Raritan Dominion KX II User manual

Copyright © 2008 Raritan, Inc.
DKX2-v2.1.0-0I-E
December 2008
255-62-4023-00
Dominion KX II
User Guide
Release 2.1.00

This document contains proprietary information that is protected by copyright. All rights reserved. No
part of this document may be photocopied, reproduced, or translated into another language without
express prior written consent of Raritan, Inc.
© Copyright 2008 Raritan, Inc., CommandCenter®, Dominion®, Paragon® and the Raritan company
logo are trademarks or registered trademarks of Raritan, Inc. All rights reserved. Java® is a
registered trademark of Sun Microsystems, Inc. Internet Explorer® is a registered trademark of
Microsoft Corporation. Netscape® and Netscape Navigator® are registered trademarks of Netscape
Communication Corporation. All other trademarks or registered trademarks are the property of their
respective holders.
FCC Information
This equipment has been tested and found to comply with the limits for a Class A digital device,
pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection
against harmful interference in a commercial installation. This equipment generates, uses, and can
radiate radio frequency energy and if not installed and used in accordance with the instructions, may
cause harmful interference to radio communications. Operation of this equipment in a residential
environment may cause harmful interference.
VCCI Information (Japan)
Raritan is not responsible for damage to this product resulting from accident, disaster, misuse, abuse,
non-Raritan modification of the product, or other events outside of Raritan's reasonable control or not
arising under normal operating conditions.

iii
Contents
Chapter 1 Introduction 1
What's New in the Help..................................................................................................................1
Dominion KX II Help.......................................................................................................................2
Related Documentation.......................................................................................................2
Dominion KX II Overview...............................................................................................................3
Virtual Media..................................................................................................................................5
Product Photos ..............................................................................................................................6
Product Features ...........................................................................................................................7
Hardware.............................................................................................................................7
Software...............................................................................................................................8
Terminology...................................................................................................................................8
Package Contents........................................................................................................................10
Chapter 2 Installation and Configuration 11
Overview......................................................................................................................................11
Default Logon Information ...........................................................................................................11
Getting Started.............................................................................................................................12
Step 1: Connect the Dominion KX II..................................................................................12
Step 2: Configure the Dominion KX II ...............................................................................15
Valid Special Characters for Target Names......................................................................20
Step 3: Configure KVM Target Servers.............................................................................23
Step 4: Configure Network Firewall Settings.....................................................................33
Step 5 (Optional): Configure Keyboard Language............................................................34
Chapter 3 Working with Target Servers 35
Interfaces.....................................................................................................................................35
Dominion KX II Local Console Interface............................................................................36
Dominion KX II Remote Console Interface........................................................................36
Multi-Platform Client Interface...........................................................................................48
Virtual KVM Client........................................................................................................................49
Overview............................................................................................................................49
Connecting to a KVM Target Server .................................................................................49
VKC Toolbar......................................................................................................................50
Switching Between KVM Target Servers ..........................................................................51
Power Controlling a Target Server....................................................................................52
Disconnecting KVM Target Servers ..................................................................................53
Choosing USB Profiles......................................................................................................53
Connection Properties.......................................................................................................54
Connection Information .....................................................................................................56
Keyboard Options..............................................................................................................56

Contents
iv
Video Properties................................................................................................................61
Mouse Options...................................................................................................................65
VKC Virtual Media.............................................................................................................70
Tool Options ......................................................................................................................70
View Options......................................................................................................................72
Help Options......................................................................................................................73
Chapter 4 Virtual Media 74
Overview......................................................................................................................................75
Prerequisites for Using Virtual Media ..........................................................................................77
File Server Setup (File Server ISO Images Only)........................................................................78
Using Virtual Media......................................................................................................................79
Connecting to Virtual Media.........................................................................................................81
Local Drives.......................................................................................................................81
Conditions when Read/Write is Not Available...................................................................82
CD-ROM/DVD-ROM/ISO Images......................................................................................82
Disconnecting Virtual Media........................................................................................................84
Chapter 5 Configuring USB Profiles 85
Overview......................................................................................................................................85
CIM Compatibility.........................................................................................................................86
Available USB Profiles.................................................................................................................86
Selecting Profiles for a KVM Port ................................................................................................93
Chapter 6 User Management 94
User Groups.................................................................................................................................94
User Group List..................................................................................................................95
Relationship Between Users and Groups .........................................................................95
Adding a New User Group.................................................................................................95
Adding a New User Group...............................................................................................102
Modifying an Existing User Group...................................................................................104
Users..........................................................................................................................................104
User List...........................................................................................................................105
Adding a New User..........................................................................................................105
Modifying an Existing User..............................................................................................106
Logging a User Off (Force Logoff)...................................................................................106
Authentication Settings..............................................................................................................107
Implementing LDAP/LDAPS Remote Authentication......................................................108
Returning User Group Information from Active Directory Server....................................111
Implementing RADIUS Remote Authentication...............................................................112
Returning User Group Information via RADIUS..............................................................114
RADIUS Communication Exchange Specifications.........................................................114
User Authentication Process...........................................................................................116

