LEGRAND Raritan Dominion SX II User manual

Dominion SX II User Guide
Copyright © 2022 Raritan
DSX2-v2.5.0-0F-E
September 2022
v2.5.0

Contents
CS03 Cercaon - DSX2-16 and DSX2-48 5
Features and Benets 6
Package Contents. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11
SX II Models . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12
SX II Appliance Diagram. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12
Supported Serial Devices. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13
SX II Access Clients. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13
iOS Support. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14
Congure SX II for the First Time 15
Default Login Informaon. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15
Inial SX II Conguraon from the Remote Console. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15
Connect a Laptop to SX II Using a Cross-Over Cable (Oponal). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16
Inial SX II Conguraon Using Command Line Interface (Oponal). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16
Set Terminal Emulaon on a Target. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17
Set the CLI Escape Sequence. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18
Access and Use Remote Console Features 19
Allow Pop-Ups. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20
Installing a Cercate. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20
Example 1: Import the Cercate into the Browser. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20
Example 2: Add the SX II to Trusted Sites and Import the Cercate. . . . . . . . . . . . . . . . . . . . . . . . . . . . 21
Converng a Binary Cercate to a Base64-Encoded DER Cercate (Oponal). . . . . . . . . . . . . . . . . . 23
Log In to SX II and HSC. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24
Security Warnings and Validaon Messages. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25
Java Validaon and Access Warning. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25
Addional Security Warnings. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 26
Log In to SX II Admin-Only Interface. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 26
Access SX II Using an iOS Device. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 26
Change Your Password from the Remote Console. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27
SX II Port Access Page. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28
SX II Le Panel. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29
Port Acon Menu Opons - Connect, Disconnect, Power On, Power O and Power Cycle Targets. . . . . . 30
Connect to a Target. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31
Disconnect from a Target. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32
Power On a Target. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32
Power O a Target. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33
Power Cycle a Target. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33
Connect to Targets Using CLI - Connect, Disconnect, Power On, Power O and Power Cycle Targets. . . . 34
ii

Command Line Interface Protocols. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 36
Command Line Interface Paral Searches. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37
Command Line Interface Tips. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37
Command Line Interface Shortcuts. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37
Command Line Interface High-Level Commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 38
HTML Serial Console (HSC) Help. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 38
Emulator. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 38
Copy and Paste and Copy All. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 42
Send Text File. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 43
Tools: Start and Stop Logging. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 44
Power Status. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 44
Power on a Target. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 45
Power O a Target. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 45
Power Cycle a Target. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 46
Browser Tips for HSC. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 46
Connect a Rack PDU to SX II and Congure Power Control Opons 47
Connecng the SX II to the PX PDU Serial Port. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 47
Connecng the SX II to the PX PDU FEATURE Port. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 48
Specicaons 50
SX II Dimensions and Physical Specicaons. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 50
Supported Remote Connecons. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 50
Supported Number of Ports and Remote Users per SX II Model. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 51
Maximum Number of Users Session. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 51
Maximum Number of Support Users Per Port. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 51
Port Access Protocol Requirements. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 51
SX II Port Pins. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 53
Port Ranges. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 54
Network Speed Sengs. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 55
Default User Session Timeouts. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 56
SX II Supported Local Port DVI Resoluons. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 56
SX II Appliance LED Status Indicators. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 56
Target Cable Connecon Distances and Rates. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 57
Index 58
iii

This document contains proprietary informaon that is protected by copyright. All rights reserved. No part of
this document may be photocopied, reproduced, or translated into another language without the express
prior wrien consent of Raritan, Inc.
© Copyright 2022 Raritan, Inc. All third-party soware and hardware menoned in this document are
registered trademarks or trademarks of and are the property of their respecve holders.
FCC Information
This equipment has been tested and found to comply with the limits for a Class A digital device, pursuant to
Part 15 of the FCC Rules. These limits are designed to provide reasonable protecon against harmful
interference in a commercial installaon. This equipment generates, uses, and can radiate radio frequency
energy and if not installed and used in accordance with the instrucons, may cause harmful interference to
radio communicaons. Operaon of this equipment in a residenal environment may cause harmful
interference.
VCCI Information (Japan)
Raritan is not responsible for damage to this product resulng from accident, disaster, misuse, abuse, non-
Raritan modicaon of the product, or other events outside of Raritan's reasonable control or not arising
under normal operang condions.
If a power cable is included with this product, it must be used exclusively for this product.
iv

