Cyclades User's Guide User Manual

Cyclades alterpath kvm/net user's guide

Table of Contents

Quick Links

Download this manual

AlterPath KVM/net Installation,

Administration, and User's Guide

Software Version 2.1.1

Cyclades Corporation

3541 Gateway Boulevard

Fremont, CA 94538 USA

1.888.CYCLADES (292.5233)

1.510.771.6100

1.510.771.6200 (fax)

http://www.cyclades.com

Release Date: May 2006

Part Number: PAC0368

Table of Contents

Chapters

Table of Contents

Need help?

Do you have a question about the User's Guide and is the answer not in the manual?

Questions and answers

Summary of Contents for Cyclades User's Guide

Page 1 AlterPath KVM/net Installation, Administration, and User’s Guide Software Version 2.1.1 Cyclades Corporation 3541 Gateway Boulevard Fremont, CA 94538 USA 1.888.CYCLADES (292.5233) 1.510.771.6100 1.510.771.6200 (fax) http://www.cyclades.com Release Date: May 2006 Part Number: PAC0368...
Page 2 ©2006 Cyclades Corporation Information in this document is subject to change without notice. The following are registered or registration-pending trademarks of Cyclades Corporation in the United States and other countries: Cyclades and AlterPath. All trademarks, trade names, logos and service marks referenced herein, even when not specifically...
Page 3: Table Of Contents
Types of Users ... 14 Simultaneous KVM/net Logins ... 15 Simultaneous Server Connections ... 16 Administration Options ... 17 Cyclades Web Manager ... 18 Prerequisites for Using the Web Manager ... 19 TCP Ports ... 20 Cascaded Devices ... 21 Accessing Ports on Cascaded KVM Devices ...
Page 4 Decision 1: Check User’s KVM Port Permissions ... 26 Decision 2: Check Group’s KVM Port Permissions ... 27 Decision 3: Check Generic User’s KVM Port Permissions ... 27 Decision 4: Check User’s Default Permissions ... 28 Decision 5: Check Group’s Default Permissions ... 28 Decision 6: Check Generic User’s Default Permissions ...
Page 5 Considerations When Choosing Whether to Enable DHCP ... 57 KVM Terminator Usage and Types ... 58 Activity LEDs on the Terminator ... 58 KVM Expander ... 59 KVM Expander Features ... 59 KVM Expander Models and Components ... 60 Ports on the KVM Expander ... 62 LEDs on the KVM Expander ...
Page 6 Chapter 3: Advanced Installation Procedures ... 115 Connecting an External Modem ... 116 Connecting AlterPath PMs to the KVM/net ... 117 Installing the AlterPath KVM Expander ... 119 Shipping Box Contents KVM Expander ... 120 Setting Up the KVM Expander ... 121 Powering On the KVM Expander and Connected Devices ...
Page 7 Configuration ... 167 Software Upgrade ... 169 Configuration ... 169 KVM ... 170 General ... 171 General ... 172 Enabling Direct Access to KVM Ports ... 173 Redefining KVM Connection Keyboard Shortcuts (Hot Keys) ... 173 Redefining Sun Keyboard Modifier Keys ... 175 Specifying Authentication for KVM Port Logins ...
Page 8 Setting up Customized Timezone Configuration ... 271 Boot Configuration ... 273 Online Help ... 277 Viewing System Information ... 278 General ... 278 Station Status ... 279 Management ... 281 Backup Configuration ... 283 Firmware Upgrade ... 287 Microcode Upgrade ... 290 Microcode Reset ...
Page 9 ... 318 Port Numbers of Cascaded KVM Devices in the Connect to Server Drop- down List ... 319 Login Screen: Direct Logins Enabled, Only IP Address Entered ... 320 Login Screen: Direct Logins Enabled, IP Address and Port Entered ... 320 Connecting to Servers Remotely Through the Web Manager ...
Page 10 SNMP Configuration Screens [OSD] ... 369 VPN Configuration Screens [OSD] ... 373 IP Filtering Configuration Screens ... 377 Hosts Configuration Screens [OSD] ... 384 Static Routes Configuration Screens ... 386 Date/time Configuration Screens ... 389 User Station Screens ... 390 KVM Ports Screens ...
Page 11 Glossary ... 457 Index ... 471...
Page 12 AlterPath KVM/net Installation, Administration, and User’s Guide...
Page 13: Before You Begin
Before You Begin This installation, administration, and user’s guide provides background information and procedures for installing, configuring, and administering the Cyclades™ AlterPath family of KVM products including: • AlterPath KVM/net • AlterPath KVM Expander • AlterPath KVM RP • AlterPath KVM Terminators In addition, this guide offers information and procedures for accessing connected servers and other connected devices.
Page 14: Document Organization
Document Organization This document contains the following chapters: Chapter 1: Introduction Chapter 2: Installation Chapter 3: Advanced Installation Procedures Chapter 4: Web Manager for Administrators Chapter 5: Web Manager for Regular Users Chapter 6: Accessing Connected Devices Chapter 7: On Screen Display Appendix A: Troubleshooting Appendix B: Technical Specifications Defines and explains the overall product...
