Raritan DOMINION SX - User manual

Installation and
Operations Manual
SX4 SX32
SX8 SX48
SX16
Raritan Computer Inc.
400 Cottontail Lane
Somerset, NJ 08873
USA
Tel. [phone]
Fax. [phone]
E-mail: [email protected]
http://www.raritan.com
Raritan Computer Europe, B.V.
Eglantierbaan 16
2908 LV Capelle aan den IJssel
The Netherlands
Tel. [phone]
Fax. [phone]
E-mail: [email protected]
http://www.raritan.com
Raritan Computer Japan, Inc.
4th Flr. Shinkawa NS Building
1-26-2 Shin-kawa, Chuo-ku
Tokyo 104-0033
Japan
Tel. [phone]
Fax. [phone]
E-mail: [email protected]
http://www.raritan.co.jp
Raritan Computer Taiwan, Inc.
5F, 121, Lane 235,
Pao-Chiao Rd., Hsin Tien
Taipei Hsien
Taiwan, ROC
Tel. [phone]
Fax. [phone]
E-mail: [email protected]
http://www.raritan.com.tw
Raritan Computer France
120 Rue Jean Jaures
93200 Levallois-Perret
France
Tel. [phone]
Fax. [phone]
E-mail: [email protected]
http://www.raritan.fr
Raritan Computer Deutschland GmbH
Lichtstraße 2
D-45127 Essen
Germany
Tel. [phone]
Fax. [phone]
E-mail: [email protected]
http://www.raritan.de
Raritan Computer U.K. Ltd.
36 Great St. Helen's
London
EC3A 6AP
United Kingdom
Tel. [phone]
Fax. [phone]
E-mail: [email protected]
http://www.raritan.com
Shanghai Representative Office of
Raritan Computer, Inc.
RM 19C-1 Shanghai Shiye Building
18 Caoxi North Road
Shanghai China 2000030
Tel. [phone]
Fax. [phone]
E-mail: [email protected]
http://www.raritan.com.tw
LISTE
D
CUS
L
U
1F61
I.T.E.
Copyright ©2004 Raritan Computer, Inc.
DSX-0G-E
November 2004
255-60-2000

Copyright and Trademark Information
This document contains proprietary information that is protected by copyright. All rights reserved. No part
of this document may be photocopied, reproduced, or translated into another language without express
prior written consent of Raritan Computer, Inc.
©Copyright 2004 Raritan Computer, Inc., Dominion, RaritanConsole, SecureChat, Remote Power Control,
Paragon, Powerboard and the Raritan company logo are trademarks or registered trademarks of Raritan
Computer, Inc. All rights reserved. Java is a registered trademark of Sun Microsystems, Inc. Internet
Explorer and Active Directory are registered trademarks of Microsoft Corporation. Netscape and Netscape
Navigator are registered trademarks of Netscape Communication Corporation. Mozilla is a registered
trademark of the Mozilla Foundation. RC4 is a registered trademark of RSA Corporation. Other
trademarks or registered trademarks are the property of their respective holders.
EXPORT NOTICE
Dominion SX models contain 128-bit encryption software. Export of this product is restricted under U.S.
law. Information is available from the U.S. Department of Commerce, Bureau of Export Administration at
www.bxa.doc.gov.
For assistance in the U.S., please contact the Raritan Technical Support Team
by telephone [phone], by fax [phone]), or by e-mail [email protected]m
Ask for Technical Support – Monday through Friday, 8:00am to 8:00pm, EST.
For assistance outside the U.S., please contact your regional Raritan office.

This page intentionally left blank.

