Raritan Dominion KX II User manual

Copyright © 2009 Raritan, Inc.
DKX2-v2.1.10-0K-E
June 2009
255-62-4023-00
Dominion KX II
User Guide
Release 2.1.10

This document contains proprietary information that is protected by copyright. All rights reserved. No
part of this document may be photocopied, reproduced, or translated into another language without
express prior written consent of Raritan, Inc.
© Copyright 2009 Raritan, Inc., CommandCenter®, Dominion®, Paragon® and the Raritan company
logo are trademarks or registered trademarks of Raritan, Inc. All rights reserved. Java® is a
registered trademark of Sun Microsystems, Inc. Internet Explorer® is a registered trademark of
Microsoft Corporation. Netscape® and Netscape Navigator® are registered trademarks of Netscape
Communication Corporation. All other trademarks or registered trademarks are the property of their
respective holders.
FCC Information
This equipment has been tested and found to comply with the limits for a Class A digital device,
pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection
against harmful interference in a commercial installation. This equipment generates, uses, and can
radiate radio frequency energy and if not installed and used in accordance with the instructions, may
cause harmful interference to radio communications. Operation of this equipment in a residential
environment may cause harmful interference.
VCCI Information (Japan)
Raritan is not responsible for damage to this product resulting from accident, disaster, misuse, abuse,
non-Raritan modification of the product, or other events outside of Raritan's reasonable control or not
arising under normal operating conditions.

iii
Contents
Chapter 1 Introduction 1
Dominion KX II Help.......................................................................................................................1
Related Documentation.......................................................................................................1
What's New in the Help..................................................................................................................2
Dominion KX II Overview...............................................................................................................3
Virtual Media..................................................................................................................................5
Product Photos ..............................................................................................................................6
Product Features ...........................................................................................................................8
Hardware.............................................................................................................................8
Software...............................................................................................................................9
Terminology...................................................................................................................................9
Package Contents........................................................................................................................11
Chapter 2 Installation and Configuration 12
Overview......................................................................................................................................12
Default Login Information.............................................................................................................12
Getting Started.............................................................................................................................13
Step 1: Configure KVM Target Servers.............................................................................13
Step 2: Configure Network Firewall Settings.....................................................................23
Step 3: Connect the Equipment.........................................................................................24
Step 4: Configure the Dominion KX II ...............................................................................27
Valid Special Characters for Target Names......................................................................31
Step 5 (Optional): Configure Keyboard Language............................................................34
Chapter 3 Working with Target Servers 36
Interfaces.....................................................................................................................................36
Dominion KX II Local Console Interface............................................................................37
Dominion KX II Remote Console Interface........................................................................37
Multi-Platform Client Interface...........................................................................................49
Virtual KVM Client........................................................................................................................50
Overview............................................................................................................................50
Connecting to a KVM Target Server .................................................................................50
VKC Toolbar and Shortcut Keys........................................................................................50
Switching Between KVM Target Servers ..........................................................................52
Power Controlling a Target Server....................................................................................53
Disconnecting KVM Target Servers ..................................................................................54
Choosing USB Profiles......................................................................................................54
Connection Properties.......................................................................................................55
Connection Information .....................................................................................................57
Keyboard Options..............................................................................................................57

Contents
iv
Video Properties................................................................................................................61
Mouse Options...................................................................................................................65
VKC Virtual Media.............................................................................................................70
Smart Cards (VKC and MPC)............................................................................................71
Tool Options ......................................................................................................................73
View Options......................................................................................................................75
Help Options......................................................................................................................76
Chapter 4 Virtual Media 77
Overview......................................................................................................................................78
Prerequisites for Using Virtual Media ..........................................................................................80
File Server Setup (File Server ISO Images Only)........................................................................81
Using Virtual Media......................................................................................................................83
Connecting to Virtual Media.........................................................................................................85
Local Drives.......................................................................................................................85
Conditions when Read/Write is Not Available...................................................................86
CD-ROM/DVD-ROM/ISO Images......................................................................................86
Disconnecting Virtual Media........................................................................................................88
Chapter 5 USB Profiles 89
Overview......................................................................................................................................89
CIM Compatibility.........................................................................................................................90
Available USB Profiles.................................................................................................................90
Selecting Profiles for a KVM Port ................................................................................................96
Chapter 6 User Management 97
User Groups.................................................................................................................................97
User Group List..................................................................................................................98
Relationship Between Users and Groups .........................................................................98
Adding a New User Group.................................................................................................98
Modifying an Existing User Group...................................................................................105
Users..........................................................................................................................................106
User List...........................................................................................................................106
Adding a New User..........................................................................................................107
Modifying an Existing User..............................................................................................107
Logging a User Off (Force Logoff)...................................................................................108
Authentication Settings..............................................................................................................108
Implementing LDAP/LDAPS Remote Authentication......................................................109
Returning User Group Information from Active Directory Server....................................113
Implementing RADIUS Remote Authentication...............................................................114
Returning User Group Information via RADIUS..............................................................117
RADIUS Communication Exchange Specifications.........................................................117
User Authentication Process...........................................................................................119