Page 15: Related Documents
• AlterPath KVM/net QuickStart Guide (hard-copy) The documentation for Cyclades AlterPath products mentioned in this guide such as AlterPath PM, and AlterPath KVM family of products are on the Documentation CD shipped with the product and they are also available at: http://www.cyclades.com/support/downloads.php.
Page 16 Table P-1: Typographic Conventions Typeface Meaning Emphasis Titles or emphasized or new words or terms Names of commands, files, and Filename or directories; onscreen computer output. Command What you type in an example, compared User type to what the computer displays The following table describes other terms and conventions.
Page 17 Chapter 1 Introduction This chapter gives an overview of the features of the Cyclades AlterPath KVM/net. This chapter describes how administrators and operators can use the KVM/net features to securely manage connected computer systems and a large variety of devices from anywhere on the local area network or on the Internet.
Page 18: Description
LANs, WANs, or other dial-in connections through the Ethernet port or through an optional external modem. For extended local administration, administrators can connect the Cyclades AlterPath KVM Expander (purchased separately) to the KVM/net with a CAT5 cable of up to 500 feet in length.
Page 19 Note: The 500-foot limit includes the distance of the User 2 from the KVM/net and the distance of the most remote system connected to a KVM port. Secondary KVM units such as the Cyclades AlterPath KVM Expander or an AlterPath KVM can be cascaded for extended KVM server connections. A...
Page 20: Guidelines For Using The Kvm/Net
Guidelines for Using the KVM/net Configuration of user accounts and access to the ports and all other management of the connected devices is done through the Web Manager. Troubleshooting in the event of network failure can be done using one of the two direct-connect methods, or by using the Web Manager through a dial-up connection to an external modem connected to the AUX port.
Page 21 Table 1-1: Port Types (Continued) Port Connection Information Type Console Connect a CAT5 to DB-9 cable to a COM port on a computer. Ethernet Connect an Ethernet cable to the local area network (LAN). User 1 Connect a keyboard, video, mouse [PS/2 and cable to a local station’s keyboard, VGA]...
Page 22: Connectors On The Back
Power Cord Connector and Switch Figure 1-2: KVM/net Back Panel • On the left are the power connector and power switch and either 16- or 32- KVM ports, which are used for connecting computing systems with KVM connections. See “Power Connector and Power Switch” on page 7 and “KVM Ports” on page 7.
Page 23: Power Connector And Power Switch
Connectors on the KVM/net Power Connector and Power Switch The following figure shows the power connector and power switch on the left rear of a KVM/net. Power Cord Connector Power Switch Figure 1-3: Power Connector on the Left Rear The KVM/net is furnished with a power cord used to connect the power connector to a power supply.
Page 24: Management Ports (Console, Ethernet, User 1, User 2)
connections give access to information that is otherwise inaccessible through in-band network interfaces. For example, BIOS access, POST, and boot messages are inaccessible through in-band connections. In some cases, the in-band network interfaces are not available after the system boot is completed (for example, after a Windows Safe Mode boot) without the kind of access these KVM connections provide.
Page 25 The following list describes the management ports on the right back of the KVM/net. • Console – Its RJ-45 connection can be connected by a CAT5 to DB-9 cable to a COM port on a computer. Administrators can use a terminal emulation program to locally manage and troubleshoot the KVM/net.
Page 26: Aux Ports
AUX Ports The following figure shows the AUX port on the right back of the KVM/net. Figure 1-6: AUX Ports AUX – Serial port (RS-232) with RJ45 connector that can be used for the following: • Connecting to an optional AlterPath PM Up to 32 PMs can be daisy-chained for a total of 120 outlets.
Page 27 The following figure shows the position of the LEDs as they appear on the back of the KVM/net. The LEDs are designed to monitor the interface connections as described in Table 1-2, “LED Descriptions,” on page 12. The diagram below shows a close up view of the LEDs on the back of the KVM/net.
