Black Box IT Pro LNA1000A User manual

Black Box® IT Pro™
Powered by Nitix™
OCTOBER 2004
LNA1000A
Order toll-free in the U.S.: Call 877-877-BBOX (outside U.S. call 724-746-5500)
FREE technical support, 24 hours a day, 7 days a week: Call 724-746-5500 or fax [phone]
Mailing Address: Black Box Corporation, 1000 Park Drive, Lawrence, PA 15055-1018
Web site: www.blackbox.com • E-mail: [email protected]
CUSTOMER
SUPPORT
INFORMATION

This device complies with IEC60950 (1999) 3rd Edition, CSA C22.2 No. 60950-
00/UL 60950 (2000) 3rd Edition.
The Black Box® IT Pro™ meets Class B requirements.
FEDERAL COMMUNICATIONS COMMISSION and CANADIAN
DEPARTMENT OF COMMUNICATIONS RADIO FREQUENCY
INTERFERENCE STATEMENT
Class B Digital Device. This equipment has been tested and found to comply
with the limits for a Class B computing device pursuant to Part 15 of the FCC
Rules. These limits are designed to provide reasonable protection against
harmful interference in a residential installation. However, there is no guarantee
that interference will not occur in a particular installation. This equipment
generates, uses, and can radiate radio frequency energy, and, if not installed and
used in accordance with the instructions, may cause harmful interference to radio
communications. If this equipment does cause harmful interference to radio or
telephone reception, which can be determined by turning the equipment off and
on, the user is encouraged to try to correct the interference by one of the
following measures:
• Reorient or relocate the receiving antenna.
• Increase the separation between the equipment and receiver.
• Connect the equipment into an outlet on a circuit different from that to
which the receiver is connected.
• Consult an experienced radio/TV technician for help.
Caution:
Changes or modifications not expressly approved by the party responsible
for compliance could void the user's authority to operate the equipment.
To meet FCC requirements, shielded cables and power cords are required to
connect this device to a personal computer or other Class B certified device.
This digital apparatus does not exceed the Class B limits for radio noise emission
from digital apparatus set out in the Radio Interference Regulation of the
Canadian Department of Communications.
Le présent appareil numérique n'émet pas de bruits radioélectriques dépassant les
limites applicables aux appareils numériques de la classe B prescrites dans le
Règlement sur le brouillage radioélectrique publié par le ministère des
Communications du Canada.

Operating Conditions
Black Box® IT Pro™:
• 100V – 240VAC / 1.5A
• 50Hz - 60Hz
• 0 to 35 degrees Celsius (41° to 95° F)
• 10% – 80% Relative Humidity
Changes or modifications not expressly approved by Black Box could void the
user's authority to operate the equipment.
Publication Date:October 2004
Technical Support
If you need technical support, please contact Black Box.

Technical Support 2
Chapter 1 Quick Start 3
Step 1: Connecting your Black Box® IT Pro™ 3
Step 2: Configuring your system 4
Step 3: Manually Setting the IP Address 5
Step 4: Configuring your desktop 6
Step 5: Connecting to WebConfig 7
Step 6: Configuring your Internet connection 9
Chapter 2 First-time Nitix Setup - Black Box®
IT Pro™ 11
Black Box® IT Pro™ Components 11
Meet Your Black Box® IT Pro™ 12
Connecting the Power 13
Ethernet Connections 14
Connecting Ethernet Port 0 15
Connecting LAN 2 and LAN 3 16
Connecting an External Dial-up Modem 16
Configuring Your System 17
Manually Setting the IP Address 18
Chapter 3 Connecting to WebConfig 19
What is WebConfig? 19
Secure WebConfig 19
Configuring TCP/IP 20
Creating an Administrator Account 31
Software Activation Keys 33
System Status Screen 34
Notices Box 40

Chapter 4 Configuring Nitix 43
Proceeding with Configuration 43
Configuring General Network Settings 43
Configuring Advanced Network Settings 45
Network Devices 46
Network Routes 48
Network Configuration Scenarios 50
Configuring your Internet Connection 53
Chapter 5 Client Access Licenses 57
Client Access Licensing Requirements 57
License Information 57
Chapter 6 DoubleVision 59
What is DoubleVision? 59
Modem Connections 60
Chapter 7 User & Team Management 61
Service Integration 61
User Accounts 63
Modifying User Email Settings 70
Team Accounts 72
Password Policy 76
Chapter 8 File Services 81
File Sharing Services 81
Configuring File Services 82
Access Control Lists 84

