Product names mentioned in this document are trademarks or registered trademarks of their respective companies. IP-Reach, Paragon, MasterConsole MX respective logos are trademarks or registered trademarks of Raritan Computer, Inc. PS/2, RS/6000, and PC/AT are registered trademarks of International Business Machines Corporation. Sun is a registered trademark of Sun Microsystems.
RRC Toolbar and Shortcuts...23 RRC Status Bar...24 Remote KVM Console Control...25 Single Mouse Mode / Dual Mouse Mode ...26 Full Screen Mode ...26 Selecting Servers with a KVM Switch ...27 Keyboard Macros ...28 Connection and Video Properties...31 Color Calibration...34 Contents...
Important Information Login The default IP-Reach login user name is <admin>, with the password <raritan>. This user has administrative privileges. Passwords are case sensitive and must be entered in the exact case combination in which they were created. The default password <raritan> must be entered entirely in lowercase letters. To ensure security, change the default password as soon as possible.
IP-Reach provides a broad array of remote access methods to control any server connected to a Raritan KVM Switch. Since servers can also be accessed out-of-band with IP-Reach, remote access to mission- critical target servers is always available - even if the network is down.
Product Photos Package Contents IP-Reach ships as a fully configured stand-alone product in a standard 2U 19” rackmount chassis, along with the following contents: TR Series (1) IP-Reach unit (1) IP-Reach TR Series Quick Installation and Setup Guide (1) IP-Reach User Manual (1) Raritan Remote Client software CD-ROM (1) Rackmount Kit...
Product Features Access Remote KVM access via the Internet, LAN/WAN, or dial-up modem Up to four simultaneous user throughput to switch(es) or server(s) Up to 16 simultaneous users (using PC-share mode) Web browser accessible Remote access to serial devices (VT100) connected to IP-Reach serial port...
Terminology This manual makes use of the following terms to indicate components of a typical IP-Reach configuration. While reading the manual, please refer to the diagram below for clarification when necessary. Target Server(s) Servers to be accessed remotely via IP-Reach and its connected KVM configuration.
2: I HAPTER NSTALLATION Chapter 2: Installation Configuring Target Servers Before installing IP-Reach, first configure any target servers that you wish to access via IP-Reach, in order to ensure optimum performance, as outlined below. Note that the following configuration requirements apply only to target servers, not to the computers that you will be using to access IP-Reach remotely (see Chapter 1: Introduction, Terminology).
APKMSUN Raritan guardian for use with IP-Reach. Note that KVM switch brands other than Raritan’s may or may not properly handle PS/2-to-Sun signals. On target servers running the Solaris operating system, set the mouse acceleration value to exactly 1 and threshold to exactly 1.
TCP Port 80 – the standard TCP port for HTTP communication. Configuring Paragon KVM Switches If you will be using IP-Reach to access Raritan’s Paragon enterprise-class KVM switch, first perform the following optimization before connecting IP-Reach: One by one, view each target server accessible from the Paragon user station and adjust the “video gain setting”...
KVM switch or server attached to the corresponding KVM Port. For example, the User Console attached to User Port 1 will view the KVM switch or server attached to KVM Port 1. The User Console attached to User Port 2 will view the KVM switch or server attached to KVM Port 2, and so on.
“Admin Console.” Network Port Connect a standard Ethernet cable from the network port to an Ethernet switch, hub, or router. KVM Input Ports Connect the DB25 end of an included CCP20 cable(s) to the “KVM” ports and connect the other end of the CCP cable to corresponding PS/2 keyboard, mouse, and VGA video ports of the KVM switches or servers to which you wish to provide remote network access.
Note: For IP-Reach Model M2, the Local Access Console attached to a KVM Out Port will view the KVM switch or server attached to the corresponding KVM In Port number. For example, the User Console attached to KVM Out Port 1 will view the KVM switch or server attached to KVM In Port 1. Dedicated Modem Port (optional) IP-Reach M Series models feature a dedicated modem port.