Page 28 The LED numbers in the tables below correspond to the numbers in the previous figure. Table 1-2: LED Descriptions Number Label Function Monitor KVM CAT5 video interface Monitor KVM CAT5 video interface 5, 3 Monitor RS-232 async port status 4, 5 Monitor RS-232 async activity Color/Status...
Page 29: Alterpath Kvm/Net Ordering Options
Table 1-2: LED Descriptions (Continued) Number Label Function Monitor Ethernet line ACT/ status Monitor Ethernet speed Monitor CPU (software operation) Monitor compact flash (HD) or other (GP) AlterPath KVM/net Ordering Options Each AlterPath KVM/net comes with 16 or 32 KVM ports. The following table lists the model and part numbers and number of KVM ports of each KVM unit.
Page 30: Types Of Users
Cannot be deleted. Has all access: through the Web Manager in Wizard and Expert mode, and through the OSD. Has full access to every function of the Web Manager. Access Privileges: Full Read/Write/Delete. AlterPath KVM/net Installation, Administration, and User’s Guide Default Password cyclades cyclades...
Page 31: Simultaneous Kvm/Net Logins
Table 1-4: User Types, Responsibilities, and Default Password (Continued) Username Responsibilities administratively User account configured by the administrator assigned to be able to access devices connected to the ports of the KVM/net. Has access to the port through the Web Manager and through the OSD.
Page 32: Simultaneous Server Connections
Figure 1-8: Simultaneous Administrator Login Prompt Note: This feature applies to both Web Manager and OSD. Simultaneous Server Connections The KVM/net supports a maximum of 6 concurrent server connections. Up to two connections are supported either locally or remotely over Ethernet. Up to 4 connections can be inband depending on whether a KVM-over-IP connection is being made.
Page 33: Administration Options
Total Administration Options The following sections summarize the KVM/net administration options: • “Cyclades Web Manager” on page 17 • “On-Screen Display” on page 18 • “Guidelines for Using the KVM/net” on page 4 The administrator options require different types of log in credentials. For more information on which types of users can perform administrative tasks and access administrative options, see “Types of Users”...
Page 34: Cyclades Web Manager
Basic Networking Using the wiz Command” on page 85. Cyclades Web Manager Administrators perform most tasks through the Cyclades Web Manager. The Web Manager runs in a browser and provides a real-time view of all the equipment that is connected to the KVM/net. The administrator or the regular...
Page 35: Prerequisites For Using The Web Manager
Web Manager uses forms and dialog boxes (which are pop-up windows) to receive data input. See also, “Prerequisites for Using the Web Manager” on page 19. Administrators, see “Web Manager for Administrators” on page 133. Regular users, see “Web Manager for Regular Users” on page 299. Prerequisites for Using the Web Manager The prerequisites described in this section must be complete before anyone can access the Web Manager.
Page 36: Tcp Ports
system administrator for help. For more information, see “Considerations When Choosing Whether to Enable DHCP” on page 57. • A user account defined on the Web Manager By default, the admin has an account on the Web Manager. An administrator can add regular user accounts to administer connected devices using the Web Manager.
Page 37: Cascaded Devices
Cascaded Devices The KVM/net supports cascading, which allows administrators to connect secondary KVM units to a primary KVM/net. Cascading allows administrators to increase the number of managed devices to up to 1024 servers with a centralized configuration and access interface. A maximum of 32 secondary KVM devices can be cascaded from the primary KVM/net extending the number of KVM ports to a maximum of 512 for two- user configuration (i.e.
Page 38 Sun Server (Mini-DIN) AlterPath KVM 32 Figure 1-9: Cascaded KVM Devices from a KVM/net As depicted in the previous figure, the KVM/net supports one level of cascading: The primary KVM/net controls the secondary level of KVM units connected to it. A secondary KVM unit can be a KVM, a KVM Expander, a KVM/net, or a KVM/netPlus.
Page 39 Administrators can connect up to 32 KVM units to the master KVM/net. Each cascaded KVM device has two management ports that can be connected to the primary KVM/net. Note: You must connect the master KVM/net’ KVM port to User 2 on the slave. Optionally, you can add a second connection to User 1 on the slave by using a terminator.
Page 40: Accessing Ports On Cascaded Kvm Devices
