Dominion KX ® DKX116 DKX132 DKX216 DKX232 DKX416 DKX432 DKX464 User Guide Release 1.4.5 Copyright © 2006 Raritan Computer, Inc.
This page intentionally left blank.
Copyright and Trademark Information This document contains proprietary information that is protected by copyright. All rights reserved. No part of this document may be photocopied, reproduced, or translated into another language without express prior written consent of Raritan Computer, Inc. © Copyright 2006 Raritan Computer, Inc., CommandCenter, RaritanConsole, Dominion, and the Raritan company logo are trademarks or registered trademarks of Raritan Computer, Inc. All rights reserved.
Safety Guidelines To avoid potentially fatal shock hazard and possible damage to Raritan equipment: • Do not use a 2-wire power cord in any product configuration. • Test AC outlets at your computer and monitor for proper polarity and grounding. • Use only with grounded outlets at both the computer and monitor. When using a backup UPS, power the computer, monitor and appliance off the supply.
Important Information Login • • • • • The default Dominion KX login user name is admin and the password is raritan. This user has administrative privileges. Passwords are case sensitive and must be entered in the exact case combination in which they were created. The default password raritan must be entered entirely in lowercase letters. To ensure security, change the default password as soon as possible.
Note: Netscape 8 has an option (radio button) to change the rendering engine. When Internet Explorer is selected as the rendering engine from Netscape, the RRC is displayed. When Firefox is selected as the rendering engine from Netscape, the MPC is displayed. Supported Paragon CIMs Dominion KX version 1.
CONTENTS i Contents Chapter 1: Introduction ................................................................. 1 Dominion KX Overview ..............................................................................................................1 Product Photos...........................................................................................................................2 Product Features..............................................................................................................
ii CONTENTS PC Properties...........................................................................................................................52 Power Control (Dominion KX only) ..........................................................................................53 Power Strip Management ........................................................................................................54 Power Supply Management (Dominion KX only).............................................................
FIGURES iii Figures Figure 1 Dominion KX Configuration............................................................................................................ 1 Figure 2 Dominion KX132 ............................................................................................................................ 2 Figure 3 Dominion KX464 with Dual Power Supply ..................................................................................... 2 Figure 4 Dominion KX Computer Interface Module (DCIM) .....
FIGURES iv Figure 52 Administrative Menu .................................................................................................................. 64 Figure 53 Channel Configuration Menu ..................................................................................................... 64 Figure 54 Power Management Screen ...................................................................................................... 65 Figure 55 Network Settings Menu......................................
CHAPTER 1: INTRODUCTION 1 Chapter 1: Introduction Dominion KX Overview Dominion KX is an enterprise-class, secure, digital KVM switch that provides BIOS-level access and control of 64 servers from anywhere in the world via Web browser. At the rack, Dominion KX provides BIOS-level control of up to 64 servers and other IT devices from a single keyboard, monitor, and mouse.
2 DOMINION KX USER GUIDE Product Photos Figure 2 Dominion KX132 Figure 3 Dominion KX464 with Dual Power Supply Figure 4 Dominion KX Computer Interface Module (DCIM)
CHAPTER 1: INTRODUCTION 3 Product Features Hardware • 1U or 2U rack-mountable (brackets included) • Dual Power with Failover (with KX464) • Dual-failover Ethernet Ports • 16, 32, or 64 (on KX464) server ports • Multiple User Capacity • UTP (Cat5/5e/6) Server Cabling • Dual failover 10/100 LAN • Modem-ready via external Modem Port • FLASH upgradeable • Auto-switching power supply • Local User Port for Rack Access − PS/2 and USB keyboard/mouse ports − Fully concurrent with remote users − On-Screen display •
4 DOMINION KX USER GUIDE Terminology This manual uses the following terms for components of a typical Dominion KX configuration. Please refer to the diagram below for clarification, if needed. Windows 2000 Unix Figure 5 Terminology and Topology Target Servers Remote PC Local Access Console CIM (Computer Interface Modules) Servers with graphical video cards and user interfaces (e.g., Windows, Linux, Solaris, etc.) to be accessed remotely via Dominion KX.
CHAPTER 2: INSTALLATION 5 Chapter 2: Installation Configuring Target Servers Before installing Dominion KX, you must configure any target servers to be accessed via Dominion KX, to ensure optimum performance. Note that the following configuration requirements apply only to target servers, not to the client workstations (Remote PCs) that you use to access Dominion KX remotely (please see Chapter 1: Introduction, Terminology for additional information).
6 DOMINION KX USER GUIDE Windows XP / Windows 2003 Settings On target servers running Microsoft Windows XP, disable the Enhanced Pointer Precision option, and set the mouse motion speed exactly to the middle speed setting. These parameters are found in Control Panel → Mouse → Pointer Options. Disable transition effects in Control Panel → Display → Appearance → Effects.
