Raritan Computer DKX232 manual

User Manual DKX116 DKX216 DKX232 Raritan Computer Inc. 400 Cottontail Lane Somerset, NJ 08873 USA Tel. 1-732-764-8886 Fax. 1-732-764-8887 E-mail: sales@raritan.com http://www.raritan.c om/ Raritan Computer Europe, B.V. Eglantierbaan 16 2908 LV Capelle aan den IJssel The Netherlands Tel. 31-10-284-4040 Fax. 31-10-284-4049 E-mail: sales.europe@rarita[...]

This page intentionally left blank.[...]

FCC Information This equipment has been tested and found to comply with the limits for a Class A digital device, pursuant to Part 15 of the FCC Rules. These limit s are designed to provi de reasona ble protection agai nst harm ful interference in a commercial installation . This equipm ent generates, uses, and can radiat e radio frequency energy an[...]

Important Information Login • The default D ominion K X login user name is admin and the passw ord is raritan . This user has administrative privileges. • Passwords are case sensitive and must be entered in the exact case combination in which they were created. • The default passwor d rarita n must be entered entirely in lowercase letters. ?[...]

Table of Contents Chapter 1: In troduction .................................................................. 1 Dominion KX Overview ........................................................................................................... ... 1 Product Photos ........................................................................................[...]

Remote Authentication .......................................................................................................... ... 39 Introduc tion ................................................................................................................... ................... 39 Remote Authenticati on Implem entation ......................[...]

T able of Figur es Figure 1 Dominion KX Configuration ............................................................................................. ............... 1 Figure 2 Dominion KX Fr ont and Rear Panels ..................................................................................... ........ 2 Figure 3 Dominion KX Computer Interface M o[...]

This page intentionally left blank.[...]

C HAPTER 1: I NTRODUCTION 1 Chapter 1: Introduction Dominion KX Overview Dominion KX is an ente rprise-class, secure, digita l KVM switch that provid es BIOS-level access and control of 32 servers from anywhere in the world via Web browser. At the rack, Dom inion KX pr ovides BIOS-level c ontrol of up to 32 se rvers and other IT de vices from a sin[...]

2 D OMINION KX U SER M ANUAL Product Photos Figure 2 Dominion KX Front and Rear Panels Figure 3 Dominion KX Computer Interface Module (CIM)[...]

C HAPTER 1: I NTRODUCTION 3 Product Features Hardware • 1U rack-mountable (brackets i ncluded) • 16 or 32 server por ts • Multiple User Capacity • UTP (Cat5/ 5e/6) Server Cabl ing • Dual failover 10/100 LAN • Modem-ready via external M odem Port • FLASH upgradeable • Auto-switching powe r supply • Local User Port for Rack Access ?[...]

4 D OMINION KX U SER M ANUAL Terminology This manual uses of the following terms for components of a typical Do minion KX configuration. Please refer to the diagram below for clarification, if needed. Figure 4 Terminology and Topology Targe t Servers Servers with graphical video cards and user interfaces (e.g., Windows, Linux, Sola ris, etc.) to be[...]

C HAPTER 2: I NSTALLATION 5 Chapter 2: Installation Configuring Target Servers Before installing Dominion KX, you m u st configure any target se rvers to be accessed via Dominion KX, t o ensure optimum performance. Note that the followi ng configuration requirements app ly only to targ et servers , not to the client workstations (Remote PCs) that y[...]

6 D OMINION KX U SER M ANUAL Windows 2000 / ME Settings On target servers running Mi crosoft Windows 2000/ME, set th e mouse pointer acceleration t o None and the mouse motio n speed exactly to the middle speed setting. These parameters are found in Contr ol Panel → Mouse . Disable transition effects in Contro l Panel → Display → Effects . Wi[...]