Contents
v
Changing a Password................................................................................................................121
Chapter 7 Device Management 122
Network Settings........................................................................................................................122
Network Basic Settings....................................................................................................123
LAN Interface Settings.....................................................................................................125
Device Services.........................................................................................................................127
Modem Settings.........................................................................................................................127
Configuring Date/Time Settings.................................................................................................129
Event Management....................................................................................................................131
Configuring Event Management - Settings......................................................................131
Event Management - Destinations ..................................................................................133
Power Supply Setup ..................................................................................................................137
Configuring Ports.......................................................................................................................139
Configuring Standard Target Servers..............................................................................140
Configuring Powerstrip Targets (Non-PX).......................................................................140
Configuring Blade Chassis..............................................................................................147
Configuring USB Profiles (Port Page).............................................................................168
Configuring Dominion KX II Local Port Settings..............................................................171
Chapter 8 Powerstrip Outlet Control 175
Overview....................................................................................................................................175
Turning Outlets On/Off and Cycling Power ...............................................................................176
Chapter 9 Security Management 179
Security Settings........................................................................................................................179
Login Limitations..............................................................................................................180
Strong Passwords ...........................................................................................................181
User Blocking...................................................................................................................182
Encryption & Share..........................................................................................................183
Checking Your Browser for AES Encryption .............................................................................186
Configuring IP Access Control...................................................................................................186
SSL Certificates.........................................................................................................................189
Chapter 10 Maintenance 192
Audit Log....................................................................................................................................192
Device Information.....................................................................................................................193
Backup and Restore ..................................................................................................................194
USB Profile Management..........................................................................................................196
Handling Conflicts in Profile Names................................................................................197

Contents
vi
Upgrading CIMs.........................................................................................................................197
Upgrading Firmware ..................................................................................................................198
Upgrade History.........................................................................................................................200
Rebooting...................................................................................................................................200
Stopping CC-SG Management..................................................................................................202
Chapter 11 Diagnostics 204
Network Interface Page .............................................................................................................204
Network Statistics Page.............................................................................................................205
Ping Host Page..........................................................................................................................207
Trace Route to Host Page .........................................................................................................207
Device Diagnostics ....................................................................................................................209
Chapter 12 Command Line Interface (CLI) 211
Overview....................................................................................................................................211
Accessing the Dominion KX II Using CLI...................................................................................212
SSH Connection to the Dominion KX II.....................................................................................212
SSH Access from a Windows PC....................................................................................212
SSH Access from a UNIX/Linux Workstation..................................................................213
Telnet Connection to the Dominion KX II...................................................................................213
Enabling Telnet................................................................................................................213
Access Telnet from a Windows PC.................................................................................213
Logging In..................................................................................................................................214
Navigation of the CLI .................................................................................................................215
Completion of Commands...............................................................................................215
CLI Syntax -Tips and Shortcuts.......................................................................................215
Common Commands for All Command Line Interface Levels........................................216
Initial Configuration Using CLI...................................................................................................216
Setting Parameters..........................................................................................................216
Setting Network Parameters............................................................................................217
CLI Prompts...............................................................................................................................217
CLI Commands..........................................................................................................................217
Security Issues ................................................................................................................218
Administering the Dominion KX II Console Server Configuration Commands..........................219
Configuring Network ..................................................................................................................219
Interface Command.........................................................................................................220
Name Command...........................................................................................................220
IPv6 Command................................................................................................................221
Chapter 13 Dominion KX II Local Console 222
Overview....................................................................................................................................222
Using the Dominion KX II Local Console...................................................................................222
Simultaneous Users ........................................................................................................222
Dominion KX II Local Console Interface....................................................................................223
Security and Authentication.......................................................................................................223
Local Console Smart Card Access............................................................................................224
Smart Card Access in KX2 8 Devices.............................................................................225