Local Admin Console (see ‘Physical Connection’ instructions in the previous sections). Power ON IP-Reach via the power switch on the back of the IP-Reach unit. The Welcome to IP-Reach Setup Wizard Screen will appear on the Local Admin Console.
Page 20
Line Speed & Duplex: Enter the visual efficiency for the monitor: Auto detect 10 Mbps/Full Duplex, 10 Mbps/Half Duplex, 100 Mbps/Full Duplex, or 100 Mbps/Half Duplex Obtain IP address automatically (DHCP): YES: Enables dynamic IP addressing for IP-Reach. Each time IP-Reach boots, it requests an IP address from the local DHCP server.
2: I HAPTER NSTALLATION Connect to IP-Reach Remotely Having completed the physical installation of IP-Reach, you are now ready to establish an initial network connection. Below are basic instructions for doing so. Please see Chapter 3: Raritan Remote Client for detailed instructions, being sure to review the “KVM Session Properties”...
Use the RRC Navigator, found on the left-hand side of the RRC window, to select and connect to a port. The RRC Navigator displays any known Raritan networked appliances. Double-click on a port to establish control over the server or KVM switch attached to that port. Users with Administrator privileges may modify IP-Reach configuration settings Remotely access VT100 serial consoles connected to the “Serial IN”...
3: R (RRC) HAPTER ARITAN EMOTE LIENT Chapter 3: Raritan Remote Client Invoking Raritan Remote Client (RRC) via Web Browser IP-Reach features Web Browser access, providing a connection from any Windows-based Remote PC running Microsoft Internet Explorer 4.0+, Mozilla 1.1+, and Netscape 7+. Security Settings Accessing IP-Reach via web browser requires appropriate settings in the Internet Explorer security settings tab:...
3. Depending on your browser’s security configuration, you may see any or all of the following dialog boxes, confirming the access and launch of an externally-provided program. Click [Yes] to advance through any of these prompts. Note: Microsoft Windows 2000 and Microsoft Windows XP restrict certain types of users from downloading and running ActiveX controls and plug-ins, regardless of the settings in Internet Explorer and regardless of your approval of the above warnings.
3: R (RRC) HAPTER ARITAN EMOTE LIENT Optional: Installing Raritan Remote Client Software Note: This step is optional. IP-Reach can be accessed from a Remote PC either by installing RRC software, or by launching RRC via web browser (see previous section). Accessing IP-Reach via web browser does not require any software installation on the Remote PC.
IP-R EACH ANUAL RRC Window Layout Raritan Remote Client functions are grouped into five general sections on the screen. Each section will be discussed in detail further in this chapter. Menu Bar Toolbar Navigator Remote Desktop Status Bar...
3: R (RRC) HAPTER ARITAN EMOTE LIENT RRC Navigator The RRC Navigator provides a single view to every known Raritan device, allowing convenient access to multiple Raritan networked appliances. The RRC Navigator displays: All Raritan devices for which a connection profile exists All Raritan devices that are automatically identified on the network Note: Automatic Raritan device identification uses UDP protocol, and will usually identify all Raritan devices on your subnet.
Navigator Options Certain RRC Navigator attributes may be customized to your preferences. Display / Hide Navigator – Toggle whether the RRC Navigator is shown. This option can also be toggled by choosing View Refresh Navigator – Update the device status information shown in the RRC Navigator. Show Browsed Devices –...
Page 29
3: R (RRC) HAPTER ARITAN EMOTE LIENT For a TCP/IP Connection, select how RRC should locate your Raritan device: IP Address: The IP address assigned to your Raritan device (see Chapter 4: Administrative Functions, Network Configuration). Name: The name assigned to your Raritan device during initial setup (see Chapter 4: Administrative Functions, Network Configuration).
Establishing a New Connection To connect to a Raritan networked device, simply double-click on its entry in the RRC Navigator. You will be asked to authenticate the device. Note: The default IP-Reach login user name is <admin>, with the password <raritan>. This user has administrative privileges.
