Raritan CC-SG User manual

CommandCenter®
Secure Gateway
CC-SG
User Guide
Release 3.1
Copyright © 2007 Raritan, Inc.
CC-0K-E
January 2007
255-80-3100

This page intentionally left blank

Copyright and Trademark Information
This document contains proprietary information that is protected by copyright. All rights reserved.
No part of this document may be photocopied, reproduced, or translated into another language
without express prior written consent of Raritan, Inc.
© Copyright 2006 Raritan, CommandCenter, RaritanConsole, Dominion, and the Raritan
company logo are trademarks or registered trademarks of Raritan, Inc. All rights reserved. Java is
a registered trademark of Sun Microsystems, Inc. Internet Explorer is a registered trademark of
Microsoft Corporation. Netscape and Netscape Navigator are registered trademarks of Netscape
Communication Corporation. All other marks are the property of their respective owners.
FCC Information
This equipment has been tested and found to comply with the limits for a Class A digital device,
pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection
against harmful interference in a commercial installation. This equipment generates, uses, and can
radiate radio frequency energy and if not installed and used in accordance with the instructions,
may cause harmful interference to radio communications. Operation of this equipment in a
residential environment may cause harmful interference.
Japanese Approvals
Raritan is not responsible for damage to this product resulting from accident, disaster, misuse,
abuse, non-Raritan modification of the product, or other events outside of Raritan’s reasonable
control or not arising under normal operating conditions.
LISTED
CUS
L
U
1F61
I.T.E.
For assistance in the North or South America, please contact the Raritan Technical Support Team
by telephone [phone], by fax [phone], or by e-mail [email protected]
Ask for Technical Support – Monday through Friday, 8:00am to 8:00pm, Eastern.
For assistance around the world, please see the last page of this guide for
regional Raritan office contact information.

Safety Guidelines
To avoid potentially fatal shock hazard and possible damage to Raritan equipment:
•Do not use a 2-wire power cord in any product configuration.
•Test AC outlets at your computer and monitor for proper polarity and grounding.
•Use only with grounded outlets at both the computer and monitor. When using a backup
UPS, power the computer, monitor and appliance off the supply.
Rack Mount Safety Guidelines
In Raritan products which require Rack Mounting, please follow these precautions:
•Operation temperature in a closed rack environment may be greater than room
temperature. Do not exceed the rated maximum ambient temperature of the appliances
(please see Appendix A in the CC-SG Administrator Guide for additional information).
•Ensure sufficient airflow through the rack environment.
•Mount equipment in the rack carefully to avoid uneven mechanical loading.
•Connect equipment to the supply circuit carefully to avoid overloading circuits.
•Ground all equipment properly, especially supply connections, such as power strips
(other than direct connections), to the branch circuit.