Contents
vii
Available Resolutions.................................................................................................................225
Port Access Page (Local Console Server Display) ...................................................................226
Hot Keys and Connect Keys......................................................................................................228
Connect Key Examples...................................................................................................228
Special Sun Key Combinations .................................................................................................229
Accessing a Target Server ........................................................................................................230
Returning to the Dominion KX II Local Console Interface.........................................................230
Local Port Administration...........................................................................................................230
Configuring Dominion KX II Local Console Local Port Settings......................................231
Dominion KX II Local Console Factory Reset.................................................................234
Resetting the Dominion KX II Using the Reset Button ..............................................................235
Appendix A Specifications 236
Physical Specifications ..............................................................................................................236
Environmental Requirements ....................................................................................................239
Computer Interface Modules (CIMs)..........................................................................................239
Supported CIMs and Operating Systems (Target Servers).......................................................241
Supported Operating Systems (Clients)....................................................................................247
Supported Browsers ..................................................................................................................248
Certified Modems.......................................................................................................................249
Devices Supported by the KX2-832 and KX2-864 Extended Local Port...................................249
Target Server Connection Distance and Video Resolution.......................................................249
KX2-832 and KX2-864 Extended Local Port Recommended Maximum Distances..................250
Remote Connection...................................................................................................................250
Supported Video Resolutions....................................................................................................250
Supported Keyboard Languages...............................................................................................252
Smart Card Readers..................................................................................................................253
Supported and Unsupported Smart Card Readers.........................................................253
Minimum System Requirements......................................................................................254
TCP and UDP Ports Used.........................................................................................................256
Network Speed Settings............................................................................................................258
Appendix B Updating the LDAP Schema 260
Returning User Group Information.............................................................................................260
From LDAP......................................................................................................................260
From Microsoft Active Directory ......................................................................................260

Contents
viii
Setting the Registry to Permit Write Operations to the Schema ...............................................261
Creating a New Attribute............................................................................................................261
Adding Attributes to the Class ...................................................................................................262
Updating the Schema Cache.....................................................................................................264
Editing rciusergroup Attributes for User Members.....................................................................264
Appendix C Informational Notes 268
Overview....................................................................................................................................268
Java Runtime Environment (JRE) .............................................................................................268
IPv6 Support Notes....................................................................................................................269
Keyboards..................................................................................................................................270
Non-US Keyboards..........................................................................................................270
Macintosh Keyboard........................................................................................................273
Mouse Pointer Synchronization (Fedora)..................................................................................273
Dell Chassis Cable Lengths and Video Resolutions .................................................................274
Fedora........................................................................................................................................274
Resolving Fedora Core Focus.........................................................................................274
VKC and MPC Smart Card Connections to Fedora Servers...........................................274
Resolving Issues with Firefox Freezing when Using Fedora ..........................................274
SUSE/VESA Video Modes ........................................................................................................275
USB Ports and Profiles..............................................................................................................275
VM-CIMs and DL360 USB Ports.....................................................................................275
Help for Choosing USB Profiles ......................................................................................276
Changing a USB Profile when Using a Smart Card Reader...........................................278
CIMs...........................................................................................................................................278
Windows 3-Button Mouse on Linux Targets....................................................................278
Windows 2000 Composite USB Device Behavior for Virtual Media................................279
Virtual Media..............................................................................................................................279
Virtual Media Not Refreshed After Files Added...............................................................279
Target BIOS Boot Time with Virtual Media......................................................................280
Virtual Media Connection Failures Using High Speed for Virtual Media Connections....280
CC-SG .......................................................................................................................................280
Virtual KVM Client Version Not Known from CC-SG Proxy Mode..................................280
Single Mouse Mode - Connecting to a Dominion KX II Target Under CC-SG Control Via
VKC Using Firefox...........................................................................................................280
Proxy Mode and MPC .....................................................................................................280
Moving Between Ports of the Dominion KX II .................................................................281

Contents
ix
Appendix D FAQs 282
General Questions.....................................................................................................................283
Remote Access..........................................................................................................................285
Universal Virtual Media..............................................................................................................287
USB Profiles...............................................................................................................................288
Ethernet and IP Networking.......................................................................................................290
IPv6 Networking.........................................................................................................................296
Servers.......................................................................................................................................298
Blade Servers ............................................................................................................................299
Installation..................................................................................................................................302
Local Port...................................................................................................................................304
Extended Local Port (Dominion KX2-832 and KX2-864 Models Only) .....................................306
Power Control............................................................................................................................307
Scalability...................................................................................................................................308
Computer Interface Modules (CIMs)..........................................................................................309
Security......................................................................................................................................310
Smart Cards and CAC Authentication.......................................................................................311
Manageability.............................................................................................................................312
Miscellaneous............................................................................................................................313
Index 315