C HAPTER 2: I NSTALLATION 7 All target servers must be configured to one of the di sp lay resolutions supported by Domin ion KX, as listed in the beginning of this chap ter. The most popular supported resolutions for Su n machines are: 1024x768@60 Hz 1024x768@70 Hz 1024x768@75 Hz 1024x768@85 Hz 1152x900@66 Hz 1152x900@76 Hz 1280x1024@60H z Target s[...]

8 D OMINION KX U SER M ANUAL Physical Connections 5 4 1 2 3 Figure 6 Back Panel of Dominion KX 1. AC Power Line Attach the included AC power cord to Do mini on KX and plug into a n AC Powe r Outlet. 2. Modem Port (optional) Dominion KX features a dedicated m odem port for rem o te access even when the LAN/WAN is unavailable. Using a straight-throug[...]

C HAPTER 2: I NSTALLATION 9 Initial Configuration Assign an IP Address 1. Power ON Dom inion KX via the powe r switch on the bac k of the unit. 2. Wait appro ximately 30 sec onds as Dom inion KX bo ots. 3. After it boots, a login prompt will appear on the monitor attach ed to Dominion KX’s Local Access Console. Log o n with the default username/p[...]

10 D OMINION KX U SER M ANUAL Note to CommandCenter Users If you are using Dominion KX i n a CommandCenter configurat ion, perform the installation steps as outlined above. After completing these steps, consult the CommandCen ter user guide to proceed with your installation. The rest of th is user guide applies pr imarily to users deployi ng their [...]

C HAPTER 2: I NSTALLATION 11 Establish a Connection When you do uble-click on y our Domi nion KX icon , its login screen a ppears. Log on with yo ur username and password (default: admin/raritan ) to connect to your Dominion KX unit. Use the RRC Navigator, on the left side of the RRC window, to select and connect to a server port. Click on the Sync[...]

12 D OMINION KX U SER M ANUAL[...]

C HAPTER 3: R ARITAN R EMOTE C LIENT 13 13 Chapter 3: Raritan Remote Client (RRC) Invoking RRC via Web Browser Dominion KX features Web Brow ser access capabilities, providing a co nnection from any Windows-based Remote PC running Microsoft Internet Explorer 4.0+, Mozilla 1 .1+, and Netscape 7+. Security Settings In order t o access Domi nion KX vi[...]

14 D OMINION KX U SER M ANUAL 3. Depending on your browse r’s security co nfiguration, yo u may see any or al l of the foll owing dialog boxes, confirming access and launch of an externally-provided program . Click [ Yes ] to advanc e through any of these prompts. Figure 11 Possible Secu rity Alert Screens Removing RRC From the Browser Cache To r[...]

C HAPTER 3: R ARITAN R EMOTE C LIENT 15 15 Optional: Installing RRC Software Note: This step is optional. Dominion KX can be acces sed from a Remote PC eithe r by installing RRC software, or by launchi ng RRC via w eb browser ( see previous section) . Accessing Domini on KX via w eb browser does not require any software insta llation on th e Remote[...]

16 D OMINION KX U SER M ANUAL RRC Navigator The RRC Navigator provides a tree view of every kno wn Raritan KVM Over IP device so you can access all Raritan networked app liances for which a connectio n profile exists. All Raritan devices automatically identified on the network are disp layed. Note: Automatic Raritan d evice identification uses the [...]

C HAPTER 3: R ARITAN R EMOTE C LIENT 17 17 For each serve r port entry , RRC navi gator displa ys the followi ng icons: Connected (green) Available for conn ection Unavailable (no device connect ed, or access is blocke d) Unavailable (in use by a nother [ PC Share mode off]) Navigator Options Certain RRC Navigator attributes may be customized to yo[...]

18 D OMINION KX U SER M ANUAL 2. Clic k [ Add ]. The Add Co nnection dialog appears. Opt ions are grouped int o three tabs. a. Connect tab Figure 15 Connect tab − Description : Type a text name that identifies th e Raritan device you are configur ing, such as “Atlanta_Datacenter.” − Connection Type : Select TCP/IP Connecti on for a LAN/WAN [...]

