Home

Dominion LX User Guide

1. ssssessseeeeenne 164 zie Raritan y Contents vi Logging Iiei MT a aaa a i aN 165 Navigation ofthe CL crn aada aana aaa ad ai aaa A aaa a a a a aaia aaea 165 Comipletiondf COImbimalds este taetu oce dene eet eua ree mes ba oven aa Ea A ESES 165 CEI Syntax TIps and ShoFteuls s ocn eroe eed kin hee nuege nra x nae Fette rni ged 166 Common Commands for All Command Line Interface Levels sesssusss 166 nitial Configuiration USING CL Em 167 Setting Parameters siocaire iieiaeie exul ure nnde atenta ra nde exta Rau de gen 167 Setting Network Paratmleters ecce ode etes ade pete era Regents bra nde Fette ERR de gud 167 e donee T 168 e efe e ERE I 168 SIeUVALII M E 169 Administering the LX Console Server Configuration Commands sss 169 Configuring NOebWOI datei etes cedent un Pee tede edunt xk apte Fete ee rende etur dx de gen 169 Interface GOmmiarid eoo rude ene tte ege se soe edi i nnde rh betae eR edere rendu Pkt dut nR eue 170 Name COMM MAING BRENT REED EE 171 IPy6 COMM ANO een erana a EA carter tear rece per ate rr creer tre LEA ELEME 171 Chapter 11 LX Local Console 172 eT m ee ieee 172 SITIS IIo USE EL aai aniraa a aaa ata aa aaa a
2. 105 106 Chapter 5 User Management 15 Select the Enable LDAPS Server Certificate Validation checkbox to use the previously uploaded root CA certificate file to validate the certificate provided by the server If you do not want to use the previously uploaded root CA certificate file leave this checkbox deselected Disabling this function is the equivalent of accepting a certificate that has been signed by an unknown certifying authority This checkbox is only available when the Enable Secure LDAP checkbox has been enabled Note When the Enable LDAPS Server Certificate Validation option is selected in addition to using the Root CA certificate for validation the server hostname must match the common name provided in the server certificate If needed upload the Root CA Certificate File This field is enabled when the Enable Secure LDAP option is selected Consult your authentication server administrator to get the CA certificate file in Base64 encoded X 509 format for the LDAP LDAPS server Use Browse to navigate to the certificate file If you are replacing a certificate for the LDAP LDAPS server with a new certificate you must reboot the LX in order for the new certificate to take effect LDAP Secure LDAP F Enable Secure LDAP Port 389 CoP n Secure LDAP Port 636 Enable LDAPS Server Certificate Validation Root CA Certificate File Upload Note Reboot device after certificate f
3. 56 kb ISP Modem 33 kb Fast Modem 24 kb Slow Modem Note that these settings are an optimization for specific conditions rather than an exact speed The client and server always attempt to deliver video as quickly as possible on the network regardless of the current network speed and encoding setting But the system will be most responsive when the settings match the real world environment 3 Choose the Color Depth from the drop down list The device can dynamically adapt the color depth transmitted to remote users in order to maximize usability in all bandwidths a 15 bit RGB Color 8 bit RGB Color 4 bit Color 4 bit Gray 3 bit Gray 2 bit Gray Black and White Important For most administrative tasks server monitoring reconfiguring and so on the full 24 bit or 32 bit color spectrum made available by most modern video graphics cards is not necessary Attempting to transmit such high color depths wastes network bandwidth 4 Use the slider to select the desired level of Smoothing 15 bit color mode only The level of smoothing determines how aggressively to blend screen regions with small color variation into a single smooth color Smoothing improves the appearance of target video by reducing displayed video noise 5 Click OK to set these properties Raritan Z Raritan Chapter 3 Working with Target Servers Connection Information gt To obtain information about your Virtual KVM
4. For the Synchronize with NTP Server option a Enter the IP address of the Primary Time server b Enter the IP address of the Secondary Time server Optional Click OK Naming Target Servers To name the target servers Connect all of the target servers if you have not already done so See Step 3 Connect the Equipment for a description of connecting the equipment Using the LX Local Console choose Device Settings gt Port Configuration and then click the Port Name of the target server you want to name Enter a name for the server which can be up to 32 alphanumeric and special characters Click OK Raritan Chapter 2 Installation and Configuration Valid Special Characters for Target Names Character Description Character Description Exclamation point Semi colon Double quote Equal sign Pound sign gt Greater than sign Dollar sign Question mark Percent sign At sign amp Ampersand Left bracket Left parenthesis Backward slash Right parenthesis Right bracket i Asterisk Caret E Plus sign Underscore j Comma Grave accent Dash Left brace Period Pipe sign Forward slash Right brace lt Less than sign Tilde Colon Remote Authentication Supported Protocols To simplify management of usernames and passwords the LX provides the ability to forward authentication requests to an external authentication server Two external authentication protocols are supported LDAP LD
5. Chapter 1 Introduction Chapter 1 Introduction a Raritan Package Contents Chapter 1 Introduction Each LX ships as a fully configured stand alone product in a standard 1U 19 rackmount chassis Each LX device ships with the following contents Amount Item included 1 LX device 1 Rackmount kit 1 AC power cord 1 LX Quick Setup Guide 1 Application note 1 Warranty card LX Client Applications zie Raritan The following client applications can be used in the LX Product Works with MPC RRC VKC RSC AKC LX 2 4 5 or late H M See the KVM and Serial Client Guide for additional information on the client applications Also see the Working with Target Servers on page 37 section of this guide which contains information on using the clients with the LX Note MPC and VKC require the Java Runtime Environment JRE AKC is NET based Chapter 1 Introduction Hardware Integrated KVM over IP remote access 8 and 16 server port models Up to 2 video channels that allows up to 2 users to connect to the LX at once Multiple user capacity 1 2 remote users 1 local user UTP Cat5 5e 6 server cabling Ethernet port 10 100 1000 LAN Field upgradable Local user port for in rack access Three back panel USB 2 0 ports for supported USB devices Fully concurrent with remote user access Local graphical user interface GUI for administration Modem support Front and rear LED ind
6. Index Resetting the LX Using the Reset Button 145 183 Resolving Fedora Core Focus 210 Resolving Issues with Firefox Freezing when Using Fedora 210 Returning to the LX Local Console Interface 179 Returning User Group Information 197 Returning User Group Information from Active Directory Server 107 Returning User Group Information via RADIUS 111 Running a Keyboard Macro 64 S Scaling 79 Scan Settings 45 78 Scanning Ports 40 43 45 78 134 180 Scanning Ports Local Console 45 176 Security and Authentication 173 Security Issues 169 Security Management 138 Security Settings 138 Setting CIM Keyboard Mouse Options 65 Setting Network Parameters 167 Setting Parameters 167 Setting Permissions 96 99 Setting Permissions for an Individual Group 98 101 Setting Port Permissions 98 99 Setting the Registry to Permit Write Operations to the Schema 198 Simultaneous Users 172 Single Mouse Mode 74 Software 9 Special Sun Key Combinations 178 Specifications 29 184 SSH Access from a UNIX Linux Workstation 164 SSH Access from a Windows PC 164 SSH Connection to the LX 164 SSL Certificates 147 Standard Mouse Mode 72 Step 1 Configure the KVM Target Servers 12 13 Step 2 Configure Network Firewall Settings 12 26 Step 3 Connect the Equipment 12 27 132 Step 4 225 Index Configure the LX 12 29 Step 5 Launch the LX Remote Console 12 34
7. 3 11 Dominion_LX_Port14 Deny Deny 12 Dominion_LX_Port12 Deny v Deny 4 13 Dominion LX Port13 Deny w Deny p 14 Dominion LX Port14 Deny wv Deny 15 Dominion LX Port15 Deny v Deny 16 Dominion LX Port16 Deny Deny X Set All to Deny Set All VM Access to Deny Set All to View Set All VM Access to Read Only 1 Set All to Control Set All VM Access to Read Write Sc eee gas a ut aed udo p meee Setting Permissions Important Selecting the User Management checkbox allows the members of the group to change the permissions of all users Raritan Chapter 5 User Management including their own Carefully consider granting these permissions Permission Device Settings Diagnostics Maintenance Modem Access PC Share Security User Management Raritan Description Network settings date time settings port configuration channel names and so on event management SNMP Syslog virtual media file server setups Network interface status network statistics ping host trace route to host LX diagnostics Backup and restore database firmware upgrade factory reset reboot Permission to use the modem to connect to the LX device Simultaneous access to the same target by multiple users If you are using a tiered configuration in which a base LX device is used to access multiple other tiered devices all devices must share the same PC Share setting See C
8. Launch a supported web browser such as Internet Explorer or Firefox Enter the URL htto IP ADDRESS or http IP ADDRESS akc for NET where IP ADDRESS is the IP address assigned to your LX You can also use https the DNS name of the LX assigned by the administrator provided that a DNS server has been configured or type the IP address in the browser LX always redirects the IP address from HTTP to HTTPS Type your user name and password If this is the first time logging in log in with the factory default user name admin and password raritan all lower case You will be prompted to change the default password Click Login See Virtual KVM Client VKC and Active KVM Client AKC on page 53 for information on the LX functions available via the Remote Console 39 40 Chapter 3 Working with Target Servers Interface and Navigation LX Interface Both the LX Remote Console and the LX Local Console interfaces provide a web based interface for device configuration and administration as well as target server list and selection The options are organized into various tabs After a successful login the Port Access page opens listing all ports along with their status and availability Two tabs are provided on the page View by Port and Set Scan On the View by Port tab sort by Port Number Port Name Status Up and Down and Availability Idle Connected Busy Unavailable and Connecting by clicking on the colum
9. Raritan Copyright O 2011 Raritan Inc LX v2 4 5 0A E October 2011 255 80 8009 00 This document contains proprietary information that is protected by copyright All rights reserved No part of this document may be photocopied reproduced or translated into another language without express prior written consent of Raritan Inc Copyright 2011 Raritan Inc All third party software and hardware mentioned in this document are registered trademarks or trademarks of and are the property of their respective holders FCC Information This equipment has been tested and found to comply with the limits for a Class A digital device pursuant to Part 15 of the FCC Rules These limits are designed to provide reasonable protection against harmful interference in a commercial installation This equipment generates uses and can radiate radio frequency energy and if not installed and used in accordance with the instructions may cause harmful interference to radio communications Operation of this equipment in a residential environment may cause harmful interference VCCI Information Japan c OX TESERALEEXEIB AS TEE CE AERA BRS VCC ORE CX 2472AATSSEBNAEIB C CORE t RE CHEATS CBR BEeslSMCTCEPHVETF COMPICMSHAAPBOICHREBST SBLIRBKENSCEPHVETF Raritan is not responsible for damage to this product resulting from accident disaster misuse abuse non Raritan modification of the product or other events outside of Raritan s reasonabl
10. Raritan zie Raritan Chapter 5 User Management If you entered a Distinguished Name for the Administrative User you must enter the password that will be used to authenticate the Administrative User s DN against the remote authentication server Enter the password in the Secret Phrase field and again in the Confirm Secret Phrase field up to 128 characters Authentication Settings Local Authentication te LDAP O RADIUS Y LDAP Server Configuration Primary LDAP Server 192 168 59 187 Secondary LDAP Server optional 192 168 51 214 Type of External LDAP Server Microsoft Active Directory e Active Directory Domain testradius com User Search DH cn users dc testradius dc com DH of Administrative User optional cn A dministrator cn users dc testrac Secret Phrase of Administrative User Confirm Secret Phrase 12 LDAP LDAP Secure Select the Enable Secure LDAP checkbox if you would like to use SSL This will enable the Enable LDAPS Server Certificate Validation checkbox Secure Sockets Layer SSL is a cryptographic protocol that allows LX to communicate securely with the LDAP LDAPS server The default Port is 389 Either use the standard LDAP TCP port or specify another port The default Secure LDAP Port is 636 Either use the default port or specify another port This field is only used when the Enable Secure LDAP checkbox is selected
11. Update the fields as necessary Description P Address Host Name Type the IP address of the LX device Port if necessary Product Type 4 Click OK gt To delete a favorite Important Exercise caution in the removal of favorites You are not prompted to confirm their deletion 1 Select the checkbox next to the appropriate LX device 2 Click Delete The favorite is removed from your list of favorites Logging Out gt To quit the LX e Click Logout in the upper right hand corner of the page Note Logging out also closes any open Virtual KVM Client and serial client sessions Proxy Server Configuration for Use with MPC VKC and AKC zie Raritan When the use of a Proxy Server is required a SOCKS proxy must also be provided and configured on the remote client PC Note If the installed proxy server is only capable of the HTTP proxy protocol you cannot connect gt Toconfigure the SOCKS proxy 1 Onthe client select Control Panel gt Internet Options 51 52 Chapter 3 Working with Target Servers a Onthe Connections tab click LAN settings The Local Area Network LAN Settings dialog opens b Select Use a proxy server for your LAN Click Advanced The Proxy Settings dialog opens Configure the proxy servers for all protocols IMPORTANT Do not select Use the same proxy server for all protocols Note The default port for a SOCKS proxy 1080 is different from HTTP proxy
12. operating system 1 Include the LX IP address in the Trusted Site zone and ensure Protected Mode is off 2 Launch Internet Explorer using the LX IP address as the URL A Certificate Error message will be displayed Select View Certificates On the General tab click Install Certificate The certificate is then installed in the Trusted Root Certification Authorities store 5 After the certificate is installed the LX IP address should be removed from the Trusted Site zone gt To enable AKC download server certificate validation 1 Choose Device Settings gt Device Services The Device Service Settings page opens 2 Select the Enable AKC Download Server Certificate Validation checkbox or you can leave the feature disabled default 3 Click OK 125 Chapter 6 Device Management Configuring Modem Settings gt To configure modem settings 1 Click Device Settings Modem Settings to open the Modem Settings page 2 Select the Enable Modem checkbox This will enable the Serial Line Speed and Modem Init String field The Serial Line Speed of the modem is set to 115200 Enter the initial modem string in the Modem Init String field If the modem string is left blank the following string is sent to the modem by default ATZ OK AT OK This information is used to configure modem settings Because different modems have different ways of settings these values this document does not specify how to set these
13. Always 0 NAS IP Address 4 The IP address for the LX User Name 1 The user name entered at the login screen Acct Session ID 44 Session ID for accounting x Raritan Chapter 5 User Management User Authentication Process Remote authentication follows the process specified in the flowchart below User logs in Is Remote No Authentication Enabled Yes bd Is Remote 1 Authentication Server gt j lt No reachable M 4 lt d No Yes d As User authenticated C in remote database x s User authenticated in local database lt Yes Yes User allowed No Y User denied sis Raritan us Chapter 5 User Management Changing a Password gt To change your password 1 Choose User Management gt Change Password The Change Password page opens Type your current password in the Old Password field Type a new password in the New Password field Retype the new password in the Confirm New Password field Passwords can be up to 64 characters in length and can consist of English alphanumeric characters and special characters Click OK You will receive confirmation that the password was successfully changed Click OK Note If strong passwords are in use this page displays information about the format required for the passwords For more information about passwords and strong passwords see Strong Passwords on
14. Authentication Settings 520121224 2i e erred aiaiai du ETE 102 Changing PassWoOId pe iarciet eb oer ed Re PEEL Ter due 114 The LX stores an internal list of all user and group names to determine access authorization and permissions This information is stored internally in an encrypted format There are several forms of authentication and this one is known as local authentication All users have to be authenticated If the LX is configured for LDAP LDAPS or RADIUS that authentication is processed first followed by local authentication Every LX is delivered with three default user groups These groups cannot be deleted User Description Admin Users that are members of this group have full administrative privileges The original factory default user is a member of this group and has the complete set of system privileges In addition the Admin user must be a member of the Admin group Unknown This is the default group for users who are authenticated externally using LDAP LDAPS or RADIUS or who are unknown to the system If the external LDAP LDAPS or RADIUS server does not identify a valid user group the Unknown group is used In addition any newly created user is automatically put in this group until assigned to another group Individual An individual group is essentially a group of one Group That is the specific user is in its own group not affiliated with other real groups Individual groups can be identified by t
15. CIM in a cable PCIM Paragon CIM Dual VM Virtual media CIM D2CIM VUSB and D2CIM DVUSB KVM Switch Generic KVM Switch connection Click the Port Name for the port you want to edit The Port page for KVM opens Configuring Standard Target Servers To name the target servers Connect all of the target servers if you have not already done so See Step 3 Connect the Equipment on page 27 for a description of connecting the equipment Choose Device Settings gt Port Configuration The Port Configuration page opens Click the Port Name of the target server you want to rename The Port Page opens Select Standard KVM Port as the subtype for the port Assign a name to identify the server connected to that port The name can be up to 32 characters and alphanumeric and special characters are allowed In the Target Settings section select 720x400 Compensation if you are experiencing display issues when the target is using this resolution Select Use international keyboard for scan code set 3 if connecting to the target with a DCIM PS2 and require the use of scan code set 3 with an international keyboard Click OK Configuring KVM Switches The LX allows tier attachments to generic analog KVM switches supporting hot key switching A variety of KVM hot key sequences are provided to choose from Select one to match the hot key sequence supported on the analog KVM switch connected to via this port That wi
16. Control Center Spanish System Settings Control Center Italian System Settings Control Center Slovenian System Settings Control Center Portuguese System Settings Control Center Note The Keyboard Indicator should be used on Linux systems using Gnome as a desktop environment Client Launch Settings LX users can configure client launch settings that allow you to define the screen settings for a KVM session Note This feature is available in MPC not AKC or VKC gt To configure client launch settings 1 Click Tools gt Options The Options dialog appears 2 Click on the Client Launch Settings tab a To configure the target window settings Select Standard sized to target Resolution to open the window using the target s current resolution If the target resolution is greater than the client resolution the target window covers as much screen area as possible and scroll bars are added if needed Select Full Screen to open the target window in full screen mode To configure the monitor on which the target viewer is launched Select Monitor Client Was Launched from if you want the target viewer to be launched using the same display as the application that is being used on the client for example a web browser or applet Use Select From Detected Monitors to select from a list of monitors that are currently detected by the application If a previously selected monitor is no longer detected
17. Functions not recommended NOT supported by Ethernet specification product will communicate but collisions will occur Per Ethernet specification these should be no communication however note that the LX behavior deviates from expected behavior E B Note For reliable network communication configure the LX and the LAN switch to the same LAN Interface Speed and Duplex For example configure both the LX and LAN Switch to Autodetect recommended or set both to a fixed speed duplex such as 100MB s Full Raritan Appendix B Updating the LDAP Schema Note The procedures in this chapter should be attempted only by experienced users In This Chapter Returning User Group Information essseseeeeses 197 Setting the Registry to Permit Write Operations to the Schema 198 Creating a New Attribute iiir cinacia insira 198 Adding Attributes to the Class cinia itcr Laeta eter aes 199 Updating the Schema Cache sse 201 Editing rciusergroup Attributes for User Members 201 Returning User Group Information zie Raritan Use the information in this section to return User Group information and assist with authorization once authentication is successful From LDAP LDAPS When an LDAP LDAPS authentication is successful the LX determines the permissions for a given user based on the permissions of the user s group Your remote LDA
18. Step 6 Configure the Keyboard Language Optional 12 35 Step 7 Configure Tiering Optional 12 36 Strong Passwords 114 138 140 Sun Solaris Settings 22 Supported Browsers 187 Supported CIMS and Operating Systems 188 Supported Keyboard Languages 191 Supported Operating Systems Clients 28 186 Supported Protocols 33 Supported Video Resolutions 13 189 190 Supported Video Resolutions Local Console 174 Supported Video Resolutions Not Displaying 211 SUSE Linux 10 1 Settings 21 SUSE VESA Video Modes 211 Switching between Target Servers 35 T Target BIOS Boot Time with Virtual Media 215 Target Server Connection Distance and Video Resolution 13 174 189 190 TCP and UDP Ports Used 193 Terminology 10 Tiering Target Types Supported CIMS and Tiering Configurations 121 122 Tool Options 75 79 Toolbar 55 Trace Route to Host Page 160 U Unsupported and Limited Features on Tiered Targets 122 Updating the LDAP Schema 107 197 Updating the Schema Cache 201 Upgrade History 155 Upgrading CIMs 153 Upgrading Firmware 153 User Authentication Process 113 User Blocking 138 142 User Group List 95 226 User Groups 94 User List e 100 User Management 34 94 173 Users 99 Using Scan Options 47 177 Using Screenshot from Target 69 Using Virtual Media 88 V Video Modes and Resolutions 211 Video Properties 65 View Op
19. This address is automatically assigned to the device It is used for neighbor discovery or when no routers are present Read Only f Zone ID This identifies the device with which the address is associated Read Only g Select the IP Auto Configuration The following options are available None Use this option if you do not want an auto IP configuration and prefer to set the IP address yourself static IP This is the default and recommended option If None is selected for the IP auto configuration the following Network Basic Settings fields are enabled Global Unique IP Address Prefix Length and Gateway IP Address allowing you to manually set the IP configuration Router Discovery Use this option to automatically assign IPv6 addresses that have Global or Unique Local significance beyond that of the Link Local which only applies to a directly connected subnet 5 Select Obtain DNS Server Address Automatically if DHCP is selected and Obtain DNS Server Address is enabled When Obtain DNS Server Address Automatically the DNS information provided by the DHCP server will be used 6 If Use the Following DNS Server Addresses is selected regardless of whether DHCP is selected or not the addresses entered in this section will be used to connect to the DNS server Enter the following information if the Following DNS Server Addresses option is selected These addresses are the primary and secondary DNS addresses that will be
20. USB type A USB Sun Two years standard with advanced replacement 185 Appendix A Specifications LED Indicators Front Panel LED e Boot up Blue and Red LED ON e Operational Solid blue e Firmware upgrade Blue LED blinks Rear Panel LED e 10 Mbps Half Both LEDs blink e 10 Mbps Full Both LEDs blink e 100 Mbps Half Yellow LED blinks e 1 Gbps Full Green LED blinks Supported Operating Systems Clients The following operating systems are supported on the Virtual KVM Client and Multi Platform Client MPC Client operating system Virtual media VM support on client Windows 7 Yes Windows XP Yes Windows 2008 Yes Windows Vista Yes Windows 2000 SP4 Server Yes Windows 2003 Server Yes Windows 2008 Server Yes Red Hat Desktop 5 0 Yes Red Hat Desktop 4 0 Yes Open SUSE 10 11 Yes Fedora 13 and 14 Yes Mac OS Yes Solaris No Linux Yes id Raritan Appendix A Specifications The JRE plug in is available for the Windows 32 bit and 64 bit operating systems MPC and VKC can be launched only from a 32 bit browser or 64 bit IE7 or IE8 browser Following are the Java 32 bit and 64 bit Windows operating system requirements Mode Operating system Windows x64 Windows XP 32 bit mode Windows Server 2003 Windows Vista Windows 7 Windows x64 Windows XP 64 bit mode Windows XP Professional Windows XP Tablet Windows Vista Windows Server 2003 Windows Server 2008 Windows
21. combination of Alt Gr 7 results in the accented character displaying twice when using French keyboards with Windows XP clients Note This does not occur with Linux clients Numeric Keypad From the Virtual KVM Client and the Multi Platform Client the numeric keypad symbols display as follows when using a French keyboard Numeric keypad symbol Displays as 207 208 Appendix C Informational Notes Tilde Symbol From the Virtual KVM Client and the Multi Platform Client the key combination of Alt Gr 2 does not produce the tilde symbol when using a French keyboard gt To obtain the tilde symbol Create a macro consisting of the following commands e Press right Alt e Press 2 e Release 2 e Release right Alt Keyboard Language Preference Fedora Linux Clients Because the Sun JRE on Linux has problems generating the correct KeyEvents for foreign language keyboards configured using System Preferences Raritan recommends that you configure foreign keyboards using the methods described in the following table Language US Intl UK French German Hungarian Spanish Swiss German Norwegian Swedish Danish Japanese Korean Slovenian Italian Portuguese Configuration method Default System Settings Control Center Keyboard Indicator Keyboard Indicator System Settings Control Center System Settings Control Center System Settings Control Center Keyboard Indicator Keyboard Indicat
22. f needed configure the Local Port Scan Mode settings These settings apply to Scan Settings feature which is accessed from the Port page See Scanning Ports on page 45 Inthe Display Interval 10 255 sec field specify the number of seconds you want the target that is in focus to display in the center of the Port Scan window Inthe Interval Between Ports 10 255 sec field specify the interval at which the device should pause between ports 5 Choose the appropriate keyboard type from among the options in the drop down list The browser will be restarted when this change is made US US International United Kingdom French France German Germany Raritan Chapter 11 LX Local Console JIS Japanese Industry Standard Simplified Chinese Traditional Chinese Dubeolsik Hangul Korean German Switzerland Portuguese Portugal Norwegian Norway Swedish Sweden Danish Denmark Belgian Belgium Note Keyboard use for Chinese Japanese and Korean is for display only Local language input is not supported at this time for LX Local Console functions Note If using a Turkish keyboard you must connect to a target server through the Active KVM Client AKC It is not supported by other Raritan clients 6 Choose the local port hotkey The local port hotkey is used to return to the LX Local Console interface when a target server interface is being viewed The def
23. that are applied locally to AD user groups IMPORTANT If you are an existing Raritan Inc customer and have already configured the Active Directory server by changing the AD schema the LX still supports this configuration and you do not need to perform the following operations See Updating the LDAP Schema on page 197 for information about updating the AD LDAP LDAPS schema gt Toenable your AD server on the LX 1 Using the LX create special groups and assign proper permissions and privileges to these groups For example create groups such as KVM Admin and KVM Operator 2 On your Active Directory server create new groups with the same group names as in the previous step 3 On your AD server assign the LX users to the groups created in step 2 4 From the LX enable and configure your AD server properly See Implementing LDAP LDAPS Remote Authentication on page 103 107 108 Chapter 5 User Management Important Notes Group Name is case sensitive The LX provides the following default groups that cannot be changed or deleted Admin and lt Unknowns gt Verify that your Active Directory server does not use the same group names If the group information returned from the Active Directory server does not match the LX group configuration the LX automatically assigns the group of Unknown to users who authenticate successfully If you use a dialback number you must enter the following case sensitiv
24. 3128 Click OK at each dialog to apply the settings Next configure the proxies for Java applets by selecting Control Panel Java e Onthe General tab click Network Settings The Network Settings dialog opens f Select Use Proxy Server Click Advanced The Advanced Network Settings dialog opens h Configure the proxy servers for all protocols IMPORTANT Do not select Use the same proxy server for all protocols Note The default port for a SOCKS proxy 1080 is different from HTTP proxy 3128 4 If you are using standalone MPC you must also do the following i Open the start bat file in MPC directory with a text editor j Insert the following parameters to the command line Add them before classpath DsocksProxyHost amp lt socks proxy ip addr amp gt DsocksProxyPort amp lt socks proxy port amp gt The parameters should look as follows start javaw Xmn128M Xmx512M XX MaxHeapFreeRatio 70 XX MinHeapFreeRatio 50 Dsun java2d noddraws true DsocksProxyHost 192 168 99 99 DsocksProxyPort 1080 classpath sdeploy jar sFoxtrot jar jaws jar sMpc jar com raritan rrc ui RRCApplication 961 Z Raritan Chapter 3 Working with Target Servers Virtual KVM Client VKC and Active KVM Client AKC Raritan The Virtual KVM Client VKC and Active KVM Client AKC are interfaces used to access remote targets AKC and VKC share similar features with the exception of the following e Minimu
25. 6 Device Management 13 Select the Local Port Connect key Use a connect key sequence to connect to a target and switch to another target You can then use the hot key to disconnect from the target and return to the local port GUI Once the local port connect key is created it will appear in the Navigation panel of the GUI so you can use it as a reference See Connect Key Examples for examples of connect key sequences Set the Video Switching Delay from between 0 5 seconds if necessary Generally 0 is used unless more time is needed certain monitors require more time to switch the video If you would like to use the power save feature a Select the Power Save Mode checkbox b Set the amount of time in minutes in which Power Save Mode will be initiated Choose the resolution for the LX Local Console from the drop down list The browser will be restarted when this change is made 800x600 1024x768 1280x1024 Choose the refresh rate from the drop down list The browser will be restarted when this change is made 60 Hz 75 Hz Choose the type of local user authentication Local LDAP RADIUS This is the recommended option For more information about authentication see Remote Authentication on page 33 None There is no authentication for Local Console access This option is recommended for secure environments only Click OK Changing the Default GUI Language Setting The LX GUI supports
26. 7 Supported Browsers LX supports the following browsers e Internet Explorer 6 through 9 Browser Internet Explorer 6 0 SP1 or 7 0 IE 8 Firefox 1 06 3 Internet Explorer 6 0 SP1 IE 7 IE 8 Firefox 1 06 3 Internet Explorer 7 0 or 8 0 Internet Explorer 9 0 Firefox 1 06 3 64bit OS 32bit browsers Internet Explorer 6 0 SP1 7 0 or 8 0 Firefox 1 06 3 64bit mode 64bit browsers Internet Explorer 7 0 or 8 0 e Firefox 1 5 2 0 3 0 up to build 3 6 17 and 4 0 e Safari 3 or later Raritan 187 Appendix A Specifications Supported CIMS and Operating Systems Supported LX D2CIMs D2CIM VUSB D2CIM DVUSB 188 In addition to the D2CIMs most Dominion CIMs are supported The following table displays the supported target server operating systems CIMs virtual media and mouse modes Note D2CIM VUSB is not supported on Sun Solaris targets Target server and remote rack PDUs where applicable e Windows XP e Windows 2000 e Windows 2000 Server e Windows 2003 Server e Windows Vista e Windows 7 e Windows 2008 e Open SUSE 10 11 e Fedora Core 3 and above e MacOS e Red Hat Enterprise Linux 4 ES e Hed Hat Enterprise Linux 5 e Windows XP e Windows 2000 e Windows 2000 Server e Windows 2003 Server e Windows Vista e Windows 7 e Windows 2008 e Open SUSE 10 11 e Fedora 8 11 e MacOS Virtual media V Absolute Mous
27. Choose Maintenance Factory Reset The Factory Reset page opens 2 Choose the appropriate reset option from the following options Full Factory Reset Removes the entire configuration and resets the device completely to the factory defaults Note that any management associations with CommandCenter will be broken Because of the complete nature of this reset you will be prompted to confirm the factory reset Network Parameter Reset Resets the network parameters of the device back to the default values click Device Settings gt Network Settings to access this information IP auto configuration IP address Subnet mask Gateway IP address Primary DNS server IP address Secondary DNS server IP address Discovery port Bandwidth limit LAN interface speed amp duplex 3 Click Reset to continue You will be prompted to confirm the factory reset because all network settings will be permanently lost 4 Click OK proceed Upon completion the LX device is automatically restarted 182 Raritan Chapter 11 LX Local Console Resetting the LX Using the Reset Button On the back panel of the device there is a Reset button It is recessed to prevent accidental resets you will need a pointed object to press this button The actions that are performed when the Reset button is pressed are defined in the graphical user interface See Encryption amp Share on page 144 Note It is recommended that you save the au
28. Client MPC The following table identifies these interfaces and their use for target server access and administration locally and remotely User Interface Local Remote Access Admin Access Admin LX Local Console d V4 LX Remote Console vd d Virtual KVM Client VKC of Multi Platform Client v va MPC Active KVM Client AKC of d The following sections of the help contain information about using specific interfaces to access the LX and manage targets e Local Console e Remote Console e Virtual KVM Client e Multi Platform Client zie Raritan Chapter 3 Working with Target Servers LX Local Console Interface LX Devices When you are located at the server rack the LX provides standard KVM management and administration via the LX Local Console The LX Local Console provides a direct KVM analog connection to your connected servers the performance is exactly as if you were directly connected to the server s keyboard mouse and video ports There are many similarities among the LX Local Console and the LX Remote Console graphical user interfaces Where there are differences they are noted in the help The LX Local Console Factory Reset option is available in the LX Local Console but not the LX Remote Console LX Remote Console Interface The LX Remote Console is a browser based graphical user interface that allows you to log in to KVM target servers and serial targets connected to the LX and to remotely admin
29. Client connection e Choose Connection gt Info The Connection Info window opens The following information is displayed about the current connection e Device Name The name of the device e P Address The IP address of the device e Port The KVM communication TCP IP port used to access the target device e Data In Second Data rate in e Data Out Second Data rate out e Connect Time The duration of the connect time e FPS The frames per second transmitted for video e Horizontal Resolution The screen resolution horizontally e Vertical Resolution The screen resolution vertically e Refresh Rate How often the screen is refreshed e Protocol Version RFB protocol version gt To copy this information e Click Copy to Clipboard The information is available to be pasted into the program of your choice Keyboard Options Keyboard Macros Keyboard macros ensure that keystroke combinations intended for the target server are sent to and interpreted only by the target server Otherwise they might be interpreted by the computer on which the Virtual KVM Client is running your client PC Macros are stored on the client PC and are PC specific Therefore if you use another PC you cannot see your macros In addition if another person uses your PC and logs in under a different name that user will see your macros since they are computer wide Keyboard macros created in the Virtual KVM Client are availab
