TRENDnet TK-IP101 User manual

TK-IP101 User Guide R1.2
- -
2
About this manual
This User Guide is the complete reference to the TK-IP101, its functional features and usage.
The Complete User Guide could be found only on the TK-IP101 Support CD-ROM disc.
TK-IP101 documentation List
Quick Installation Guide Print-out / TK-IP101 support CD-ROM disc
User Guide TK-IP101 Support CD-ROM disc
How to generate your own set of Certificates TK-IP101 Support CD-ROM disc
FCC Statement
This equipment has been tested and found to comply with the regulations for a Class B digital
device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable
protection against harmful interference when the equipment is operated in a commercial
environment. This equipment generates, uses, and can radiate radio frequency energy and, if
not installed and used in accordance with this User Guide, may cause harmful interference to
radio communications. Operation of this equipment in a residential area is likely to cause harmful
interference in which case, the user will be required to correct the interference at his/her own
expense.
CE Statement
This is a Class B product in a domestic environment, this product may cause radio interference,
in which case the user may be required to take adequate measures.

TK-IP101 User Guide R1.2
i
TABLE OF CONTENTS
1INTRODUCTION ..............................................................................................................................1
1.1 PRIMARY FEATURES....................................................................................................................4
General features.............................................................................................................................4
TCP/IP remote connection..........................................................................................................4
Thin-client Viewer Program........................................................................................................ 4
Hi-Speed PPP Connection............................................................................................................ 4
Power ON-OFF Control Support................................................................................................5
Security..............................................................................................................................................5
User Management.......................................................................................................................... 5
1.2 SYSTEM ARCHITECTURE ............................................................................................................6
1.3 TK-IP101 EXTERNAL VIEWS....................................................................................................7
TK-IP101 Front View......................................................................................................................7
TK-IP101 Rear View.......................................................................................................................8
TK-IP101 Power Socket................................................................................................................8
2TK-IP101 INTALLATION................................................................................................................9
2.1 PHYSICAL CONNECTIONS ..........................................................................................................9
2.2 CONFIGURE YOUR SERVERS FOR CONNECTIONS TO TK-IP101 .........................................10
2.3 MORE TIPS FOR SERVER DESKTOP CONFIGURATION ...........................................................12
2.4 CONFIGURE TK-IP101 NETWORK SETTINGS....................................................................... 14
2.5 CONFIGURE PORT BASE SETTING FOR TK-IP101 ................................................................. 16
2.6 CONFIGURE YOUR FIREWALL/ROUTER FOR ACCESSING TK-IP101 ACROSS INTERNET .....18
2.7 INSTALL CERTIFICATES ON TK-IP101..................................................................................19
3MAKING A VIEWER CONNECTION.........................................................................................24
3.1 INSTALL WIN32 VIEWER ON THE CLIENT COMPUTER ..........................................................24
3.2 INSTALL JAVA VIEWER ON THE CLIENT COMPUTER................................................................24
3.3 IMPORT CERTIFICATES TO TK-IP101 VIEWER ON THE CLIENT COMPUTER ......................... 25
Import client certificate to Win32 Viewer........................................................................... 26
Import the certificates for the Java-based TK-IP101 Viewer.......................................26
3.4 SPECIFY THE VIEWER CONNECTION OPTION BEFORE MAKING A CONNECTION .................26
ENCODING...............................................................................................................................................27
LOCAL CURSOR SHAPE .......................................................................................................................... 27
MISC........................................................................................................................................................27
DISPLAY...................................................................................................................................................27
3.5 ESTABLISH THE VIEWER CONNECTION.................................................................................... 27
3.6 MOUSE CURSORS SYNCHRONIZATION ................................................................................... 29
3.7 SAVE THE CONNECTION OPTIONS ..........................................................................................30
3.8 WIN32 VIEWER CHARACTERISTICS ....................................................................................... 30
3.9 TITLE BAR INFORMATION ........................................................................................................34
3.10 THE SELECT COMPUTER BOX................................................................................................... 34
3.11 VIEWER QUICK MENU..............................................................................................................36
3.12 JAVA VIEWER CHARACTERISTICS ...........................................................................................40
3.13 COMMON VIDEO DISPLAY PROBLEM TROUBLESHOOTING .................................................... 40
4TK-IP101 UNIT MANAGEMENT OVER A SECURE HTTPS BROWSER CONNECTION 44
4.1 WEB-BASED MANAGEMENT INTERFACE ................................................................................. 44
4.2 DOWNLOAD –DOWNLOAD PROGRAMS FOR VIEWERS..........................................................46
4.3 VIEWER –VIDEO SERVER NAME &KEYBOARD TYPE SETTINGS .........................................47

