CN8000A User Manual EMC Information FEDERAL COMMUNICATIONS COMMISSION INTERFERENCE STATEMENT: This equipment has been tested and found to comply with the limits for a Class A digital device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference when the equipment is operated in a commercial environment.
Japan 81-3-5615-5811 Korea 82-2-467-6789 North America 1-888-999-ATEN ext 4988 1-949-428-1111 User Notice All information, documentation, and specifications contained in this manual are subject to change without prior notification by the manufacturer. The manufacturer makes no representations or warranties, either expressed or implied, with respect to the contents hereof and specifically disclaims any warranties as to merchantability or fitness for any particular purpose.
CN8000A User Manual About this Manual This User Manual is provided to help you get the most from your CN8000A. It covers all aspects of installation, configuration and operation. An overview of the information found in the manual is provided below. Overview Chapter 1, Introduction, introduces you to the CN8000A System.
CN8000A User Manual Conventions This manual uses the following conventions: Monospaced Indicates text that you should key in. Indicates keys you should press. For example, [Enter] means to press the Enter key. If keys need to be chorded, they appear together in the same bracket with a plus sign between them: [Ctrl+Alt].
CN8000A User Manual Terminology Throughout the manual we make reference to the terms Local and Remote in regard to the operators and equipment deployed in a CN8000A installation. Depending on the point of view, users and servers can be considered Local under some circumstances, and Remote under others: Switch’s Point of View Remote users –...
For information about all ATEN products and how they can help you connect without limits, visit ATEN on the Web or contact an ATEN Authorized Reseller. Visit ATEN on the Web for a list of locations and telephone numbers: International...
Chapter 1 Introduction Overview The CN8000A is a control unit that provides “over-IP” capability to KVM switches that do not have built in over-IP functionality. It allows operators to monitor and access their computers from remote locations using a standard Internet browser or Windows and Java based application programs.
Page 16
CN8000A User Manual With its advanced security features, the CN8000A is the fastest, most reliable, most cost effective way to remotely access and manage widely distributed multiple computer installations. A mini USB port in the front panel serves as a Laptop USB Console (LUC) port.
1. Introduction Features and Benefits The features and benefits provided by a CN8000A deployment are described in the following table: Features Benefits Over-IP Protects your original KVM switch investment. No need to Capability for purchase new KVM switches to achieve the benefits of over-IP Legacy KVM connectivity.
Page 18
CN8000A User Manual Features Benefits Multi-Platform / Windows and Java client software ensures that the CN8000A and Multi-Protocol the equipment that connects to it can be accessed from most of the Support operating systems in use today (Windows, Linux, Unix, Sun, Mac). The CN8000A also supports a broad range of communication protocols, such as TCP/IP, HTTP, HTTPS, UDP, DHCP, SSL, ARP, DNS, ICMP, CHAP, PPP, 10Base-T, 100Base-T...
Page 19
1. Introduction Features Benefits Console Serial console management – serial terminal access. Access the Management CN8000A via a built-in serial viewer, or via third party software (such as PuTTY) for Telnet and SSH sessions. Out of Band Support – via dial up modem support. Access the CN8000A through its RS-232 port using a dial-up connection.
CN8000A User Manual System Requirements Servers Servers are the computers connected to the switch via KVM Cables (see Terminology, page xiii). The following equipment must be installed on these servers: A VGA, SVGA or multisync port For USB KVM Cable Connections: Type A USB port and USB host controller For PS/2 KVM Cable Connections: 6-pin Mini-DIN keyboard and mouse ports...
Page 21
1. Introduction Note: This cable set has been designed to operate with either PS/2 or USB consoles. A USB 2.0 cable for use with the Laptop USB Console (LUC) (see Laptop USB Console (LUC), page 3) is provided with this package. Cat 5e or higher Ethernet cable (not provided with this package), should be used to connect the CN8000A to the LAN, WAN, or Internet.
CN8000A User Manual Video Only the following non-interlaced video signals are supported: Resolution Refresh Rates 640 x 480 60, 72, 75, 85, 90, 100, 120 720 x 400 800 x 600 56, 60, 72, 75, 85, 90, 100, 120 1024 x 768 60, 70, 75, 85, 90, 100 1152 x 864 60, 70, 75, 85...
CN8000A User Manual Browsers The browsers and the versions shown in the table below have been tested to support CN8000A login for the users: Browser Version 8, 10, 11 Firefox 33, 45.2.0, 47.0 Safari* 9.1.3 Opera 38.0.2220.31 Chrome 45.0.2454.82, 51.0.270.103 Edge 25.10586.0.0 * See Mac Systems, page 180, for further information regarding Safari.
1. Introduction Components Front View 3 4 5 6 Component Description LAN Port The Cat 5e/6 cable that connects the CN8000A to the LAN plugs in here. Laptop USB Use the USB cable provide with this package to connect a laptop to this port for console access.
CN8000A User Manual Rear View Component Description Power Jack The power adapter cable plugs in here. PC/KVM Port The KVM cable (supplied with this package) that links the CN8000A to your server or KVM switch plugs in here. PS/2 - USB The CN8000A can be accessed via a local console as well Console Port as over the Net.
1. Introduction Custom Console Cable USB Keyboard USB Mouse Video PS/2 Keyboard PS/2 Mouse Note: You can use any combination of keyboard and mouse connections. For example, you can use a PS/2 keyboard with a USB mouse.
Page 28
CN8000A User Manual This Page Intentionally Left Blank...
Chapter 2 Hardware Setup 1. Important safety information regarding the placement of this device is provided on page 153. Please review it before proceeding. 2. Make sure that the power to any device that you connect to the installation has been turned off. You must unplug the power cords of any computers that have the Keyboard Power On function.
CN8000A User Manual 3. Screw the bracket into any convenient location on the rack. Note: Rack screws are not provided. Use screws that are appropriate for your rack. DIN Rail Mounting To mount the CN8000A on a DIN rail: 1. Screw the mounting bracket to the back of the CN8000A as described in steps 1 and 2 of the wall mounting procedure.
2. Hardware Setup Installation To install the CN8000A, refer to the installation diagrams on the next two pages (the numbers correspond to the numbers of the steps), and do the following: 1. Use the Custom Console Cable provided with this package to connect the CN8000A’s PS/2-USB Console Port, to the local console keyboard, monitor and mouse.