CONTENTS i
Contents
Chapter 1: Introduction .................................................................. 1
Dominion SX Overview..............................................................................................................1
Product Photos...........................................................................................................................1
Product Features........................................................................................................................1
Package Contents......................................................................................................................2
Chapter 2: Installation.................................................................... 3
Pre-Configuration Notes.............................................................................................................3
Hardware Installation .................................................................................................................3
Initial Software Configuration.............................................................................................................5
Configuration .....................................................................................................................................5
Step-by-Step Configuration ...............................................................................................................6
Time and Date Configuration.....................................................................................................8
Configuration .....................................................................................................................................8
Deployment................................................................................................................................9
Chapter 3: Operation .................................................................... 11
Overview ..................................................................................................................................11
Accessing the Remote Device.................................................................................................11
Browser-Based Access....................................................................................................................11
Security Dialog for Console Display.........................................................................................13
Internet Explorer..............................................................................................................................13
Netscape Navigator.........................................................................................................................14
Sending a Break / Null .............................................................................................................14
Chapter 4: Console Features........................................................ 15
Emulator...................................................................................................................................15
Settings............................................................................................................................................15
History .............................................................................................................................................16
Write Access....................................................................................................................................17
Sending a Break/Null.......................................................................................................................18
User List ..........................................................................................................................................19
Close ...............................................................................................................................................20
Edit...........................................................................................................................................21
Tools.........................................................................................................................................22
Start Logging ...................................................................................................................................22
Stop Logging ...................................................................................................................................23
Script........................................................................................................................................24
SecureChat..............................................................................................................................25
Help..........................................................................................................................................26
Help Topics......................................................................................................................................26
About RaritanConsole......................................................................................................................27
Direct Port Access....................................................................................................................28
URL with Password and Username and Port ..................................................................................28
URL with Port Number.....................................................................................................................29
Exit the Application...................................................................................................................30
Dominion SX Management......................................................................................................32
Display.............................................................................................................................................32
Configuration Lock and the Configuration Save Commands...........................................................33
Update.............................................................................................................................................33
Save and Reload.............................................................................................................................33
Configuration............................................................................................................................35
Report..............................................................................................................................................35
Network ...........................................................................................................................................36
Ports................................................................................................................................................39
Users...............................................................................................................................................41
IP ACL.............................................................................................................................................44
Certificate ........................................................................................................................................49
RADIUS...........................................................................................................................................56
Time.................................................................................................................................................59
Notification.......................................................................................................................................60
Upgrade ...................................................................................................................................64
Reset........................................................................................................................................66

ii CONTENTS
Soft Reset........................................................................................................................................66
Factory Reset ..................................................................................................................................67
Chapter 5: Dominion SX Connectivity and Serial Pin-Out Guides 69
Connectivity Table:...................................................................................................................69
Dominion SX Serial Pinouts.....................................................................................................69
Chapter 6: Using Secure Shell (SSH) with Dominion SX Series .. 71
Secure Shell (SSH) Access .....................................................................................................71
Interactive Session...................................................................................................................71
Command Line Arguments Session........................................................................................73
Port Sharing Using SSH..................................................................................................................74
Chapter 7: Authentication and Authorization .............................. 75
Implementing LDAP Remote Authentication............................................................................75
TACACS+ Server Configuration ..............................................................................................76
Chapter 8: Logging ....................................................................... 79
NFS Per Port Logging Configuration Usage...........................................................................79
Name...............................................................................................................................................79
Description.......................................................................................................................................79
NFS Server Setup....................................................................................................................80
Chapter 9: SNMP........................................................................... 81
SNMP Trap Configuration........................................................................................................81
Name...............................................................................................................................................81
Description.......................................................................................................................................81
Chapter 10: System Configuration ............................................... 83
Local Port Access Configuration..............................................................................................83
Name...............................................................................................................................................83
Description.......................................................................................................................................83
Name...............................................................................................................................................84
Description.......................................................................................................................................84
Service (Telnet and SSH) Configuration..................................................................................84
Name...............................................................................................................................................84
Description.......................................................................................................................................84
Chapter 11: Firmware Upgrade Instructions ............................... 87
Firmware Image Upgrade Instructions for DSX16/DSX32.......................................................87
Troubleshooting Notes.............................................................................................................87
Appendix A: Specifications .......................................................... 89
Appendix B: System Defaults....................................................... 91
Appendix C: Certificates .............................................................. 93
Certificate.................................................................................................................................93
Certificate Contents.........................................................................................................................93
Certificate Authority .........................................................................................................................93
Installing Dominion SX CA-Root Certificate to a Browser .......................................................95
Installing CA Root for IE Browsers...........................................................................................96
Accept a Certificate (Session-Based)..............................................................................................96
Install the Raritan Root Certificate...................................................................................................96
Remove an Accepted Certificate .....................................................................................................99
Install CA Root for Netscape Navigator.................................................................................100
Accept a Certificate (Session-Based)............................................................................................100
Install the Dominion SX Root Certificate........................................................................................101
Remove an Accepted Certificate ...................................................................................................103
Install a Third-Party Root Certificate......................................................................................104
Appendix D: RADIUS Server ....................................................... 107
Overview ................................................................................................................................107
Install and Configure the RADIUS Server for Windows 2000................................................108

