete.
Chapter 8 : Device Man agement 176 Supported CIMs for Blade Chassis The following CIMs are supported f or blade chassis being ma naged through the KSX II: DCIM- PS2 DCIM-USBG2 D2CIM-VUSB D2CIM-DVUSB Following is a table contai ning supported CIMs for each blade chassis model that the KSX I I supports.
Chapter 8 : Device Management 177 Blade chassis Connection method Recommended CIM(s) M1000e with this chassis. The iKVM is compatible wi th the following peripherals: USB keyboards, USB pointing devic es VGA monitors with DDC support. Source: Dell Chassis Man agement Controller, Firmware Version 1.
Chapter 8 : Device Management 178 Blade chassis Connection method Recommended CIM(s) one Advanced Management Module. In contrast to the standard B ladeCenter chassis, the KVM module and the Management Module in the BladeCenter T chassis are separate comp onen ts.
Chapter 8 : Device Management 179 Blade chassis Required/recommended action Slot, not by Name. iKVM may not work correctly if t his is not done. Do not designate any slots for scan operations in the iK VM GUI Setup Scan menu. iKVM may not work correctly ot herwise.
Chapter 8 : Device Management 180 Blade chassis Required/recommended action management module. The SSH port configured on t he blade chassis mana gement module and the port numb er entered on the P ort Configuration page must match. IBM KX2 Virtual Media Raritan KSX II virtual media is suppo rted only on IBM BladeCenter ® Models H and E.
Chapter 8 : Device Management 181 Configuring USB Profiles (Port Page) You choose the available USB profile s for a port in the Select USB Profiles for Port section of the Port page. The USB prof iles chosen in the Port page become the prof iles available to the user in VKC when connecting to a KVM target server from the port.
Chapter 8 : Device Management 182 Ctrl-Click to select several discontin uous profiles. 2. Click Add. The selected profiles ap pear in the Selecte d list. These are the profiles that can be used for the KVM target s erver connected to the port. To specify a preferred US B profile: 1.
Chapter 8 : Device Management 183 2. Click Remove. The select ed profiles appear in the Av ailable list. These profiles are no long er available for a KVM target server connected to this port.
Chapter 8 : Device Management 184 German (Germany) JIS (Japanese Industry Standard) Simplified Chinese Traditional Chinese Dubeolsik Hangul (Korean) German (Switzerland) Po.
Chapter 8 : Device Management 185 a. Select the Power Save Mo de checkbox. b. Set the amount of tim e (in minutes) in which Power S ave Mode will be initiated. 8. Choose the resolution for t he KSX II Local Console from the drop-down list. The browser will be r estarted when this change is made.
Chapter 8 : Device Management 186 Port Keywords Port keywords work as a fil ter. If a keyword is detected, a corresponding message be logged in a lo cal port log and a correspo nding trap will be sent via SNMP (if configur ed). Defining keywords guarantees that only messages th at contain those keywords are logged for the local port.
Chapter 8 : Device Management 187 2. Define a keyword for the f irst time, by clicking the Add but ton on the Port Keyword List page. Th e Add Keyword page will then op en. Follow steps 3 - 5 to create new keywords. 3. Type a keyword in the Ke yword field and then click t he Add button.
Chapter 8 : Device Management 188 Port Group Management This function is specific to HP blade chassis configurat ion. See HP Blade Chassis Configur ation (Port Group M anagement) (on page 173 ).
189 In This Chapter Security Settings .................................................................................... 1 89 Configuring IP Access Cont rol .............................................................. 198 SSL Certificates ........
Chapter 9 : Security Management 190 To reset back to defaults: Click Reset to Defaults. Login Limitations Using login limitations, yo u can specify restrictions for single login, password aging, and the logging o ut idle users.
Chapter 9 : Security Management 191 Limitation Description change is required. The de fault is 60 days. Log out idle users, After (1-365 minutes) Select the "Log off idle user s" checkbox to automatically disconnect us ers after the amount of time you specify in the "A fter (1-365 minutes)" field.
Chapter 9 : Security Management 192 Field Description numeric character character is required in the password. Enforce at least one printable special character When checked, at least one special character (printable) is req uired in the password. Number of restricted passwords based on histo ry This field represents the pa ssword history depth.
Chapter 9 : Security Management 193 Option Description Timer Lockout Users are denied access to the system for the specified amount of time af ter exceeding the specified number of unsuccessful logi n attempts.
Chapter 9 : Security Management 194 Encryption mode Description Auto This is the recommended option. The KSX I I autonegotiates to the highest level of encryption possible. You must select Auto in order f or the device and client to successfully negotiate the use of FIPS compliant algorithms.
Chapter 9 : Security Management 195 2. Apply Encryption Mode to KVM and Virtual Media. W hen selected, this option applies the sele cted encryption mode to both KVM and virtual media. After authentication, K VM and virtual media data is also transferred with 128-b it encryption.
Chapter 9 : Security Management 196 Checking Your Browser for AES Encryption The KSX II supports AES-256. I f you do not know if your b rowser uses AES, check with the browser manufa cturer or navigate to the https://www.fortify.net/sslchec k.html website using t he browser with the encryption method you wa nt to check.
Chapter 9 : Security Management 197 For additional security, you can al so create a new Certificate Signi ng Request once FIPS mode is activ ated. This will be cr eated using the required key ciphers. Upl oad the certificate af ter it is signed or create a self-signed certificate.