Page 32
CN8000A User Manual 4. (Optional) If you want to connect a serial console device or modem, plug its cable into the RS-232 Port. 5. (Optional) If you want to use a laptop as a console, use the Laptop USB Cable included with this package to connect the laptop’s USB port to the CN8000A’s Laptop USB Console Port.
Chapter 3 OSD Operation OSD Overview The On Screen Display (OSD) is a menu driven method to view and configure the CN8000A’s basic settings. To display the Main Screen, tap the OSD hotkey twice. The default hotkey is [Scroll Lock]. You can change the hotkey to the Ctrl key or the Alt key if you like (see User Preferences, page 74).
CN8000A User Manual When you log in to the OSD, the CN8000A’s main menu appears: OSD Navigation The OSD uses a menu that is navigated using they keyboard or mouse. To Logout of the OSD menu, click the X at the upper right corner of the OSD Window or press Esc.
Chapter 3. OSD Operation Device Information The Device Information page provides information about theCN8000A's status. Field Explanation Device Name Display the name given to the CN8000A. MAC Address: The CN8000A's MAC Address is displayed here. Firmware Version Indicates the CN8000A's current firmware version level. New versions of the CN8000A's firmware can be downloaded from our website as they become available (see Upgrade Main Firmware, page 38).
CN8000A User Manual Set IP Address The Set IP Address screen is used to specify the CN8000A's network environment. The CN8000A can have its IPv4 address assigned dynamically (DHCP), or it can be given a fixed IP address. For dynamic IP address assignment, select the Obtain IP address automatically (DHCP], radio button.
Chapter 3. OSD Operation it hasn’t obtained the address after one minute, it automatically reverts to its factory default IP address (192.168.0.60.) 2. If the CN8000A is on a network that uses DHCP to assign network addresses, and you need to ascertain its IP address, see IP Address Determination, page 161, for information.
Page 40
CN8000A User Manual This Page Intentionally Left Blank...
Chapter 4 Browser Login The CN8000A can be accessed either from an Internet browser, via Windows and Java application (AP) program, or by PPP modem dial-in. The next several chapters describe browser-based operations; AP access is discussed in Chapter 9; PPP modem login is discussed on page 168. Logging In To operate the CN8000A from an Internet browser, begin by logging in: 1.
Page 42
CN8000A User Manual 3. The CN8000A login page appears: 4. Provide a valid Username and Password (set by the CN8000A administrator), then click Login to continue. Note: 1. If you are the administrator, and are logging in for the first time, use the default Username: administrator;...
4. Browser Login Main Webpage Elements The Main page consists of two sections the Sidebar and Interactive Display Panel, as shown below. Each section of the web browser is explained in detail in Chapter 5, Administration. Sidebar The Sidebar to the left provides a tree view menu of links to the Basic Settings, Advanced Settings, and Preferences, that relate to the various options.
CN8000A User Manual Sidebar Submenu Sidebar Menu Description User Management- Create, Manage and set Permissions for User Accounts. Basic Settings Session- View and End current CN8000A user sessions. Maintenance- Perform Backups, Restores, and Firmware upgrades. Device Information- View the CN8000A’s system information. Network- Manage network settings.
4. Browser Login Viewer You can connect to the remote server by clicking the Viewer icon from the lower section of the sidebar. After clicking the Viewer icon: If you are logged in with a browser other than Windows Internet Explorer, a Java Applet Viewer application will open your remote server session.
Page 46
CN8000A User Manual This Page Intentionally Left Blank...
Chapter 5 Administration Introduction Administration of the CN8000A using a web browser is divided into 3 sections: Basic Settings, Advanced Settings, and Preferences. Each section is listed on the sidebar with sub-menus that are used to configure the CN8000A’s operating environment. This chapter discusses each of them in turn. Note: 1.
CN8000A User Manual Basic Settings This section provides 3 sub-menus: User Management, Sessions, and Maintenance, used to manage user accounts and perform system maintenance on the CN8000A. User Management The User Management page is used to create and manage user profiles. Up to 64 user profiles can be established.
Page 49
5. Administration An explanation of the profile items is given in the table below: Item Explanation Username From 1 to16 characters are allowed depending on the Account Policy settings. See Account Policy, page 59. Password From 0 to16 characters are allowed depending on the Account Policy settings.
Page 50
CN8000A User Manual Permissions Click to place/remove a check mark next to an item to grant/withhold access to that aspect of the CN8000A’s operation. Windows Client: Checking Win Client allows a user to access the CN8000A via the Windows Client software. Java Client: Checking Java Client allows a user to access the CN8000A via the Java Client software.
5. Administration Sessions The Sessions page lets the administrator see at a glance all the users currently logged into the CN8000A, and provides information about each of their sessions. The meanings of the headings at the top of the page are fairly straightforward. Username refers to the account that the user logged in with.
CN8000A User Manual Maintenance The Maintenance page allows Administrators to upgrade the firmware, backup/restore the CN8000A’s settings and user information, and ping devices. Upgrade Main Firmware As new versions of the CN8000A firmware become available, they can be downloaded from our website. Check the website regularly to find the latest information and packages.
5. Administration 6. In the screen that comes up click Yes to confirm that you want to exit and reset the CN8000A. Note: You will need to wait a bit before logging back in. Backup The Backup section of the Backup/Restore page gives you the ability to back up the CN8000A’s configuration and user profile information.
Page 54
CN8000A User Manual To restore a previous backup, do the following: 1. If a password was set when the backup was made, key the same password that you used to save the backup file in the Password field. If a password wasn’t set, you can leave this field blank.
5. Administration Ping Host The Ping Host page allows you to ping the IP address of a device to see if it’s responding on the network. To ping a device, enter the IP address and click Ping.
CN8000A User Manual Advanced Settings This section provides 7 sub-menus: Device Information, Network, ANMS, Security, Console Management, Date/Time, and Customization, used to configure device settings for the CN8000A. Device Information The Device Information page is the first of the Advanced Settings pages, and provides information about the CN8000A's status.
5. Administration Network The Network page is used to specify the CN8000A's network environment. IP Installer The IP Installer is an external Windows-based utility for assigning IP addresses. Click one of the radio buttons to select Enabled, View Only, or Disable for the IP Installer utility.