CONTENTS iii
Appendix E: Configuring Cisco ACS RADIUS Server.................. 115
Appendix F: RSA ACE/Server Configuration............................... 119
Lightweight Directory Access Protocol (LDAP)......................................................................124
Appendix G: Modem Configuration............................................. 125
Client Dialup Networking Configuration.................................................................................125
Windows NT Dialup Networking Configuration......................................................................125
Windows 98 Dialup Networking Configuration.......................................................................127
Windows 2000 Dialup Networking Configuration...................................................................129
Appendix H: TCL Programming Guide........................................ 133
Overview ................................................................................................................................133
TCL Architecture with Target System....................................................................................133
Boot Script Support........................................................................................................................135
File System....................................................................................................................................135
File Directory Structure..................................................................................................................135
File System API through TCL ........................................................................................................135
TCL Commands.............................................................................................................................136
Accessing TCL Window.................................................................................................................137
Resetting TCL Interpreter..............................................................................................................137
Editing TCL Scripts........................................................................................................................137
Executing TCL Scripts...................................................................................................................137
Automatic Execution of a TCL Script upon Power Up....................................................................138
Generating a User Event........................................................................................................139
Extensions to TCL..................................................................................................................140
Basic TCL Server Example....................................................................................................149
Basic CPU Utilization Monitoring Example............................................................................150
TCL Server designed to interact with a TCL user..........................................................................153
Appendix I: Troubleshooting ...................................................... 155
Problems and Suggested Solutions.......................................................................................155
Page Access..................................................................................................................................155
Firewall..........................................................................................................................................156
Login..............................................................................................................................................156
Port Access ...................................................................................................................................157
Upgrade.........................................................................................................................................157
Modem...........................................................................................................................................157
Appendix J: Technical FAQs ...................................................... 159

iv FIGURES
Figures
Figure 1 Dominion SX32 Unit...........................................................................................................................1
Figure 2 Rear Panel of 32-port single power supply model .............................................................................3
Figure 3 Default Settings for Factory Reset Mode...........................................................................................4
Figure 4 Hardware Setup for Initial Software Configuration.............................................................................5
Figure 5 Initial Configuration showing Physical Installation was successful.....................................................6
Figure 6 Initial Configuration screen for the First Administrator Account .........................................................6
Figure 7 Initial Configuration screen for Network Settings ...............................................................................7
Figure 8 End of Initial Setup.............................................................................................................................7
Figure 9 Time Configuration Display................................................................................................................8
Figure 10 Deployment......................................................................................................................................9
Figure 11 Security Alert Display.....................................................................................................................11
Figure 12 Login Display .................................................................................................................................12
Figure 13 Main Display with Available Ports..................................................................................................12
Figure 14 Security Dialog in Internet Explorer................................................................................................13
Figure 17 Console Window............................................................................................................................14
Figure 18 Settings Command and Settings Window......................................................................................15
Figure 19 History Command..........................................................................................................................16
Figure 20 Get Write Access Command..........................................................................................................17
Figure 22 User List Command and User List Window ...................................................................................19
Figure 23 Close Command............................................................................................................................20
Figure 24 Edit Commands - Copy, Paste, and Select All Text.......................................................................21
Figure 25 Start Logging Command and Select File Window..........................................................................22
Figure 26 Stop Logging Command................................................................................................................23
Figure 27 Script Shell Command...................................................................................................................24
Figure 28 SecureChat Command and User Chat Window.............................................................................25
Figure 29 Help Topics Command and Help File Window...............................................................................26
Figure 30 Sample of About RaritanConsole Command and About Window ..................................................27
Figure 31 Direct Port Access Initial Display ...................................................................................................28
Figure 32 Security Warning Display...............................................................................................................28
Figure 33 Direct Port Access Display.............................................................................................................29
Figure 34 Invalid Port Number Error Display..................................................................................................29
Figure 35 Save the Changed Configuration Window .....................................................................................30
Figure 36 Exit Confirmation Display...............................................................................................................31
Figure 37 Unit Disconnection Display............................................................................................................31
Figure 38 Display Overview...........................................................................................................................32
Figure 39 Report Display ...............................................................................................................................35
Figure 40 Sample of Network Configuration Display......................................................................................36
Figure 41 Modem Connection to a Dominion SX unit....................................................................................38
Figure 42 Port Configuration Display.............................................................................................................39
Figure 43 Port Editing Display........................................................................................................................39
Figure 44 Users Tab Display..........................................................................................................................41
Figure 45 New User Creation.........................................................................................................................42
Figure 46 User Modification Screen...............................................................................................................43
Figure 47 Inserting a rule into the browser-based IP ACL configuration screen. ...........................................45
Figure 48 GUI User Interface.........................................................................................................................45
Figure 49 Certificate Tab Display...................................................................................................................49
Figure 50 Certificate Configuration Display....................................................................................................50
Figure 51 Generate Certificate Display..........................................................................................................51
Figure 52 View Self-Signed Certificate Display..............................................................................................51
Figure 53 Activating Default Certificate..........................................................................................................52
Figure 54 Generate CSR Request Display ....................................................................................................52

