Raritan DKX2-V2.3.5-0N-E User manual

Copyright © 2011 Raritan, Inc.
DKX2-v2.3.5-0N-E
March 2011
255-62-4023-00
Dominion KX II
User Guide
Release 2.3.5

This document contains proprietary information that is protected by copyright. All rights reserved. No
part of this document may be photocopied, reproduced, or translated into another language without
express prior written consent of Raritan, Inc.
© Copyright 2011 Raritan, Inc. All third-party software and hardware mentioned in this document are
registered trademarks or trademarks of and are the property of their respective holders.
FCC Information
This equipment has been tested and found to comply with the limits for a Class A digital device,
pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection
against harmful interference in a commercial installation. This equipment generates, uses, and can
radiate radio frequency energy and if not installed and used in accordance with the instructions, may
cause harmful interference to radio communications. Operation of this equipment in a residential
environment may cause harmful interference.
VCCI Information (Japan)
Raritan is not responsible for damage to this product resulting from accident, disaster, misuse, abuse,
non-Raritan modification of the product, or other events outside of Raritan's reasonable control or not
arising under normal operating conditions.

iii
Contents
Chapter 1 Introduction 1
KX II Overview...............................................................................................................................2
KX II Help.......................................................................................................................................4
Related Documentation.......................................................................................................5
KX II Client Applications ................................................................................................................5
Virtual Media..................................................................................................................................6
Product Photos ..............................................................................................................................7
Product Features ...........................................................................................................................9
Hardware.............................................................................................................................9
Software.............................................................................................................................10
Terminology.................................................................................................................................10
Package Contents........................................................................................................................12
Chapter 2 Installation and Configuration 13
Overview......................................................................................................................................13
Default Login Information.............................................................................................................13
Getting Started.............................................................................................................................14
Step 1: Configure KVM Target Servers.............................................................................14
Step 2: Configure Network Firewall Settings.....................................................................26
Step 3: Connect the Equipment.........................................................................................27
Step 4: Configure the KX II................................................................................................29
Valid Special Characters for Target Names......................................................................33
Step 5 (Optional): Configure Keyboard Language............................................................35
Chapter 3 Working with Target Servers 37
Interfaces.....................................................................................................................................37
KX II Local Console Interface............................................................................................38
KX II Remote Console Interface........................................................................................38
Proxy Server Configuration for use with MPC, VKC and AKC....................................................50
Virtual KVM Client (VKC).............................................................................................................51
Overview............................................................................................................................51
Connecting to a KVM Target Server .................................................................................51
Toolbar...............................................................................................................................51
Switching Between KVM Target Servers ..........................................................................53
Power Controlling a Target Server....................................................................................53
Disconnecting KVM Target Servers ..................................................................................54
Choosing USB Profiles......................................................................................................54
Connection Properties.......................................................................................................55
Connection Information .....................................................................................................57
Keyboard Options..............................................................................................................57

Contents
iv
Video Properties................................................................................................................63
Mouse Options...................................................................................................................68
VKC Virtual Media.............................................................................................................73
Smart Cards (VKC, AKC and MPC)..................................................................................74
Tool Options ......................................................................................................................76
View Options......................................................................................................................79
Help Options......................................................................................................................80
Active KVM Client (AKC).............................................................................................................80
Overview............................................................................................................................80
AKC Supported Operating Systems and Browsers...........................................................81
Prerequisites for Using AKC..............................................................................................82
Multi-Platform Client (MPC).........................................................................................................82
Launching MPC from a Web Browser...............................................................................82
Chapter 4 Rack PDU (Power Strip) Outlet Control 84
Overview......................................................................................................................................84
Turning Outlets On/Off and Cycling Power .................................................................................85
Chapter 5 Virtual Media 88
Overview......................................................................................................................................89
Prerequisites for Using Virtual Media ..........................................................................................92
Using Virtual Media via VKC and AKC in a Windows Environment............................................93
Using Virtual Media......................................................................................................................94
File Server Setup (File Server ISO Images Only)........................................................................95
Connecting to Virtual Media.........................................................................................................97
Local Drives.......................................................................................................................97
Conditions when Read/Write is Not Available...................................................................98
CD-ROM/DVD-ROM/ISO Images......................................................................................99
Disconnecting Virtual Media......................................................................................................100
Chapter 6 USB Profiles 101
Overview....................................................................................................................................101
CIM Compatibility.......................................................................................................................102
Available USB Profiles...............................................................................................................102
Selecting Profiles for a KVM Port ..............................................................................................108
Mouse Modes when Using the Mac OS-X USB Profile with a DCIM-VUSB...................109
Chapter 7 User Management 110
User Groups...............................................................................................................................110
User Group List................................................................................................................111
Relationship Between Users and Groups .......................................................................111
Adding a New User Group...............................................................................................111
Modifying an Existing User Group...................................................................................118
Users..........................................................................................................................................119
User List...........................................................................................................................119