To avoid potenally fatal shock hazard and possible damage to Raritan
equipment:
•Do not use a 2-wire power cord in any product conguraon.•
•Test AC outlets at your computer and monitor for proper polarity and•
grounding.
•Use only with grounded outlets at both the computer and monitor.•
•When using a backup UPS, power the computer, monitor and appliance o•
the supply.
CS03 Cercaon - DSX2-16 and
DSX2-48
NOTICE: This equipment meets the applicable Industry Canada Terminal
Equipment Technical Specicaons. This is conrmed by the registraon
number. The abbreviaon IC, before the registraon number, signies that
registraon was performed based on a Declaraon of Conformity, indicang
that Industry Canada technical specicaons were met. It does not imply that
Industry Canada approved the equipment.
NOTICE: The Ringer Equivalence Number (REN) for this terminal equipment is
01. The REN assigned to each terminal equipment provides an indicaon of the
maximum number of terminals allowed to be connected to a telephone
interface. The terminaon on an interface may consist of any combinaon of
devices subject only to the requirement that the sum of the Ringer Equivalence
Numbers of all the devices does not exceed ve.
AVIS : Le présent matériel est conforme aux spécicaons techniques
d’Industrie Canadaapplicables au matériel terminal. Cee conformité est
conrmée par le numérod'enregistrement. Le sigle IC, placé devant le numéro
d'enregistrement, signie quel’enregistrement s’est eectué conformément à
une déclaraon de conformité et indique queles spécicaons techniques
d'Industrie Canada ont été respectées. Il n’implique pasqu’Industrie Canada a
approuvé le matériel.
AVIS : L'indice d'équivalence de la sonnerie (IES) du présent matériel est de 01.
L'IESassigné à chaque disposif terminal indique le nombre maximal de
terminaux qui peuvent êtreraccordés à une interface téléphonique. La
terminaison d'une interface peut consister en unecombinaison quelconque de
disposifs, à la seule condion que la somme d'indicesd'équivalence de la
sonnerie de tous les disposifs n'excède pas 5.

Features and Benets
Next-Generation Console Server
Raritan's Next-Generaon
Serial Console Server
The Dominion SX II is Raritan's next-generaon Serial Console Server (also known as
Terminal Server) that provides IT and network administrators secure IP access and control
of serial devices, anyme, anywhere. The new SX II is the most powerful, secure, reliable,
easy-to-use and manageable serial-over-IP console server on the market. SX II provides
convenient and producve access to networking devices, servers, PDUs,
telecommunicaons and other serial devices.
Ten Years of Serial Console
Experience
For over ten years, thousands of customers have relied on the rst generaon Dominion
SX for access and control of hundreds of thousands of serial devices, represenng over 500
million hours of total operaon. The SX II builds upon that experience with a wide range of
advancements and innovaons.
Dominion Plaorm, User
Interface and
Management
Starng with a powerful, Dominion hardware plaorm providing performance, reliability
and security, the SX II includes virtually all the Serial-over-IP features of its predecessor,
Dominion compable user interfaces and management features, plus excing new
capabilies.
Full CLI-based
Conguraon and Auto-
Conguraon
The SX II oers complete CLI access and management via SSH, Telnet and web-based user
interface, with convenient direct port access. Two script-based automac conguraon
methods are available for a fast installaon and for subsequent conguraon changes.
Excing New Features and
Innovaons
The SX II new features include: military grade security features with 256-bit AES encrypon
and FIPS encrypon mode, automac DTE/DCE serial port detecon, innovave at-the-
rack access opons, wireless modem support, IPv6 networking, script based auto-
conguraon and Dominion compable user interfaces and management.
CommandCenter
Management & Scalability
With Raritan’s CommandCenter, organizaons can manage hundreds or even thousands of
serial devices, spread across mulple locaons, including branch oces.
Powerful Hardware Platform
Powerful New
Hardware Plaorm
Powerful new hardware plaorm with 1GHz CPU engine, with an 8-fold increase in RAM.
Increased ash memory, up to 8 GB, for storage and logging. Front panel LED's show port
connecon status.
Wide Variety of 1U
Models
Rackable, 1U models available in 4, 8, 16, 32 and 48 ports. All have dual power supplies and dual
Gigabit Ethernet LAN ports. Models are available with an oponal built-in modem. At-the-rack
access includes RJ-45/serial, USB and KVM console.
6

