Black Box ServSwitch DTX Control User manual

Doc. No. 590-748-501D
Customer Support Information:
For FREE Technical Support 24 hours a day, 7 days a week, call 724-746-5500 or fax [phone]
Mailing address: Black Box Corporation, 1000 Park Dr., Lawrence, PA15055-1018
World-Wide Web: www.blackbox.com • Email: [email protected]
© Copyright 2010. Black Box Corporation.All rights reserved.
April 2010
TM

SERVSWITCH DTX™ CONTROL INSTALLER/USER GUIDE
ServSwitch DTX™ Control
User Guide
I

SERVSWITCH™ FAMILY
Instructions
This symbol is intended to alert the user to the presence of important
operating and maintenance (servicing) instructions in the literature
accompanying the appliance.
II

SERVSWITCH DTX™ CONTROL INSTALLER/USER GUIDE
European Union Notification
WARNING: This is a class A product. In a domestic environment this product may cause radio
interference in which case the user may be required to take adequate measures.
USA Notification
WARNING: Changes or modifications to this unit not expressly approved by the party
responsible for compliance could void the user’s authority to operate the equipment.
NOTE: This equipment has been tested and found to comply with the limits for a Class A digital
device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable
protection against harmful interference when the equipment is operated in a commercial
environment. This equipment generates, uses and can radiate radio frequency energy and, if
not installed and used in accordance with the instruction manual, may cause harmful
interference to radio communications. Operation of this equipment in a residential area is likely
to cause harmful interference, in which case the user will be required to correct the interference
at his/her own expense.
Canadian Notification
This Class A digital apparatus complies with Canadian ICES-003.
Cet appareil numérique de la classe A est conforme à la norme NMB-003 du Canada.
Japanese Notification
Korean Notification
III

SERVSWITCH™ FAMILY
Welcome to the ServSwitch™ Family!
Thank you for purchasing a BLACK BOX®ServSwitch DTX™ Control
appliance! We appreciate your business, and we think you’ll appreciate
the many ways that your new DTX Control appliance will save you
money, time, and effort. The BLACK BOX ServSwitch DTX Extender
system, which includes the ServSwitch DTX Control appliance, is a
secure, web browser-based, centralized enterprise management solution
that allows users to remotely manage and monitor multiple ServSwitch
DTX Extender systems. Each ServSwitch DTX Extender system allows
desktop users access a full computer experience from anywhere on the
corporate TCP/IP network, while maintaining the computers securely
housed in a corporate data center. This desktop experience includes
access for the desktop user to keyboard, mouse, both digital and analog
video, and audio devices.
This solution can be deployed as a point-to-point extender system or may
over-laid on the standard 100 Mbps/1 Gbps TCP/IP network.
The ServSwitch™ family from BLACK BOX—the one-stop answer for
all your KVM switching needs!
*
This manual will tell you all about your new ServSwitch DTX™ Control
appliance, including how to install, operate and troubleshoot it. For an
introduction to the ServSwitch DTX Control appliance, see Chapter 2.
IV

TABLEOFCONTENTS
Table of Contents
Appendix A: Technical Specifications 1
2. Product Overview 3
2.1 Introduction 3
2.2 Features and benefits 3
2.3 System Components 4
2.4 Upgrading the DTXControl Software 5
2.5 Safety precautions 5
3. Installation and Setup 9
3.1 Installing the Appliance 9
3.2 Launching the DTX Control Appliance Web Interface 11
3.3 Configuring DTX Control Servers 14
3.4 Backing up and Restoring Hub Servers Manually 18
3.5 Spoke Servers 18
3.6 Replication 22
3.7 Next Steps 25
4. Units View Windows 27
4.1 Types of Units View Windows 27
4.2 Showing and Hiding Units 28
4.3 Units View Windows Fields 29
4.4 Multiple Unit Operations from a Units View Window 30
4.5 Unit Overview Windows 31
4.6 Unit Status Window 32
5. Managing Units 33
5.1 Using the Units Tab in the Explorer Window 33
5.2 The Units All Window 33
5.3 The Unit Overview Window 37
5.4 Departments and Locations Windows 44
6. Unit Sessions and Connections 49
6.1 Active Sessions 49
7. Grouping Units 51
7.1 Site, Department and Location Groups 51
7.2 Custom Fields 54
7.3 Unit Groups 54
8. Authentication Services 63
V