TK-IP101 User Guide R1.2
- -
ii
4.4 DATE &TIME –DATE,TIME,GLOBAL TIME ZONE SUPPORT AND NTP SERVER
SYNCHRONIZATION ................................................................................................................................. 49
4.5 VIDEO SERVER –MISCELLANEOUS SETTINGS FOR VIDEO SERVERS..................................51
4.6 POWER CONTROL –MISCELLANEOUS SETTINGS FOR VIDEO SERVERS..............................53
4.7 COMPUTERS –MISCELLANEOUS SETTINGS FOR VIDEO SERVERS.......................................54
4.8 SERVER LOG –LOGGING SERVER EVENTS............................................................................56
4.9 VIDEO MODES –KEEPING,MODIFYING AND AUGMENTING YOUR VIDEO MODE DATA
BASE 57
4.10 ALARMS –E-MAIL NOTIFICATIONS AND SNMP LOGGING SUPPORT .................................. 59
4.11 KVMS –KEEPING AND ADDING YOUR KVM DATA BASE ....................................................63
4.12 LAN TCP/IP –PORT AND IP SETTINGS ............................................................................... 67
4.13 WAN PPP –PPP SERVER AND CLIENT .................................................................................69
4.14 USER STATUS –SHOW THE CURRENTLY CONNECTED USERS .............................................73
4.15 USER MANAGEMENT –MANAGE USER ACCOUNTS,RADIUS ACCOUNTING AND REMOTE
AUTHENTICATIONS ................................................................................................................................. 74
4.16 SECURITY –CERTIFICATES INSTALLATION,VIEWER ENCRYPTION AND PASSWORD
POLICIES .................................................................................................................................................79
4.17 MAINTENANCE –FLASH IMAGE VERSION INFORMATION,SOFTWARE UPGRADE,
CONFIGURATION BACKUP AND UPLOAD ...............................................................................................83
4.18 LOGOUT –LOG OUT THE WEB MANAGEMENT ................. ERROR!BOOKMARK NOT DEFINED.
4.19 APPLY SETTINGS –VALIDATE NEW SETTINGS ...................................................................... 87

1 INTRODUCTION
The name of TK-IP101 is derived from an acronymic combination from it full
name, 1-Port KVM Switch over IP , which well explains the functionality of this
powerful machine in itself. Though lightweight in size and compact in form factor,
TK-IP101 is nevertheless a heavy-weight in its functional versatility, rock-solid
robustness and formidable security. It supports full 1024-bit PKI authentication,
256-bit SSL data encryption, LDAP, RADIUS as well Active Directory authenticat
and RADIUS
ion
accounting.
Dominant yet cost-effective solution for remote server management
scenarios
With the ubiquity of the DSL/Cable technology and the bandwidth availability
therewith, the IP-based KVM technology has emerged as a dominant player in the
new landscape of remote servers management. Today, the IP-based KVM Extender
has been regarded as a better and more cost-effective solution to address the critical
issue of remote servers management, which could only be partially tacTK-IP101d in
the past by expensive yet redundant software solutions or Enterprise Management
System. And TK-IP101 is a robust and versatile solution to address the needs of
modern remote server management scenarios.
Total server control from BIOS level up anytime anywhere
TK-IP101 gives users total control from preboot stage such as the BIOS-level CMOS
setting up to the GUI applications and daily maintenance routines such as power
cycling (power control unit required). And all these could be nicely done on your
admin desk using an ordinary web-browser management interface and a thin-client
software viewer. All you need for accessing your computer is to login the TK-IP101
and download the viewer program and get yourself connected to a whole bunch of
servers in seconds. A truly anytime anywhere access for the server administrator!
Versatile backup connection featuring a PPP Server or PPP Client
To provide the necessary redundancy of a second backup system while your network
might no longer works in critical situation, TK-IP101 also allows an easy and
convenient PPP connection over the dial-in modem phone line. It could serve as a
PPP server to accept a peer computer to make PPP connection request over either a
direct cable connection or a dial-in modem phone line. On the other hand, TK-IP101
could also serve as a PPP client to dial-in to your ISP or enterprise PPP server to
connect to internet, making a truly anytime access for remote client anywhere on
the Internet. Thus, the PPP server/client features in TK-IP101 allow users a second
backup system, which offers a direct cable/modem dial-in access to your connected
servers via PSTN while your network is down.
- -
1