Raritan Remote Client mouse pointer. Forces refresh of video screen. Forces refresh of video settings (resolution, refresh rate). Accesses On-Screen User Interface of connected KVM switch. Deactivates On-Screen User Interface of connected KVM switch. Sends a Ctrl+Alt+Delete macro to the Target Server.
IP-R EACH ANUAL RRC Status Bar The Status Bar at the bottom of the Raritan Remote Client window conveys information about the status of your remote connection session to IP-Reach. Video Sensing Status / Path Indicator Indicates the occurrence of video sensing. Bandwidth Usage Indicator Indicates how much of your total available bandwidth is currently being used.
(see Chapter 4). Once connected to a KVM switch or a server, you obtain complete, low-level control of the KVM console as if you were physically located next to the KVM switch or server.
IP-R EACH ANUAL Single Mouse Mode / Dual Mouse Mode When remotely viewing a Target Server that uses a pointing device, by default you will see two mouse pointers within the Remote Desktop area of the Raritan Remote Client window. The Raritan Remote Client mouse pointer, generated by the operating system on which RRC is running, slightly leads the Target Server's mouse pointer during movement, a necessary result of digital delay.
Target Servers can be performed with the two RRC Toolbar buttons aforementioned. Note: To access the KVM OSUI, remote users can also simply enter the KVM switch hotkey at the Remote PC keyboard. This is true of both Raritan and non-Raritan KVM products.
RRC allows users to create custom keyboard macros in order to send given key sequences to the remote server or KVM switch connected to IP-Reach. This feature allows customers to send keystrokes to remote servers that may be otherwise unintentionally interpreted by the computer on which RRC is running.
Page 37
3: R (RRC) HAPTER ARITAN EMOTE LIENT 3. The Add Keyboard Macro dialog box opens. 4. Build the Keyboard Macro by editing all the fields in the Add Keyboard Macro window, in the order described below. Click [OK] when finished. Enter a name into the Keyboard Macro Name field, which will appear on the RRC Menu Bar, after successful creation of the keyboard macro.
IP-R EACH ANUAL 5. After clicking [OK], the Keyboard Macros dialog box will appear, listing your new keyboard macro. 6. Click [Close] to complete the keyboard macro editing procedure. Running a Keyboard Macro Once a macro is created, it can be run via the RRC Menu Bar or with the hotkey combination if one had been designated during the macro creation.
3: R (RRC) HAPTER ARITAN EMOTE LIENT Connection and Video Properties IP-Reach's dynamic video compression algorithms maintain KVM console usability under varying bandwidth constraints. Unlike competitive solutions, IP-Reach optimizes its KVM output for not only LAN utilization, but also via the WAN and dial-up. By dynamically adjusting color depth and limiting video output, IP-Reach offers the optimal balance between video quality and system responsiveness in any bandwidth constraint.
Internet Flow Control Many public WAN links are by their very nature unpredictable. Packets sent over the public Internet do not necessarily arrive at their destination in the order they were sent. When using IP-Reach over an unpredictable public WAN (particularly in international scenarios), the Internet Flow Control toggle ensures that packets transmitted by IP-Reach are received and reconstructed by RRC in the correct order.
Page 41
3: R (RRC) HAPTER ARITAN EMOTE LIENT Analog-to-Digital Settings The following parameters are best left to IP-Reach to automatically detect (on the RRC Menu Bar, select Video > Auto-sense Video Settings), but a brief description of each is included here. PLL Settings: If the video image looks extremely blurry or unfocused, the PLL Settings for clock and phase can be adjusted until a better image appears on the active Target Server.
IP-R EACH ANUAL Color Calibration Automatic Color Calibration adjusts the color settings on IP-Reach to reduce excess color noise and data during digitization of video images. This data streamlining will increase the operational performance of IP- Reach, particular color accuracy. A very simple procedure to execute, Color Calibration should be performed if the color levels (hue, brightness, saturation) of transmitted video images do not seem accurate.
