Dell Remote Console Switch User manual

Dell™ Remote Console
Switch
User's Guide

Notes, Cautions, and Warnings
NOTE: A NOTE indicates important information that helps you
make better use of your computer.
CAUTION: A CAUTION indicates potential damage to hardware or
loss of data if instructions are not followed.
WARNING: A WARNING indicates a potential for property damage,
personal injury, or death.
____________________
Information in this document is subject to change without notice.
© 2012 Dell Inc. All rights reserved.
Reproduction of these materials in any manner whatsoever without the written
permission of Dell Inc. is strictly forbidden.
Trademarks used in this text: Dell, the DELL logo, and PowerEdge are trademarks
of Dell Inc.; Avocent is a trademark or registered trademark of Avocent Corporation
or its affiliates in the U.S. and other countries.
Other trademarks and trade names may be used in this document to refer to either the
entities claiming the marks and names or their products. Dell Inc. disclaims any
proprietary interest in trademarks and trade names other than its own.
590-1021-501B
July 2012
Model 1082DS/2162DS/4322DS Remote Console Switch

Contentsxxx |xxxi
Contents
Product Overview 1
Features and Benefits 1
Reduce Cable Bulk 2
KVMSwitching Capabilities 2
Multiplatform Support 2
True Serial Capabilities 3
Local and Remote User Interfaces 3
Virtual Media and Smart Card-capable Switches 3
On-board Web Interface 4
Access the Switch Using a Standard TCP/IP Network 4
Encryption 4
Video 4
Flash Upgradeable 5
Tier Expansion 5
Avocent Management Software Plug-in 5
FIPS cryptographic module 5
Sample Configuration 7
Safety Precautions 8
General 9
LAN Options 10
Installation 13
RCS Quick Setup 13
Getting Started 15
Setting up Your Network 16
Rack Mounting the RCS 16
Rack Mounting Safety Considerations 16
Installing the Dell ReadyRails™ System 17

Contentsxxx |xxxii
Installing the RCS 22
Connecting the RCS Hardware 25
Connecting a SIP 29
Adding a Tiered Switch 31
Cascading with Legacy Switches 34
Adding a PEM (Optional) 36
Configuring the Remote Console Switch 38
Setting up the Built-in Web Server 38
Connecting to the OBWI Through a Firewall 38
Verifying the Connections 41
Rear Panel Ethernet Connection LEDs 41
Rear Panel Power Status LEDs 41
Adjusting Mouse Settings on Target Devices 42
Local and Remote Configuration 43
Local User Interface (UI) 43
Filtering 44
OBWI 45
Using the User Interfaces 47
Launching a Session 49
Scan Mode 50
Viewing System Information 51
RCS Tools 52
Rebooting the RCS 52
Upgrading RCS Firmware 52
Saving and Restoring RCS Configurations and RCS User
Databases 53
Network Settings 55
DNSSettings 56

Contentsxxx |xxxiii
NTP Settings 57
SNMP Settings 57
Auditing Event Settings 58
Setting Event Destinations 58
Ports - Configuring SIPs 59
Upgrading SIPs 59
Power Device Settings 60
Associated Target Servers and Power Outlets 61
Grouping Power Outlets 63
Default Outlet Names 64
Assigning an Outlet Name 65
Local Session Page on the Local Port 69
Local Port UI Settings 70
Modem Settings 71
Setup Settings - Port Security 72
Sessions 72
Configuring General Sessions 72
Configuring KVM Sessions 73
Configuring Local Virtual Media Sessions 73
Configuring Serial Sessions 77
Setting Up User Accounts 77
Managing Local Accounts 77
Access Levels 77
Avocent Management Software Device IP Addresses 79
LDAP 79
Override Admin 79
Active Sessions 80
Closing a Session 80