C HAPTER 3: R ARITAN R EMOTE C LIENT 19 19 c. Security tab Figure 16 Security tab If you have configu red your Dominion KX unit to use a priv ate security key (see Chapter 4: Administrative Functions, System-Level Security Parameters ), enter it here in order to be authorized to initiate a con nection with that Dominion KX unit. Click [ OK ] when y[...]

20 D OMINION KX U SER M ANUAL RRC Toolbar and Shortcuts The RRC Toolbar provides on e-click access to the most freque ntly-used commands. Figure 17 RRC Toolbar B UTTON B UTTON N AM E H OTKEY F UNCTION New Profile <Ctrl+Alt+C> Creates a new Navigator entr y for a Raritan d evice; same results a s selecting Connection  New Profile in the men[...]

C HAPTER 3: R ARITAN R EMOTE C LIENT 21 21 RRC Status Bar The RRC Status Bar displays session information abou t your connection to your Dominion KX. Figure 18 RRC Status Bar Components • Video Sensing Status / Path Indicator : i ndicates the occu rrence of vide o sensing, duri ng connections to target KVM Server ports. • Bandwidth Usage Indica[...]

22 D OMINION KX U SER M ANUAL Remote KVM Console Control Once you esta blish a con nection with a Dominion KX uni t, that unit’s icon in the RRC Navig ator expands to display all ports enabled for remote acces s. Figure 19 Navigation Tree To establish a remote KVM conso le connection, double-click on the KVM port you want to contro l. Once connec[...]

C HAPTER 3: R ARITAN R EMOTE C LIENT 23 23 For better alig nment of m ouse pointers , click on t he Synchronize Mouse shortcut on the RRC Toolbar, or simultaneously press the k eys < Ctrl+Alt+S >. This forces the realignment o f the mouse pointers. If you have carefully followed Chapter 2: Installation, Co nfiguring Target Servers and the m o[...]

24 D OMINION KX U SER M ANUAL Keyboard Macros Dominion KX’s Key board Macro feature en sures that keys troke combinations intended for the targ et server are sent to, and interpreted only b y, the target server. Otherwise, they might be interpreted by th e computer on which RRC is running . Ctrl+Alt+Delete Macro Due to its frequent use, a Ctrl+Al[...]

C HAPTER 3: R ARITAN R EMOTE C LIENT 25 25 c) In the Keys to Press drop-down list, select each key for which you woul d like to emulate key presses – in the or der by which they are t o be pressed. Clic k [ Press Key ] after each selection. As each key is selected, it will appea r in the Keys to Rel ease field. In this example , select two keys: [...]

26 D OMINION KX U SER M ANUAL Running a Keyboard Macro Once you have created a keybo ard m acro, execute it from the RRC Menu Bar, or by using the hotkey (keyboard) combination if you assigned one while creating th e macro. Menu Bar Act ivation When you create a macro, it appears under the Keyboard menu. F rom the Keyboard menu, click on the name o[...]

C HAPTER 3: R ARITAN R EMOTE C LIENT 27 27 Connection and Video Properties Dominion KX’s dynamic video compression algorithms maintain KVM con sole usability under varying bandwidth co nstraints. Dominion KX is unique in that it optimizes its KVM outpu t for not only LAN utilization, but also via th e WAN and dial-up. It also adjusts color depth [...]

28 D OMINION KX U SER M ANUAL − Smoothing : The video Smoothing level you set inst ructs Dominion KX to w hat degree col or gradation shifts are relev ant for transmission. Vide o pixels that stray from the majority color are assigned approximated colo r values to reduce bandwidth used and video noise transmitted. Overly high smoothing levels can[...]

C HAPTER 3: R ARITAN R EMOTE C LIENT 29 29 − Color Settings: Gain contro l can be thou ght of as c ontrast adjustm ent. Offset control can be thought of as brightness adjust ment.  Red Gain: Controls the amplification of the red signal.  Red Offset: Controls t he bias of t he red sign al.  Green Gain: Controls t he ampli fication of the [...]