Powerful Serial
Processing Engine
The Dominion SX II with its powerful hardware plaorm provides high-powered serial processing
for the most extreme use cases. Up to 10 users can simultaneously connect to a serial device
connected to a SX II port. Up to 200 simultaneous user sessions are supported by a given SX II
console server. Port conguraon me is up to 23 mes faster than the original SX. Connecon
mes are over 50 mes faster.
Dual AC Power
Supplies
All models have dual, 100-240 volt AC, auto-switching power supplies with automac failover for
increased reliability.
Dual DC Powered
Models
Dual power and dual LAN, 8, 32 and 48 port DC powered models are available. These models
provide the same features, serial access and performance as the AC powered models.
Dual Gigabit
Ethernet LAN on all
Models
Dual gigabit Ethernet LAN ports, which can be congured for simultaneous operaon or
automac failover. Dual stack IPv4 and IPv6 networking.
Five USB Ports The Dominion SX II has four USB 2.0 ports, three on the back panel and one on the front panel.
These are available for local keyboard/mouse, 3G/4G cellular modem and for automac
conguraon via USB drive. A USB 2.0 mini-B port is available for local laptop connecon.
Oponal Telephone
Modem
All models have the opon for an internal, 56K telephone modem with RJ11 connecon for
emergency access and disaster recovery.
Innovave Local
Console
The Dominion SX II's local console provides mulple ways for at-the-rack access. The console
includes a tradional RJ45 serial port, USB mini-B port, and even a DVI/USB KVM console.
Productive Serial-over-IP Access
Widest Variety of
Serial-over-IP Access
The Dominion SX II supports the widest variety of serial-over-IP connecons via SSH/Telnet
Clients, web-browser, CommandCenter, telephony modem, cellular modem and at-the-rack
access. This includes CLI, GUI and mulple Direct Port Access methods.
SSH/Telnet Client
Access
SSH/Telnet client access from a desktop, laptop, or handheld device. Direct Port Access via SSH
Client using a username/port string syntax. Customer can upload, view and delete SSH keys for
greater security.
Web Browser Access Web browser access via Dominion SX II or CommandCenter user interfaces.
Convenient Direct
Port Access
Convenient Direct Port Access methods via SSH, Telnet & HTTP. IP address and TCP port-based
access for Telnet and SSHv2 clients. Independent IP addresses or TCP port numbers can be
assigned to access each SX II port. HTTPS-based direct access via URL. Com Port Redirecon can
be supported for third-party soware redirectors.
Cellular and
Telephone Modem
Access
Oponal external Cellular (3G/4G) modem and internal Telephone modem access for emergency
access, business connuity and disaster recovery.
Innovave At-the-
Rack Access
With the Dominion SX II, you get mulple types of local access at-the-rack. This includes: (1)
Tradional RJ45 serial port, (2) Mini-USB port for laptop connecon, and (3) DVI & USB-based
KVM console for connecon to a rackmount keyboard tray or even a KVM switch.
Port Keyword
Monitoring and
Alerng
Users can dene up to 14 keywords per port. The SX II will scan the data coming from the port,
and if one of the keywords is detected, it will send an alert via SNMP or e-mail. Serial devices are
monitored, even when no user is connected! This results in faster nocaon that reduces Mean
Time to Repair (MTTR).
7