30. Currently Selected Monitor Not Detected is displayed To configure additional launch settings 77 78 Chapter 3 Working with Target Servers a Select Enable Single Cursor Mode to enable single mouse mode as the default mouse mode when the server is accessed b Select Enable Scale Video to automatically scale the display on the target server when it is accessed c Select Pin Menu Toolbar if you want the toolbar to remain visible on the target when it is in Full Screen mode By default while the target is in Full Screen mode the menu is only visible when you hover your mouse along the top of the screen 3 Click OK Scan Settings The LX provides a port scanning feature that searches for selected targets and displays them in a slide show view allowing you to monitor up to 32 targets at one time You can connect to targets or focus on a specific target as needed Scans can include standard targets tiered Dominion devices and KVM switch ports See Scanning Ports on page 45 Use the Scan Settings tab to customize the scan interval and default display options To set scan settings Click Tools gt Options The Options dialog appears Select the Scan Settings tab o ow zm In the Display Interval 10 255 sec field specify the number of seconds you want the target that is in focus to display in the center of the Port Scan window 4 Inthe Interval Between Ports 10 255 sec field specify the interval at
31. LDAP LDAPS on If the LX is configured to remotely authenticate user logons via the Configurable Ports LDAP LDAPS protocol ports 389 or 636 will be used but the system 389 or 636 can also be configured to use any port of your designation Optional RADIUS on If the LX is configured to remotely authenticate user logons via the Configurable Port RADIUS protocol either port 1812 will be used but the system can also 1812 be configured to use any port of your designation Optional RADIUS Accounting If the LX is configured to remotely authenticate user logons via the on Configurable Port RADIUS protocol and also employs RADIUS accounting for event 1813 logging port 1813 or an additional port of your designation will be used to transfer log notifications SYSLOG on If the LX is configured to send messages to a Syslog server then the Configurable UDP indicated port s will be used for communication uses UDP Port 514 Port 514 SNMP Default UDP Port 161 is used for inbound outbound read write SNMP access and Ports port 162 is used for outbound traffic for SNMP traps Optional TCP Port 21 Port 21 is used for the LX command line interface when you are working with Raritan Technical Support zie Raritan m 194 Appendix A Specifications Events Captured in the Audit Log and Syslog Following is a list of the events that are captured by the LX audit log and syslog System Startup System Shutdown Network Parameter Changed Port Sta
32. LX Raritan Question What is virtual media What types of virtual media does the Dominion LX support What is Absolute Mouse Synchronization Raritan Chapter 12 Frequently Asked Questions Answer Virtual media is a powerful feature that enables a user to mount drives and media from the user s desktop to remote servers during a KVM connection This is ideal to install software run hardware diagnostics transfer files and even remotely reimage a server Dominion LX supports the following types of virtual media internal and USB connected CD DVD drives USB mass storage devices PC hard drives and local and remote ISO images This is a technology developed by Raritan in which the local and remote mouse cursors stay in synch right out of the box It eliminates the cumbersome need to manually change the mouse settings on each target server 221 Index A A AC Power 27 About the Active KVM Client 53 About the Virtual KVM Client 53 Absolute Mouse Mode 74 Access and Control Target Servers Remotely 34 Accessing a Target Server 34 175 Accessing the LX Using CLI 164 Accessing Virtual Media on a Windows 2000 Server Using a D2CIM VUSB 215 Active System Partitions 214 Adding a New User 100 101 Adding a New User Group 95 100 Adding Attributes to the Class 199 Adding Deleting and Editing Favorites 50 Adjusting Video Settings 66 Administering the LX Console Server Co
33. Orientation Vertical This is the default view Hot Keys and Connect Keys Z Raritan Because the LX Local Console interface is completely replaced by the interface for the target server you are accessing a hot key is used to disconnect from a target and return to the local port GUI A connect key is used to connect to a target or switch between targets The Local Port hot key allows you to rapidly access the LX Local Console user interface when a target server is currently being viewed The default is to press the Scroll Lock key twice in rapid succession but you can designate another key combination available in the Local Port Settings page as the hot key See Configuring LX Local Console Local Port Settings for more information 177 178 Chapter 11 LX Local Console Connect Key Examples Standard servers Connect key action Access a port from the local port GUI Switch between ports Disconnect from a target and return to the local port GUI Special Sun Key Combinations Key sequence example Access port 5 from the local port GUI e Press Left ALT gt Press and Release 5 gt Release Left ALT Switch from target port 5 to port 11 e Press Left ALT gt Press and Release 1 gt Press and Release 1 Release Left ALT Disconnect from target port 11 and return to the local port GUI the page from which you connected to target e Double Click Scroll Lock The following key combinations for Sun
34. Power 11 45 x 10 63 x1 73 291 mm x 270mm x 44mm 8 82 lbs 4 0kg Single Power 100 240V AC 50 60Hz 0 5A 30 Watts 25 794 kcal h Environment Operating Temperature 0 40 C 32 104 F Humidity 20 85 RH 184 Hardware Supported Form Factor Local Access Port Sample Video Resolutions Remote Connection Ports Users Network Protocols Appendix A Specifications 1U rack mountable brackets included Video HD15 F VGA Keyboard Mouse USB F 3 USB rear PC text mode 640x350 640x480 720x400 PC graphic mode 640x480 800x600 1024x768 1152x864 1280x1024 1440x900 1680x1050 1600x1200 1920x1080 Sun video mode 1024x768 1152x864 1152x900 1280x1024 8 DLX 108 or 16 DLX 116 DLX 216 Local user 1 or 2 remote users model dependent Single 10 100 1000 gigabit Ethernet access dual stack IPv4 and IPv6 TCP IP HTTP HTTPS UDP RADIUS SNMP DHCP PAP CHAP Computer Interface Modules CIMs and Cat5 Cables Dominion CIMs Cat5 MCUTP Cables Service and Support Warranty Z Raritan Available for USB Dual USB Universal Virtual Media Absolute Mouse Synchronization PS2 Sun Serial Devices Dimensions WxDxH 1 7 x 3 5 x 0 8 43mm x 90mm x 19mm Dual USB and 1 3 x 3 0 x 0 6 33mm x 76mm x 15mm other DCIMs KVM UTP cable for PS 2 USB Sun lengths from 0 6m 2 ft 6m 20 ft Specifications RJ45 lt gt HDB 15M mini din 6 x 2 PS 2
35. Text button 7 Forexample create a macro to close a window by selecting Left Ctrl Esc This appears in the Macro Sequence box as follows Press Left Ctrl is Z Raritan zie Raritan Chapter 3 Working with Target Servers Release Left Ctrl Press Esc Release Esc Review the Macro Sequence field to be sure the macro sequence is defined correctly a Toremove a step in the sequence select it and click Remove b Tochange the order of steps in the sequence click the step and then click the up or down arrow buttons to reorder them as needed Click OK to save the macro Click Clear to clear all field and start over When you click OK the Keyboard Macros dialog appears and lists the new keyboard macro Click Close to close the Keyboard Macros dialog The macro now appears on the Keyboard menu in the application Select the new macro on the menu to run it or use the keystrokes you assigned to the macro Keyboard Macros Minimize All Windows Run Macro Add Remove Modify Close Select a macro from the above list 63 64 Chapter 3 Working with Target Servers Running a Keyboard Macro Once you have created a keyboard macro execute it using the keyboard macro you assigned to it or by choosing it from the Keyboard menu Run a Macro from the Menu Bar When you create a macro it appears under the Keyboard menu Execute the keyboard macro by clicking on it in the Keyboard menu Run a Macro Using
36. USB CIMs 1 Locate the configuration file usually etc modules conf in your system 2 Using the editor of your choice make sure that the alias usb controller line in the modules conf file is as follows alias usb controller usb uhci Note If there is another line using usb uhci in the etc modules conf file it needs to be removed or commented out 3 Save the file 4 Rebootthe system in order for the changes to take effect Linux Settings Red Hat 4 Note The following settings are optimized for Standard Mouse mode only gt To configure KVM target servers running Linux graphical user interface 1 Configure the mouse settings a Red Hat 5 users choose Main Menu gt Preferences gt Mouse Red Hat 4 users choose System gt Preferences gt Mouse The Mouse Preferences dialog appears b Click on the Motion tab c Within the Speed group set the Acceleration slider to the exact center d Within the Speed group set the Sensitivity towards low e Within the Drag amp Drop group set the Threshold towards small f Close the Mouse Preferences dialog Note If these steps do not work issue the xset mouse 1 1 command as described in the Linux command line instructions Raritan 5 Raritan Chapter 2 Installation and Configuration 2 Configure the screen resolution a Choose Main Menu gt System Settings gt Display The Display Settings dialog appears b On the Settings tab
37. Your remote RADIUS server can provide these user group names by returning an attribute implemented as a RADIUS FILTER ID The FILTER ID should be formatted as follows Raritan G GROUP_NAME where GROUP NAME is a string denoting the name of the group to which the user belongs Raritan G GROUP NAME D Dial Back Number where GROUP NAME is a string denoting the name of the group to which the user belongs and Dial Back Number is the number associated with the user account that the LX modem will use to dial back to the user account RADIUS Communication Exchange Specifications The LX sends the following RADIUS attributes to your RADIUS server Attribute Data Log in Access Request 1 NAS Port Type 61 VIRTUAL 5 for network connections NAS IP Address 4 The IP address for the LX User Name 1 The user name entered at the login screen Acct Session ID 44 Session ID for accounting User Password 2 The encrypted password Accounting Request 4 Acct Status 40 Start 1 Starts the accounting NAS Port Type 61 VIRTUAL 5 for network connections NAS Port 5 Always 0 NAS IP Address 4 The IP address for the LX User Name 1 The user name entered at the login screen Acct Session ID 44 Session ID for accounting Log out Accounting Request 4 111 Chapter 5 User Management Attribute Data Acct Status 40 Stop 2 Stops the accounting NAS Port Type 61 VIRTUAL 5 for network connections NAS Port 5
38. browser If you are using Internet Explorer 7 you must enable Scriplets Consult your browser help for information on enabling these features zie Raritan 10 Chapter 1 Introduction Related Documentation The LX help is accompanied by the LX Quick Setup Guide which can be found on the Raritan Firmware and Documentation page of Raritan s website http www raritan com support firmware and documentation Installation requirements and instructions for client applications used with the LX can be found in the KVM and Serial Access Clients Guide also found on the Raritan website Where applicable specific client functions used with the LX are included in the help Terminology Help uses the following terminology for typical LX components UNIX aot 4 Raritan Chapter 1 Introduction Diagram Key TCP IP IPv4 and or IPv6 added KVM Keyboard Video Mouse UTP Cable Cat5 5e 6 LX Local Access Console Local User an optional user console consisting of a keyboard mouse and multi sync VGA monitor attached directly to the LX to control KVM target servers directly at the rack not through the network Remote PC Networked computers used to access and control KVM target servers connected to the LX CIMS Dongles that connect to each target server Available for all of the supported operating systems Target Servers O O O 00 770 KVM Target Servers servers with video cards an
39. cable CIM and why would want one Is centralized management Answer Standard Dominion LX features include Virtual media e Absolute Mouse Synchronization e Common browser based remote local user interface e 1920x1080 remote video resolution e Local and remote authentication LDAP AD Radius e Port and administrator permissions e Dual stack IPv6 IPv4 e Port scanning and thumbnail views e Tiering cascading with other LX switches e Modem access e Basic security features See the Dominion LX Features and Benefits document for more information The following KX II features are not available in the LX e CommandCenter Secure Gateway CC SG centralized management e Mobile access via iPad and iPhone CC SG required e Blade server support e Digital audio over IP e FIPS 140 2 encryption module e Smart card CAC support e Secure login banner e Integrated remote power control e Dual monitor and KVM client launch options The Dominion LX can use 1 the standard and virtual media Dominion CIMs 2 the economical MCUTP cable CIMs and 3 the P2CIM SER serial CIMs For customers who don t plan to use virtual media or Absolute Mouse Synchronization MCUTP cable CIMs provide an economical alternative to the Dominion CIMs The cable CIM is an integrated CIM and Cat5 cable available in several different lengths Centralized management is not available as a standard feature for the available for the Dominion LX Dominion
40. color levels hue brightness saturation of the transmitted video images The color settings are on a target server basis Note The Calibrate Color command applies to the current connection only Note The KX II 101 does support color calibration gt To calibrate the color do the following e Choose Video gt Calibrate Color or click the Calibrate Color button kal in the toolbar The target device screen updates its color calibration Adjusting Video Settings Use the Video Settings command to manually adjust the video settings gt To change the video settings 1 Choose Video gt Video Settings or click the Video Settings button m in the toolbar to open the Video Settings dialog 2 Adjust the following settings as required As you adjust the settings the effects are immediately visible a Noise Filter The device can filter out the electrical interference of video output from graphics cards This feature optimizes picture quality and reduces bandwidth Higher settings transmit variant pixels only if a large color variation exists in comparison to the neighboring pixels However setting the threshold too high can result in the unintentional filtering of desired screen changes Lower settings transmit most pixel changes Setting this threshold too low can result in higher bandwidth use b PLL Settings Clock Controls how quickly video pixels are displayed across the video screen Changes made to clock setting
41. current firmware versions Information is also provided about the CIMS which can be obtained by clicking the show link for an upgrade The CIM information provided is e Type The type of CIM e Port The port where the CIM is connected e User The user who performed the upgrade e P IP address firmware location e Start Time Start time of the upgrade e End Time end time of the upgrade e Previous Version Previous CIM firmware version e Upgrade Version Current CIM firmware version e CIMs Upgraded CIMs e Result The result of the upgrade success or fail Rebooting the LX The Reboot page provides a safe and controlled way to reboot your LX This is the recommended method for rebooting Important All KVM and serial connections will be closed and all users will be logged off 155 zie Raritan 156 Chapter 8 Maintenance gt To reboot your LX 1 Choose Maintenance gt Reboot The Reboot page opens Home gt Maintenance gt Reboot Reboot Reboot This may take up to two minutes 2 Click Reboot You are prompted to confirm the action Click Yes to proceed with the reboot Home gt Maintenance gt Reboot Rebooting the system will logoff all users Do you want to proceed with the reboot This may take up to two minutes Raritan Chapter 9 Diagnostics In This Chapter Network Interface Page adatti eie tcx cba nee ees 157 Network Statistics Page aded cet as
42. e Decreased mean time to repair e Higher quality services The Dominion LX family includes three KVM over IP models The DLX 108 is an 8 port switch supporting one remote user session and one local user The DLX 116 is a 16 port switch supporting one remote user session and one local user The DLX 216 is a 16 port switch supporting two remote user sessions and one local user The Dominion LX has a 1U sized compact case with 8 or 16 server ports single power supply single gigabit LAN USB based local port with optional modem access The Dominion KX II is Raritan s top of the line enterprise class secure KVM over IP switch With models supporting up to 64 remote servers and up to 8 remote users the KX II is targeted at enterprise and midsize customers managing hundreds or even thousands of servers The Dominion KX Il is the industry s most reliable and secure switch featuring dual power supplies dual LAN FIPS 140 2 encryption module and smart card CAC authentication The Dominion LX is a family of economical KVM over IP switches targeted towards small and midsize businesses with less than 75 servers to manage The LX provides BIOS level IP control of 8 or 16 servers with one or two user remote access 219 220 Chapter 12 Frequently Asked Questions Question What are the standard features of the Dominion LX What KX II features are not available in the LX What CIMs server dongles can the LX use What is a MCUTP
43. leading from absolute path names file dev sr0 owner root group cdrom user rw user guest user rw group rw mask rw other A similar check of the permissions for a removable device shows guest_user administrator desktop Is I dev sdb1 brw rw 1 root disk 8 17 12 03 2010 12 02 dev sdb1 guest_user administrator desktop Is dev sdb1 brw rw 1 root disk 8 17 12 03 2010 12 02 dev sdb1 amp gt getfacl a dev sdb1 getfacl Removing leading from absolute path names file dev sdb1 owner root group disk user rw group rw other This requires that the user is provided read only permissions for the removable device root administrator desktop chmod 664 dev sdb1 root administrator desktop Is dev sdb1 brw rw r 1 root disk 8 17 12 03 2010 12 02 dev sdb1 zie Raritan The drive is then available to connect to the target 87 Chapter 4 Virtual Media Conditions when Read Write is Not Available Virtual media Read Write is not available in the following situations Using Virtual Media For Linux and Mac clients For all hard drives When the drive is write protected When the user does not have Read Write permission Port Permission Access is set to None or View Port Permission VM Access is set to Read Only or Deny See Prerequisites for Using Virtual Media on page 85 before you begin using virtual media
44. name that is used to access the LX with a web browser but without the prefix http In case the name given here and the actual network name differ the browser will pop up a security warning when the LX is accessed using HTTPS b Organizational unit This field is used for specifying to which department within an organization the LX belongs c Organization The name of the organization to which the LX belongs d Locality City The city where the organization is located e State Province The state or province where the organization is located f Country ISO code The country where the organization is located This is the two letter ISO code e g DE for Germany or US for the U S g Challenge Password Some certification authorities require a challenge password to authorize later changes on the certificate e g revocation of the certificate The minimum length of this password is four characters h Confirm Challenge Password Confirmation of the Challenge Password i Email The email address of a contact person that is responsible for the LX and its security 147 Chapter 7 Security Management j Key length The length of the generated key in bits 1024 is the default k Select the Create a Self Signed Certificate checkbox if applicable 3 Click Create to generate the Certificate Signing Request CSR gt To download a CSR certificate 1 The CSR and the file containing the private key u
45. not allow you to assign the same hotkey combination to more than one function For example if Q is already applied to the Disconnect from Target function it won t be available for the Exit Full Screen Mode function Further if a hotkey is added to the application due to an upgrade and the default value for the key is already in use the next available value is applied to the function instead 5 Click OK Keyboard Limitations Turkish Keyboards If using a Turkish keyboard you must connect to a target server through the Active KVM Client AKC It is not supported by other Raritan clients Slovenian Keyboards The key does not work on Slovenian keyboards due to a JRE limitation Language Configuration on Linux Because the Sun JRE on Linux has problems generating the correct Key Events for foreign language keyboards configured using System Preferences Raritan recommends that you configure foreign keyboards using the methods described in the following table Language Configuration method US Intl Default French Keyboard Indicator German System Settings Control Center Japanese System Settings Control Center UK System Settings Control Center Korean System Settings Control Center Belgian Keyboard Indicator Raritan Raritan Chapter 3 Working with Target Servers Language Configuration method Norwegian Keyboard Indicator Danish Keyboard Indicator Swedish Keyboard Indicator Hungarian System Settings
46. of trace route is displayed in the Result field Device Diagnostics Z Raritan O O ey GENE UN EN E E LPS Home gt Diagnostics gt Trace Route to Host 5 Trace Route to Host IP Address Host Hame 4 92 168 59 173 Maximum Hops 10 w Trace Route Result traceroute started wait for 2mins traceroute to 192 168 59 173 192 168 59 173 10 hops max 40 byte packets 1192 168 59 173 192 168 59 173 0 497 ms 0 308 ms 0 323 ms ALAA IH Ae Note This page is for use by Raritan Field Engineers or when you are directed by Raritan Technical Support Device diagnostics downloads the diagnostics information from the LX to the client machine Two operations can be performed on this page Execute a special diagnostics script provided by Raritan Technical Support during a critical error debugging session The script is uploaded to the device and executed Once this script has been executed you can download the diagnostics messages using the Save to File function Download the device diagnostic log for a snapshot of diagnostics messages from the LX device to the client This encrypted file is then sent to Raritan Technical Support Only Raritan can interpret this file Note This page is accessible only by users with administrative privileges 1 To run the LX System diagnostics Choose Diagnostics LX Diagnostics The LX Diagnostics page opens 161 Chapter 9 Diagnostics 2 To exec
47. on your monitor 3 Select Automatic Color Calibration to enable this feature 4 Select the video sensing mode Best possible video mode The device will perform the full Auto Sense process when switching targets or target resolutions Selecting this option calibrates the video for the best image quality Quick sense video mode With this option the device will use a quick video Auto Sense in order to show the target s video sooner This option is especially useful for entering a target server s BIOS configuration right after a reboot 5 Click OK to apply the settings and close the dialog Click Apply to apply the settings without closing the dialog zie Raritan Chapter 3 Working with Target Servers Note Some Sun background screens such as screens with very dark borders may not center precisely on certain Sun servers Use a different background or place a lighter colored icon in the upper left corner of the screen Video Settings Noise Filter Noise Fiker PLL Settings Clock Phase Color Settings Brightness Red lt gt Brightness Green Brightness Blue Contrast Red v gt A v v Contrast Green Contrast Blue 4 gt 4 Horizontal Offset lt gt Vertical Offset 4 gt Automatic Color Calibration Video Sensing Best possible video mode o Quick sense video mode da ZE Raritan Chapter 3 Working with Target Servers Using Screenshot from Ta
48. operating system administrator and standard user privileges vary from those of the Windows Vista operating system and the Windows 7 operating system When enabled in Vista or Windows 7 User Access Control UAC provides the lowest level of rights and privileges a user needs for an application For example a Run as Administrator option is provided for Internet Explorer for Administrator level tasks otherwise these are not be accessible even though the user has an Administrator login Both of these features affect the types of virtual media that can be accessed by users via Virtual KVM Client VKC and Active KVM Client AKC See your Microsoft help for additional information on these features and how to use them Following is a list virtual media types users can access via VKC and AKC when running in a Windows environment The features are broken down by client and the virtual media features that are accessible to each Windows user role Windows XP If you are running VKC and AKC in a Windows XP environment users must have Administrator privileges to access any virtual media type other than CD ROM connections ISOs and ISO images Windows Vista and Windows 7 If you are running VKC and AKC in a Windows Vista or Windows 7 environment and UAC is enabled the following virtual media types can be accessed depending on the user s Windows role Client Administrator Standard User AKC and Access to Access to uno Fixed drives and fixe
49. page 140 Home gt User Management gt Change Password Change Password Old Password Hew Password Confirm Hew Password OK Cancel d Z Raritan Chapter 6 Device Management In This Chapter Network Settllgs inii i atid nde 115 BI Ie EcI dem 119 Configuring Modem Settings sese 126 Configuring Date Time Settings essssseseeeeeee 127 Event Management simois aaaea aiaia YR a neers 128 Configuring POMS teris eei aieiaiei can apa aiaiai 131 Changing the Default GUI Language Setting sssuss 136 Network Settings Use the Network Settings page to customize the network configuration for example the IP address discovery port and LAN interface parameters for your LX There are two options available to set up your IP configuration e None default This is the recommended option static IP Since the LX is part of your network infrastructure you most likely do not want its IP address to change frequently This option allows you to set the network parameters e DHCP With this option the IP address is automatically assigned by a DHCP server gt To change the network configuration 1 Choose Device Settings Network The Network Settings page opens 2 Update the Network Basic Settings See Network Basic Settings on page 116 Update the LAN Interface Settings See LAN Interface Settings Cli
50. read write to virtual media If you are using a tiered configuration in which a base LX device is used to access multiple other tiered devices the tiered device enforces individual port control levels See Configuring and Enabling Tiering on page 121 for more information on tiering Setting Permissions for an Individual Group gt To set permissions for an individual user group 1 Locate the group from among the groups listed Individual groups can be identified by the in the Group Name Click the Group Name The Group page opens Select the appropriate permissions Click OK Z Raritan Users zie Raritan Chapter 5 User Management Modifying and Existing User Group Note All permissions are enabled for the Admin group and cannot be changed gt To modify an existing user group 1 From the Group page change the appropriate fields and set the appropriate permissions 2 Set the Permissions for the group Select the checkboxes before the permissions you want to assign to all of the users belonging to this group See Setting Permissions on page 96 3 Setthe Port Permissions Specify the server ports that can be accessed by users belonging to this group and the type of access See Setting Port Permissions on page 98 4 Click OK gt To delete a user group Important If you delete a group with users in it the users are automatically assigned to the unknown user group Tip To
51. select VM Share Mode This option is enabled only when PC Share mode is enabled When selected this option permits the sharing of virtual media among multiple users that is several users can access the same virtual media session The default is disabled If needed select Local Device Reset Mode This option specifies which actions are taken when the hardware Reset button at the back of the device is depressed For more information see Resetting the LX Using the Reset Button on page 183 Choose one of the following options Local device reset Description mode Enable Local Factory Returns the LX device to the factory defaults Reset default 145 146 Chapter 7 Security Management Local device reset Description mode Enable Local Admin Resets the local administrator password only Password Reset The password is reset to raritan Disable All Local No reset action is taken Resets Checking Your Browser for AES Encryption The LX supports AES 256 If you do not know if your browser uses AES check with the browser manufacturer or navigate to the https www fortify net ssicheck html website using the browser with the encryption method you want to check This website detects your browser s encryption method and displays a report Note Internet Explorer 6 does not support AES 128 or 256 bit encryption AES 256 Prerequisites and Supported Configurations AES 256 bit encryption is supported on the following web browser
52. select a Resolution supported by the LX c Click OK Note Once connected to the target server in many Linux graphical environments the Ctrl Alt lt gt command will change the video resolution scrolling through all available resolutions that remain enabled in the XF86Config or etc X1 1 xorg conf depending on your X server distribution Note If you change the video resolution you must log out of the target server and log back in for the video settings to take effect SUSE Linux 10 1 Settings Note Do not attempt to synchronize the mouse at the SUSE Linux login prompt You must be connected to the target server to synchronize the mouse cursors gt To configure the mouse settings 1 Choose Desktop gt Control Center The Desktop Preferences dialog appears Click Mouse The Mouse Preferences dialog appears Open the Motion tab Within the Speed group set the Acceleration slider to the exact center position Within the Speed group set the Sensitivity slider to low Within the Drag amp Drop group set the Threshold slider to small Click Close gt To configure the video 1 Choose Desktop Preferences gt Graphics Card and Monitor The Card and Monitor Properties dialog appears 2 Verify that a Resolution and Refresh Rate is in use that is supported by the LX See Supported Video Resolutions for more information Note If you change the video resolution you must log out of the target server an
53. subnet Add New Device to Favorites Add edit and delete devices from your list of Favorites Favorites List Page From the Favorites List page you can add edit and delete devices from your list of favorites gt To open the Favorites List page e Choose Manage gt Favorites List The Favorites List page opens Discovering Devices on the Local Subnet This option discovers the devices on your local subnet which is the subnet where the LX Remote Console is running These devices can be accessed directly from this page or you can add them to your list of favorites See Favorites List Page on page 49 gt To discover devices on the local subnet 1 Choose Manage gt Discover Devices Local Subnet The Discover Devices Local Subnet page appears 2 Choose the appropriate discovery port To use the default discovery port select the Use Default Port 5000 checkbox To use a different discovery port Deselect the Use Default Port 5000 checkbox Type the port number in the Discover on Port field 49 50 Chapter 3 Working with Target Servers c Click Save Click Refresh The list of devices on the local subnet is refreshed To add devices to your Favorites List Select the checkbox next to the device name IP address Click Add To access a discovered device Click the device name or IP address for that device A new browser opens to that device Discovering Devices on the LX Subnet This option d
54. the appropriate language In addition the keyboard language for the client machine and the KVM target servers has to match Consult the documentation for your operating system for additional information about changing the keyboard layout Changing the Keyboard Layout Code Sun Targets Use this procedure if you are using a DCIM SUSB and would like the keyboard layout changed to another language gt To change the keyboard layout code DCIM SUSB only 1 Open a Text Editor window on the Sun workstation 2 Check that the Num Lock key is active and press the left Ctrl key and the Del key on your keyboard The Caps Lock light starts to blink indicating that the CIM is in Layout Code Change mode The text window displays Raritan Computer Inc Current keyboard layout code 22h US5 UNIX 3 Type the layout code desired for example 37 for the Japanese keyboard 4 Press Enter Shut down the device and power on once again The DCIM SUSB performs a reset power cycle 6 Verify that the characters are correct 35 36 Chapter 2 Installation and Configuration Step 7 Configure Tiering Optional LX and generic tiering are supported by the LX See the Device Management on page 115 section for more information on this feature Connect from a target server port on the base device to the tier LX Local Access port video keyboard mouse ports using a D2CIM DVUSB 1 To enable tiering From the tier bas
55. the following localized languages Japanese Simplified Chinese Traditional Chinese To change the GUI language Select Device Settings Language The Language Settings page opens Raritan Chapter 6 Device Management 2 From the Language drop down select the language you want to apply to the GUI 3 Click Apply Click Reset Defaults to change back to English Note Once you apply a new language the online help is also localized to match your language selection zie Raritan id Chapter 7 Security Settings Raritan Security Management In This Chapter SECUNILY Settings EpL 138 SSE Certificates HP p E 147 From the Security Settings page you can specify login limitations user blocking password rules and encryption and share settings Raritan SSL certificates are used for public and private key exchanges and provide an additional level of security Raritan web server certificates are self signed Java applet certificates are signed by a VeriSign certificate Encryption guarantees that your information is safe from eavesdropping and these certificates ensure that you can trust that the entity is Raritan Inc gt To configure the security settings 1 Choose Security Security Settings The Security Settings page opens 2 Update the Login Limitations on page 139 settings as appropriate 3 Update the Strong Passwords on page 140 settings as appropriate Upda
56. to the left of the tier device name See Configuring and Enabling Tiering on page 121 for more information on tiering gt Touse the Port Access page 1 Login to the Local Console 2 Click the Port Access tab The Port Access page opens The KVM target servers are initially sorted by Port Number You can change the display to sort on any of the columns Port Number Numbered from 1 to the total number of ports available for the LX device Port Name The name of the LX port Initially this is set to Dominion LX Port but you can change the name to something more descriptive When you click a Port Name link the Port Action Menu appears Note Do not use apostrophes for the Port CIM Name Type The type of server or CIM Status The status for standard servers is either up or down Raritan Chapter 11 LX Local Console Availability The availability of the server Click the Port Name of the target server you want to access The Port Action Menu appears See Port Action Menu for details on available menu options Choose the desired menu command from the Port Action Menu To change the display sort order and or view more ports on the same page Click the column heading by which you want to sort The list of KVM target servers is sorted by that column In the Rows per Page enter the number of ports to be displayed on the page and click Set Accessing a Target Server Raritan To acc
57. values rather the user should refer to the modem to create the appropriate modem specific string a Modem Settings a Enable RTS CTS flow control Send data to the computer on receipt of RTS CTS should be configured to only drop if required by flow control DTR should be configured for Modem resets with DTR toggle DSR should be configured as always on DCD should be configured as enabled after a carrier signal is detected that is DCD should only be enabled when modem connection is established with the remote side 5 Enter the IPv4 modem server address in the Modem Server IPv4 Address field and the client modem address in the Modem Client IPv4 Address field Note The modem client and server IP addresses must be on the same subnet and cannot overlap the device s LAN subnet id 5E Raritan Chapter 6 Device Management 6 Click OK to commit your changes or click Reset to Defaults to return the settings to their defaults Modem Settings Enable Modem Serial Line Speed 115200 bits s Modem Init String ATQO amp D3 amp CI Modem Server IPv4 Address 0 04 Modem Client IPv4 Address OK Reset To Defaults Cancel See Certified Modems on page 190 for information on certified modems that work with the LX For information on settings that will give you the best performance when connecting to the LX via modem see Creating Modifying and Deleting Profiles in MPC Generation 2 Devic
