Minicom Smart IP Access User manual

www.minicom.com
InternationalHQ
Jerusalem,Israel
Tel:[phone]
[e-mail]
NorthAmericanHQ
Linden,NJ,USA
Tel:[phone]
[e-mail]
EuropeanHQ
Dübendorf,Switzerland
Tel:[phone]
[e-mail]
Technicalsupport - [e-mail]
5UM20143 V1.9 8/07
SmartIPAccess
UserGuide

SMARTIPACCESS
1
TableofContents
1. Welcome..........................................................................................................3
2. Introduction.....................................................................................................3
3. Key Features...................................................................................................4
4. System components.......................................................................................4
5.TheSmartIPAccess unit...............................................................................5
6. Pre-installationguidelines..............................................................................6
6.1Avoidinggeneralrack mountingproblems..........................................................6
6.2Rack mounting theIPAccess...............................................................................7
7.Terminology....................................................................................................7
8. Clientcomputer operatingsystem.................................................................7
9. Connecting thesystem...................................................................................7
10. DefaultIPaddress.........................................................................................9
11. LoggingintotheWebinterface..................................................................10
11.1SSLCertificatenotes........................................................................................11
12. Network >Configuration.............................................................................11
12.1LAN 1.................................................................................................................12
12.2KVM.net.............................................................................................................12
13. Network >SNMPsettings...........................................................................13
14. Administration>User Settings..................................................................13
14.1Administrator....................................................................................................14
14.2User...................................................................................................................14
14.3Viewonly...........................................................................................................14
14.4Addingauser....................................................................................................14
14.5Editingauser....................................................................................................15
14.6Deleting auser..................................................................................................15
14.7Blockingauser.................................................................................................15
15. Administration>Switch configuration......................................................15
16. Administration>Serial Settings.................................................................16
16.1Show..................................................................................................................17
17. Security>Settings......................................................................................17
18. Security>SSL certificates.........................................................................18
19. Security>EventLog...................................................................................19
20. Maintenance >SetSystem Time................................................................19
21. Maintenance >Firmware Upgrade..............................................................20
22. Maintenance >Restore Factory Settings...................................................20
23. Saving changes andloggingout................................................................21

USERGUIDE
2
24. Startingaremotesession...........................................................................21
24.1Taking overabusyremotesession..................................................................22
24.2Full screenmode...............................................................................................22
24.3Movingorhiding theToolbar............................................................................23
24.4Switchingtoadifferentserver/device..............................................................23
24.5Changing theperformancesettings.................................................................24
24.6Adjusting theVideosettings.............................................................................25
24.6.1Refresh.......................................................................................................25
24.6.2ManualVideoAdjust....................................................................................25
24.6.3AutoVideoAdjust........................................................................................26
24.7Powercycle.......................................................................................................26
24.8Keyboardkeysequences..................................................................................26
24.9Synchronizingmousepointers.........................................................................28
24.9.1Aligningthemicepointers............................................................................28
24.9.2Calibratingmicepointers..............................................................................28
24.9.3Manualmicesynchronization.......................................................................29
24.10Minicomlogomenu features..........................................................................30
24.11Disconnectingtheremotesession.................................................................31
25.Troubleshooting -Restoringfactory defaults............................................31
26.TechnicalSpecifications.............................................................................34
27. VideoResolutionand Refresh Rates.........................................................35
28. Safety...........................................................................................................35
29. User GuideFeedback..................................................................................35
30. WEEE Compliance......................................................................................36
©2007CopyrightMinicomAdvancedSystems.Allrightsreserved.