Contents
v
Adding a New User..........................................................................................................120
Modifying an Existing User..............................................................................................120
Logging a User Off (Force Logoff)...................................................................................121
Authentication Settings..............................................................................................................122
Implementing LDAP/LDAPS Remote Authentication......................................................123
Returning User Group Information from Active Directory Server....................................127
Implementing RADIUS Remote Authentication...............................................................128
Returning User Group Information via RADIUS..............................................................131
RADIUS Communication Exchange Specifications.........................................................131
User Authentication Process...........................................................................................133
Changing a Password................................................................................................................134
Chapter 8 Device Management 135
Network Settings........................................................................................................................135
Network Basic Settings....................................................................................................136
LAN Interface Settings.....................................................................................................138
Device Services.........................................................................................................................140
Enabling SSH ..................................................................................................................140
HTTP and HTTPS Port Settings......................................................................................140
Entering the Discovery Port.............................................................................................141
Configuring and Enabling Tiering....................................................................................142
Enabling Direct Port Access via URL..............................................................................146
Enabling the AKC Download Server Certificate Validation.............................................147
Configuring Modem Settings .....................................................................................................148
Configuring Date/Time Settings.................................................................................................149
Event Management....................................................................................................................151
Configuring Event Management - Settings......................................................................151
Event Management - Destinations ..................................................................................153
Power Supply Setup ..................................................................................................................157
Configuring Ports.......................................................................................................................158
Configuring Standard Target Servers..............................................................................159
Configuring KVM Switches..............................................................................................160
Configuring Rack PDU (Power Strip) Targets.................................................................162
Configuring Blade Chassis..............................................................................................167
Configuring USB Profiles (Port Page).............................................................................187
Configuring KX II Local Port Settings..............................................................................190
Port Group Management...........................................................................................................194
Chapter 9 Security Management 195
Security Settings........................................................................................................................195
Login Limitations..............................................................................................................196
Strong Passwords ...........................................................................................................198
User Blocking...................................................................................................................199
Encryption & Share..........................................................................................................201
Enabling FIPS 140-2 .......................................................................................................204

Contents
vi
Configuring IP Access Control...................................................................................................205
SSL Certificates.........................................................................................................................207
Security Banner .........................................................................................................................209
Chapter 10 Maintenance 211
Audit Log....................................................................................................................................211
Device Information.....................................................................................................................212
Backup and Restore ..................................................................................................................213
USB Profile Management..........................................................................................................216
Handling Conflicts in Profile Names................................................................................217
Upgrading CIMs.........................................................................................................................217
Upgrading Firmware ..................................................................................................................218
Upgrade History.........................................................................................................................221
Rebooting...................................................................................................................................221
Stopping CC-SG Management..................................................................................................223
Chapter 11 Diagnostics 225
Network Interface Page.............................................................................................................225
Network Statistics Page.............................................................................................................226
Ping Host Page..........................................................................................................................228
Trace Route to Host Page.........................................................................................................228
Device Diagnostics ....................................................................................................................230
Chapter 12 Command Line Interface (CLI) 232
Overview....................................................................................................................................232
Accessing the KX II Using CLI...................................................................................................233
SSH Connection to the KX II .....................................................................................................233
SSH Access from a Windows PC....................................................................................233
SSH Access from a UNIX/Linux Workstation..................................................................234
Logging In..................................................................................................................................234
Navigation of the CLI.................................................................................................................235
Completion of Commands...............................................................................................236
CLI Syntax -Tips and Shortcuts.......................................................................................236
Common Commands for All Command Line Interface Levels........................................236
Initial Configuration Using CLI...................................................................................................237
Setting Parameters..........................................................................................................237
Setting Network Parameters............................................................................................238
CLI Prompts...............................................................................................................................238
CLI Commands..........................................................................................................................238
Security Issues ................................................................................................................239
Administering the KX II Console Server Configuration Commands..........................................239
Configuring Network ..................................................................................................................240
Interface Command.........................................................................................................240
Name Command...........................................................................................................241
IPv6 Command................................................................................................................241