3: R (RRC) HAPTER ARITAN EMOTE LIENT Remote Serial Control In addition to remote KVM console access, IP-Reach also offers users the convenience of accessing a serial console via web browser as well. Any serial console supporting VT100 emulation may be connected to the SERIAL IN port found on the back panel of IP-Reach, and accessed using the Raritan Remote Client.
IP-R EACH ANUAL Changing Serial Settings You may change the serial terminal settings such as baud rate, parity, and stop bits used by IP-Reach to communicate with your serial device, by right-clicking on the serial port entry in the RRC Navigator, and selecting Serial Parameters in the menu.
3: R (RRC) HAPTER ARITAN EMOTE LIENT Log Files IP-Reach provides detailed activity logs for troubleshooting purposes, which may be downloaded to your local computer for viewing, reporting, and analysis. On the RRC Menu Bar, select Tools Save Activity Log, or Tools Save Diagnostic Log.
(users with administrative privileges) can access the IP-Reach Administrative Menus. Local Admin Console Power ON the IP-Reach unit via the power switch on the back of the unit. Note: The default IP-Reach login user name is <admin>, with the password <raritan>. This user has administrative privileges.
Remote Admin Console An alternative way to access IP-Reach’s administrative functions is to do so remotely, using the Raritan Remote Client. Any administrative user logged on to IP-Reach at a Remote PC can perform administrative functions remotely to make changes to the system, as long as IP-Reach is set to allow remote administration privileges –...
4: A HAPTER DMINISTRATIVE UNCTIONS Network Configuration After making changes to the Network Configuration, press <Ctrl+S> to save. You must reboot when all changes are complete in order to apply them. Name: Designate a unique name for this IP-Reach unit, for example, “Miami Data Center.” The default name is IP-Reach.
One Path to All Ports: Used when ALL IP-Reach KVM Ports are connected to one KVM switch configuration. There is one main path to one KVM configuration and up to four users can connect to the KVM configuration. IP-Reach will automatically assign the next open channel on the path to each user.
Page 51
Two Paths – Two Ports Each: Used when IP-Reach is connected to two KVM switch configurations. There are two main paths, one to each KVM configuration. Users must select the Path (or KVM configuration) they wish to access upon IP- Reach login.
Page 52
Three Paths – Two Ports, One Port, One Port (2, 1, 1) : Used when IP-Reach is connected to three KVM switch configurations. There are three main paths, one to each KVM configuration. Users must select the Path (or KVM configuration) they wish to access upon IP- Reach login.
4: A HAPTER DMINISTRATIVE UNCTIONS Security Configuration Encryption mode: Toggle through the choices and select the desired level of encryption for initial connection authentication and remote session video data transfer. No encryption: No encryption or security. Neither the initial connection authentication nor remote video data transfer is encrypted.
Page 54
NO (default): No special commands will be given to effect to the OSD of the connected KVM switch upon user remote disconnection from IP-Reach. When a remote user disconnects from IP-Reach the OSD of the connected KVM switch will remain in the state last seen by the user.
4: A HAPTER DMINISTRATIVE UNCTIONS Private key: Enter a private key password. This private key acts as a second level of password protection. Only remote users who know the private key password, in addition to their user name and password, can log in and connect to IP-Reach. Confirm private key: Enter private key password again for re-confirmation.
No Limit (default): Each active user can consume as much bandwidth as needed. 10, 5, 2, or 1 megabit or 512, 256, 128 kilobit: Bandwidth consumed by each active user during the operation of this IP-Reach unit is limited to the selected quantity. The lower the bandwidth allowed, the slower the performance that may result.
4: A HAPTER DMINISTRATIVE UNCTIONS Create or Change Group Accounts 1. At the Main Menu, type <G> to add or change a Group Account. 2. The Group Account screen appears. To add a new group account, type the letter <A>. To change group account properties, use the <TAB>...