Contents
v
Changing a Password................................................................................................................118
Chapter 7 Device Management 119
Network Settings........................................................................................................................119
Network Basic Settings....................................................................................................120
LAN Interface Settings.....................................................................................................122
Device Services.........................................................................................................................124
Modem Settings.........................................................................................................................125
Configuring Date/Time Settings.................................................................................................126
Event Management....................................................................................................................128
Configuring Event Management - Settings......................................................................128
Event Management - Destinations ..................................................................................130
Power Supply Setup ..................................................................................................................134
Port Configuration......................................................................................................................136
Configuring Standard Target Servers..............................................................................137
Configuring Powerstrip Targets (Non-PX).......................................................................137
Configuring Blade Chassis..............................................................................................143
Configuring USB Profiles (Port Page).............................................................................165
Chapter 8 Powerstrip Outlet Control 168
Overview....................................................................................................................................168
Turning Outlets On/Off and Cycling Power ...............................................................................169
Chapter 9 Security Management 172
Security Settings........................................................................................................................172
Logon Limitations ............................................................................................................173
Strong Passwords ...........................................................................................................174
User Blocking...................................................................................................................175
Encryption & Share..........................................................................................................176
Checking Your Browser for AES Encryption .............................................................................179
Configuring IP Access Control...................................................................................................179
SSL Certificates.........................................................................................................................182
Chapter 10 Maintenance 185
Audit Log....................................................................................................................................185
Device Information.....................................................................................................................186
Backup and Restore ..................................................................................................................187
USB Profile Management..........................................................................................................189
Handling Conflicts in Profile Names................................................................................190

Contents
vi
Upgrading CIMs.........................................................................................................................190
Upgrading Firmware ..................................................................................................................191
Upgrade History.........................................................................................................................193
Rebooting...................................................................................................................................193
Stop CC-SG Management.........................................................................................................195
Chapter 11 Diagnostics 197
Network Interface Page .............................................................................................................197
Network Statistics Page.............................................................................................................198
Ping Host Page..........................................................................................................................200
Trace Route to Host Page .........................................................................................................200
Device Diagnostics ....................................................................................................................202
Chapter 12 Command Line Interface (CLI) 204
Overview....................................................................................................................................204
Accessing the Dominion KX II Using CLI...................................................................................205
SSH Connection to the Dominion KX II.....................................................................................205
SSH Access from a Windows PC....................................................................................205
SSH Access from a UNIX/Linux Workstation..................................................................206
Telnet Connection to the Dominion KX II...................................................................................206
Enabling Telnet................................................................................................................206
Accessing Telnet from a Windows PC ............................................................................206
Access Telnet from a Windows PC.................................................................................207
Logging On ................................................................................................................................207
Navigation of the CLI .................................................................................................................208
Completion of Commands...............................................................................................209
CLI Syntax -Tips and Shortcuts.......................................................................................209
Common Commands for All Command Line Interface Levels........................................209
Initial Configuration Using CLI...................................................................................................210
Setting Parameters..........................................................................................................210
Setting Network Parameters............................................................................................211
CLI Prompts...............................................................................................................................211
CLI Commands..........................................................................................................................211
Security Issues ................................................................................................................212
Administering the Dominion KX II Console Server Configuration Commands..........................213
Configuring Network ..................................................................................................................213
Interface Command.........................................................................................................214
Name Command...........................................................................................................214
IPv6 Command................................................................................................................215
Chapter 13 Dominion KX II Local Console 216
Overview....................................................................................................................................217
Using the Dominion KX II Local Console...................................................................................218
Simultaneous Users ........................................................................................................218
Security and Authentication.............................................................................................218