Contents
vii
Chapter 13 KX II Local Console 242
Overview....................................................................................................................................242
Using the KX II Local Console...................................................................................................242
Simultaneous Users ........................................................................................................242
KX II Local Console Interface....................................................................................................243
Security and Authentication.......................................................................................................243
Local Console Smart Card Access............................................................................................244
Smart Card Access in KX2 8 Devices.............................................................................245
Local Console USB Profile Options...........................................................................................245
Available Resolutions.................................................................................................................246
Port Access Page (Local Console Server Display) ...................................................................247
Hot Keys and Connect Keys......................................................................................................249
Connect Key Examples...................................................................................................249
Special Sun Key Combinations .................................................................................................250
Accessing a Target Server ........................................................................................................251
Returning to the KX II Local Console Interface .........................................................................251
Local Port Administration...........................................................................................................251
Configuring KX II Local Console Local Port Settings......................................................252
KX II Local Console Factory Reset .................................................................................255
Resetting the KX II Using the Reset Button...............................................................................256
Appendix A Specifications 257
Physical Specifications ..............................................................................................................257
Environmental Requirements ....................................................................................................259
Supported Operating Systems (Clients)....................................................................................260
Supported CIMs and Operating Systems (Target Servers).......................................................261
Supported Operating Systems and CIMs (KVM Target Servers)..............................................267
Computer Interface Modules (CIMs)..........................................................................................269
Supported Browsers ..................................................................................................................270
Certified Modems.......................................................................................................................271
Devices Supported by the KX2-832 and KX2-864 Extended Local Port...................................271
Target Server Connection Distance and Video Resolution.......................................................271
KX2-832 and KX2-864 Extended Local Port Recommended Maximum Distances..................272
Remote Connection...................................................................................................................272
Supported Video Resolutions....................................................................................................272
Supported Keyboard Languages...............................................................................................274
Smart Card Readers..................................................................................................................275
Supported and Unsupported Smart Card Readers.........................................................275
Minimum System Requirements......................................................................................276
TCP and UDP Ports Used.........................................................................................................278
Network Speed Settings............................................................................................................280
Appendix B Updating the LDAP Schema 282
Returning User Group Information.............................................................................................282
From LDAP/LDAPS.........................................................................................................282
From Microsoft Active Directory ......................................................................................282

Contents
viii
Setting the Registry to Permit Write Operations to the Schema ...............................................283
Creating a New Attribute............................................................................................................283
Adding Attributes to the Class ...................................................................................................284
Updating the Schema Cache.....................................................................................................286
Editing rciusergroup Attributes for User Members.....................................................................286
Appendix C Informational Notes 289
Overview....................................................................................................................................289
Java Runtime Environment (JRE) .............................................................................................289
IPv6 Support Notes....................................................................................................................290
Keyboards..................................................................................................................................291
Non-US Keyboards..........................................................................................................291
Macintosh Keyboard........................................................................................................293
Dell Chassis Cable Lengths and Video Resolutions .................................................................294
Fedora........................................................................................................................................294
Resolving Fedora Core Focus.........................................................................................294
Mouse Pointer Synchronization (Fedora)........................................................................294
VKC and MPC Smart Card Connections to Fedora Servers...........................................294
Resolving Issues with Firefox Freezing when Using Fedora ..........................................295
Video Modes and Resolutions...................................................................................................295
SUSE/VESA Video Modes..............................................................................................295
Supported Video Resolutions Not Displaying..................................................................295
USB Ports and Profiles..............................................................................................................296
VM-CIMs and DL360 USB Ports.....................................................................................296
Help for Choosing USB Profiles ......................................................................................296
Changing a USB Profile when Using a Smart Card Reader...........................................298
CIMs...........................................................................................................................................298
Windows 3-Button Mouse on Linux Targets....................................................................298
Windows 2000 Composite USB Device Behavior for Virtual Media................................299
Virtual Media..............................................................................................................................299
Virtual Media Not Refreshed After Files Added...............................................................299
Accessing Virtual Media on a Windows 2000 Server Using a D2CIM-VUSB.................300
Target BIOS Boot Time with Virtual Media......................................................................300
Virtual Media Connection Failures Using High Speed for Virtual Media Connections....300
CC-SG .......................................................................................................................................300
Virtual KVM Client Version Not Known from CC-SG Proxy Mode..................................300
Single Mouse Mode - Connecting to a KX II Target Under CC-SG Control Via VKC Using
Firefox..............................................................................................................................300
Proxy Mode and MPC .....................................................................................................301
Moving Between Ports of the KX II..................................................................................301