TK-IP101
Edge of critical Advantage over other remote server management solution
The advantages of using TK-IP101,as compared to the conventional software
remote control solution is that: The hardware-based remote control solution such as
TK-IP101 is able to access the server regardless of the server states while software
remote control solution is non-functional while the server is still in the POST or
preboot stage or in a “blue screen of death”. TK-IP101 also offers power on/off
alternatives if used with a remote power control unit.
Rock-solid stability and ultra-security yet with flexibility and convenience to
use
The TK-IP101 distinguishes itself among its peer products not only in its rock-solid
stability in durable performance, but also in its industry-standard security features
such as full 1024-bit PKI Authentication and 256-bit SSL data encryption. Together
with 3 levels of viewer connection security levels in combination with 3 types of
password policies and three categories of user privileges, all these make TK-IP101 a
ultra-powerful IP Extender machine with ultra-flexibility for a customized balance
between data safety and user convenience. On the other hand, the robustness and
the ease of maintenance of the embedded systems involve zero costs for the unit
management and maintenance.
Global Time Zone and Timer Servers Support
To make TK-IP101 really comfortable with all the global time zones it will be
deployed in, it is vital to provide a convenient Global Time Zone support since it will
give a correct time stamp to all logging events, alert e-mail notifications and won’t
leave server administrators in troubles with calculating the time differences he will
inevitably encounter with servers in different time zones. Additionally, TK-IP101 also
supports NTP time servers and keep its time always sync with the timer servers you
specify. The TK-IP101 is even sophisticated enough to take care of the daylight
saving time in each and every Time Zone/Region, thus saving troubles for updating
time frame with daylight saving specifics every six months.
Upgrade and Configuration Backup is just a breeze
TK-IP-101 is fully Web-enabled to allow software upgrade and configuration
upload/backup over the Web Management Interface. All you need to do is to upload
the files to TK-IP-101 over Web interface and voila it’s freshly restarted and begins
- -
2

working with those latest update functionalities and features-all within minutes and
can be performed across oceans-by a remote SUPERADMIN!
Advantages Galore
With TK-IP101, the server administrator can access enterprise server room or data
center on his own seat without toils and troubles of going anywhere from across the
street to oversea. And organizations can enjoy a uniquely centralized and very cost-
effective control over its dispersed servers in different branch offices, even around
the world, thus saving money for outsourcing costs.
- -
3

1.1 Primary features
General features
▪Full-featured IP-based Remote Control Solution for server management
▪Provides remote control for several servers when connected to a conventional
KVM Switch
▪Simultaneous access from multiple users
▪No user limitation
▪Facilitate centralized control
▪Total control over the remote server from BIOS level up to GUI applications
▪Remote Power On/Off support
▪Total transparency of control
▪Ultra-security using full 1024-bit PKI Authentication / 256-bit SSL encryption
▪Work with LDAP / RADIUS / Active Directory Servers
▪Ethernet 10/100 and serial PPP connections
TCP/IP remote connection
▪Web Management Interface for all settings and upgrade/backup features
▪Support Telnet session and FTP service (disabled by default for more security)
Thin-client Viewer Program
▪Win-32 viewer and Java viewer for cross-platform compatibility
▪Connection options configurable for optimized performance
▪Shared, Non-Shared and View Only sessions
▪Easy download and installation
▪Multiple viewer instances can be run on a same client computer
▪Automatic video optimization
Hi-Speed PPP Connection
▪PPP Connection support over serial RS-232 interface up to 1 Mbps
▪PPP server enabling for PPP connection across a pair of modems for secure or
backup direct access
▪PPP client enabling for PPP connection to the internet with a modem
- -
4