Chapter 9 Disk Quotas 91
Setting Default Disk Quota Values 91
Setting Individual User Disk Quotas 92
Quota Limit 93
Chapter 10 NT Domain Services 95
What is a Windows NT Domain Member? 95
Configuring the Domain Member 95
What is a Domain Controller? 97
Configuring the Domain Controller 97
Joining Windows Systems to a Domain 99
File Mounting/Drive Mapping 105
Logon Scripts 106
Automated Drive Mapping 107
Workstation Administrative Rights 107
Chapter 11 Print Services 109
Nitix Print Services 109
Configuring Print Services 109
Configuring your Workstation 110
Chapter 12 Email Services 113
Components of the Email System 113
Configuring Email Service 115
Clearing the Email Queue 118
Configuring Email Aliases 118
Configuring DNS Records 122
Configuring Email Clients 123
Advanced Email Settings 125

LDAP Server 126
Chapter 13 WebMail 129
WebMail Server 129
Enabling WebMail Server 129
Accessing WebMail 131
Configuring WebMail 135
Composing an Email Message 136
Opening a Received Message 137
Replying to a Message 138
Search Function 138
Address Book 140
Calendar 141
Tasks 143
Notes 145
Mail Filters 145
Chapter 14 Web Services 149
Web Server 149
Master Web Server 149
Virtual Web Servers 153
Hosting Multiple Web Sites 155
Secure Web Services 156
SSL Certificate 156
Web Caching 161
Chapter 15 Web Filtering 163
Positive Web Filtering 163
Enabling the Web Filter 163
Providing Full Internet Access 164

Adding Permitted Websites 165
Accepting Access Requests 165
Denying Access Requests 166
Entering Access Requests 167
Chapter 16 FTP Services 169
FTP Server 169
Anonymous FTP Server 169
Enabling the FTP Server 170
Enabling FTP Access 171
User vs. Team FTP Access 171
Chapter 17 Software Update 173
Software Updates 173
Upgrading Nitix 173
Chapter 18 TunnelVision 177
Private Networks 177
Virtual Private Networks 177
VPN Network Topologies 178
How TunnelVision Works 181
Creating a VPN (server-to-server) 182
Configuring a TunnelVision Master Server 183
Configuring a TunnelVision Client 184
TunnelVision Status 186
The Idle Time-out 186
Chapter 19 IPsec 187
IPsec: An alternative to TunnelVision 187

Known Configurations 187
Adding an IPsec route 187
Adding an Anonymous Incoming Connection
IPsec route 189
Editing an IPsec route 190
Setting up Third Party IPsec Clients 192
Chapter 20 Remote Access Services 193
What is RAS? 193
PPTP - Client-to-Server VPN Service 194
Dial-in Service 199
Terminating a Connection from WebConfig 203
Chapter 21 Firewall Services 205
ICSA Firewall Security Compliance 205
Traffic Denied Inbound 205
Traffic Permitted Inbound 206
Traffic Permitted Outbound 206
Firewall Log 207
Chapter 22 Domain Name Services 209
What is DNS? 209
DNS Services 209
Configuring Public DNS 210
How the DNS System Works 211
Dynamic DNS 212
Manually Creating DNS Entries 212

Chapter 23 Workstation Viewer 217
What is the Workstation Viewer? 217
Accessing the Workstation Viewer 217
Virtual Network Computing (VNC) 218
Configuring VNC 218
Chapter 24 FastForward 221
What is FastForward? 221
Introduction to TCP/IP 221
Proxy Servers 223
Configuring FastForward 225
Forwarding Scenarios 227
Multiple Static IP Addresses 228
Common Port Numbers 228
Troubleshooting FastForward 229
Chapter 25 MySQL Server 231
What is the MySQL Server? 231
What is phpMyAdmin? 231
Managing Databases in phpMyAdmin 232
Deleting Database Tables 236
Setting up Windows for MySQL Access 236
What is a Dynamic Web Site? 240
Chapter 26 Hardware Components
Reporting 241
Hardware Components Reporting 241