SMARTIPACCESS
3
1.Welcome
Thank youforbuyingtheSmartIP Access system. Thissystemisproducedby
MinicomAdvancedSystemsLimited.
ThisdocumentprovidesinstallationandoperationinstructionsforMinicom’s
SmartIPAccess. Itisintendedforsystemadministratorsand networkmanagers,
and assumesthatreadershavea generalunderstanding ofnetworks, hardwareand
software.
Technicalprecautions
Thisequipmentgeneratesradiofrequencyenergyandifnotinstalledinaccordance
withthemanufacturer’sinstructions,maycauseradiofrequencyinterference.
ThisequipmentcomplieswithPart15,SubpartJoftheFCCrulesforaClassA
computingdevice. ThisequipmentalsocomplieswiththeClass Alimitsforradio
noiseemissionfromdigitalapparatussetoutintheRadioInterferenceRegulation
oftheCanadianDepartmentofCommunications. Theseaboverulesaredesignedto
providereasonableprotectionagainstsuchinterferencewhenoperatingthe
equipmentina commercialenvironment. If operationofthisequipmentina
residentialarea causesradiofrequencyinterference, theuser,and notMinicom
AdvancedSystemsLimited,willberesponsible.
Changesormodificationsmadetothisequipmentnotexpresslyapprovedby
MinicomAdvancedSystemsLimitedcouldvoidtheuser’sauthoritytooperatethe
equipment.
MinicomAdvancedSystemsLimitedassumesnoresponsibilityforany errorsthat
appearinthisdocument. Informationinthisdocumentissubjecttochangewithout
notice.
Nopartofthisdocumentmaybereproducedortransmittedinany formorbyany
means, electronicormechanical, forany purpose, withouttheexpress written
permissionofMinicomAdvancedSystemsLimited.
Trademarks
Alltrademarksand registeredtrademarksarethepropertyoftheirrespective
owners.
2.Introduction
TheSmartIP Access extendsyourKVM(keyboard, video,mouse)fromany
computerorserveroverTCP/IPvia LAN, orWAN. Nowyoucancontrol, monitor
and manageyourserversfromwhereveryouare, insideoroutsidetheorganization.
TheSmartIP Access isa cost-effectivehardwaresolution, forsecureremoteKVM
access &controlofa computer/serverfromtheBIOS level-independentofthe
OS.Itisdesignedtoconnecttoa singlecomputerortoa KVMswitchtoaccess

USERGUIDE
4
multipleservers, overTCP/IP communication.
3.KeyFeatures
BIOSlevelaccess toanyserver’sbrand andmodel, regardless oftheserver
conditionandnetworkconnectivity, coveringtheentirespectrumofcrash
scenarios.
Lowbandwidthrequirement. Providesa uniqueabilitytoutilizea standard
56Kbpsanalogmodemconnection, whileallowingadaptiveandconfigurable
bandwidthconsumptionwhenaccessedvia LAN.
Compatible withall majoroperatingsystems. Supportsmanyhardwareand
softwareconfigurationsfortheremoteclientandthetargetservercomputers,as
wellastheKVMswitchinuse.
Web-basedAccess - Browseraccess toa targetserver,fromanylocationvia
securedstandardIP connection.
SNMP- SNMPtrapsformonitoringSmartIPAccess eventsandoperation.
Multi-userviewmode- Allowssimultaneoususerstoviewremotesessions.
Remotecontrolcanbeintuitivelyhandedbetweenuserswithappropriate
permissions.
4.Systemcomponents
TheSmartIP Access systemconsistsof:
·1SmartIPAccess (p/n1SU51068)
·3in1CPUcable(p/n5CB10477)
·1RS232 Cross cable(p/n5CB00566)
·Rack-mountkit(p/n5AC20255)
TheRS232 Cross cableconnectstheSmartIPAccess toSerialmanageabledevices
suchasPowerManagementunits, Routers, etc.
RS232Cross cableoption
SmartIPAccess hastwoRS232RJ45connectors. Youcanpurchaseanother
RS232Cross cabletoconnecta secondSerialdevice. P/N5CB00566

SMARTIPACCESS
5
5.TheSmartIPAccessunit
Figure1illustratesthefrontpaneloftheSmartIPAccess.
MINICOMSMARTIPACCESS
PowerRemote ResetLocal
Figure1SmartIPAccess frontpanel
ThetablebelowliststheLEDs, buttonsand functions.
LED/ButtonFunction
PowerPowerIndicator
RemoteIlluminateswhenremotesessionisactive
Local When pressed, Smart IPAccess disconnectstheClientcomputer’s
linktotheTarget Server,andtheLocalMouseandKeyboardbecome
operational.
Reset RestartstheSmart IPAccess unit
ThefigurebelowillustratestherearpaneloftheSmartIP Access.
Power
connector Keyboard
Mouse
Monitor
Computer
Keyboardport
Computer
Mouseport
Computer
Videocard
LAN1 and 2
Ethernet
connectors
SERIAL1 and 2
RS232
connectors
POWER
100-240 VAC 50/60 Hz
www.minicom.com
CONSOLECOMPUTER
22
11
L
A
N
S
E
R
I
A
L
Figure2SmartIPAccess rearpanel
Thetablebelowliststherearconnectorsand functions.