CHAPTER 2: INSTALLATION 7 Linux Settings On target servers running Linux graphical interfaces, set the mouse acceleration to exactly 1 and set threshold to exactly 1. Enter this command: xset mouse 1 1. Ensure that each target server running Linux is using a resolution supported by Dominion KX at a standard VESA resolution and refresh rate. Each Linux target server should also be set so the blanking times are within +/- 40% of VESA standard values.
8 DOMINION KX USER GUIDE VGA output, first issue the Stop+A command to drop to bootprom mode. Then, issue the command: setenv output-device screen:r1024x768x70 to change the output resolution. Issue the “boot” command to reboot the server. You may also contact your Raritan representative to purchase a video output adapter. 13W3 Suns with composite sync output require APSSUN II Guardian converter for use with Dominion KX.
CHAPTER 2: INSTALLATION 9 IBM AIX Settings For target servers running the IBM AIX operating system, go to the Style Manager, click on Mouse Settings and set Mouse acceleration to 1.0 and Threshold to 3.0. Configurable Hotkey The Control+Alt+m key sequence displays the RRC/MPC Shortcut menu. This sequence can be configured to a key other than the “m” key. Please note, however, that some key sequences are pre-defined by certain operating systems. For UK keyboards, the “a” and “i” keys should not be used.
10 DOMINION KX USER GUIDE Physical Connections 5 1 2 4 3 Figure 7 Back Panel of Dominion KX 1. AC Power Line Attach the included AC power cord to Dominion KX and plug into an AC Power Outlet. If you are installing a KX464 and want dual power failover protection, attach the second included AC power cord and plug it into a different power source than the first power cord. Figure 8 Rear Panel of Dominion KX 464 with Dual Power Ports 2.
CHAPTER 2: INSTALLATION 11 hub, or router and then Enable Automatic Failover on the Network Configuration screen in KX Manager. 4. Local Access Console Ports (optional) For convenient access to target servers while at the rack, use Dominion KX’s Local Access Console ports. Attach a multisync VGA monitor, mouse, and keyboard to the ports labeled Local User using either a PS/2 keyboard and mouse or a USB keyboard and mouse.
12 DOMINION KX USER GUIDE Initial Configuration IMPORTANT: In some environments, the default 10/100 Mb Auto-negotiation does not properly set the network parameters, leading to network issues. For an example, please visit http://www.cisco.com/warp/public/473/3.html. In these cases, setting the Dominion KX to 100 Mbps/Full Duplex (or whatever is appropriate to your network) addresses the issue. To set, in the Network Settings screen, select Autonegotiate and set the values appropriate to your network.
CHAPTER 2: INSTALLATION 13 Changing Default Password 1. Find and log on to any workstation with (a) network connectivity to your Dominion KX unit, and (b) Java Runtime Environment v1.4.2_2 or higher installed (Java Runtime Environment is available at http://java.sun.com/). 2. Launch a Web browser such as Internet Explorer or Mozilla. 3. If you are using Internet Explorer (IE) type the following URL: http://IP-ADDRESS/admin, where IP-ADDRESS is the IP address that you assigned to your Dominion KX unit. 4.
14 DOMINION KX USER GUIDE 7. Type a new password in the Password field. Retype the password in the Confirm Password field. Passwords consist of twenty (20) English alphanumeric characters and the following symbols: !"#$%&'()*+,-./:;<=>?@[\]^_`{|}~. 8. Click OK to save User properties or click Cancel to close the window without saving. The Default Password can also be changed from Raritan Multi-Platform Client and Raritan Remote Client (MPC and RRC). 1.
CHAPTER 2: INSTALLATION 15 Figure 9 Change Password Window 1. 2. 3. 4. Type your current password in the Old Password field. Type the new password in the New Password field. Retype the password in the Confirm New Password field. When finished, click OK.
16 • • • • DOMINION KX USER GUIDE Netscape 7.2 or later Safari 1.2 or later Firefox 1.0 or later Mozilla 1.
CHAPTER 2: INSTALLATION 17 Installing and Launching MPC 1. To launch MPC from a machine running any browser except Internet Explorer, type http:// into the address line, where is the IP address of your Raritan device. Please note that the MPC applet will launch in a new window that does not contain a Menu bar, Tool bar, Scroll bar, or Address bar. Work in this window and toggle to other open windows using the command ALT+TAB. 2.
18 DOMINION KX USER GUIDE 5. When RRC launches, a device tree of all automatically detected Raritan devices found on your subnet is displayed on the left side of the screen. If you do not find your Dominion unit listed by name, create an icon manually by selecting Connection Æ New Profile. The Add Profile window appears. 6. Type a device Description, specify a Connection Type, and add the Dominion unit’s IP Address, and click OK.
CHAPTER 2: INSTALLATION 19 Establishing a Connection When you double-click on your Dominion unit’s icon in MPC or RRC, its login screen appears. Log on using your username and password (default: admin/raritan) to connect to your Dominion unit. Use the Navigator, on the left side of the MPC or RRC window, to select and connect to a server port. MPC Interface MPC functions are grouped into six general sections on the screen.