58. 01 96 CIM Information Firmware Version Serial Number GN000D5D01339E3C3D3F6D70666936 Dua VM PQ21010199 Dominion LX Port13 16 DominionL X Dual VM 3A88 PQ28450291 aa 22 P p amain Te om ama LB M mant ii Sis Raritan Chapter 8 Maintenance Backup and Restore 5 Raritan From the Backup Restore page you can backup and restore the settings and configuration for your LX In addition to using backup and restore for business continuity purposes you can use this feature as a time saving mechanism For instance you can quickly provide access to your team from another LX by backing up the user configuration settings from the LX in use and restoring those configurations to the new LX You can also set up one LX and copy its configuration to multiple LX devices gt To access the Backup Restore page e Choose Maintenance gt Backup Restore The Backup Restore page opens Backup Restore Full Restore Protected Restore Custom Restore User and Group Restore Device Settings Restore Backup Cancel f Note Backups are always complete system backups Hestores can be complete or partial depending on your selection Restore File ess Oe S gt If you are using Firefox or Internet Explorer 5 or earlier to backup your LX 1 Click Backup A File Download dialog appears Click Save A Save As dialog appears Choose the location specify a file name and click Save A Downloa
59. 1 To use virtual media If you plan to access file server ISO images identify those file servers and images through the Remote Console File Server Setup page See Virtual Media File Server Setup File Server ISO Images Only on page 89 Note ISO9660 format is the standard supported by Raritan However other CD ROM extensions may also work Open a KVM session with the appropriate target server a Open the Port Access page from the Remote Console b Connect to the target server from the Port Access page Click the Port Name for the appropriate server Choose the Connect command from the Port Action menu The target server opens in a Virtual KVM Client window Connect to the virtual media For Select this VM option Local drives Connect Drive Local CD DVD drives Connect CD ROM ISO ISO Images Connect CD ROM ISO File Server ISO Images Connect CD ROM ISO Upon completion of your tasks disconnect the virtual media See Disconnecting Virtual Media on page 93 88 Raritan Raritan Chapter 4 Virtual Media Virtual Media File Server Setup File Server ISO Images Only Note This feature is only required when using virtual media to access file server ISO images ISO9660 format is the standard supported by Raritan However other CD ROM extensions may also work Note SMB CIFS support is required on the file server Use the Remote Console File Server Setup page to designate the files server s
60. 3 Working with Target Servers Using Scan Options Following are options available to you while scanning targets With the exception of the Expand Collapse icon all of these options are selected from the Options menu in the upper left of the Port Scan viewer The options will return to their defaults when you close the window Hide or View Thumbnails 4 Use the Expand Collapse icon P at the upper left of the window to hide or view thumbnails Expanded is the default view Pause the Thumbnail Slide Show Pause thumbnails from rotating between one target and the next by selecting Options Pause Rotating thumbnails is the default setting Resume the Thumbnail Slide Show Resume the thumbnail rotation by selecting Options Resume Size the Thumbnails in the Port Scan Viewer Enlarge the size of the thumbnails by selecting Options Size 360x240 Minimize the size of the thumbnails by selection Options Size 160x120 This is the default thumbnail size Change the Orientation of the Port Scan Viewer View thumbnails along the bottom of the Port Scan viewer by selecting Options Split Orientation Horizontal View thumbnails along the right of the Port Scan viewer by selecting Options Split Orientation Vertical This is the default view 47 48 Chapter 3 Working with Target Servers Managing Favorites A Favorites feature is provided so you can organize and quickly access the devices you use
61. 4 75 1Hz 1440x900 60Hz 1024x768 60Hz 1600x1200 60Hz 1024x768 70 1680x1050 60Hz 1024x768 72 1920x1080 60Hz Target Server Connection Distance and Video Resolution The maximum supported distance is a function of many factors including the type quality of the Cat5 cable server type and manufacturer video driver and monitor environmental conditions and user expectations For the 1600x1200 and 1920x1080 video resolutions the refresh rate is 60 and the maximum connection distance is 50 ft 15 m Note Due to the multiplicity of server manufacturers and types OS versions video drivers and so forth and the subjective nature of video quality Raritan cannot guarantee performance across all distances in all environments See the Supported Video Resolutions on page 13 for the video resolutions supported by the LX Certified Modems e USRobotics 56K 5686E e ZOOM v90 e ZOOM v92 e USRobotics Sportster 56K e USRobotics Courier 56K Remote Connection Remote connection Details Network 10BASE T 100BASE T and 1000BASE T Gigabit Ethernet de Raritan Remote connection Details Protocols LDAP LDAPS TCP IP UDP SNTP HTTP HTTPS RADIUS Supported Keyboard Languages zie Raritan Appendix A Specifications The LX provides keyboard support for the languages listed in the following table Note You can use the keyboard for Chinese Japanese and Korean for display only local language in
62. APS and RADIUS Note on Microsoft Active Directory Microsoft Active Directory uses the LDAP LDAPS protocol natively and can function as an LDAP LDAPS server and authentication source for the LX If it has the IAS Internet Authorization Server component a Microsoft Active Directory server can also serve as a RADIUS authentication source zie Raritan Chapter 2 Installation and Configuration Create User Groups and Users As part of the initial configuration you must define user groups and users in order for users to access the LX The LX uses system supplied default user groups and allows you to create groups and specify the appropriate permissions to suit your needs User names and passwords are required to gain access to the LX This information is used to authenticate users attempting to access your LX See User Management on page 94 for details on adding and editing user groups and users Step 5 Launch the LX Remote Console gt To launch the LX Remote Console 1 Login to any workstation with network connectivity to your LX and that has Microsoft NET and or Java Runtime Environment installed JRE is available on the Java website http java sun com 2 Launch a supported web browser such as Internet Explorer or Firefox 3 Enter the URL http7 IP ADDRESS or http IP ADDRESS akc for NET where IP ADDRESS is the IP address assigned to your LX You can also use https the DNS name of the LX assig
63. CIM from the LX tiered device to the LX base device LX base device COLO 123 Chapter 6 Device Management Enabling Direct Port Access via URL Direct port access allows users to bypass having to use the device s Login dialog and Port Access page This feature also provides the ability to enter a username and password directly and proceed to the target if the username and password is not contained in the URL The following is important URL information regarding direct port access If you are using VKC and direct port access e https IPaddress dpa asp username username amp password passwo rd amp port port number If you are using AKC and direct port access e https IPaddress dpa asp username username amp password passwo rd amp port port number amp client akc Where e Username and password are optional If they are not provided a login dialog will be displayed and after being authenticated the user will be directly connected to the target e The port may be a port number or port name If you are using a port name the name must be unique or an error is reported If the port is omitted altogether an error is reported e Client akc is optional unless you are using the AKC client If client akc is not included VKC is used as the client gt To enable direct port access 1 Choose Device Settings gt Device Services The Device Service Settings page opens 2 Select Enable Direct Port Access via URL if you
64. If you want the menu bar to remain visible while in Full Screen mode enable the Pin Menu Toolbar option from the Tool Options dialog See Tool Options on page 75 gt To enter full screen mode e Choose View gt Full Screen gt To exit full screen mode e Press the hot key configured in the Tool s Options dialog The default is Ctrl Alt M If you want to access the target in full screen mode at all times you can make Full Screen mode the default gt To set Full Screen mode as the default mode 1 Click Tools gt Options to open the Options dialog 2 Select Enable Launch in Full Screen Mode and click OK 79 Chapter 3 Working with Target Servers Help Options About Raritan Virtual KVM Client This menu command provides version information about the Virtual KVM Client in case you require assistance from Raritan Technical Support gt To obtain version information 1 Choose Help gt About Raritan Virtual KVM Client 2 Use the Copy to Clipboard button to copy the information contained in the dialog to a clipboard file so it can be accessed later when dealing with support if needed Multi Platform Client MPC Raritan Multi Platform Client MPC is a graphical user interface for the Raritan product lines providing remote access to target servers connected to Raritan KVM over IP devices For details on using MPC see the KVM and Serial Access Clients Guide available on Raritan s website on the same page
65. India Monday Friday 9 a m 6 p m local time Phone 91 124 410 7881 gt Japan Monday Friday 9 30 a m 5 30 p m local time Phone 81 3 3523 5991 Email support japan raritan com gt Europe Europe Monday Friday 8 30 a m 5 p m GMT 1 CET Phone 31 10 2844040 Email tech europe raritan com United Kingdom Monday Friday 8 30 a m to 5 p m GMT Phone 44 0 20 7090 1390 France Monday Friday 8 30 a m 5 p m GMT 1 CET Phone 33 1 47 56 20 39 Germany Monday Friday 8 30 a m 5 30 p m GMT 1 CET Phone 49 20 17 47 98 0 Email rg support raritan com gt Melbourne Australia Monday Friday 9 00 a m 6 p m local time Phone 61 3 9866 6887 gt Taiwan Monday Friday 9 a m 6 p m GMT 5 Standard 4 Daylight Phone 886 2 8919 1333 Email support apac raritan com
66. K to create the new attribute Adding Attributes to the Class gt To add attributes to the class 1 Click Classes in the left pane of the window sis Raritan m Appendix B Updating the LDAP Schema 200 Properties 2 Scroll to the user class in the right pane and right click it Ta Consolel Console Root Active Directory Schema ra gcl4j2nzmztmypemyconiain CORR Im s t File Action View Faverites Window Help e en enre Conscle Ract EBG Active Directory Schema Is serviceConnecbonPoint Structural Active Bg Classes Eg servicelnstance Structural Active Servi C atrbutes BS zirpleSecurit Object Auxiliary Active The s E site Structural Active Site B3 siteLink Structural Active Site L Wa citeLinl Bridge Structural Active Site L 8 stesCentainer Structural Active Sites mi storage Structural Active Store Ei subnet Structural Active Subn W3 cubnetContaner Structural Active Subn mi subSchema Structural Active SubS Bp top Abstract Active Top Wi bustecDomain Structural Active Trust Wi typelibrary Structural Active New Window From Here Refresh W3 volume Active volun w Help 3 Choose Properties from the menu The user Properties dialog appears Click the Attributes tab to open it Click Add Raritan Appendix B Updating the LDAP Schema 6 Choose rciusergroup from the Select Schema Object list Select Schema Object E ajx AONAD x 7 Click
67. Make Linux Settings Permanent 22 Make UNIX Settings Permanent 26 Manage Favorites Page 49 Managing Favorites 42 48 Raritan MCUTP 212 MCUTP CIM Behavior 216 Modifying an Existing User 101 Modifying and Existing User Group 99 Modifying and Removing Keyboard Macros 64 Mounting CD ROM DVD ROM ISO Images 89 91 Mounting Local Drives 90 Mouse Modes 14 Mouse Options 70 Mouse Pointer Synchronization 71 Mouse Pointer Synchronization Fedora 210 Multi Platform Client MPC 80 N Name Command 171 Naming Target Servers 32 Navigation of the CLI 165 Network Basic Settings 115 116 Network Interface Page 157 Network Settings 30 32 115 116 118 193 Network Speed Settings 119 195 Network Statistics Page 158 Non US Keyboards 207 Note on Microsoft Active Directory 33 O Overview 12 83 163 172 205 P Package Contents 7 Ping Host Page 160 Port Access Page 40 43 121 Port Access Page Local Console Server Display 174 Port Action Menu 44 Prerequisites for Using AKC 54 Prerequisites for Using Virtual Media 85 88 Proxy Server Configuration for Use with MPC VKC and AKC 51 R RADIUS Communication Exchange Specifications 111 Rebooting the LX 155 Refreshing the Screen 65 Related Documentation 10 Relationship Between Users and Groups 95 Remote Authentication 33 136 Remote Connection 191 5 Raritan
68. Microsystems server s special keys operate on the local port These special are available from the Keyboard menu when you connect to a Sun target server Sun key Again Props Undo Stop A Front Copy Open Find Cut Paste Mute Compose Local port key combination Ctrl Alt F2 Ctrl Alt F3 Ctrl Alt F4 Break a Ctrl Alt F5 Ctrl Alt F6 Ctrl Alt F7 Ctrl Alt F9 Ctrl Alt F10 Ctrl Alt F8 Ctrl Alt F12 Ctrl Alt KPAD Raritan Chapter 11 LX Local Console Sun key Local port key combination Vol Ctrl Alt KPAD Vol Ctrl Alt KPAD Stop No key combination Power No key combination Returning to the LX Local Console Interface Important The LX Local Console default hot key is to press the Scroll Lock key twice rapidly This key combination can be changed in the Local Port Settings page See Configuring LX Local Port Settings from the Local Console gt To return to the LX Local Console from the target server e Press the hot key twice rapidly the default hot key is Scroll Lock The video display switches from the target server interface to the LX Local Console interface Local Port Administration zie Raritan The LX can be managed by either the LX Local Console or the LX Remote Console Note that the LX Local Console also provides access to e Factory Reset e Local Port Settings available in the Remote Console as well Note Only users with administrati
69. Not Refreshed After Files Added ssssssssseeene 214 Active System Partitions RP 214 TIVE ers E REED TOL NM 214 Virtual Media Linux Drive Listed Twice ssssssseseeeeeneennn nns 215 Mac and Linux Locked Mapped Drives ssssessssesseeeeeeennne enne 215 Accessing Virtual Media on a Windows 2000 Server Using a D2CIM VUSB 215 Target BIOS Boot Time with Virtual Media 215 Virtual Media Connection Failures Using High Speed for Virtual Media Connections 215 GUMS ten 215 Windows 3 Button Mouse on Linux Targets enne 215 Windows 2000 Composite USB Device Behavior for Virtual Media 216 MGUTP GIM BER AVION ortae nt hai mui eto mere etna eta tarea nci mae iu Eat etra dc 216 zie Raritan n Contents Appendix D Frequently Asked Questions 217 Chapter 12 CX FAQS isei a E 218 Index 223 ai Raritan Chapter1 Introduction In This Chapter EX OVEVISW m ici tind Reid eens di doo Package Comments 2 1 UI ci rt dae ride EY SE HE aa aR a LX Client Applications iis iioi other caddie st Etre Ee dd intentions HardWare ep HT P ELE Sis Raritan Chapter 1 Introduction LX Overview The LX KVM over IP switches give one to two remote users with an independent local port BIOS level access and control of up to 16
70. OK in the Select Schema Object dialog 8 Click OK in the User Properties dialog Updating the Schema Cache gt To update the schema cache 1 Right click Active Directory Schema in the left pane of the window and select Reload the Schema 2 Minimize the Active Directory Schema MMC Microsoft Management Console console Editing rciusergroup Attributes for User Members To run the Active Directory script on a Windows 2003 server use the script provided by Microsoft available on the Windows 2003 server installation CD These scripts are loaded onto your system with a Microsoft Windows 2003 installation ADSI Active Directory Service Interface acts as a low level editor for Active Directory allowing you to perform common administrative tasks such as adding deleting and moving objects with a directory service P To edit the individual user attributes within the group rciusergroup 1 From the installation CD choose Support Tools 2 Double click SUPTOOLS MSI to install the support tools zie Raritan xd Appendix B Updating the LDAP Schema 3 Goto the directory where the support tools were installed Run adsiedit msc The ADSI Edit window opens Donen road tnm mypc domanDAs Corfigarabon rc gitan configuration Schema rcy M remt mp dWD 4 Open the Domain is Raritan Appendix B Updating the LDAP Schema 5 Inthe left pane of the window select the CN Users folder amp Doman r
71. ONdS EM 140 BET Doe em 142 Encryption Ge MARC E TETTE PEEL DELL Aidid a aa aE 144 SOL GT CREER EET II eee he needa ees 147 Chapter 8 Maintenance 149 PUG LOG D 149 Device InfOrmiatiOFi cci tese ince e RV rod ra dx n Ra du E Ya sa Te GER Ra B I E RE 150 Backup and RESON RE S 151 Upgrading enl cp RP UH 153 Upgrading Finttiware iioii einen tines ete Rihanna eed 153 Upgrade HIStory ptc aaae E 155 Rebooting the e qe M Rem 155 Chapter 9 Diagnostics 157 Network Interface Page diem tette en dernier Er sere ne aun cg de nni ree 157 Network Statistics Page iste rct n ee eu n Rx eR IR Ee Ran RENE Re REEF EAE 158 PING Host PAG e ais 160 Trace Route to Host Page etm rename teen a e bd ex Pe Pu ren d ae a e eda ea uei d 160 Device sD IAGO SUCS sates ceded temas 161 Chapter 10 Command Line Interface CLI 163 OT MC c ates 163 Accessing the LX Using CLI sssssssssssssseseseneeneneneeen nnne enne nennen nennt 164 SSH Connection to the LX sse nnne nennen tnr en rennen nsns trennen 164 SSH Access from a Windows PO eene 164 SSH Access from a UNIX Linux Workstation
72. P server can provide these user group names by returning an attribute named as follows rciusergroup attribute type string This may require a schema extension on your LDAP LDAPS server Consult your authentication server administrator to enable this attribute In addition for Microsoft Active Directory the standard LDAP memberOf is used From Microsoft Active Directory Note This should be attempted only by an experienced Active Directory administrator Returning user group information from Microsoft s Active Directory for Windows 2000 operating system server requires updating the LDAP LDAPS schema See your Microsoft documentation for details 1 Install the schema plug in for Active Directory See Microsoft Active Directory documentation for instructions 2 Run Active Directory Console and select Active Directory Schema 197 Appendix B Updating the LDAP Schema Setting the Registry to Permit Write Operations to the Schema To allow a domain controller to write to the schema you must set a registry entry that permits schema updates gt To permit write operations to the schema 1 Right click the Active Directory Schema root node in the left pane of the window and then click Operations Master The Change Schema Master dialog appears Change Schema Master 321 xj The schema master manages modifications to the schema Only one server in the enterprise performs this role Current schema master onlin
73. Ra aera sa Rex oer aS R RE 118 DEVICE Sevice S PEE 119 Enabling SSH p 119 HTP and HTTPS Port Settings ed etie Ero ted erbe eie Fat indeed aes 120 Entering the Discovery Porteira anaa act ie ER REA o Le DLE ve aUe Ro ais 120 E Raritan Contents Configuring and Enabling Tlering 2i iiie tta socie tpa daten tte eadeni aaia 121 Enabling Direct Port Access via URL iecit dieere Rorate cba aikanani 124 Enabling the AKC Download Server Certificate Validation ssssssssssse 125 Configuring Modem Settings acta tore tre poe pets tete unsere adus Ex ape eta re bx de etta dr Ru ede Re 126 Configuring Date Time Settings 2 223 onto trou tee uk ee Fete rcu a nde etae da den 127 Event Managelrient ceu detenta pee n er antea dus et ove tap Dd peux desta das exper iren du Eat die una deae 128 Configuring Event Management Settings 129 ConfIguritgPORtS n eoseen t eemaco titu det aaa eae use pica uorum Ede suu eu durtu Recette mese ana debt ae Rer ce dene 131 Configuring Standard Target Servers etn 132 Configuring KVM SWITCHES eene tente td pete eren been da tra nae Fette E vnu eben 132 Configuring LX Local Port Settiligs oce edet oen eter ts reet ta ira nde eet tenetur ces 134 Changing the Default GUI Language Setting ssssssssess eee 136 Chapter 7 Security Management 138 rase T Tm 138 Logini E TtsIEz Moya EE INTE p E 139 SONG PASSW
74. SO image to mount onto the target server Local CO DVO Drive o CO ROM C 180 Image Image Path Grower C Remote Server ISO Image Hostname Image File Server Usemame File Server Password pr so Connect Cancel 2 For internal and external CD ROM or DVD ROM drives a Choose the Local CD DVD Drive option b Choose the drive from the Local CD DVD Drive drop down list All available internal and external CD and DVD drive names will be populated in the drop down list c Click Connect 3 For ISO images Raritan B Chapter 4 Virtual Media a Choose the ISO Image option Use this option when you want to access a disk image of a CD DVD or hard drive ISO format is the only format supported b Click Browse c Navigate to the path containing the disk image you want to use and click Open The path is populated in the Image Path field d Click Connect 4 Forremote ISO images on a file server a Choose the Remote Server ISO Image option b Choose Hostname and Image from the drop down list The file servers and image paths available are those that you configured using the File Server Setup page Only items you configured using the File Server Setup page will be in the drop down list c File Server Username User name required for access to the file server The name can include the domain name such as mydomain username d File Server Password Password required for access to t
75. The Local Access port also provides a graphical user interface from the LX Local Console for administration and target server access See Configuring LX Local Port Settings for additional information gt Toconnect the local port e Attach a multi sync VGA monitor mouse and keyboard to the respective Local User ports using a USB keyboard and mouse The port connections are located on the back panel of the LX Connection Description Monitor Attach a standard multi sync VGA monitor to the HD15 female video port Keyboard Attach a standard USB keyboard to one of the USB Type A female ports Mouse Attach a standard USB mouse to one of the USB Type A female ports D Target Server Ports For convenient access to target servers while at the rack use the LX Local Access port While the Local Access port is required for installation and setup it is optional for subsequent use The Local Access port also provides a graphical user interface from the LX Local Console for administration and target server access See Configuring LX Local Port Settings for additional information gt To connect a target server to the LX 1 Use the appropriate Computer Interface Module CIM See Supported Operating Systems Clients on page 186 for information on compatible CIMS 2 Attach the UTP Cat5 5e 6 cable of your CIM to the video port of your target server Ensure that your target server s video has already been configured to a supp
76. VD drives e USB mass storage devices e PC hard drives e ISO images disk images Note ISO9660 is the standard supported by Raritan However other ISO standards can be used The following client operating systems are supported e Windows e MacOS X 10 5 e MacOS X 10 6 e Red Hat Desktop 4 0 and 5 0 e Open SUSE 10 11 e Fedora 13 and 14 The Virtual KVM Client VKC and Multi Platform Client MPC can be used to mount virtual media types with the exception of Mac OS X 10 5 which is supported exclusively by MPC zie Raritan i 84 Chapter 4 Virtual Media Diagram key Q Desktop PC 2 LX 6 CIM Target server CD DVD drive USB mass storage device Remote file server ISO images PC hard drive Raritan Z Raritan Chapter 4 Virtual Media Prerequisites for Using Virtual Media With the virtual media feature you can mount up to two drives of different types that are supported by the USB profile currently applied to the target These drives are accessible for the duration of the KVM session For example you can mount a specific CD ROM use it and then disconnect it when you are done The CD ROM virtual media channel will remain open however so that you can virtually mount another CD ROM These virtual media channels remain open until the KVM session is closed as long as the USB profile supports it To use virtual media connect attach the media to the client or networ
77. a Keyboard Combination If you assigned a keyboard combination to a macro when building it you can execute the macro by pressing its assigned keystrokes For example press the keys Ctrl Alt 0 simultaneously to minimize all windows on a Windows target server Modifying and Removing Keyboard Macros To modify a macro Choose Keyboard Keyboard Macros The Keyboard Macros dialog appears Choose the macro from among those listed Click Modify The Add Edit Macro dialog appears Make your changes Click OK cw c Im v To remove a macro Choose Keyboard Keyboard Macros The Keyboard Macros dialog appears Choose the macro from among those listed Click Remove The macro is deleted Ctrl Alt Del Macro Due to its frequent use a Ctrl Alt Delete macro is preprogrammed Clicking on the Ctrl Alt Delete button 3C in the toolbar sends this key sequence to the server or to the KVM switch to which you are currently connected In contrast if you were to physically press the Ctrl Alt Del keys the command would first be intercepted by your own PC due to the structure of the Windows operating system instead of sending the key sequence to the target server as intended Raritan Raritan Chapter 3 Working with Target Servers Setting CIM Keyboard Mouse Options gt To access the DCIM USBG2 setup menu 1 Put the mouse focus on a window such as Note Pad Windows operating system or an equivalent 2 Se
78. additional text to make the entry unique and press the Tab key to complete the entry 165 Chapter 10 Command Line Interface CLI CLI Tips Syntax Tips and Shortcuts Commands are listed in alphabetical order Commands are not case sensitive Parameter names are single word without underscore Commands without arguments default to show current settings for the command Typing a question mark after a command produces help for that command A pipe symbol indicates a choice within an optional or required set of keywords or arguments Shortcuts Press the Up arrow key to display the last entry Press Backspace to delete the last character typed Press Ctrl C to terminate a command or cancel a command if you typed the wrong parameters Press Enter to execute the command Press Tab to complete a command For example Admin Port Conf The system then displays the Admin Port Config prompt Common Commands for All Command Line Interface Levels Following are the commands that are available at all CLI levels These commands also help navigate through the CLI Commands Description top Return to the top level of the CLI hierarchy or the username prompt history Display the last 200 commands the user entered into the LX CLI help Display an overview of the CLI syntax quit Places the user back one level logout Logs out the user session 166 Raritan Chapter 10 Command Lin
79. age 190 The LX supports these resolutions Resolutions 640x350 70Hz 1024x768 85 640x350 85Hz 1024x768 75Hz 640x400 56Hz 1024x768 90Hz 640x400 84Hz 1024x768 100Hz 640x400 85Hz 1152x864 60Hz 640x480 60Hz 1152x864 70Hz 640x480 66 6Hz 1152x864 75Hz 13 Chapter 2 Installation and Configuration Resolutions 640x480 72Hz 640x480 75Hz 640x480 85Hz 720x400 70Hz 720x400 84Hz 720x400 85Hz 800x600 56Hz 800x600 60Hz 800x600 70Hz 800x600 72Hz 800x600 75Hz 800x600 85Hz 800x600 90Hz 800x600 100Hz 832x624 75 1Hz 1024x768 60Hz 1024x768 70 1024x768 72 Mouse Modes 1152x864 85Hz 1152x870 75 1Hz 1152x900 66Hz 1152x900 76Hz 1280x720 60Hz 1280x960 60Hz 1280x960 85Hz 1280x1024 60Hz 1280x1024 75Hz 1280x1024 85Hz 1360x768 60Hz 1366x768 60Hz 1368x768 60Hz 1400x1050 60Hz 1440x900 60Hz 1600x1200 60Hz 1680x1050 60Hz 1920x1080 60Hz The LX operates in Absolute Mouse Mode Intelligent Mouse Mode and Standard Mouse Mode Mouse parameters do not have to be altered for Absolute Mouse Synchronization but a D2CIM VUSB or D2CIM DVUSB is required For both the Standard and Intelligent Mouse Modes mouse parameters must be set to specific values Mouse configurations vary on different target operating systems Consult your operating system documentation for additional details Intelligent Mouse Mode works well on most Windows platforms but may produce unpredictable results when Active Deskt
80. an 2 3 Chapter 2 Installation and Configuration All KVM target servers must be configured to one of the display resolutions supported by the LX The most popular supported resolutions for Sun machines are Display resolution Vertical refresh rate Aspect ratio 1600 x 1200 60 Hz 4 3 1280 x 1024 60 75 85 Hz 5 4 1152 x 864 75 Hz 4 3 1024 x 768 60 70 75 85 Hz 4 3 800 x 600 56 60 72 75 85 Hz 4 3 720 x 400 85 Hz 9 5 640 x 480 60 72 75 85 Hz 4 3 KVM target servers running the Solaris operating system must output VGA video H and V sync not composite sync To change your Sun video card output from composite sync to the nondefault VGA output Issue the Stop A command to drop to bootprom mode Issue the following command to change the output resolution setenv output device screen r 1024x768x70 Issue the boot command to reboot the server You can also contact your Raritan representative to purchase a video output adapter If you have Use this video output adapter Sun 13W3 with composite APSSUN II Guardian converter sync output Sun HD15 with composite 1396C converter to convert from sync output HD15 to 13W3 and an APSSUN II Guardian converter to support composite sync Sun HD15 with separate sync APKMSUN Guardian converter output Note Some of the standard Sun background screens may not center precisely on certain Sun servers with dark borders Use another background or place a light colored icon in the upper
81. an Chapter 10 Command Line Interface CLI e Enteradmin gt config gt network Command Description help Display overview of commands history Display the current session s command line history interface Set get network parameters ipv6 interface Set get IPv6 network parameters logout Logout of the current CLI session name Device name configuration quit Return to previous menu stop Return to the root menu Security Issues Elements to consider when addressing security for console servers e Encrypting the data traffic sent between the operator console and the LX device e Providing authentication and authorization for users e Security profile The LX supports each of these elements however they must be configured prior to general use Administering the LX Console Server Configuration Commands Note CLI commands are the same for SSH and Local Port access sessions The Network command can be accessed in the Configuration menu for the LX Configuring Network The network menu commands are used to configure the LX network adapter Commands Description interface Configure the LX device network interface name Network name configuration 169 zie Raritan Chapter 10 Command Line Interface CLI Commands Description ipv6 Set get IPv6 network parameters Interface Command The Interface command is used to configure the LX network interface The syntax of the interface command is inte
82. an device to connect to it Note Depending on your browser and browser security settings you may see various security and certificate check and warning messages It is necessary to accept the options in order to open MPC Note If you are using Firefox 3 0 3 you may experience problems launching the application If this occurs clear the browser cache and launch the application again 81 Chapter 4 ZE Raritan Virtual Media In This Chapter QNUM EET 83 Using Virtual Media seisein oed rebar deed cett x reed cbe d Cha ieee 88 Disconnecting Virtual Media 2 2 irte iei rer aed ase 93 82 Chapter 4 Virtual Media Overview Virtual media extends KVM capabilities by enabling KVM target servers to remotely access media from a client PC and network file servers The LX supports virtual media access of hard drives and remotely mounted images The D2CIM VUSB CIM and D2CIM DVUSB computer interface module support virtual media sessions to KVM target servers supporting the USB 2 0 interface These CIMs also support Absolute Mouse Synchronization as well as remote firmware update Virtual media provides the ability to perform tasks remotely such as e Transferring files e Running diagnostics e Installing or patching applications e Complete installation of the operating system The following virtual media types are supported for Windows Mac and Linux clients e Internal and USB mounted CD and D
83. and image paths that you want to access using virtual media File server ISO images specified here are available for selection in the Remote Server ISO Image Hostname and Image drop down lists in the Map Virtual Media CD ISO Image dialog See Mounting CD ROM DVD ROM ISO Images on page 91 gt To designate file server ISO images for virtual media access 1 Choose Virtual Media from the Remote Console The File Server Setup page opens 2 Check the Selected checkbox for all media that you want accessible as virtual media 3 Enter information about the file server ISO images that you want to access P Address Host Name Host name or IP address of the file server Image Path Full path name of the location of the ISO image For example sharename0 path0 image0 iso sharename1 path1 image1 iso and so on Note The host name cannot exceed 232 characters in length 4 Click Save All media specified here are now available for selection in the Map Virtual Media CD ISO Image dialog Note You cannot access a remote ISO image via virtual media using an IPv6 address due to technical limitations of third party software used by the LX KX KSX or KX101 G2 device Note If you are connecting to a Windows 2003 server and attempt to load an ISO image from the server you may receive an error stating Virtual Media mounting on port failed Unable to connect to the file server or incorrect File Server username and password If t
84. are experiencing problems try another speed and duplex setting See Network Speed Settings on page 195 for more information Select the Bandwidth Click OK to apply the LAN settings The Device Services page allows you to configure the following functions Enable SSH access Enable tiering for the base LX Enter the discovery port Enable direct port access Enable the AKC Download Server Certificate Validation feature if you are using AKC Enabling SSH Enable SSH access to allow administrators to access the LX via the SSH v2 application 1 To enable SSH access Choose Device Settings Device Services The Device Service Settings page opens Select Enable SSH Access 119 Chapter 6 Device Management 3 Enter the SSH Port information The standard SSH TCP port number is 22 but the port number can be changed to provide a higher level of security operations 4 Click OK HTTP and HTTPS Port Settings You are able to configure HTTP and or HTTPS ports used by the LX For example if you are using the default HTTP port 80 for another purpose changing the port will ensure the device does not attempt to use it gt To change the HTTP and or HTTPS port settings 1 Choose Device Settings Device Services The Device Service Settings page opens Enter the new ports in the HTTP Port and or HTTPS Port fields Click OK Entering the Discovery Port The LX discovery occurs over a single confi
85. as the user guide Instructions on launching MPC are provided there Please note this client is used by various Raritan products As such references to other products may appear in this section of help Launching MPC from a Web Browser Important Regardless of the browser you use you must allow pop ups from the Dominion device s IP address in order to open MPC Important Only Mac 10 5 and 10 6 with an Intel processor can run JRE 1 6 and therefore be used as a client Mac 10 5 8 does not support MPC as a standalone client 1 To open MPC from a client running any supported browser type http IP ADDRESS mpc into the address line where IP ADDRESS is the IP address of your Raritan device MPC opens in a new window Note The Alt Tab command toggles between windows only on the local system When MPC opens the Raritan devices that were automatically detected and which are found on your subnet are displayed in the Navigator in tree format 2 f your device is not listed by name in the navigator add it manually a Choose Connection New Profile The Add Connection window opens Raritan Raritan Chapter 3 Working with Target Servers b Inthe Add Connection window type a device Description specify a Connection Type add the device IP address and click OK These specifications can be edited later 3 Inthe Navigator panel on the left of the page double click the icon that corresponds to your Rarit
86. at allows you to select from a list of audio devices connected to a client PC Once audio devices have been connected to the target select to disconnect the devices Note This feature is available with the KX II 2 4 0 and later Note This feature is not supported by the LX Dual mouse mode forces the realignment of the target server mouse pointer with the mouse pointer Note Not available in KX Il 101 V2 Forces a refresh of the video screen Forces a refresh of the video settings resolution refresh rate Opens a dialog that allows you to select from a list of smart card readers connected to a client PC Note This feature is available on the KSX II 2 3 0 and later and the KX II 2 1 10 and later Note This feature is not supported by the LX 55 56 Chapter 3 Working with Target Servers Button DEL BO E Button Name Send Ctrl Alt Del Single Cursor Mode Full Screen Mode Scaling Description Sends a Ctrl Alt Del hot key combination to the target server Starts Single Cursor mode in which the local mouse pointer no longer appears onscreen Press Ctrl Alt O to exit this mode Note Not available in KX Il 101 V2 Maximizes the screen real estate to view the target server desktop Increases or reduces the target video size so you can view the entire contents of the target server window without using the scroll bar Raritan zie Raritan Chapter 3 Work