CN8000A User Manual Service Ports If a firewall is being used, the Administrator can specify the port numbers that the firewall will allow (and set the firewall accordingly). If a port other than the default is set, users must specify the port number as part of the IP address when they login from a WinClient or Java Client AP program.
5. Administration IPv4 Settings The CN8000A can have its IPv4 address assigned dynamically at boot-up (DHCP), or it can be given a fixed IP address. For dynamic IP address assignment, select the Obtain IP address automatically [DHCP], radio button. (This is the default setting.) To specify a fixed IP address, select the Set IP address manually [Fixed IP], radio button and fill in the IP Address, Subnet Mask and Default Gateway.
CN8000A User Manual IPv6 Settings The CN8000A can have its IPv6 address assigned dynamically at boot-up (DHCP), or it can be given a fixed IP address. For dynamic IP address assignment, select the Obtain IPv6 address automatically [DHCP], radio button. (This is the default setting.) To specify a fixed IP address, select the Set IPv6 address manually [Fixed IP], radio button and fill in the IPv6 Address, Subnet Prefix Length and Default Gateway.
5. Administration DDNS DDNS maps the dynamic IP address assigned by a DHCP server to a host name. The CN8000A can update the DDNS server with its IP address whenever the IP address is changed. To enable the DDNS capability for the CN8000A, do the following: 1.
CN8000A User Manual ANMS - Event Destination The Advanced Network Management Settings Event Destination page allows you to set up login authentication and authorization management from external sources. It is divided into several sections, described in the sections that follow. SMTP Settings To have the CN8000A email reports from the SMTP server to you, do the following:...
5. Administration 4. Key in the email address (addresses) of where you want the SMTP reports sent to in the To field. Note: 1. If you are sending the report to more than one email address, separate the addresses with a semicolon. The total cannot exceed 256 Bytes.
CN8000A User Manual 1. Check Enable SNMP Agent. 2. Key in the Server IP address and Service Port number of the computer to be notified of SNMP trap events. The valid port range is 1-65535. Note: The following SNMP trap events are sent: System Power On, Login Failure, and System Reset.
5. Administration ANMS - Authentication The Advanced Network Management Settings Authentication page allows you to set up login authentication and authorization management from external sources. It is divided into several sections, which are described in the sections that follow. Disable Local Authentication Selecting this option will disable local login authentication on the CN8000A.
Page 66
CN8000A User Manual 6. On the RADIUS server, set the access rights for each user according to the information in the table, below: Character Meaning Grants the user administrator privileges, allowing the user to configure the system. Allows the user to access the system via the Windows Client program. Allows the user to access the system via the Java applet.
LDAPS server reply before it times out. Admin DN / Name Consult the LDAP / LDAPS administrator to ascertain the appropriate entry for this field. For example, the entry might look like this: cn=LDAPAdmin,ou=CN8000A,dc=aten,dc=com Password Key in the LDAP administrator’s password.
CN8000A User Manual Item Action Search DN Set the distinguished name of the search base. This is the domain name where the search starts for user names. Note: If Enable Authorization is not checked, this field must include the entry where the CN8000A Admin Group is created. Consult the LDAP / LDAPS administrator to ascertain the appropriate value.
5. Administration Security The Security page controls access to the CN8000A. Login Failures For increased security, the Login Failures section allows administrators to set policies governing what happens when a user fails to log in successfully. To set the Login Failures policies, check the Enable checkbox (the default is for Login Failures to be enabled).
CN8000A User Manual Filter If any filters have been configured, they appear in the IP Filter and/or MAC Filter list boxes. IP and MAC Filters control access to the CN8000A based on the IP and/or MAC addresses of the computers attempting to connect. A maximum of 100 IP filters and 100 MAC filters are allowed.
5. Administration Adding Filters To add an IP filter, do the following: 1. Click Add. A dialog box similar to the one below appears: 2. Key the address you want to filter in the From: field. To filter a single IP address, key the same address in the To: field. To filter a continuous range of addresses, key in the end number of the range in the To: field.
Page 72
CN8000A User Manual Modifying Filters To modify a filter, select it in the IP Filter or MAC Filter list box and click Modify. The Modify dialog box is similar to the Add dialog box. When it comes up, simply delete the old address(es) and replace it with the new one(s). Deleting Filters To delete a filter, select it in the IP Filter or MAC Filter list box and click Delete.
5. Administration Account Policy In the Account Policy section, system administrators can set policies governing usernames and passwords. The meanings of the Account Policy entries are explained in the table below: Entry Explanation Minimum Username Length Sets the minimum number of characters required for a username.
CN8000A User Manual Encryption These flexible encryption alternatives for keyboard/mouse, video, and virtual media data let you choose any combination of DES; 3DES; AES; RC4; or a Random cycle of any or all of them. Enabling encryption will affect system performance – no encryption offers the best performance;...
5. Administration Working Mode Use this section to set the working mode parameters. Enable ICMP so that the CN8000A can be pinged. If it is not enabled, the device cannot be pinged. The default is Enabled. Enable Multiuser Operation to permit more than one user to log into the CN8000A at the same time.
For enhanced security, the Private Certificate section allows you to use your own private encryption key and signed certificate, rather than the default ATEN certificate. There are two methods for establishing your private certificate: generating a self-signed certificate;...
5. Administration Certificate Signing Request The Certificate Signing Request (CSR) section provides an automated way of obtaining and installing a CA signed SSL server certificate. To perform this operation do the following: 1. Click Create CSR. The following dialog box appears: 2.
Page 78
CN8000A User Manual 3. After filling in the form (all fields are required), click Create. A self-signed certificate based on the information you just provided is now stored on the CN8000A. 4. Click Get CSR, and save the certificate file (csr.cer) to a convenient location on your computer This is the file that you give to the third party CA to apply for their signed SSL certificate.
5. Administration Console Management This section discusses methods of opening the CN8000A console via OOBC or serial connection. OOBC In case the CN8000A cannot be accessed with the usual LAN-based methods, it can be accessed via the switch’s modem port. To enable support for PPP (modem) operation, click to put a checkmark in the Enable Out of Band Access checkbox.