Chapter 9 : Security Managem ent 198 Configuring IP Access Contr ol Using IP access control, you can control access to your KSX II. By setting a global Access Co ntrol List (ACL) you are ensuring that your device does not respond to packet s being sent from disallowed IP addresses.
Chapter 9 : Security Management 199 4. Click Insert. If the rule # yo u just typed equals an existing rule #, the new rule is placed ahe ad of the exiting rule and all rules are moved down in the list. Tip: The rule numbers allow you to have more control ov er the order in which the rules are c reated.
Chapter 9 : Security Management 200 SSL Certificates The KSX II uses the Secure S ocket Layer (SSL) prot ocol for any encrypted network traffic between it se lf and a connected client. Wh en establishing a connection, the KSX II has to identif y itself to a client using a cryptographic certificate.
Chapter 9 : Security Management 201 j. Key length - The length of the generated key in bits. 1024 is the default. k. Select the Create a Self-Si gned Certificate checkbox (if applicable). 3. Click Create to generate th e Certificate Signing Req uest (CSR).
Chapter 9 : Security Management 202 Security Banner KSX II provides you with the abilit y to add a security banne r to the KSX II login process. This feature requires users to either a ccept or decline a security agreement before they can access the KSX II.
Chapter 9 : Security Management 203 Note: You cannot upload a text file from the local p ort..
204 In This Chapter Maintenance Features (Local/Remote Console) ................................... 204 Audit Log ................................................................................................ 205 Device Information .................
Chapter 10 : Maintenance 205 Audit Log A log is created of the KS X II system events. To view the audit log for your KSX II: 1. Choose Maintenance > Audit Log. The Audit Log page opens. Th e Audit Log page displays ev ents by date and time (most recent events listed first).
Chapter 10 : Maintenance 206 Device Information The Device Information pa ge provides detailed info rmation about your KSX II device and the CIM s in use. This information i s helpful should you need to contact Raritan Te chnical Support. To view information abo ut your Dominion KSX II and CIMs: Choose Maintenance > Dev ice Information.
Chapter 10 : Maintenance 207 Backup and Restore From the Backup/Restore page, you can backup and resto re the settings and configuration for your KSX II. In addition to using backup and re store for business continuity pur poses, you can use this featu re as a time-saving mechanism.
Chapter 10 : Maintenance 2 08 If you are using Internet Expl orer 6 or higher, to backup y o ur KSX II: 1. Click Backup. A File Downl oad dialog appears that co ntains an Open button. Do not click Open. In IE 6 and higher, IE is used as the default application t o open files, so you are prompted to open t he file versus save the file.
Chapter 10 : Maintenance 209 Full Restore - A complete r estore of the entire system. Gene rally used for traditional backup and restore purposes. Protected Restore - Everything is restored except device-specific information such as IP add ress, name, and so forth.
Chapter 10 : Maintenance 210 USB Profile Management From the USB Profile Managem ent page, you can upload custo m profiles provided by Raritan t ech support. These profiles are designed to address the needs of your t arget server ‟s configuration, in the event that the set of standard prof iles does not already address them.
Chapter 10 : Maintenance 211 As noted, you may delete a custom profile from the system while it is still designated as an active prof ile. Doing so will terminate any vi rtual media sessions that were i n place.
Chapter 10 : Maintenance 212 3. Click the Upgrade button. You are prompted to confir m the upgrade. 4. Click OK to continue the upgrade. Progress bars are displayed during the upgrade.
Chapter 10 : Maintenance 213 7. Click Upload from the Firmware U pgrade page. Information about the upgrade and version n umbers is displayed (if you opted to review CIM information, that inform ation is displayed as well) . Note: At this point, conne cted users are logged off and new login attempts are blocked.
Chapter 10 : Maintenance 214 9. As prompted, close the bro wser and wait approximatel y 5 minutes before logging on to the K SX II again. Upgrade History The KSX II provides inform ation about upgrades performed on t he KSX II and attached CIMS. To view the upgrade history : Choose Maintenance > Upgra de History.
Chapter 10 : Maintenance 215 Information is provided abo ut the KSX II upgrade(s) th at have been run, the final status of the upgrade, the start and end times, and the previous and current firmware versions. Inf ormation is also prov ided about the CIMS, which can be obtained by clicking the show link for an upg rade.
Chapter 10 : Maintenance 216 2. Click Reboot. You are prom pted to confirm the action . Click Yes to proceed with the reboot. CC Unmanage When a KSX II device is un der CommandCenter Se cure Gateway c.
Chapter 10 : Maintenance 217 Stopping CC-SG Management While the KSX II is under CC-SG ma nagement, if you try to access the device directly, y ou are notified that it the device is under CC -SG management.
Chapter 10 : Maintenance 218 3. Click Yes to remove the device C C-SG management. Once CC-S G management has ended, a confi rmation will be displayed..
219 The Diagnostics pages a re used for troubleshooting a nd are intended primarily for the administra tor of the KSX II device. All of the Diagnostics pages (except Device Diag nostics) run standard net working commands and the information that is displayed is the output of thos e commands.
Chapter 11 : Diagnostics 220 Statistics - Produces a page similar to the one displayed here. Interfaces - Produces a pa ge similar to the one displayed here.
Chapter 11 : Diagnostics 221 Route - Produces a page simila r to the one displayed here. 3. Click Refresh. The relevant inf or mation is displayed in t he Result field. Ping Host Page Ping is a network tool used to test whether a particular host or IP address is reachable acro ss an IP network.