Note: In addition to a CAT5 cable, you need a KVM Terminator to connect to the User 1 port of a cascaded KVM, KVM/net, or KVM/netPlus. KVM/net users can use the master KVM/net to access all devices connected to KVM ports on the master and slave KVM units. Accessing Ports on Cascaded KVM Devices KVM/net users can use the master KVM/net to access all devices connected to KVM ports on the master and slave KVM units.
Page 41: Understanding Kvm Port Permissions
Cascaded Devices The KVM administrator must take the actions described under “Where Documented” to allow any other types of access than the defaults defined in the previous table. See “Authentication” on page 45 for the tasks related to setting up authentication. Understanding KVM Port Permissions KVM port permissions are defined in the Web Manager by assigning Default Permissions that apply to all KVM ports and by optionally assigning specific...
Page 42: Kvm Port Permissions Hierarchy
needs to understand in order to perform advanced configuration of KVM permissions. The following table shows the tools that the KVM/net administrator can use to set KVM port permissions and where in this manual to go for further details. Table 1-10: Tools for Setting KVM Port Permissions Tools Where Documented Web Manager...
Page 43: Decision 2: Check Group's Kvm Port Permissions
Decision 2: Check Group’s KVM Port Permissions 2. Is the user included in a group with KVM port permissions that allow or deny access to the port? • If yes, access is allowed or denied. • If no, skip to Decision 3. Note: When a user is in more than one group, the most restrictive permission is used.
Page 44: Decision 4: Check User's Default Permissions
• If user jill is trying to access port 4 and the Generic User has port 4 in a list of ports with no access permissions, then jill is denied access. • If users joe, jennifer, jordan, jolanda, and jezebel are trying to access port 4 and the Generic User does not have port 4 listed for any type of access, then their access request are passed to decision 4.
Page 45: Decision 6: Check Generic User's Default Permissions
• If user jennifer is not a member of any group with a Default Permission specified, then her access request is passed to decision 6. Decision 6: Check Generic User’s Default Permissions Note: If an access request gets this far, the Default Permission of the Generic User is the only permission that could apply.
Page 46 Table 1-11: In-band and Out of Band Connections In-band Client machine running a Supported Windows operating system with Source a valid IP address Computers Windows (Win2000, 2003, XP, Supported Target and NT) Terminal Servers Servers Internet Explorer 5, 6 Supported Browsers Not available Direct Log In...
Page 47: Determining The Connection Type And Its Supported Functionality
Determining the Connection Type and its Supported Functionality When a user wants to connect to a server displayed on the Web Manager Connect to Server form, the drop-down list indicates whether the server can be accessed by a KVM connection, an in-band connection, or both. In the connect list, all servers connected to KVM ports appear first followed by all servers that are accessed through in-band connections and are not connected to KVM ports;...
Page 48 Table 1-12: Available Functionality During KVM and In-band Connections Server Connection Labels (In-band) (KVM + In-band) Description Indicates that the Microsoft Terminal Server running RDP can be accessed only through an in-band connection and is not connected to a KVM port. Users can access this server only to run applications once the server is already running.
Page 49: Administering Users Of Connected Servers
Administering Users of Connected Servers This section reviews the tasks that KVM/net administrators must do to enable access to connected servers. The “admin” account can add new regular user accounts to allow others to connect to ports and administer or use connected devices. Types of Access to Ports The KVM/net administrator can restrict regular user accounts to allow them only to manage specific servers and devices.
Page 50 During setup of the KVM/net, the installer connects the desired servers to the ports as planned. During configuration, the KVM/net administrator does the following, if desired: • Assigns aliases to ports to identify the connected servers. • Assigns aliases to PMs to identify the location or types of devices being managed.
Page 51: Redefining Keyboard Shortcuts (Hot Keys)
Redefining Keyboard Shortcuts (Hot Keys) Predefined keyboard shortcuts (also called hot keys) allow users to do the following: • Perform common actions while connected through a KVM port • Emulate Sun keyboard keys while connected through a KVM port to a Sun server.
Page 52: Summary Of Tasks For Redefining Hot Keys