Page 80
CN8000A User Manual Dial Out For the dial out function, you must establish an account with an Internet Service Provider, and use a modem to dial up to your ISP account. An explanation of the Enable Dial Out items is given in the table below: ISP Settings: Specify the telephone number, account name (username), and password that you use to connect to your ISP.
Page 81
5. Administration PPP online time specifies how long you want the ISP connection to last before terminating the session and hanging up the modem. A setting of zero means it is always on line. Emergency Dial Out: If the CN8000A gets disconnected from the network, or the network goes down, this function puts the switch on line via the ISP dial up connection.
CN8000A User Manual Serial Console To configure the CN8000A to interact with the connected serial device, you need to set its parameters to match the parameters of the device in the Port Property Settings. Select the values that match the ones used by the connected serial console device.
Page 83
5. Administration match the flow control setting of the serial console device. Default is None. Note: None is only supported for baud rates of 9600 and lower. For baud rates greater than 9600, you must choose Hardware or XON/XOFF. Port Alert Properties: You can specify up to 10 types of events (e.g., Power On).
CN8000A User Manual Date/Time The Date/Time dialog page sets the CN8000A time parameters: Set the parameters according to the information below. Time Zone To establish the time zone that the CN8000A is located in, drop down the Time Zone list and choose the city that most closely corresponds to where it is at.
5. Administration Date Select the month from the drop-down list box. Click < or > to move backward or forward by one year increments. In the calendar, click on the day. Time To set the time, key in the numbers using the 24 hour HH:MM:SS format. Click Set to save your settings.
CN8000A User Manual Customization Use this section to edit the device settings. If Force All to Grayscale is enabled, the remote displays of all devices connected to the CN8000A are changed to grayscale. This can speed up I/ O transfer in low bandwidth situations. If Enable Client AP Device List is enabled, the switch appears in the Server List when using the WinClient or Java Client AP (see The WinClient Viewer, page 79, and The JavaClient Viewer, page 113).
Page 87
5. Administration Multiuser Mode: Defines how a port is to be accessed when multiple users have logged on, as follows: Exclusive: The first user to switch to the port has exclusive control over the port. No other users can view the port. Occupy: The first user to switch to the port has control over the port.
CN8000A User Manual Preferences The following sections describe the administration utilities covered in this section, including the User Preferences, Log, Remote Console and Download pages. You can find the links to these screens under Preferences in the left panel menu. User Preferences The User Preferences screen allows the user to set the device password, as well as device parameters including the Language, OSD Hotkey, Logout Timeout...
5. Administration Launch viewer after login: Checking this box will automatically launch the Viewer application after a user logs in to the CN8000A. Viewer: Choose the viewer you would like to use when viewing the remote server’s display. This is set to Auto Detect by default, which opens the WinClient for Windows systems.
CN8000A User Manual Remote Console This section provides a preview screen that shows a snapshot of the server’s display, as follows: Clicking Refresh updates the snapshot of the remote display. Exit Macro The Exit Macro panel contains a drop-down list box of user created System macros: Select the Exit Macro you would like to use and click Save.
Windows and/or Java application (AP) programs, with the latest firmware version. 2. Refer to ATEN’s PN0108 User Manual (or a compatible PON device’s manual) for details on editing the power management configuration screens.
Page 92
CN8000A User Manual This Page Intentionally Left Blank...
Chapter 6 The WinClient Viewer Starting Up The WinClient Viewer is available by logging in using Microsoft's Internet Explorer, selecting Auto as the Default Viewer (under Preferences - User Preferences) and clicking launch from the sidebar, at which time the CN8000A WinClient application will install on your computer.
CN8000A User Manual A second or two after you click the Viewer icon, the remote server’s display appears as a window on your desktop: Navigation You can work on the remote computer via the screen display, just as if it were your local system.
6. The WinClient Viewer The WinClient Control Panel The WinClient control panel is hidden at the upper center of the screen. It becomes visible when you move the mouse pointer over it: Note: 1. The above image shows the complete Control Panel. The icons that appear can be customized.
CN8000A User Manual Control Panel Functions The Control Panel functions are described in the table below. Note: Clicking the T button at the top right of the windows that appear for the control panel functions brings up a slider bar to adjust the transparency of the dialog box.
Page 97
6. The WinClient Viewer Icon Function Click to send a Ctrl+Alt+Del signal to the remote system. Click to toggle the remote display between color and grayscale. Click to bring up the Virtual Media dialog box. The icon changes when a virtual media device is started on the port (see Virtual Media, page 99, for details).
Page 98
CN8000A User Manual Icon Function Click to exit the remote view and go back to the web browser Main Page. Exit These icons show the Num Lock, Caps Lock, and Scroll Lock status of the remote computer. When the lock state is On, the icon is highlighted in blue. When the lock state is Off, the icon is not highlighted.
6. The WinClient Viewer Macros The Macros icon provides access to three functions found in the Macros dialog box: Hotkeys, User Macros, and System Macros. Each of these functions is described in the following sections. Hotkeys Various actions, corresponding to clicking the Control Panel icons, can be accomplished directly from the keyboard with hotkeys.
Page 100
CN8000A User Manual An explanation of the Hotkey actions is given in the table below: Action Explanation Exit remote location Exits the remote view and goes back to the web browser Main Page. This is equivalent to clicking the Exit icon on the Control Panel.
6. The WinClient Viewer User Macros User Macros are used to perform specific actions on the remote server. To create the macro, do the following: 1. Select the User Macros radio button, then click Add. 2. In the dialog box that comes up, replace “NewMacro” with a name of your choice for the macro:...
Page 102
CN8000A User Manual 3. Click Record. The dialog box disappears, and a small panel appears at the top left of the screen: 4. Press the keys for the macro. To pause macro recording, click Pause. To resume, click Record again. Clicking Show brings up a dialog box that lists each keystroke that you make, together with the amount of time each one takes: Clicking Cancel cancels all keystrokes.
6. The WinClient Viewer 5. If you haven’t brought up the Show dialog, click Done when you have finished recording your macro. You return to the Macros dialog box with the macro keys that you pressed displayed in the Macro column: 6.
Page 104
CN8000A User Manual If you choose Play With Time Control, the macro waits for the amount of time between key presses that you took when you created it. Click on the arrow next to Play to make your choice. If you click Play without opening the list, the macro runs with the default choice.