ServSwitch DTX™ Control INSTALLER/USER GUIDE
8.1 Supported Authentication Services 63
8.2 RSA SecurID external authentication service 87
8.3 User Authentication Services Window 89
9. Managing User Accounts 91
9.1 User Accounts Windows 91
9.2 Adding User Accounts 93
9.3 Deleting User Accounts 95
9.4 Unlocking User Accounts 96
9.5 Resetting a User Account Password 96
9.6 Changing User Account Properties 96
9.7 User Access Rights 101
10. User Groups 103
10.1 Built-in User Groups 104
10.2 Adding User-defined User Groups 106
10.3 Deleting User-defined User Groups 108
10.4 User Group Properties 109
10.5 Changing User Group Members 109
10.6 User Group Access Rights 110
11. Events and Event Logs 113
11.1 Email Notifications 113
11.2 Changing the Event Log Retention Period 116
VI

CHAPTER APPENDIX A: TECHNICAL SPECIFICATIONS
Appendix A: Technical Specifications
Table A.1: DTX Control Appliance Technical Specifications
Network Connection
Number 2
Type Ethernet, 10BaseT, 100BaseT, GigE
Connector RJ-45
Serial Port
Number 1
Type RS-232 serial
Connector DB9 male
Mechanical
H x W x D 4.3 x 42.7 x 35.6 cm (1.7 x 16.8 x 14 in), 1 U
form factor
Weight 5.9 kg (13 lb)
Power
AC Input Voltage 100 to 240 VAC
Rated Input Current 4A maximum
Rated Input Frequency 50 to 60 Hz
Rated Output Power 260 W maximum
Rated Output Voltages +3.3 V (15 A), +5 V (25 A), +12V (18A), -12 V
(1A)
BTU Rate 1400 Bus/hour (for rated output power of 260
W)
Environmental
Temperature 0° to 35° Celsius (32° to 95° Fahrenheit)
operating
Humidity 10 to 90% noncondensing operating
1

SERVSWITCH DTX™ CONTROL INSTALLER/USER GUIDE
Safety and EMC Approvals
and Markings
USA (UL, FCC), Canada (cUL), Germany
(TUV), European Union (CE), Japan (VCCI),
Russia (GOST), Korea (MIC) and Australia
(C-Tick)
NOTE: Safety certifications and EMC certifications for this product are obtained
under one or more of the following designations: CMN (Certification Model
Number), MPN (Manufacturer’s Part Number) or Sales Level Model designation.
The designation that is referenced in the EMC and/or safety reports and
certificates are printed on the label applied to this product.
2

CHAPTER 2. PRODUCT OVERVIEW
2. Product Overview
2.1 Introduction
The DTX Control appliance is a secure, web browser-based, centralized enterprise
management solution that allows users to remotely manage and monitor multiple DTX
Extender systems. The DTX Extender system, which includes a transmitter and a user
station, provides users with a full computer desktop experience from anywhere on the
corporate TCP/IP network, while maintaining the computers securely housed in a corporate
data center. The addition of the DTX Control appliance allows the user stations and
transmitters that comprise the DTX Extender system to operate in Desktop Mode. This mode
allows a user to log in to any DTX user station and the system will connect automatically to
the transmitter that has been assigned to that user. Through Desktop Mode, the DTX Control
appliance allows administrators to remotely manage and monitor the networks of user
stations and transmitters that comprise the DTX Extender system.
NOTE: There are several types of DTXuser stations and transmitters, but not all of them can communicate
across platforms. For example, the DTX 5000 user station can only communicate with its corresponding
DTX 5000-T transmitter. However, the DTX 5001 and 5002 user stations and their corresponding
transmitters can communicate across both platforms. For more information on DTXuser stations and
transmitters, see the ServSwitch DTX 500x User Guide.
2.2 Features and benefits
Web-based access and control
As a web browser-based management solution, the DTX 5000-CTLManagement Appliance
provides the operations, administration and maintenance interface for the DTX Extender
system. It also manages authentication, authorization, initiation and removal of media
sessions between the user station and transmitter. The DTX Control appliance provides a
centralized database for storing configuration, user, unit and system information allowing
administrators to add, remove, delete and change settings for managed appliances and users.
In addition, the DTX Control appliance enables authentication, access control, logging events
and monitoring of target computers.
Security
Secure Socket Layer (SSL) encryption is used to encrypt DTX Control appliance system
data. Users are authenticated using the DTX Control appliance internal database or one of the
external authentication methods available. See "Supported Authentication Services" on page
63 for more information. For management functions, the DTX Control appliance uses
3