20 DOMINION KX USER GUIDE RRC Interface The Navigator displays any known Raritan networked appliances in a single view. Select Connection Æ New Profile to create new entries. Double-click on any server port to access and control the attached target server. Click on the Synchronize Mouse tool to converge the mouse pointers displayed in KVM windows. The Toolbar provides shortcuts to some of MPC’s and RRC’s most frequently-used commands.
CHAPTER 2: INSTALLATION 21 Mouse Pointer Synchronization When controlling a target server, MPC and RRC display two mouse cursors: one belonging to your client workstation and the other belonging to the target server. When properly configured, the two mouse cursors will align. If you experience difficulty with mouse synchronization, please refer to the section Configuring Target Servers, at the beginning of this chapter.
22 DOMINION KX USER GUIDE
CHAPTER 3: ADMINISTRATIVE FUNCTIONS 23 Chapter 3: Administrative Functions Dominion KX Manager is used to manage both the Dominion KX and the KX101 product lines. When running on a Dominion KX, features specific to the KX101 are disabled, and when running on a KX101, features specific to the Dominion KX are disabled. Specifics are called out throughout this chapter. Launching Dominion KX Manager Dominion KX Manager is a Java Applet and requires Java to function.
24 DOMINION KX USER GUIDE Figure 13 Dominion KX Manager Login Screen 1. Username / Password: Log on to KX Manager with an Administrator’s username and password (defaults: admin and raritan (all lower case). To ensure security, please change the default username and password as soon as possible 2. Port: If your device has been configured to use a different TCP port than the default port 5000, type that number here.
CHAPTER 3: ADMINISTRATIVE FUNCTIONS 25 KX Manager Interface KX Manager provides an interface for performing configuration and administrative functions. Many commands in the drop-down menus can by accessed by right-clicking on icons in the server and user lists on the left side of the screen. Menu Bar – Holds dropdown command menus for working in KX Manager. Tool Bar – Shortcut buttons for the most commonly-used commands in KX Manager.
26 DOMINION KX USER GUIDE Network Configuration Use the Setup menu to customize network configuration settings like IP Address and Ethernet speed on your Dominion KX unit. • If you have a remote connection to KX Manager, you must reboot the unit after making Network Configurations in order to activate the new settings. • Selecting to apply new Network settings will log out any users connected through the local port.
CHAPTER 3: ADMINISTRATIVE FUNCTIONS − 27 particular device. However, if an MPC or RRC user has created a Connection Profile for a device, that user will see the Description field from the Profile instead. Note: Spaces are NOT permitted in the Manager Name. − − − − Enable modem interface: (Dominion KX only) Enables the device’s internal modem port to allow remote users to dial into the device. Default value: Disabled. Modem Initialization String: Used to configure the modem for the settings below.
28 DOMINION KX USER GUIDE Click OK to accept the Access Control List changes or Cancel to close the window without saving changes. Important: Please note that ACL rules are evaluated in the order in which they are listed. For instance, if in the above example, the two ACL rules were reversed, Dominion KX101 would accept no communication at all. Use the buttons on the right of the window to adjust the order of your list.
CHAPTER 3: ADMINISTRATIVE FUNCTIONS 29 Security Settings 1. On the Setup menu, click Security, and then click Setting. The Security Settings window appears. Figure 17 Security Configuration Window − − Encryption mode – click on the drop-down arrow to select one of the following: No Encryption: Nothing is secure. The communication channel is open to anyone to read and there is no data encryption.
30 DOMINION KX USER GUIDE the same target server through the device. Click on the drop-down arrow to select one of the following: Private mode (default): No PC Share. Each target server can be accessed exclusively by only one user at a time. PC share mode: Target servers can be accessed by eight users (administrator or non-administrator) at one time. If there is a remote user and a local user sharing the target, control is based on first active keyboard/mouse input.
CHAPTER 3: ADMINISTRATIVE FUNCTIONS 31 Time and Date The Time and Date screen allows you to access the device’s current settings to set time, date, time zone, adjustment for Daylight Savings, and Network Time Protocol (NTP).
32 DOMINION KX USER GUIDE Users, Groups, and Access Permissions Overview The device stores an internal list of user and group names to determine access authorization and permissions. This information is stored internally in a hashed / encrypted format. Note to CC-SG Users If you are using Dominion KX in a CommandCenter Secure Gateway configuration, this section of the User Manual does not apply to you.
CHAPTER 3: ADMINISTRATIVE FUNCTIONS 33 Creating or Editing User Groups and Access Permissions Define User Groups before creating individual Users. When creating a user, you must assign that user to an existing user group. In addition, User Groups are used even if you implement remote authentication (via RADIUS or LDAP). 1. To create a new User Group: On the User menu, click Add User Group.