3. The Group Account Settings screen appears. Type the Group Account name in the Group Name field. The name can consist of alpha-numeric characters, up to 23 characters long, and the first character cannot be a number. Use the < > and < > arrow keys or the <TAB> key to move through the line items, and press the <SPACE BAR>...
4: A HAPTER DMINISTRATIVE UNCTIONS 5. Your changes are not yet saved. You will be returned to the Group Account Settings screen for the user group you are editing or creating. 6. You must press <CTRL>+<S> once more while in this screen to save the permissions settings to your given user group.
Create or Change User Accounts 1. At the Main Menu, type <U> to add or change a user account. 2. The User Account window appears. To add a new user account, type the letter <A>. To change a user account properties, use the <TAB> key to move through the list and press <ENTER>...
4: A HAPTER DMINISTRATIVE UNCTIONS 4. Press <CTRL> + <M> to return to the Main Menu. Delete User Accounts To delete an existing user account, type <U> at the Main Menu, and when the User Account screen appears, press <TAB> to select the user account to delete, and then press <D>. Please note that you cannot delete the default user, ADMIN.
Remote Authentication Implementation Introduction Note to CommandCenter Users If you plan to configure IP-Reach to be integrated with and controlled by Raritan’s CommandCenter management appliance, this section of the User Manual does not apply to you. When an IP-Reach unit is controlled by CommandCenter, CommandCenter determines the allowed users and groups.
Page 63
4: A HAPTER DMINISTRATIVE UNCTIONS Authentication vs. Authorization When your IP-Reach unit is configured for remote authentication, the external authentication server is used primarily for the purposes of authentication, not authorization. Authorization is determined by IP-Reach on the basis of user groups. That is, once a given user is allowed to access the IP-Reach system in general (authenticated), that user’s specific permission (authorization) is determined by IP-Reach based upon the user’s group.
General Settings for Remote Authentication You must log on to IP-Reach as default Administrator (user name <admin>, password <raritan>) to set Remote Authentication properties. At the Main Menu, press the letter <C> to Configure IP-Reach. When the Configuration Menu appears, press <R> to configure Remote Authentication. The Authentication and Accounting screen appears.
Page 65
4: A HAPTER DMINISTRATIVE UNCTIONS b. Type the server secret needed to authenticate against your remote authentication servers in the Server Secret field. Re-type the server secret in the Confirm Secret field. Type the time of inactivity (in seconds) that should pass before the server times out in the Server Timeout (seconds) field.
If you are appointing Remote Accounting, in the Authentication and Accounting screen, <TAB> to the Enable Remote Accounting field, and press <SPACE BAR> to toggle to RADIUS. When finished, press <ENTER> to save your changes, or press <ESC> to exit without saving Remote Authentication configurations.
4: A HAPTER DMINISTRATIVE UNCTIONS Returning User Group Information via RADIUS When a RADIUS authentication attempt succeeds, IP-Reach determines the permissions for a given user based on the permissions of the user’s group. Your remote RADIUS server can provide these user group names by returning an attribute, implemented as a RADIUS FILTER-ID.
Time and Date Current Date and Time on the IP-Reach unit are listed on this screen. Once saved, Time and Date changes will not take effect until IP-Reach is restarted. New Date / New Time: To manually input changes to current date and time values. Adjust for daylight savings time: Toggle between YES and NO to reflect whether your country or state follows the daylight savings time procedure.
4: A HAPTER DMINISTRATIVE UNCTIONS View IP-Reach Status The IP-Reach Event Log screen shows a log file containing information about IP-Reach log in and connection activities. This Event Log stores IP-Reach events, such as user login or logout, bad login attempts, Admin login, and logout at the IP-Reach Admin console, Admin changes to the system configuration, Admin user profile additions, changes, or deletions, modem activity, system startup and shutdown, and all errors that occur, with the date and time of each event.