Chapter 11 : Diagnostics 222 3. Click Ping. The results of the ping are displayed in the Result field. Trace Route to Host Page Trace route is a network tool use d to determine the route taken to t he provided hostname or IP address. To trace the route to the host : 1.
Chapter 11 : Diagnostics 223 Device Diagnostics Note: This page is for use by Raritan field engineers o r when you are directed by Raritan Techni cal Support. Device Diagnostics downlo ads the diagnostics inform ation from KSX II to the client machine.
Chapter 11 : Diagnostics 224 3. To create a diagnostics file to send to Raritan Technical Support: a. Click the Save to File butt on. The File Download dialog appe ars. b. Click Save. The Save As dialog ap pears. c. Navigate to the desired directo ry and click Save.
225 In This Chapter Overview ................................................................................................ 226 Accessing the KSX II Using CLI ............................................................ 227 SSH Connection to the KSX II .
Chapter 12 : Command Line Interfac e (CLI) 226 Overview The KSX II Serial Con sole supports all serial device s such as: Servers, including Window s Server 2003 ® when using the Emergency Management Con sole (EMS-) Special A dministration Console, or SAC with BIOS redirectio n in the server BIOS.
Chapter 12 : Command Line Interface (CLI) 227 Accessing the KSX II Using CLI Access the KSX II by using one of the following methods: Telnet via IP connection SSH (Secure Shell) via IP connect.
Chapter 12 : Command Line Interfac e (CLI) 228 Telnet Connection to the KSX II Due to the lack of security, user name, password and all traffic is in clear-text on the wire. Telnet access is disabled by default . Enabling Telnet If you wish to use Telnet to ac cess the KSX II, first acce ss the KSX II from the CLI or a browser.
Chapter 12 : Command Line Interface (CLI) 229 Port Settings Ensure that the port settin gs (serial communication parameters) are configured as follows: Data bits = 8 Parity = None Stop bits =1 Flow Control = None Bits per second = 9600 Logging On To log in, enter the user name admin as sho w n: 1.
Chapter 12 : Command Line Interfac e (CLI) 230 After reviewing the followin g Navigation of the CLI (on page 2 31 ) section, perform the Initial Configuration tasks.
Chapter 12 : Command Line Interface (CLI) 231 login as: Janet Password: Authentication successful. ---------------------------------------------------- ------------ Welcome to the KSX II [Model: KSX2] UnitName:KSX II Firmware Version:3.0.0.5.1 Serial:WACEA00008 IP Address:192.
Chapter 12 : Command Line Interfac e (CLI) 232 CLI Syntax -Tips and Shortcuts Tips Commands are listed in al phabetical order. Commands are not case sensitiv e. Parameter names are singl e word without underscore . Commands without arguments default to show current sett ings for the command.
Chapter 12 : Command Line Interface (CLI) 233 Initial Configuration Using CLI Note: These steps, which us e the CLI, are optional since the same configuration can be done via K VM. See Getting Started f or more information. KSX II devices come from t he factory with default factory settings.
Chapter 12 : Command Line Interfac e (CLI) 234 The KSX II now has the b asic configuration and can be accessed remotely via SSH, GUI, or locally using the local serial port. The administrator needs to co nfigure the users and group s, services, security, and serial ports to which the serial targets ar e attached to the KSX II.
Chapter 12 : Command Line Interfac e (CLI) 235 Security Issues Elements to consider when addr essing security for co nsole servers: Encrypting the data traffic sent between the operator co nsole and the KSX II device. Providing authentication and autho rization for users.
Chapter 12 : Command Line Interfac e (CLI) 236 Port Sharing Using CLI It is possible for access clie nt users to share p orts with other authenticated and authorized users, regardless of whether they are access client users (RS C) or SSH/Telnet users.
Chapter 12 : Command Line Interface (CLI) 237 Interface Command The Interface command is used to configure the KSX II network interface. The syntax of the interface command is: interface [ipauto <n.
Chapter 12 : Command Line Interf ace (CLI) 238 Connect Commands The connect commands p rovide a means to access ports and their history. Command Description connect Connect to a port. The po rt sub-menu, reached using escape key sequence. clearhistory Clear history buffer for this port.
Chapter 12 : Command Line Interface (CLI) 239 IPv6 Command Use the IPv6_command to set I Pv6 network parameters and retrieve existing IPv6 parameters..
240 In This Chapter Overview ................................................................................................ 240 Using the KSX II Local Consol e ............................................................ 240 KSX II Local Console I nterface .
Chapter 13 : KSX II Local Console 241 KSX II Local Console Interface When you are located at t he server rack, the K SX II provides standard KVM management and ad ministration via the KSX I I Local Console.
Chapter 13 : KSX II Local Console 242 Local Console Smart Card Access To use a smart card to acces s a server at the Local Con sole, plug a USB smart card reader into the KS X II using one of the USB por ts located on the KSX II. Once a smart card r eader is plugged in or unplugged from the KSX II, the KSX I I autodetects it.
Chapter 13 : KSX II Local Console 243 To update the Card Read ers Detected list: Click Refresh if a new smart card has been mounted. The C ard Readers Detected li st will be refreshed to reflect the new ly added smart card reader.
Chapter 13 : KSX II Local Console 244 3. Click OK. The USB profile will be applied to the local port and will appear in the Profile In Use field. Available Resolutions The KSX II Local Console provid .
Chapter 13 : KSX II Local Console 245 Port Access Page (Local Console Server Display) After you login to the KSX II Local Console, the Port Acces s page opens. This page lists all of the KS X II ports, the connected KVM target servers, and their status and availa bility.