87. ault is to Double Click Scroll Lock but you can select any key combination from the drop down list Hot key Take this action Double Click Scroll Lock Press Scroll Lock key twice quickly Double Click Num Lock Press Num Lock key twice quickly Double Click Caps Lock Press Caps Lock key twice quickly Double Click Left Alt key Press the left Alt key twice quickly Double Click Left Shift key Press the left Shift key twice quickly Double Click Left Ctrl key Press the left Ctrl key twice quickly 7 Select the Local Port Connect key Use a connect key sequence to connect to a target and switch to another target You can then use the hot key to disconnect from the target and return to the local port GUI Once the local port connect key is created it will appear in the Navigation panel of the GUI so you can use it as a reference See Connect Key Examples for examples of connect key sequences 8 Click OK zie Raritan m Chapter 11 LX Local Console LX Local Console Factory Reset Note This feature is available only on the LX Local Console The LX offers several types of reset modes from the Local Console user interface Note It is recommended that you save the audit log prior to performing a factory reset The audit log is deleted when a factory reset is performed and the reset event is not logged in the audit log For more information about saving the audit log see Audit Log on page 149 gt To perform a factory reset 1
88. by Technical Support This option creates a log file in your home directory Choose the Keyboard Type from the drop down list if necessary The options include US International French France German Germany Japanese United Kingdom Korean Korea French Belgium Norwegian Norway Portuguese Portugal Danish Denmark Swedish Sweden German Switzerland Hungarian Hungary Spanish Spain Italian Italy Slovenian Translation French US Translation French US International In AKC the keyboard type defaults to the local client so this option does not apply Additionally the KX Il 101 and KX II 101 V2 do not support single cursor mode so the Exit Single Cursor Mode function does not apply for those devices 4 Configure hotkeys 75 76 Chapter 3 Working with Target Servers Exit Full Screen Mode Hotkey When you enter Full Screen mode the display of the target server becomes full screen and acquires the same resolution as the target server This is the hot key used for exiting this mode Exit Single Cursor Mode Hotkey When you enter single cursor mode only the target server mouse cursor is visible This is the hot key used to exit single cursor mode and bring back the client mouse cursor Disconnect from Target Hotkey Enable this hotkey to allow users to quickly disconnect from the target For hotkey combinations the application does
89. by the Java Runtime Environment JRE F9 e F10 e Fii e F14 e F15 e Volume Up e Volume Down e Mute e Eject As aresult the Virtual KVM Client and the Multi Platform Client MPC are unable to process these keys from a Mac client s keyboard 209 Appendix C Informational Notes Fedora Resolving Fedora Core Focus Using the Multi Platform Client MPC occasionally there is an inability to log in to an LX KX Il or KSX II device or to access KVM target servers Windows SUSE and so forth In addition the Ctrl Alt M key combination may not bring up the Keyboard Shortcut menu This situation occurs with the following client configuration Fedora Core 6 and Firefox 1 5 or 2 0 Through testing it has been determined that installation of libXp resolves window focusing issues with Fedora Core 6 Raritan has tested with libXp 1 0 0 8 386 rpm this resolved all of the keyboard focus and popup menu problems Note libXp is also required for the SeaMonkey formerly Mozilla browser to work with the Java plug in Mouse Pointer Synchronization Fedora When connected in dual mouse mode to a target server running Fedora 7 if the target and local mouse pointers lose synchronization changing the mouse mode from or to Intelligent or Standard may improve synchronization Single mouse mode may also provide for better control gt Toresynchronize the mouse cursors e Use the Synchronize Mouse option from the V
90. ca sj2nemet mpm d CH Adrinistr eor Ch Aciminiskr ekor CN Users D Cm yc 0 C ny domam GD Emp DC mpdomen DC Edi CH cert Publishers CH Cert Publishers C Users DC nypc DC mdomsn Ch CreAdmre QV Users CC nypc CC mrdomern DC ChH CreUpds eFPraxy CN Users DC 9mypc CC nydome CH Comein Admins Users OC nypc 0C mydomen CH Ceomein Computers CN Users D Commypc DC my dor CH Dcomein Controllers CN Users D Cormypc D Cm y dae CN Comain Guests CH eer s DIC mmy pe Dm domsin CN Domein Users CN Users Dom pc Dom domam E i CNeEnkerprize Admire C Users Ce mypc DC mydom h Configuration rc gc ere trm ua CN arcup Policy Qeator Owners Ce sse Deniyel B j scheme ro a Enma mipc m Bichacuest CheGuest Che Users DIC miepet DC emiedemsin DC cor Bicretebserscestroup CheHebSericesGreup CN Users DCemyne D Cam dor Chehrbegt Ced sers CC my pe DC emydomain DC een CNSRAS and 145 Servers CU Lsers D CO mupz DC nuc CNeScheme Acres Cel isnt s DIC emp DC e messen Bicnaspront_seesssan CNeSUPPORT 353580 C hel sers OC e mypc DC end Dicnatainecierts Che TelnetiClents Cle Liss DC e myre DC emydomsin E 6 Locate the user name whose properties you want to adjust in the right pane Right click the user name and select Properties Sis Raritan 29 Appendix B Updating the LDAP Schema 7 Click the Attribute Editor tab if it is not already open Choose rciusergroup from the Attributes list CN Administrator Properties proxpAdd
91. cal Console See Scanning Ports Local Console on page 176 gt Toscan for targets 1 Click the Set Scan tab on the Port Access page 2 Select the targets you want to include in the scan by selecting the checkbox to the left of each target or select the checkbox at the top of the target column to select all targets 45 46 Chapter 3 Working with Target Servers 3 Leave the Up Only checkbox selected if you only want targets that are up to be included in the scan Deselect this checkbox if you want to include all targets whether up or down 4 Click Scan to begin the scan As each target is scanned it is displayed in slide show view on the page 5 Click Options gt Pause to pause the slide show and stop it from moving between targets click Options Resume to resume the slide show Click on a target thumbnail to scan it next Connect to a target by double clicking on its thumbnail Wiew By Port Set Scan 4 No Name Type Status Availability 1 Dominion_LX_Port1 Not Available down idle 2 Dominion LX Port2 Not Available down idle 2 3 Dominion LX Port3 Not Available down idle 4 Dominion LX Port4 Not Available down idle 5 Dominion LX Port5 Not Available down idle 6 Dominion LX PortG Not Available down idle P r4 Dominion LX Port Not Available down 8 Dominion LX Port8 Not Available down 9 Not Available down Dominion LX Port9 gt W m apte sis Raritan Sis Raritan Chapter
92. ck OK to set these configurations If your changes require rebooting the device a reboot message appears gt To reset to factory defaults e Click Reset to Defaults zie Raritan id Chapter 6 Device Management 116 Network Basic Settings These procedures describe how to assign an IP address on the Network Settings page For complete information about all of the fields and the operation of this page see Network Settings on page 115 gt To assign an IP address 1 Choose Device Settings Network The Network Settings page opens 2 Specify a meaningful Device Name for your LX device Up to 32 alphanumeric characters using valid special characters and no spaces 3 Inthe IPv4 section enter or select the appropriate IPv4 specific network settings a Enter the IP Address if needed The default IP address is 192 168 0 192 Enter the Subnet Mask The default subnet mask is 255 255 255 0 Enter the Default Gateway if None is selected from the IP Auto Configuration drop down Enter the Preferred DHCP Host Name if DHCP is selected from the IP Auto Configuration drop down Select the IP Auto Configuration The following options are available None Static IP This option requires that you manually specify the network parameters This is the recommended option because the LX is an infrastructure device and its IP address should not change DHCP Dynamic Host Configuration Protocol is used by networ
93. ction Failures Using High Speed for Virtual Media Connections Under certain circumstances it may be necessary to select the Use Full Speed for Virtual Media CIM when a target has problems with High Speed USB connections or when the target is experiencing USB protocol errors caused by signal degradation due to additional connectors and cables Windows 3 Button Mouse on Linux Targets When using a 3 button mouse on a Windows client connecting to a Linux target the left mouse button may get mapped to the center button of the Windows client 3 button mouse 215 216 Appendix C Informational Notes Windows 2000 Composite USB Device Behavior for Virtual Media The Windows 2000 operating system does not support USB composite devices like Raritan s D2CIM VUSB in the same manner as non composite USB devices As a result the Safely Remove Hardware system tray icon does not appear for drives mapped by the D2CIM VUSB and a warning message may appear when disconnecting the device Raritan has not observed any problems or issues from this message MCUTP CIM Behavior There is no storage of CIM serial number or CIM name provided on the MCUTP so ports with this type behave different than other CIMS specifically e The CIM name is not stored e The port name is a label associated with the port as long as the port type doesn t change because a different CIM type is connected to it e Target Settings cannot be applied t
94. currently selected and any other duplicate macros that are found Click No to keep the original macro and proceed to the next macro Click No to All keep the original macro and proceed to the next macro Any other duplicates that are found are skipped as well Click Cancel to stop the import Alternatively click Rename to rename the macro and import it If Rename is selected the Rename Macro dialog appears Enter a new name for the macro in the field and click OK The dialog closes and the process proceeds If the name that is entered is a duplicate of a macro an alert appears and you are required to enter another name for the macro b Ifduring the import process the number of allowed imported macros is exceeded a dialog appears Click OK to attempt to continue importing macros or click Cancel to stop the import process The macros are then imported If a macro is imported that contains a hot key that already exists the hot key for the imported macro is discarded gt To export macros 1 Choose Tools gt Export Macros to open the Select Keyboard Macros to Export dialog Select Keyboard Macros to Export r Minimi All wind inimize indows Select All Deselect All 2 Select the macros to be exported by checking their corresponding checkbox or using the Select All or Deselect All options 61 Raritan Chapter 3 Working with Target Servers 3 Click Ok A dialog from which to locate and select
95. d user interfaces for example Windows operating system Linux Solaris etc accessed remotely via the LX See Supported CIMS and Operating Systems LX for a list of the supported operating systems and CIMs Raritan i Chapter2 Installation and Configuration In This Chapter M H 12 Detfault EoginInformiation i ui ke tine deinen Lee omes eiue Cea e rad aa gere 12 Getting Stared EP 13 Overview This section provides a brief overview of the installation process Each step is further detailed in the remaining sections of this chapter gt To install and configure the LX e Step 1 Configure the KVM Target Servers on page 13 e Step 2 Configure Network Firewall Settings on page 26 e Step 3 Connect the Equipment on page 27 e Step 4 Configure the LX on page 29 e Step 5 Launch the LX Remote Console on page 34 e Step 6 Configure the Keyboard Language Optional on page 35 e Step 7 Configure Tiering Optional on page 36 Also included in this section is the default login information you will need Specifically the default IP address user name and password See Default Login Information on page 12 Default Login Information Default Value User name The default user name is admin This user has administrative privileges Password The default password is raritan Passwords are case sensitive and must be entered in the exact case combinati
96. d Complete dialog appears 4 Click Close The backup file is saved locally on your client machine with the name and location specified 151 152 Chapter 8 Maintenance gt If you are using Internet Explorer 6 or later to backup your LX Click Backup A File Download dialog appears that contains an Open button Do not click Open In IE 6 and later IE is used as the default application to open files So you are prompted to open the file versus save the file To avoid this you must change the default application that is used to open files to WordPad 2 Todo this a Save the backup file The backup file is saved locally on your client machine with the name and location specified b Once saved locate the file and right click on it Select properties c Ingeneral tab click Change and select WordPad To restore your LX WARNING Exercise caution when restoring your LX to an earlier version Usernames and password in place at the time of the backup will be restored If you do not remember the old administrative usernames and passwords you will be locked out of the LX In addition if you used a different IP address at the time of the backup that IP address will be restored as well If the configuration uses DHCP you may want to perform this operation only when you have access to the local port to check the IP address after the update Choose the type of restore you want to run Full Restore A complete res
97. d e Removable drives drive partitions e CD DVD drives e Removable drives e ISO images e CD DVD drives e SO images e Remote ISO images e Remote ISO images 213 Appendix C Informational Notes Drive Partitions e The following drive partition limitations exist across operating systems Windows and Mac targets are not able to read Linux formatted partitions Windows and Linux cannot read Mac formatted partitions Only Windows Fat partitions are supported by Linux Windows FAT and NTFS supported by Mac Mac users must unmount any devices that are already mounted in order to connect to a target server Use diskutil umount dev disk1s1 to unmount the device and diskutil mount dev disk1s1 to remount it Virtual Media Not Refreshed After Files Added After a virtual media drive has been mounted if you add a file s to that drive those files may not be immediately visible on the target server Disconnect and then reconnect the virtual media connection Active System Partitions You cannot mount active system partitions from a Mac or Linux client Linux Ext3 4 drive partitions need to be unmounted via umount dev device label prior to a making a virtual media connection Drive Partitions The following drive partition limitations exist across operating systems Windows and Mac targets are not able to read Linux formatted partitions Windows and Linux cannot read Mac formatted partitions O
98. d into the device from several client workstations simultaneously Enable password When selected all users are required to change aging their passwords periodically based on the number of days specified in Password Aging Interval field This field is enabled and required when the Enable Password Aging checkbox is selected Enter the number of days after which a password change is required The default is 60 days Log out idle users Select the Log off idle users checkbox to After 1 365 automatically disconnect users after the amount minutes of time you specify in the After 1 365 minutes field If there is no activity from the keyboard or mouse all sessions and all resources are logged out If a virtual media session is in progress Raritan id Chapter 7 Security Management 140 Limitation Description however the session does not timeout The After field is used to set the amount of time in minutes after which an idle user will be logged out This field is enabled when the Log Out Idle Users option is selected Up to 365 minutes can be entered as the field value Login Limitations Enable Single Login Limitation Enable Password Aging Password Aging Interval days 60 y Log Out Idle Users Idle Timeout minutes 30 ab umm m Strong Passwords Strong passwords provide more secure local authentication for the system Using strong passwords you can specify the for
99. d log back in for the video settings to take effect 21 Chapter 2 Installation and Configuration Make Linux Settings Permanent Note These steps may vary slightly depending on the specific version of Linux in use To make your settings permanent in Linux prompt Choose System Menu Preferences Personal Sessions Click the Session Options tab O N NM Select the Prompt on log off checkbox and click OK This option prompts you to save your current session when you log out 4 Upon logging out select the Save current setup option from the dialog 5 Click OK Tip If you do not want to be prompted upon log out follow these procedures instead To make your settings permanent in Linux no prompt Choose Desktop Control Center System Sessions Click the Session Options tab Deselect the Prompt on the log off checkbox Bom Select the Automatically save changes to the session checkbox and click OK This option automatically saves your current session when you log out Sun Solaris Settings gt To configure KVM target servers running Sun Solaris 1 Setthe mouse acceleration value to exactly 1 and the threshold to exactly 1 This can be performed from The graphical user interface Mipuse motion Acceleration Stow mp Fast Threshold Sma C T Lange I The command line xset mouse at where ais the acceleration and tis the threshold Rarit
100. dd Delete Force User Logoft Adding a New User It is a good idea to define user groups before creating LX users because when you add a user you must assign that user to an existing user group See Adding a New User Group on page 95 From the User page you can add new users modify user information and reactivate users that have been deactivated Note A user name can be deactivated when the number of failed login attempts has exceeded the maximum login attempts set in the Security Settings page See Security Settings gt To add anew user 1 Select User Management gt Add New User or click Add on the User List page Type a unique name in the Username field up to 16 characters Type the person s full name in the Full Name field up to 64 characters 4 Type a password in the Password field and retype the password in the Confirm Password field up to 64 characters 5 Choose the group from the User Group drop down list d Raritan Chapter 5 User Management If you do not want to associate this user with an existing User Group select Individual Group from the drop down list For more information about permissions for an Individual Group see Setting Permissions for an Individual Group on page 98 6 To activate the new user leave the Active checkbox selected Click OK Modifying an Existing User To modify an existing user Open the User List page by choosing User Management User List Loca
101. determine the users belonging to a particular group sort the User List by User Group 1 Choose a group from among those listed by checking the checkbox to the left of the Group Name Click Delete When prompted to confirm the deletion click OK Users must be granted user names and passwords to gain access to the LX This information is used to authenticate users attempting to access your LX Up to 254 users can be created for each user group If you are using a tiered configuration in which a base LX device is used to access multiple other tiered devices users will need permission to access the base device and permissions to access each individual tiered device as needed When users log on to the base device each tiered device is queried and the user can access each target server they have permissions to See Configuring and Enabling Tiering on page 121 for more information on tiering 99 Chapter 5 User Management User List The User List page displays a list of all users including their user name full name and user group The list can be sorted on any of the columns by clicking on the column name From the User List page you can also add modify or delete users gt To view the list of users e Choose User Management gt User List The User List page opens Home User Management gt User kogou User List 4 Username full Name User Group Aten Qrarketing n teste Joe Tester ester A
102. dit log prior to performing a factory reset The audit log is deleted when a factory reset is performed and the reset event is not logged on the audit log For more information about saving the audit log see Audit Log on page 149 To reset the device Power off the LX Use a pointed object to press and hold the Reset button on gt While continuing to hold the Reset button power the LX device back on 4 Continue holding the Reset button for 10 seconds Once the device has been reset two short beeps signal that the reset is complete Yr 5E Raritan Appendix A Specifications In This Chapter LX Specifications LED Indicators Supported Operating Systems Clients Supported Browsers Supported CIMS and Operating Systems Supported Video Resolutions Certified Modems Remote Connection Supported Keyboard Languages TCP and UDP Ports Used Events Captured in the Audit Log and Syslog Network Speed Settings LX Specifications Dominion LX Model DLX 108 DLX 116 DLX 216 Description Economical extensible 8 port KVM over IP switch 1 remote 1 local user virtual media single power and single LAN Economical extensible 16 port KVM over IP switch 1 remote 1 local user virtual media single power and single LAN Economical extensible 16 port KVM over IP Switch 2 remote 1 local user virtual media single power and single LAN zie Raritan Product Dimension WxDxH Shipping Weight and
103. e rci actai2nzmzt mppc mydomain com To transfer the schema master role to the targeted domain controller below click Change rci acidi2nzmzt mypc mydomain com 2 Select the Schema can be modified on this Domain Controller checkbox Optional 3 Click OK Creating a New Attribute gt To create new attributes for the rciusergroup class 1 Click the symbol before Active Directory Schema in the left pane of the window 2 Right click Attributes in the left pane ai Z Raritan Appendix B Updating the LDAP Schema 3 Click New and then choose Attribute When the warning message appears click Continue and the Create New Attribute dialog appears Create New Attribute A3 xl Pu Create a New Attribute Object r Identification Common Name ouem LDAP Display Name rciusergoup Unique X500 Object ID 1361411274250 Description Rartan s LDAP attribute r Syntax and Range Syntax Case Insensitive String Minimum 1 Maximum 24 MultiValued Cancel Type rciusergroup in the Common Name field Type rciusergroup in the LDAP Display Name field Type 1 3 6 1 4 1 13742 50 in the Unique x5000 Object ID field Type a meaningful description in the Description field Oona Click the Syntax drop down arrow and choose Case Insensitive String from the list 9 Type 7 in the Minimum field 10 Type 24 in the Maximum field 11 Click O
104. e To avoid this use the download function so you will have a copy of the CSR and its private key ud 5E Raritan Chapter 8 Audit Log 5 Raritan Maintenance In This Chapter Audit LOren eid dads a a ee i A R 149 Device Mfr matio Niiair inin iiaaaeaoe aaia dena aaa 150 Backup and Restore uineas ipM zac base Aaaa 151 Upgrading CIMS LC alicia nineties 153 Upgrading Firmware merimies naaien a Eaa a aaar d aaaea 153 Upgrade n I to a PRSETER 155 Rebooting the LX eor 155 A log is created of the LX system events The audit log can contain up to approximately 2K worth of data before it starts overwriting the oldest entries To avoid losing audit log data export the data to a syslog server or SNMP manager Configure the syslog server or SNMP manager from the Device Settings gt Event Management page See Events Captured in the Audit Log and Syslog on page 194 for information on what is captured in the audit log and syslog gt To view the audit log for your LX 1 Choose Maintenance gt Audit Log The Audit Log page opens The Audit Log page displays events by date and time most recent events listed first The Audit Log provides the following information Date The date and time that the event occurred based on a 24 hour clock Event The event name as listed in the Event Management page Description Detailed description of the event gt To save the audit log Note Saving the audit log is available on
105. e choose Device Settings gt Device Services The Device Service Settings page appears Select Enable Tiering as Base In the Base Secret field enter the secret shared between the base and the tiered devices This secret is required for the tiered devices to authenticate the base device You will enter the same secret word for the tiered device Click OK Enable the tiered devices From the tiered device choose Device Settings gt Local Port Settings In the Enable Local Ports section of the page select Enable Local Port Device Tiering In the Tier Secret field enter the same secret word you entered for the base device on the Device Settings page Click OK Raritan Chapter 3 Working with Target Servers In This Chapter LX Interfaces x o Re tette a ICs OS Dei DE I e Poco DR RERO 37 LX Local Console Interface LX Devices sesn 38 LX Remote Console Interface ccccceceseseseeeseseseeeeeeeeeseeeeeeeeeeeeeeeees 38 Proxy Server Configuration for Use with MPC VKC and AKC 51 Virtual KVM Client VKC and Active KVM Client AKOC 53 Multi Platform Glient MPG iia erint ccrte sane anaren 80 LX Interfaces There are several user interfaces in the LX providing you with easy access anytime anywhere to targets These include the LX Local Console the LX Remote Console the Virtual KVM Client VKC the Active KVM Client AKC and the Multi Platform
106. e Interface CLI Initial Configuration Using CLI Note These steps which use the CLI are optional since the same configuration can be done via KVM See Getting Started on page 13 for more information LX devices come from the factory with default factory settings When you first power up and connect to the device you must set the following basic parameters so the device can be accessed securely from the network 1 Reset the administrator password All LX devices are shipped with the same default password Therefore to avoid security breaches it is imperative that you change the admin password from raritan to one customized for the administrators who will manage the LX device 2 Assign the IP address subnet mask and gateway IP address to allow remote access Setting Parameters To set parameters you must be logged on with administrative privileges At the top level you will see the Username gt prompt which for the initial configuration is admin Enter the top command to return to the top menu level Note If you have logged on with a different user name that user name will appear instead of admin Setting Network Parameters Network parameters are configured using the interface command admin Config Network interface ipauto none ip 192 168 151 12 mask 255 255 255 0 gw 192 168 151 1 mode auto zie Raritan When the command is accepted the device automatically drops the connection Yo
107. e control or not arising under normal operating conditions CE uus jen LISTED Rack Mount Safety Guidelines In Raritan products which require Rack Mounting please follow these precautions e Operation temperature in a closed rack environment may be greater than room temperature Do not exceed the rated maximum ambient temperature of the appliances See Specifications e Ensure sufficient airflow through the rack environment e Mount equipment in the rack carefully to avoid uneven mechanical loading e Connect equipment to the supply circuit carefully to avoid overloading circuits e Ground all equipment properly especially supply connections such as power strips other than direct connections to the branch circuit Contents Chapter 1 Introduction 1 eoru MET 2 LX unc 4 Package Coments isi nienia 7 LX Glient Applications dissout enaa a EaR 7 DEE U E E EE E T EE E NE N E EE E N E TE E T 8 SOMWANC EE A EN E E E E E EAEE E N EE E A NN E 9 LX Helpcenter Aa Aa a ERa EEE adaa aa a aaia 9 Related Documentation uices eae tot eue auda rct e d e aa Aani 10 TST OLOGY occa 10 Chapter 2 Installation and Configuration 12 II iiss 12 Default Eogin InformatlQna uut rna teca terc tr Fi ree ne sae su i a Fe c RR aea Re ad 12 GO ttlNG Sta
108. e mee eade ae nacen nna cath de Rr buda Etre des ende estt use R E a de 186 Supported Operating Systems Clients esssssssssseseseseeeeene nnne 186 Supported BrOWSEMS sz aceite ret eren anstectabundces th ste uade senex aee Fete uva a nde eta rx den 187 Supported CIMS and Operating Systems essssseseseeeeee entente 188 Supported Video Resolutions nae tns trt tee deett tee karen tue akuten rtu Ua nde etae dada a deg 189 Target Server Connection Distance and Video Resolution sssssssss 190 Raritan Contents Gertified Modems etie dtr iei Rei oiu ae ad aiu i Ween dd dE ue ER ded Md and ets 190 Remote COMMECHIOMN uinie aiaa anna HE 190 Supported Keyboard Languages oce riore orte utate eu trea aai aa arda Pet eue ap ede Rd 191 TOP andUDP JPorts WSC entitas pre derer thereto tu dee ees tu Eee oa redd 193 Events Captured in the Audit Log and Syslog ssssssssseeeeennnerenenn 194 Network Speed SelllligS 2 oret det oer rette aderat sath ede rea nde dus ra peu Eb aud En x ma eee 195 Appendix B Updating the LDAP Schema 197 Returning User Group Information 2 cocci iata teret ten rated sod rt REL aniidae Pon song E es aE 197 Prom LIDAP LIDAPS IE 197 From Microsoft Active DIreCtOry crisissen aanrada nai aidaa aiani atsay 197 Setting the Registry to Permit Write Operations to the Schema sssssssssssss 198 Crea
109. e mode Mouse v Intelligent Standard Mouse mode mode vi v 4 v vi v Raritan Supported LX Target server and D2CIMs remote rack PDUs where applicable e Red Hat Enterprise Linux 4 ES e Red Hat Enterprise Linux 5 Supported Video Resolutions zie Raritan Appendix A Specifications Virtual Absolute Intelligent media Mouse mode Mouse mode Y v Standard Mouse mode v Ensure that each target server s video resolution and refresh rate are supported by the LX and that the signal is noninterlaced Video resolution and cable length are important factors in the ability to obtain mouse synchronization See Target Server Connection Distance and Video Resolution on page 190 The LX supports these resolutions Resolutions 640x350 70Hz 640x350 85Hz 640x400 56Hz 640x400 84Hz 640x400 85Hz 640x480 60Hz 640x480 66 6Hz 640x480 72Hz 640x480 75Hz 640x480 85Hz 720x400 70Hz 720x400 84Hz 720x400 85Hz 800x600 56Hz 800x600 60Hz 800x600 70Hz 800x600 72Hz 800x600 75Hz 1024x768 85 1024x768 75Hz 1024x768 90Hz 1024x768 100Hz 1152x864 60Hz 1152x864 70Hz 1152x864 75Hz 1152x864 85Hz 1152x870 75 1Hz 1152x900 66Hz 1152x900 76Hz 1280x720 60Hz 1280x960 60Hz 1280x960 85Hz 1280x1024 60Hz 1280x1024 75Hz 1280x1024 85Hz 1360x768 60Hz 189 Appendix A Specifications Resolutions 800x600 85Hz 1366x768 60Hz 800x600 90Hz 1368x768 60Hz 800x600 100Hz 1400x1050 60Hz 832x62
110. e string msRADIUSCallbackNumber Based on recommendations from Microsoft Global Groups with user accounts should be used not Domain Local Groups Implementing RADIUS Remote Authentication Remote Authentication Dial in User Service RADIUS is an AAA authentication authorization and accounting protocol for network access applications 1 To use the RADIUS authentication protocol Click User Management Authentication Settings to open the Authentication Settings page Click the RADIUS radio button to enable the RADIUS section of the page Click the RADIUS icon to expand the RADIUS section of the page In the Primary Radius Server and Secondary Radius Server fields type the IP address of your primary and optional secondary remote authentication servers respectively up to 256 characters In the Shared Secret fields type the server secret used for authentication up to 128 characters The shared secret is a character string that must be known by both the LX and the RADIUS server to allow them to communicate securely It is essentially a password The Authentication Port default is port is 1812 but can be changed as required The Accounting Port default port is 1813 but can be changed as required The Timeout is recorded in seconds and default timeout is 1 second but can be changed as required The timeout is the length of time the LX waits for a response from the RADIUS server before sending ano
111. ec rie oed nter tee ED tienes edhe 53 About the Active KVM Client sisisi aseinio annn eere ed ariaa 53 E ie M EO 55 Gonnection Propetties eenieder aea en eaan Ta aaia 57 Connection InfOrffiallOn ressasiar annida ac d ad n i d n d 59 iii Raritan Contents Keyboard 8 oils EM 59 Video Properties Pn 65 IM USS OPTIONS occi epe rote ti edet aeaa nea ioiai anaE eaU AE Ee AEDE aat 70 TOOVOPUONS ienen aaa andae aa aE Sa e ate 75 VISWODIONS ees 78 FEID OU OMS eas 80 M lti Plattorm Glient MPG siete sscccesssesedaneastectesanac sath aatecedaanins cant avierbasanceviat educa uns deu ek ede ka ra desta d 80 Launching MPC from a Web BEOWSOLF ederet ndr ttr et eden nnde ck ne Pea ua edt d 80 Chapter 4 Virtual Media 82 QUU MEME 83 Prerequisites for Using Virtual Media sssssssseeseeee enne 85 Virtual Media ina Linux Environment iiec etie tre eco sa ker enne doce Da er ue aaaea 86 Conditions when Read Write is Not Available sseseeene 88 Using nts EUM 88 Virtual Media File Server Setup File Server ISO Images Only sss 89 Connecting to Virtual Media 2 22 iie eia deci he esed sua ELE er ona edo Ee Da e dud aiia 90 Disconnecting Virtual Media iiid iicet ede eua cat He nce FUP a adeb nce E dds dada cR HER pac dns 93 Chapter 5 User Manageme
112. ection enter or select the appropriate IPv4 specific network settings a Enter the IP Address if needed The default IP address is 192 168 0 192 Enter the Subnet Mask The default subnet mask is 255 255 255 0 Enter the Default Gateway if None is selected from the IP Auto Configuration drop down Enter the Preferred DHCP Host Name if DHCP is selected from the IP Auto Configuration drop down Select the IP Auto Configuration The following options are available None Static IP This option requires that you manually specify the network parameters This is the recommended option because the LX is an infrastructure device and its IP address should not change DHCP Dynamic Host Configuration Protocol is used by networked computers clients to obtain unique IP addresses and other parameters from a DHCP server With this option network parameters are assigned by the DHCP server If DHCP is used enter the Preferred host name DHCP only Up to 63 characters 4 If IPv6 is to be used enter or select the appropriate IPv6 specific network settings in the IPv6 section a b Select the IPv6 checkbox to activate the fields in the section Enter a Global Unique IP Address This is the IP address assigned to the L X Raritan Chapter 2 Installation and Configuration c Enter the Prefix Length This is the number of bits used in the IPv6 address d Enter the Gateway IP Address e Link Local IP Address
113. ed the DNS name must be used Note that the remaining fields share the same settings with the Primary LDAP Server field Optional Type of External LDAP Server Select the external LDAP LDAPS server Choose from among the options available Generic LDAP Server Microsoft Active Directory Active Directory is an implementation of LDAP LDAPS directory services by Microsoft for use in Windows environments 8 Type the name of the Active Directory Domain if you selected Microsoft Active Directory For example acme com Consult your Active Directive Administrator for a specific domain name 103 Chapter 5 User Management 104 9 In the User Search DN field enter the Distinguished Name of where in the LDAP database you want to begin searching for user information Up to 64 characters can be used An example base search value might be cn Users dc raritan dc com Consult your authentication server administrator for the appropriate values to enter into these fields Enter the Distinguished Name of the Administrative User in the DN of Administrative User field up to 64 characters Complete this field if your LDAP server only allows administrators to search user information using the Administrative User role Consult your authentication server administrator for the appropriate values to type into this field An example DN of Administrative User value might be cn Administrator cn Users dc testradius dc com Optional
114. ed and other mouse parameters are set correctly in order for the client and server mouse to stay synchronized gt To enter Standard Mouse mode e Choose Mouse gt Standard Raritan Z Raritan Chapter 3 Working with Target Servers Intelligent Mouse Mode In Intelligent Mouse mode the device can detect the target mouse settings and synchronize the mouse cursors accordingly allowing mouse acceleration on the target Intelligent mouse mode is the default for non VM targets During synchronization the mouse cursor does a dance in the top left corner of the screen and calculates the acceleration For this mode to work properly certain conditions must be met gt To enter intelligent mouse mode e Choose Mouse gt Intelligent Intelligent Mouse Synchronization Conditions The Intelligent Mouse Synchronization command available on the Mouse menu automatically synchronizes mouse cursors during moments of inactivity For this to work properly however the following conditions must be met e The active desktop should be disabled on the target e No windows should appear in the top left corner of the target page e There should not be an animated background in the top left corner of the target page e The target mouse cursor shape should be normal and not animated e The target mouse speeds should not be set to very slow or very high values e Advanced mouse properties such as Enhanced pointer precision o
115. eld enter the secret shared between the base and the tiered devices This secret is required for the tiered devices to authenticate the base device You will enter the same secret word for the tiered device Click OK Enable the tiered devices From the tiered device choose Device Settings gt Local Port Settings 6 In the Enable Local Ports section of the page select Enable Local Port Device Tiering 7 Inthe Tier Secret field enter the same secret word you entered for the base device on the Device Settings page 8 Click OK Tiering Target Types Supported CIMS and Tiering Configurations Port configuration including changing the CIM name must be done directly from each device It cannot be done from the base device for tiered target ports Unsupported and Limited Features on Tiered Targets The following features are not supported on tiered targets e Virtual media tiered devices e MCCAT as a tiered device is sis Raritan Z Raritan Chapter 6 Device Management Cabling Example in Tiered Configurations The following diagram illustrates the cabling configurations between an LX tiered device and an LX base device Connect from a target server port on the base device to the tier LX Local Access port video keyboard mouse ports using a D2CIM DVUSB Server Tiered Device Base Device Diagram key Target server CIM from target server to the LX tiered device LX tiered device D2CIM DVUSB