SERVSWITCH DTX™ CONTROL INSTALLER/USER GUIDE
HTTPS (Hypertext Transfer Protocol with SSL encryption) to interact with the DTX
Extender system.
NOTE: To access the DTX Control appliance through a firewall, you must ensure that the firewall uses the
default HTTPS port 443.
DTX extender system support
The transmitter connects externally to the video, audio and USB ports of the target computer
and is attached directly to the target computer. It captures, compresses and encrypts the
computer’s media stream and transmits it to the DTX user station over a standard TCP/IP
network. The user station enables the desktop user’s keyboard, video, mouse and audio
devices to connect to the DTX Extender system.
2.3 System Components
The DTXControl software system contains the following components.
DTXControl software
The DTX Control software resides on the DTXControl server (hub or spoke) and provides
a web gateway and services for managing units (appliances and target devices) using a web
browser. The gateway allows for web browser access. Administrators and users may
connect to the DTX Control server from DTXControl software clients and use the DTX
Control Explorer windows to communicate with the system.
DTXControl server
The DTXControl server contains the DTXControl software. The server provides a
centralized database for storing configuration, user, unit and system information. It also
provides services for authentication, access control and logging events.
You may configure one or more spoke (backup) servers in addition to the hub server. The
hub server is responsible for maintaining the master copy of the database in a DTX Control
software system. Only one server in a DTXControl software system may be configured as
the hub server.
Spoke servers perform database replication with the hub server. The hub server acts as the
coordinator for database replication between itself and all of the other spoke servers in a
DTX Control software system. A hub server and a spoke server both offer the same DTX
Control software functionality to a user. The distinction of hub or spoke refers only to the
database replication role that the server plays and not with the functionality that the server
provides. Adding one or more spoke servers to a DTX Control software system provides
redundancy.
4

CHAPTER 2. PRODUCT OVERVIEW
After the hub server and optional spoke server(s) are configured, you may create and
configure the type of access levels for users within your network environment. You may also
set up event logs to record full details of user access and other events.
DTX Control software client
A DTX Control software client is a computer with a web browser that can access the DTX
Control software installed on the DTX Control server.
2.4 Upgrading the DTXControl Software
When upgrading to a newer version of the DTXControl software, all DTX Control servers
should be upgraded at the same time. The DTX Control hub server should be upgraded first,
followed by each spoke server.
Before upgrading, a replication should be performed, then a backup immediately before and
after upgrading the DTXControl software (see "Backing up and Restoring Hub Servers
Manually" on page 18).
The firmware for the appliances may also need to be upgraded in order to support new
functionality in the DTX5000-CTLManagement Appliance. The DTX Control appliance
should work with the existing firmware revisions, but in cases where new functionality is not
supported until the firmware is upgraded, the DTX 5000-CTLManagement Appliance will
indicate this in the graphical user interface (GUI).
2.5 Safety precautions
To avoid potentially fatal shock hazard and possible damage to equipment, please observe the
following precautions:
• Do not use a 2-wire power cord in any product configuration.
• Test AC outlets at the target computer and monitor for proper polarity and grounding.
• Use only with grounded outlets.
NOTE: The AC inlet is the main power disconnect.
CAUTION: Failure to observe the precautions in this section may result in personal injury or damage to
equipment.
Observe the following general safety precautions when setting up and using BLACK BOX
equipment.
• Follow all cautions and instructions marked on the equipment.
• Follow all cautions and instructions in the installation documentation or on any
cautionary cards shipped with the product.
5

SERVSWITCH DTX™ CONTROL INSTALLER/USER GUIDE
• Do not push objects through the openings in the equipment. Dangerous voltages may be
present. Objects with conductive properties can cause fire, electric shock or damage to
the equipment.
• Do not make mechanical or electrical modifications to the equipment.
• Do not block or cover openings on the equipment.
• Choose a location that avoids excessive heat, direct sunlight, dust or chemical exposure,
all of which can cause the product to fail. For example, do not place a BLACK BOX
product near a radiator or heat register, which can cause overheating.
• Ensure that the voltage and frequency of the power source match the voltage and
frequency on the label on the equipment.
• AC power supplies have grounding-type three-wire power cords. Make sure the power
cords are plugged into single-phase power systems that have a neutral ground.
• Do not use household extension power cords with BLACK BOX equipment because
household extension cords are not designed for use with computer systems and do not
have overload protection.
• Ensure that air flow is sufficient to prevent extreme operating temperatures. Provide a
minimum space of 6 inches (15 cm) in front and back for adequate airflow.
• Keep power and interface cables clear of foot traffic. Route cables inside walls, under
the floor, through the ceiling or in protective channels or raceways.
• Route interface cables away from motors and other sources of magnetic or radio
frequency interference.
• Stay within specified cable length limitations.
• Leave enough space in front and back of the equipment to allow access for servicing.
When installing BLACK BOX equipment in a rack or cabinet, observe the following
precautions:
• Ensure that the floor’s surface is level.
• Load equipment starting at the bottom first and fill the rack or cabinet from the bottom to
the top.
• Exercise caution to ensure that the rack or cabinet does not tip during installation and
use an anti-tilt bar.
When using a desk or table, observe the following precautions:
• Choose a desk or table sturdy enough to hold the equipment.
6