34 DOMINION KX USER GUIDE Figure 20 Edit Group Window 2. Type a name for the new user group, or edit the name for an existing user group in the Group name field. 3. Check the boxes before the permissions you want to assign to all users who belong to this group. − The first group of permissions (the upper table) controls user authorization for using these specific administrative functions within KX Manager and RRC.
CHAPTER 3: ADMINISTRATIVE FUNCTIONS 35 Important: Checking the check boxes before ‘Manage user accounts’ and ‘Manage user groups’ allows the members of the group to change the permissions of all users, including their own. Carefully consider granting these permissions. 5. Other permission elements on the Add Group or Edit Group screens include: − This Group panel, Used by field - Displays all users assigned to this group.
36 DOMINION KX USER GUIDE − Set ACL – Click this button to limit access to the device by users in this group to specific IP addresses. (This feature applies only to users belonging to a specific group, unlike the “Set System ACL” functionality found in the device’s Network Configuration (see previous section Network Configuration), which applies to all access attempts to the device).
CHAPTER 3: ADMINISTRATIVE FUNCTIONS 37 Creating or Editing Users 1. To create a new User: On the User menu, click Add User. To edit an existing User: Select the user that you wish to edit in the user list, right-click on the icon, and select User Properties. The Add User or the Edit User window appears: Figure 23 Add User Window Figure 24 Edit User Window 2. Type a unique user name or edit the existing user name in the Username field. 3.
38 DOMINION KX USER GUIDE Remote Authentication Introduction Note to CC-SG Users If you are using Dominion KX in a CommandCenter Secure Gateway configuration, this section of the User Manual does not apply to you. When the device is controlled by CommandCenter Secure Gateway, CC-SG determines Remote Authentication. Please see the CommandCenter Secure Gateway User Guide, Administrator Guide, or Deployment Guide at http://www.raritan.com/support/sup_prdmanuals.aspx#com for additional information.
CHAPTER 3: ADMINISTRATIVE FUNCTIONS 39 Authentication vs. Authorization When your device is configured for remote authentication, the external authentication server is used primarily for the purposes of authentication, not authorization. Authorization is determined by the KX unit on the basis of user groups. That is, once a given user is allowed to access the device in general (authenticated), that user’s specific permission (authorization) is determined by the device, based upon the user’s group.
40 DOMINION KX USER GUIDE General Settings for Remote Authentication 1. On the Setup menu, click Security, and then click Remote Authentication to configure your Dominion unit for remote authentication. The Remote Authentication window appears: Figure 26 Remote Authentication Window 2. Select the option button of the remote authentication protocol you prefer (LDAP or RADIUS). 3.
CHAPTER 3: ADMINISTRATIVE FUNCTIONS 41 • Certificate File: Consult your authentication server administrator for the appropriate values to type into this field in order to process LDAP authentication queries from Dominion KX. Returning User Group Information via LDAP When an LDAP authentication attempt succeeds, Dominion KX determines the permissions for a given user based on the permissions of the user’s group.
42 DOMINION KX USER GUIDE Creating a New Attribute To create new attributes for the rciusergroup class: 1. Click the + symbol before Active Directory Schema in the left pane of the window. 2. Right-click Attributes in the left pane. 3. Click New, and then select Attribute. When the warning message appears, click Continue and the Create New Attribute window appears. Figure 27 Create New Attribute Window 4. 5. 6. 7. 8. 9. 10. Type rciusergroup in the Common Name field.
CHAPTER 3: ADMINISTRATIVE FUNCTIONS 43 Adding Attributes to the Class 1. Click Classes in the left pane of the window. 2. Scroll to the user class in the right pane, and right-click on it. 3. Select Properties from the menu. The user Properties window appears. 4. Click on the Attributes tab. 5. Click Add. 6. Select rciusergroup from the Select Schema Object list. Figure 28 Adding the Attributes to the Class 7. Click OK. 8. Click OK. Updating the Schema Cache 1.
44 DOMINION KX USER GUIDE Editing RCI User Group Attributes for User Members To run Active Directory script on Windows 2003 server, please use the script provided by Microsoft. These scripts are loaded onto your system with a Microsoft Windows 2003 installation. ADSI, or Active Directory Service Interface, acts as a low-level editor for Active Directory, allowing you to perform common administrative tasks such as adding, deleting, and moving objects with a directory service.
CHAPTER 3: ADMINISTRATIVE FUNCTIONS 45 6. Click on the Select a property to view drop-down arrow and select rciusergroup from the list. Figure 30 User Properties Screen 7. In the Attribute Values panel of the window, type the user name you would like returned to RRC in the Edit Attribute field. Figure 31 Edit Attribute - adding user to KX group 8. Click Set. 9. Click OK.
46 DOMINION KX USER GUIDE Returning User Group Information via RADIUS When a RADIUS authentication attempt succeeds, the device determines the permissions for a given user based on the permissions of the user’s group. Your remote RADIUS server can provide these user group names by returning an attribute, implemented as a RADIUS FILTER-ID. The FILTER-ID should be formatted as follows: Raritan:G{GROUP_NAME} where GROUP_NAME is a string, denoting the name of the group to which the user belongs.