Contents
ix
Appendix D FAQs 302
General Questions.....................................................................................................................303
Remote Access..........................................................................................................................305
Universal Virtual Media..............................................................................................................307
USB Profiles...............................................................................................................................308
Bandwidth and KVM-over-IP Performance................................................................................310
Ethernet and IP Networking.......................................................................................................315
IPv6 Networking.........................................................................................................................317
Servers.......................................................................................................................................319
Blade Servers ............................................................................................................................320
Installation..................................................................................................................................322
Local Port...................................................................................................................................324
Extended Local Port (Dominion KX2-832 and KX2-864 Models Only) .....................................326
Power Control............................................................................................................................327
Scalability...................................................................................................................................329
Computer Interface Modules (CIMs)..........................................................................................331
Security......................................................................................................................................332
Smart Cards and CAC Authentication.......................................................................................334
Manageability.............................................................................................................................335
Miscellaneous............................................................................................................................336
Index 337

1
In This Chapter
KX II Overview...........................................................................................2
KX II Help...................................................................................................4
KX II Client Applications............................................................................5
Virtual Media..............................................................................................6
Product Photos..........................................................................................7
Product Features.......................................................................................9
Terminology.............................................................................................10
Package Contents...................................................................................12
Chapter 1
Introduction

Chapter 1: Introduction
2
KX II Overview
Raritan's Dominion KX II is an enterprise-class, secure, digital KVM
(Keyboard, Video, Mouse) switch that provides BIOS-level (and up)
access and control of servers from anywhere in the world via a web
browser. Up to 64 servers can be controlled with a standard KX II. With
the KX II 8-user model, up to 32 servers can be controlled with the
KX2-832 and up to 64 servers can be controlled with the KX2-864.
The KX II supports up to 8 video channels, allowing up to eight
concurrent users to connect to eight different video targets at any given
point in time. At the rack, the KX II provides BIOS-level control of up to
64 servers and other IT devices from a single keyboard, monitor, and
mouse. The integrated remote access capabilities of the KX II provide
the same levels of control of your servers via a web browser.
The KX II is easily installed using standard UTP (Cat 5/5e/6) cabling. Its
advanced features include virtual media, 128-bit encryption, dual power
supplies, remote power control, dual Ethernet, LDAP, RADIUS, Active
Directory®, Syslog integration, external modem capabilities, and web
management. The KX II 8-user model also provides an extended local
port located on the back of the device. These features enable you to
deliver higher up-time, better productivity, and bulletproof security - at
any time from anywhere.
KX II products can operate as standalone appliances and do not rely on
a central management device. For larger data centers and enterprises,
numerous KX II devices (along with Dominion SX devices for remote
serial console access and Dominion KSX for remote/branch office
management) can be integrated into a single logical solution using
Raritan's CommandCenter Secure Gateway (CC-SG) management unit.

Chapter 1: Introduction
3

Chapter 1: Introduction
4
Diagram key
Cat5 cable
Remote virtual media USB
drive(s)
Computer Interface
Module (CIM)
Rack PDU (power strip)
KX II
Local access
Note: KX2-832 and
KX2-864 also use an
extended local port.
Remote KVM and serial
devices
IP LAN/WAN
Modem
PSTN
Remote (network)
access
KX II Help
The KX II help provides information on how to install, set up, and
configure the KX II. It also includes information on accessing target
servers and power strips, using virtual media, managing users and
security, and maintaining and diagnosing the KX II.
A PDF version of the help can be downloaded from the Raritan
Firmware and Documentation page
http://www.raritan.com/support/firmware-and-documentation/ on the
Raritan website. Raritan recommends that you refer to the Raritan
website for the most up-to-date user guides available.
To use online help, Active Content must be enabled in your browser. If
you are using Internet Explorer 7, you must enable Scriplets. Consult
your browser help for information on enabling these features.

Chapter 1: Introduction
5
Related Documentation
The KX II help is accompanied by a KX II Device Quick Setup Guide,
which can be found on the Raritan Firmware and Documentation page
http://www.raritan.com/support/firmware-and-documentation/ of
Raritan's website.
Installation requirements and instructions for client applications used with
the KX II can be found in the KVM and Serial Access Clients Guide,
also found on the Raritan website. Where applicable, specific client
functions used with the KX II are included in the help.
KX II Client Applications
The following client applications can be used in the KX II:
Product
Works with...
MPC
RRC
VKC
RSC
AKC
KX II (Generation 2)
KX II 2.2 (or later)
See the KVM and Serial Client Guide for additional information on the
client applications. Also see the Working with Target Servers (on page
37) section of this guide, which contains information on using the clients
with the KX II.
Note: MPC and VKC require the Java™Runtime Environment (JRE™).
AKC is .NET based.