Port Logging to
Syslog, NFS and Local
File
Port acvity to and from serial devices can be logged to a Syslog server, Network File System
(NFS) server or locally to the SX II device with up to 8 Gb of storage.
NFS Logging Features Allows logging of all user keystrokes and server/device responses to NFS server(s). Can even be
stored on the NFS server with user-dened encrypon keys for greater security. Keep-alive
messages in the NFS log allow easy monitoring if the managed server/device goes down.
SecureChat Instant
Messaging
Allows for secure, instant messaging among SX II users. Enables collaboraon of distributed
users to increase their producvity, troubleshoot, reduce the me to resolve problems and for
training purposes.
Automac Serial
Device Logo
Once a user is med out for inacvity, a user dened "logo" command can be sent to the
target. Improved security of user sessions results as serial sessions are automacally closed upon
me out and not le open for possible un-authorized access.
Comprehensive Serial Device Access
Over Ten Years of Serial
Device Management
The rst generaon Dominion SX has been serving customers for over ten years, with
over 500,000 ports sold. This represents hundreds of millions of hours of operaon
across a wide variety of serial devices.
Automac DTE/DCE Serial
Port Detecon
This feature allows for a straight Cat5 connecons to Cisco equipment (and other
compable devices), without rollover cables. It also means that a SX II can replace the
rst generaon SX with its exisng serial device connecons.
Support for the Widest
Variety of Serial Devices
Supports the widest variety of serial equipment including: networking routers, Ethernet
switches, rewalls, UNIX/LINUX servers, Windows Servers, virtual hosts, rack PDU's, UPS
systems, telecom/wireless gear. Supports mulple operang systems including SUN®
Solaris, HP-UX, AIX, Linux®, Windows® Server 2012, and UNIX®.
Up to 230,400 Baud Serial
Connecons
Supports operang speeds of 1,200 to 230,400 bits-per-second for serial connecons.
Flexible Serial Port Opons Flexible per-port serial opons, including BPS, emulaon, encoding, parity, ow control,
stop bits, character and line delays, always-acve connecons and more. Can dene an
exit command when the user mes out, as well as enable an in-line menu for port
commands and power control.
VT100/220/320/ANSI
support
Increased choice of terminal emulaon opons, allows support of a broader range of
devices. SX II supports the following code-sets: US-ASCII (ISO 646); ISO 8859-1 (Lan-1);
ISO 8859-15 (Lan-9); UTF-8 and others.
Remote Power Control of
Raritan PDU’s (With Power
Control Menu)
Raritan rack PDU's (PX, PX2, PX3, RPC) can be connected to the Dominion SX II for remote
power control of the equipment connected to the PDU. Remote power control can be
done via the SX II GUI, SSH/Telnet Client or CommandCenter. Outlet associaons can be
created for serial devices with mulple power supplies, such that these outlets can be
controlled with a single power command. The SX II has "Control P" style menu
commands for power control available during a serial session.
Security - Encryption
Strong 256 Bit AES
Encrypon
The SX II ulizes the Advanced Encrypon Standard (AES) encrypon for added security. 128-
and 256-bit AES encrypon is available. AES is a U.S. government-approved cryptographic
algorithm that is recommended by the Naonal Instute of Standards and Technology (NIST)
in the FIPS Standard 197.
8

Validated FIPS 140-2
Cryptographic Module
For government, military and other high security applicaons, the Dominion SX II ulizes a
validated FIPS 140-2 Cryptographic Module for enhanced encrypon. Modules tested and
validated as conforming to FIPS 140-2 are accepted by federal agencies of the U.S. and
Canada for the protecon of sensive informaon.
Enhanced Encrypon
Opons
Support more encrypon opons: web-browser security through 256 and 128-bit SSL
encrypon; for SSHv2 connecons, AES and 3DES are supported (client-dependent).
Security - Authentication
External authencaon
with LDAP, Radius, TACACS
& Acve Directory
Dominion SX II integrates with industry-standard directory servers, such as Microso
Acve Directory, using the LDAP, RADIUS and TACACS protocols. This allows Dominion SX
II to use pre-exisng username/password databases for security and convenience.
SecureID is supported via RADIUS for added security.
Upload Customer-Provided
SSL Cercates
Customers can upload to the Dominion SX II digital cercates (self-signed or cercate
authority provided) for enhanced authencaon and secure communicaon.
Congurable Strong
Password Checking
The Dominion SX II has administrator-congurable, strong password checking to ensure
that user-created passwords meet corporate and/or government standards and are
resistant to brute force hacking.
Congurable Security
Banner
For government, military and other security-conscious customers requiring a security
message before user login, the SX II can display a user-congurable banner message and
require acceptance before user login.
SSH Client Cercate
Authencaon
In addion to authencaon via login/password, on the SSH interface users can be
authencated via SSH cercates. Each local user can be assigned up to 500 SSH keys.
The key authencaon takes the place of the login/password
Local Authencaon with
Users, Groups and
Permissions
In addion to external authencaon, the Dominion SX II supports local authencaon.
Administrators can dene users and groups with customizable administraon and port
access permissions.
Login and Password
Security
The SX II includes mulple login and password security features including password
aging, idle meout, user blocking and login limitaons. Failed login aempts can be
result in lockouts and user deacvaon.
SHA-2 Cercate Support Support for the more secure SHA-2 cercates.
Security - Networking
Dual Stack IP Networking –
IPv4 and IPv6
The Dominion SX II provides dual-stack IP networking with simultaneous support of
IPv4 and IPv6.
IPTables Firewall support Fully congurable "iptables" rewall support. User selectable and customizable system
security levels catering to wide range of security needs.
Selecve Stac Roung
Support
Supports connecons between modem and LAN 1, modem and LAN 2 or LAN 1 and
LAN 2. This allows users to ulize two dierent networks (Public and Private) and
modem access to KVM or Ethernet controlled devices. When used with the rewall
funcon, secure access can be enabled.
9