30 D OMINION KX U SER M ANUAL Select Administrative Functions via RRC Although Dominion K X provides a remote interface to adm inistrative functions through D ominion KX Manager, RRC provides an interface to frequently-use d administrative functions directly from the R RC interface. When logged into a Do minion KX unit as an Administrato r, you can[...]

C HAPTER 4: A DMINISTRATIVE F UNCTI ONS 31 Chapter 4: Admini strative Functions Launching Dominion KX Manager After you assign an IP Address to your Dominio n KX unit, all administrative functions can be performed remotely via Web browse r using Dom inion KX Manager. Log on to a workstation with network connectiv ity to Domini on KX. E nsure this w[...]

32 D OMINION KX U SER M ANUAL Dominion KX Manager Interface Dominion KX Manager provides a n interface f or perform ing confi guration and adm inistrative functions. Many of t he comm ands availabl e on the me nu bar can be accessed by right-clickin g on objects in the server and user lists on the left side of the screen. Network Configuration Use [...]

C HAPTER 4: A DMINISTRATIVE F UNCTI ONS 33 − Set System ACL : Click on this button to s et a global-l evel access control list for Domi nion KX, enhancing sec urity by ensuri ng that Dom inion KX doe s not respond t o packets being sent from disallowed IP addresses. The Access Control List window appears. Figure 32 Access Control List Window Thes[...]

34 D OMINION KX U SER M ANUAL System-Level Security Parameters Use these descriptions to change system -level s ecurity settings of yo ur Dominion KX unit such as encryption levels, idle time, share mode, and other parameters. Important: Dominion KX must be rebooted before Network Configuration changes take effect. 1. On the Setup menu, click Secur[...]

C HAPTER 4: A DMINISTRATIVE F UNCTI ONS 35  PC Share Mode: Target servers can be accessed by more than one user (administrator or non-admini strator) at a tim e. Control is based on first active keyboard/m ouse input, so multiple remote users attempting keyboard input or mouse movement at exactly th e same moment m ay experience uneven control. [...]

36 D OMINION KX U SER M ANUAL Users, Groups, and Access Permissions Overview Dominion KX keeps an internal list of user and group names to determ ine access authorization and permissions. This information is stored internally in a hashed / encrypted format. Note to CommandCenter Users If you pl an to confi gure Dom inion KX t o be int egrated wit h[...]

C HAPTER 4: A DMINISTRATIVE F UNCTI ONS 37 Create or Edit User Groups and Access Permissions Define User G roups before c reating indivi dual Users. When creating a us er, you must assi gn that user to an existing user group. In additio n, Us er Groups are used even if you implement remote authentication (via RADIUS or LD AP). 1. To create a new Us[...]

38 D OMINION KX U SER M ANUAL − [ Set ACL ] – Click this button to to lim it access to Dominion KX by user s in this group t o specific IP addresses. (This feature applies only to users belonging t o a speci fic group, unlike the “Set System ACL” functionality found in the Dominion KX Network Configu ration (see previous section Network Con[...]

C HAPTER 4: A DMINISTRATIVE F UNCTI ONS 39 5. Clic k [ OK ] to save User propert ies or [ Cancel ] to close the wind ow without saving. Delete Users To delete an existing user, select th e user that you wi sh to delete, right-click on the user icon, and select Delete User. Remote Authentication Introduction Note to CommandCenter Users If you pl an [...]

40 D OMINION KX U SER M ANUAL Authentication vs. Authorization When your Dominion KX un it is configured for remote au thentication, the external aut hentication server is used primarily for the purpo ses of authentication, not autho rization. Authorization is determ ined by Dom inion KX on the basis of user groups. That is, on ce a given use r is [...]

C HAPTER 4: A DMINISTRATIVE F UNCTI ONS 41 General Settings for Remote Authentication 1. On the Setup menu, click Security , and then click Remote A uthentication t o configu re Domi nion KX for remote authentication . The Remote Au thentication window appears: Figure 39 Remote Authentication Window 2. Select the option button of the remote authent[...]