Video server
▪Support up to 1280 x 1024 @ 60 Hz resolution
▪8/16-bit color
▪3 Video Quality settings
▪3 Video Compression schemes
▪8-bit color reduction
▪JPEG Compression option for low bandwidth internet connections
▪Configurable database to set up new or unknown VGA modes
▪Virtually compatible to any KVM Switch through simple configuration
Power ON-OFF Control Support
▪Remote power ON-OFF control over serial interface
▪Serial commands configurable to fit all serial power control devices
▪Power ON-OFF privilege only for the SUPERADMIN users
Security
▪1024-bit Public key Authentication using certificates generated by an external CA
▪256-bit SSL Encryption for keyboard, mouse and video signal transmissions
▪Remote authentication support for LDAP or RADIUS servers
▪RADIUS accounting support
▪3 SSL security levels :
oNo authentication – No encryption
oServer Authentication – SSL encryption
oServer & Client authentication – SSL encryption
▪3 password policies :
oNo Password
oOne global password for all users
oOne different password for each user
▪Linux operating system offers robust virus resistance
Alarms and Notifications
▪Alert e-mail notification and SNMP trap messages for critical server events such
as No Video, Blue Screen and NumLock Test Failure
User Management
▪User login either by querying the local user database or by connection to remote
LDAP or RADIUS server
▪3 user privileges :
oSUPERADMIN – to access complete set of management features and
user features, including Power ON-OFF remote servers
oADMIN – partial set of management and all user features
oUSER – only user features
Global Time Zone Support
▪Time support for all continents and major cities
▪Time synchronization by connection to any NTP time servers
▪Automatic Daylight Saving management
- -
5

1.2 System Architecture
The TK-IP101 is based on an embedded Linux platform for computing power and
rugged stability. The TK-IP101 employs a High speed Processor to ensure excellent
video quality and fast keyboard / mouse response across the Internet, even when
bandwidth availability is limited.
LAN/WAN Configurations
TK-IP101 connected to a single server
- -
6

1.3 TK-IP101 External Views
TK-IP101 Front View
TK-IP101 Front-panel
PS/2 Keyboard port
This is where you connect the PS/2 keyboard for local console.
PS/2 Mouse port
This is where you connect the PS/2 mouse for local console.
Console Management Port (RJ-12)
This is where you connect the serial console cable for advanced console
management of TK-IP101 unit via a serial terminal emulation utility such as
Windows HyperTerminal.
Status LEDs
The 10/100Mbps LED is lit as solid orange when the current digital link is running on
100Mbps speed.
The Link/Act LED gives off solid green light when a network link is established and
flashes whenever network transmission are perceived on the digital port.
The Power LED indicates the Power On status when it is lit as solid green.
The Video LED indicates the normal functioning of video server when it is blinking.
Restore-to-Default Button
The Restore-to-Default button is a tiny recessed button located to the right of the
LED indicators, and can only be accessed by prying down with a pointed needle tip.
To depress the recessed button for over 4 seconds, and upon release, it will restore
TK-IP101 to factory default – the default IP settings and user account settings that
come with factory default settings.
- -
7

- -
8
TK-IP101 Rear View
TK-IP101 Rear Panel
PC/KVM port (HDB-15, integrated with PS/2 Keyboard and mouse signals)
The PC port connector is where you should connect to either a single PS/2 computer
or a single PS/2 KVM Switch, using the 3-in-1 slim KVM cables w/ an integrated
HDB15 connector. However, if you are using USB-enabled computer or USB KVM
Switch, you should additionally use a USB cable to connect to a USB port on your
computer for keyboard/mouse connection.
Monitor Port (HDB-15)
This is where you should plug in the Monitor for your local console on TK-IP101.
USB port (USB Type B)
This USB port provides USB keyboard/mouse connections to a USB-enabled PC, or to
a USB KVM Switch. Thus, if you are connecting any USB-enabled PC or USB KVM
Switch, please use a USB cable to make the connection.
Ethernet Port (RJ-45)
The Ethernet port, or digital port, offers anytime anywhere access of TK-IP101 and
subsequently the conventional KVM Switch(es) and servers/computers connected
behind it to the remote login clients lover LAN/Internet.
Serial Control Port (RJ-12)
The serial control port allows you to connect to either an external modem or a power
control unit or to a cascaded chain of power control units. When added with an
external modem to its serial control port, TK-IP101 could serve either as a PPP
server to allow direct cable connection or dial-in connection from its peer computers,
or as a PPP client to dial-in to the ISP or an enterprise PPP server. Furthermore,
through serial commands sent over its serial control port, TK-IP101 can perform
remote power on/off and power cycling task via the (cascaded) power control
module(s).
TK-IP101 Power Socket
You should use the DC9V 2A Adapter provided within the package. Use of any other
adapter will nullify the warranty.