TCP/IP Port Management Can disable TELNET and SSH access if desired. Ability to change these ports in addion
to HTTP, HTTPS and discovery ports
Prevent Man In The Middle
Aacks
Enhanced security of communicaon channels by using client and server SSL
cercates.
Modem Dial-Back Security For enhanced security, Dominion SX supports modem dial-back.
Rejects SSHv1 Requests Due to the many known security vulnerabilies of the SSHv1 protocol, the Dominion
SX will automacally reject SSHv1 connecons.
End User Experience
Mulple User Interfaces The SX II supports mulple user interfaces giving the user the freedom to use the interface
best suited for the job at hand. This includes remote access via Raritan or third party serial
client via CLI, Raritan graphical user interface (GUI), Admin-only GUI, at-the-rack access or
via CommandCenter. Convenient direct port access methods available.
Full Modern CLI – GUI
Equivalence
Full CLI management and conguraon, thereby allowing scripng of any command.
Broad Range of
Supported Browsers
Oers broad range of browsers: Firefox, Safari, Internet Explorer, Chrome, Edge.
Internaonal Language
Support
The web-based user interface supports English, Japanese and Chinese languages. The
Raritan Serial Console can support four languages: English, Japanese, Korean and Chinese
PC Share Mode Up to ten users can connect and remotely access each connected serial device up to a
maximum of 200 serial sessions. Sharing feature is very useful for collaboraon,
troubleshoong and training.
Easy to Install and Manage
Full CLI-based
Conguraon and
Management
The SX II oers complete CLI administraon and management via SSH, Telnet and web-based
user interface. Two script-based automac conguraon methods are available for a fast
installaon and for subsequent conguraon changes.
Automac
Conguraon via USB
Drive
The SX II can be oponally congured via a CLI script on a USB drive connected to one of its
USB ports. This can be used for inial conguraon or subsequent updates.
Automac
Conguraon via TFTP
Server
The SX II can be oponally congured via a second method, i.e. via a CLI script contained in a
TFTP server. This can be used for inial conguraon or subsequent updates. The TFTP server
address can be retrieved via DHCP or set by the administrator.
Dominion-Compable
Management
Dominion-compable management features are available via a web-based user interface or
CLI. This includes Dominion-style User Management, Device Sengs, Security, Maintenance,
Diagnosc and Help features. Firmware update via web browser without the use of an FTP
server.
Easy to Install Installaon in minutes, with just a web browser, CLI or automac conguraon. Some
compeve products require burdensome eding of mulple les to complete a basic
installaon.
10