116. en the LX is configured to function as a base device or tiered device they will be displayed as e Configured As Base Device in the Device Information section of the left panel of the LX interface for base devices e Configured As Tier Device in the Device Information section of the left panel of the LX interface for tiered devices e The base device will be identified as Base in the left panel of the tiered device s interface under Connect User e Target connections to a tier port from the base will be displayed as 2 ports connected The base device provides remote and local access over a consolidated port list from the Port Access page Tiered devices provide remote access from their own port lists Local access is not available on the tiered devices when Tiering is enabled Port configuration including changing the CIM name must be done directly from each device It cannot be done from the base device for tiered target ports Tiering also supports the use of KVM switches to switch between servers See Configuring KVM Switches on page 132 zie Raritan Chapter 6 Device Management Enabling Tiering Connect from a target server port on the base device to the tier LX Local Access port video keyboard mouse ports using a D2CIM DVUSB gt To enable tiering 1 From the tier base choose Device Settings Device Services The Device Service Settings page appears Select Enable Tiering as Base In the Base Secret fi
117. erify that the cable length is within the specified limits for the selected video resolution 3 Verify that the mouse and video have been properly configured during the installation process 4 Force an auto sense by clicking the Virtual KVM Client auto sense button 5 If that does not improve the mouse synchronization for Linux UNIX and Solaris KVM target servers a Open a terminal window b Enterthe xset mouse 1 1 command c Close the terminal window 6 Click the Virtual KVM Client mouse synchronization button x zie Raritan a 72 Chapter 3 Working with Target Servers Additional Notes for Intelligent Mouse Mode e Be sure that there are no icons or applications in the upper left section of the screen since that is where the synchronization routine takes place e Donotuse an animated mouse e Disable active desktop on KVM target servers Synchronize Mouse In dual mouse mode the Synchronize Mouse command forces realignment of the target server mouse pointer with Virtual KVM Client mouse pointer gt To synchronize the mouse do one of the following e Choose Mouse gt Synchronize Mouse or click the Synchronize Mouse button in the toolbar Note This option is available only in Standard and Intelligent mouse modes Standard Mouse Mode Standard Mouse mode uses a standard mouse synchronization algorithm using relative mouse positions Standard Mouse mode requires that mouse acceleration is disabl
118. es in the KVM and Serial Access Clients Guide Note Modem access directly to the LX HTML interface is not supported You must use standalone MPC to access the LX via modem Configuring Date Time Settings Use the Date Time Settings page to specify the date and time for the LX There are two ways to do this e Manually set the date and time e Synchronize the date and time with a Network Time Protocol NTP server gt To set the date and time 1 Choose Device Settings gt Date Time The Date Time Settings page opens Choose your time zone from the Time Zone drop down list To adjust for daylight savings time check the Adjust for daylight savings time checkbox 127 zie Raritan Chapter 6 Device Management 4 Choose the method you would like to use to set the date and time User Specified Time Choose this option to input the date and time manually For the User Specified Time option enter the date and time For the time use the hh mm format using a 24 hour clock Synchronize with NTP Server Choose this option to synchronize the date and time with the Network Time Protocol NTP Server 5 For the Synchronize with NTP Server option a Enter the IP address of the Primary Time server b Enter the IP address of the Secondary Time server Optional 6 Click OK Home gt Device Settings gt Date Time Settings Date Time Settings Time Zone GMT 05 00 US Eastern v Adjust for dayl
119. ess a target server Click the Port Name of the target you want to access The Port Action Menu is displayed Choose Connect from the Port Action menu The video display switches to the target server interface 175 176 Chapter 11 LX Local Console Scanning Ports Local Console The LX scanning feature is supported by the Local Console The targets that are found during the scan are displayed on the Scan page one at a time which is different from the Remote Console port slide show Each target is displayed on the page for 10 seconds by default allowing you to view the target and connect to it Use the Local Port ConnectKey sequence to connect to a target when it is displayed and the DisconnectKey sequence to disconnect from the target Scanning Stop No Name Status Availability Scan Status 5 fell up idle connecting 8 laptop up connected scanned 16 DVDPlayer up idle scanned gt Toscan for targets 1 From the Local Console click the Set Scan tab on the Port Access page 2 Select the targets you want to include in the scan by selecting the checkbox to the left of each target or select the checkbox at the top of the target column to select all targets 3 Leave the Up Only checkbox selected if you only want targets that are up to be included in the scan Deselect this checkbox if you want to include all targets whether up or down 4 Click Scan to begin the scan A Port Scan window opens As each targe
120. evice The statuses of the ports being used by the LX The users identified by their username and IP address who are currently connected to the LX When displayed Always Always Always Always Always Always Always Always Always Always When the LX is part of a tiered configuration Always Always 41 42 Chapter 3 Working with Target Servers Information Description When displayed Online Help Links to online help Always Favorite Devices See Managing Favorites Always on page 48 LX Console Navigation The LX Console interfaces provide many methods for navigation and making your selections e To select an option use any of the following Click on a tab A page of available options appears Hover over a tab and select the appropriate option from the menu Click the option directly from the menu hierarchy displayed breadcrumbs To scroll through pages longer than the screen Use Page Up and Page Down keys on your keyboard Use the scroll bar on the right Raritan Z Raritan Chapter 3 Working with Target Servers Port Access Page After successfully logging on to the LX Remote Console the Port Access page appears By default the View by Port tab will be displayed on the Port Access page This page lists all of the LX ports the connected KVM target servers and their status and availability The Port Access page provides access to the KVM target servers co
121. face and perform diagnostic functions provided you have the appropriate permissions to do so The following figures describe an overview of the CLI commands See CLI Commands on page 168 for a list of all the commands which include definitions and links to the sections in this chapter that give examples of these commands CLI Command Overview Configuring a Network Inteface Command The following common commands can be used from all levels of the CLI to the preceding figure top history log off quit show and help zie Raritan is Chapter 10 Command Line Interface CLI Accessing the LX Using CLI Access the LX by using one of the following methods e SSH Secure Shell via IP connection A number of SSH clients are available and can be obtained from the following locations e Putty http www chiark greenend org uk sgtatham putty http www chiark greenend org uk sgtatham putty e SSH Client from ssh com www ssh com http www ssh com e Applet SSH Client www netspace org ssh http www netspace org ssh e OpenSSH Client www openssh org http www openssh org SSH Connection to the LX 164 Use any SSH client that supports SSHv2 to connect to the LX You must enable SSH access from the Devices Services page Note For security reasons SSH V1 connections are not supported by the LX SSH Access from a Windows PC gt To open an SSH session from a Windows PC 1 Launch the SSH clien
122. frequently The Favorite Devices section is located in the lower left side sidebar of the Port Access page and provides the ability to e Create and manage a list of favorite devices e Quickly access frequently used devices e List your favorites either by Device Name IP Address or DNS hostname e Discover LX devices on its subnet before and after login e Retrieve discovered LX devices from the connected Dominion device after login P To access a favorite LX device e Click the device name listed beneath Favorite Devices A new browser opens to that device gt To display favorites by name e Click Display by Name gt To display favorites by IP Address e Click Display by IP gt To display favorites by the host name e Click Display by Host Name Favorite Devices NewJersey_RemoteOffice Sydney RemoteOffice Manage Display By Name Display By Host Name Display By IP mta a A M ag TU a Me B p EET Ml v y ee L Z Raritan Raritan Chapter 3 Working with Target Servers Manage Favorites Page gt To open the Manage Favorites page e Click Manage in the left panel The Manage Favorites page appears and contains the following Use To Favorites List Manage your list of favorite devices Discover Devices Local Subnet Discover Raritan devices on the client PC s local subnet Discover Devices LX Subnet Discover the Raritan devices on the LX device
123. from the local port Note This option is not available from the LX Remote Console for an available port if all connections are busy Switch From Switches from an existing connection to the selected port KVM target server This menu item is available only for KVM targets This option is visible only when a Virtual KVM Client is opened Note This menu item is not available on the LX Local Console Disconnect Disconnects this port and closes the Virtual KVM Client page for this target server This menu item is available only when the port status is up and connected or up and busy Note This menu item is not available on the LX Local Console The only way to disconnect from the switched target in the Local Console is to use the hot key Raritan Raritan Chapter 3 Working with Target Servers Scanning Ports The LX provides a port scanning feature that searches for selected targets and displays them in a slide show view allowing you to monitor up to 32 targets at one time You can connect to targets or focus on a specific target as needed Scans can include standard targets tiered Dominion devices and KVM switch ports Note Scanning for tiered devices is not supported by the Multi Platform Client MPC When you start a scan the Port Scan window opens As each target is found it is displayed as a thumbnail in a slide show The slide show scrolls through the target thumbnails based on the default in
124. gurable TCP Port The default is Port 5000 but you can configure it to use any TCP port except 80 and 443 To access the LX from beyond a firewall your firewall settings must enable two way communication through the default Port 5000 or a non default port configured here gt To enable the discovery port 1 Choose Device Settings Device Services The Device Service Settings page opens Enter the Discovery Port Click OK in Raritan Chapter 6 Device Management Configuring and Enabling Tiering LX and generic tiering are supported by the LX The tiering feature allows you to access LX targets through one base LX device Note Base and tiered devices must all be operating with the same firmware revision Devices can be added and removed from a configuration as needed up to a maximum of two tiered levels When setting up the devices you will use specific CIMS for specific configurations See Tiering Target Types Supported CIMS and Tiering Configurations on page 122 for a description of the targets that can be included in a tiered configuration CIM compatibility and device configuration information Before adding tiered devices you must enable tiering for the base device and the tiered devices Enable base devices on the Device Settings page Enable tiered devices on the Local Port Settings page Once devices are enabled and configured they appear on the Port Access page Port Access Page on page 43 Wh
125. he in the Group Name The individual group allows a user account to have the same rights as a group Up to 254 user groups can be created in the LX Up to 254 user groups can be created in the LX 94 Chapter 5 User Management User Group List User groups are used with local and remote authentication via RADIUS or LDAP LDAPS It is a good idea to define user groups before creating individual users since when you add a user you must assign that user to an existing user group The User Group List page displays a list of all user groups which can be sorted in ascending or descending order by clicking on the Group Name column heading From the User Group List page you can also add modify or delete user groups gt To list the user groups e Choose User Management gt User Group List The User Group List page opens Home User Management Groups Loge 1 TR NI atte po goa Te unte dl ash eat m ee Ah User Group List Relationship Between Users and Groups Users belong to a group and groups have privileges Organizing the various users of your LX into groups saves time by allowing you to manage permissions for all users in a group at once instead of managing permissions on a user by user basis You may also choose not to associate specific users with groups In this case you can classify the user as Individual Upon successful authentication the device uses group informa
126. he file server field is masked as you type e Click Connect The media will be mounted on the target server virtually You can access the media just like any other drive Note If you are working with files on a Linux target use the Linux Sync command after the files are copied using virtual media in order to view the copied files Files may not appear until a sync is performed Note If you are using the Windows 7 operating system Removable Disk is not displayed by default in the Window s My Computer folder when you mount a Local CD DVD Drive or Local or Remote ISO Image To view the Local CD DVD Drive or Local or Hemote ISO Image in this folder select Tools Folder Options View and deselect Hide empty drives in the Computer folder Note You cannot access a remote ISO image via virtual media using an IPv6 address due to third party software technical limitations Raritan Chapter 4 Virtual Media Disconnecting Virtual Media Raritan gt To disconnect the virtual media drives e For local drives choose Virtual Media gt Disconnect Drive e For CD ROM DVD ROM and ISO images choose Virtual Media gt Disconnect CD ROM ISO Image Note In addition to disconnecting the virtual media using the Disconnect command simply closing the KVM connection closes the virtual media as well 93 Chapter 5 User Groups Z Raritan User Management In This Chapter BET IECIT UEM 94 SII EET 99
127. his occurs disable Microsoft Network Server Digitally Sign Communications Note If you are connecting to a Windows 2003 Server and attempt to load an ISO image from the server you may receive an error stating Virtual Media mounting on port failed Unable to connect to the file server or incorrect File Server username and password If this occurs disable the Microsoft Network Server Digitally Sign Communications option on the server under the Domain Controllers policies 89 90 Chapter 4 Virtual Media Connecting to Virtual Media Mounting Local Drives This option mounts an entire drive which means the entire disk drive is mounted virtually onto the target server Use this option for hard drives and external drives only It does not include network drives CD ROM or DVD ROM drives This is the only option for which Read Write is available Note KVM target servers running certain versions of the Windows operating system may not accept new mass storage connections after an NTFS formatted partition for example the local C drive has been redirected to them If this occurs close the Remote Console and reconnect before redirecting another virtual media device If other users are connected to the same target server they must also close their connections to the target server Note In the KX II 2 1 0 and later when you mount an external drive such as a floppy drive the LED light on the drive will remain on becau
128. i E re Tease ba seris bear EIUS 158 Ping Host uo LEO 160 Trace Route to Host Page uie ined reae ER P adeniin 160 Device DIagnosli6s 29 oiii Eq tie ese MIR FERE ies 161 Network Interface Page Z Raritan The LX provides information about the status of your network interface gt To view information about your network interface e Choose Diagnostics gt Network Interface The Network Interface page opens The following information is displayed e Whether the Ethernet interface is up or down e Whether the gateway is pingable or not e The LAN port that is currently active gt To refresh this information e Click Refresh Network Interface Refresh Result Link state autonegotiation on 100 Mbps full duplex link ok eth0 BROADCAST MULTICAST UP LOWER UP mtu 1500 qdisc pfifo fast glen 1000 link ether 00 0d 5d ca b1 f8 brd ff ff ff ff ff ff inet 192 168 51 101 24 brd 192 168 51 255 scope global eth0 LAN 1 is active o Mw t ee ae ee qr 157 VAen d 4 i i f Chapter 9 Diagnostics Network Statistics Page The LX provides statistics about your network interface gt To view statistics about your network interface Choose Diagnostics Network Statistics The Network Statistics page opens 2 Choose the appropriate option from the Options drop down list Statistics Produces a page similar to the one displayed here Home gt Diagnostics gt Nebwo amp Statistics 1 Ne
129. icators for the device status boot up and firmware upgrades Hardware Reset button Serial port to connect to an external modem 19 rack mountable brackets included Raritan Chapter 1 Introduction Software e Virtual media support in Windows Mac and Linux environments with D2CIM VUSB and D2CIM DVUSB CIMs e Port scanning and thumbnail view of targets within a configurable scan set e Absolute Mouse Synchronization with D2CIM VUSB CIM and D2CIM DVUSB CIMs e Plug and Play e Web based access and management e Intuitive graphical user interface GUI e 256 bit encryption of complete KVM signal including video and virtual media e LDAP Active Directory RADIUS or internal authentication and authorization e DHCP or fixed IP addressing e SNMP and Syslog management e Pv4 and IPv6 support e LX and generic tiering LX Help The LX help provides information on how to install set up and configure the LX It also includes information on accessing target servers using virtual media managing users and security and maintaining and diagnosing the LX See the LX release notes for important information on the current release before you begin using the LX A PDF version of the help can be downloaded from the Raritan Firmware and Documentation page on the Raritan website Raritan recommends that you refer to the Raritan website for the most up to date user guides available To use online help Active Content must be enabled in your
130. ight savings time User Specified Time Date Month Day Year May w o9 2008 Time Hour Minute 4 thea O Synchronize with HTP Server Primary Time server Secondary Time server OK Reset To Defaults Cancel Event Management The LX Event Management feature allows you enable and disable the distribution of system events to SNMP Managers the Syslog and the audit log i 3is Raritan Chapter 6 Device Management Configuring Event Management Settings SNMP Configuration Simple Network Management Protocol SNMP is a protocol governing network management and the monitoring of network devices and their functions The LX offers SNMP Agent support through Event Management 1 5 Raritan To configure SNMP enable SNMP logging Choose Device Settings gt Event Management Settings The Event Management Settings page opens Select SNMP Logging Enabled This enables the remaining SNMP fields In the Name Contact and Location fields type the SNMP agent s name that is the device s name as it appears in the LX Console interface a contact name related to this device and where the Dominion device is physically located Type the Agent Community String the device s string An SNMP community is the group to which devices and management stations running SNMP belong It helps define where information is sent The community name is used to identify the gro
131. iguring Modem Settings 29 126 Configuring Network 169 Configuring Ports 131 Configuring Standard Target Servers 132 Connect Key Examples 178 Connecting to Virtual Media 90 Connection Information 59 Connection Properties 57 Create User Groups and Users 34 Creating a New Attribute 198 Ctrl Alt Del Macro 64 D D Target Server Ports 28 Default Login Information 12 Desktop Background 13 Device Diagnostics 161 Device Information 150 Device Management 36 115 Device Services 119 Diagnostics 157 Disconnecting a Target Server 35 Disconnecting Virtual Media 88 93 Discovering Devices on the Local Subnet 49 Discovering Devices on the LX Subnet 50 223 Index Drive Partitions 214 E E Modem Port Optional 29 Editing rciusergroup Attributes for User Members 201 Enabling Direct Port Access via URL 53 124 Enabling SSH 119 Enabling the AKC Download Server Certificate Validation 125 Enabling Tiering 122 Encryption amp Share 138 144 183 Entering the Discovery Port 120 Event Management 128 Events Captured in the Audit Log and Syslog 149 194 F Favorites List Page 49 50 Fedora 210 French Keyboard 207 Frequently Asked Questions 217 From LDAP LDAPS 197 From Microsoft Active Directory 197 Full Screen Mode 79 G General Settings 75 Getting Started 13 167 H Hardware 8 Help Options 80 Hot Ke
132. ile is uploaded Test LDAP Server Access The LX provides you with the ability to test the LDAP configuration from the Authentication Settings page due to the complexity sometimes encountered with successfully configuring the LDAP server and LX for remote authentication To test the LDAP configuration enter the login name and password in the Login for testing field and the Password for testing field respectively This is the username and password you entered to access the LX and that the LDAP server will use to authenticate you Click Test Raritan zie Raritan Chapter 5 User Management Once the test is completed a message will be displayed that lets you know the test was successful or if the test failed a detailed error message will be displayed It will display successful result or detail error message in failure case It also can display group information retrieved from remote LDAP server for the test user in case of success Test LDAP Server Access Login for testing Password for testing Returning User Group Information from Active Directory Server The LX supports user authentication to Active Directory AD without requiring that users be defined locally on the LX This allows Active Directory user accounts and passwords to be maintained exclusively on the AD server Authorization and AD user privileges are controlled and administered through the standard LX policies and user group privileges
133. ill restart the browser you are working in If a browser restart will occur when a setting is changed it is noted in the steps provider here 1 Choose Device Settings gt Local Port Settings The Local Port Settings page opens Select the checkbox next to the Enable Standard Local Port to enable it Deselect the checkbox to disable it By default the standard local port is enabled but can be disabled as needed The browser will be restarted when this change is made If you are using the tiering feature this feature will be turned off since both features cannot be used at the same time If you are using the tiering feature select the Enable Local Port Device Tiering checkbox and enter the tiered secret word in the Tier Secret field In order to configure tiering you must also configure the base device on the Device Services page See Configuring and Enabling Tiering on page 121 for more information on tiering If needed configure the Local Port Scan Mode settings These settings apply to Scan Settings feature which is accessed from the Port page See Scanning Ports on page 45 In the Display Interval 10 255 sec field specify the number of seconds you want the target that is in focus to display in the center of the Port Scan window Inthe Interval Between Ports 10 255 sec field specify the interval at which the device should pause between ports Raritan 5 Raritan Chapter 6 Device Management Ch
134. ing the registry on Windows KVM target servers You can obtain better LX mouse synchronization at the login pages by using the Windows registry editor to change the following settings HKey USERSV DEFAULT Control Panel Mouse gt MouseSpeed 0 MouseThreshold 1 0 Mouse Threshold 2 0 Linux Settings Red Hat 9 Note The following settings are optimized for Standard Mouse mode only gt To configure KVM target servers running Linux graphical user interface 1 Configure the mouse settings Raritan Z Raritan Chapter 2 Installation and Configuration a Choose Main Menu gt Preferences gt Mouse The Mouse Preferences dialog appears b Click the Motion tab c Within the Speed group set the Acceleration slider to the exact center d Within the Speed group set the Sensitivity towards low e Within the Drag amp Drop group set the Threshold towards small f Close the Mouse Preferences dialog Note If these steps do not work issue the xset mouse 1 1 command as described in the Linux command line instructions 2 Configure the screen resolution a Choose Main Menu System Settings Display The Display Settings dialog appears b From the Display tab select a Resolution supported by the LX c From the Advanced tab verify that the Refresh Rate is supported by the LX Note Once connected to the target server in many Linux graphical environments the Ctrl Alt lt gt command wil
135. ing with Target Servers Connection Properties The dynamic video compression algorithms maintain KVM console usability under varying bandwidth constraints The devices optimize KVM output not only for LAN use but also for WAN use These devices can also control color depth and limit video output offering an optimal balance between video quality and system responsiveness for any bandwidth The parameters in the Properties dialog can be optimized to suit your needs for different operating environments Connection properties are saved across subsequent connections to generation 2 devices once they are set and saved gt To set the connection properties 1 Choose Connection gt Properties or click the Connection Properties button amp in the toolbar The Properties dialog appears Properties Connection Speed 1G Ethernet v Color Depth 15 bit RGB Color Smoothing lt i i gt Low OK Cancel Appl Note KX II 101 does not support 1G Ethernet 2 Choose the Connection Speed from the drop down list The device can automatically detect available bandwidth and not limit bandwidth use However you can also adjust this usage according to bandwidth limitations Auto 1G Ethernet 100 Mb Ethernet 10 Mb Ethernet 1 5 Mb MAX DSL T1 1Mb Fast DSL T1 512 Kb Medium DSL T1 384 Kb Slow DSL T1 57 Chapter 3 Working with Target Servers 256 Kb Cable 128 Kb Dual ISDN
136. ion for the encryption of electronic data 256 is the key length When AES 256 is specified be certain that your browser supports it otherwise you will not be able to connect See Checking Your Browser for AES Encryption on page 146 for more information Note MPC will always negotiate to the highest encryption and will match the Encryption Mode setting if not set to Auto Note If you are running Windows XP operating system with Service Pack 2 Internet Explorer 7 cannot connect remotely to the LX using AES 128 encryption Apply Encryption Mode to KVM and Virtual Media When selected this option applies the selected encryption mode to both KVM and virtual media After authentication KVM and virtual media data is also transferred with 128 bit encryption PC Share Mode Determines global concurrent remote KVM access enabling up to eight remote users to simultaneously log into one LX and concurrently view and control the same target server through the device Click the drop down list to select one of the following options Private No PC share This is the default mode Each target server can be accessed exclusively by only one user at a time PC Share KVM target servers can be accessed by up to eight users administrator or non administrator at one time Each remote user has equal keyboard and mouse control however note that uneven control will occur if one user does not stop typing or moving the mouse If needed
137. irtual KVM Client Resolving Issues with Firefox Freezing when Using Fedora If you are accessing Firefox and are using a Fedora server Firefox may freeze when it is opening To resolve this issue install the libnpjp2 so Java plug in on the server a 3is Raritan Appendix C Informational Notes Video Modes and Resolutions SUSE VESA Video Modes The SuSE X org configuration tool SaX2 generates video modes using modeline entries in the X org configuration file These video modes do not correspond exactly with VESA video mode timing even when a VESA monitor is selected The LX on the other hand relies on exact VESA mode timing for proper synchronization This disparity can result in black borders missing sections of the picture and noise gt To configure the SUSE video display 1 The generated configuration file etc X11 xorg conf includes a Monitor section with an option named UseModes For example UseModes Modes 0 2 Either comment out this line using or delete it completely 3 Restart the X server With this change the internal video mode timing from the X server will be used and will correspond exactly with the VESA video mode timing resulting in the proper video display on the LX Supported Video Resolutions Not Displaying When using a CIM there are some video resolutions as listed in Supported Video Resolutions that may not be available to you for selection by default gt To view a
138. is allowed This is called authorization When the LX is configured for remote authentication the external authentication server is used primarily for the purposes of authentication not authorization If you are using a tiered configuration in which a base LX device is used to access multiple other tiered devices the base device and the tiered devices must using the same authentication settings From the Authentication Settings page you can configure the type of authentication used for access to your LX Note When remote authentication LDAP LDAPS or RADIUS is selected if the user is not found the local authentication database will also be checked gt To configure authentication 1 Choose User Management gt Authentication Settings The Authentication Settings page opens 2 Choose the option for the authentication protocol you want to use Local Authentication LDAP LDAPS or RADIUS Choosing the LDAP option enables the remaining LDAP fields selecting the RADIUS option enables the remaining RADIUS fields If you choose Local Authentication proceed to step 6 If you choose LDAP LDAPS read the section entitled Implementing LDAP Remote Authentication for information about completing the fields in the LDAP section of the Authentication Settings page 5 If you choose RADIUS read the section entitled Implementing RADIUS Remote Authentication for information about completing the fields in the RADIUS section of the Authen
139. iscovers devices on the device subnet which is the subnet of the LX device IP address itself You can access these devices directly from this the Subnet page or add them to your list of favorites See Favorites List Page on page 49 This feature allows multiple LX devices to interoperate and scale automatically The LX Remote Console automatically discovers the LX devices and any other Raritan device in the subnet of the LX 1 To discover devices on the device subnet Choose Manage Discover Devices LX Subnet The Discover Devices LX Subnet page appears Click Refresh The list of devices on the local subnet is refreshed To add devices to your Favorites List Select the checkbox next to the device name IP address Click Add To access a discovered device Click the device name or IP address for that device A new browser opens to that device Adding Deleting and Editing Favorites To add a device to your favorites list Choose Manage Add New Device to Favorites The Add New Favorite page appears Type a meaningful description Type the IP Address Host Name for the device Raritan Chapter 3 Working with Target Servers Change the discovery Port if necessary Select the Product Type Click OK The device is added to your list of favorites gt To edit a favorite 1 From the Favorites List page select the checkbox next to the appropriate LX device Click Edit The Edit page appears
140. ister the LX The LX Remote Console provides a digital connection to your connected KVM target servers When you log into a KVM target server using the LX Remote Console a Virtual KVM Client window opens There are many similarities among the LX Local Console and the LX Remote Console graphical user interfaces and where there are differences they are noted in the user manual The following options are available in the LX Remote Console but not the LX Local Console e Virtual Media e Favorites e Backup Restore e Firmware Upgrade e SSL Certificates Launching the LX Remote Console Important Regardless of the browser used you must allow pop ups from the device s IP address to launch the LX Remote Console Raritan Raritan Chapter 3 Working with Target Servers Depending on your browser and security settings you may see various security and certificate warnings It is necessary to accept these warnings to launch the LX Remote Console You can reduce the number of warning messages during subsequent log ins by checking the following options on the security and certificate warning messages gt In the future do not show this warning Always trust content from this publisher To launch the LX Remote Console Log in to any workstation with network connectivity to your LX and that has Microsoft NET and or Java Runtime Environment installed JRE is available on the Java website http java sun com
141. ive is not selected Once Active is selected the URL field is required The username password username field and password field are optional depending on whether single sign on is desired or not URL Name Enter the URL to the interface Username Enter the username used to access the interface Password Enter the password used to access the interface papo Username Field Enter the username parameter that will be used in the URL For example username admin where username is the username field f Password Field Enter the password parameter that will be used in the URL For example password raritan where password is the password field 10 Click OK 133 134 Chapter 6 Device Management To change the active status of a KVM switch port or URL Choose Device Settings Port Configuration The Port Configuration page opens Click the Port Name of the target server you want to rename The Port Page opens Deselect the Active checkbox next to the KVM switch target port or URL to change its active status Click OK Configuring LX Local Port Settings From the Local Port Settings page you can customize many settings for the LX Local Console including keyboard hot keys video switching delay power save mode local user interface resolution settings and local user authentication To configure the local port settings Note Some changes you make to the settings on the Local Port Settings page w
142. k file server that you want to access from the target server This need not be the first step but it must be done prior to attempting to access this media The following conditions must be met in order to use virtual media Dominion Device e For users requiring access to virtual media the device permissions must be set to allow access to the relevant ports as well as virtual media access VM Access port permission for those ports Port permissions are set at the group level e AUSB connection must exist between the device and the target Server e f you want to use PC Share Security Settings must also be enabled in the Security Settings page Optional e You must choose the correct USB profile for the KVM target server you are connecting to Client PC e Certain virtual media options require administrative privileges on the client PC for example drive redirection of complete drives Note If you are using Microsoft Vista or Windows 7 disable User Account Control or select Run as Administrator when starting Internet Explorer To do this click the Start Menu locate IE right click and select Run as Administrator Target Server e KVM target servers must support USB connected drives e KVM target servers running Windows 2000 must have all of the recent patches installed e USB 2 0 ports are both faster and preferred 85 86 Chapter 4 Virtual Media Virtual Media in a Linux Environment Following is importa
143. ked computers clients to obtain unique IP addresses and other parameters from a DHCP server With this option network parameters are assigned by the DHCP server If DHCP is used enter the Preferred host name DHCP only Up to 63 characters 4 If IPv6 is to be used enter or select the appropriate IPv6 specific network settings in the IPv6 section a b Select the IPv6 checkbox to activate the fields in the section Enter a Global Unique IP Address This is the IP address assigned to the L X Enter the Prefix Length This is the number of bits used in the IPv6 address Raritan Chapter 6 Device Management d Enter the Gateway IP Address e Link Local IP Address This address is automatically assigned to the device It is used for neighbor discovery or when no routers are present Read Only f Zone ID This identifies the device with which the address is associated Read Only g Select the IP Auto Configuration The following options are available None Use this option if you do not want an auto IP configuration and prefer to set the IP address yourself static IP This is the default and recommended option If None is selected for the IP auto configuration the following Network Basic Settings fields are enabled Global Unique IP Address Prefix Length and Gateway IP Address allowing you to manually set the IP configuration Router Discovery Use this option to automatically assign IPv6 addresse