6. The WinClient Viewer Search Search, at the bottom of the dialog box, lets you filter the list of macros that appear in the large upper panel for you to play or edit. Click a radio button to choose whether you want to search by name or by key; key in a string for the search;...
Page 106
CN8000A User Manual 3. Click Record. The dialog box disappears, and a small panel appears at the top left of the screen: 4. Press the keys for the macro. To pause macro recording, click Pause. To resume, click Record again. Clicking Show brings up a dialog box that lists each keystroke that you make, together with the amount of time each one takes (see page 88).
Page 107
6. The WinClient Viewer 7. Repeat the procedure for any other macros you wish to create. Once the system macros have been created, you can choose to run any one of them upon logging out of the CN8000A. System macros will only execute when the last user has logged out of the viewer (see Exit Macro, page 76, for details).
CN8000A User Manual Video Settings The Video Settings dialog box allows you to adjust the placement and picture quality of the remote screen display on your monitor. Click Advanced to view all the video settings. The meanings of the adjustment options are given in the table below: Option Usage Screen Position...
Page 109
6. The WinClient Viewer Option Usage Drag the slider bars to adjust the RGB (Red, Green, Blue) values. When an RGB value is increased, the RGB component of the image is correspondingly increased. If you enable Set to Grayscale, the remote video display is changed to grayscale.
CN8000A User Manual Gamma Adjustment If it is necessary to correct the gamma level for the remote video display, use the Gamma function of the Video Adjustment dialog box. For greater control, clicking the Advanced button brings up the following dialog box: There are ten preset and four user-defined levels to choose from.
6. The WinClient Viewer The Message Board To alleviate the possibility of access conflicts resulting from multiple user logins, the CN8000A provides a message board that allows users to communicate with each other: The Button Bar The buttons on the Button Bar are toggles. Their actions are described in the table below: Button Action...
CN8000A User Manual Message Display Panel Messages that users post to the board - as well as system messages - display in this panel. If you disable Chat, however, messages that get posted to the board won't appear. Compose Panel Key in the messages that you want to post to the board in this panel.
6. The WinClient Viewer Virtual Media The Virtual Media feature allows a drive, folder, image file, or removable disk on a local client computer to appear and act as if it were installed on the remote server. Virtual Media also supports a smart card reader function that allows a reader plugged into a local client computer to appear as if it were plugged into the remote server.
Page 114
CN8000A User Manual Depending on your selection, additional dialog boxes appear enabling you to select the drive, file, folder, or removable disk you desire. See Virtual Media Support, page 183 for details about mounting these media types. 3. To add additional media sources, click Add, and select up to three media sources.
Page 115
6. The WinClient Viewer 3. To remove an entry from the list, select it and click Remove. 4. After you have made your media source selections, click Mount. The dialog box closes. The virtual media devices that you have selected are redirected to the remote system, where they show up as drives, files and folders on the remote file system.
CN8000A User Manual Smart Card Reader The smart card reader function allows a reader plugged into a local client computer’s USB port to be redirected, and appear as if it were plugged into the remote server. One purpose of smart cards (Common Access Cards, for example), is to allow authentication to the remote server from the local client.
6. The WinClient Viewer Zoom The Zoom icon controls the zoom factor for the remote view window. Settings are as follows: Setting Description 100% Sizes and displays the remote view window at 100%. Sizes and displays the remote view window at 75%. Sizes and displays the remote view window at 50%.
CN8000A User Manual The On-Screen Keyboard The CN8000A supports an on-screen keyboard, available with a PC or Sun layout and in multiple languages, with all the standard keys for each supported language. Click this icon to pop up the on-screen keyboard: One of the major advantages of the on-screen keyboard is that if the keyboard languages of the remote and local systems aren’t the same, you don’t have to change the configuration settings for either system.
Page 119
6. The WinClient Viewer To display/hide the expanded keyboard keys, click the arrow to the right of the language list arrow.
CN8000A User Manual Mouse Pointer Type The CN8000A offers a number of mouse pointer options when working in the remote display. Click this icon to select the type that you would like to work with: Note: The icon on the Control Panel changes to match your choice. Mouse DynaSync Mode Clicking this icon selects whether synchronization of the local and remote mouse pointers is accomplished either automatically or...
6. The WinClient Viewer Mac Considerations For Mac systems, there is a second DynaSync setting to choose from. If the default synchronization result is not satisfactory, you can try the Automatic For Mac 2 setting. To select Mac 2, right click in the text area →...
CN8000A User Manual Customize Control Panel Clicking the Customize Control Panel icon brings up a dialog box that allows you to configure the items that appear on the Control Panel, as well as its graphical settings: The dialog box is organized into six main sections as described in the table, below: Item Description...
Page 123
6. The WinClient Viewer Item Description Screen Options If Full Screen Mode is enabled, the remote display fills the entire screen. If Full Screen Mode is not enabled, the remote display appears as a window on the local desktop. If the remote screen is larger than what is able to fit in the window, scrollbars will appear.
CN8000A User Manual Power Management Clicking the Power Management icon brings up the power manager window, allowing you to log in and configure devices connected to a PN0108 Power Over the NET™ device: For information on configuring Power Over the NET™ devices, see the PN0108’s user manual.
6. The WinClient Viewer Admin Utility Clicking the Admin Utility icon brings up a window that allows you to configure the CN8000A via Viewer based GUI with the web browser administrative functionalities: The sidebar menu items available on this page are based upon the user’s permissions.
Page 126
CN8000A User Manual This Page Intentionally Left Blank...
Chapter 7 The JavaClient Viewer Introduction The JavaClient Viewer makes the CN8000A accessible to all platforms that have the Java Runtime Environment (JRE) installed. (See System Requirements, page 6, for the required JRE version.) The JRE is available for free download from the Java web site (http://java.com). To run the JavaClient Viewer, after you log in (see Logging In, page 27), Click the Viewer link on the lower Sidebar panel, shown below.
CN8000A User Manual A second or two after you click the Viewer link, the remote server’s display appears as a window on your desktop: Navigation You can work on the remote system via the screen display on your monitor just as if it were your local system.
7. The JavaClient Viewer The JavaClient Control Panel The JavaClient control panel is hidden at the top center of the screen. It becomes visible when you move the mouse pointer into that area: Note: 1. The above image shows the complete Control Panel. The icons that appear can be customized.