Contentsxxx |xxxiv
The Video Viewer Window 81
Changing the Toolbar 83
Launching a Session 84
Session Time-out 84
Window Size 85
Adjusting the View 85
Refreshing the Image 87
Video Settings 87
Additional Video Adjustment 87
Target Video Settings 89
Automatic Video Adjustment 89
Video Test Pattern 90
Vendor-specific Video Settings 90
Color Settings 90
Adjusting Color Depth 90
Contrast and Brightness 91
Noise Settings 91
Detection Thresholds 91
Mouse Settings 92
Adjusting Mouse Options 92
Cursor Type 92
Mouse Scaling 95
Mouse Alignment and Synchronization 95
Virtual Media 96
Requirements 96
Sharing and Preemption Considerations 97
Virtual Media Dialog Box 97
Opening a Virtual Media Session 98
Closing a Virtual Media Session 101
Smart Cards 102

Contentsxxx |xxxv
Keyboard Pass-through 103
Macros 104
Saving the View 104
Closing a Session 104
LDAP Feature for the RCS 105
The Structure of Active Directory 105
Domain Controller Computers 105
Object Classes 106
Attributes 107
Schema Extensions 107
Standard Schema versus Dell Extended Schema 108
Standard Installation 109
Configure the Override Admin Account 110
Configuring DNS Settings 110
Configuring the Network Time Protocol (NTP) Settings 112
Configuring the LDAP Authentication Parameters 112
Enabling LDAP Authentication 112
Entering Authentication Parameters - Operational Modes 115
Entering Extension Options - Active Directory LDAP 116
Entering Authentication Parameters - Standard LDAP 116
Entering Authentication Parameters - Custom IP Port
Assignments 117
Completing LDAP Configuration 118
Secondary LDAPSettings - Standard Configuration 119
Setting up the RCS for performing Standard LDAP
queries 119
Search Configuration Settings 120
Query Mode Selection Settings 121
Group Configuration Parameters 122
Secondary LDAP Settings - Active Directory Configuration124

Contentsxxx |xxxvi
LDAP SSL Certificates 127
Enabling SSL on a Domain Controller 128
Login Timeout 132
CA Certificate Information Display 133
Configuring Group Objects 134
Active Directory Object Overview for Standard Schema 137
Dell Extended Schema Active Directory Object Overview 139
Configuring Active Directory with Dell Schema Extensions to
Access Your RCS 143
Extending the Active Directory Schema (Optional) 143
Installing the Dell Extension to the Active Directory Users
and Computers Snap-In (Optional) 144
Opening the Active Directory Users and Computers Snap-
In 145
Adding Users and Privileges to Active Directory with Dell
Schema Extensions 145
Creating a SIP Object 145
Creating a Privilege Object 146
Using Dell Association Objects Syntax 147
Creating an Association Object 148
Adding Objects to an Association Object 148
Console Redirection Access Security 149
Using Active Directory to Log In to the RCS 150
Target Device Naming Requirements for LDAP
Implementation 151
Frequently Asked Questions 152
Appendix A: Terminal Operations 155
Console Boot Menu Options 155
Console Main Menu Options 156

Contentsxxx |xxxvii
Appendix B: Using SIPs 157
ACS Console Server Port Pinouts 157
Cisco Port Pinouts 158
Appendix C: MIB and SNMP Traps 159
Appendix D: Cable Pinouts Information 165
Modem Pinouts 165
Console/Setup Pinouts 166
Appendix E: UTP Cabling 167
UTP Copper Cabling 167
Wiring Standards 167
Cabling Installation, Maintenance, and Safety Tips 168
Appendix F: Sun Advanced Key Emulation 171
Appendix G: Technical Specifications 173
Appendix H: Technical Support 177

Contentsxxx |xxxviii

1
Product Overviewxxx |xxx1
Product Overview
The Dell 1082DS/2162DS/4322DS Remote Console Switch (RCS) digital
keyboard, video and mouse (KVM) over IP and serial console switches combine
analog and digital technology to provide flexible, centralized control of data
center servers, and to facilitate the operations, activation, and maintenance of
remote branch offices where trained operators may be unavailable. The IP-based
RCS gives you flexible target device management control and secure remote
access from anywhere at anytime through the RCS software or on-board web
interface (OBWI).
Features and Benefits
The RCS provides enterprise customers with the following features and options:
• significant reduction of cable volume
• Virtual Media (VM) capabilites, configurable for analog (local) or digital
(remote) connectivity
• smart card/Common Access Card (CAC) capability
• true serial capability through Secure Shell (SSH) and Telnet
• enhanced video resolution support, up to 1600 x 1200 or 1680 x 1050
(widescreen) native from target to remote
• optional dual power models for redundancy
• optional support for managing intelligent power devices
• dual independent local port video paths (dedicated to ACI)