USERGUIDE
6
ConnectorFunction
ComputerKVM Connect acomputerorKVMswitch
ConsoleKVMConnect akeyboard,videoandmousetooperatetheSmartIP
Access locally
Serial1 and 2RS232ConnecttoanRS232device
LAN 1 and 2Connectto10/100MbitEthernet
6.Pre-installationguidelines
Placecablesawayfromfluorescentlights,airconditioners, and machinesthatare
likelytogenerateelectricalnoise.
PlacetheSmartIPAccess ona flat, cleananddrysurface.
TheSmartIP Access isnotintendedforconnectiontoexposedoutdoorlines
6.1Avoidinggeneral rack mountingproblems
Elevatedoperatingambienttemperature
Theoperatingambienttemperatureoftherackenvironmentmaybegreaterthan
theroomambientwheninstallingintoa closedormulti-unitrackassembly. So
install theequipmentinanenvironmentcompatiblewiththemaximumrated
ambienttemperature.
Reducedairflow
Installtheequipmentina rackinsucha waythattheamountofairflowrequired
forsafeoperationisnotcompromised. Leavea gapofatleast5cm/2”eachsideof
theSmartIP Access.
Mechanicalloading
Mounttheequipmentintherackinsucha waythatahazardousconditionisnot
achievedduetounevenmechanicalloading.
Circuitoverloading
Whenconnectingtheequipmenttothesupplycircuit, considertheeffectthat
overloadingofcircuitsmighthaveon over-currentprotectionandsupplywiring.
Reliableearthingofrack-mountedequipmentshouldbemaintained. Giveattention
tosupplyconnectionsotherthandirectconnectionstothebranchcircuit(e.g. useof
powerstrips).

SMARTIPACCESS
7
6.2Rack mountingtheIPAccess
RackmounttheSmartIP Access usingthesuppliedRack-mountkit.Thereare2
possiblepositionson thesideoftheSmartIP Access toconnectthebracket. Screw
thebrackettotheSmartIPAccess using2screws. SeeFigure3.Screwtheother
bracketsectiontotherack.
MINICOMSMARTIPACCESS
PowerRemote ResetLocal
Screw this section
toside ofSmart IP
Access
Screw thissection
tothe rack
Figure3Rackmounting theSmartIPAccess
7.Terminology
Belowaresometermsand theirmeaningsusedinthisguide.
TermMeaning
TargetServer The computers/serversthatareaccessedremotelyviatheSmart IP
Access.
Clientcomputer The PCrunningaremoteSmartIPAccess session
RemoteSession The process of accessingandcontrollingTarget Serversconnected
toSmart IPAccess fromaUserstation
8.Clientcomputeroperatingsystem
WindowsNT4.0,2000, XPor2003 Server, withIE6.0orhigher. 128bit
encryptionisrequiredifa securedconnectionisselected.
9.Connectingthesystem
ConnecttheTargetServer/KVMswitchtotheSmartIP Access asfollows:
1.Connectoneendofthe3in1CPUcabletothe Computer portsoftheSmartIP
Access.
2.Connecttheotherendofthe3in1CPUcabletotheKVMportsoftheTarget
Server/KVMswitch.
3.TooperatetheKVMswitchesandServerslocally, connecta keyboard, mouse
and monitortotheIP Access’sLocalConsoleconnectors.

USERGUIDE
8
4.ConnectSmartIPAccess tothenetworkbyattachingoneoftheLANportsto
anEthernetporton yourNetwork. IP Access hastwoLANinterfaces–see
InitialSettings
5.Connecttothepowersupplyusingthepowercordprovided.
Figure4and Figure5illustratetheconnectionstoa computerand KVMswitch
respectively, withtheoptionalKVMconsole.
3in1CPUcable
TargetPC
POWER
100-240VAC50/60Hz
www.minicom.com
CONSOLECOMPUTER
22
11
L
A
N
S
E
R
I
A
L
UseroverIP
hp1925
Auto12
LAN /WAN
Figure4SmartIPAccess connectionstoacomputer