CHAPTER 3: ADMINISTRATIVE FUNCTIONS 47 The KX unit sends the following RADIUS attributes to the RADIUS server with each accounting request: ATTRIBUTE SESSION-TYPE SESSION-ID USER-NAME NAS-IP-ADDRESS NAS-IDENTIFIER NAS-PORT-TYPE NAS-PORT FILTER-ID CLASS ACCT-AUTHENTIC TERMINATE-CAUSE DATA Either START (1) for log in or STOP (2) for log out. A string containing a unique session name. The name is in the format of “NAS-IDENTIFIER:user IP address:unique session number” Example: “Dominion KX:192.168.1.
48 DOMINION KX USER GUIDE Forced User Logoff To manually log a user off a device, select that user in the user tree, right-click on the user icon, and select Logoff User. Figure 32 Logoff User Menu Option Viewing KX Unit Event Log (Status) On the Setup menu, click Status to view the device’s Event Log. The device Status window appears, displaying events by date and time. Click Export and browse for a location to save the displayed log file to a text file.
CHAPTER 3: ADMINISTRATIVE FUNCTIONS 49 Rebooting the Device To reboot the device, do either of the following: • Open the RRC/MPC Tools menu and select Restart device. • Right-click the KVM device and select Restart device. Device Diagnostic Console On the Setup menu, click Diagnostics to view a Diagnostic window from KX Manager (without having to launch RRC). Figure 34 Device Diagnostic Window To determine the Firmware Upgrade on the KX device, type buildinfo at the prompt and press Enter.
50 DOMINION KX USER GUIDE Device System Information On the Setup menu, click System information to view Model type, hardware version, Firmware version, Serial number, and MAC Address of the device. The FPGA version field is inactive.
CHAPTER 3: ADMINISTRATIVE FUNCTIONS 51 Configuration Backup and Restore On the File menu, click Backup, and then click User-Group Information to download User Group information. On the File menu, click Backup, and then click Device Configuration to download the complete device configuration to your local computer. To restore User-Group information saved on your local computer, on the File menu, click Restore, and then click User-Group Information.
52 DOMINION KX USER GUIDE PC Properties To view PC Properties, select a server in the server list and on the Setup menu, click Properties, and then click PC (or select a server in the server list, right-clicking on it, and click Properties). • Name: This is the name given to the target in that channel. Administrators can change the name by typing a new one in this field. The target name can also be changed directly in the target list by clicking on the name once after it has been highlighted.
CHAPTER 3: ADMINISTRATIVE FUNCTIONS 53 Power Control (Dominion KX only) The Dominion KX supports up to eight (8) power strips. Users may group or assign up to four outlets to any of the Dominion channels. Once assigned, the power management function is available in MPC and RRC. Setup Preparation You must have a power strip and the P2CIM-PWR Computer Interface Module (CIM).
54 DOMINION KX USER GUIDE Once outlets have been assigned, Remote Power Management to the associated server will be available through RRC. Note: Be sure to assign the correct outlets to each channel. If more than one outlet is physically associated with a different server, you could accidentally switch OFF the wrong server. Power Strip Management To view Power Strip Properties; name, model, number of outlets, and serial number: • Right-click on the Power Strip channel / icon in the Device Tree.
CHAPTER 3: ADMINISTRATIVE FUNCTIONS 55 Power Supply Management (Dominion KX only) Dominion KX displays the status of its Power Supplies, one per unit, except for the KK464, which displays two Power Supplies.
56 DOMINION KX USER GUIDE CC UnManager KX Manager supports CC UnManager, an “Un-Manage” feature that allows a Dominion that is managed by a Command Center Secure Gateway (CC-SG) device, but not under control by that CC-SG device, to remove itself from CC-SG management, or to “Un-Manage” itself. CC UnManager is designed to restore full control to the Dominion unit in the event the CC-SG goes off-line.
CHAPTER 3: ADMINISTRATIVE FUNCTIONS 57 Activating CC UnManager If you are already logged into a Dominion unit that is under CC-SG management, but not under CC-SG control, you can issue the CC UnManager command to remove the Dominion from CCSG management. On the Setup menu, click Configuration and then click CC UnManager.
58 DOMINION KX USER GUIDE Event Management Dominion KX offers SNMP agent support through Dominion KX’s Event Management feature. To run SNMP agent support properly, first set path, time and date permissions. 1. On the Setup menu, click Configuration, and then click Events. The Event Management window appears. Figure 48 Event Notification Activation Tab 2. Click on the Event Management tab to select and configure Events that you want to generate SNMP notification events (traps). 3.