Chapter 13 : KSX II Local Console 246 3. Click the Port Name of the target server you want to a ccess. The Port Action Menu appear s. See Port Action Menu (on page 46 ) for details on available menu option s. 4. Choose the desired menu co mmand from the Port Action Menu.
Chapter 13 : KSX II Local Console 247 Status - Th e Status is eith er up or down. To change the sort orde r: Click the column heading y ou want to sort by.
Chapter 13 : KSX II Local Console 248 Blade chassis Connect key action Key sequence example Switch between ports Switch from target port 5, slot 2 t o port 5, slot 11: Press Left ALT > Press a .
Chapter 13 : KSX II Local Console 249 Language Regions Keyboard layout Japanese Japan JIS Keyboard French France French (AZERTY) layout keyboard. German Germany and Austria German keyboard (QWERTZ lay.
Chapter 13 : KSX II Local Consol e 250 Sun key Local port key combination Compose Ctrl+ Alt + KPAD * Vol + Ctrl + Alt + KPAD + Vol - Ctrl + Alt + KPAD - Stop No key combination Power No key combination Accessing a Target Server To access a target serv er : 1.
Chapter 13 : KSX II Local Console 251 KSX II Local Console Loc al Port Settings From the Local Port Settings pa ge, you can customize many settings for the KSX II Local Console i ncluding keyboard, local p ort hot key, video switching delay, power sav e mode, local user interface resolut ion settings, and local user aut hentication.
Chapter 13 : KSX II Local Console 252 Hot key: Take this action: Double Click Caps Lock Press Caps Lock key twice quickly Double Click Left Alt key Press the left Alt key twice quickly Double Click Left Shift key Press the left Shift key twic e quickly Double Click Left Ctrl key Press the left Ctrl key twice quic kly 4.
Chapter 13 : KSX II Local Console 253 10. Click OK. To reset back to defaults: Click Reset to Defaults. KSX II Local Console Factory Reset Note: This feature is avail able only on the KSX II Loc al Console. The KSX II offers several t ypes of reset modes from the Local Console user interface.
Chapter 13 : KSX II Local Consol e 254 Full Factory Reset - Removes t he entire configuratio n and resets the device completely t o the factory defaults. Note that any management associations with Comman dCenter will be broken. Becau se of the complete nature of this reset , you will be prompted to confi rm the factory reset.
Chapter 13 : KSX II Local Console 255 2. Use a pointed object to press and h old the Reset button. 3. While continuing to hold th e Reset button, power the KSX II device back on. 4. Continue holding the Reset button for 10 seconds. Once the device has been reset, two short beeps signal its completion.
256 In This Chapter Certified Modems for UNIX , Linux and MPC ......................................... 256 Low Bandwidth KVM Settings ............................................................... 257 Client Dial-Up Networking Config uration .......
Chapter 14 : Modem Configuration 257 Low Bandwidth KVM Settings Following are the settings t hat Raritan recommends in order to achieve optimum performance whe n using KVM over low bandwidth speeds typical of DSL connection s. This information applies to both virtual KVM and MPC.
Chapter 14 : Modem Configuration 258 Setting To achieve optimum perform ance: enable this option. Client Dial-Up Networking Configuration Configuring Microsoft Win dows ® Dial-Up Networking for use with KSX II allows configuration of a PC t o reside on the same P PP network as the KSX II.
Chapter 14 : Modem Configuration 259 3. Click Next and follow the steps in the Network Connection Wizard dialog to create custom dia l -up network profiles. 4. Click the Dial-up to private network radio button and cl ick Next. 5. Select the checkbox befor e the modem that you want to use to connect to the KSX I I and then click Next.
Chapter 14 : Modem Configuration 260 6. Type the area code and phone numb er you wish to dial in the appropriate fields. 7. Click the Country/region code dr op-down arrow and select the country or region from the list. 8. Click Next. The Connectio n Availability dialog appears.
Chapter 14 : Modem Configuration 261 9. Click the Only for myself radio butt on in the Connection Availabilit y dialog. 10. Click Next. The Network Connection has been create d. 11. Type the name of the Dial-up conne ction. 12. Click Finish. 13. Click Dial to connect to the remote machine when the Dial dialog appears.
Chapter 14 : Modem Configuration 262 Note: In order to access the K SX II, the username and pass word cannot use a (backslash). 7. Click Connect. Windows XP Dial-Up Networking Configuration 1. Choose Start > Programs > Acc essories > Communicat ions > New Connection Wizard.
Chapter 14 : Modem Configuration 263 3. Click the Connect to the Intern et radio button and click Next..
Chapter 14 : Modem Configuration 264 4. Click the "Set up my connection ma nually" radio button and click Next..
Chapter 14 : Modem Configuration 265 5. Click the "Connect using a dial-up modem" radio button and click Next..
Chapter 14 : Modem Configuration 266 6. Type a name to identify this particular connection in th e ISP Name field and click Next..
Chapter 14 : Modem Configuration 267 7. Type the phone number for the connection in the Pho ne number field and click Next. 8. Type your ISP information. Type the user name and password in the appropriate fields, and rety pe the password to confirm it .
Chapter 14 : Modem Configuration 268 9. Select the checkbox befor e the appropriate option be low the fields and click Next. 10. Click Finish. 11. Click Dial to connect to the remote machine when t he Dial dialog appears. A dialog indicating t hat you connected successfully appe ars.