CONTENTS i
Contents
Chapter 1: Introduction ......................................................................................1
Prerequisites...............................................................................................................1
Terminology/Acronyms ...............................................................................................1
New 3.1 Features........................................................................................................1
Chapter 2: Accessing CC-SG.............................................................................3
Before You Begin........................................................................................................3
JRE....................................................................................................................................................3
Disable Pop-up Blockers ...................................................................................................................3
Browser-Based Access via the CC-SG Director Client...............................................4
Browser Based Access via the CC-SG Access Client ................................................6
Possible Error Message in Internet Explorer .....................................................................................7
Standalone Client Access ...........................................................................................8
Accessing a Serial Interface for the First Time ..................................................................................9
CC-SG Director Client Window Components............................................................10
CC-SG Access Client Window Components.............................................................11
Chapter 3: Connecting to and Using Nodes via the CC-SG Director Client.12
Node Icons ......................................................................................................................................12
Interface Status ...............................................................................................................................13
Connect to Nodes .....................................................................................................13
Connect to a Node via a Serial Interface.........................................................................................13
Connect to a Node via an Out-of-Band KVM Interface....................................................................15
Connect to a Node via an In-Band KVM Interface...........................................................................17
Managing Node Power via an In-Band Power Interface..................................................................18
Managing Power to an IPMI Server Node .......................................................................................19
Disconnect from a Node............................................................................................20
Node Views...............................................................................................................20
Tree View ........................................................................................................................................20
Custom View ...................................................................................................................................21
Node Sorting Options ......................................................................................................................23
Power Control for Nodes...........................................................................................24
Single Interface Power Control........................................................................................................24
Single Node Power Control .............................................................................................................25
Node Group Power Control .............................................................................................................26
Node Chat.................................................................................................................27
Search for Nodes......................................................................................................28
Supported Wildcards .......................................................................................................................29
Change My Profile.....................................................................................................30
Change Your Password...................................................................................................................30
Change Your Email Address ...........................................................................................................31
Change the CC-SG Font Size .........................................................................................................31
Set Search Preference ....................................................................................................................31
Chapter 4: Connecting to and Using Nodes Via the CC-SG Access Client .33
Connect to a Node via an Out-of-Band Serial Interface...................................................................34
Connect to a Node via an Out-of-Band KVM Interface....................................................................35
Connect to an iLO/RILOE-Enabled Node........................................................................................37
Managing an iLO/RILOE Power Interface........................................................................................38
Managing Power to an IPMI Server Node .......................................................................................38
Disconnect from a Node............................................................................................38
Power Control for Nodes...........................................................................................38
Single Node Power Control .............................................................................................................38
Node Group Power Control .............................................................................................................39
Node Lists.................................................................................................................40
All Nodes List...................................................................................................................................40
Favorite Nodes List..........................................................................................................................40
Recent Nodes List ...........................................................................................................................42
Custom Views...........................................................................................................42
Change a custom view ....................................................................................................................42
Add a new custom view...................................................................................................................43
Change a custom view’s name........................................................................................................43

ii CONTENTS
Delete a custom view.......................................................................................................................43
Assign a default custom view ..........................................................................................................43
Apply a custom view........................................................................................................................43
Search for Nodes......................................................................................................43
Supported Wildcards .......................................................................................................................44
Node Chat.................................................................................................................44
My Profile..................................................................................................................44
Change Your Password...................................................................................................................44
Change Your Email Address ...........................................................................................................45
Set Default Node List.......................................................................................................................45
Chapter 5: Generating Reports........................................................................47
Active Nodes Report.................................................................................................47
User Data Report......................................................................................................48
Appendix A: Keyboard Shortcuts....................................................................49

FIGURES iii
Figures
Figure 1 CC-SG Director Client Login Screen..............................................................................................4
Figure 2 CC-SG Director Client Home Screen.............................................................................................5
Figure 3 Access Client Login Screen...........................................................................................................6
Figure 4 CC-SG Access Client’s Home Screen...........................................................................................7
Figure 5 IP Specification Window ................................................................................................................8
Figure 6 CC-SG Window Components ......................................................................................................10
Figure 7 CC-SG Access Client Components .............................................................................................11
Figure 8 The Nodes Tab............................................................................................................................12
Figure 9 Node Profile Screen—Serial Interface.........................................................................................13
Figure 10 Raritan Serial Console...............................................................................................................14
Figure 11 Node Profile Screen, Out-of-Band KVM Interface......................................................................15
Figure 12 Raritan Remote Client Window..................................................................................................15
Figure 13 Multi-Platform Client Window.....................................................................................................16
Figure 14 Node Profile Screen, In-Band KVM Interface.............................................................................17
Figure 15 HP's Remote Console Applet.....................................................................................................17
Figure 16 Node Profile Screen, In-Band Power Interface ..........................................................................18
Figure 17 Power Control Screen, iLO/RILOE.............................................................................................18
Figure 18 Power Control Screen for an IPMI Server Node ........................................................................19
Figure 19 Nodes Tree in Standard Tree View............................................................................................20
Figure 20 Custom View Screen .................................................................................................................21
Figure 21 Add Custom View Window.........................................................................................................22
Figure 22 Edit Custom View Window.........................................................................................................22
Figure 23 Delete Custom View Window.....................................................................................................23
Figure 24 Single Interface Power Control ..................................................................................................24
Figure 25 Power Control Screen................................................................................................................25
Figure 26 Group Power Control Screen.....................................................................................................26
Figure 27 Chat Session .............................................................................................................................27
Figure 28 Search for Node--Left: Find Matching String; Right: Filter by Search Results ...........................28
Figure 29 My Profile Screen.......................................................................................................................30
Figure 30 CC-SG HTML Client-Node Details Screen ................................................................................33
Figure 31 Node Profile Screen—Out-of-Band Serial Interface...................................................................34
Figure 32 Raritan Serial Client Window .....................................................................................................34
Figure 33 Node Profile Screen—Out-of-Band KVM Interface....................................................................35
Figure 34 Raritan Remote Client Window..................................................................................................35
Figure 35 Multi-Platform Client Window.....................................................................................................36
Figure 36 Node Profile Screen—iLO/RILOE KVM Interface ......................................................................37
Figure 37 HP's Remote Console Applet.....................................................................................................37
Figure 38 All Nodes List.............................................................................................................................40
Figure 39 Favorites List .............................................................................................................................41
Figure 40 Sort Favorites Window...............................................................................................................41
Figure 41 Recent List.................................................................................................................................42
Figure 42 Active Ports Report....................................................................................................................47
Figure 43 All Users’ Data Report ...............................................................................................................48