144. l change the video resolution scrolling through all available resolutions that remain enabled in the XF86Config or etc X1 1 xorg conf depending on your X server distribution gt To configure KVM target servers running Linux command line 1 Setthe mouse acceleration to exactly 1 and set the threshold to exactly 1 Enter this command xset mouse 1 1 This should be set for execution upon login 2 Ensure that each target server running Linux is using a resolution supported by the LX at a standard VESA resolution and refresh rate 3 EachLinux target server should also be set so the blanking times are within 40 of VESA standard values a Goto the Xfree86 Configuration file XF86Config Using a text editor disable all non LX supported resolutions Disable the virtual desktop feature not supported by the LX Check blanking times 40 of VESA standard b C d e Restart computer 19 20 Chapter 2 Installation and Configuration Note If you change the video resolution you must log off of the target server and log back in for the video settings to take effect Note for Red Hat 9 KVM Target Servers If you are running Red Hat 9 on the target server using a USB CIM and are experiencing problems with the keyboard and or mouse there is an additional configuration setting you can try Tip You might have to perform these steps even after a fresh OS installation gt Toconfigure Red Hat 9 servers using
145. laia taaa naak 172 LX Local Console Interface LX Devices ssssessssssssssesesee adadad 173 Securty and AuthentiCatlOl ausi oa net eee epe tae node teu dae uae etre uve ra nde ear dx de Ren 173 Supported Video Resolutions Local Console sssssssseseeseeeeeeren trenes 174 Port Access Page Local Console Server Display sssssseeeee 174 ACCESSING Target SetVOl aei teret rte se estende tud nena de eta dae sae ara du ER E Reads 175 Scanning Ports Local Console ni tite tr onde ed a ete ete eva a nde etae rx rude Red 176 Usmo SCAN OPTIONS cyose since c 177 Hot Keys and Connect Key Si cocus needs er nace das ci orders endet e Rea ra nde estt eeu adea 177 connect Key EXamlpl6S 3 tcc peine inopinato pete etx aiai aa Eu depen 178 Special Sun Key COMBIMAUOMS 5 onte pete tr onde ned ex ee Fete eva a nde etae ran digi 178 Returning to the LX Local Console Interface eene 179 Local Port AdminiStE atiODinzss ac ons hte de e hnnc Enna teta de cath do exten ptm ua dett edu na dee 179 Configuring LX Local Console Local Port Settings sss 180 LX Local Console Factory Reset sssssssssssssssessseeeeenen nennen entree 182 Resetting the LX Using the Reset Button sse 183 Appendix A Specifications 184 LX Specificato NS a testet detener aa ie tum quieto edes tbe etm seek ursus care ue aa 184 IE D IBdICalOIS aoi rp e sep
146. le in Multi Platform Client MPC and vice versa However keyboard macros created in Active KVM Client AKC cannot be used in VKC or MPC and vice versa Note KX Il 101 does not support AKC 59 60 Chapter 3 Working with Target Servers Import Export Keyboard Macros Macros exported from Active KVM Client AKC cannot be imported into Multi Platform Client MPC or Virtual KVM Client VKC Macros exported from MPC or VKC cannot be imported into AKC Note KX Il 101 does not support AKC gt 1 To import macros Choose Keyboard gt Import Keyboard Macros to open the Import Macros dialog Browse to the folder location of the macro file Click on the macro file and click Open to import the macro a If too many macros are found in the file an error message is displayed and the import terminates once OK is selected b If the import fails an error dialog appears and a message regarding why the import failed is displayed Select OK to continue the import without importing the macros that cannot be imported Select the macros to be imported by checking their corresponding checkbox or using the Select All or Deselect All options Click OK to begin the import a Ifa duplicate macro is found the Import Macros dialog appears Do one of the following Raritan Chapter 3 Working with Target Servers Click Yes to replace the existing macro with the imported version Click Yes to All to replace the
147. lect Set CIM Keyboard Mouse options This is the equivalent of sending the Left Control and Num Lock to the target The CIM setup menu options are then displayed Set the language and mouse settings Exit the menu to return to normal CIM functionality Video Properties Refreshing the Screen The Refresh Screen command forces a refresh of the video screen Video settings can be refreshed automatically in several ways e The Refresh Screen command forces a refresh of the video screen e The Auto sense Video Settings command automatically detects the target server s video settings e The Calibrate Color command calibrates the video to enhance the colors being displayed In addition you can manually adjust the settings using the Video Settings command gt To refresh the video settings do one of the following e Choose Video gt Refresh Screen or click the Refresh Screen button in the toolbar Auto Sense Video Seitings The Auto sense Video Settings command forces a re sensing of the video settings resolution refresh rate and redraws the video screen gt To automatically detect the video settings do the following e Choose Video gt Auto sense Video Settings or click the Auto Sense iM Video Settings button in the toolbar A message stating that the auto adjustment is in progress appears 65 66 Chapter 3 Working with Target Servers Calibrating Color Use the Calibrate Color command to optimize the
148. left hand corner Mouse Settings 1 Raritan To configure the mouse seitings Sun Solaris 10 1 Choose Launcher Application Manager Desktop Controls opens 23 Chapter 2 Installation and Configuration 2 Choose Mouse Style Manager The Style Manager Mouse dialog appears 3 Setthe Acceleration slider to 1 0 4 Setthe Threshold slider to 1 0 5 Click OK Accessing the Command Line 1 Right click 2 Choose Tools Terminal A terminal window opens It is best to be at the root to issue commands Video Settings POST Sun systems have two different resolution settings a POST resolution and a GUI resolution Run these commands from the command line Note 1024x768x75 is used as an example here substitute the resolution and refresh rate you are using gt To check current POST resolution e Run the following command as the root eeprom output device gt To change POST resolution 1 Run eeprom output device screen r1024x768x75 2 Logoutor restart computer Video Settings GUI The GUI resolution can be checked and set using different commands depending on the video card in use Run these commands from the command line Note 1024x768x75 is used as an example here substitute the resolution and refresh rate you are using Raritan Chapter 2 Installation and Configuration Card To check resolution To change resolution 32 bit usr sbin pgxconfig prconf 1 usr
149. lient MPC Note Some features such as client launch settings and smart cards are not supported by the LX and as such are not supported by AKC or VKC when used in conjunction with the LX 53 54 Chapter 3 Working with Target Servers AKC Supported NET Framework Operating Systems and Browsers NET Framework AKC requires Windows NET version 3 5 and will work with both 3 5 and 4 0 installed but will not work with 4 0 alone Operating Systems When launched from Internet Explorer AKC allows you to reach target servers via the KX II 2 2 and later and the LX 2 4 5 and later AKC is compatible with the following platforms running NET Framework 3 5 e Windows XP operating system e Windows Vista operating system up to 64 bit e Windows 7 operating system up to 64 bit Since NET is required to run AKC if you do not have NET installed or you have an unsupported version of NET installed you will receive a message instructing you to check the NET version Browser e Internet Explorer 6 or later If you attempt to open AKC from a browser other than IE 6 or later you will receive an error message instructing you to check your browser and to switch to Internet Explorer Prerequisites for Using AKC In order to use AKC e Ensure the cookies from the IP address of the device that is being accessed are not currently being blocked e Windows Vista Windows 7 and Windows 2008 server users should ensure tha
150. ll allow targets on the tiered analog KVM switch to be accessible from a consolidated port list on the Port Access page Important In order for user groups to see the KVM switch that you create you must first create the switch and then create the group If Raritan Raritan Chapter 6 Device Management an existing user group needs to see the KVM switch you are creating you must recreate the user group gt 1 To configure KVM switches Choose Device Settings gt Port Configuration The Port Configuration page opens Click the Port Name of the target server you want to rename The Port Page opens Select KVM Switch Select the KVM Switch Model Note Only one switch will appear in the drop down Select KVM Switch Hot Key Sequence Enter the Maximum Number of Target Ports 2 32 In the KVM Switch Name field enter the name you want to use to refer to this port connection Activate the targets that the KVM switch hot key sequence will be applied to Indicate the KVM switch ports have targets attached by selecting Active for each of the ports In the KVM Managed Links section of the page you are able to configure the connection to a web browser interface if one is available a Active To activate the link once it is configured select the Active checkbox Leave the checkbox deselected to keep the link inactive Entering information into the link fields and saving can still be done even if Act
151. ll available video resolutions if they do not appear 1 Plug the monitor in 2 Next unplug the monitor and plug in the CIM All video resolutions will not be available and can be used VM CIMs and DL360 USB Ports zie Raritan HP DL360 servers have one USB port on the back of the device and another on the front of the device With the DL360 both ports cannot be used at the same time Therefore a dual VM CIM cannot be used on DL360 servers However as a workaround a USB2 hub can be attached to the USB port on the back of the device and a dual VM CIM can be attached to the hub 211 Appendix C Informational Notes MCUTP The serial number and CIM name provided on the MCUTP are not stored in the device As such MCUTP ports behave differently than others Specifically e No storage of name on the CIM port name is a label associated with the port as long as the port type doesn t change because a different CIM type is connected to it e Power associations cannot be made to ports of this type e Target Settings cannot be applied to ports of this type e The serial number will be shown as N A on displays showing CIM serial number or in log entries e Ports of this type cannot be associated with Port Groups e Ports of this type cannot be associated with Connect Scripts Raritan Virtual Media Raritan Appendix C Informational Notes Virtual Media via VKC and AKC in a Windows Environment Windows XP
152. ly on the LX Remote Console not on the Local Console 1 Click Save to File A Save File dialog appears 2 Choose the desired file name and location and click Save The audit log is saved locally on your client machine with the name and location specified gt To page through the audit log e Use the Older and Newer links 149 Chapter 8 Maintenance Device Information The Device Information page provides detailed information about your LX device and the CIMs in use This information is helpful should you need to contact Raritan Technical Support gt To view information about your LX and CIMs e Choose Maintenance gt Device Information The Device Information page opens The following information is provided about the LX e Model e Hardware Revision e Firmware Version e Serial Number e MAC Address The following information is provided about the CIMs in use e Port number e Name e Type of CIM DCIM or VM e Firmware Version e Serial Number of the CIM this number is pulled directly from the supported CIMs Note Only the numeric portion or the serial numbers are displayed for the DCIM USB DCIM PS2 and DCIM USB G2 CIMs For example XXX1 2345067 is displayed The serial number prefix GN is displayed for CIMs that have field configured serial numbers Device Information Model DLX 116 Hardware Revision 0x10 Firmware Version 24 5 1 79 Serial Number HKK1600002 MAC Address 00 0d 5d 00
153. m system requirements e Supported operating systems and browsers e Keyboard macros created in AKC cannot be used in VKC e Direct port access configuration see Enabling Direct Port Access via URL on page 124 e AKC server certification validation configuration see Prerequisites for Using AKC About the Virtual KVM Client Whenever you access a target server using the Remote Console a Virtual KVM Client VKC window opens There is one Virtual KVM Client for each target server connected These windows can be accessed via the Windows task bar Note Some features such as client launch settings and smart cards are not supported by the LX and as such are not supported by AKC or VKC when used in conjunction with the LX Note The KX II 101 V2 only supports a connection to one target at a time Virtual KVM Client windows can be minimized maximized and moved around your computer desktop Note Refreshing your HTML browser closes the Virtual KVM Client connection so exercise caution Note If you are using Firefox 3 0 3 you may experience problems launching the application If this occurs clear the browser cache and launch the application again About the Active KVM Client AKC is based on Microsoft Windows NET technology and allows you to run the client in Windows environments without the use of the Java Runtime Environment JRE which is required to run Raritan s Virtual KVM Client VKC and Multi Platform C
154. mat of valid LX local passwords such as minimum and maximum length required characters and password history retention Strong passwords require user created passwords to have a minimum of 8 characters with at least one alphabetical character and one nonalphabetical character punctuation character or number In addition the first four characters of the password and the user name cannot match When selected strong password rules are enforced Users with passwords not meeting strong password criteria will automatically be required to change their password on their next login When deselected only the standard format validation is enforced When selected the following fields are enabled and required Field Description Minimum length of strong Passwords must be at least 8 password characters long The default is 8 but it can be up to 63 Maximum length of strong The default is 8 minimum and 16 the is Raritan Field password Enforce at least one lower case character Enforce at least one upper case character Enforce at least one numeric character Enforce at least one printable special character Number of restricted passwords based on history Strong Passwords 7 Enable Strong Passwords Minimum length of strong password 8 Maximum length of strong password 16 Enforce at least one lower case character Enforce at least one upper case character Enforce at least one numeric character Enforce a
155. mation options Animate controls and elements inside windows Animate windows when minimizing and maximizing Fade options Fade or slide menus into view Fade or slide ToolTips into view Fade out menu items after clicking Click OK and Close the Control Panel 17 18 Chapter 2 Installation and Configuration Windows 2000 Settings gt To configure KVM target servers running Microsoft Windows 2000 operating system 1 Configure the mouse settings a Choose Start Control Panel Mouse b Click the Motion tab Set the acceleration to None Set the mouse motion speed setting to exactly the middle speed Click OK 2 Disable transition effects a Select the Display option from the Control Panel b Click the Effects tab Deselect the Use the following transition effect for menus and tooltips option 3 Click OK and close the Control Panel Note For KVM target servers running Windows XP Windows 2000 or Windows 2008 you may wish to create a user name that will be used only for remote connections through the LX This will enable you to keep the target server s slow mouse pointer motion acceleration settings exclusive to the LX connection Windows XP 2000 and 2008 login pages revert to preset mouse parameters that differ from those suggested for optimal LX performance As a result mouse synchronization may not be optimal for these screens Note Proceed only if you are comfortable adjust
156. n and share 1 Choose one of the options from the Encryption Mode drop down list When an encryption mode is selected a warning appears stating that if your browser does not support the selected mode you will not be able to connect to the LX The warning states When the Encryption Mode is specified please ensure that your browser supports this encryption mode otherwise you will not be able to connect to the LX Encryption mode Auto RC4 AES 128 AES 256 144 Description This is the recommended option The LX autonegotiates to the highest level of encryption possible Secures user names passwords and KVM data including video transmissions using the RSA RC4 encryption method This is a 128 bit Secure Sockets Layer SSL protocol that provides a private communications channel between the LX device and the Remote PC during initial connection authentication The Advanced Encryption Standard AES is a National Institute of Standards and Technology specification for the encryption of electronic data 128 is the key length When AES 128 is specified be certain that your browser supports it otherwise you will not be able to connect See Checking Your Browser for AES Encryption on page 146 for more information The Advanced Encryption Standard AES is a National Institute of Standards and Technology Raritan Raritan Chapter 7 Security Management Encryption Description mode specificat
157. n heading Change the number of ports displayed on the page by entering a number in the Rows per Page field at the bottom right of the page and clicking Set See Port Access Page on page 43 for more information Use the Set Scan tab to scan for up to 32 targets that are connected to the LX See Scanning Ports on page 45 Raritan 5 Raritan Left Panel Chapter 3 Working with Target Servers The left panel of the LX interface contains the following information Note that some information is conditional and will only be displayed if you are a certain of user are using certain features and so on Conditional information is noted here Information Time amp Session User State Your IP Last Login Device Information Device Name IP Address Firmware Device Model Configured As Base or Configured As Tiered Port States Connected Users Description The date and time the current session started Username The current state of the application either idle or active If idle the application tracks and displays the time the session has been idle The IP address used to access the LX The last login date and time Information specific to the LX you are using Name assigned to the device The IP address of the LX Current version of firmware Model of the LX If you are using a tiering configuration this indicates if the LX you are accessing is the base device or a tiered d
158. n or the KVM and Serial Access Clients Guide for more information The LX KX Il KX II 101 and KX II 101 V2 Remote Console and MPC require the Java Runtime Environment JRE to function since the Remote Console checks the Java version If the version is incorrect or outdated you will be prompted to download a compatible version Raritan recommends using JRE version 1 6 for optimum performance but the Remote Console and MPC will function with JRE version 1 6 x and later with the exception of 1 6 2 Note In order for multi language keyboards to work in the LX KX Il KX Il 101 and KX II 101 V2 Remote Console Virtual KVM Client install the multi language version of JRE 205 Appendix C Informational Notes IPv6 Support Notes Java Java 1 6 supports IPv6 for the following e Solaris 10 and later e linux kernel 2 1 2 and later RedHat 6 1 and later Java 5 0 and above supports the IPv6 for the following e Solaris 10 and later e Linux kernel 2 1 2 and later kernel 2 4 0 and later recommended for better IPv6 support e Windows XP SP1 and Windows 2003 Windows Vista operating systems The following IPv6 configurations are not supported by Java e J2SE 1 4 does not support IPv6 on Microsoft Windows Linux e tis recommended that Linux kernel 2 4 0 or higher is used when using IPv6 e An IPv6 enabled kernel will need to be installed or the kernel will need to be rebuilt with IPv6 op
159. ned by the administrator provided that a DNS server has been configured or type the IP address in the browser LX always redirects the IP address from HTTP to HTTPS 4 Enter your username and password Click Login Access and Control Target Servers Remotely The LX Port Access page provides a list of all LX ports as well as the connected target servers their status and availability Accessing a Target Server gt To access a target server 1 Click the Port Name of the target you want to access The Port Action Menu is displayed 2 Choose Connect from the Port Action menu A KVM window opens with a connection to the target Raritan 5 Raritan Chapter 2 Installation and Configuration Switching between Target Servers gt To switch between KVM target servers 1 While already using a target server access the LX Port Access page 2 Click the port name of the target you want to access The Port Action menu appears 3 Choose Switch From in the Port Action menu The new target server you selected is displayed Disconnecting a Target Server gt To disconnect a target server e Click the port name of the target you want to disconnect When Port Action menu appears click Disconnect Step 6 Configure the Keyboard Language Optional Note This step is not required if you are using the US International language keyboard If you are using a non US language the keyboard has to be configured for
160. nen nakan aN Kaa LAANA SEEE RAN 172 LX Local Console Interface LX Devices sssssssessss 173 Security and Authentication sss 173 Supported Video Resolutions Local Console 174 Port Access Page Local Console Server Display 174 Accessing a Target SerVer sristi Lba ed Por d EE 175 Scanning Ports Local Console sse 176 HotKeys and Connect IKeys ence rore edet re t tae eh ba Pa 177 Special Sun Key Combinations sssssssseeeeeneeee 178 Returning to the LX Local Console Interface ssususssse 179 Local Port Administration ocior nea erri erede eere 179 Resetting the LX Using the Reset Button ssssssssssss 183 The LX provides at the rack access and administration via its local port which features a browser based graphical user interface for quick convenient switching between servers The LX Local Console provides a direct analog connection to your connected servers which provides the same performance is as if you were directly connected to the server s keyboard mouse and video ports The LX Local Console provides the same administrative functionality as the LX Remote Console Simultaneous Users Z Raritan The LX Local Console provides an independent access path to the connected KVM target servers Using the Local Console does not preve
161. nfiguration Commands 169 AKC Supported NET Framework Operating Systems and Browsers 54 Apple Macintosh Settings 26 Assigning an IP Address 30 Audit Log 149 182 183 Authentication Settings 102 Auto Sense Video Settings 65 B B Network Port 27 Backup and Restore 151 Building a Keyboard Macro 62 C C Local Access Port Local PC 28 Cabling Example in Tiered Configurations 123 Calibrating Color 66 Certified Modems 127 190 Changing a Password 114 Changing the Default GUI Language Setting 136 Changing the Default Password 29 Changing the Keyboard Layout Code Sun Targets 35 Changing the Maximum Refresh Rate 70 Checking Your Browser for AES Encryption e 144 146 5 Raritan CIMs 215 Cisco ACS 5 x for RADIUS Authentication 110 CLI Commands 163 168 CLI Prompts 168 CLI Syntax Tips and Shortcuts 166 Client Launch Settings 77 Command Line Interface CLI 163 Common Commands for All Command Line Interface Levels 166 Completion of Commands 165 Conditions when Read Write is Not Available 88 90 Configuring and Enabling Tiering 43 97 98 99 121 134 174 180 Configuring Date Time Settings 127 Configuring Date Time Settings Optional 32 Configuring Event Management Settings 129 Configuring KVM Switches 121 132 Configuring LX Local Console Local Port Settings 180 Configuring LX Local Port Settings 134 Conf
162. nformation is displayed in the Result field Sis Raritan a Chapter 9 Diagnostics Ping Host Page Ping is a network tool used to test whether a particular host or IP address is reachable across an IP network Using the Ping Host page you can determine if a target server or another LX is accessible gt To ping the host 1 Choose Diagnostics gt Ping Host The Ping Host page appears Home gt Diagnostics gt Ping Host Ping Host IP Address Host Name 192 168 59 173 i 192 168 59 173 is alive omma ats a hme aa a a A iia 2 Type either the hostname or IP address into the IP Address Host Name field Result Note The host name cannot exceed 232 characters in length 3 Click Ping The results of the ping are displayed in the Result field Trace Route to Host Page 160 Trace route is a network tool used to determine the route taken to the provided hostname or IP address gt To trace the route to the host 1 Choose Diagnostics Trace Route to Host The Trace Route to Host page opens 2 Type either the IP address or host name into the IP Address Host Name field Note The host name cannot exceed 232 characters in length Raritan 3 4 Chapter 9 Diagnostics Choose the maximum hops from the drop down list 5 to 50 in increments of 5 Click Trace Route The trace route command is executed for the given hostname or IP address and the maximum hops The output
163. nly Windows Fat partitions are supported by Linux Windows FAT and NTFS supported by Mac Mac users must unmount any devices that are already mounted in order to connect to a target server Use diskutil umount dev disk1s1 to unmount the device and diskutil mount dev disk1s1 to remount it s Z Raritan CIMs zie Raritan Appendix C Informational Notes Virtual Media Linux Drive Listed Twice For KX II 2 4 0 and later and LX 2 4 5 and later users who are logged in to Linux clients as root users the drives are listed twice in the Local Drive drop down For example you will see eg dev sdc and eg dev sdc1 where the first drive is the boot sector and the second drive is the first partition on the disk Mac and Linux Locked Mapped Drives Mapped drives from Mac and Linux clients are not locked when mounted onto connected targets This applies only to KX II 2 4 0 and later and LX 2 4 5 and later which provides support for Mac and Linux Accessing Virtual Media on a Windows 2000 Server Using a D2CIM VUSB A virtual media local drive cannot be accessed on a Windows 2000 server using a D2CIM VUSB Target BIOS Boot Time with Virtual Media The BIOS for certain targets may take longer to boot if media is mounted virtually at the target gt To shorten the boot time 1 Close the Virtual KVM Client to completely release the virtual media drives 2 Restart the target Virtual Media Conne
164. nnected to the LX KVM target servers are servers that you want to control through the LX device They are connected to the LX ports at the back of the device Note For each connection to a KVM target server a new Virtual KVM Client window opens If you are using a tiered configuration in which a base LX device is used to access multiple other tiered devices the tiered devices are viewed on the Port Access page by clicking on the Expand Arrow icon to the left of the tier device name See Configuring and Enabling Tiering on page 121 for more information on tiering The port scanning feature is accessed from the Set Scan tab on the Port Access page The feature allows you to define a set of targets to be scanned Thumbnail views of the scanned targets are also available Select a thumbnail to open that target in its Virtual KVM Client window gt To use the Port Access page 1 From the LX Remote Console click the Port Access tab The Port Access page opens The KVM target servers are initially sorted by Port Number You can change the display to sort on any of the columns Port Number Numbered from 1 to the total number of ports available for the LX device Port Name The name of the LX port Initially this is set to Dominion LX Port but you can change the name to something more descriptive When you click a Port Name link the Port Action Menu appears Note Do not use apostrophes for the Port CIM Name T
165. nt 94 User GOUPS sie E 94 BEI SCIO IUBE 95 Relationship Between Users and Groups sssssssseseeee entente 95 Adding a New User Gropi susieina eere Rege steer eds i este KES ERKE 95 Moditying and Existing User Groups aucune ce eue rr tene E hex erbe pua xe ee Kur ta a Reis 99 Bcc 99 BEIININRCTM EP 100 Adding a URBI 100 Moditying an Existing User iiio tere deir Io oed kaiaa cce c ode Fonte nt Ia PR ERE DR SOE GE 101 Logging a User Off Force Logotf eiii eite tete dine Yonne set etna ran Rd dace 101 Authentication Settlngs iiio acere eH Let Feat Coal tonite Pd ra catal Ih ee s ienaa AM de Dana E FER RICE 102 Implementing LDAP LDAPS Remote Authentication sssseeee 103 Returning User Group Information from Active Directory Server 107 Implementing RADIUS Remote Authentication essen 108 Returning User Group Information via RADIUS sse 111 RADIUS Communication Exchange Specifications 111 User Authentication ProCeSss eicit cete teo Le deed uae ence EL apanda aeris 113 Ghanging a PASSWOMG E 114 Chapter 6 Device Management 115 nter esie 115 Network Basic Settings eio tee prete ate Peu px peg qv eda as X RUE LR ENEE 116 LAN Interface Settings repo tee Rr ie exu Len xx peg RR
166. nt information for Linux users regarding using virtual media Root User Permission Requirement e Your virtual media connection can be closed if you mount a CD ROM from a Linux client to a target and then unmount the CD ROM The connection also closes when a floppy drive has been mounted and then a floppy disk is removed To avoid these issues you must be a root user Permissions Users must have the appropriate access permissions in order to connect the Drive CD ROM to the target This can be checked using guest_user administrator desktop ls 1 dev sr0 brw rw 1 root cdrom 11 12 03 2010 11 52 dev srO0 In the above example the permission must be changed to allow read access On a system that supports ACLs in its file utilities the Is command changes its behavior in the following way e For files that have a default ACL or an access ACL that contains more than the three required ACL entries the Is 1 utility in the long form produced by Is I displays a plus sign after the permission string This is indicated in the example provided here for dev srO use getfacl a dev srO to see if the user has been provided access as part of an ACL In this case they have and are therefore able to connect the cd rom onto the target even though the output of the Is l command may indicate otherwise Z Raritan Chapter 4 Virtual Media guest_user administrator desktop getfacl a dev sr0 getfacl Removing
167. nt other users from simultaneously connecting over the network And even when remote users are connected to the LX you can still simultaneously access your servers from the rack via the Local Console 172 Chapter 11 LX Local Console LX Local Console Interface LX Devices When you are located at the server rack the LX provides standard KVM management and administration via the LX Local Console The LX Local Console provides a direct KVM analog connection to your connected servers the performance is exactly as if you were directly connected to the server s keyboard mouse and video ports There are many similarities among the LX Local Console and the LX Remote Console graphical user interfaces Where there are differences they are noted in the help The LX Local Console Factory Reset option is available in the LX Local Console but not the LX Remote Console Security and Authentication In order to use the LX Local Console you must first authenticate with a valid username and password The LX provides a fully integrated authentication and security scheme whether your access is via the network or the local port In either case the LX allows access only to those servers to which a user has access permissions See User Management on page 94 for additional information on specifying server access and security settings If your LX has been configured for external authentication services LDAP LDAPS RADIUS or Active Directory a
168. nt workstation and the other belonging to the target server You can operate in either single mouse mode or dual mouse mode When in dual mouse mode and provided the option is properly configured the mouse cursors align When there are two mouse cursors the device offers several mouse modes e Absolute Mouse Synchronization e Intelligent Mouse Mode e Standard Mouse Mode Raritan Chapter 3 Working with Target Servers Mouse Pointer Synchronization When remotely viewing a target server that uses a mouse two mouse cursors are displayed one belonging to your remote client workstation and the other belonging to the target server When the mouse pointer lies within the Virtual KVM Client target server window mouse movements and clicks are directly transmitted to the connected target server While in motion the client mouse pointer slightly leads the target mouse pointer due to mouse acceleration settings On fast LAN connections you can disable the Virtual KVM Client mouse pointer and view only the target server s pointer You can toggle between these two modes single mouse and dual mouse Mouse Synchronization Tips Be sure to follow these steps when configuring mouse synchronization 1 Verify that the selected video resolution and refresh rate are among those supported by the device The Virtual KVM Client Connection Info dialog displays the actual values that the device is seeing 2 For KX II and LX devices v
169. number of the LX physical port When a port s status is down Not Available is displayed as its status A port may be down when the port s CIM has removed or powered down After you have renamed the port use Reset to Default at any time to return it to its default port name gt To access a port configuration 1 Choose Device Settings Port Configuration The Port Configuration Page opens This page is initially displayed in port number order but can be sorted on any of the fields by clicking on the column heading Port Number Numbered from 1 to the total number of ports available for the LX device Port Name The name assigned to the port Alternatively rename ports that are currently not connected to the LX via a CIM and as such have a status of Not Available To rename a port with a status of Not Available do one of the following Rename the port When a CIM is attached the CIM name will be used Rename the port and select Persist name on Next CIM Insertion When a CIM is attached the name that has been assigned will be copied into the CIM Reset the port including the name to factory defaults by selecting Reset to Defaults When a CIM is attached the CIM name will be used Note Do not use apostrophes for the Port CIM Name Port Type zie Raritan i 132 Chapter 6 Device Management 2 a DCIM Dominion CIM Not Available No CIM connected MCUTP Master Console MCUTP
170. o ports of this type e The serial number will be shown as N A on displays showing CIM serial number or in log entries Raritan Appendix D Frequently Asked Questions In This Chapter Edl s TP Sis Raritan 217 Chapter 12 LX FAQs Question What is the Dominion LX Can you describe the typical LX customer What s so special about the Dominion LX What types of IT equipment can the LX manage What types of remote management functions are supported How does the Dominion LX compare to the competition Z Raritan Answer The Dominion LX is a family of economical KVM over IP switches with single power single LAN and virtual media Targeted towards small and midsize businesses with less than 75 servers under management they provide BIOS level IP control of 8 or 16 servers with one or two user remote access The typical customer usually an IT administrator or software developer tester works for a small or midsize business that needs full featured remote KVM over IP access at an economical price LX customers want productivity enhancing features such as virtual media Absolute Mouse Synchronization and common remote and local user interfaces The LX provides a full featured high quality KVM over IP switch at an affordable price Unlike other products in its price range it supports productivity enhancing features such as virtual media Absolute Mouse Synchronization and a common browser based use
171. ollowing steps include the Cisco menus and menu items used to access each page Please refer to your Cisco documentation for the most up to date information on each step and more details on performing them 110 Add the LX as a AAA Client Required Network Resources Network Device Group Network Device and AAA Clients Add edit users Required Network Resources gt Users and Identity Stores Internal Identity Stores Users Configure Default Network access to enable CHAP Protocol Optional Policies Access Services Default Network Access Create authorization policy rules to control access Required Policy Elements gt Authorization and Permissions gt Network Access gt Authorization Profiles Dictionary Type RADIUS IETF RADIUS Attribute Filter ID Attribute Type String Attribute Value Raritan G KVM_Admin where KVM Admin is group name created locally on Dominion KVM Switch Case sensitive Configure Session Conditions Date and Time Required Policy Elements Session Conditions Date and Time Configure create the Network Access Authorization Policy Required Access Policies Access Services Default Network Access gt Authorization Raritan Z Raritan Chapter 5 User Management Returning User Group Information via RADIUS When a RADIUS authentication attempt succeeds the LX determines the permissions for a given user based on the permissions of the user s group