Congurable Event
Management and
Logging
The SX II generates a large variety of device and user events including: device operaon,
device management changes, security, user acvity and user administraon. These can be
selecvely delivered to: SNMP, Syslog, email (SMTP) as well as stored on the SX II in the audit
log. Support for SNMP v2 and v3,
Raritan CommandCenter® Management and Scalability
Raritan’s CommandCenter
Centralized Management
Like the rest of the Dominion series, Dominion SX II features complete CommandCenter
Secure Gateway integraon, allowing users to consolidate all Dominion SX II and other
Raritan devices into a single logical system, accessible from a single IP address, and
under a single remote management interface.
Manage Hundreds of Serial
Devices
When deployed with CommandCenter Secure Gateway, hundreds of Dominion SX II
devices (and thousands of serial devices) can be centrally accessed and managed.
Single IP Address for
Administraon and Device
Connecon
Administrators and users can connect to a single IP address via CommandCenter Secure
Gateway to manage the SX II or access the aached serial devices. This connecon can
be via web browser or through SSH. Opon for SX II at-the-rack access while under CC-
SG management.
Bulk Firmware Upgrades Administrators can schedule rmware upgrades (and other operaons) for mulple SX II
devices from CommandCenter.
Remote Power Control via
CommandCenter Secure
Gateway
CommandCenter supports remote power control of Raritan PX rack PDU’s connected to
serial ports on the Dominion SX II. For equipment with mulple power feeds, mulple
power outlets can be associated together to switch equipment on or o with a single
click of the mouse.
In This Chapter
Package Contents. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11
SX II Models . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12
SX II Appliance Diagram. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12
Supported Serial Devices. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13
SX II Access Clients. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13
iOS Support. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14
Package Contents
Each SX II ships as a fully-congured stand-alone product in a standard 1U 19" rackmount chassis.
The SX II package includes -
•1 - SX II appliance•
•1 - Rackmount kit•
•2 - AC power cords•
•1 - Set of 4 rubber feet (for desktop use)•
•1 - Warranty card•
•1 - SX II Quick Setup Guide•
11

SX II Models
The following SX II models are available.
Models with an M include an internal modem in addion to the standard features that are provided on
all SX II models. For a list of standard features, see Features and Benets (on page 6).
•DSX2-4 and DSX2-4M - 4-port serial console server•
•DSX2-8 and DSX2-8M - 8-port serial console server•
•DSX2-16 and DSX2-16M - 16-port serial console server•
•DSX2-32 and DSX2-32M - 32-port serial console server •
•DSX2-48 and DSX2-48M - 48-port serial console server•
Model size, weight, temperature and other specicaons are found in SX II Dimensions and Physical
Specicaons (on page 50).
SX II Appliance Diagram
Note the image shown here is an example, so it may be dierent from your model.
Appliance diagram key
A AC power outlet(s) 1 and 2 with independent power on/o switches
B Terminal port/console port
C Admin Mini-USB port
D Modem port (based on model)
E 3 USB ports
F LAN1 and LAN2 ports
G Server ports
H DVI-D port
I Reset buon
12

Appliance diagram key
J USB port
K LED port indicators
L Power status
(Note SX II 48 port models have their power status located above the front-panel USB port.)
Supported Serial Devices
•Routers•
•LAN switches•
•Rack PDUs•
•Wireless modems•
•Telecom modems•
•Windows servers•
•UNIX servers•
•Linux servers•
•Virtual hosts•
•Firewalls•
SX II Access Clients
HTML Serial Client (HSC)
HSC is the default client and will launch when you connect to a serial device. The HSC is an HTML-based,
Java-free Serial Client.
See HTML Serial Console (HSC) Help (on page 38)
Direct Port Access
Direct Port Access allows users to bypass having to use the SX II's Login dialog and Port Access page.
This feature also provides the ability to enter a username and password directly to proceed to the
target, if the username and password is not contained in the URL.
Command Line Interface (CLI)
Connect using CLI via SSH or Telnet.
See Command Line Interface Help for SX II
Admin-Only Interface
Access the Admin Client at: hps://<SX2 IP/Hostname>/admin.
The Admin Client does not allow target access. Use the Admin Client to perform administrator funcons
without using Java.
13

All admin funcons available in the Remote Console are available in the Admin-Only Interface.
iOS Support
SX II supports iOS SSH apps, both with and without VPN, to allow users access via iOS mobile devices.
See Access SX II Using an iOS Device (on page 26)
14