42 D OMINION KX U SER M ANUAL Implementing RADIUS Remote Authentication Microsoft Active Directory can b e us ed as source information for RADIUS authentication by installing the Windows ser ver compone nt Internet Au thentication Server . If you choose RADIUS aut hentication protocol , com plete the RADUIS fields as follows: − Authentication Typ[...]

C HAPTER 4: A DMINISTRATIVE F UNCTI ONS 43 Dominion KX sends the following RADI US attributes to the RADIUS se rver with each accounting request: A TTRIBUTE D ATA SESSION-TYPE Either START (1) for log in or ST OP (2) for log out. SESSION-ID A string cont aining a uni que session nam e. The name is in the format of “<NA S-IDENIFIER>:<user[...]

44 D OMINION KX U SER M ANUAL Forced User Logoff To manually log off a user, select that user in the user tree. Right-click on the user icon and select Logoff User. Figure 41 Logoff User Menu, access ed by Right-clicking on User icon Reboot Dominion KX On the Setup m enu, click Reboot Device to reboot y our Domi nion KX unit whe n in Domi nion KX M[...]

C HAPTER 4: A DMINISTRATIVE F UNCTI ONS 45 Time and Date Use this window to set Dominion KX’s internal clock that timestamps all logged events. 1. On the Setup menu, click Configurat ion , and then click Time/Date . The Time and Date wind ow appears. Figure 43 Time and Date Window On the top-left, you will find the current time and date of your D[...]

46 D OMINION KX U SER M ANUAL[...]

C HAPTER 5: L OCAL C ONSOLE P ORT A CCESS 47 47 Chapter 5: Local Console Port Access Local Port Functionality When you are located at the server rack, Dominio n KX provides standard KVM switch functionality via its Local Console Ports, whic h features an O n-Screen Displ ay (OSD) for quick, conve nient switching betwee n servers. The Domini on KX L[...]

48 D OMINION KX U SER M ANUAL Selecting Servers Accessing the OSD To select a server for controlling at the Loca l Console Port, access the OSD: • If you are presently logged ou t o f the Local Console Port: Type a valid username and passw ord, and the OSD appears. • If a server is presently already selected: Press the OSD “Hot Key” < Sc[...]

C HAPTER 5: L OCAL C ONSOLE P ORT A CCESS 49 49 Local Port Administration Dominion KX should ideal ly be managed via Domini on KX Manager (see Chapter 4: Administrative Functions , La unching Dominion KX Manager ). However, t he Domini on KX Local Co nsole Port provid es access to select administrative functions. Only us ers with administrative pri[...]

50 D OMINION KX U SER M ANUAL Change Network Settings 1. Log o n to Domi nion KX as a user with admini strative privileges, and press < F5 > to activate the Administrative Menu . 2. Select Option 3, Network Se ttings . The Network Settin gs menu appears. Figure 49 Network Settings Menu 3. Use the <  > and <  > keys to naviga[...]

A PPENDIX A: S PECIFI CATIONS 51 51 Appendix A: Specifications Digital KVM Switches P ART N UMBER P RODUCT W EIGHT P RODUCT D IMENSIONS (W X D X H) S HIPPING W EIGHT S HIPPING D IMENSIONS (W X D X H) DKX116 8. 65lb 3.92kg 17.3” x 11.4” x 1.75 ” 439.41m m x 289.56m m x 44.44mm 14.55 lbs 6.59kg 22” x 16.6” x 6.5” 558.8mm x 421.64mm x 165.[...]

52 D OMINION KX U SER M ANUAL TCP Ports Used • HTTP, Port 8 0 (optional) – All requests received by Dominion KX via HTTP (port 80) are automatically forwarded to HTTPS for complete security. Dominion KX responds to Port 80 for user convenience, relieving users from having to exp licitly type “Https://” in the URL field to access Dominion KX[...]