CHAPTER 2. PRODUCT OVERVIEW
• Place the equipment so that at least 50% of the equipment is inside the table or desk’s
leg support area to avoid tipping of the table or desk.
Cabling installation, maintenance and safety tips
The following is a list of important safety considerations that should be reviewed prior to
installing or maintaining your cables:
• Maintain the twists of the pairs all the way to the point of termination, or no more that
one-half inch untwisted. Do not cut off more than one inch of jacket while terminating.
• If bending the cable is necessary, make it gradual with no bend sharper than a one inch
radius. Allowing the cable to be sharply bent or kinked can permanently damage the
cable’s interior.
• Dress the cables neatly with cable ties, using low to moderate pressure. Do not over
tighten ties.
• Cross-connect cables where necessary, using rated punch blocks, patch panels and
components. Do not splice or bridge cable at any point.
• Keep CAT 5 cable as far away as possible from potential sources of EMI, such as
electrical cables, transformers and light fixtures. Do not tie cables to electrical conduits
or lay cables on electrical fixtures.
• Always test every installed segment with a cable tester. “Toning” alone is not an
acceptable test.
• Always install jacks so as to prevent dust and other contaminants from settling on the
contacts. The contacts of the jack should face up on the flush mounted plates, or
left/right/down on surface mount boxes.
• Always leave extra slack on the cables, neatly coiled in the ceiling or nearest concealed
location. Leave at least five feet at the work outlet side and 10 feet at the patch panel
side.
• Choose either 568A or 568B wiring standard before beginning. Wire all jacks and patch
panels for the same wiring scheme. Do not mix 568A and 568B wiring in the same
installation.
• Always obey all local and national fire and building codes. Be sure to firestop all cables
that penetrate a firewall. Use plenum rated cable where it is required.
7

SERVSWITCH DTX™ CONTROL INSTALLER/USER GUIDE
8

CHAPTER 3. INSTALLATION AND SETUP
3. Installation and Setup
The following sections will help you install and set up your DTX Control appliance. Helpful
topics in this chapter include the following:
• "Installing the Appliance" on page 9
• "Launching the DTX Control Appliance Web Interface" on page 11
• "Replication" on page 22
• "Next Steps" on page 25
3.1 Installing the Appliance
Rack mounting the DTX Control Appliance
Rack mount safety considerations
• Elevated Ambient Temperature: If installed in a closed rack assembly, the operating
temperature of the rack environment may be greater than room ambient. Use care not to
exceed the rated maximum ambient temperature of the switch.
• Reduced Air Flow: Installation of the equipment in a rack should be such that the
amount of airflow required for safe operation of the equipment is not compromised.
• Mechanical Loading: Mounting of the equipment in the rack should be such that a
hazardous condition does not exist due to uneven mechanical loading.
• Circuit Overloading: Consideration should be given to the connection of the equipment
to the supply circuit and the effect that overloading of circuits might have on overcurrent
protection and supply wiring. Consider equipment nameplate ratings for maximum
current.
• Reliable Earthing: Reliable earthing of rack mounted equipment should be maintained.
Pay particular attention to supply connections other than direct connections to the branch
circuit (for example, use of power strips).
NOTE: The DTX Control appliance may be rack mounted in a 1U configuration.
Connecting the DTX Control appliance
A typical DTXControl configuration includes the appliance, transmitters and user stations
connected to the local area network (LAN). A terminal, or a computer running a terminal
emulation program, is connected to the serial port for configuring basic network settings. The
9