Chapter 1: Introduction
6
Virtual Media
All KX II models support virtual media. The benefits of virtual media -
mounting of remote drives/media on the target server to support software
installation and diagnostics - are now available in all of the KX II models.
Each KX II comes equipped with virtual media to enable remote
management tasks using the widest variety of CD, DVD, USB, internal
and remote drives and images. Unlike other solutions, the KX II supports
virtual media access of hard drives and remotely mounted images for
added flexibility and productivity.
Virtual media sessions are secured using 128-bit AES or RC4
encryption.
The D2CIM-VUSB CIM and D2CIM-DVUSB (computer interface module)
support virtual media sessions to KVM target servers supporting the USB
2.0 interface. These CIMs also support Absolute Mouse
Synchronization™ as well as remote firmware update.
Note: The black connector on the DVUSB CIM is used for keyboard and
mouse. The gray connector is used for virtual media. Keep both plugs of
the CIM connected to the device. The device may not operate properly if
both plugs are not connected to the target server.

Chapter 1: Introduction
7
Product Photos
KX II
KX2-832

Chapter 1: Introduction
8
KX2-864

Chapter 1: Introduction
9
Product Features
Hardware
Integrated KVM-over-IP remote access
1U or 2U rack-mountable (brackets included)
Dual power supplies with failover; autoswitching power supply with
power failure warning
8, 16, 32, or 64 (on KX2-464) server ports
32 (KX2-832) or 64 (KX2-864) server ports
Support for tiering in which a base KX II device is used to access
multiple other tiered devices. See Configuring and Enabling
Tiering (on page 142) for more information on tiering.
Up to 8 video channels, depending on the device model, that allows
up to 8 users to connect to the KX II at once
Multiple user capacity (1/2/4/8 remote users; 1 local user)
UTP (Cat5/5e/6) server cabling
Dual Ethernet ports (10/100/1000 LAN) with failover
Field upgradable
Local User port for in-rack access
USB keyboard/mouse ports.
One front and three back panel USB 2.0 ports for supported USB
devices
Fully concurrent with remote user access
Local graphical user interface (GUI) for administration
Extended local port on the KX2-832 and KX2-864 models provide
extended reach to in-rack access on KX2 devices
Centralized access security
Integrated power control
LED indicators for dual power status, network activity, and remote
user status
Hardware Reset button
Serial port to connect to an external modem

Chapter 1: Introduction
10
Software
Virtual media with D2CIM-VUSB and D2CIM-DVUSB CIMs
Absolute Mouse Synchronization with D2CIM-VUSB CIM and
D2CIM-DVUSB CIMs
Plug-and-Play
Web-based access and management
Intuitive graphical user interface (GUI)
128-bit encryption of complete KVM signal, including video and
virtual media
LDAP, Active Directory®, RADIUS, or internal authentication and
authorization
DHCP or fixed IP addressing
Smart card/CAC authentication
SNMP and Syslog management
IPv4 and IPv6 support
Power control associated directly with servers to prevent mistakes
Integration with Raritan's CommandCenter Secure Gateway
(CC-SG) management unit
CC Unmanage feature to remove device from CC-SG control
Terminology
This manual uses the following terminology for the components of a
typical KX II configuration:

Chapter 1: Introduction
11
Diagram Key
TCP/IP
IPv4 and/or IPv6
KVM (Keyboard, Video, Mouse)
UTP Cable (Cat5/5e/6)
KX II
Local Access Console
Local User - an optional user console (consisting of a
keyboard, mouse, and multi-sync VGA monitor)
attached directly to the KX II to control KVM target
servers (directly at the rack, not through the network).
A USB smart card reader can also be attached at the
Local port to mount onto a target server. An extended
local port is also provided on the DKX2-832 and
DKX2-864 models.
Remote PC
Networked computers used to access and control KVM
target servers connected to the KX II. A USB smart
card reader can also be attached to the remote PC and
attached to a target server via the KX II.
CIMS
Dongles that connect to each target server or rack PDU
(power strip). Available for all of the supported
operating systems.
Target Servers
KVM Target Servers - servers with video cards and
user interfaces (for example, Windows®operating
system®, Linux®, Solaris™, etc.) accessed remotely via
the KX II.
Dominion PX Rack PDU (Power Strips)
Raritan rack PDUs accessed remotely via the KX II.
See Supported CIMs and Operating Systems (Target Servers) for a
list of the supported operating systems and CIMs, and see Supported
Operating Systems (Clients) (on page 260) for a list of the operating
systems supported by the KX II remotely.