269 In This Chapter Physical Specifications .......................................................................... 269 Supported Operating Systems ( Clients) ................................................ 270 Supported Operating Systems a nd CIMs (KVM Target Server s) .
Appendix A : Specifications 270 Supported Operating Systems (Clients) The following operating system s ar e supported on the V irtual KVM Client and Multi-Platform Client ( MPC): Client operating sy s.
Appendix A : Specifications 271 Mode Operating system Browser Windows Server 2003 ® Internet Explorer 6.0 SP1++, IE 7, IE 8 Firefox 1.06 - 3 Windows Vista ® Internet Explorer 7.0 or 8.0 Windows 7 ® Internet Explorer 7.0 or 8.0 Firefox 1.
Appendix A : Specifications 272 Supported Dominion CIMs & D2CIMs Operating system and serial devices ( where applicable) Virtual media Absolute mouse mode Intelligent mouse mode Standard mouse mod.
Appendix A : Specifications 273 Target server Supported CIMs Mouse modes 4.0 and 5.0 DCIM-USB G2 Workstation 3.0) SUSE Linux Professional 9.2 and 10 DCIM- PS2 DCIM-USB DCIM-USB G2 D2CIM-VUSB Fedora ®.
Appendix A : Specifications 274 Supported Browsers KSX II supports the followi ng browsers: Internet Explorer ® 6, 7 and 8 Firefox ® 1.5, 2.0, and 3.
Appendix A : Specifications 275 Supported Paragon CIMS and Configurations The KSX II supports the P2CIM-APS2 DUAL and P2CIM-AUSBDUAL CIMs, which provide two RJ45 co nnections to different KV M switches. Support of these CIMs prov ides a second path to acc ess the target in the event that one of the KVM switche s is blocked or fails.
Appendix A : Specifications 276 KSX II to KSX II Guidelines The following system confi guration guidelines should be followed when you are using Paragon CI Ms in a KSX II to KSX II configuration: Conc.
Appendix A : Specifications 277 If a connection to the t arget is in place from the other KS X II, the availability is checked when a connection is attempted. Access is denied or allowed consistent with the P C-Share policy in place for the K SX II. Until that time, the availability is not be updated on the other KSX II.
Appendix A : Specifications 278 Paragon II operation mode Mode description Supported? PC Share A server or other device on a specific channel port can be selected and controlled by more than one user, but only one user has keyboard and mouse control at any one time.
Appendix A : Specifications 279 Supported Video Resolutions Ensure that each target ser ver's video resolution and refresh rate are supported by the KSX I I and that the signal is noninte rlaced. Video resolution and cable length a re important factors in t he ability to obtain mouse synchronization.
Appendix A : Specifications 280 Note: Composite Sync and Sync-on-Green video require an a dditional adapter. Note: Some resolutions m ay not be available by default. If you do not see a resolution, plug in th e monitor first, rem ove the monitor and then plug in the CIM.
Appendix A : Specifications 281 Port Description HTTP, Port 80 This port can be configured as needed. See HTTP and HTTPS P ort Settings (on page 141). B y default, all requests recei ved by the KSX II via HTTP (port 80) are automatic ally forwarded to HTTPS for complete security.
Appendix A : Specifications 282 Smart Card Readers Supported and Unsuppo rted Smart Card Readers Only USB type external smart card readers are sup ported by the KSX II. Supported Smart Card Readers Type Vendor Model Verified USB SCM Microsystems SCR331 Verified on local and remote USB ActivIdentity ® ActivIdentity USB Reader v2.
Appendix A : Specifications 283 This table contains a list of read ers that Raritan has tested with the KSX II and we know not to work, therefor e they are unsup ported.
Appendix A : Specifications 284 Windows XP ® operating system t argets must be running Win dows XP SP3 in order to use smart cards with the KSX II. If you are working with .NET 3.5 in a Windows XP env ironment on the target server, you must be using SP1.
Appendix A : Specifications 285 SuSE 11 pcsc-lite-1.4.102-1.24 Fedora ® Core 10 pcsc-lite-1.4.102.3.fc10.i386 Create a Java ™ Library Link A soft link must be created t o the libpcsclite.so after upgra ding RHEL 4, RHEL 5 and FC 10. Fo r example, ln – s /usr/lib/libpcsclite.
Appendix A : Specifications 286 Local access Local Access for “crash - cart” appli cations. See Connectivity (on pag e 290 ) for a list of necessary KSX II hardware (adapters and/or cables) f or connecting the K SX II to common Vendor/Model combination s.
Appendix A : Specifications 287 Port Description field to access the KSX I I, but while still preserving complete securi ty. HTTPS, Port 443 This port is used for the act ual KVM- over- IP communication from the K SX II device to the KVM client on the user' s desktop.
Appendix A : Specifications 288 Port Description The default is port 22. Telnet Telnet port can be configur ed but is not recommended. The default port is 23.
Appendix A : Specifications 289 Network Speed Settings KSX II network speed set ting Network switch port setting Auto 1000/Full 100/Full 100/Half 10/Full 10/Half Auto Highest Available Speed 1000/Full.
Appendix A : Specifications 290 Functions; not recommen ded NOT supported by Ethern et specification; product will communicate, but collision s will occur Per Ethernet specification, these sh ould be .
Appendix A : Specifications 291 Vendor Device Console connector Serial connection Silicon Graphics Origin CAT 5 cable Sun ™ SPARCStation DB25F ASCSDB25M adapter and a CAT 5 cable Sun Netra T1 RJ - 4.