Chapter 27 Log Messages 243
Accessing Log Messages 243
Customizing Message Display 244
Firewall Log 244
Chapter 28 Network File System 247
What is NFS? 247
Installing and Configuring ugidd 247
Mounting an NFS directory 248
Unmounting an NFS Directory 248
Chapter 29 rsync 249
What is rsync? 249
Using rsync 249
Chapter 30 ExchangeIt! 251
ExchangeIt! Overview 251
ExchangeIt! Server Configuration 251
Outlook Configuration 255
Using ExchangeIt! 267
Appendums
Licensing 271
Adrian Sun License 277
Apache Public License 279
Apple Public Source License 281
The “Artistic License” 289
Australian National University License 293

BSD License 295
Dazuko License 297
Eric Rosenquist License 299
Caldera Systems License 301
Carnegie Mellon University License 303
Gregory M. Christy License 305
GNU General Public License 307
GNU Library General Public License 313
GNU Lesser General Public License 323
HighPoint License 333
Internet Software Consortium License 335
LILO License 337
Linux-PAM License 339
mod_auth_pam License 341
mod_ssl License 343
NVIDIA License 345
OpenLDAP Public License 349
OpenSSL License 351
OSSP Project License 353
The PHP License, version 2.02 355
The PHP License, version 3.0 357
SSLeay License 359
Strace License 361
Sun Microsystems License 363
Rick R. Kaseguma License 365
RSA License 367
The Regents of the University of California
License 369
University of Chicago License 371
University of Michigan License 373
University of Utah and the Regents of the
University of California License 375
University of Washington’s Free Fork
License 377

VPB Software License 379
Zend Engine License, version 2.00 381
Zlib License 383
Glossary 385

Black Box® IT Pro™User Manual 3
Chapter 1 Quick Start
This chapter provides the basic information required for a qualified administrator to config-
ure the Black Box® IT Pro™. For more in-depth information, please skip to Chapter 2:
First-time Nitix Setup.
Step 1: Connecting your Black Box® IT Pro™
Please Note: Skip (D) if your office is already connected to the Internet.
Please Note: For a diagram of the server’s physical features, see Chapter 2: First-time Nitix Setup.
A. Ensure that the Black Box® IT Pro™ has adequate ventilation. Place the back of the
unit at least one to two feet (12” - 24”) away from the wall. Do not block ventilation
holes on the unit top and sides.
B. To plug in the Black Box® IT Pro™:
i.) Connect one end of the power cord into the DC 12V input socket (located on the
back of the unit).
ii.) Connect the other end of the power cord into a standard 115 Volt AC
(North America) or 220/240 Volt AC (Europe) power outlet.
C. To connect to your Local Area Network (LAN):
i.) Connect one end of a category 5 or higher Ethernet cable into LAN 1
(located on the back of the unit).
ii.) Connect the other end of the cable into your Ethernet hub.
D. If you are using a high-speed cable modem or a DSL modem:
i.) Connect one end of a category 5 or higher Ethernet cable into LAN 2
(located on the back of the unit)
ii.) Connect the other end of the cable into your cable modem or DSL modem.
E. Connect a VGA monitor and PS/2 style keyboard to the appropriate connectors at the
rear of the unit.

Step 2: Configuring your system
Black Box® IT Pro™User Manual 4
Step 2: Configuring your system
A. Turn on the main power switch.
B. When the system boots, the Nitix boot screen will load. When it has loaded, the fol-
lowing prompt will appear on your monitor: Press ENTER to begin.
C. Press <Enter>. A Configuration screen similar to the following will appear:
Please Note:A red warning box may appear advising you to set up your server using Nitix’s web-
based configuration screen. Press <Enter> to continue.
D. Take note of the display’s Settings and Status boxes. These display various informa-
tion about the server.
E. Take note of the IP address shown in the Status box. This is the LAN IP address of the
server.
The Default IP address for the IT Pro™ is 192.168.168.1. You will need this IP
address to connect to finish the configuration of your server.
Please Note:In the event that the server is unable to detect an appropriate IP address for your
LAN, or to change the IP address, see Step 3: Manually Setting the IP Address.
F. You are ready to proceed with Step 4: Configuring Your Desktop when an IP address
appears in the console’s Status box.