Contents
vii
Dominion KX II Local Console Interface....................................................................................219
Available Resolutions.................................................................................................................219
Port Access Page (Local Console Server Display) ...................................................................220
Hotkeys......................................................................................................................................222
Special Sun Key Combinations .................................................................................................222
Accessing a Target Server ........................................................................................................223
Returning to the Dominion KX II Local Console Interface.........................................................223
Local Port Administration...........................................................................................................223
Dominion KX II Local Console Local Port Settings .........................................................224
Dominion KX II Local Console Factory Reset.................................................................228
Resetting the Dominion KX II Using the Reset Button ..............................................................229
Appendix A Specifications 230
Supported Video Resolutions....................................................................................................230
Supported Keyboard Languages...............................................................................................231
Supported Operating Systems (Clients)....................................................................................232
Supported Browsers ..................................................................................................................233
Supported CIMs and Operating Systems (Target Servers).......................................................234
Certified Modems.......................................................................................................................240
Environmental Requirements ....................................................................................................240
Physical Specifications ..............................................................................................................240
Computer Interface Modules (CIMs)..........................................................................................242
Remote Connection...................................................................................................................244
TCP and UDP Ports Used.........................................................................................................244
Target Server Connection Distance and Video Resolution.......................................................246
Network Speed Settings............................................................................................................247
Appendix B Updating the LDAP Schema 249
Returning User Group Information.............................................................................................249
From LDAP......................................................................................................................249
From Microsoft Active Directory ......................................................................................249
Setting the Registry to Permit Write Operations to the Schema ...............................................250
Creating a New Attribute............................................................................................................250
Adding Attributes to the Class ...................................................................................................251
Updating the Schema Cache.....................................................................................................253
Editing rciusergroup Attributes for User Members.....................................................................253
Appendix C Informational Notes 257
Overview....................................................................................................................................257
Java Runtime Environment (JRE) .............................................................................................257
IPv6 Support Notes....................................................................................................................258
Keyboards..................................................................................................................................259
Non-US Keyboards..........................................................................................................259
Macintosh Keyboard........................................................................................................262

Contents
viii
Mouse Pointer Synchronization (Fedora)..................................................................................262
Dell Chassis Cable Lengths and Video Resolutions .................................................................263
Resolving Fedora Core Focus...................................................................................................263
Running VKC on Fedora with FireFox 3.0.x and JRE 1.5.0_16................................................263
SUSE/VESA Video Modes ........................................................................................................264
USB Ports and Profiles..............................................................................................................264
VM-CIMs and DL360 USB Ports.....................................................................................264
Help for Choosing USB Profiles ......................................................................................265
CIMs...........................................................................................................................................267
Windows 3-Button Mouse on Linux Targets....................................................................267
Windows 2000 Composite USB Device Behavior for Virtual Media................................267
Virtual Media..............................................................................................................................268
Virtual Media Not Refreshed After Files Added...............................................................268
Target BIOS Boot Time with Virtual Media......................................................................268
CC-SG .......................................................................................................................................268
Virtual KVM Client Version Not Known from CC-SG Proxy Mode..................................268
Single Mouse Mode - Connecting to a Dominion KX II Target Under CC-SG Control Via
VKC Using Firefox...........................................................................................................268
MPC and VKC Connection Settings................................................................................268
Proxy Mode and MPC .....................................................................................................268
Moving Between Ports of the Dominion KX II .................................................................269
Appendix D FAQs 270
General Questions.....................................................................................................................271
Remote Access..........................................................................................................................273
Universal Virtual Media..............................................................................................................275
USB Profiles...............................................................................................................................276
Ethernet and IP Networking.......................................................................................................278
IPv6 Networking.........................................................................................................................285
Servers.......................................................................................................................................287
Blade Servers ............................................................................................................................288
Installation..................................................................................................................................291
Local Port...................................................................................................................................293
Power Control............................................................................................................................295
Scalability...................................................................................................................................296
Computer Interface Modules (CIMs)..........................................................................................297
Security......................................................................................................................................298
Manageability.............................................................................................................................299
Miscellaneous............................................................................................................................300
Index 301

1
In This Chapter
What's New in the Help .............................................................................1
Dominion KX II Help..................................................................................2
Dominion KX II Overview...........................................................................3
Virtual Media..............................................................................................5
Product Photos..........................................................................................6
Product Features.......................................................................................7
Terminology...............................................................................................8
Package Contents...................................................................................10
What's New in the Help
The following sections of the Dominion KX II help have changed or
information has been added to based on enhancements and changes to
the equipment and/or user documentation.
•Support for blade servers has been added to the Dominion KX II.
See Configuring Blade Chassis (on page 143) for more
information.
•Online help has been added to the Dominion KX II. A PDF version of
the help, which contains the same information as the online help, can
be found on the Firmware and Documentation page of Raritan's
website (see the Raritan Firmware and Documentation page
http://www.raritan.com/support/firmware-and-documentation/).
•Support of PX powerstrips has been added to the Dominion KX II.
See Powerstrip Outlet Control (on page 168).
•Dominion KX II now allows administrators to log users off of the
server. See Logging a User Off (Force Logoff) (on page 106).
•SSL certificates have been added to the Dominion KX II. See SSL
Certificates (on page 182).
•Hot-key switching from the Local Port has been included in the
Dominion KX II.
Please see the release notes for a more detailed explanation of the
changes applied to this version of the help.
Chapter 1 Introduction