CHAPTER 1: INTRODUCTION 1
Chapter 1: Introduction
This document is intended for users who have been granted the Nodes Access privilege and have
access to particular nodes that are attached to Raritan devices or IPMI servers. With the Nodes
Access privilege, you can connect to nodes, control power to nodes, create custom views, search
for nodes, and use node chat to talk to other users who are connected to the same node. The
Active Nodes and User Data reports are also available.
Prerequisites
Before connecting to a node and managing nodes, the nodes need to be configured as well as the
application that is used to connect to the node. Please see Raritan’s CommandCenter Secure
Gateway Administrator Guide for additional information.
Terminology/Acronyms
Terms and acronyms found in this document include:
•iLO/RILOE—Hewlett Packard’s Integrated Lights Out/Remote Insight Lights Out servers
that can be managed by CC-SG. Targets of an iLO/RILOE device are powered on/off and
recycled directly.
•In-band Access—using the TCP/IP network to correct or troubleshoot a node in your
network. You can access KVM and Serial devices via these in-band applications:
RemoteDesktop Viewer, SSH Client, VNC Viewer.
•IPMI Servers (Intelligent Platform Management Interface)—servers that can be controlled
by CC-SG.
•Out-of-band Access—using applications such as Raritan Remote Client (RRC), Raritan
Console (RC), or Multi-Platform Client (MPC) to correct or troubleshoot a KVM or serial
managed node in your network.
•Ports—are connection points between a Raritan Device and a node. Ports exist only on
Raritan devices and identify a pathway from that device to a node.
•Nodes—are the target systems, such as servers, desktop PCs, or other networked equipment,
that CC-SG users can access.
New 3.1 Features
These features are now available in CC-SG 3.1:
Note: Click the page number to navigate to the feature’s description.
FEATURE LOCATION
Improved Java GUI—CC-SG Director Client Page 4
HTML-based client—CC-SG Access Client Page 6

2 COMMANDCENTER SECURE GATEWAY USER GUIDE
This page intentionally left blank

CHAPTER 2: ACCESSING CC-SG 3
Chapter 2: Accessing CC-SG
You can access CC-SG in two ways, each described in this chapter:
•Through a browser: CC-SG supports numerous Web browsers (please see the
Compatibility Matrix on http://www.raritan/support and click Firmware Upgrades then
CommandCenter Secure Gateway for a complete list of browsers and platforms). CC-SG
offers two browser-based access options, a CC-SG Director Client and a CC-SG
Access Client.
•Through a standalone client: Install the executable from the included CD and run this
instead of using the browser-based CC-SG Director Client. This executable, the CC-SG
Standalone Client, functions exactly like the CC-SG Director Client.
Note: Multiple users can be connected simultaneously, using any client.
Before You Begin
CC-SG is accessed via a web browser from a user’s PC. Please verify the following.
JRE
The browser must have the correct version of Java Runtime Environment installed for full
functionality. To check the version you are using:
1. Open Control Panel.
2. Click Add or Remove Programs.
3. Verify that your Java version is compatible with your CC Secure Gateway release. Please
refer to the Compatibility Matrix on http://www.raritan.com/support. Click Firmware
Upgrades, then CommandCenter Secure Gateway, then Compatibility Matrix.
To upgrade to the correct JRE version, go to http://java.sun.com/products/archive.
Disable Pop-up Blockers
The client PC and the browser should have all pop-up blockers disabled as well as any firewall
software such as XP SP2 that is enabled by default.
To disable pop-up blockers in the PC:
1. Open Control Panel.
2. Click Internet Options.
3. Click the Privacy tab.
4. Clear the Block Pop-ups checkbox.
5. Click Apply, and then click OK.