CN8000A User Manual Control Panel Functions The Control Panel functions are described in the table below: Icon Function This is a toggle. Click to make the Control Panel persistent – i.e., it always displays on top of other screen elements. Click again to have it display normally.
Page 131
7. The JavaClient Viewer Icon Function Click to zoom the remote display window. Note: This feature is only available in windowed mode (Full Screen Mode is off). See Zoom, page 123, for details. Click to bring up the on-screen keyboard (see The On-Screen Keyboard, page 124).
CN8000A User Manual Macros The Macros icon provides access to three functions found in the Macros dialog box: Hotkeys, User Macros, and System Macros. Each of these functions is described in the following sections. Hotkeys Various actions related to manipulating the remote server can be accomplished with hotkeys.
7. The JavaClient Viewer User Macros User Macros are used to perform specific actions on the remote server. To create the macro, do the following: 1. Select the User Macros radio button, then click Add. User Macro operation is the same under the JavaClient as it is under the WinClient.
CN8000A User Manual Search Search allows you to find previously created macros and have them listed in the large upper panel for you to play or edit. The Search operation is the same under the JavaClient as it is under the WinClient.
7. The JavaClient Viewer Message Board The CN8000A supports multiple user logins, which can possibly give rise to access conflicts. To alleviate this problem, a message board feature, similar to an Internet chat program, allows users to communicate with each other: The buttons on the Button Bar are toggles.
Page 136
CN8000A User Manual The names of all the logged in users appear in the User List panel. Select the users that you want to post to before sending your message. Users that aren’t selected won’t see the message. To Hide/Unhide the User List panel, click on the arrows in the panel separator.
7. The JavaClient Viewer Virtual Media The Virtual Media feature allows a folder or image file on a local client computer to appear and act as if it were installed on the remote server. Virtual Media also supports a smart card reader function that allows a reader plugged into a local client computer to appear as if it were plugged into the remote server.
CN8000A User Manual The On-Screen Keyboard The CN8000A supports an on-screen keyboard, available in multiple languages, with all the standard keys for each supported language. Click this icon to pop up the on-screen keyboard: On-Screen Keyboard operation is the same under the JavaClient as it is under the WinClient.
7. The JavaClient Viewer Mouse DynaSync Mode Clicking this icon selects whether synchronization of the local and remote mouse pointers is accomplished either automatically or manually. DynaSync operation is the same under the JavaClient as it is under the WinClient. See Mouse DynaSync Mode, page 106, for details. Control Panel Configuration Clicking the Control Panel icon brings up a dialog box that allows you to configure the items that appear on the Control Panel, as well as its...
Page 140
CN8000A User Manual This Page Intentionally Left Blank...
Chapter 8 The Log Server The Log Server is a Windows-based administrative utility that records all the events that take place on selected CN8000A units and writes them to a searchable database. This chapter describes how to install and configure the Log Server.
CN8000A User Manual Starting Up To bring up the Log Server, either double click the program icon, or key in the full path to the program on the command line. The first time you run it, a screen similar to the one below appears: Note: 1.
8. The Log Server The Menu Bar The Menu bar consists of four items: Configure Events Options Help These are discussed in the sections that follow. Note: If the Menu Bar appears to be disabled, click in the CN8000A List window to enable it.
CN8000A User Manual A description of the fields is given in the table, below: Field Explanation Address This can either be the IP address of the CN8000A or its DNS name (if the network administrator has assigned it a DNS name). Key in the value specified for the CN8000A in the ANMS settings (see ANMS - Event Destination, page 48).
8. The Log Server A description of the items is given in the table below: Item Explanation New search This is one of three radio buttons that define the scope of the search. If it is selected, the search is performed on all the events in the database for the selected CN8000A.
CN8000A User Manual Options Network Retry allows you to set the number of seconds that the Log Server should wait before attempting to connect if the previous attempt to connect failed. When you click this item, a dialog box, similar to the one below appears: Key in the number of seconds, then click OK to finish.
8. The Log Server The Log Server Main Screen Overview The Log Server Main Screen is divided into two main panels. The upper (List) panel lists the CN8000A units that have been selected for the Log Server to track (see Configure, page 129). The lower (Event) panel displays the log events for the currently selected CN8000A (the highlighted one - if there are more than one).
CN8000A User Manual The List Panel The List panel contains six fields: Field Explanation Recording Determines whether the Log Server records log events for this CN8000A or not. If the Recording check box is checked, the field displays Recording, and log events are recorded. If the Recording check box is not checked, the field displays Paused, and log events are not recorded.
Chapter 9 LDAP Server Configuration Introduction The CN8000A allows log in authentication and authorization through external programs. This chapter describes how to configure Active Directory and OpenLDAP for CN8000A authentication and authorization. To allow authentication and authorization for the CN8000A via LDAP or LDAPS, the Active Directory’s LDAP Schema must be extended so that an extended attribute name for the CN8000A –...
CN8000A User Manual Install the Active Directory Schema Snap-in To install the Active Directory Schema Snap-in, do the following: 1. Open a Command Prompt. 2. Key in: regsvr32 schmmgmt.dll to register schmmgmt.dll on your computer. 3. Open the Start menu; click Run; key in: mmc /a; click OK. 4.
9. LDAP Server Configuration Extend and Update the Active Directory Schema To extend and update the Active Directory Schema, you must do the following 3 procedures: 1) create a new attribute; 2) extend the object class with the new attribute; and 3) edit the Active Directory users with the extended schema. The CN8000A supports one type of Active Directory users: shadow user access rights –...
CN8000A User Manual Extending the Object Class With the New Attribute To extend the object class with the new attribute, do the following: → → 1. Open the Control Panel Administrative Tools Active Directory Schema. 2. In the left panel of the screen that comes up, select Classes. 3.
Page 153
9. LDAP Server Configuration 4. Select Properties; the person Properties dialog box comes up with the General page displayed. Click the Attributes tab. 5. On the Attributes page, click Add:...
To edit Active Directory Users, do the following: 1. Run ADSI Edit. (Installed as part of the Support Tools.) 2. Open domain, and navigate to the cn=users dc=aten dc=com node. 3. Locate the user you wish to edit. (Our example uses jason.)