Appendix A : Specifications 292 RJ -45 (female) DB9 (female) 1 8 2 1, 6 3 2 4 SHELL 5 5 6 3 7 4 8 7 DB9M Nulling Serial Ada pter Pinouts RJ -45 (female) DB9 (male) 1 8 2 1, 6 3 2 4 SHELL 5 5 6 3 7 4 8.
Appendix A : Specifications 293 RJ -45 (female) DB25 (female) 8 4 DB25M Nulling Serial Ad apter Pinouts RJ -45 (female) DB25 (male) 1 5 2 6, 8 3 3 4 1 5 7 6 2 7 20 8 4.
294 IMPORTANT: The procedures i n this chapter should be attempted only by experienced user s. In This Chapter Returning User Group Inf ormation ........................................................ 294 Setting the Registry to Permit Write Operations to the Schema .
Appendix B : Updating the LDAP/LDAP S Schema 295 Setting the Registry to Permit Write Operations to the Schema To allow a domain controller t o write to the schema, you mu st set a registry entry that permits schema updates. To permit write operations to the schema: 1.
Appendix B : Upd ating the LDAP/L DAPS Schema 296 3. Click New and then choo se Attribute. When the warni ng message appears, click Continue and t he Create New Attribute dialog appears. 4. Type rciusergroup in the C ommon Name field. 5. Type rciusergroup in the L DAP Display Name field.
Appendix B : Updating the LDAP/LDAP S Schema 297 2. Scroll to the user class in the right pane and right-click it. 3. Choose Properties from th e menu.
Appendix B : Updating the LDAP/L DAPS Schema 298 6. Choose rciusergroup f rom the Select Schema O bject list. 7. Click OK in the Select Sch ema Object dialog. 8. Click OK in the User Prope rties dialog. Updating the Schema Cache To update the schema ca che: 1.
Appendix B : Updating the LDAP/LDAP S Schema 299 3. Go to the directory where the suppo rt tools were installed. Run adsiedit.msc. The ADSI Edit window opens.
Appendix B : Updating the LDAP/L DAPS Schema 300 6. Locate the user name whose p roperties you want to a djust in the right pane. Right-click the user name and select Prop erties. 7. Click the Attribute Editor tab if it is not already open. Choose rciusergroup from the Attrib utes list.
301 In This Chapter Overview ................................................................................................ 301 Java ....................................................................................................... 301 IPv6 Support Notes .
Appendix C : Informational Notes 302 Applications Prerequisites Supported MPC Applet Requires installation of Java Cryptography Extension (JCE) Unlimited Strength Jurisdiction Policy Files + Browser Supported Firefox ® 2.
Appendix C : Informational Notes 303 The KSX II Remote Console and MPC require JRE ™ to function. Java Runtime Environment ™ (JRE) v ersion 1.6.x or higher are supported. The KSX II Remote Console checks the Ja va version. If the version is incorrect or outdated, y ou will be prompted to downlo ad a compatible version.
Appendix C : Informational Notes 304 Keyboards Non-US Keyboards French Keyboard Caret Symbol (Linux ® Clients Only) The Virtual KVM Client an d the Multi-Platform Client (MPC ) do not process the key combinati on of Alt Gr + 9 as the caret symbol (^) when using French keyboards with Linux clients.
Appendix C : Informational Notes 305 Tilde Symbol From the Virtual KVM Clie nt and the Multi-Platform Client, the key combination of Alt Gr + 2 does not produce the tilde (~) symbol when using a French keyboard. To obtain the tilde sy mbol: Create a macro consisting of the following commands: Press right Alt.
Appendix C : Informational Notes 306 Note: The Keyboard Indica tor should be used on Linu x systems using Gnome as a desktop envir onment. When using a Hungarian keyboa rd from a Linux client, the Latin letter U with Double Acute and the Latin letter O with Double A cute work only with JRE 1.
Appendix C : Informational Notes 307 Macintosh Keyboard When a Macintosh ® is used as t he client, the following keys o n the Mac ® keyboard are not captured by the Java ™ Runtime Environment ( JR.
Appendix C : Informational Notes 308 Fedora Resolving Fedora Core Focus Using the Multi-Platform Client (MPC), occasionally there i s an inability to log in to a KSX II device or to access KVM target serv ers (Windows ® , SUSE, and so forth). In ad dition, the Ctrl+Alt+M key c ombination may not bring up the Keyboard S hortcut menu.
Appendix C : Informational Notes 309 USB Ports and Profiles VM -CIMs and DL360 USB Ports HP ® DL360 servers have o ne USB port on the back of the device and another on the front of the device. With the DL360, bo th ports cannot be used at the same time.
Appendix C : Informational Notes 310 USB profile help appears i n the USB Profile Help window. Fo r detailed information about specifi c USB profiles, see Available USB P rofiles (on page 105 ). Raritan provides a standard selection of USB configuration profiles for a wide range of operating sy stem and BIOS level server implementations.
Appendix C : Informational Notes 311 Changing a USB Profile when U sing a Smart Card Reader There may be certain circumsta nces under which y ou will need to change the USB profile for a target server.
Appendix C : Informational Notes 312 Virtual Media Dell OptiPlex and Dimen sion Computers From certain Dell OptiPlex ™ and Dimension computers, it may not be possible to boot a target server fr om a.