Congure SX II for the First Time
SX II can be congured from the Remote Console or command line interface (CLI).
In This Chapter
Default Login Informaon. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15
Inial SX II Conguraon from the Remote Console. . . . . . . . . . . . . . . . . . . . . . . . 15
Inial SX II Conguraon Using Command Line Interface (Oponal). . . . . . . . . . . 16
Default Login Informaon
SX II appliances are shipped with the following defaults. Use the defaults when you inially access SX II.
•IP address - 192.168.0.192•
•IP netmask - 255.255.255.0•
•Username - admin (all lowercase)•
•Password - raritan (all lowercase)•
Important: For backup and business continuity purposes, it is strongly
recommended you create a backup administrator username and password. Keep
the information in a secure location.
Inial SX II Conguraon from the Remote Console
1. Aer you have installed the SX II at the rack, connect the power cord(s) between the power
connector on the SX II and an external, AC or DC power source (depending on your model).
2. You can connect the second power connector to a backup power source.
Use the power cords that came with SX II.
3. Connect an external modem to a USB port on the SX2 (oponal). See Connect and Enable Global
Access to an External Broadband ModemOnline Help
4. Connect your target devices or other serially managed devices to the server ports on the SX II.
Use a standard Cat5 cable to connect your target device to an available port on the back of SX
II.
Note: Check the pin denion of the RJ45 port on the target. It should match the pin denion on SX II.
Or
If needed, connect a Raritan Nulling Serial Adapter to the serial port on your target, then plug a
standard Cat5 cable into the adapter. Connect the other end of the cable to an available port on
the back of SX II.
5. Flip the power switch(s) to turn SX II on.
15

Next, connect SX II to your network and congure your network sengs for the rst me.
See Inial SX II Conguraon Using Command Line Interface (Oponal) (on page 16) or Congure SX II
Network Sengs from the Remote Console.
Connect a Laptop to SX II Using a Cross-Over Cable (Oponal)
The rst me you congure SX II, if you are connecng from the LAN port on laptop to the LAN1 port on
SX II using a crossover cable, do the following -
1. Use cross-over cable to connect between SX II LAN1 and the laptop LAN port.
2. Set the Stac IP of the LAN port that is connected to SX II to 192.168.0.191 and Network Mask
to 255.255.255.0.
3. Launch your browser and access SX II via 192.168.0.192.
Inial SX II Conguraon Using Command Line Interface (Oponal)
Ensure that the port sengs (serial communicaon parameters) are congured as follows:
•Bits per Second (BPS) = 115200•
•Data bits = 8•
•Parity = None•
•Stop bits =1•
•Flow Control = None•
▶To congure SX II for the rst me using CLI:
1. Connect to SX II using any one of the following -
•Connect a computer to the Terminal port for serial console access.•
•Connect a keyboard tray or KVM console to the DVI-D and USB ports.•
•Connect a laptop to the MiniUSB Admin port.•
2. The emulator interface opens once you are connected to SX II. Press the Enter key on your keyboard.
3. When the Login prompt appears, enter the default username admin and password raritan.
Use all lowercase leers.
4. You are prompted to change the default password. When creang a password via CLI, it cannot
begin with a space or end with a space. This does not apply to creang passwords in using the
Remote Console.
By default, the network is configured for a static IP address.
5. At the admin > prompt, enter config and at the next prompt enter network.
16