Page 155
9. LDAP Server Configuration 4. Right-click on the user’s name and select properties. 5. On the Attribute Editor page of the dialog box that appears, select permission from the list...
Page 156
CN8000A User Manual 6. Click Edit to bring up the String Attribute Editor: 7. In the String Attribute Editor, key in the values shown in the screenshot, below: Note: Where user represents the Username of a CN8000A user whose permissions reflect the permissions you want Jason to have.
9. LDAP Server Configuration 8. Click OK. When you return to the Attribute Editor page, the permission entry now reflects the new permissions: a) Click Apply to save the change and complete the procedure. b) Repeat the Editing Active Directory Users procedure for any other users you wish to add.
Page 158
CN8000A User Manual When the Select Components dialog box appears, select install BDB-tools and install OpenLDAP-slapd as NT service, as shown in the diagram, below:...
Specify the server suffix. All entries in the directory will have this suffix, which represents the root of the directory tree. For example, with suffix dc=aten,dc=com, the fully qualified name of all entries in the database will end with dc=aten,dc=com.
CN8000A User Manual Starting the OpenLDAP Server To start the OpenLDAP Server, run slapd (the OpenLDAP Server executable file) from the command line. slapd supports a number of command line options, the most important option is the d switch that triggers debug information.
9. LDAP Server Configuration Customizing the OpenLDAP Schema The schema that slapd uses may be extended to support additional syntaxes, matching rules, attribute types, and object classes. In the case of the CN8000A, the CN8000AUser class is extended to define a new schema.
CN8000A User Manual LDAP DIT Design and LDIF File LDAP Data Structure An LDAP Directory stores information in a tree structure known as the Directory Information Tree (DIT). The nodes in the tree are directory entries, and each entry contains information in attribute-value form. An example of the LDAP directory tree for the CN8000A is shown in the figure, below: (Continues on next page.)
9. LDAP Server Configuration (Continued from previous page.) DIT Creation The LDAP Data Interchange Format (LDIF) is used to represent LDAP entries in a simple text format (please refer to RFC 2849). The figure below illustrates an LDIF file that creates the DIT for the CN8000A directory tree (shown in the figure, above).
Page 164
CN8000A User Manual The following figure illustrates an LDIF file that defines the OpenLDAP group for the CN8000A. (Continues on next page.)
2. Add the new schema to the slapd.conf file, as shown in the figure, below: 3. Restart the LDAP server. 4. Write the LDIF file and create the database entries in init.ldif with the ldapadd command, as shown in the following example: ldapadd -f init.ldif -x -D "cn=Manager,dc=aten,dc=com" -w secret...
Page 166
CN8000A User Manual This Page Intentionally Left Blank...
Appendix Safety Instructions General This product is for indoor use only. Read all of these instructions. Save them for future reference. Follow all warnings and instructions marked on the device. Do not place the device on any unstable surface (cart, stand, table, etc.). If the device falls, serious damage will result.
Page 168
CN8000A User Manual extension cord ampere rating. Make sure that the total of all products plugged into the wall outlet does not exceed 15 amperes. To help protect your system from sudden, transient increases and decreases in electrical power, use a surge suppressor, line conditioner, or un-interruptible power supply (UPS).
Appendix Rack Mounting Before working on the rack, make sure that the stabilizers are secured to the rack, extended to the floor, and that the full weight of the rack rests on the floor. Install front and side stabilizers on a single rack or front stabilizers for joined multiple racks before working on the rack.
CN8000A User Manual Consignes de sécurité Général Ce produit est destiné exclusivement à une utilisation à l’intérieur. Veuillez lire la totalité de ces instructions. Conservez-les afin de pouvoir vous y référer ultérieurement. Respectez l’ensemble des avertissements et instructions inscrits sur l’appareil.
Page 171
Appendix L’équipement doit être installé à proximité de la prise murale et le dispositif de déconnexion (prise de courant femelle) doit être facile d’accès. La prise murale doit être installée à proximité de l’équipement et doit être facile d’accès. Veillez à ce que rien ne repose sur le cordon d’alimentation ou les câbles. Acheminez le cordon d’alimentation et les câbles de sorte que personne ne puisse marcher ou trébucher dessus.
Page 172
CN8000A User Manual L’unité a été exposée à la pluie ou à l’eau. L’unité est tombée ou le boîtier a été endommagé. Les performances de l’unité sont visiblement altérées, ce qui indique la nécessité d’une réparation. L’unité ne fonctionne pas normalement bien que les instructions d’utilisation soient respectées.
Appendix Montage sur bâti Avant de travailler sur le bâti, assurez-vous que les stabilisateurs sont bien fixées sur le bâti, qu’ils sont étendus au sol et que tout le poids du bâti repose sur le sol. Installez les stabilisateurs avant et latéraux sur un même bâti ou bien les stabilisateurs avant si plusieurs bâtis sont réunis, avant de travailler sur le bâti.
CN8000A User Manual Technical Support International For online technical support – including troubleshooting, documentation, and software updates: http://eservice.aten.com For telephone support, see Telephone Support, page iii. North America Email Support support@aten-usa.com Online Troubleshooting http://eservice.aten.com Technical Documentation Support Software Updates Telephone Support...
IP Installer The IP Installer utility provides a simple method to ascertain and configure IP related settings for ATEN and Altusen network enabled devices. The utility can be obtained from the Download area of our website. Look under Download - Driver & Software, and select the model of your switch. After downloading the utility to your client computer, do the following: 1.
The way that the IP Installer works is that it searches and lists all compatible ATEN devices on your network. You can select a model from the Device List and set it’s IP Address settings using the options listed below, then click Set IP to implement the change on the device.
Appendix After you have made your changes, click Set IP to set the IP address for the device you have selected. Note: The screen will freeze for a moment or two until the utility has finished setting the IP. About Clicking the About button brings up a dialog box with information about the product –...
CN8000A User Manual IPv6 At present, the CN8000A supports two IPv6 address protocols: Link Local IPv6 Address, and IPv6 Stateless Autoconfiguration Link Local IPv6 Address At power on, the CN8000A is automatically configured with a Link Local IPv6 Address (for example, fe80::210:74ff:fe61:1ef). To find out what the Link Local IPv6 Address is, log in with the CN8000A’s IPv4 address and click the Basic Settings icon.