Summary of Tasks for Redefining Hot Keys See the following table for a summary of tasks for redefining keyboard shortcuts with references to where they are documented. Table 1-13: Tasks for Redefining Hot Keys Part Manager Form KVM Common Configuration> escape KVM>General sequence...
Page 53: Screen Resolution And Refresh Rate
KVM port. The mouse acceleration should be disabled on the remote server’s operating system. Depending on your server’s operating system refer to one of the following procedures. • “To Disable Mouse Acceleration [Windows XP/Windows 2003]” on page • “To Disable Mouse Acceleration [Windows 2000]” on page 106 •...
Page 54: Packet Filtering On The Kvm/Net
Packet Filtering on the KVM/net IP filtering refers to the selective blocking of the IP packets based on certain characteristics. The KVM/net can be configured to filter packets as does a firewall. The IP Filtering form is structured in two levels: •...
Page 55 Table 1-15: Levels of IP Filtering (Continued) Each chain contains a sequence of rules that control filtering. The rules Rule address the following issues: • How the packet should appear in order to match the rule Some information about the packet is checked according to the rule, for example, the IP header, the input and output interfaces, the TCP flags and the protocol.
Page 56: Power Management
Power Management The KVM/net enables users who have power management permissions to power off, power on, and reboot remote devices connected to an AlterPath PM intelligent power distribution unit (IPDU). By connecting one PM to the AUX port and by daisy-chaining any combination of PM models, you can connect up to 128 outlets to one KVM/net.
Page 57: Controlling Power Through The Web Manager Ipdu Power Management Forms
Power Management Controlling Power Through the Web Manager IPDU Power Management Forms Through the Web Manager’s IPDU Power Management form, users with power management permissions can perform power management on any device plugged into an PM connected to the AUX port. See “Use this form to connect to servers with either an in-band or a KVM connection.
Page 58: Setting Up And Configuring Power Management
Setting Up and Configuring Power Management Administrators most commonly assign power management permissions to users and configure ports for power management using the Web Manager. However, the OSD also offers menus for configuring power management on local devices. Two types of power management can be set up and configured on the KVM/ net: •...
Page 59 Table 1-16: Tasks: General Power Management Set Up (Continued) Plug devices into outlets on the PM connected to the AUX port. Configure users to manage power. The following additional configuration tasks must be performed for power management while accessing a server connected to a KVM port and plugged into an AlterPath PM connected to the AUX port: Table 1-17: Tasks: KVM-connected Power Management Task...
Page 60: Security
Security The KVM/net comes with the following configurable security features: • Security Profiles • Encryption • Authentication • Lockout Macro Security Profiles A Security Profile consists of a set of parameters that can be configured in order to have more control over the services that are active at any time. There are three pre-defined security profiles with pre-set parameters.
Page 61: Encryption
In this situation the system detects the pre-defined security profile. You can continue working in the Web Manager. See “Step 1: Security Profile [Wizard]” on page 143 for detailed information on security profiles and configuration procedures Encryption Administrators can specify that communications are encrypted between the KVM/net and any computer attached to a KVM port.
Page 62 The following table describes the supported authentication methods and indicates which methods are available for the KVM/net and which are available for KVM ports. All authentication methods except “Local” require an authentication server, which the administrator specifies while selecting the authentication method.
Page 63 Table 1-18: Supported Authentication Types for KVM/net and Port Types (Continued) Authentication Type KerberosDownlocal LDAP LDAP/Local LDAPDownlocal NIS/Local NISDownlocal RADIUS RADIUS/Local Introduction Description Uses local authentication if Kerberos server is down Uses LDAP (Light- weight directory access protocol) Uses local authentication if LDAP authentication fails Uses local...
Page 64: Tools For Specifying Authentication Methods