Black Box® IT Pro™User Manual 5
Quick Start
Step 3: Manually Setting the IP Address
Please Note: Skip this step if Nitix automatically selected an IP address for you, and the address is
acceptable.
Follow these steps if your Black Box® IT Pro™ is unable to automatically select an IP
address (the console’s Status box continues to read Choosing Address) or if you want to
change the chosen address:
A. Select IP Address from the Main Menu box on the Configuration Screen (see screen
shot in Step 2).
B. You will be prompted to enter a new IP address. Enter the new IP address and press
<Enter>.
C. Confirm the new IP address by pressing <Y>.
D. You can turn on or off the DHCP server (which automatically assigns IP addresses to
the workstations connected to your local network). Unless you have some other server
providing DHCP services, it is recommended that you turn DHCP on. To turn DHCP
on, select DHCP server from the Main Menu on the Configuration Screen - if it says,
“The DHCP server is currently DISABLED”, then press <Y> to enable the DHCP
server. The DHCP server is now on.

Quick Start
Black Box® IT Pro™User Manual 6
Step 4: Configuring your desktop
Please Note: Desktop displays may vary according to Windows version and operating system.
A. In Windows (on your workstation), select Start > Settings > Control Panel.
B. Select Network from the list. The Network screen displays:
C. If TCP/IP does not display in the installed components list:
i.) Click on the Add button. The Select Network Component Type screen displays.
ii.) Select Protocol from the list. Click on the Add button. The Select Network
Protocol screen displays.
iii.) Select Microsoft in the Manufacturers section of the screen. Select TCP/IP in the
Network Protocols section of the screen. Click on the OK button. TCP/IP should now
display on the Network screen.
D. Select TCP/IP from the installed components list on the Network screen. Click on the
Properties button. The TCP/IP Properties screen displays.
E. Click on the IP Address tab. Select Obtain an IP address automatically.
F. To configure DNS settings:
i.) Click on the DNS tab. Select Enable DNS.

Black Box® IT Pro™User Manual 7
Quick Start
ii.) Select all entries in the DNS Server Search Order section of the screen and click
on the Remove button.
iii.) Select all entries in the Domain Suffix Search Order section of the screen and
click on the Remove button.
iv.) Select Disable DNS.
G. Click on the Gateway tab. Select any entries in the Installed gateways section of the
screen and click on the Remove button.
H. Click on the WINS Configuration tab. Select all entries in the WINS Server Search
Order section of the screen and click on the Remove button. Select Use DHCP for
WINS Resolution.
I. Click on the OK button.
J. Reboot your computer.
Step 5: Connecting to WebConfig
A. Open an Internet browser on your workstation. Newer versions of Netscape or
Microsoft browsers are recommended.
B. Read the IP address from the Status box on the Configuration screen on the console.
For demonstration purposes, we will use the following IP address: 192.168.0.1
C. Type https://192.168.0.1:8043 into the browser's address bar. Press <Enter> on your
keyboard. The Create Administrator Account page displays:

Quick Start
Black Box® IT Pro™User Manual 8
D. Type in the following information:
i.) a User ID. The default User ID is root - you can use this name or you can create a
new User ID by typing over the existing text.
ii.) the administrator's full name.
iii.) a password. Retype the password to ensure it was typed properly.
iv.) your organization's registered Internet domain name (e.g. example.com). If you
do not have a registered domain name, leave the default domain name.
v.) your Software Activation Key.
E. Click on the Save Changes button. This will take you directly to Nitix’s main Web-
Config screen:

Black Box® IT Pro™User Manual 9
Quick Start
Step 6: Configuring your Internet connection
Please Note: If the Internet Status option on the System Status page has a green light, you do not have
to perform these steps.
I. CABLE MODEM or DSL MODEM (not requiring Payee protocol)
If your cable modem or DSL modem does not configure automatically (i.e. the Internet Sta-
tus option does not have a green light), refer to Chapter 4: Advanced Network Settings for
information on how to set up an IP address and default gateway using data provided by your
Internet Service Provider (ISP).
II. LEASED LINE CONNECTION
Please refer to the section on Configuring a Leased Line Connection in Chapter 5: Configur-
ing Nitix for full instructions.
III. DSL MODEM (requiring Payee protocol)
A. From the Network Setup menu on the System Status page, select Dial-up.
B. The Dial-up Networking Setup page displays. Click on the appropriate ADSL Action
button.
C. On the screen that displays:
i.) type in your account user name (provided by your ISP).
ii.) type in your account password. Retype this password to ensure it was typed
properly.
iii.) select Yes to enable the DSL connection.
D. Click the Save Changes button.