Appendix IPv6 Stateless Autoconfiguration If the CN8000A’s network environment contains a device (such as a router) that supports the IPv6 Stateless Autoconfiguration function, the CN8000A can obtain its prefix information from that device in order to generate its IPv6 address. For example, 2001::74ff:fe6e:59. As above, the address is displayed at the bottom of the Basic Settings page.
CN8000A User Manual Port Forwarding For devices located behind a router, port forwarding allows the router to pass data coming in over a specific port to a specific device. By setting the port forwarding parameters, you tell the router which device to send the data coming in over a particular port to.
Appendix Keyboard Emulation The PC compatible (101/104 key) keyboard can emulate the functions of the Sun and Mac keyboards. The emulation mappings are listed in the table below. PC Keyboard Sun Keyboard PC Keyboard Mac Keyboard [Ctrl] [T] Stop [Shift] Shift [Ctrl] [F2] Again...
CN8000A User Manual PPP Modem Operation Basic Setup In addition to the browser and AP methods, the CN8000A can also be accessed through its RS-232 port using a PPP dial-in connection, as follows: 1. Set up your hardware configuration to match the diagram, below: Serial Modem Cable Serial Modem Cable Phone Line...
Appendix Connection Setup Example (Windows XP) To set up a dial-in connection to the CN8000A under Windows XP, do the following: → → 1. From the Start menu, select Control Panel Network Connections Create a New Connection. 2. When the Welcome to the New Connection Wizard dialog box appears, click Next to move on.
CN8000A User Manual Trusted Certificates Overview When you try to log in to the device from your browser, a Security Alert message appears to inform you that the device’s certificate is not trusted, and asks if you want to proceed. The certificate can be trusted, but the alert is triggered because the certificate’s name is not found on Microsoft’s list of Trusted Authorities.
Appendix Installing the Certificate To install the certificate, do the following: 9. In the Security Alert dialog box, click View Certificate. The Certificate Information dialog box appears: Note: There is a red and white X logo over the certificate to indicate that it is not trusted.
CN8000A User Manual 13. Next, click Finish to complete the installation; then click OK to close the dialog box. Certificate Trusted The certificate is now trusted: When you click View Certificate, you can see that the red and white X logo is no longer present –...
Appendix Mismatch Considerations If the site name or IP address used for generating the certificate no longer matches the current address of the CN8000A a mismatch warning occurs: You can click Yes to go on, or you can disable mismatch checking. To disable mismatch checking, do the following: 1.
[Enter] until all the parameters have been keyed in). 2. If there are spaces in the input, surround the entry in quotes (e.g., “ATEN International”). To avoid having to input information during key generation the following additional parameters can be used: /C /ST /L /O /OU /CN /emailAddress.
Appendix Troubleshooting General Operation Problem Resolution Erratic operation The CN8000A needs to be started before the KVM switch 1. If the CN8000A is connected to a KVM switch, make sure to power it on before powering on the switch. 2. If the KVM switch was started before the CN8000A, reset or restart the KVM switch.
Page 190
CN8000A User Manual Problem Resolution When the remote server is If the remote server is connected with a PS/2 cable, log running Fedora the mouse into the CN8000A with a browser; open a viewer; on the pointer on the remote server control panel set Mouse DynaSync to Manual.
Appendix Windows Problem Resolution When I log in, the browser 1. The certificate’s name is not found on Microsoft’s list of generates a CA Root Trusted Authorities. The certificate can be trusted. certificate is not trusted, See Trusted Certificates, page 170, for details. or a Certificate Error 2.
CN8000A User Manual Java For mouse synchronization problems, see Macros, page 118, Mouse DynaSync Mode, page 125, and Sun / Linux, page 182. For other problems, see the table below: Problem Resolution Java Applet won't connect to the 1. Java 6 Update 3 or higher must be installed on CN8000A your computer.
Appendix Sun Systems Problem Resolution Video display problems with The display resolution should be set to 1024 x 768: HDB15 interface systems (e.g., Under Text Mode: Sun Blade 1000 servers). 1. Go to OK mode and issue the following com- mands: setenv output-device screen:r1024x768x60 reset-all...
CN8000A User Manual Mac Systems Problem Resolution The local and remote There are two USB I/O settings for the Mac: Mac 1, and mouse pointers do not Mac 2 (see Date/Time, page 70). In general, Mac 1 sync. works with older operating system versions, whereas Mac 2 works with the newer ones.
Appendix Additional Mouse Synchronization Procedures If the mouse synchronization procedures mentioned in the manual fail to resolve mouse pointer problems for particular computers, try the following: Windows: Note: In order for the local and remote mice to synchronize, you must use the generic mouse driver supplied with the MS operating system.
CN8000A User Manual Sun / Linux Open a terminal session and issue the following command: Sun: xset m 1 Linux: xset m 0 xset m 1 (If one doesn’t help, try the other.)
Appendix Supported KVM Switches The KVM switches that can be used in a cascaded installation are as follows: ACS1208A ACS1216A CS1308 CS1316 CS1708A CS1716A CS1754 CS1758 CS228 CS428 Note: 1. Some of the CN8000A’s features may not be supported, depending on the functionality of the cascaded KVM switch.
CN8000A User Manual Administrator Login Failure If you are unable to perform an Administrator login (because the Username and Password information has become corrupted, or you have forgotten it, for example), there is a procedure you can use to clear the login information. To clear the login information do the following: 1.
Appendix Specifications Function CN8000A Connectors Console Ports 1 x SPHD-18 Male (Yellow) KVM (Computer) Ports / 1 x SPHD-18 Female (Yellow) Virtual Media Laptop USB Console 1 x USB Mini Type B Female (Black) (LUC) 1 x DB-9 Male (Black) Modem 1 x DB-9 Male (Black) LAN Ports...
CN8000A User Manual About SPHD Connectors This product uses SPHD connectors for its KVM and/or Console ports. We have specifically modified the shape of these connectors so that only KVM cables that we have designed to work with this product can be connected.
ATEN will provide a repair service, without charge, during the Warranty Period. If a product is detective, ATEN will, at its discretion, have the option to (1) repair said product with new or repaired components, or (2) replace the entire product with an identical product or with a similar product which fulfills the same function as the defective product.
Page 202
CN8000A User Manual This Page Intentionally Left Blank...