6. At the admin > config > network > prompt, enter interface if lan1 ipauto
none ip <ip address> mask <mask> gw <gateway ip address>
To use DHCP, enter interface if lan1 ipauto dhcp
7. Give the device a name to help idenfy it.
Enter "name devicename <DSX2 name>".
Up to 32 characters are supported for the name. Spaces and special characters not supported.
8. At the admin > config > network prompt, enter quit to get into upper menu admin >
config, then enter time.
9. At the admin > config > time > prompt, set the date and me on the SX II.
•Enter timezonelist and nd the number code that corresponds to your me zone.•
•Enter clock tz <timezone code> date <date string> time <time string>•
where <timezone code> is the time zone code, <time string> is the current time in
"HH:MM:SS" format and <date string> is the current date in "YYYY-MM-DD" format
(quotes included, uses 24-hour time).
Example: clock tz 9 date "2015-08-15" time "09:22:33"
10. Enter top to return to the top level prompt.
11. Next, enter config and then enter ports at the next prompt.
You can now configure each server port that has a target device connected to it.
12. Enter config port then hit ? to see the port parameters.
For example:
config port 1 name cisco1700 bps 9600 parity odd flowcontrol none
emulation vt100
You can also use port ranges or the wildcard asterisk *, such as config port * bps
115200
This configures all ports for a communications speed of 115200 bps.
Or
config port 3-7 bps 115200
This configures ports 3 through 7 for 115200 bps.
Or
config port 1,2,7-9 bps 115200
This configures ports 1, 2, 7 through 9 for 115200 bps.
Repeat this step for each port with a device connected to it.
13. When done, enter top to return to the top level prompt.
Set Terminal Emulaon on a Target
The seng for terminal emulaon on SX II is a property associated with the port sengs for a parcular
target device.
Ensure that the sengs for terminal emulaon in the client applicaon, such as Telnet or SSH, are
capable of supporng the target device.
Ensure that the encoding in use on the host matches the encoding congured for the target device.
17

For example, if the character set on a Sun™ Solaris™ server is set to ISO8859-1, the target device should
also be set to ISO8859-1.
Ensure that the terminal emulaon on the target host connected to SX II serial port is set to VT100,
VT220, VT320 or ANSI.
On most UNIX® systems, export TERM=vt100 (or vt220|vt320|ansi) sets the preferred
terminal emulaon type on the UNIX target device. So, if the terminal type seng on a HP-UX® server is
set to VT100, the Access Client should also be set to VT100.
Set the CLI Escape Sequence
The escape key sequence is user-congurable and can be congured per port.
The escape sequence is programmable per port because dierent target operang systems and host
applicaons may trap dierent escape key sequences.
Ensure the default escape sequence set on the SX II server does not conict with a key sequence
required by either the access applicaon or the host operang system.
The console sub-mode should be displayed when the default escape key sequence ^] is pressed.
Raritan recommends that you do not use [ or Ctrl-[. Either of these may cause unintended commands,
such as invoking the Escape Command unintenonally. This key sequence is also triggered by the arrow
keys on the keyboard.
18

Access and Use Remote Console Features
The Remote Console is a browser-based interface accessed when you log in to SX II via a network
connecon. See. Log In to SX II and HSC (on page 24)
Administrator Functions in the Remote Console
Administrators perform SX II conguraon and maintenance funcons from the Remote Console, such
as conguring network access, adding and managing users, managing device IP addresses and so on.
Administrators can also use a version of the Remote Console that does not include any target access.
See Log In to SX II Admin-Only Interface (on page 26).
End User Functions in the Remote Console
From the Remote Console, end users access targets, change passwords and so on. End users can choose
HTML Serial Client. See HTML Serial Console (HSC) Help (on page 38)
Note that these funcons can also be performed via command line interface.
In This Chapter
Allow Pop-Ups. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20
Installing a Cercate. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20
Log In to SX II and HSC. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24
Security Warnings and Validaon Messages. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25
Log In to SX II Admin-Only Interface. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 26
19

Access SX II Using an iOS Device. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 26
Change Your Password from the Remote Console. . . . . . . . . . . . . . . . . . . . . . . . . . 27
SX II Port Access Page. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28
SX II Le Panel. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29
Port Acon Menu Opons - Connect, Disconnect, Power On, Power O and Power
Cycle Targets. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 30
Connect to Targets Using CLI - Connect, Disconnect, Power On, Power O and
Power Cycle Targets. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34
HTML Serial Console (HSC) Help. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 38
Allow Pop-Ups
Regardless of the browser you are using, you must allow pop-ups in order to launch the SX II Remote
Console.
Installing a Cercate
You may be prompted by the browser to accept and validate the SX II's SSL cercate.
Depending on your browser and security sengs, addional security warnings may be displayed when
you log in to SX II.
It is necessary to accept these warnings to launch the SX II Remote Console. For more informaon, see
Security Warnings and Validaon Messages.
Two sample methods on how to install an SSL Cercate in the browser are provided here. Specic
methods and steps depend on your browser and operang system. See your browser and operang
system help for details.
Example 1: Import the Cercate into the Browser
In this example, you import the Cercate into the browser.
20