SERVSWITCH DTX™ CONTROL INSTALLER/USER GUIDE
DTX Control appliance, transmitters and user stations, as well as user accounts, are then
configured from the browser interface to the DTX Control appliance.
To connect the DTX Control appliance:
WARNING:To reduce the risk of electric shock or damage to your equipment:
- Do not disable the power cord grounding plug. The grounding plug is an important safety feature.
- Plug the power cord into a grounded (earthed) outlet that is easily accessible at all times.
- Disconnect the power from the target computer by unplugging the power cord from either the electrical
outlet or the target computer.
1. Attach one end of the supplied power cord into the back panel of the DTX Control
appliance and attach the other end to an appropriate AC power source. The DTX
Control appliance has a power control button on the front panel.
2. Connect the LAN Port 1 Ethernet port on the back panel of the DTX Control appliance
to the LAN to which the transmitters and user stations are connected using standard
UTP cables.
NOTE: The DTXuser stations and transmitters must be connected to LAN port 1. However, you can
access the DTX Control appliance using the browser on a computer connected to either LAN port 1 or LAN
port 2.
Configuring Network Settings
To assign an IP address to the DTX Control appliance, you must establish a connection to
the serial menu first, then use the options on the serial console menu to configure the network
settings for each of the LAN ports on the DTX Control appliance.
NOTE: If you are connecting to only one LAN, only LAN port 1 needs to be configured.
To configure the network settings of the DTX Control appliance:
1. Connect a terminal or a computer that is running a terminal emulation program to the
serial port on the back panel of the DTX Control appliance.
2. Start a session with the following port settings:
• Serial speed: 9600 bps
• Data length: 8 data bits
• Parity: None
• Stop Bits: 1
• Flow Control: None
3. Once a connection is established, a serial console menu appears.
4. Type 2 to configure any of the following network settings:
10

CHAPTER 3. INSTALLATION AND SETUP
• Set eth speed
• Choose using DHCP or defining an IP address
• Type subnet mask
• Type gateway IP address
• Select default gateway
• Define primary DNS and secondary DNS
NOTE: The IP address on LAN port 1 must not change during operation of the appliance. Always configure
LAN port 1 with a static IP address or, if using DHCP, ensure that the IP addresses are assigned with
unlimited lease times. There is no restriction on how LAN port 2 can be configured. It is also possible to
configure DNS on the DTX Control appliance if it is required for administrator access through a web browser.
NOTE: If DHCP is selected, the DTX Control appliance must be rebooted for the change to take effect.
5. Set the time and date on the serial menu.
6. Type 0and press Enter to exit.
3.2 Launching the DTX Control Appliance Web
Interface
The DTX Control appliance operates using default Internet Explorer settings. In the event
that the default Internet Explorer settings have been altered, SSL and Javascript must be
enabled to successfully access the DTX Control appliance.
To launch the DTX Control appliance web interface:
1. Launch Microsoft® Internet Explorer.
2. In the address field of the browser, enter the IP address assigned to the DTX Control
appliance LAN port 1. Use https://xxx.xx.xx.xx as the format.
NOTE: If DNS is enabled, the address is the fully qualified host name assigned to the DTX Control
appliance.
3. Press Enter. The DTX Control appliance login screen appears.
4. Enter the login username and password. The first time you access the DTX Control
appliance, enter admin as the username and Admin1 as the password. For security
reasons, you should change the default admin password. The admin account is
authorized to perform all configuration and access all managed devices and cannot be
removed or renamed. Click Login and the DTX Control Explorer window appears.
11

SERVSWITCH DTX™ CONTROL INSTALLER/USER GUIDE
The DTX Control Explorer window
Once a user has been logged in and authenticated, the Explorer window is displayed. From
the Explorer window, you can view, access and manage units and users via the DTX Control
appliance.
Figure 3-1. Explorer Window Areas
12

CHAPTER 3. INSTALLATION AND SETUP
Table 3-1. Explorer Windows Area Descriptions
Letter Description
A
Top option bar - Use the top option bar to log out of a software session, or to access
online help. The name of the logged in user is displayed on the left side of the top
option bar.
BTab bar - Use the tab bar to display and manage units, user accounts, system
settings and reports.
C
Top navigation bar - The options in the top navigation bar vary depending on the
active tab in the tab bar. Topics relevant to each selection display in the side
navigation bar.
DSide navigation bar - Use the side navigation bar to select system information to
display or edit in the contenarea.
EContent area - The information specified by the tab bar, top navigation bar and side
navigation bar selections is displayed and changed in the content area.
Using the side navigation bar
Use the side navigation bar to display windows or perform operations. The contents of the
side navigation bar vary, depending on the tab and top navigation bar options that are in use.
The arrows displayed in the side navigation bar indicate where sub-options are available.
You can display these items by clicking the main link. Where no arrow is displayed, clicking
the link brings you directly to the option you have selected.
Displaying pages
Multiple page windows contain menu options that may be used to navigate from one display
to another. You can click the Select All checkbox to select all items on a page. Enabling this
checkbox selects all the items listed on a page regardless of whether the entire page is visible.
However, for multi-page displays, items listed on other pages will not be included in the
selection. All screens that show lists, units, sessions and target computers automatically
refresh every 10 seconds.
Using keyboard commands
In addition to using a mouse, you can use keyboard commands to select and change items in
windows.
13