4 COMMANDCENTER SECURE GATEWAY USER GUIDE
Browser-Based Access via the CC-SG Director Client
1. Using a supported Internet browser, type the URL of the CC-SG, and then type /admin:
https://<IP address/admin>. For example, https://10.0.3.30/admin. You are warned if you
are using an unsupported Java Runtime Environment version on your machine. From the
window that pops up, select whether you want to download the correct JRE version from the
CC-SG server (if available), download it from the Sun Microsystems web site, or continue
with the incorrect version, and then click OK.
2. With the correct JRE version (or if you continue with an incorrect version) the Login window
appears.
Figure 1 CC-SG Director Client Login Screen
3. If the CC-SG Administrator has enabled the Restricted Service Agreement, read the
agreement text, and then check the I Understand and Accept the Restricted Service
Agreement checkbox.
4. Type your Username and Password,and then click Log In.

CHAPTER 2: ACCESSING CC-SG 5
5. Upon valid login, the CC-SG application window appears. The menu bar and tool bar, which
contain commands for operating CC-SG are at the top of the screen. The Nodes tab displays
the Nodes selection tree. The central panel is where operation screens appear.
Figure 2 CC-SG Director Client Home Screen

6 COMMANDCENTER SECURE GATEWAY USER GUIDE
Browser Based Access via the CC-SG Access Client
1. Using a supported Internet browser, type the URL of the CC-SG: https://<IP address>. For
example, https://10.0.3.30. The login screen appears.
Figure 3 Access Client Login Screen
2. If the CC-SG Administrator has enabled the Restricted Service Agreement, read the
agreement text, and then check the I Understand and Accept the Restricted Service
Agreement checkbox.
3. Type your Username and Password.
4. Click Log In.

CHAPTER 2: ACCESSING CC-SG 7
5. Upon valid login, the CC-SG Access Client’s Home screen appears.
Figure 4 CC-SG Access Client’s Home Screen
Possible Error Message in Internet Explorer
If you are using Internet Explorer, and you have access to a large number of nodes, you may see
the following error message while CC-SG loads:
A script on this page is causing Internet Explorer to run slowly. If it continues to run, your
computer may become unresponsive. Do you want to abort the script?
This warning message occurs when a script is taking longer than the default time to run. Please
click No in the warning message to continue running the script. Depending on your particular
client and server speeds, and the amount of data loading, the message may recur.
You can change the default time that Internet Explorer will allow a script to run. Please refer to
Microsoft Knowledge Base article 175500 for instructions.
If you experience a similar message in Firefox, please refer to Firefox documentation for
resolution.

8 COMMANDCENTER SECURE GATEWAY USER GUIDE
Standalone Client Access
The CC-SG Standalone Client allows you to connect to CC-SG by launching a Java application
instead of running an applet through a Web browser.
1. Install the standalone CC-SG client located on the included CD ROM onto your PC. Or, to
download the standalone client from CC-SG, type the URL of the CC-SG and then type
/install. For example: https://<IP address/install>.
2. Double-click on the CC Application icon on your desktop to launch the CC-SG client. An
address specification window appears.
Figure 5 IP Specification Window
3. Type the IP address of the CC-SG unit you want to access in the IP to connect field, and then
click Start. You are warned if you are using an unsupported Java Runtime Environment
version on your machine. Once you have connected to a CC-SG, its IP address is
automatically saved and can be selected from the drop-down list in the future.
4. After the standalone client successfully connects to CC-SG, the standard login screen appears,
and the Standalone Client looks and behaves just like its browser-based counterpart, the CC-
SG Director Client. Type your Username and Password,and then click Login.