CHAPTER 3: ADMINISTRATIVE FUNCTIONS 59 SNMP Agent Configuration Use the SNMP screen to configure the SNMP connection between the Dominion KX (SNMP Agent) and an SNMP manager. 1. In the Event Management window, click on the SNMP tab 2. Click on the Enable SNMP checkbox to enable the SNMP Agent feature; uncheck this checkbox to disable SNMP Agent. 3.
60 DOMINION KX USER GUIDE SNMP Trap Configuration The Raritan Enterprise MIB can be accessed via the FAQ Support section on Raritan’s Web site, http://www.raritan.com/support/sup_faq.aspx. Click on the View FAQ drop-down arrow and select Dominion KX from the list. When directed to the Dominion KX FAQ section, click on the first MIB query, and then click on the link to view MIB file.
CHAPTER 4: LOCAL CONSOLE PORT ACCESS 61 Chapter 4: Local Console Port Access Local Port Functionality When you are located at the server rack, Dominion KX provides standard KVM switch functionality via its Local Console Ports, which features an On-Screen Display (OSD) for quick, convenient switching between servers.
62 DOMINION KX USER GUIDE If your Dominion KX has been configured for external authentication services (LDAP, Active Directory, or RADIUS), authentication attempts at the Local Console Port also are authenticated against the external authentication service. Local Factory and Password Reset If you forget the administrator password, there is currently no way to reset it to factory default to gain access.
CHAPTER 4: LOCAL CONSOLE PORT ACCESS 63 Server Display Options While you operate the Local Console Port, Dominion KX will display a list of those servers to which you have permission to access. Figure 51 Local Server Display Your servers can be sorted and displayed by two different parameters: • Select by Channel: Press F2 while in the OSD to display your servers listed in numerical order, as determined by the physical Dominion KX server port to which they are connected.
64 DOMINION KX USER GUIDE Accessing a Server While viewing the Server Display in the OSD, press the Ç and È arrow keys to scroll through the list of servers. Eight servers are listed per page, and if your list spans multiple pages, press the PgUp and PgDown keys to scroll between screens. Select a server (when the server is highlighted with the yellow bar) you want to access and press ENTER. The OSD disappears and you are connected directly to the server you have selected.
CHAPTER 4: LOCAL CONSOLE PORT ACCESS 65 Power Management Control channels with power associations on the local console using the F3 key. If you select a channel without a power association, a No Outlet / Access Denied message appears at the base of the Channel Configuration menu. 1. From the Channel Configuration menu (above), select the channel to turn off, turn on, or recycle power to and press the F3 key. The Server Power Control screen appears. 2. Use the Ç and È keys to select a channel. A.
66 DOMINION KX USER GUIDE Setting Session Timeout Session Timeout applies only to local users. When the local user is viewing target video and there is no keyboard or mouse activity for a specified amount of time, that user is logged out of the target video, but the OSD remains active. Note: Please do not confuse Session Timeout with Idle User Timeout, which applies to all users, whether local or remote.
CHAPTER 4: LOCAL CONSOLE PORT ACCESS 67 Help Menu To get information or help about the OSD of the Dominion KX Local Console Port, press F1. The Help Menu appears. Figure 58 Help Menu Hardware / Firmware Information If you need hardware and firmware information specific to your Dominion KX unit, log into the Local Console Port of your Dominion KX unit, and press F8. The System Information screen appears. Figure 59 System Information Window Dominion KX firmware version 1.
68 DOMINION KX USER GUIDE Local User Security Settings 1. Log on to Dominion KX as a user with administrative privileges, and press F5 to activate the Administrative menu (Figure 52). 2. Select Option 2, User Security. The User Security menu appears. Figure 60 User Security Menu 3. To display all computers, enter Yes in the Display All Computers field. To display only active ones (the default), enter No in the field. 4.
APPENDIX A: SPECIFICATIONS 69 Appendix A: Specifications Digital KVM Switches PART PRODUCT NUMBER WEIGHT DKX116 8.65 lb 3.92 kg DKX132 9.0 lb 4.1 kg DKX216 8.65 lb 3.92 kg DKX232 9.0 lb 4.08 kg DKX416 9.0 lb 4.08 kg DKX432 9.5 lb 4.3 kg DKX464 13.73 lb 6.24 kg PRODUCT DIMENSIONS (WXDXH) 17.3" x 11.4" x 1.75" 439 mm x 290 mm x 44 mm 17.3" x 11.4" x 1.75" 439 mm x 290 mm x 44 mm 17.3" x 11.4" x 1.75" 439 mm x 290 mm x 44 mm 17.3" x 11.4" x 1.75 439 mm x 290 mm x 44 mm 17.3" x 11.4" x 1.
70 DOMINION KX USER GUIDE Raritan Remote Client (RRC) Applet Operating System Requirements: Windows XP / 2000 with DirectX. • Windows NT support for some international keys are limited due to limited Microsoft support for DirectX on the Windows NT platform Dominion KX Manager (Remote Administration Applet) For consistent operation across multiple OS and Web Browsers, Sun Java Runtime Environment (JRE) version 1.4.2_05 is used.