SMARTIPACCESS
9
Computerrack
ProLiantDL360
9.1-GB10k
ULTRA2SCSI
9.1-GB10k
ULTRA2SCSI
ProLiantDL360
9.1-GB 10k
ULTRA2SCSI
9.1-GB 10k
ULTRA2SCSI
ProLiantDL360
9.1-GB 10k
ULTRA2SCSI
9.1-GB 10k
ULTRA2SCSI
ProLiantDL360
9.1-GB 10k
ULTRA2SCSI
9.1-GB 10k
ULTRA2SCSI
ProLiantDL360
9.1-GB10k
ULTRA2SCSI
9.1-GB10k
ULTRA2SCSI
ProLiantDL360
9.1-GB 10k
ULTRA2SCSI
9.1-GB 10k
ULTRA2SCSI
COMPUTER1COMPUTER2
COMPUTER6COMPUTER5STATION2
SCREENPS/2MOUSEKB
POWER
SERIALMOUSE
COMPUTER3COMPUTER4
COMPUTER8COMPUTER7
KVMswitch
3in1CPUcable
POWER
100-240VAC 50/60 Hz
www.minicom.com
CONSOLECOMPUTER
22
11
L
A
N
S
E
R
I
A
L
UseroverIP
hp1925
Auto12
LAN / WAN
Figure5SmartIPAccess connectionstoaKVMswitch
10.DefaultIPaddress
SmartIPAccess hastwoavailableEthernetAdapters, LAN 1andLAN 2:
·Bydefault, LAN 1 bootswithanautomaticallyassignedIP address ifa
DHCP (DynamicHostConfigurationProtocol)serverexists.TheMAC
address appearson a labelontheundersideoftheIP Access box. Alsoon
thelabelisthe6-digitdevicenumber(D.N.).Thedefaultdevicenameis
theletter‘D’followedbythedevicenumber
·LAN 2 bootswiththedefaultIP configuration:
IP Address -192.168.0.155
Subnetmask-255.255.255.0
YoucanusethedefaultSmartIPAccess IP address ifyourcomputerresidesonthe
samesubnetwhereSmartIPAccess isinstalled, oryoucanconnecta Crossover

USERGUIDE
10
LANconnectorcabletotheSmartIP Access ononeend, and totheEthernet
adapterofyourcomputerattheotherend.
11.LoggingintotheWebinterface
Tocompletetheinitialsetup via theWebconfigurationinterface:
1.OpenyourWebbrowser(InternetExplorerversion6.0orhigher)
2.TypetheIP address oftheSmartIPAccess system-https://IPaddress/config
and press Enter. Theloginpageappears,seeFigure6
Figure6Login page
3.TypetheAdministratorusernameandpassword. Bydefault, theusernameis:
admin and thepasswordis access (bothlowercase).
4.Press Enter. TheWebinterfaceopensattheNetworkConfigurationpage. See
Figure7.
5.Bookmarkthepageforeasyreference.

SMARTIPACCESS
11
Figure7SmartIPAccess Web interface
11.1SSLCertificatenotes
UponfirstconnectiontoSmartIPAccess’shttpsConfigurationpage, 2browser
securitywarningsappear.Click Yes toproceed.
Thefirstwarningdisappearsupon firstSmartIPAccessclientinstallation, once
Minicom’srootcertificateisinstalled.
12.Network>Configuration
ConsultyourNetworkAdministratorforthenetworksettings.
Devicename- TypethenamefortheSmartIP Access. Defaultdevicename
consistsoftheletter‘D’followedbythe6-digitdevicenumber(D.N.)found onthe
silverlabelontheundersideoftheIP Access box.
FirstTCPPort -Choose3consecutiveports,and type inthefirstportnumberof
theseries. Thedefaultport–900–issuitableforthemajorityofinstallations.
Note
Firewallorroutersecurityaccess listmustenableinboundcommunicationthrough
theselectedTCPportsfortheSmartIP Access’sIPaddress.
ForClientcomputeraccess froma securedLAN, theselectedportsshouldbeopen
foroutboundcommunication.
EnableEncryption-EnableEncryptionifyouwishtooperateina secure
connection(recommended).