IP-R EACH ANUAL Diagnostics While navigating the Main Menu of the Administrative Console, pressing <D> and <Enter> will invoke the IP-Reach Diagnostic functions. These functions are meant to enable Raritan Technical Support to assist you in the case of a problem with your IP-Reach unit.
A: S PPENDIX PECIFICATIONS Appendix A: Specifications IMENSIONS IPR-TR361 2U 19” Rackmount Case: 19” (W) x 21.25” (D) x 3.5” (H) 482 mm (W) x 540 mm (D) x 89 mm (H) IPR-TR362 2U 19” Rackmount Case: 19” (W) x 21.25” (D) x 3.5” (H) 482 mm (W) x 540 mm (D) x 89 mm (H) IPR-TR364 2U 19”...
Standard RJ11 based phone cord to connect modem to a phone line (provided)** Category 5e UTP cable to connect to network **TR Series only KVM Switch Specifications Supports KVM switches utilizing an On-Screen User Interface, including Raritan’s Paragon, Z-Series, MasterConsole MX , and MasterConsole II product lines.
B: SNMP F PPENDIX EATURES Appendix B: SNMP Features For convenient monitoring with standard network management systems such as HP OpenView or IBM Tivoli software solutions, IP-Reach features an SNMP agent with standard MIB2 support. IP-Reach responds to SNMP GET requests with standard MIB2 variables, although for security reasons only a subset of the variables are provided.
UESTION What is IP-Reach? IP-Reach is the easiest, fastest, most reliable way to remotely access and manage multiple servers connected to a Raritan KVM Switch - no matter where you are or where your servers are located. How does IP-Reach...
Page 76
UESTION How Is IP-Reach Administrators access IP-Reach through a connected IP-Reach Admin administration carried Console. A simple keyboard driven interface of menus offers out? straightforward access to IP-Reach setup and control. User profiles, security settings, configuration and diagnostics are just a few of the options available.
ONSOLE ROBLEMS The Direct Analog User Make sure the KVM switch is functioning properly. Make sure that IP- Console does not function. Reach is turned on. IP-Reach must be powered on for the Direct Analog User Console to function. The cable located inside IP-Reach that connect the Direct Analog User Console port(s) may have disconnected –...
Page 78
IRECT NALOG ONSOLE ROBLEMS from a Direct Analog User users are currently attempting to control the active Target Server. Console. I cannot view the Target Ensure that you are looking at the Direct Analog User Console connected Server that I am looking for to the correct User Port.
Page 79
At the Remote PC user console, exit the OSUI for the Remote PC’s KVM switch by pressing the <Esc> key once. Wait a few seconds and the OSUI for the Remote PC’s KVM switch will disappear. To avoid this problem either reset the Remote PC’s attached KVM switch to a Hotkey that differs from the Hotkey for the base KVM switch attached to IP-Reach.
Page 80
OUSE ROBLEMS The larger IP-Reach Mouse Pointer does not track or is not in sync (not aligned) with the smaller Target Server Mouse Pointer. IP-Reach is not accepting my mouse. IP-Reach Mouse Pointer and the Target Server Mouse Pointer do not sync up in certain Windows NT Administration screens, like the NT log on screen.
Page 81
Contact Raritan assistance. The main power switch for IP-Reach is on the back of the unit. To turn off IP-Reach hold the power key down for a few seconds. To turn IP-Reach back on, press the power button again.
Event Log File and On-Screen Error Codes IP-Reach will display or log an error code in the IP-Reach Event Log Screen in the event of a problem occurring. Error codes are eight-digit hexadecimal numbers, containing two parts: the first four denote error type;...
Page 83
D: T PPENDIX ROUBLESHOOTING RROR EANING LAST DIGITS 0011 Ethernet could not be found. 0012 The modem could not be found. 0013 Memory allocation error. 0014 There is a problem with the IP address. 0015 The DHCP server did not respond.