Table 1-18: Supported Authentication Types for KVM/net and Port Types (Continued) Authentication Type RADIUSDownlocal TACACS+ TACACS+/Local TACACS+Downlocal NTLM NTLM DownLocal Tools for Specifying Authentication Methods The administrator generally uses the Web Manager for specifying an authentication method for the KVM/net and for all KVM ports, as described in “Network”...
Page 65: Lockout Macro
Lockout Macro This feature is configurable on each KVM port. It allows the KVM connected servers to automatically switch to locked state when the AlterPath Viewer is closed or an idle time-out occurs. In addition, when a user tries to access a KVM connected server with a full or read-write permission, the lockout macro command is sent to the server to lock the current user and display the new login window.
Page 66 Note: A lockout macro will not transmit if the connection is read-only. If you switch between two KVM connected servers the lockout macro does not lock your session unless in the meantime another user has taken over your session. The lockout macros are user-programmable. The following table shows the default key sequences on major operating systems.
Page 67 Table 1-20: Lockout Macro Key Sequences Operating System Sun Solaris 10 - JDS Introduction Lockout Macro By default there is no hot key defined. Follow the steps below to define a key sequence. 1. Go to Launch > Preferences > Desktop Preference >...
Page 68 Table 1-20: Lockout Macro Key Sequences Operating System SuSe 10 - KDE SuSe 10 - Gnome You can use the escape sequence hot keys instead of the key combinations shown in the previous table. For example, [Ctrl+Alt+Del] is equivalent to “@”...
Page 69: Notifications, Alarms, And Data Buffering
Table 1-21: Escape Sequence Hot Key Equivalent Shortcut Key Ctrl Shift Ctrl+Alt+Del For configuration instructions using the Web Manager see “Configuring Individual KVM Ports” on page 183, or “KVM Ports Screens” on page 394 for using OSD. Notifications, Alarms, and Data Buffering The KVM/net administrator can set up logging, notifications, and alarms to alert remote administrators about problems.
Page 70: Syslog Servers
For more background about setting up logging, notifications, alarms, and for links to all related procedures in this manual, see “Configuring Logging, Alarms, and SNMP Traps” on page 55. Syslog Servers Messages about the KVM/net, its connected PMs, and other connected devices can be sent to central logging servers, called syslog servers.
Page 71: Snmp Traps
On “syslogger” the system administrator has configured the system logging utility to write messages from the saopaulo-config var/log/fremont-config the Web Manager, according to this example, you would select the facility number Local 2 from the Facility Number drop-down list on the System Log form.
Page 72: Vpn And The Kvm/Net
VPN and the KVM/net The KVM/net administrator can set up VPN (Virtual Private Network) connections to establish encrypted communications between the KVM/net and an individual host or all the hosts on a remote subnetwork. The encryption creates a security tunnel for communications through an intermediate network which is untrustworthy.
Page 73: Considerations When Choosing Whether To Enable Dhcp
Considerations When Choosing Whether to Enable DHCP DHCP is enabled by default. It relies on a DHCP server known to the KVM/ net. Because a DHCP server may assign a different IP address every time the KVM/net reboots, when DHCP is enabled, a user needs to take an additional step to find out the dynamically assigned IP address before being able to bring up the Web Manager.
Page 74: Kvm Terminator Usage And Types
KVM Terminator Usage and Types An AlterPath KVM 4000 Series Terminator converts the server’s keyboard monitor and mouse signals. A KVM Terminator must be connected to the monitor keyboard and mouse ports of a server before the server can be connected to a KVM/net port.
Page 75: Kvm Expander
KVM Expander The AlterPath KVM Expander is designed to connect to the primary KVM/net to increase the number of ports that a primary KVM/net can manage. Note: The AlterPath KVM Expander is compatible with the KVM, the KVM/net, and the KVM/netPlus. The term primary KVM unit refers to the three types of KVM units.
Page 76: Kvm Expander Models And Components
The KVM Expander does support the following features: • Allows the connection of 8 or 16 servers See “KVM Expander Models and Components” on page 60 for more details. • Supports all existing Terminators See “KVM Terminator Usage and Types” on page 58 for more details. •...
Page 77 Power Cord Connector and Switch Figure 1-11: KVM Expander Back Panel Components The following sections explain the components of the KVM Expander: • “Ports on the KVM Expander” on page 62 • “LEDs on the KVM Expander” on page 63 •...