2 TK-IP101 INTALLATION
2.1 Physical Connections
Step 1. Power on the TK-IP101: Connect the TK-IP101 Power adapter and power
on TK-IP101.
Step 2. Set up a local console on TK-IP101: If a local console (that is a physical
keyboard, mouse and monitor connected to the TK-IP101) is required, connect the
keyboard and mouse to the TK-IP101 local console ports (that is keyboard, mouse
and monitor port specifically).
Step 3-a. Single Server Mode: If you need to connect to only one
computer/server. Just connect to the PC/KVM port directly to the PC, using the 3-in-
1 Slim KVM combo cable and/or the USB cable that come with the TK-IP101 packing
box.
TK-IP101 configuration – Single server mode
- -
9

Step 3-b. Multiple Server Mode: If you need to connect to multiple
computers/servers, you should use a KVM switch in between the TK-IP101 and your
connected computers/servers. Just connect to the PC/KVM port o the console port of
your KVM switch using the 3-in-1 Slim KVM combo cable and/or the USB cable (if it
is a USB KVM switch) that come with the TK-IP101 packing box. And the KVM switch
will in turn be connected to the multiple computers/servers.
Now that you have set up your local console on TK-IP101, you can now configure
your connected servers just by using the ready access provided by TK-IP101’s local
console.
2.2 Configure Your Servers for Connections
to TK-IP101
Mouse acceleration is not supported in TK-IP101. Therefore, you must turn off
mouse acceleration on all your connected servers.
Turn off mouse acceleration & “Snap to” option
Windows XP Platform
Access Control Panel/Mouse. On the Mouse Properties tab, select the Pointer Options
page :
1. Adjust the pointer speed slide bar to the exact middle.
2. Uncheck the Enhance pointer precision option.
3. Uncheck the Automatically move pointer to the default button in a
dialog box
Click OK.
Windows 2000 Platform
Access Control Panel/Mouse. On the Mouse Properties tab, select the Pointer Options
page :
1. Adjust the pointer speed slide bar to the exact middle
2. Select the Acceleration as None
- -
10

3. Uncheck the Move pointer to the default button in dialog box
Click OK.
Windows 98
Access Control Panel/Mouse. On the Mouse Properties tab, select the Motion page.
Under the Pointer Speed category:
1. Adjust the pointer speed slide bar to the slowest (leftmost) position.
Click OK.
The mouse setting page on different Windows platforms might be quite different, some gives mouse
acceleration option and some don’t. If you see any mouse acceleration option, please uncheck it. If there is
no mouse acceleration available on the setting page, you can adjust the mouse speed slide bar to either x1 or
the slowest position (such as on Linux platforms). But sometimes, it requires a middle position on the speed
slide bar to make mouse synchronization on the viewer side, for example, Windows XP requires a middle
position on mouse speed. Anyway, the worst case is that you have to make some trial and error to make your
mouse acceleration off and the speed as x 1 (could be at the slowest position or the middle position).
- -
11