2xxx |Product Overviewxxx
• dual stack IPv4 (DHCP) and IPv6 (DHCPv6 and stateless auto-
configuration) for simultaneous access
• accessibility to target devices across 10/100/1000BaseT LAN ports.
• a MODEM port that supports V.34, V.90 or V.92-compatible modems that
may be used to access the switch when an Ethernet connection is not
available
• FIPS support
Reduce Cable Bulk
With server densities continually increasing, cable bulk remains a major concern
for network administrators. The RCS significantly reduces KVM cable volume in
the rack by utilizing the innovative Server Interface Pod (SIP) modules and
single, industry-standard Unshielded Twisted Pair (UTP) cabling. This allows a
higher server density while providing greater airflow and cooling capacity.
KVMSwitching Capabilities
The RCS supports SIPs that are powered directly from the target device and
provide Keep Alive functionality when the switch is not powered. The SIPs with
CAT 5 design dramatically reduce cable clutter while providing optimal
resolution and video settings. The built-in memory of the SIPs simplifies
configuration by assigning and retaining unique device names and Electronic ID
(EID) numbers for each attached device.
PS/2 and USB SIPs are available allowing direct KVM connectivity to devices.
The USB2+CAC SIP is also available. The RCS is offered with 8, 16, or 32
Analog Rack Interface (ARI) ports for connecting SIPs. Utilizing the SIP, you
can attach additional switches to expand your RCS system. This flexibility
allows you to add capacity as your data center grows.
Multiplatform Support
The Dell SIPs are available for use with the RCS to support PS/2, USB, USB2,
and USB2+CAC device environments. Using the OBWI in conjunction with
these modules allows you to switch easily across platforms.

Product Overviewxxx |xxx3
Interoperability with Avocent® IQ Module Intelligent Cabling may also be used
to connect devices to the RCS. PS/2, USB, Sun®, and serial module options are
available. For more information, please refer to the appropriate Avocent
installer/user guide for your product or visit avocent.com/manuals for more
information..
True Serial Capabilities
The RCS supports SIPs that provide true serial capabilities through Telnet.
With a SIP, you can launch an SSH session or launch a serial viewer from the
OBWI to connect to serial targets that are connected to an RCS.
Local and Remote User Interfaces
You can use the local user interface (local UI) by connecting directly to the local
port to manage the RCS. You can also use the remote OBWI to manage your
switch. The OBWI is web browser based and is launched directly from the
switch, and any devices connected to the switch are automatically detected.
Virtual Media and Smart Card-capable Switches
The RCS allows you to view, move, or copy data located on virtual media to and
from any target device. You can manage remote systems more efficiently by
allowing operating system installation, operating system recovery, hard drive
recovery or duplication, BIOS updating, and target device backup.
The RCS also allows you to use smart cards in conjunction with your switch
system. Smart cards are pocket-sized cards that store and process information.
Smart cards such as the CAC can be used to store identification and
authentication to enable access to computers, networks, and secure rooms or
buildings.
Virtual media and a smart card reader can be connected directly to the USB
ports on the switch. In addition, virtual media and smart card readers may be
connected to any remote workstation that is running the remote OBWI, Dell
RCS software, or Avocent management software and is connected to the switch
using an Ethernet connection.