APPENDIX A: SPECIFICATIONS 71 Target Server Connection Distance and Video Resolution Keyboard: PS/2 or USB Mouse: PS/2 or USB Video: VGA DOMINION KX MODELS KX116 KX132 KX216 KX232 KX416 KX432 KX464 LINUX SERVERS WINDOWS SERVERS SUN SOLARIS DCIM-PS2, USB DCIM-PS2/USB DCIM-SUN/SUSB 75 to 150 ft 19.5 to 45 m 50 to 100 ft 15 to 30 m 50 to 75 ft 15 to 19.5 m 75 to 150 ft 19.5 to 45 m 75 to 150 ft 19.5 to 45 m 75 to 150 ft 19.
72 DOMINION KX USER GUIDE Certified Modems 1. 2. 3. 4. 5. 6. US Robotic 56K Fax and Modem ZOOM v90; RS232 interface ZOOM v92; RS232 interface USR (US Robotic) Sportster 56K v90 USR (US Robotic) Courier 56K v90 Trust 56K V.
APPENDIX B: NOVELL EDIRECTORY 73 Appendix B: Novell eDirectory This information is offered as an overview of Novell’s eDirectory. For more detailed information, please visit Novell’s Website. 1. Log on to the tree with Admin rights to [Root], or some equivalent that has rights to modify the schema of eDirectory. Open Console One and select your tree in the left panel. 2. On the Tools menu, click Schema Manager. 3.
74 DOMINION KX USER GUIDE 4. Console One will launch the Create Attribute Wizard. Click Next. 5. Type rciusergroup in the Attribute name field and type 1.3.6.1.4.1.13742.50 in the ASN1 ID field. Click Next.
APPENDIX B: NOVELL EDIRECTORY 6. Click on the Syntax drop-down arrow and select Case Ignore String from the list. Click Next. 7. Click on the check boxes before Single valued and Sized to set those flags. Type 1 in the Lower field and type 24 in the Upper field. Click Next.
76 DOMINION KX USER GUIDE 8. A Summary screen displaying your data appears. Click Finish to create the attribute in eDirectory, or click Back to return to previous screens and change your data. 9. When you finish, you return to the Schema Manager screen.
APPENDIX B: NOVELL EDIRECTORY 77 10. Click on the Classes tab, select the User class, and click Info. The Class Manager screen appears. 11. Click Add Attribute to add the rciusergroup attribute to the User class. The Add Optional Attribute window appears. 12. Select rciusergroup in the Available attributes pane on the left, and then click the blue arrow Æ to add the attribute to the Add these attributes pane on the right. Click OK. 13.
78 DOMINION KX USER GUIDE 14. Add a value to the attribute using Console One, LDIF operations with ICE, or ldapmodify (please note: these are outside scope of this document). If using Console One, right-click on the user object and click Properties. Click on the Other tab to add attribute and value for rciusergroup. 15. Click Add. 16. Select the rciusergroup attribute and click OK to add the attribute to your User object.
APPENDIX B: NOVELL EDIRECTORY 79 17. When you return to the Properties screen, rciusergroup appears in the Attributes tree. Type the name of the User Group you created on the Dominion KX device and then click Apply. 18. An Updating Other Page screen appears. Click OK to continue. 19. When the Properties window appears, click Close. 20. In MPC or RRC, connect to the Dominion device by double-clicking on its icon in the Device Tree and perform tasks as allowed by the user group you specified.
80 DOMINION KX USER GUIDE
APPENDIX C: FAQS 81 Appendix C: FAQs General Questions QUESTION What is Dominion KX? How does Dominion KX differ from remote control software? Can Dominion KX be rack mounted? How large is Dominion KX? ANSWER Dominion KX is a digital KVM (keyboard / video / mouse) switch that enables IT administrators to access and control 16 or 32 servers over the network with BIOS-level functionality.
82 DOMINION KX USER GUIDE Remote Access QUESTION How many users can remotely access servers on each Dominion KX? ANSWER Currently, Dominion models KX416, KX432, and KX464 offer concurrent remote transmissions of up to four unique servers at any time.
APPENDIX C: FAQS QUESTION How do I access servers connected to Dominion KX if the network ever becomes unavailable? Can non-Windows users use RRC? My connection dropped and I got the error message “There was an unexpected communications error – connection terminated” – what should I do? 83 ANSWER Dominion KX offers a dedicated modem port for attaching an external modem. With this dedicated modem, your servers can still be remotely accessed in the event of a network emergency.
84 DOMINION KX USER GUIDE Ethernet and IP Networking QUESTION How much bandwidth does Dominion KX require? ANSWER Dominion KX offers integrated IP-Reach technology – the very best video compression available. Raritan has received numerous technical awards confirming its high video quality transmissions and the low bandwidth utilization. Raritan pioneered the KVM Over IP functionality that allows users to tailor their video parameters to conserve network bandwidth.