172. on in which they were created For example the default password raritan must be entered entirely in lowercase letters The first time you start the LX you are required to change the default password IP address The LX ships with the default IP address of 192 168 0 192 12 zie Raritan Chapter 2 Installation and Configuration Default Value Important For backup and business continuity purposes it is strongly recommended that you create a backup administrator user name and password and keep that information in a secure location Getting Started zie Raritan Step 1 Configure the KVM Target Servers KVM target servers are the computers that are accessed and controlled via the LX Before installing the LX configure all KVM target servers to ensure optimum performance This configuration applies only to KVM target servers not to the client workstations remote PCs used to access the LX remotely Desktop Background For optimal bandwidth efficiency and video performance use solid color backgrounds whenever possible Backgrounds featuring photos or complex gradients might degrade performance Supported Video Resolutions Ensure that each target server s video resolution and refresh rate are supported by the LX and that the signal is noninterlaced Video resolution and cable length are important factors in the ability to obtain mouse synchronization See Target Server Connection Distance and Video Resolution on p
173. onfiguring and Enabling Tiering on page 121 for more information on tiering SSL certificate security settings VM Share PC Share User and group management remote authentication _DAP LDAPS RADIUS login settings If you are using a tiered configuration in which a base LX device is used to access multiple other tiered devices user user group and remote authentication settings must be consistent across all devices See Configuring and Enabling Tiering on page 121 for more information on tiering 97 98 Chapter 5 User Management Setting Port Permissions For each server port you can specify the access type the group has as well as the type of port access to the virtual media Please note that the default setting for all permissions is Deny Port access option Deny View Control VM access option Deny Read Only Read Write Description Denied access completely View the video but not interact with the connected target server Control the connected target server Control must be assigned to the group if VM In order for all users in a user group to see KVM switches that are added each user must be granted Control access If they don t have this permission and a KVM switch is added at a later time they will not be able to see the switches Description Virtual media permission is denied altogether for the port Virtual media access is limited to read access only Complete access
174. oose the appropriate keyboard type from among the options in the drop down list The browser will be restarted when this change is made US US International United Kingdom French France German Germany JIS Japanese Industry Standard Simplified Chinese Traditional Chinese Dubeolsik Hangul Korean German Switzerland Portuguese Portugal Norwegian Norway Swedish Sweden Danish Denmark Belgian Belgium Note Keyboard use for Chinese Japanese and Korean is for display only Local language input is not supported at this time for LX Local Console functions Note If using a Turkish keyboard you must connect to a target server through the Active KVM Client AKC It is not supported by other Raritan clients Choose the local port hotkey The local port hotkey is used to return to the LX Local Console interface when a target server interface is being viewed The default is to Double Click Scroll Lock but you can select any key combination from the drop down list Hot key Take this action Double Click Scroll Lock Press Scroll Lock key twice quickly Double Click Num Lock Press Num Lock key twice quickly Double Click Caps Lock Press Caps Lock key twice quickly Double Click Left Alt key Press the left Alt key twice quickly Double Click Left Shift key Press the left Shift key twice quickly Double Click Left Ctrl key Press the left Ctrl key twice quickly 135 136 Chapter
175. op is set on the target Do not use an animated mouse for Intelligent Mouse Mode Raritan Chapter 2 Installation and Configuration Windows XP Windows 2003 and Windows 2008 Settings gt To configure KVM target servers running Microsoft Windows XP operating system Windows 2003 operating system or Windows 2008 operating systems 1 Configure the mouse settings a Choose Start gt Control Panel gt Mouse b Click the Pointer Options tab c Inthe Motion group Set the mouse motion speed setting to exactly the middle speed Disable the Enhance pointer precision option Disable the Snap To option Click OK Note When you are running Windows 2003 on your target server if you access the server via KVM and perform any one off the actions listed below mouse synchronization may be lost if it has been previously enabled You will need to select the Synchronize Mouse command from the Mouse menu in the client to enable it again Following are the actions that may cause this to occur Opening a text editor Accessing the Mouse Properties Keyboard Properties and Phone and Mode Options from the Windows Control Panel 2 Disable transition effects a Select the Display option from the Control Panel b Click the Appearance tab c Click Effects d Deselect the Use the following transition effect for menus and tooltips option e Click OK 3 Close the Control Panel zie Raritan a 16 Cha
176. option from the Control Panel b Select Performance Information then Tools Advanced Tools Adjust to adjust the appearance and performance of Windows c Click the Advanced tab Click Settings in the Performance group to open the Performance Options dialog e Under Custom options deselect the following checkboxes Animation options Raritan Z Raritan Chapter 2 Installation and Configuration a Animate controls and elements inside windows Animate windows when minimizing and maximizing Fade options Fade or slide menus into view Fade or slide ToolTips into view Fade out menu items after clicking Click OK and Close the Control Panel To configure KVM target servers running Windows 7 operating system Configure the mouse settings a Choose Start gt Control Panel gt Hardware and Sound gt Mouse b Click the Pointer Options tab c Inthe Motion group Set the mouse motion speed setting to exactly the middle speed Disable the Enhanced pointer precision option Click OK Disable animation and fade effects a Select Control Panel System and Security b Select System and then select Advanced system settings from the left navigation panel The System Properties dialog appears c Click the Advanced tab d Click the Settings button in the Performance group to open the Performance Options dialog e Under Custom options deselect the following checkboxes Ani
177. or Keyboard Indicator System Settings Control Center System Settings Control Center System Settings Control Center Control Center System Settings System Settings Control Center Raritan Z Raritan Appendix C Informational Notes Note The Keyboard Indicator should be used on Linux systems using Gnome as a desktop environment When using a Hungarian keyboard from a Linux client the Latin letter U with Double Acute and the Latin letter O with Double Acute work only with JRE 1 6 There are several methods that can be used to set the keyboard language preference on Fedora Linux clients The following method must be used in order for the keys to be mapped correctly from the Virtual KVM Client and the Multi Platform Client MPC gt To set the keyboard language using System Settings 1 From the toolbar choose System gt Preferences gt Keyboard 2 Open the Layouts tab 3 Add or select the appropriate language 4 Click Close gt To set the keyboard language using the Keyboard Indicator Right click the Task Bar and choose Add to Panel 2 Inthe Add to Panel dialog right click the Keyboard Indicator and from the menu choose Open Keyboard Preferences In the Keyboard Preferences dialog click the Layouts tab Add and remove languages as necessary Macintosh Keyboard When a Macintosh is used as the client the following keys on the Mac keyboard are not captured
178. orted resolution and refresh rate For Sun servers ensure that your target server s video card is set to output standard VGA H and V sync and not composite sync Raritan Raritan Chapter 2 Installation and Configuration 3 Attach the keyboard mouse connector of your CIM to the corresponding ports on your target server Using a standard straight through UTP Cat5 5e 6 cable connect the CIM to an available server port on the back of your LX device Note The DCIM USB G2 provides a small slide switch on the back of the CIM Move the switch to P for PC based USB target servers Move the switch to S for Sun USB target servers A new switch position takes effect only after the CIM is power cycled To power cycle the CIM remove the USB connector from the target server and plug it back in a few seconds later E Modem Port Optional The LX features a dedicated modem port for remote access even when the LAN WAN is unavailable Using a straight through serial RS 232 cable connect an external serial modem to the port labeled MODEM on the back of the LX See Specifications on page 184 for a list of certified modems and Configuring Modem Settings on page 126 for information on configuring the modem Note Raritan recommends configuring the modem by enabling the CD carrier detect setting Step 4 Configure the LX The first time you power up the LX device there is some initial configuration that you need to
179. out The valid range is 1 10 and the default is 3 attempts Lockout Time The amount of time for which the user will be locked out The valid range is 1 1440 minutes and the default is 5 minutes Note Users in the role of Administrator are exempt from the timer lockout settings Deactivate User ID When selected this option specifies that the user will be locked out of the system after the number of failed login attempts specified in the Failed Attempts field Failed Attempts The number of unsuccessful login attempts after which the user s User ID will be deactivated This field is enabled when the Deactivate User ID option is selected The valid range is 1 10 When a user ID is deactivated after the specified number of failed attempts the administrator must change the user password and activate the user account by selecting the Active checkbox on the User page User Blocking Disabled 5 Timer Lockout Attempts 3 Lockout Time 5 Deactivate UserID e f 3 r i 2 di aM mh nh zie Raritan m Chapter 7 Security Management Encryption amp Share Using the Encryption amp Share settings you can specify the type of encryption used PC and VM share modes and the type of reset performed when the LX Reset button is pressed WARNING If you select an encryption mode that is not supported by your browser you will not be able to access the LX from your browser gt Toconfigure encryptio
180. perform through the LX Local Console e Change the default password e Assign the IP address e Name the KVM target servers The LX can be configured remotely via web browser This requires the workstation have an appropriate Java Runtime Environment JRE version installed Changing the Default Password The LX ships with a default password The first time you start the LX you are required to change that password gt To change the default password 1 Once the unit has booted enter the default username admin and password raritan Click Login 2 Enter the old password raritan enter a new password and then enter the new password again Passwords can be up to 64 characters in length and can consist of English alphanumeric and special characters Click Apply Click OK on the Confirmation page 29 30 Chapter 2 Installation and Configuration Note The default password can also be changed from the Raritan Multi Platform Client MPC Assigning an IP Address These procedures describe how to assign an IP address on the Network Settings page For complete information about all of the fields and the operation of this page see Network Settings on page 115 gt To assign an IP address 1 Choose Device Settings gt Network The Network Settings page ope ns 2 Specify a meaningful Device Name for your LX device Up to 32 alphanumeric characters using valid special characters and no spaces 3 Inthe IPv4 s
181. pter 2 Installation and Configuration Note For KVM target servers running Windows XP Windows 2000 or Windows 2008 you may wish to create a user name that will be used only for remote connections through the LX This will enable you to keep the target server s slow mouse pointer motion acceleration settings exclusive to the LX connection Windows XP 2000 and 2008 login pages revert to preset mouse parameters that differ from those suggested for optimal LX performance As a result mouse synchronization may not be optimal for these Screens Note Proceed only if you are comfortable adjusting the registry on Windows KVM target servers You can obtain better LX mouse synchronization at the login pages by using the Windows registry editor to change the following settings HKey USERSV DEFAULT Control Panel Mouse gt MouseSpeed 0 MouseThreshold 1 0 Mouse Threshold 2 0 Windows 7 and Windows Vista Settings gt To configure KVM target servers running Windows Vista operating system 1 Configure the mouse settings a Choose Start gt Settings gt Control Panel gt Mouse b Select Advanced system settings from the left navigation panel The System Properties dialog opens c Click the Pointer Options tab d Inthe Motion group Set the mouse motion speed setting to exactly the middle speed Disable the Enhanced pointer precision option Click OK 2 Disable animation and fade effects a Select the System
182. put is not supported at this time for the LX Local Console functions For more information about non US keyboards see Informational Notes on page 205 Note Raritan strongly recommends that you use system config keyboard to change languages if you are working in a Linux environment Language US English US English International UK English Chinese Traditional Chinese Simplified Korean Japanese French German French Norwegian Danish Regions United States of America and most of English speaking countries for example Canada Australia and New Zealand United States of America and most of English speaking countries for example Netherlands United Kingdom Hong Kong S A R Republic of China Taiwan Mainland of the People s Republic of China South Korea Japan France Germany and Austria Belgium Norway Denmark Keyboard layout US Keyboard layout US Keyboard layout UK layout keyboard Chinese Traditional Chinese Simplified Dubeolsik Hangul JIS Keyboard French AZERTY layout keyboard German keyboard QWERTZ layout Belgian Norwegian Danish 191 192 Appendix A Specifications Language Swedish Hungarian Slovenian Italian Spanish Portuguese Regions Sweden Hungary Slovenia Italy Spain and most Spanish speaking countries Portugal Keyboard layout Swedish Hungarian Slovenian Italian Spanish Portuguese Rari
183. r Snap mouse to default button in dialogs should be disabled e Choose Best Possible Video Mode in the Video Settings window e The edges of the target video should be clearly visible that is a black border should be visible between the target desktop and the remote KVM console window when you scroll to an edge of the target video image e When using the intelligent mouse synchronization function having a file icon or folder icon located in the upper left corner of your desktop may cause the function not to work properly To be sure to avoid any problems with this function Raritan recommends you do not have file icons or folder icons in the upper left corner of your desktop After autosensing the target video manually initiate mouse synchronization by clicking the Synchronize Mouse button on the toolbar This also applies when the resolution of the target changes if the mouse cursors start to desync from each other If intelligent mouse synchronization fails this mode will revert to standard mouse synchronization behavior 73 74 Chapter 3 Working with Target Servers Please note that mouse configurations will vary on different target operating systems Consult your OS guidelines for further details Also note that intelligent mouse synchronization does not work with UNIX targets Absolute Mouse Mode In this mode absolute coordinates are used to keep the client and target cursors in sync even when the target mou
184. r interface LX can manage computer and serially controlled equipment including computer servers and equipment telecommunications gear and networking devices Dominion LX provides reliable out of band remote management This includes BIOS level KVM over IP control remote virtual media and optional modem access LX provides anytime anywhere remote management regardless of the target device s state You can enter at the BIOS level run hardware diagnostics reboot a hung server install software from DVDs and even reimage a server all from a remote location The competition is typically an entry level KVM over IP switch with limited features and an old school OSD user interface The competition lacks standard features such as virtual media Absolute Mouse Synchronization 1920x1080 remote video resolution and standard security features 218 Question What is the LX s value proposition Technical Questions What LX models are available What are the hardware features How does the Dominion LX compare to the Dominion KX II Raritan Chapter 12 Frequently Asked Questions Answer A high quality KVM over IP switch at an economy price for the IT and development staffs of small and midsize businesses The LX s value proposition is based on anytime anywhere remote access and control of servers and other IT devices LX customers benefit from e Reduced travel expenses e Increased productivity
185. resses Unicode String pwdLastSet Large Integer queryPolicyBL Distinguished rciuisergroup Case Insensiti registered amp ddress ctet String replPropertyMetaData Octet String replUpToDateVector Octet String repsFrom Octet String repsTo Octet String revision Integer rid Integer roomNumber Unicode String Not Set 128299285248088608 lt Not Set gt Not Seb lt Not Set gt 0x01 0x00 0x00 0x00 0x0 Not Set lt Not Seb lt Not Seb lt Not Set gt lt Not Set gt lt Not Set gt Administrator 8 Click Edit The String Attribute Editor dialog appears 9 Type the user group created in the LX in the Edit Attribute field Click OK String Attribute Editor 204 Raritan Appendix C Overview Informational Notes In This Chapter e Java Runtime Environment JRE IPV6 Support Notes issons Keyboards ERE geDICEHMOMPLOREL cT ccsasaisdeameanidansaisets This section includes important notes on LX usage Future updates will be documented and available online through the Help link in the LX Remote Console interface Note Some topics in this section reference other multiple Raritan devices because various devices are impacted by the information Java Runtime Environment JRE zie Raritan Important It is recommended that you disable Java caching and clear the Java cache Please refer to your Java documentatio
186. rface ipauto lt none dhcp gt ip lt ipaddress gt mask lt subnetmask gt gw lt ipaddress gt mode lt mode gt Set Get ethernet parameters ipauto none dhcp IP auto configuration none dhcp ip ipaddress IP Address mask subnetmask Subnet Mask gw lt ipaddress gt Gateway IP Address mode mode Set Ehternet Mod auto 10hdx 10fdx 100hdx 100fdx 1000fdx Interface Command Example The following command enables the interface number 1 sets the IP address mask and gateway addresses and sets the mode to auto detect Admin Config Network interface ipauto none ip 192 16 151 12 mask 255 255 255 0 gw 192 168 51 12 mode auto i 5E Raritan Chapter 10 Command Line Interface CLI Name Command The name command is used to configure the network name The syntax of the name is name devicename devicename hostname hostname Device name configuration devicename lt devicename gt Device Nam hostname hostname Preferred host name DHCP only Name Command Example The following command sets the network name Admin Config Network name devicename My KSX2 IPv6 Command Use the IPv6 command to set IPv6 network parameters and retrieve existing IPv6 parameters Raritan i Chapter 11 Overview LX Local Console In This Chapter eui 172 Simultaneous USOS a iier rcc n oua Fort ai
187. rget You are able to take a screenshot of a target server using the Screenshot from Target server command If needed save this screenshot to a file location of your choosing as a bitmap JPEG or PNG file gt To take a screenshot of the target server 1 Select Video Screenshot from Target or click the Screenshot from T Target button Be on the toolbar 2 Inthe Save dialog choose the location to save the file name the file and select a file format from the Files of type drop down 3 Click Save to save the screenshot Save in f My Downloads iaj 3 Hn e C Miscellaneous 3 HTMLbackground jpg File name Server Screenshot Files of type JPEG image files hd Save Cancel V m zie Raritan 69 70 Chapter 3 Working with Target Servers Changing the Maximum Refresh Rate If the video card you are using on the target uses custom software and you are accessing the target through MPC or VKC you may need to change the maximum refresh rate of the monitor in order for the refresh rate to take effect on the target gt To adjust the monitor refresh rate 1 In Windows select Display Properties gt Settings gt Advanced to open the Plug and Play dialog Click on the Monitor tab Set the Screen refresh rate Click OK and then OK again to apply the setting Mouse Options When controlling a target server the Remote Console displays two mouse cursors one belonging to your clie
188. s cause the video image to stretch or shrink horizontally Odd number settings are recommended Under most circumstances this setting should not be changed because the autodetect is usually quite accurate Phase Phase values range from 0 to 31 and will wrap around Stop at the phase value that produces the best video image for the active target server Raritan Chapter 3 Working with Target Servers c Brightness Use this setting to adjust the brightness of the target server display d Brightness Red Controls the brightness of the target server display for the red signal e Brightness Green Controls the brightness of the green signal f Brightness Blue Controls the brightness of the blue signal g Contrast Red Controls the red signal contrast h Contrast Green Controls the green signal i Contrast Blue Controls the blue signal If the video image looks extremely blurry or unfocused the settings for clock and phase can be adjusted until a better image appears on the active target server Warning Exercise caution when changing the Clock and Phase settings Doing so may result in lost or distorted video and you may not be able to return to the previous state Contact Raritan Technical Support before making any changes j Horizontal Offset Controls the horizontal positioning of the target server display on your monitor k Vertical Offset Controls the vertical positioning of the target server display
189. s only e Firefox 2 0 0 x and 3 0 x and later e Internet Explorer 7 and 8 In addition to browser support AES 256 bit encryption requires the installation of Java Cryptography Extension JCE Unlimited Strength Jurisdiction Policy Files Jurisdiction files for various JREs are available at the other downloads section of the following link e JRE1 6 http java sun com javase downloads index_jdk5 jsp Raritan SSL Certificates Z Raritan Chapter 7 Security Management The LX uses the Secure Socket Layer SSL protocol for any encrypted network traffic between itself and a connected client When establishing a connection the LX has to identify itself to a client using a cryptographic certificate It is possible to generate a Certificate Signing Request CSR and install a certificate signed by the Certificate Authority CA on the LX The CA verifies the identity of the originator of the CSR The CA then returns a certificate containing its signature to the originator The certificate bearing the signature of the well known CA is used to vouch for the identity of the presenter of the certificate Note The CSR must be generated on the LX gt To create and install a SSL certificate 1 Select Security gt SSL Certificate 2 Complete the following fields a Common name The network name of the LX once it is installed in the user s network usually the fully qualified domain name It is identical to the
190. s that have Global or Unique Local significance beyond that of the Link Local which only applies to a directly connected subnet 5 Select Obtain DNS Server Address Automatically if DHCP is selected and Obtain DNS Server Address is enabled When Obtain DNS Server Address Automatically the DNS information provided by the DHCP server will be used 6 If Use the Following DNS Server Addresses is selected regardless of whether DHCP is selected or not the addresses entered in this section will be used to connect to the DNS server Enter the following information if the Following DNS Server Addresses option is selected These addresses are the primary and secondary DNS addresses that will be used if the primary DNS server connection is lost due to an outage a Primary DNS Server IP Address b Secondary DNS Server IP Address 7 When finished click OK zie Raritan gu Chapter 6 Device Management See LAN Interface Settings for information in configuring this section of the Network Settings page Note In some environments the default LAN Interface Speed amp Duplex setting Autodetect autonegotiator does not properly set the network parameters which results in network issues In these instances setting the LX LAN Interface Speed amp Duplex field to 100 Mbps Full Duplex or whatever option is appropriate to your network addresses the issue See the Network Settings on page 115 page for more information Device Hame
191. sbin pgxconfig res 1024x768x75 2 Log out or restart computer 64 bit s usr sbin m64config prconf 1 usr sbin m64config res 1024x768x75 2 Log out or restart computer 32 bit usr sbin fbconfig prconf 1 ust sbin foconfig res and 1024x768x75 64 bit 2 Log out or restart computer IBM AIX 5 3 Settings Follow these steps to configure KVM target servers running IBM AIX 5 3 gt To configure the mouse 1 Goto Launcher 2 Choose Style Manager 3 Click Mouse The Style Manager Mouse dialog appears 4 Use the sliders to set the Mouse acceleration to 1 0 and Threshold to 1 0 5 Click OK gt To configure the video 1 From the Launcher select Application Manager 2 Select System Admin 3 Choose Smit Devices Graphic Displays Select the Display Resolution and Refresh Rate 4 Select the video card in use Click List A list of display modes is presented Select a resolution and refresh rate supported by the LX See Supported Video Resolutions for more information Note If you change the video resolution you must log out of the target server and log back in for the video settings to take effect zie Raritan 26 Chapter 2 Installation and Configuration Make UNIX Settings Permanent Note These steps may vary slightly depending on the type of UNIX for example Solaris IBM AIX and the specific version in use 1 Choose Style Manager Startup The Style Manager S
192. se the device is checking the drive every 500 milliseconds to verify the drive is still mounted P To access a drive on the client computer 1 From the Virtual KVM Client choose Virtual Media Connect Drive The Map Virtual Media Drive dialog appears 2 Choose the drive from the Local Drive drop down list 3 If you want Read and Write capabilities select the Read Write checkbox This option is disabled for nonremovable drives See the Conditions when Read Write is Not Available on page 88 for more information When checked you will be able to read or write to the connected USB disk Raritan Chapter 4 Virtual Media WARNING Enabling Read Write access can be dangerous Simultaneous access to the same drive from more than one entity can result in data corruption If you do not require Write access leave this option unselected 4 Click Connect The media will be mounted on the target server virtually You can access the media just like any other drive Mounting CD ROM DVD ROM ISO Images This option mounts CD ROM DVD ROM and ISO images Note ISO9660 format is the standard supported by Raritan However other CD ROM extensions may also work gt To access a CD ROM DVD ROM or ISO image 1 From the Virtual KVM Client choose Virtual Media Connect CD ROM ISO Image The Map Virtual Media CD ISO Image dialog appears Map Virtual Media CD 1S0 Image LPmachine Select a CD DVD drive or an I
193. se is set to a different acceleration or speed This mode is supported on servers with USB ports and is the default mode for VM and dual VM targets gt To enter absolute mouse mode Choose Mouse gt Absolute Note For LX Absolute Mouse Synchronization is available for use with the virtual media enabled USB CIM D2CIM VUSB and D2CIM DVUSB only Single Mouse Mode Single Mouse mode uses only the target server mouse cursor and the local mouse pointer no longer appears onscreen While in single mouse mode the Synchronize Mouse command is not available there is no need to synchronize a single mouse cursor Note Single mouse mode does not work on Windows or Linux targets when using VM as a client gt To enter single mouse mode do the following 1 Choose Mouse gt Single Mouse Cursor 2 Click the Single Double Mouse Cursor button N in the toolbar Single Cursor Mode You are about to enter Single Cursor mode While you are in this mode this software will have exclusive control over the mouse and keyboard To exit Single Cursor mode you must press Ctri Alt 0 3is Raritan Z Raritan Chapter 3 Working with Target Servers gt To exit single mouse mode e Press Cirl Alt O on your keyboard to exit single mouse mode Tool Options General Settings gt 1 2 To set the tools options Click Tools gt Options The Options dialog appears Select the Enable Logging checkbox only if directed to
194. se kx2 232 IPv4 Address IP Address Subnet Mask 1122 168 51 55 255 255 255 0 Default Gateway Preferred DHCP Host Name 192 168 51 126 IP Auto Configuration DHCP v Pv6 Address Global Unique IP Address Prefix Length Gateway IP Address Link Local IP Address Zone ID WA 1 IP Auto Configuration None O Obtain DNS Server Address Automatically fe Use the Following DUS Server Addresses Primary OMS Server IP Address 192 168 59 2 Secondary DNS Server IP Address 192168 51 10 OK Reset To Defaults Cancel m a P ans a S n add S v Ae PA Ium A ON A8 LAN Interface Settings The current parameter settings are identified in the Current LAN interface parameters field 1 Choose Device Settings Network The Network Settings page opens m Raritan Device Services Raritan Chapter 6 Device Management Choose the LAN Interface Speed amp Duplex from the following options Autodetect default option 10 Mbps Half Both LEDs blink 10 Mbps Full Both LEDs blink 100 Mbps Half Yellow LED blinks 100 Mbps Full Yellow LED blinks 1000 Mbps Full gigabit Green LED blinks Half duplex provides for communication in both directions but only one direction at a time not simultaneously Full duplex allows communication in both directions simultaneously Note Occasionally there are problems running at 10 Mbps in either half or full duplex If you
195. se to navigate to the directory where you unzipped the upgrade file 5 Select the Review CIM Version Information checkbox if you would like information displayed about the versions of the CIMs in use 6 Click Upload from the Firmware Upgrade page Information about the upgrade and version numbers is displayed for your confirmation if you opted to review CIM information that information is displayed as well Note At this point connected users are logged out and new login attempts are blocked 7 Click Upgrade Please wait for the upgrade to complete Status information and progress bars are displayed during the upgrade Upon completion of the upgrade the unit reboots 1 beep sounds to signal that the reboot has completed As prompted close the browser and wait approximately 5 minutes before logging in to the LX again For information about upgrading the device firmware using the Multi Platform Client see Upgrading Device Firmware in the KVM and Serial Access Clients Guide Note Firmware upgrades are not supported via modem Raritan Chapter 8 Maintenance Upgrade History The LX provides information about upgrades performed on the LX and attached CIMS gt To view the upgrade history e Choose Maintenance gt Upgrade History The Upgrade History page opens Information is provided about the LX upgrade s that have been run the final status of the upgrade the start and end times and the previous and
196. sed when generating it can be downloaded by clicking Download Note The CSR and the private key file are a matched set and should be treated accordingly If the signed certificate is not matched with the private key used to generate the original CSR the certificate will not be useful This applies to uploading and downloading the CSR and private key files 2 Send the saved CSR to a CA for certification You will get the new certificate from the CA gt To upload a CSR 1 Upload the certificate to the LX by clicking Upload Note The CSR and the private key file are a matched set and should be treated accordingly If the signed certificate is not matched with the private key used to generate the original CSH the certificate will not be useful This applies to uploading and downloading the CSR and private key files Certificate Signing Request CSR Certificate Upload The following CSR is pending SSL Certificate File countryNeme US Bro StateOrProvinceName DC moe localityName Washington Upload organizationName ACME Corp _Upload organizationalUnitName Marketing Dept commonName John Doe emailAddress johndoeGacme com Download Delete After completing these three steps the LX has its own certificate that is used for identifying the card to its clients Important If you destroy the CSR on the LX there is no way to get it back In case you deleted it by mistake you have to repeat the three steps as described abov
197. servers When implementing tiering functionality users can easily control up to 256 computers from a single console These appliances specifically designed for small to midsize businesses SMBs offer economical remote access from anywhere efficient reliable server management and a minimum initial investment that provides affordable scalability The LX comes standard with Raritan s Universal Virtual Media providing the widest variety of CD DVD USB internal and remote drives that can be mounted locally enabling remote management tasks and eliminating the need to travel For a clear crisp view the modern architecture platform supports high definition HD 1920x1080 remote video resolution and a common modern browser based GUI for both local and remote access requires little training provides at the rack productivity and ensures efficient use of all IT resources Servers can be accessed from Windows Linux Sun or Macintosh through the leading browsers or stand alone with no client license fees With cabling bundles options SMB IT staff can minimize their initial investment today while preserving the option for added functionality tomorrow Raritan Chapter 1 Introduction Diagram key Cat5 cable Remote network access Computer Interface 7 Local access Module CIM LX o IP LAN WAN Remote KVM and serial Q PSTN devices Modem OOI 5E Raritan Chapter 1 Introduction LX Photos Raritan
198. t is found it is displayed in the window 5 Connect to a target when it is displayed by using the ConnectKey sequence 6 Click Stop Scan to stop the scan Raritan Chapter 11 LX Local Console Using Scan Options Following are options available to you while scanning targets With the exception of the Expand Collapse icon all of these options are selected from the Options menu in the upper left of the Port Scan viewer The options will return to their defaults when you close the window gt Hide or View Thumbnails e Use the Expand Collapse icon F at the upper left of the window to hide or view thumbnails Expanded is the default view gt Pause the Thumbnail Slide Show e Pause thumbnails from rotating between one target and the next by selecting Options gt Pause Rotating thumbnails is the default setting gt Resume the Thumbnail Slide Show e Resume the thumbnail rotation by selecting Options gt Resume gt Size the Thumbnails in the Port Scan Viewer e Enlarge the size of the thumbnails by selecting Options gt Size gt 360x240 e Minimize the size of the thumbnails by selection Options gt Size gt 160x120 This is the default thumbnail size gt Change the Orientation of the Port Scan Viewer e View thumbnails along the bottom of the Port Scan viewer by selecting Options Split Orientation Horizontal e View thumbnails along the right of the Port Scan viewer by selecting Options Split
199. t least one printable special character Number of restricted passwords based on history E or au e Sis Raritan Chapter 7 Security Management Description the default maximum When checked at least one lower case character is required in the password When checked at least one upper case character is required in the password When checked at least one numeric character is required in the password When checked at least one special character printable is required in the password This field represents the password history depth That is the number of prior passwords that cannot be repeated The range is 1 12 and the default is 5 VASA SOE 29799 PL 141 Chapter 7 Security Management 142 User Blocking The User Blocking options specify the criteria by which users are blocked from accessing the system after the specified number of unsuccessful login attempts The three options are mutually exclusive Option Description Disabled The default option Users are not blocked regardless of the number of times they fail authentication Raritan Chapter 7 Security Management Option Description Timer Lockout Users are denied access to the system for the specified amount of time after exceeding the specified number of unsuccessful login attempts When selected the following fields are enabled Attempts The number of unsuccessful login attempts after which the user will be locked