4xxx |Product Overviewxxx
NOTE: To open a virtual media or smart card session with a target device,
you must first connect the target device to a switch using a SIP.
On-board Web Interface
The OBWI provides similar management functions as the RCS software, but
does not require a software server or any installation. The OBWI is launched
directly from the switch, and any servers connected to the RCS are
automatically detected. You can use the OBWI to configure the RCS from a
web browser. Launch the Viewer from the OBWI to establish KVM and virtual
media sessions to target devices. The OBWI also supports LDAP
authentication, which allows permissions for multiple RCSs to be managed
through a single interface.
Access the Switch Using a Standard TCP/IP Network
The switch provides agentless remote control and access. No special software or
drivers are required on the attached servers or client.
NOTE: The client connects to the switch using an Internet browser.
You can access the switch and all attached systems via Ethernet or using a V.34,
V.90, or V.92 modem from a client. The clients can be located anywhere a valid
network connection exists.
Encryption
The RCS supports 128-bit SSL(ARCFOUR), as well as AES, DES, and 3DES
encryption of keyboard/mouse, video, and virtual media sessions.
Video
The RCS provides optimal resolution for analog VGA, SVGA, and XGA video.
You can achieve resolutions up to 1600 x 1200 or 1680 x 1050 (widescreen),
depending on the length of cable separating your switch and servers.

Product Overviewxxx |xxx5
Flash Upgradeable
Upgrade your RCS and SIPs at any time to ensure you are always running the
most current firmware version available. Flash Upgrades can be initiated through
the OBWI or the serial console. The RCS can be configured to perform
automatic firmware upgrades of SIPs. See "Upgrading RCS Firmware" on page
52 for more information.
Tier Expansion
The RCS features allow you to tier additional Dell RCSs from each of the
Analog Rack Interface (ARI) port on the switch. The tiered switches are
attached in the same manner as any device. This additional tier of units allows
you to attach up to 1024 servers in one system. See "Adding a Tiered Switch" on
page 31.
Avocent Management Software Plug-in
Avocent management software may be used with the switch to allow IT
administrators to remotely access, monitor, and control target devices on
multiple platforms through a single, web-based user interface. For more
information, see the Technical Bulletin for the Avocent management software.
FIPS cryptographic module
The RCS switches support FIPS 140-2 Level 1 cryptographic security
requirements. The FIPS mode of operation can be enabled or disabled via the
OBWI or local port and executed after a reboot. When FIPS is enabled, a reboot
of the switch requires approximately two additional minutes to complete a FIPS
mode integrity check. Also, when FIPS is enabled, if the keyboard, mouse or
video encryption is set to 128-bit SSL (ARCFOUR) or DES, the encryption
level is automatically changed to the encryption level AES.
NOTE: The FIPS mode of operation is initially disabled and must be enabled
to operate.
NOTE: The Setup port factory default setting will automatically disable the
FIPS module.

6xxx |Product Overviewxxx
NOTE: The FIPS mode can be changed via the DSView software plug-in.
RCS switches use an embedded FIPS 140-2 validated cryptographic module
(Certificate #1051) running on a Linux PPC platform per FIPS 140-2
Implementation Guidance section G.5 guidelines.
The FIPS mode can be enabled/disabled via the OBWI, Local Port, or DSView
plug-in. A reboot is required to enable or disable FIPS mode. A firmware upgrade
to this version or setting the state to the default state (Setup Port menu) will
disable FIPS mode.
In FIPS mode, encryption ciphers are restricted to AES or 3DES. When FIPS is
enabled, if the Keyboard/Mouse or Video encryption is set to 128-bit SSL or
DES, the encryption level is automatically changed to AES. With FIPS enabled,
these files are saved (or restored) using a FIPS compatible algorithm, AES.
When FIPS is disabled, the User Database and Appliance Configuration files
saved from or restored to the appliance as external files are encrypted (or
decrypted) using DES.
This is true even when the user does not fill in the Password parameter in the
Save (or Load) dialog on the OBWI, in which case a default OEM password is
used for encryption or decryption.
One result of enabling the FIPS module is to render previously saved User
Database and Appliance Configuration files incompatible. In this case, you may
temporarily disable the FIPS module, reboot the appliance, restore the previously
saved database or configuration file, re-enable the FIPS module, reboot, and then
save the file externally again while the FIPS module is enabled. The new saved
external file will be compatible with the appliance as long as the appliance is
running with FIPS mode enabled.
The opposite situation is also true, in that database and configuration files
saved with FIPS module enabled are not compatible for restoring to an
appliance without the FIPS module enabled or an appliance with older firmware
not supporting the FIPS module.