CHAPTER 2: ACCESSING CC-SG 9
Accessing a Serial Interface for the First Time
To access a remote node that is connected via a serial interface, click the Nodes tab and select the
interface. If the node is configured for a console application, a Security Warning appears,
indicating that the console applet is a signed applet from Raritan Systems. Click Yes and the
console appears.
Warning: The security warning display (appearing in IE only) appears the first
time the user connects to a serial interface. Click Yes when this display
appears; if you click No, the console application does not launch and you must
exit CC–SG, close the browser, re-launch the browser, and connect to CC–SG
again.
For additional details about RaritanConsole operation, please refer to Raritan’s RaritanConsole
User Guide.
When a custom application is associated with a KVM or serial interface, selecting that interface
launches the associated application. Raritan Remote Control and RaritanConsole are examples of
custom applications that can be integrated into CC-SG.

10 COMMANDCENTER SECURE GATEWAY USER GUIDE
CC-SG Director Client Window Components
Figure 6 CC-SG Window Components
1. Nodes Selection tab: Click the Nodes tab to display all nodes in a tree view. Interfaces are
grouped under their parent nodes. Click the + and - signs to expand or collapse the tree. Click
a node to view the Node Profile. Right-click an interface and select Connect to connect to
that interface. You can sort the nodes by Node Name (alphabetical) or Node Status (Available,
Busy, Unavailable). Right-click the tree view, click Node Sorting Options, and then click By
Node Name or By Node Status.
2. Quick Commands toolbar: This toolbar offers some shortcut buttons for executing common
commands rapidly.
3. Operation menu bar: These menus contain commands to operate CC-SG. You can also
access some of these commands by right-clicking on the icons in the Nodes selection tab. The
menus and menu items you see are determined by your user access privileges.
4. Main Display area: The commands you select from the menu bar and/or the tool bar display
in this main area. Displays here are referred to as screens. Screens may be broken down into
panels.
5. Server Time: The current time and time zone as configured on CC-SG. This time may be
different than the time used by the client.
2
1
3
4
5

CHAPTER 2: ACCESSING CC-SG 11
CC-SG Access Client Window Components
Figure 7 CC-SG Access Client Components
1. User ID and Date: Your CC-SG system date and time and User ID display at the top of the
left panel. Click the User ID hyperlink to open the My Profile tab.
2. Search: The Search function allows you to search for nodes in two ways.
3. Node lists: The node lists display below the search area. In each list, you see icons that show
the status of each node. The All Nodes list includes all nodes to which you have access. The
Favorites list contains your personalized list of nodes. You can add nodes, delete nodes, and
sort the list of Favorite nodes. The Recent list displays the ten nodes you have most recently
accessed. Click a node to open the Node tab. The Node tab contains the Node profile, with
details on the selected node. You can also connect to an interface, chat with other users, and
perform power control operations from the Node tab.
4. Helpful Links: The Helpful Links section contains a link to launch the CC-SG Director
Client, which can be used to perform administrative functions, and a link to open the
CommandCenter Secure Gateway User Guide.
5. On-screen Help: The Help section at the bottom of the screen can be expanded and collapsed
by clicking the black arrow.
6. Main Display area: The commands you select from the menu bar and the tool bar appear in
this main area.
7. Logout: Click Logout to log out of CC-SG.
8. Navigation tabs: The Navigation tabs are located at the top of every screen. Click a tab to
open the related screen.
1
3
8
6
54
7
2

12 COMMANDCENTER SECURE GATEWAY USER GUIDE
Chapter 3: Connecting to and Using Nodes via
the CC-SG Director Client
Node commands allow you to connect to, and disconnect from nodes of serial devices, IPMI
servers, and KVM devices managed by your CC-SG.
When you click the Nodes tab, the Nodes tree displays information about the nodes connected
with CC-SG. Nodes are arranged alphabetically by name, or grouped by availability status. Nodes
arranged by status are sorted alphabetically within their availability grouping. To switch between
arranging methods, right-click on the tree, click Node Sorting Options, then click Sort By Node
Name or Sort By Node Status. Clicking a node displays the Node Profile screen.
Figure 8 The Nodes Tab
Node Icons
For easier identification of status, nodes display a number of different colored icons in the nodes
tree. For a description of what the icons represent, see the table below.
ICON MEANING
Node available – the node has at least one interface that is available.
Node unavailable – all interfaces for the node are busy.