2.3 More Tips for Server Desktop
Configuration
There are several aspects that have to be taken into consideration and maybe
configured on your computers or servers for best performance:
(1) Resolution modes should refrain from too much peculiarity and better
adopt ones that are within TK-IP101’s standard support.
(2) Turn off the Menu special transition effects on your operating system
(especially on Windows XP, if you are using any) such as fade for best
video refreshing effect, especially when you are using Medium or Low
Video Quality as your video filter setting on TK-IP101.
(3) Adjust the server desktop backgrounds as containing preferably plain,
solid colors with simple designs (only for improving video refreshing
speed when bandwidth is critically limited. No need to do so when
bandwidth is ample)
Configure Display Resolution on your Server
TK-IP101 supports most display modes up to 1280 x 1024. However, you might encounter some
display problems when your display card is outputting an unusual display mode. These possible problems
are either no video or abnormal display on viewer screen.
To simplify the display factor before connection to TK-IP101, we suggest you use more standard display
modes such as: 800 x 600 @ 72Hz/75Hz, 1024 x 768 @ 72Hz/75Hz, etc. For the suggested display modes,
please refer to the following table.
640 x 400 640 x 480 800 x 600 1024 x
768 1152 x 864 1280 x 1024
56Hz
60Hz
D
D
D
D
D
61Hz
64Hz
70Hz D
D
D
72Hz
D
D
74Hz
75Hz
D
D
D
76Hz
D
78Hz
D
84Hz
85Hz D
D
D
D
100Hz
D
D
D
Note: These are suggested display modes for server desktop connected TK-IP101. However, the actual feasible display
modes for as specific server desktop will be dependent on its display card. Some display modes listed here might not be
feasible with some display card. Try to do some trials to determine the best display mode for your desktop on TK-
IP101 viewer.
Disable special transition effects on the screen outputs of your connected servers
Go to Control Panel/ Display / Appearance / Effects. And then uncheck the option to disable transition
effects such as Fade for the menus and tool tips. You should perform the same check on each of your
connected servers.
- -
12

On Windows platforms such as Windows 98, 2000, XP and 2003 Server, some transition effects might
yield undesirable video refreshing artifacts, especially when you are using Medium or Low Video Quality as
your video filter settings. To avoid undesirable artifacts from appearing on your screen, please turn off the
special transition effects.
Choose plain and solid server desktop backgrounds for your connected servers.
To optimize the bandwidth efficiency and speed up video performance across
bandwidth-limited environment, one should preferably adopt a server desktop which
should be as plain as a color background with a solid and light-colored graphics.
Complex patterns or color gradients should be avoided, if bandwidth is critical in
your application, since they will create more bandwidth demands for their
transmission across internet.
- -
13

2.4 Configure TK-IP101 Network Settings
Step 1. Connect your TK-IP101 to the Ethernet LAN.
The factory default network settings for TK-IP101 are as follows:
IP address: 192.168.1.200
Net mask: 255.255.255.0
Gateway: 192.168.1.254
DNS: 192.168.1.254
Step 2. Access TK-IP101 Web Browser Management interface by typing the following
in the address bar of your browser window on a remote client:
https://192.168.1.200:5908
Step 3. Then a login prompt will ask you for the account name the password. Use
the default account and password:
User Name: superuser
Password: superu
After logging in, you will see the TK-IP101 Web Browser Management Interface.
Internet Explorer 7 users, click “Continue to the website (not recommended)”.
Note: Due to added levels of browser security, Internet Explorers 7 users will see red in the
address bar and a “Certificate Error” warning; this is not an issue with the TK-IP101. This
product will continue to function properly. To avoid this event, please refer to this User’s
Guide for instruction on how to configure security setting and creating certificates
Internet Explorer 7.0 Certificate Error message.
- -
14

Certificate Error in Internet Explorer 7.0 browser.
Step 4. Go to the LAN TCP/IP page on the TK-IP101 Browser Management Interface
and modify your IP settings. Refer to Section 4.11, LAN TCP/IP – Port and IP
Settings.
Step 5. Apply the new setting by clicking Apply Settings.
Step 6. Verify TK-IP101’s network connection.
Connect to TK-IP101 by Web Management Interface using the new IP address.
Note that the IP address should be followed immediately by a colon and the port
base +8 for port number,
https://<IP_address>:<PortBase+8>.
For example, if the IP address is 192.168.1.7 and the port base number is 5900,
then you should enter
- -
15

https://192.168.1.7:5908
Remember that it’s a secure SSL encrypted connection, so you should type “https” instead of the usual
“http”. Otherwise, the connection will not be established.
2.5 Configure port base setting for TK-IP101
If you are satisfied with the default port base setting as 5900, you can skip this section.
The default port base for TK-IP101 connection is set at 5900. This means it will use
port 5900 (port base) for viewer connection and port 5908 (port base + 8) for https
web browser connection.
<Port base> – used for viewer connection
<Port base + 8> – used for secure browser connection
However, if you intend to use your own port base setting, just access the Web
Management interface and configure the port base as follows:
For example, if you choose 5970 as your port base, then you have:
5970 – used for viewer connection
5978 – used for secure browser connection
- -
16