A PPENDIX B: F REQUENTLY A SKED Q UESTIONS 53 Appendix B: Frequent ly Asked Questions General Questions Q UESTION A NSWER What is Dom inion KX? Dominion KX is a digital KVM (keyboard / video / mou se) switch that enables IT administrators to access a nd control 16 or 32 servers over the network with BIOS-level functionality. Do minion KX is complet[...]

54 D OMINION KX U SER M ANUAL Q UESTION A NSWER In order to acc ess Dominion K X from a client, what hardware, software, or ne twork configuratio n is requi red? Because Dominion KX is completely Web-accessible; it does not require proprietary software to be installed on clients used for access. (Although an optional installed clien t is provided i[...]

A PPENDIX B: F REQUENTLY A SKED Q UESTIONS 55 Ethernet Networking Q UESTION A NSWER How much bandwi dth does Dominion K X require ? Dominion KX offers integrated IP-Reach™ technolog y – the very best video compression availa ble. Rar itan has received num e rous technical awards confirming its high video quality transmissions and th e low bandw[...]

56 D OMINION KX U SER M ANUAL Q UESTION A NSWER Can I use Dominion K X with a VPN? Yes. Domi nion KX uses standa rd Interne t technologies from Laye r 1 through Layer 4. Traffic ca n be easily t unneled thr ough any st andard VPN. How many TCP p orts must be open o n my firewal l in order to ena ble network access to Dominion KX? Are these ports co[...]

A PPENDIX B: F REQUENTLY A SKED Q UESTIONS 57 Servers Q UESTION A NSWER Does Domi nion KX depend on a Wind ows server to ope rate? Absolutely not. Because you depe nd on your KVM infrastructure to always be available in any scenario wh atsoever (as you wi ll likely need to use your KVM infrastr ucture to fix problem s), Domini on KX is designed to [...]

58 D OMINION KX U SER M ANUAL Installation Q UESTION A NSWER Besides the unit itself, what do I need to order from Raritan to install Dominion K X? For each server that you wish to connect to Dom inion KX, you will require a com puter interface m odule (CIM ), a very s mall dongle that connects directly to the keyboard, vid eo, and mouse ports of y[...]

A PPENDIX B: F REQUENTLY A SKED Q UESTIONS 59 Local Port Q UESTION A NSWER Can I access my servers directly from the rack ? Yes, at the ra ck Dominion KX functions just like a t r adit ional KVM switch – allo wing you t o control up to 32 servers using a singl e keyboard, mouse, and m onitor. When I am using the l ocal port, do I prevent ot her u[...]

60 D OMINION KX U SER M ANUAL Power Control Q UESTION A NSWER What type of powe r control capabilities does Dominion KX offer ? Because Dominion KX enables you to remotely manage servers; it also incorporates the critical functio nality of hard power control to servers. Instead of using a third- party tool for power cont rol (likely with lower secu[...]

A PPENDIX B: F REQUENTLY A SKED Q UESTIONS 61 Scalability Q UESTION A NSWER How do I connect multiple Dominion K X devices together into one so lution? Multiple Dominion KX un its do not need to be physically connected together. Inste ad, each Dom i nion KX unit connects t o the network, a nd they automatically work together as a single solution: I[...]

62 D OMINION KX U SER M ANUAL Security Q UESTION A NSWER What kind of encryption does Domi nion KX use? Dominion KX utilizes industry-standard (and extremely secure) 128-bit RC4 encryption, both in its SSL comm unications as well as its own data stream. Literally no data is transmitted between remote clients and Dominion KX that is not completely s[...]

A PPENDIX B: F REQUENTLY A SKED Q UESTIONS 63 Miscellaneous Q UESTION A NSWER What is Dom inion KX’s default IP address ? 192.168.0.192 What is Dom inion KX’s default use rname and password ? For the highest level of security, Raritan highly recommen ds that users reconfigure th eir Dominion K X default adm inistrative username an d password of[...]

64 D OMINION KX U SER M ANUAL 255-80-6040[...]