Product Overviewxxx |xxx7
Sample Configuration
Figure 1.1: Example RCS Configuration
Table 1.1: Descriptions for Figure 1.1

8xxx |Product Overviewxxx
Number Description Number Description
1UTP connection 6Telephone
network
2KVM connection to the RCS 7Ethernet
3Remote IP connection 8
Avocent
Management
Software Server
4RCS 9Analog User
(local UI)
5Modem 10
Digital user
(computer with
Internet browser
for a remote
OBWI or Dell
RCS software)
Safety Precautions
Use the following safety guidelines to help ensure your own personal safety and
to help protect your system and working environment from potential damage.
CAUTION: The power supplies in your system may produce high voltages and energy
hazards, which can cause bodily harm. Only trained service technicians are
authorized to remove the covers and access any of the components inside the system.
This warning applies to Dell™ Remote Console Switch, Dell™ PowerEdge™ servers,
and Dell PowerVault™ storage systems.
This document pertains only to the Dell 1082DS/2162DS/4322DS Remote
Console Switch. You should also read and follow the additional safety
instructions.
• Dell Remote Console Switch User's Guide
• Dell Safety Sheet

Product Overviewxxx |xxx9
• Dell RTF Regulatory Tech Bulletin
General
• Observe and follow service markings.
• Do not service any product except as explained in your system
documentation.
• Opening or removing covers that are marked with the triangular symbol with
a lightning bolt may expose you to electrical shock.
• Components inside these compartments should be serviced only by a
trained service technician.
• This product contains no serviceable components. Do not attempt to open.
If any of the following conditions occur, unplug the product from the electrical
outlet and replace the part or contact your trained service provider:
- The power cable, extension cable, or plug is damaged.
- An object has fallen into the product.
- The product has been exposed to water.
- The product has been dropped or damaged.
- The product does not operate correctly when you follow the
operating instructions.
• Keep your system away from radiators and heat sources. Also, do not block
cooling vents.
• Do not spill food or liquids on your system components, and never operate
the product in a wet environment. If the system gets wet, see the
appropriate section in your troubleshooting guide or contact your trained
service provider.
• Use the product only with approved equipment.
• Allow the product to cool before removing covers or touching internal
components.

10xxx |Product Overviewxxx
• Operate the product only from the type of external power source indicated
on the electrical ratings label. If you are not sure of the type of power source
required, consult your service provider or local power company.
NOTE: To help avoid damaging your system, be sure the voltage selection
switch (if provided) on the power supply is set for the voltage that most closely
matches the AC power available in your location. Also be sure that your
monitor and attached devices are electrically rated to operate.
• Be sure that your monitor and attached devices are electrically rated to
operate with the power available in your location.
• Use only power cables provided with this product.
• To help prevent electric shock, plug the system and peripheral power cables
into properly grounded electrical outlets. These cables are equipped with
three-prong plugs to help ensure proper grounding. Do not use adaptor plugs
or remove the grounding prong from a cable.
• Observe extension cable and power strip ratings. Make sure that the total
ampere rating of all products plugged into the power strip does not exceed
80 percent of the ampere ratings limit for the power strip.
• To help protect your system from sudden, transient increases and decreases
in electrical power, use a surge suppressor, line conditioner, or
uninterruptible power supply (UPS).
• Position system cables and power cables carefully. Route cables so that they
cannot be stepped on or tripped over. Be sure that nothing rests on any
cables.
• Do not modify power cables or plugs. Consult a licensed electrician or your
power company for site modifications. Always follow your local/national
wiring rules.
LAN Options
• Do not connect or use during a lightning storm. There may be a risk of
electrical shock from lightning.