APPENDIX C: FAQS QUESTION Can Dominion KX used over the WAN (Internet), or just over the corporate LAN? Can I use Dominion KX with a VPN? How many TCP ports must be open on my firewall in order to enable network access to Dominion KX? Are these ports configurable? Does the secondary network port provide redundant fail-over, or load balancing? Does Dominion KX require an external authentication server to operate? Can Dominion KX be used with CITRIX? Can the Dominion KX utilize DHCP? I’m having problems c
86 DOMINION KX USER GUIDE Servers QUESTION Does Dominion KX depend on a Windows server to operate? Do I need to install a Web server such as Microsoft Internet Information Services (IIS) in order to utilize Dominion KX’s Web browser capability? What software do I have to install in order to access Dominion KX from a particular workstation? What should I do to prepare a server for connection to Dominion KX? What comes in the Dominion KX box? ANSWER Absolutely not.
APPENDIX C: FAQS 87 Installation QUESTION Besides the unit itself, what do I need to order from Raritan to install Dominion KX? What kind of Cat5 cabling should be used in my installation? What types of servers can be connected to Dominion KX? How do I connect servers to Dominion KX? How far can my servers be from Dominion KX? Some operating systems “lock up” if you disconnect a keyboard or mouse during operation.
88 QUESTION How do I connect a serially controlled (RS232) device to Dominion KX, such as a Cisco router/switch or a headless Sun server? DOMINION KX USER GUIDE ANSWER If you only have a few serially-controlled devices, you may connect them to Dominion KX using Raritan’s serial computer interface module (CIM), Raritan AUATC. However, if you have four or more serially controlled devices, we recommend the use of Raritan’s Dominion SX model line of secure console servers.
APPENDIX C: FAQS 89 Local Port QUESTION Can I access my servers directly from the rack? When I am using the local port, do I prevent other users from accessing servers remotely? Can I use a USB keyboard or mouse at the local port? How do I select between servers while using the local port? Is there an On-Screen Display (OSD)? How do I ensure that only authorized users can access servers from the local port? If I use the local port to change the name of a connect server, does this change propagate to remo
90 DOMINION KX USER GUIDE Power Control QUESTION What type of power control capabilities does Dominion KX offer? ANSWER Because Dominion KX enables you to remotely manage servers; it also incorporates the critical functionality of hard power control to servers. Instead of using a third-party tool for power control (likely with lower security and fail-safe capabilities as Dominion KX), you can use Dominion KX’s fully integrated remote power control.
APPENDIX C: FAQS 91 Scalability QUESTION How do I connect multiple Dominion KX devices together into one solution? Can I connect an existing analog KVM switch to Dominion KX? ANSWER Multiple Dominion KX units do not need to be physically connected together. Instead, each Dominion KX unit connects to the network, and they automatically work together as a single solution: If you deploy Raritan’s optional CC-SG management appliance, CCSG acts as a single access point for remote access and management.
92 DOMINION KX USER GUIDE Computer Interface Modules (CIMs) QUESTION Can I use Computer Interface Modules (CIMs) from Raritan’s analog matrix KVM switch, Paragon, with Dominion KX? Can I use Z-Series “daisy-chaining” Computer Interface Modules (CIMs) with Dominion KX? Can I use Dominion KX Computer Interface Modules (CIMs) with Raritan’s analog matrix KVM switch, Paragon? ANSWER Yes.
APPENDIX C: FAQS 93 Manageability QUESTION Can Dominion KX be remotely managed and configured via web browser? Can I backup and restore Dominion KX’s configuration? What auditing or logging does Dominion KX offer? Can Dominion KX integrate with syslog? Can Dominion KX’s internal clock be synchronized with a timeserver? Does the power supply used by Dominion KX automatically detect voltage settings? ANSWER Yes. Dominion KX can be completely configured remotely via Web browser.
94 DOMINION KX USER GUIDE Miscellaneous QUESTION What is Dominion KX’s default IP address? What is Dominion KX’s default username and password? I changed and subsequently forgot Dominion KX’s administrative password; can you retrieve it for me? Is 24/7 Technical Support available for Dominion KX? ANSWER 192.168.0.
APPENDIX C: FAQS 255-80-6040 95
World Headquarters Raritan Korea European Headquarters Raritan Computer, Inc. 400 Cottontail Lane Somerset, NJ 08873 USA Tel. (732) 764-8886 Fax. (732) 764-8887 Email: sales@raritan.com www.raritan.com Raritan Computer Korea Inc. #3602, Trade Tower, World Trade Center Samsung-dong, Kangnam-gu Seoul, Korea Tel. (82) 2 557-8730 Fax. (82) 2 557-8733 Email: sales.korea@raritan.com http://www.raritan.co.ko Raritan Computer Europe, B.V. Eglantierbaan 16 2908 LV Capelle aan den IJssel The Netherlands Tel.