Appendix C : Informational Notes 313 CC - SG Virtual KVM Client Version Not Known from CC-SG Proxy Mode When the Virtual KVM Client is launched from Command Center Secure Gateway (CC-SG) in proxy m ode, the Virtual KVM Client version is unknown. In the About Rari tan Virtual KVM Client dialo g, the version is displayed as “Version Unknow n”.
314 In This Chapter General Questions ................................................................................. 315 Serial Access ......................................................................................... 317 Universal Virtual Media .
Appendix D : FAQs 315 General Questions What is KSX II ? The KSX II is a second generatio n digital KVM (Keyboard, Video Mouse) switch that enables IT admi nistrators to access and control 8, 16, 32, or 64* servers over the netwo rk with BIOS-level functionality.
Appendix D : FAQs 316 In general, customers can continue to use their existi ng switches for many years. As their data cente rs expand, customer s can purchase and use the new KSX II models.
Appendix D : FAQs 317 Serial Access My Dominion KSX I I has just been configured w ith a network address and I can successfully ping the IP, but when I try to access it using a web bro w ser, the message reads "Page canno t be found or server error, contact S ystem Administrator.
Appendix D : FAQs 318 Can I open multiple w indows and "tile" to monito r multiple servers and other IT equipment? Yes, you may monitor and "tile" as many windows as there are serial ports on the Dominion KS X II. I manage many servers.
Appendix D : FAQs 319 I have lost my Admin pass w ord to the Dominion KSX II. Is there a back door or secret pas sword? There is no back-door password. The only option is to restore t he unit to its factory default setting s and create the administrator u se r name and password again.
Appendix D : FAQs 320 What is the name of the termi nal emulation pack age included with Dominion KSX II? Raritan Serial Console. What Authentication mechanisms do es the Dominion KSX II support? Local database, RADIUS, LDAP/S, Active Directory. Does Dominion KSX II support S NMP? Yes.
Appendix D : FAQs 321 Yes. Can I use KSX II ov er a VPN connection? Yes, KSX II fits into most a ny network configuration util izing TCP/IP. KSX II uses standard Internet Proto col (IP) technologies fr om Layer 1 through Layer 4. Set up the VPN (t ypically IPSec) connection then start the web-browser and enter the URL for the Dominion device.
Appendix D : FAQs 322 Go to the Raritan website ( www.raritan.com) Support page to find the latest information about the KSX II serial pinouts (RJ-45).
Appendix D : FAQs 323 USB Profiles What is a USB profile? Certain servers require a specifically configured USB interface for USB based services such as vir tual media. The USB Profile tailors the K SX II‟s USB interface to the serv er to accommodate these server specific characteristics.
Appendix D : FAQs 324 Do I need a special CIM t o use USB profiles? You must use a D2CIM-VUSB or D2CIM-DVUSB with updated firmware. Will Raritan provide USB profiles for other target server configurations? Raritan will provide new USB profiles to suit customer needs.
Appendix D : FAQs 325 IPv6 Networking What is IPv6? IPv6 is the acronym for “Int ernet Protocol Version 6”. IPv6 is the “next generation” IP protocol which will re place the current IP Vers ion 4 (IPv4) protocol. IPv6 addresses a number of problems in IPv4, such as the limit ed number of IPv4 addresses .
Appendix D : FAQs 326 Where can I get more information on IPv6? See www.ipv6.org for general inf ormation on IPv6. The KSX II User Guide describes the KSX I I‟s support for IPv6.
Appendix D : FAQs 327 Speed Description Time 60Mbps Likely practical 100Mbit network speed 0.08 seconds 10Mbps Theoretical 10Mbit network sp eed .4 seconds 6Mbps Likely practical 10Mbit net work speed .
Appendix D : FAQs 328 Ethernet and IP Networking Does the KSX II offer dua l gigabit Ethernet ports to prov ide redundant fail-over, or load balancing? Yes.
Appendix D : FAQs 329 Use case Required bandwidth Idle Windows Desktop 0 Mbps Move Static 400x600 Window/Dialog 0.35Mbps Navigate Start Menu 0.49Mbps Scroll an Entire Page of Text 1.
Appendix D : FAQs 330 What is the slo w est connection (lo west bandwidth) over w hich the KSX II can operate? 33Kbps or above is recom mended for acceptable KSX I I performance over a modem connection .
Appendix D : FAQs 331 If an external authentication se rver (such as LDAP/LDAP S, Active Directory, RADIUS, and so forth) is used, the KSX II allows this as well, and will even failover to its own inte rnal authentication should the external authentication ser ver become unavailable.
Appendix D : FAQs 332 Servers Does the KSX II depend on a Window s ® server to operate? No. The KSX II is completel y independent. Even if a user chooses to configure the KSX II t o authenticate agai.
Ap pendix D : FAQs 333 Are the Paragon Blade CIMs used? No, the Paragon II Blade CIM will not work with the KSX II. Which CIM should I use? It depends on the type of KVM ports on the specific m ake and model of the blade server you are u sing. The following CIM s are supported: DCIM-PS2, DCIM-USBG2, D2 CIM-VUSB and D2CIM-DVUSB.
Appendix D : FAQs 334 I'm running VM ware on some of my blade servers. Is this supported? Yes, with CC-SG you can display and access virtual machine s running on blade servers. Is virtual media supported? We support VM on IBM BladeC enter ® Model H and E with the D2CI M - DVUSB.