200. t software 2 Enter the IP address of the LX server For example 192 168 0 192 3 Choose SSH which uses the default configuration port 22 4 Click Open The 1ogin as prompt appears See Logging In on page 165 SSH Access from a UNIX Linux Workstation gt To open an SSH session from a UNIX Linux workstation and log in as the user admin enter the following command ssh l admin 192 168 30 222 The Password prompt appears See Logging In on page 165 Raritan Logging In Chapter 10 Command Line Interface CLI gt To log in enter the user name admin as shown 1 Login as admin 2 The Password prompt appears Enter the default password raritan The welcome message displays You are now logged on as an administrator After reviewing the following Navigation of the CLI on page 165 section perform the Initial Configuration tasks Navigation of the CLI Raritan Before using the CLI it is important to understand CLI navigation and syntax There are also some keystroke combinations that simplify CLI use Completion of Commands The CLI supports the completion of partially entered commands After entering the first few characters of an entry press the Tab key If the characters form a unique match the CLI will complete the entry e f no match is found the CLI displays the valid entries for that level e f multiple matches are found the CLI displays all valid entries Enter
201. t the IP address of the device being accessed is included in their browser s Trusted Sites Zone and that Protected Mode is not on when accessing the device Enable AKC Download Server Certificate Validation If the device administrator has enabled the Enable AKC Download Server Certificate Validation option e Administrators must upload a valid certificate to the device or generate a self signed certificate on the device The certificate must have a valid host designation e Each user must add the CA certificate or a copy of self signed certificate to the Trusted Root CA store in their browser Raritan Chapter 3 Working with Target Servers Raritan Toolbar Button om p N Boe X b T HI Button Name Connection Properties Video Settings Color Calibration Target Screenshot Audio Synchronize Mouse Refresh Screen Auto sense Video Settings Smart Card Description Opens the Modify Connection Properties dialog from which you can manually adjust bandwidth options such as connection speed color depth and so forth Opens the Video Settings dialog allowing you to manually adjust video conversion parameters Adjusts color settings to reduce excess color noise Same as choosing Video Color Calibrate Note Not available in KX II 101 V2 Click to take a screenshot of the target server and save it to a file of your choosing Opens a dialog th
202. tan Appendix A Specifications TCP and UDP Ports Used Port Description HTTP Port 80 This port can be configured as needed See HTTP and HTTPS Port Settings on page 120 By default all requests received by the LX via HTTP port 80 are automatically forwarded to HTTPS for complete security The LX responds to Port 80 for user convenience relieving users from having to explicitly type in the URL field to access the LX while still preserving complete security HTTPS Port 443 This port can be configured as needed See HTTP and HTTPS Port Settings on page 120 By default this port is used for multiple purposes including the web server for the HTML client the download of client software MPC VKC onto the client s host and the transfer of KVM and virtual media data streams to the client LX Raritan KVM This port is used to discover other Dominion devices and for over IP Protocol communication between Raritan devices and systems By default this Configurable Port is set to Port 5000 but you may configure it to use any TCP port not 5000 currently in use For details on how to configure this setting see Network Settings on page 115 SNTP Time Server The LX offers the optional capability to synchronize its internal clock to on Configurable a central time server This function requires the use of UDP Port 123 UDP Port 123 the standard for SNTP but can also be configured to use any port of your designation Optional
203. tartup dialog appears 2 Onthe Logout Confirmation dialog select the On option This option prompts you to save your current session when you log out Apple Macintosh Settings For KVM target servers running an Apple Macintosh operating system the preferred method is to use the D2CIM VUSB and Absolute Mouse Synchronization Step 2 Configure Network Firewall Settings To enable remote access to the LX your network and firewall must allow communication on TCP Port 5000 Alternatively configure the LX to use a different TCP port then allow communication on that port To access the LX via a web browser your firewall must allow access to TCP Port 443 Standard HTTPS Access to TCP Port 80 Standard HTTP enables automatic redirection of HTTP requests to HTTPS Raritan Chapter 2 Installation and Configuration Step 3 Connect the Equipment A AC Power gt To connect the power supply e Attach the included AC power cord to the LX and plug it into an AC power outlet B Network Port gt Toconnect the network e Connect a standard Ethernet cable included from the network port to an Ethernet switch hub or router Z Raritan a 28 Chapter 2 Installation and Configuration C Local Access Port Local PC For convenient access to target servers while at the rack use the LX Local Access port While the Local Access port is required for installation and setup it is optional for subsequent use
204. te the User Blocking on page 142 settings as appropriate Update the Encryption amp Share on page 144 settings as appropriate 6 Click OK 138 Chapter 7 Security Management gt To reset back to defaults e Click Reset to Defaults Failed Attempts 2 Enforce at least one numeric character Enable Single Login Limitation Disabled ia Enable Strong Passwords Pi Enable Password Aging Timer Lockout Minimum length of strong password 8 Password Aging Interval days Attempts eo 3 Maximum length of strong password 16 Log Out Idle Users ocho rine 5 Enforce at least one lower case character e Idle Timeout minutes 3 20 Deactivate User ID Enforce at least one upper case character Enforce at least one printable special character Number of restricted passwords based on history 5 Encryption amp Share Encryption Mode Auto V Apply Encryption Mode to KVM and Virtual Media PC Share Mode Private bd VM Share Mode Local Device Reset Mode Enable Local Factory Reset Lok Reset To ppfaults ancer n rok oe a ui 7 s gt a Login Limitations Using login limitations you can specify restrictions for single login password aging and the logging out idle users Limitation Description Enable single login When selected only one login per user name is limitation allowed at anytime When deselected a given user name password combination can be connecte
205. te the user from among those listed on the User List page Click the user name The User page opens ANY On the User page change the appropriate fields See Adding a New User on page 100 for information about how to get access the User page 5 To delete a user click Delete You are prompted to confirm the deletion 6 Click OK Logging a User Off Force Logoff If you are an administrator you are able to log off another locally authenticated user who is logged on to the LX gt To log off a user 1 Open the User List page by choosing User Management gt User List or click the Connected User link in the left panel of the page 2 Locate the user from among those listed on the User List page and select the checkbox next to their name Click Force User Logoff Click OK on the Logoff User dialog to forcefully log the user off The page at https 192 168 59 248 says Do you really want to logoff the selected users Cancel 5 Aconfirmation message is displayed to indicate that the user was logged off This message contains the date and time the log off occurred Click OK to close the message 101 zie Raritan Chapter 5 User Management Authentication Settings Authentication is the process of verifying that a user is who he says he is Once a user is authenticated the user s group is used to determine his system and port permissions The user s assigned privileges determine what type of access
206. terval of 10 seconds or according to the interval you specify As the scan scrolls through the targets the target that is the focus of the slide show displays in the center of the page See Scan Settings on page 78 You can change the time between the slide show thumbnail rotation the thumbnail focus interval and the page display settings from the Scan Settings tab of the Virtual KVM Client VKC Active KVM Client AKC and Multi Platform Client MPC Tools gt Options dialog See Scan Settings on page 78 The name of the target is displayed below its thumbnail and in the task bar at the bottom of the window If a target is busy a blank screen is displayed instead of the target server access page The status of each target is indicated by green yellow and red lights that are displayed below the target thumbnail and as the target is the focus of the rotation in the task bar The status lights indicate the following e Green the target is up idle or up connected e Yellow the target is down but connected e Red the target is down idle busy or otherwise not accessible This feature is available from the Local Port Virtual KVM Client VKC Active KVM Client AKC and Multi Platform Client MPC Note MPC uses a different method for initiating a scan than the other Raritan clients See Set Scan Group in the KVM and Serial Client Guide for details The scan results and scan options differ between the Remote Console and the Lo
207. the macro file appears By default the macro exists on your desktop 4 Selectthe folder to save the macro file to enter a name for the file and click Save If the macro already exists you receive an alert message Select Yes to overwrite the existing macro or No to close the alert without overwriting the macro Export Keyboard Macros to Save in C Desktop y E lal f E My Documents My Computer m My Network Places cJ cvs Folders File name Files of type XML Files xml Building a Keyboard Macro gt To build a macro 1 Click Keyboard gt Keyboard Macros The Keyboard Macros dialog appears Click Add The Add Keyboard Macro dialog appears Type a name for the macro in the Keyboard Macro Name field This name appears in the Keyboard menu after it is created 4 From the Hot Key Combination field select a keyboard combination from the drop down list This allows you to execute the macro with a predefined keystroke Optional 5 Inthe Keys to Press drop down list select each key you would like to use to emulate the keystrokes that is used to perform the command Select the keys in the order by which they are to be pressed After each selection select Add Key As each key is selected it appears in the Macro Sequence field and a Release Key command is automatically added after each selection 6 Touse the Send Text to Target function for the macro click the Construct Macro from
208. ther authentication request Raritan Chapter 5 User Management 9 The default number of retries is 3 Retries This is the number of times the LX will send an authentication request to the RADIUS server 10 Choose the Global Authentication Type from among the options in the drop down list PAP With PAP passwords are sent as plain text PAP is not interactive The user name and password are sent as one data package once a connection is established rather than the server sending a login prompt and waiting for a response CHAP With CHAP authentication can be requested by the server at any time CHAP provides more security than PAP Home gt User Management gt Authentication Settings Authentication Settings Local Authentication LDAP RADIUS LDAP 7 RADIUS Primary RADIUS Server Shared Secret Authentication Port haiz Accounting Port 1813 Timeout in seconds i Retries B Shared Secret Authentication Port 1812 Accounting Port 1813 Timeout in seconds 4 Retries ls i Global Authentication Type PAP v OK Reset To Defaults Cancel zie Raritan d Chapter 5 User Management Cisco ACS 5 x for RADIUS Authentication If you are using a Cisco ACS 5 x server after you have configured the LX for RADIUS authentication complete the following steps on the Cisco ACS 5 x server Note The f
209. tication Settings page 6 Click OK to save gt To return to factory defaults e Click Reset to Defaults n S Raritan Z Raritan Chapter 5 User Management Implementing LDAP LDAPS Remote Authentication Lightweight Directory Access Protocol LDAP LDAPS is a networking protocol for querying and modifying directory services running over TCP IP A client starts an LDAP session by connecting to an LDAP LDAPS server the default TCP port is 389 The client then sends operation requests to the server and the server sends responses in turn Reminder Microsoft Active Directory functions natively as an LDAP LDAPS authentication server gt To use the LDAP authentication protocol 1 Click User Management Authentication Settings to open the Authentication Settings page 2 Select the LDAP radio button to enable the LDAP section of the page 3 Click the icon to expand the LDAP section of the page Server Configuration 4 Inthe Primary LDAP Server field type the IP address or DNS name of your LDAP LDAPS remote authentication server up to 256 characters When the Enable Secure LDAP option is selected and the Enable LDAPS Server Certificate Validation option is selected the DNS name must be used to match the CN of LDAP server certificate 5 Inthe Secondary LDAP Server field type the IP address or DNS name of your backup LDAP LDAPS server up to 256 characters When the Enable Secure LDAP option is select
210. ting MT Niger m 198 Adding Attributes to the Class eiii iei dikes estas Para dened IN ee as apod AM edad dcus 199 Updating the Schema Cache EE 201 Editing rciusergroup Attributes for User MEMDeTS ccceceeeeeeeeeeeeeeeeeeeeeeeteaeeeseaeeeeeeeeenees 201 Appendix C Informational Notes 205 Guil 205 Java Runtime Environment JRE ests iio nci ina gni ee rd bene ue en tex ae RR EE Ex Pad 205 IPY6 Support Notes eT 206 Keyboards snes ernan E ENE EAE EAS S E EA eine a KE ENEE N E ENE NNE 207 Non US Keyboard Srengseng e a EE EEES EEO EEEE EA IE 207 Macintosh Keyboards rgia nao nae a aE EEE EEEE EE 209 eeel 210 Resolving Fedora Gore FOCUS ea iie ae ed pete buscada bd aada iaa aiaia nra ia ap eue 210 Mouse Pointer Synchronization Fedora 210 Resolving Issues with Firefox Freezing when Using Fedora ssssssss 210 Video Modes and Resol tlons 1 nett annie aiaiai dence tiasaan aidai ERR d aatan 211 SUSE VESA Video MOGesS eren er d pter ei Ene x Het FREE Ad ba aa d Lade ick as 211 Supported Video Resolutions Not Displaying seen 211 VM CIMS arid DE360 USB PONS rite enr e e tati Lege e e basa Een Rodeo bay Lada eeu 211 mese 212 WIPE AIM CG avg sade I 213 Virtual Media via VKC and AKC in a Windows Environment ssssesss 213 Virtual Media
211. tion to determine the user s permissions such as which server ports are accessible whether rebooting the device is allowed and other features Adding a New User Group gt To add a new user group 1 Select User Management gt Add New User Group or click Add on the User Group List page zie Raritan ds 96 Chapter 5 User Management 2 Type a descriptive name for the new user group into the Group Name field up to 64 characters 3 Select the checkboxes next to the permissions you want to assign to all of the users belonging to this group See Setting Permissions on page 96 4 Click OK Note Several administrative functions are available within MPC and from the LX Local Console These functions are available only to members of the default Admin group Home gt User Management gt Group Group Name Y Permissions Device Settings Diagnostics Maintenance Modem Access PC Share Security tng Mem 8 On User Management Y Port Permissions Port Access VM Access 4 Dominion_LX_Port1 Deny w Deny 4 2 Dominion LX Port2 Deny v Deny X f 3 Dominion LX Port3 Deny w Deny 4 Dominion LX Port4 Deny wv Deny 5 Dominion LX Port5 Deny v Deny X 6 Dominion_LX_Port6 Deny w Deny 7 Dominion LX Port7 Deny X Deny X a 8 Dominion_LX_Port8 Deny v Deny 9 Dominion_LX_Port9 Deny Deny X 10 Dominion_LX_Port10 Deny wv Deny
212. tions 78 View Status Bar 79 View Toolbar 78 Virtual KVM Client VKC and Active KVM Client AKC 39 53 Virtual Media 82 213 Virtual Media Connection Failures Using High Speed for Virtual Media Connections 215 Virtual Media File Server Setup File Server ISO Images Only 88 89 Virtual Media in a Linux Environment 86 Virtual Media Linux Drive Listed Twice 215 Virtual Media Not Refreshed After Files Added 214 Virtual Media via VKC and AKC in a Windows Environment 213 VM CIMs and DL360 USB Ports 211 WwW Windows 2000 Composite USB Device Behavior for Virtual Media 216 Windows 2000 Settings 18 Windows 3 Button Mouse on Linux Targets 215 Windows 7 and Windows Vista Settings 16 Windows XP Windows 2003 and Windows 2008 Settings 15 Working with Target Servers 7 37 Raritan Raritan gt U S Canada Latin America Monday Friday 8 a m 6 p m ET Phone 800 724 8090 or 732 764 8886 For CommandCenter NOC Press 6 then Press 1 For CommandCenter Secure Gateway Press 6 then Press 2 Fax 732 764 8887 Email for CommandCenter NOC tech ccnoc raritan com Email for all other products tech raritan com gt China Beijing Monday Friday 9 a m 6 p m local time Phone 86 10 88091890 Shanghai Monday Friday 9 a m 6 p m local time Phone 86 21 5425 2499 GuangZhou Monday Friday 9 a m 6 p m local time Phone 86 20 8755 5561 gt
213. tions enabled e Several network utilities will also need to be installed for Linux when using IPv6 For detailed information refer to http www bieringer de linux IPv6 IPv6 HOWTO IPv6 HOWTO html Windows e Windows XP and Windows 2003 users will need to install the Microsoft IPV6 service pack to enable IPV6 Mac Leopard e Pv6 is not supported in KX II version 2 0 20 for Mac Leopard Samba e Pv6 is not supported for use with virtual media when using Samba oe Raritan Keyboards zie Raritan Appendix C Informational Notes Non US Keyboards French Keyboard Caret Symbol Linux Clients Only The Virtual KVM Client and the Multi Platform Client MPC do not process the key combination of Alt Gr 9 as the caret symbol when using French keyboards with Linux clients gt To obtain the caret symbol From a French keyboard press the key to the right of the P key then immediately press the space bar Alternatively create a macro consisting of the following commands 1 Press Right Alt 2 Press 9 3 Release 9 4 Release Right Alt Note These procedures do not apply to the circumflex accent above vowels In all cases the key to the right of the P key works on French keyboards to create the circumflex accent when used in combination with another character Accent Symbol Windows XP Operating System Clients Only From the Virtual KVM Client and the Multi Platform Client the key
214. tore of the entire system Generally used for traditional backup and restore purposes Protected Restore Everything is restored except device specific information such as IP address name and so forth With this option you can setup one LX and copy the configuration to multiple LX devices Custom Restore With this option you can select User and Group Restore Device Settings Restore or both User and Group Restore This option includes only user and group information This option does not restore the certificate and the private key files Use this option to quickly set up users on a different LX Device Settings Restore Use this option to quickly copy the device information Click Browse A Choose File dialog appears Navigate to and select the appropriate backup file and click Open The selected file is listed in the Restore File field Raritan Chapter 8 Maintenance 4 Click Restore The configuration based on the type of restore selected is restored Upgrading CIMs Use this procedure to upgrade CIMs using the firmware versions stored in the memory of your LX device In general all CIMs are upgraded when you upgrade the device firmware using the Firmware Upgrade page Note Only D2CIM VUSB and D2CIM DVUSB can be upgraded from this page gt To upgrade CIMs using the LX memory 1 Choose Maintenance CIM Firmware Upgrade The CIM Upgrade from page opens The Port number Name Type C
215. tus Changed Network Failure Communication Error Factory Reset Device Update Started Device Update Completed Device Update Failed Firmware Update Failed Firmware File Discarded Firmware Validation Failed Configuration Backed Up Configuration Restored Port Connection Denied Active USB Profile Certficiate Update Date Time Settings Changed Password Settings Changed Login Failed Password Changed User Blocked Port Connected Port Disconnected Access Login Access Logout Connection Lost Session Timeout VM Image Connected VM Image Disconnected CIM Update Started Raritan CIM Update Completed CIM Connected CIM Disconnected Duplicate CIM Serial Forced User Logout Scan Started Scan Stopped User Added User Changed User Deleted Group Added Group Changed Group Deleted Network Speed Settings LX network speed setting Network switch port setting Auto 1000 Full 100 Full 100 Half 10 Full 10 Half Z Raritan Auto 1000 Full No Communica Communica tion 100 Full No Communica tion No Communica tion No Communica tion Appendix A Specifications 100 Half 10 Full 10 Half No No No Communicat Communica Communicat ion i ion No No Communica Communicat ion No Communica Communicat tion ion No Communicat ion No Communicat ion 195 196 Appendix A Specifications Legend Does not function as expected Supported
216. twork Statistics j E Resut Ip 803 total packets received 0 forvarded 0 incoming packets discarded 8802 incoming packets delivered 8522 requests sent out Icmp 0 ICMP messages received 0 input ICMP message failed ICMP input histogram 0 ICMP messages sent 0 ICNP messages failed ICMP output histogram Tep 6 active connections openings 49 passive connection openings failed connection attempts 15 connection resets received 1 connections established 7942 segments received 304 segments send out 0 seguents retransmited 0 bad segments received O resets sent Udp 233 packets recei bann mda d anam en n Ants M en E N Raritan Chapter 9 Diagnostics Interfaces Produces a page similar to the one displayed here Home gt Diagnostics gt Netwot Statistics Network Statistics Kernel Interface table Iface MTU Met RX OK PX ERR PX DRP RX OVR TX OK TX ERR TX DRP TX OVR Flg ethl 1500 0 13828 0 0 0 8680 0 O O BMNRU lo 16436 0 196 000 196000 LRU ee mmm uam Aem aps a Uim hannt aa Route Produces a page similar to the one displayed here Home gt Diagnostics gt Network Statistics Network Statistics ions route hd Result Kernel IP routing table Destination Catevay Cenmask Flags MSS Window irtt Iface 192 168 59 0 255 255 255 0 U O 0 O ethl default 192 168 59 126 0 0 0 0 UG O O O ethl md Mta Lifts MIL rman S 7 3 Click Refresh The relevant i
217. u must reconnect to the device using the new IP address and the user name and password you created in the resetting factory default password section Important If the password is forgotten the LX will need to be reset to the factory default from the Reset button on the back of the LX The initial configuration tasks will need to be performed again if this is done The LX now has the basic configuration and can be accessed remotely via SSH GUI or locally using the local serial port The administrator needs to configure the users and groups services security and serial ports to which the serial targets are attached to the LX 167 168 Chapter 10 Command Line Interface CLI CLI Prompts CLI Commands The Command Line Interface prompt indicates the current command level The root portion of the prompt is the login name For a direct admin serial port connection with a terminal emulation application Admin Port is the root portion of a command admin For SSH admin is the root portion of the command admin config network 0 e Enteradmin gt help Command config diagnostics help history listports logout top userlist Description Change to config sub menu Change to diag sub menu Display overview of commands Display the current session s command line history List accessible ports Logout of the current CLI session Return to the root menu List active user sessions Rarit
218. up The SNMP device or agent may belong to more than one SNMP community Specify whether the community is Read Only or Read Write using the Type drop down list Configure up to five SNMP managers by specifying their Destination IP Hostname Port and Community Click the Click here to view the Dominion SNMP MIB link to access the SNMP Management Information Base Click OK To configure the Syslog enable Syslog forwarding Select Enable Syslog Forwarding to log the device s messages to a remote Syslog server Type the IP Address Hostname of your Syslog server in the IP Address field Click OK 129 Chapter 6 Device Management gt To reset to factory defaults e Click Reset To Defaults Note IPv6 addresses cannot exceed 80 characters in length for the host name Home gt Device Settings gt Event Management Settings SNMP Configuration SNMP Logging Enabled Name LC Cd Location Destination IP Hostname Port Communi Click here to view the Dominion LX SNMP MIB SysLog Configuration Enable Syslog Forwarding IP Address Host Name OK Reset To Defaults Cancel 130 Raritan Chapter 6 Device Management Configuring Ports The Port Configuration page displays a list of the LX ports Ports connected to KVM target servers are displayed in blue For ports with no CIM connected or with a blank CIM name a default port name of Dominion LX Porti is assigned where Port is the
219. urrent CIM Version and Upgrade CIM Version are displayed for easy identification of the CIMs Check the Selected checkbox for each CIM you want to upgrade Click Upgrade You are prompted to confirm the upgrade Click OK to continue the upgrade Progress bars are displayed during the upgrade Upgrading takes approximately 2 minutes or less per CIM Upgrading Firmware zie Raritan Use the Firmware Upgrade page to upgrade the firmware for your LX and all attached CIMs This page is available in the LX Remote Console only Important Do not turn off your LX unit or disconnect CIMs while the upgrade is in progress doing so will likely result in damage to the unit or CIMs gt To upgrade your LX unit 1 Locate the appropriate Raritan firmware distribution file RFP on the Raritan website http www raritan com on the Firmware Upgrades web page 2 Unzipthe file Please read all instructions included in the firmware ZIP files carefully before upgrading Note Copy the firmware update file to a local PC before uploading Do not load the file from a network drive 153 154 Chapter 8 Maintenance 3 Choose Maintenance Firmware Upgrade The Firmware Upgrade page opens Home gt Maintenance gt Firmware Upgrade Firmware Upgrade Show Latest Firmware ie i Review CIM Version Information Upload Cancel te a unns e tto ea qe B 77 d P dtt tet _f Nae DAL ES 4 Click Brow
220. used if the primary DNS server connection is lost due to an outage a Primary DNS Server IP Address b Secondary DNS Server IP Address 7 When finished click OK Z Raritan 32 Chapter 2 Installation and Configuration See LAN Interface Settings for information in configuring this section of the Network Settings page Note In some environments the default LAN Interface Speed amp Duplex setting Autodetect autonegotiator does not properly set the network parameters which results in network issues In these instances setting the LX LAN Interface Speed amp Duplex field to 100 Mbps Full Duplex or whatever option is appropriate to your network addresses the issue See the Network Settings on page 115 page for more information Configuring Date Time Settings Optional 1 To set the date and time Choose Device Settings Date Time The Date Time Settings page opens Choose your time zone from the Time Zone drop down list To adjust for daylight savings time check the Adjust for daylight savings time checkbox Choose the method you would like to use to set the date and time User Specified Time Choose this option to input the date and time manually For the User Specified Time option enter the date and time For the time use the hh mm format using a 24 hour clock Synchronize with NTP Server Choose this option to synchronize the date and time with the Network Time Protocol NTP Server
221. ute a diagnostics script file emailed to you from Raritan Technical Support a Retrieve the diagnostics file supplied by Raritan and unzip as necessary b Click Browse A Choose File dialog box opens c Navigate to and select the diagnostic file Click Open The file is displayed in the Script File field Diagnostics Scripts Script File c Documents and Setting Browse e Click Run Script Send this file to Raritan Technical Support 3 Tocreate a diagnostics file to send to Raritan Technical Support a Click Save to File The File Download dialog opens File Download Security Warning b Click Save The Save As dialog box opens c Navigate to the desired directory and click Save d Email this file as directed by Raritan Technical Support n Raritan Chapter 10 Command Line Interface CLI In This Chapter e 163 Accessing the LX Using Cllr iiie icio idt decies xci Cla cere taa iei 164 SSH Connection to the EX eire areari 164 LOOGING Um 165 Navigation of th CLI 5 1 3 Genie iririecd etd taxi aaar 165 Initial Configuration Using LI iati rait ient erase 167 MEE ioc Et E 168 GUlCommandS PEE E LE 168 Administering the LX Console Server Configuration Commands 169 Configuring INeEWOLK coe e Gone nt indeed pat estu a see 169 Overview The Command Line Interface CLl can be used to configure the LX network inter
222. uthentication attempts at the Local Console also are authenticated against the external authentication service Note You can also specify no authentication for Local Console access this option is recommended only for secure environments gt To use the LX Local Console 1 Connect a keyboard mouse and video display to the local ports at the back of the LX 2 Startthe LX The LX Local Console interface displays zie Raritan n 174 Chapter 11 LX Local Console Supported Video Resolutions Local Console Ensure that each target server s video resolution and refresh rate are supported by the LX and that the signal is noninterlaced The LX Local Console provides the following resolutions to support various monitors e 800x600 e 1024x768 e 1280x1024 Each of these resolutions supports a refresh rate of 60Hz and 75Hz Video resolution and cable length are important factors in the ability to obtain mouse synchronization See Target Server Connection Distance and Video Resolution on page 190 Port Access Page Local Console Server Display After you login to the LX Local Console the Port Access page opens This page lists all of the LX ports the connected KVM target servers and their status and availability If you are using a tiered configuration in which a base LX device is used to access multiple other tiered devices the tiered devices are viewed on the Port Access page by clicking on the Expand Arrow icon
223. ve privileges can access these functions 179 180 Chapter 11 LX Local Console Configuring LX Local Console Local Port Settings From the Local Port Settings page you can customize many settings for the LX Local Console including keyboard hot keys video switching delay power save mode local user interface resolution settings and local user authentication Note Only users with administrative privileges can access these functions gt To configure the local port settings Note Some changes you make to the settings on the Local Port Settings page will restart the browser you are working in If a browser restart will occur when a setting is changed it is noted in the steps provider here 1 Choose Device Settings Local Port Settings The Local Port Settings page opens 2 Select the checkbox next to the Enable Standard Local Port to enable it Deselect the checkbox to disable it By default the standard local port is enabled but can be disabled as needed If you are using the tiering feature this feature will be turned off since both features cannot be used at the same time 3 If you are using the tiering feature select the Enable Local Port Device Tiering checkbox and enter the tiered secret word in the Tier Secret field In order to configure tiering you must also configure the base device on the Device Services page See Configuring and Enabling Tiering on page 121 for more information on tiering 4
224. which the device should pause between ports 5 Inthe Display section change the default display options for the thumbnail size and split orientation of the Port Scan window 6 Click OK View Options View Toolbar You can use the Virtual KVM client with or without the toolbar display gt To toggle the display of the toolbar on and off e Choose View gt View Toolbar Raritan Z Raritan Chapter 3 Working with Target Servers View Status Bar By default the status bar is displayed at the bottom of the target window gt To hide the status bar e Click View gt Status Bar to deselect it gt To restore the status bar e Click View gt Status Bar to select it Scaling Scaling your target window allows you to view the entire contents of the target server window This feature increases or reduces the size of the target video to fit the Virtual KVM Client window size and maintains the aspect ratio so that you see the entire target server desktop without using the scroll bar gt To toggle scaling on and off e Choose View gt Scaling Full Screen Mode When you enter Full Screen mode the target s full screen is displayed and acquires the same resolution as the target server The hot key used for exiting this mode is specified in the Options dialog see Tool Options on page 75 While in Full Screen mode moving your mouse to the top of the screen will display the Full Screen mode menu bar
225. would like users to have direct access to a target via the Dominion device by passing in the necessary parameters in the URL 3 Click OK igi Z Raritan 5 Raritan Chapter 6 Device Management Enabling the AKC Download Server Certificate Validation If you are using the AKC client you can choose to use the Enable AKC Download Server Certificate Validation feature or opt not to use this feature Option 1 Do Not Enable AKC Download Server Certificate Validation default setting If you do not enable AKC Download Server Certificate Validation all Dominion device users must e Ensure the cookies from the IP address of the device that is being accessed are not currently being blocked e Windows Vista Windows 7 and Windows 2008 server users should ensure that the IP address of the device being accessed is included in their browser s Trusted Sites Zone and that Protected Mode is not on when accessing the device Option 2 Enable AKC Download Server Certificate Validation If you do enable AKC Download Server Certificate Validation e Administrators must upload a valid certificate to the device or generate a self signed certificate on the device The certificate must have a valid host designation e Each user must add the CA certificate or a copy of self signed certificate to the Trusted Root CA store in their browser gt To install the self signed certificate when using Windows Vista operating system and Windows 7
226. x D A 13 Step 1 Configure the KVM Target SeCrvelrS cc cccseeeseeeeeeeeceeeeeaaeeeeeeeseaeeeeaaeeeeaeeeeeeees 13 Step 2 Configure Network Firewall SettingS ccccesceeeeeeeeeeeeeeeeeeeeeeseeeeeaaeeeeaeeeeeneees 26 Step 3 Connect the Equipme Mtei ects sie dates aetedetadvteesatitanet one EROR 27 Step 4 Configure the EX eret neidiodd sdaeeataacdtantavd weenpecetciattnanetneiiass 29 Valid Special Characters for Target Names 0 cccceeeseeeeeeeeeeeeeeeaeseeeeeseaeeeeaaeseeaeeeeeeeee 33 Step 5 Launch the LX Remote Console esses 34 Step 6 Configure the Keyboard Language Optional 35 Step 7 Configure Tiering Optional tetuer tiene do tete eoruni tvedteats 36 Chapter 3 Working with Target Servers 37 BASE E A E 37 LX Local Console Interface LX Devices sssssssssssssese entente nnns 38 EX Remote Console lriterface iis iii aeterne e terni semet drea det sa SER oe uat e Ru ER 38 Launching the EX Remote Console nest tere tuere hinten nma te ae Pure Eu Ea de 38 Intertace and Navigation itera ne deze nd danas ne Mie aa ta ea eevee n nre Ru ERR 40 Scanning POMS PEL 45 Managing gzie gcc 48 LOGGING EP riai 51 Proxy Server Configuration for Use with MPC VKC and AKOC ssssseeeee 51 Virtual KVM Client VKC and Active KVM Client AKO ssssssssssseeennens 53 About the Virtual KYM CHOI sucia trc oret
227. ype The type of server or CIM Status The status for standard servers is either up or down Availability The availability of the server 2 Click the Port Name of the target server you want to access The Port Action Menu appears See Port Action Menu for details on available menu options Choose the desired menu command from the Port Action Menu Define a set of ports to be scanned on the LX using the Set Scan function See Scanning Ports on page 45 43 44 Chapter 3 Working with Target Servers To change the display sort order and or view more ports on the same page Click the column heading by which you want to sort The list of KVM target servers is sorted by that column In the Rows per Page enter the number of ports to be displayed on the page and click Set Port Action Menu When you click a Port Name in the Port Access list the Port Action menu appears Choose the desired menu option for that port to execute it Note that only currently available options depending on the port s status and availability are listed in the Port Action menu Connect Creates a new connection to the target server For the LX Remote Console a new Virtual KVM Client page appears For the LX Local Console the display switches to the target server and switches away from the local user interface On the local port the LX Local Console interface must be visible in order to perform the switch Hot key switching is also available
228. ys and Connect Keys 177 HTTP and HTTPS Port Settings 120 193 IBM AIX 5 3 Settings 25 Implementing LDAP LDAPS Remote Authentication 103 107 Implementing RADIUS Remote Authentication 108 Import Export Keyboard Macros 60 Informational Notes 191 205 Initial Configuration Using CLI 167 Installation and Configuration 12 Intelligent Mouse Mode 73 Interface and Navigation 40 Interface Command 170 Introduction e 1 224 IPv6 Command 171 IPv6 Support Notes 206 J Java Runtime Environment JRE 205 K Keyboard Language Preference Fedora Linux Clients 208 Keyboard Limitations 76 Keyboard Macros 59 Keyboard Options 59 Keyboards 207 L LAN Interface Settings 118 Launching MPC from a Web Browser 80 Launching the LX Remote Console 38 LED Indicators 186 Left Panel 41 Linux Settings Red Hat 4 20 Linux Settings Red Hat 9 18 Local Port Administration 179 Logging a User Off Force Logoff 101 Logging In 164 165 Logging Out 51 Login Limitations 138 139 LX Client Applications 7 LX Console Navigation 42 LX FAQs 218 LX Help 9 LX Interface 40 LX Interfaces 37 LX Local Console 172 LX Local Console Factory Reset 182 LX Local Console Interface LX Devices 38 173 LX Overview 2 LX Photos 4 LX Remote Console Interface 38 LX Specifications 184 Mac and Linux Locked Mapped Drives 215 Macintosh Keyboard 209 Maintenance 149

Dominion LX User Guide

Contents

Download Pdf Manuals

Related Search

Related Contents