FIGURES v
Figure 55 CSR Configurable Parameters ......................................................................................................53
Figure 56 View CSR Display..........................................................................................................................53
Figure 57 User Certificate..............................................................................................................................54
Figure 58 Schematic of External Certificate Utilization ..................................................................................55
Figure 59 RADIUS Users Login Mechanism..................................................................................................56
Figure 60 Unsuccessful Login Message Window...........................................................................................57
Figure 61 RADIUS Configuration Display ......................................................................................................58
Figure 62 Current Users List..........................................................................................................................59
Figure 63 Time Configuration Display............................................................................................................59
Figure 64 Notification Display ........................................................................................................................60
Figure 65 New Notification Display................................................................................................................61
Figure 66 Edit Notification Destination...........................................................................................................62
Figure 67 Upgrade Display ............................................................................................................................64
Figure 68 Confirmation for Reset...................................................................................................................66
Figure 69 Confirmation on Users to be Disconnected....................................................................................66
Figure 70 Factory Reset Connector Location.................................................................................................67
Figure 71 Sample SSH Session Screen........................................................................................................74
Figure 72 Administrative Information .............................................................................................................93
Figure 73 Hierarchies of Certificate Authorities..............................................................................................94
Figure 74 Schematic Diagram of Certificate Authentication Scheme.............................................................95
Figure 75 Install Session Based Certificate....................................................................................................96
Figure 76 View of CA_ROOT.cer...................................................................................................................97
Figure 77 Certificate Manager Import Wizard ................................................................................................97
Figure 78 Import Wizard, Select a Certificate Page.......................................................................................98
Figure 79 Certificate Manager Import Wizard, Completion Page...................................................................98
Figure 80 Internet Options Display.................................................................................................................99
Figure 81 Certificate Manager Display...........................................................................................................99
Figure 82 Netscape New Site Certificate Window........................................................................................100
Figure 83 Netscape New Site Certificate Acceptance Window...................................................................100
Figure 84 Viewing the Certificate.................................................................................................................101
Figure 85 Netscape New Type Window.......................................................................................................101
Figure 86 Netscape New Certificate Authority Window................................................................................102
Figure 87 Netscape Web Site Certificates Window......................................................................................103
Figure 88 Certificate Already Exists Alert Window for Netscape..................................................................104
Figure 89 Certificate Signers’ Certificates Window in Netscape ..................................................................104
Figure 90 New Certificate Authority Window in Netscape............................................................................105
Figure 91 Cisco ACS Main Display.............................................................................................................115
Figure 92 Unit Configuration Display ...........................................................................................................115
Figure 93 Interface Configuration Display....................................................................................................116
Figure 94 RADIUS Properties Display .........................................................................................................116
Figure 95 New User Display .......................................................................................................................117
Figure 96 User Properties Display ...............................................................................................................117
Figure 97 Launching RSA Administration Application..................................................................................119
Figure 98 Add Agent Host Selection............................................................................................................119
Figure 99 Add Agent Host Display...............................................................................................................120
Figure 100 RADIUS Secret Key Display......................................................................................................120
Figure 101 Add Profile Selection..................................................................................................................121
Figure 102 Add Profile Display.....................................................................................................................121
Figure 103 Add Attribute Display .................................................................................................................122
Figure 104 Add User Display......................................................................................................................122
Figure 105 Profile Selection Display............................................................................................................123
Figure 106 Unit Selection Display per User ................................................................................................123
Figure 107 LDAP Configuration Screen.......................................................................................................124

vi FIGURES
Figure 108 Dial-Up Networking Display .......................................................................................................125
Figure 109 New Phone Entry Display ..........................................................................................................126
Figure 110 Dial-Up Security Display ............................................................................................................126
Figure 111 Configuring Windows 98 Dialup Networking..............................................................................127
Figure 112 Make New Connection – Connection Name ..............................................................................127
Figure 113 Make New Connection – Complete............................................................................................128
Figure 114 Connect to Window....................................................................................................................128
Figure 115 Windows 2000 Network and Dialup Connections ......................................................................129
Figure 116 Welcome to the Network Connection Wizard.............................................................................129
Figure 117 Network Connection Type..........................................................................................................130
Figure 118 Device Selection........................................................................................................................130
Figure 119 Phone Number to Dial................................................................................................................131
Figure 120 Connection Availability...............................................................................................................131
Figure 121 Network Connection Wizard Completion ...................................................................................132
Figure 124 TCL Architecture........................................................................................................................133
Figure 125 Activating TCL Scripting Window...............................................................................................137