Appendix D : FAQs 335 Installation Besides the device itself, what do I need to orde r from Raritan to install the KSX II? Each server that connects to the KSX II requires a D ominion Computer Interface Module (CIM), a s erial cable adapter, and an adapte r that connects directly to t he keyboard, video, and mouse p or ts of the server.
Appendix D : FAQs 336 The KSX II models range fr om 4 to 8 server ports in a 1U cha ssis. This is the industry's highest digital KVM switch port density.
Appendix D : FAQs 337 Local Port Can I access my serv ers directly from the rack? Yes. At the rack, the KSX I I functions just like a traditio nal KVM switch - allowing control of up to 16 serv ers using a single keyb oard, monitor, and mouse. When I am using the local port, do I prevent other users from accessing servers remotely ? No.
Appendix D : FAQs 338 Yes. The local port present ation is identical and completely in sync with remote access clients, as well as Raritan's optional CommandCenter Secure Gateway management device.
Appendix D : FAQs 339 Power Control Does the power supply used by the KSX II automa tically detect voltage settings? Yes. The KSX II's power supply can be used in AC voltage r anges from 100 -240 volts, at 50-60 Hz.
Appendix D : FAQs 340 Scalability How do I connect multipl e KSX II devices together into one solution? Multiple KSX II devices do not need to be physically c onnected together.
Appendix D : FAQs 341 Security Is the KSX II FIPS 140-2 Certified ? The KX II 2.2.0 and later, and t he KSX II 2.3.0 and later, provides user s with the option to use an embed ded FIPS 140-2-validated cryptogr aphic module running on a Linux platform per FIPS 140-2 impleme ntation guidelines.
Appendix D : FAQs 342 Yes, the KSX II has admini strator-configurable, strong password checking to ensure that u ser-created passwords meet corporate and/or government standards and are resistant to brute force hacking.
Appendix D : FAQs 343 Smart Cards and CAC Authentication Does the KSX II support smart c ard and CAC authentication? Yes, smart cards and DoD Comm on Access Card (CA C) authentication to target servers is support ed in release KX I I 2.1.10 and later, and KSX II 2.
Appendix D : FAQs 344 Managability Can the KSX II be rem otely managed and configur ed via web browser? Yes, the KSX II can be co mpletely configured remotely via web browser. Note that this does require that the workstation have an appropriate Java Runtime Environment (JRE) v er sion installed.
Appendix D : FAQs 345 Miscellaneous What is the KSX II's defaul t IP address? 19 2.168.0.192 What is the KSX II's defaul t user name and pass w ord? The KSX II's default user n ame is admin and the defa ult password is raritan [all lower case].
.
347 A A. AC Power • 25 Absolute Mouse Mode • 73 Accessing a T arget Server • 250 Accessing Telnet from a W indows PC • 228 Accessing the KSX II Using CLI • 227 Accessing Virtual Media on a W.
Index 348 Create User Groups and User s • 37 Creating a New Attribute • 295 D D. KVM Target Server Port s • 27 DB25F Nulling Serial Adap ter Pinouts • 292 DB25M Nulling Serial Adap ter Pinouts.
Index 349 K Key Combinations and the Java Runtime Environment (JRE) • 306 Keyboard Language Preference ( Fedora Linux Clients) • 305 Keyboard Macros • 60 Keyboard Options • 60 Keyboards • 30.
Index 350 Port Action Menu • 46, 246 Port Group Management • 188 Port Keywords • 186 Port Permissions • 115, 117 Port Settings • 229 Port Sharing Using CLI • 236 Ports Used • 286 Power C.
Index 351 Supported CIMs for Blade Cha ssis • 162, 164, 168, 176 Supported Keyboard Langu ages • 248 Supported Operating Systems ( Clients) • 4, 270 Supported Operating Systems a nd CIMs (KVM Ta.
U.S./Canada/Latin Americ a Monday - Friday 8 a.m. - 6 p.m. ET Phone: 800- 724 -8090 or 732- 764 -8886 For CommandCenter NOC: Press 6, then Press 1 For CommandCenter Secure Gateway: Press 6, then Press 2 Fax: 732-764-8887 Email for CommandCenter NOC: tech-ccnoc@raritan.
An important point after buying a device Raritan Computer DKSXII-V2.3.0-0D-E (or even before the purchase) is to read its user manual. We should do this for several simple reasons:
If you have not bought Raritan Computer DKSXII-V2.3.0-0D-E yet, this is a good time to familiarize yourself with the basic data on the product. First of all view first pages of the manual, you can find above. You should find there the most important technical data Raritan Computer DKSXII-V2.3.0-0D-E - thus you can check whether the hardware meets your expectations. When delving into next pages of the user manual, Raritan Computer DKSXII-V2.3.0-0D-E you will learn all the available features of the product, as well as information on its operation. The information that you get Raritan Computer DKSXII-V2.3.0-0D-E will certainly help you make a decision on the purchase.
If you already are a holder of Raritan Computer DKSXII-V2.3.0-0D-E, but have not read the manual yet, you should do it for the reasons described above. You will learn then if you properly used the available features, and whether you have not made any mistakes, which can shorten the lifetime Raritan Computer DKSXII-V2.3.0-0D-E.
However, one of the most important roles played by the user manual is to help in solving problems with Raritan Computer DKSXII-V2.3.0-0D-E. Almost always you will find there Troubleshooting, which are the most frequently occurring failures and malfunctions of the device Raritan Computer DKSXII-V2.3.0-0D-E along with tips on how to solve them. Even if you fail to solve the problem, the manual will show you a further procedure – contact to the customer service center or the nearest service center