USERGUIDE
12
If enabled, theInternetExplorerattheClientcomputermustsupport128 bit
Encryption.
Force HTTPS -Access theWebfront-endonlyusinganHTTPSconnection.
SmartIPAccess won'tlistenontheHTTPportforincomingconnections.
12.1LAN1
UnderLAN1inFigure7, isthefollowing:
EnableDHCP –Whena DHCPserverisactiveonthesamenetworktowhich
SmartIPAccess isconnected, DHCP providesautomaticIP assignment.
WhenDHCP isdisabled–(Recommended)–Youcanassigna fixedIP address to
theSmartIP Access.
ConsultyourNetworkAdministratorregarding theuseoftheDHCP. Note! Where
youhaveaccess totheDHCP server–yourconfigured(ordefault)SmartIP Access
devicenamewillappearon theDHCP server’sinterface,makingiteasytolocate.
EnableAccess forConfiguration- Clicktoenableaccess totheconfiguration
menu fromthe LAN 1. If disabled, a remotesessioncanonlybeperformedvia
LAN 1 and theWebconfiguration menu canonlybeaccessedfrom LAN 2.This
maybeusefulwhendedicating LAN 2 toLANaccess only, toenhancesecurity.
WhenDHCP isdisabled,enter an IPAddress, SubnetMask, and Default
Gateway for LAN 1 and 2, asgivenbyyourNetworkAdministrator.
12.2KVM.net
KVM.net isa centralizedIP basedsystemforsecurecontrolofserversand
networkdevices, powerand useradministration inthedata centerenvironment.
KVM.net combinesOut-Of-Band, KVMvia IP access withmodernITstandards
and requirements. Itisthemostcomprehensiveremoteservermaintenancesolution
availableinthemarkettoday.
EnableKVM.net -CheckthisoptiontoallowSmartIP Access unittoberemotely
managedbyMinicom’s KVM.net system.
Manager AutoDiscovery –whenchecked, KVM.net automaticallydetectsSmart
IP Access, ifitresidesonthesamenetworksegment.
Manager IP– If SmartIPAccess residesona differentsegment, typethestaticIP
address oftheKVM.netManager. (WeadvisetypingthestaticIP address ofthe
KVM.netManagereveniftheSmartIPAccess residesonthesamenetwork
segmentastheKVM.netManager).

SMARTIPACCESS
13
13.Network>SNMPsettings
From the menuclickSNMPsettings. Thefollowingappears.
Figure8SNMPsettings
FromthispageyoucanactivateordeactivateSNMP logging.
Enabletraps -ChecktoenableSNMP trapsofSmartIP Access eventsand
operation.
Community– typetheSNMP community
SNMPManager IP- EntertheSNMPServerIPaddress
Tosavechanges, click .
14.Administration>UserSettings
From the menuclickUserSettings, thefollowingappears.
Figure9UserSettings
OnthispageanAdministratorcreatesand editsusers.
Thereare3levelsofuseraccess.
·Administrator
·User
·Viewonly

USERGUIDE
14
14.1Administrator
AnAdministratorhasunrestrictedaccess toall windowsand settingsandcan“take
over”any activesession. AnAdministratorcanchangethenameandpasswordof
all users.
14.2User
AUserhasno access totheWebconfigurationinterface. Whenaccessinga Target
Servera Usercannotusethefollowing:
·Advancedmousesettings
·Powercycle
14.3View only
ViewonlycanviewthescreenofanyTargetServerwithoutkeyboardand mouse
control. OnlylimitedoptionsappearsuchasswitchingServersand Disconnect
(Explainedonpages23 and31). A“viewonly”indicatorappearson theviewer’s
localmousepointer.
14.4Addingauser
Toadd a user:
1.Click and typea nameanda password. Thepasswordmustbeat
least6characters–lettersornumbers,and mustnotincludetheusername,even
ifothercharactersareadded.
Note! Thefollowing“special”characters:&,<,>,”, {,}cannotbeusedfor
eithertheusernameorpassword.
Dependingonthesecuritylevelchosentheusernameandpasswordparametersare
different. Seesection 17 on page17.
2.Selectthepermissiontypefromthe Permission box.
3.Click ,theuserappearsinthelistofusers.