1
In This Chapter
Dominion KX II Help..................................................................................1
What's New in the Help.............................................................................2
Dominion KX II Overview..........................................................................3
Virtual Media.............................................................................................5
Product Photos .........................................................................................6
Product Features ......................................................................................8
Terminology..............................................................................................9
Package Contents...................................................................................11
Dominion KX II Help
The Dominion KX II help provides information on how to install, set up,
and configure the Dominion KX II. It also includes information on
accessing target servers and power strips, using virtual media, managing
users and security, and maintaining and diagnosing the Dominion KX II.
A PDF version of the help can be downloaded from the Raritan
Firmware and Documentation page
http://www.raritan.com/support/firmware-and-documentation/ on the
Raritan website. Raritan recommends that you refer to the Raritan
website for the most up-to-date user guides available.
Related Documentation
The Dominion KX II help is accompanied by a Dominion KX II Quick
Setup Guide, which can be found on the Raritan Firmware and
Documentation page
http://www.raritan.com/support/firmware-and-documentation/ of Raritan's
website. Installation requirements and instructions for client applications
used with the Dominion KX II can be found in the KVM and Serial Client
User Guide, also found on the Raritan website. Where applicable,
specific client functions used with the Dominion KX II are included in this
help.
Chapter 1 Introduction

Chapter 1: Introduction
2
What's New in the Help
The following information has been added based on enhancements and
changes to the equipment and/or user documentation.
•Information on the new Dominion KX II support for smart card
readers has been added to the help. See Smart Cards (VKC and
MPC) (on page 71), Local Console Smart Card Access (on page
224), and, for smart card reader specifications and minimum
requirements, see Smart Card Readers (on page 253).
•Support for Portuguese keyboards has been documented in the help.
See Supported Keyboard Languages (on page 252).
•LDAP configuration enhancements have been added to the
Dominion KX II. See Implementing LDAP/LDAPS Remote
Authentication (on page 109).
•Enhancements to saving connection properties have been added to
the client applications. See Connection Properties (on page 55) or
the KVM and Serial Access Client User Guide for more
information.
Please see the release notes for a more detailed explanation of the
changes applied to this version of the help.

Chapter 1: Introduction
3
Dominion KX II Overview
The Dominion KX II is an enterprise-class, secure, digital KVM
(Keyboard, Video, Mouse) switch that provides BIOS-level (and up)
access and control of servers from anywhere in the world via a web
browser. Up to 64 servers can be controlled with a standard Dominion
KX II. With the Dominion KX II 8-user model, up to 32 servers can be
controlled with the KX2-832 and up to 64 servers can be controlled with
the KX2-864.
The Dominion KX II supports up to 8 video channels, allowing up to eight
concurrent users to connect to eight different video targets at any given
point in time. At the rack, the Dominion KX II provides BIOS-level control
of up to 64 servers and other IT devices from a single keyboard, monitor,
and mouse. The integrated remote access capabilities of the Dominion
KX II provide the same levels of control of your servers via a web
browser.
The Dominion KX II is easily installed using standard UTP (Cat 5/5e/6)
cabling. Its advanced features include virtual media, 128-bit encryption,
dual power supplies, remote power control, dual Ethernet, LDAP,
RADIUS, Active Directory, Syslog integration, external modem
capabilities, and web management. The Dominion KX II 8-user model
also provides an extended local port located on the back of the device.
These features enable you to deliver higher up-time, better productivity,
and bulletproof security - at any time from anywhere.
The Dominion KX II products can operate as standalone appliances and
do not rely on a central management device. For larger data centers and
enterprises, numerous Dominion KX II devices (along with Dominion SX
devices for remote serial console access and Dominion KSX for
remote/branch office management) can be integrated into a single logical
solution using Raritan's CommandCenter Secure Gateway (CC-SG)
management unit.