Chapter 1: Introduction
2
Dominion KX II Help
The Dominion KX II help provides information on how to install, set up,
and configure the Dominion KX II. It also includes information on
accessing target servers and power strips, using virtual media, managing
users and security, and maintaining and diagnosing the Dominion KX II.
A PDF version of the help can be downloaded from the Raritan
Firmware and Documentation page
http://www.raritan.com/support/firmware-and-documentation/ on the
Raritan website. Raritan recommends that you refer to the Raritan
website for the most up-to-date user guides available.
Related Documentation
The Dominion KX II help is accompanied by a Dominion KX II Quick
Setup Guide, which can be found on the CD included with the device or
on the the Raritan Firmware and Documentation page
http://www.raritan.com/support/firmware-and-documentation/ of Raritan's
website. Installation requirements and instructions for client applications
used with the Dominion KX II can be found in the KVM and Serial Client
User Guide, also found on the Raritan website. Where applicable,
specific client functions used with the Dominion KX II are included in this
help.

Chapter 1: Introduction
3
Dominion KX II Overview
The Dominion KX II is an enterprise-class, secure, digital KVM
(Keyboard, Video, Mouse) switch that provides BIOS-level (and up)
access, and control of up to 64 servers from anywhere in the world via a
web browser. At the rack, the Dominion KX II provides BIOS-level control
of up to 64 servers and other IT devices from a single keyboard, monitor,
and mouse. The integrated remote access capabilities of the Dominion
KX II provide the same levels of control of your servers via a web
browser.
The Dominion KX II is easily installed using standard UTP (Cat 5/5e/6)
cabling. Its advanced features include virtual media, 128-bit encryption,
dual power supplies, remote power control, dual Ethernet, LDAP,
RADIUS, Active Directory, Syslog integration, external modem
capabilities, and web management. These features enable you to deliver
higher up-time, better productivity, and bulletproof security - at any time
from anywhere.
Dominion KX II products can operate as standalone appliances and do
not rely on a central management device. For larger data centers and
enterprises, numerous Dominion KX II devices (along with Dominion SX
devices for remote serial console access and Dominion KSX for
remote/branch office management) can be integrated into a single logical
solution using Raritan's CommandCenter Secure Gateway (CC-SG)
management unit.

Chapter 1: Introduction
4
Diagram key
Cat5 cable Remote virtual media USB
drive(s)
Computer Interface
Module (CIM) Power strip
Dominion KX II Local access
Remote KVM and serial
devices IP LAN/WAN
Modem PSTN
Remote (network)
access

Chapter 1: Introduction
5
Virtual Media
All Dominion KX II models support virtual media. The benefits of virtual
media - mounting of remote drives/media on the target server to support
software installation and diagnostics - are now available in all of the
Dominion KX II models.
Each Dominion KX II comes equipped with virtual media to enable
remote management tasks using the widest variety of CD, DVD, USB,
internal and remote drives and images. Unlike other solutions, the
Dominion KX II supports virtual media access of hard drives and
remotely mounted images for added flexibility and productivity.
Virtual media sessions are secured using 128-bit AES or RC4
encryption.
The D2CIM-VUSB CIM and D2CIM-DVUSB (computer interface module)
support virtual media sessions to KVM target servers supporting the USB
2.0 interface. These new CIMs also supports Absolute Mouse
Synchronization™ as well as remote firmware update.

Chapter 1: Introduction
6
Product Photos

Chapter 1: Introduction
7
Product Features
Hardware
•Integrated KVM-over-IP remote access
•1U or 2U (KX2-464) rack-mountable; brackets included
•Dual power supplies with failover; autoswitching power supply with
power failure warning
•8, 16, 32, or 64 (on KX2-464) server ports
•Multiple user capacity (1/2/4 remote users; 1 local user)
•UTP (Cat5/5e/6) server cabling
•Dual Ethernet ports (10/100/1000 LAN) with failover
•Field upgradable
•Local user port for in-rack access
PS/2 keyboard/mouse ports
One front and three back panel USB 2.0 ports for supported USB
devices
Fully concurrent with remote user access
Local graphical user interface (GUI) for administration
•Centralized access security
•Integrated power control
•LED indicators for dual power status, network activity, and remote
user status
•Hardware Reset button
•Serial port to connect to an external modem