SMARTIPACCESS
15
14.5Editingauser
Toedita user:
1.Selecttheuserfromthelist.
2.Click . Youcannowchangeall theparameters–username,
permissionandpassword.
3.Click ,thechangesaresaved.
14.6Deletingauser
Todeletea user:
1.Selecttheuserfromthelist.
2.Click .
3.Click ,thechangesaresaved.
14.7Blockingauser
Analternativetodeletinga userisblocking a user.Thismeansthattheuser’sname
and passwordisstored, buttheuserisunabletoaccess thesystem. Check Block to
blocka user.Uncheck Block toallowtheuseraccess.
15.Administration>Switchconfiguration
Whena KVMswitchisconnectedtothesystem, youmustconfiguretheswitchin
thesystem.
Todo so:
1.Fromthemenu click SwitchConfiguration. TheKVMSwitchConfiguration
windowappear,seeFigure10.

USERGUIDE
16
Figure10 Switchconfiguration
1.Choosethemanufacturerand modeloftheconnectedKVMswitch. Thenumber
ofpossibleconnectedserversappearsinthe Server Name section.
2.Changethenameoftheconnectedserversbyselectingtheserverand typinga
newname. Click tosavechanges.
Note! Servernamesleftas UNUSED cannotbeaccessed.
Installswitchdefinitionfile
WheretheKVMswitchtypeisnotlistedin the manufacturer/modeldrop-down
lists, contact Minicom torequestanupdatedSwitchDefinitionfilewiththedesired
KVMswitchlisted.
1.LoadthefileontotheClientcomputer.
2.Locateand installtheKVMswitchdefinitionfile. Theswitchdefinitionfileis
updated.
16.Administration>Serial Settings
Whereyouhavea Serialdeviceconnectedtothesystemyoumustconfigurethe
RS232settings.
Todo so:
From the menuclick SerialSettings, the SerialSettings appear,seeFigure11.

SMARTIPACCESS
17
Figure11 SerialSettings
ForbothSerialports(whererelevant), typeina devicenameandchoosethecorrect
deviceparameters.
16.1Show
Tick Show tomakethedeviceappearinthelistofservers/devicesthatcanbe
accessed. WherethereisnodeviceconnectedtotheparticularSerialportuncheck
Show.
17.Security>Settings
Configurethesecurityfeatures, suchasAccountBlocking, PasswordPolicyand
IdleTimeout, asexplainedbelow.
From the Security sectionclick Settings, the Security Settings appear, see Figure
12.
Figure12 SecuritySettings

USERGUIDE
18
Thesecuritypageelements:
AccountBlocking –decideonthenumberofattemptstologinwitha wrong
usernameorpasswordafterwhichthereisa timelockoratotalblock.
PasswordPolicy –Youhavetheoptionofa standardorhighsecuritylevelof
password. Thetablebelowshowstheparametersofthe2options.
StandardSecurityPasswordHigh securityPassword
6charactersormore8charactersormoremust
includeat least1digitand1
uppercaseletterand 1“special”
characterasfollows
!@#$%^*()_-+=[]’:;?/
Must notincludetheusernameMust notincludetheusername
Checktheboxtoenablethehighsecuritypasswordpolicy. Unchecked, the
standardsecuritypolicyapplies.
IdleTimeout –SelecttheTimeoutinactivityperiodafterwhichtheuseris
disconnectedfromthesystem. Timeoutcanalsobedisabled.
18.Security>SSLcertificates
Fromthemenu, select SSLCertificate, theSSLCertificatepageappears,see
Figure13.
Figure13 TheSSL Certificatepage
YoucanreplacethecurrentSmartIP Access’sSSLcertificate.
CertificateFile -Browsetolocatethe cer file.
PrivateFile -Browsetolocatethe privatekey file.
KeyPassword -Typethe“privatekey”password.
Click .

SMARTIPACCESS
19
19.Security>EventLog
Fromthemenu select EventLog.TheEventLog pageappears, see Figure14.
Hereyoucanviewthedevicelog, recordingvariousevents:securityalerts, system
alerts, configurationchanges, and useractivity.
Figure14 Eventlog
20.Maintenance >SetSystemTime
Fromthemenu select SetSystemTime. TheTimeSettingspageappearssee
Figure15.SetthecorrectdateandtimeforSmartIPAccess sothatthelogsrecord
thecorrecttimeoftheevents.
Figure15 Time Settings