Chapter 1: Introduction
4

Chapter 1: Introduction
5
Diagram key
Cat5 cable Remote virtual media
USB drive(s)
Computer Interface
Module (CIM) Power strip
Dominion KX II Local access
Note: KX2-832 and
KX2-864 also use an
extended local port.
Remote KVM and
serial devices IP LAN/WAN
Modem PSTN
Remote (network)
access
Virtual Media
All Dominion KX II models support virtual media. The benefits of virtual
media - mounting of remote drives/media on the target server to support
software installation and diagnostics - are now available in all of the
Dominion KX II models.
Each Dominion KX II comes equipped with virtual media to enable
remote management tasks using the widest variety of CD, DVD, USB,
internal and remote drives and images. Unlike other solutions, the
Dominion KX II supports virtual media access of hard drives and
remotely mounted images for added flexibility and productivity.
Virtual media sessions are secured using 128-bit AES or RC4 encryption.
The D2CIM-VUSB CIM and D2CIM-DVUSB (computer interface module)
support virtual media sessions to KVM target servers supporting the USB
2.0 interface. These CIMs also support Absolute Mouse
Synchronization™ as well as remote firmware update.
The black connector on the DVUSB CIM is used for keyboard and
mouse. The gray connector is used for virtual media. Keep both plugs of
the CIM connected to the device. The device may not operate properly if
both plugs are not connected to the target server.

Chapter 1: Introduction
6
Product Photos
Dominion KX II
KX2-832

Chapter 1: Introduction
7
KX2-864

Chapter 1: Introduction
8
Product Features
Hardware
•Integrated KVM-over-IP remote access
•1U or 2U rack-mountable (brackets included)
•Dual power supplies with failover; autoswitching power supply with
power failure warning
•8, 16, 32, or 64 (on KX2-464) server ports
•32 (KX2-832) or 64 (KX2-864) server ports
•Up to 8 video channels, depending on the device model, that allows
up to 8 users to connect to the Dominion KX II at once
•Multiple user capacity (1/2/4/8 remote users; 1 local user)
•UTP (Cat5/5e/6) server cabling
•Dual Ethernet ports (10/100/1000 LAN) with failover
•Field upgradable
•Local User port for in-rack access
PS/2 keyboard/mouse ports. KX2-832 and KX2-864 are USB
only.
One front and three back panel USB 2.0 ports for supported USB
devices
Fully concurrent with remote user access
Local graphical user interface (GUI) for administration
•Extended local port provides extended reach to in-rack access on
KX2 devices
•Centralized access security
•Integrated power control
•LED indicators for dual power status, network activity, and remote
user status
•Hardware Reset button
•Serial port to connect to an external modem

Chapter 1: Introduction
9
Software
•Virtual media with D2CIM-VUSB and D2CIM-DVUSB CIMs
•Absolute Mouse Synchronization with D2CIM-VUSB CIM and
D2CIM-DVUSB CIMs
•Plug-and-Play
•Web-based access and management
•Intuitive graphical user interface (GUI)
•128-bit encryption of complete KVM signal, including video and
virtual media
•LDAP, Active Directory, RADIUS, or internal authentication and
authorization
•DHCP or fixed IP addressing
•Smart card/CAC authentication
•SNMP and Syslog management
•IPv4 and IPv6 support
•Power control associated directly with servers to prevent mistakes
•Integration with Raritan's CommandCenter Secure Gateway (CC-SG)
management unit
•CC Unmanage feature to remove device from CC-SG control
Terminology
This manual uses the following terminology for the components of a
typical Dominion KX II configuration:

Chapter 1: Introduction
10
Diagram Key
TCP/IP
IPv4 and/or IPv6
KVM (Keyboard, Video, Mouse)
UTP Cable (Cat5/5e/6)
Dominion KX II
Local Access Console
Local User - an optional user console (consisting of a
keyboard, mouse, and multi-sync VGA monitor)
attached directly to the Dominion KX II to control KVM
target servers (directly at the rack, not through the
network). A USB smart card reader can also be
attached at the Local port to mount onto a target
server. An extended local port is also provided on the
DKX2-832 and DKX2-864 models.
Remote PC
Networked computers used to access and control
KVM target servers connected to the Dominion KX II.
A USB smart card reader can also be attached to the
remote PC and attached to a target server via the
Dominion KX II.
CIMS
Dongles that connect to each target server or power
strip. Available for all of the supported operating
systems.
Target Servers
KVM Target Servers - servers with video cards and
user interfaces (for example, Windows, Linux, Solaris,
etc.) accessed remotely via the Dominion KX II.
Dominion PX Power Strips
Raritan power strips accessed remotely via the
Dominion KX II.
See Supported CIMs and Operating Systems (Target Servers) (on
page 241) for a list of the supported operating systems and CIMs, and
see Supported Operating Systems (Clients) (on page 247) for a list of
the operating systems supported by the Dominion KX II remotely.