Page 78: Ports On The Kvm Expander
Ports on the KVM Expander The KVM Expander has two CAT5 access ports and either 8 or 16 KVM ports. Figure 1-12: Ports on the KVM Expander Back Panel Table 1-24: KVM Expander Port Types Port Type Use and Connection Information User A and The access ports can be connected with an RJ-45 cable to KVM ports User B...
Page 79: Leds On The Kvm Expander
KVM Expanders or any other device. Caution! The total amount of power consumed by devices daisy-chained to the KVM Expander must not exceed seven amps. Power connector Power switch Figure 1-13: Power components on KVM Expander Back Panel Introduction Function Color/Status Connection Status •...
Page 80: Cascading A Kvm Expander
Cascading a KVM Expander The KVM Expander can support up to two users simultaneously accessing its KVM ports. In a two-user configuration, a primary KVM switch uses two connections for each KVM Expander-to-primary KVM switch configuration: • User A port – One CAT5 cable between a KVM port on the primary KVM unit and the User A port on the KVM Expander •...
Page 81 KVM Expander Sun Server PC Server PC Server (Mini-DIN) (USB) (PS/2) AlterPath KVM Expander 16 UserA UserB AlterPath KVM/net 32 local user IP users Figure 1-14: Connecting a KVM Expander to the KVM/net Introduction...
Page 82 The following table shows the maximum number of servers a primary KVM, KVM/net, or KVM/netPlus can support when cascaded with a KVM Expander 8 or a KVM Expander 16. Table 1-26: Maximum Number of Supported Servers KVM Unit Model Number AlterPath KVM 16 AlterPath KVM 32 KVM/net...
Page 83: Adding The Kvm Expander To The Kvm/Net Unit's List Of Cascaded Devices
Upgrading the Microcontroller Code Once a KVM switch is installed and configured, administrators can use the Microcode Upgrade form on the primary KVM unit to upgrade the microcode on a KVM terminator, switch, RP, Port Expander, or video compression modules.
Page 84: User Access
KVM Expander. User Access The primary KVM switch takes care to prevent the same server port from being accessed by both user ports. If this happens, the last user to access the server port will have read-only access.
Page 85: Connectors On The Back Of The Kvm Rp
Connectors on the Back of the KVM RP The RP has a power supply and a User, a PC, and a Remote User port as displayed in the following figure. Power Supply and Switch 100-240V 50/60Hz, 0.15A Figure 1-18: KVM RP Back Panel The following table offers more details about the use of and cables for each port on the back of the KVM RP.
Page 86 Table 1-27: KVM RP Port Types (Continued) Port Type Use and Connection Information User Keyboard, video, and mouse (KVM) management port. Includes two [PS/2 and VGA] PS/2 ports and a VGA port, which can be connected with a KVM cable to the PS/2 ports and a VGA port on the back of the computer at the local work station.
Page 87: Chapter 2: Installation
Chapter 2 Installation This chapter outlines and described tasks for installing the KVM/net and provides other important installation-related information. The following table lists the basic installation tasks in the order in which they should be performed and shows the page numbers where the tasks are described in more detail.
Page 88 Also see the following instructions for setting up the KVM/net: Changing Default Passwords Enabling Access to the Web Manager without Making a Direct Connection Preconfiguring the KVM/net for Remote Installation Additional Configuration Tasks Perform the optional procedures in “Advanced Installation Procedures” on page 115 if you are installing an AlterPath PM, an external modem, an AlterPath KVM RP, an AlterPath KVM Expander, or an other cascaded KVM devices.
Page 89: Shipping Box Contents Kvm/Net
Guide CAB0010 3-pin power cord Shipping Box Contents KVM/net Purpose PDF copies of this guide and all other Cyclades product documents. Basic installation guide for experienced users in printed format. Use to plug into a grounded AC power outlet. For other...
Page 90 Table 2-1: Shipping Box Contents, Part Numbers, and Description (Sheet 2 of 3) Item Description CAB0018 RJ-45 to RJ-45 7ft. CAT5 cable ADB0036 RJ45 to DB9F crossover adapter AlterPath KVM/net Installation, Administration, and User’s Guide Purpose Use for the following: •...
Page 91: Setting Up The Kvm/Net
KVM ports. For details, see “KVM Terminator Usage and Types” on page 58. Note: For more information about cabling, see “RS-232 Cabling Tutorial” at www.cyclades.com/resources.” For ordering information, see “Cyclades Product Guide,” available at: catalog.en.pdf.