Chapter 1: Introduction
8
Software
•Virtual media with D2CIM-VUSB and D2CIM-DVUSB CIMs
•Absolute Mouse Synchronization with D2CIM-VUSB CIM and
D2CIM-DVUSB CIMs
•Plug-and-Play
•Web-based access and management
•Intuitive graphical user interface (GUI)
•128-bit encryption of complete KVM signal, including video and
virtual media
•LDAP, Active Directory, RADIUS, or internal authentication and
authorization
•DHCP or fixed IP addressing
•SNMP and Syslog management
•IPv4 and IPv6 support
•Power control associated directly with servers to prevent mistakes
•Integration with Raritan's CommandCenter Secure Gateway
(CC-SG) management unit
•CC Unmanage feature to remove device from CC-SG control
Terminology
This manual uses the following terminology for the components of a
typical Dominion KX II configuration:

Chapter 1: Introduction
9
Diagram Key
TCP/IP
IPv4 and/or IPv6
KVM (Keyboard, Video, Mouse)
UTP Cable (Cat5/5e/6)
Dominion KX II
Local Access Console
Local User - an optional user console (consisting of a
keyboard, mouse, and multi-sync VGA monitor)
attached directly to the Dominion KX II to control KVM
target servers (directly at the rack, not through the
network).
Remote PC
Networked computers used to access and control KVM
target servers connected to the Dominion KX II. See
Supported Operating Systems (Clients) (on page
232)for a list of the operating systems supported by the
Dominion KX II remotely.
CIMS
Dongles that connect to each target server or power
strip. Available for all of the supported operating
systems. See Supported CIMs and Operating
Systems (Target Servers) (on page 234) for
information about the CIMs supported by the Dominion
KX II.
Target Servers
KVM Target Servers - servers with video cards and
user interfaces (for example, Windows, Linux, Solaris,
etc.) accessed remotely via the Dominion KX II. See
Supported CIMs and Operating Systems (Target
Servers) (on page 234) for a list of the supported
operating systems and CIMs.
Dominion PX Power Strips
Raritan power strips accessed remotely via the
Dominion KX II.

Chapter 1: Introduction
10
Package Contents
Each Dominion KX II ships as a fully-configured stand-alone product in a
standard 1U (2U for KX2-464) 19" rackmount chassis. Each Dominion
KX II device ships with the following contents:
Amount
included Item
1 Dominion KX II device
1 Dominion KX II quick setup guide
1 Raritan user guide CD-ROM
1 Rackmount kit
1 AC power cords
1 Cat5 network cable
1 Cat5 network crossover cable
1 Set of 4 rubber feet (for desktop use)
1 Application note
1 Warranty card

11
In This Chapter
Overview..................................................................................................11
Default Logon Information.......................................................................11
Getting Started ........................................................................................12
Overview
This section provides a brief overview of the installation process. Each
step is further detailed in the remaining sections of this chapter.
To install and configure the Dominion KX II:
•Step 1: Connect the Dominion KX II (on page 12)
•Step 2: Configure the Dominion KX II (on page 15)
•Step 3: Configure KVM Target Servers (on page 23)
•Step 4: Configure Network Firewall Settings (on page 33)
•Step 5 (Optional): Configure Keyboard Language (on page 34)
Also included in this section is the default logon information you will
need. Specifically, the default IP address, user name, and password.
See Default Logon Information (on page 11).
Default Logon Information
Default Value
User name The default user name is admin. This user has
administrative privileges.
Password The default password is raritan.
Passwords are case sensitive and must be entered
in the exact case combination in which they were
created. For example, the default password raritan
must be entered entirely in lowercase letters.
The first time you start the Dominion KX II, you are
required to change the default password.
IP address The Dominion KX II ships with the default IP
address of 192.168.0.192.
Chapter 2 Installation and Configuration

Chapter 2: Installation and Configuration
12
Default Value
Important: For backup and business continuity purposes, it is
strongly recommended that you create a backup administrator
user name and password and keep that information in a secure
location.
Getting Started
Step 1: Connect the Dominion KX II
Connect the Dominion KX II to the power supply, network, local PC, and
target servers. The letters in the diagram correspond to the topics in this
section that describe the connection.
A. AC Power
To connect the power supply:
1. Attach the included AC power cord to the Dominion KX II and plug
into an AC power outlet.