Page 92 Setting Up the KVM/net To Mount the KVM/net 1. Decide whether you need to mount the KVM/net by the front or back and locate the appropriate sets of holes on the KVM/net. Holes for front mounting Figure 2-1:Rack Mounting Holes on the KVM/net 2.
Page 93: Making An Ethernet Connection
5. Use the mounting hardware recommended for your rack to mount the KVM/net on a rack. Making an Ethernet Connection Make an Ethernet connection to the KVM/net in order to have Ethernet access to the Web Manager and remote access to devices connected to the KVM/net. To Make an Ethernet Connection 1.
Page 94: Connecting Servers To The Kvm Ports
Connecting Servers to the KVM Ports You need to connect a KVM Terminator to every server before connecting it to a KVM port. Three Terminator types are available: • APK4615 - PS/2 for PC servers • APK4635 - USB for PC or Sun servers •...
Page 95 Follow the procedures below when connecting computers to KVM ports on the KVM/net or on the KVM Expander. For connecting AlterPath PMs or cascaded KVM units, see Chapter 3, “Advanced Installation Procedures.” Note: KVM port connections rely on the CAT5 cable having all four pairs wired. If you are connecting a KVM port to a server through a patch panel, make sure that all cables in the path are CAT5 or better and that the patch panel has all four pairs wired.
Page 96 b. Obtain the information you need to identify the authentication server on the KVM/net from the server’s administrator. c. After the KVM/net is installed, make sure to specify the desired authentication method for the ports that are connected to each server. See “Security”...
Page 97 • On a Mini-DIN Terminator for a Sun server, connect the Terminator’s Mini-DIN connector to the Mini-DIN port on the server. 3. Connect the Terminator’s VGA (HD-15 male) connector to the computer’s VGA (monitor) port. Tighten both screws firmly but do not over-tight them.
Page 98: Making A Direct Connection For Network Configuration
5. Connect the RJ-45 connector on other end of the cable to a KVM port on the KVM/net. 6. Repeat Step 1. through Step 5. for all computers to be connected to the KVM ports. 7. If any user is using a PC with Windows XP server pack 2 installed and Internet Explorer 5 or 6 to remotely administer a connected server, make sure the procedure under “Required Security Settings For Internet Explorer”...
Page 99: Powering On The Kvm/Net And Connected Devices
On a PC, ensure that HyperTerminal or another terminal emulation program is installed on the Windows operating system. On a computer running a UNIX- based operating system, such as Solaris or Linux, make sure that a compatible terminal emulator such as Kermit or Minicom, is installed. 1.
Page 100: Performing Basic Network Configuration
To Power On the KVM/net 1. Make sure the KVM/net’s power switch is off. The power is off when the side of the power switch with the circle is pressed down. 2. Plug in the power cable. 3. Turn the KVM/net’s power switch on.
Page 101: Configuring Basic Networking Using The Wiz Command
From your terminal emulation application, log in to the console port as root. KVM/net login: root Password: cyclades As shown in the previous screen, the default password is “cyclades.” If the password has been changed from the default, use the new password. To Change the Password Through the Console If the default password “cyclades”...
Page 102: To Use The Wiz Command To Configure Network Parameters
Note: Changing the default password closes a security hole that could be easily exploited. 1. Enter the passwd command. [root@ KVM/net /]# passwd 2. Enter a new password when prompted. New password: new_password Re-enter new password: new_password Password changed To Use the wiz Command to Configure Network Parameters 1.
Page 103 6. Enter the domain name. Domain name[cyclades.com]: domainname 7. Enter the IP address of the DNS (domain name) server. Primary DNS Server[192.168.44.21] : DNS_server_IP_address 8. Enter the IP address for the gateway. Gateway IP[eth0] : gateway_IP_address 9. Enter the netmask for the subnetwork.
Page 104 The values shown are for example only. Current configuration: Hostname : kvm DHCP : disabled System IP : 192.168.45.32 Domain name : cyclades.com drwxr-xr-x Primary DNS Server : 192.168.44.21 Gateway IP : 198.168.44.1 Network Mask : 255.255.252.0...
Page 105: Configuring Basic Networking Using The Osd
Configuring Basic Networking Using the OSD This procedure requires a hardware connection already made between the KVM/net’s KVM management port and a local monitor, keyboard, and mouse, as described under “To Connect to the User 1 Management Port” on page 83. After the KVM/net and monitor are powered on, the OSD login screen appears.
Page 106 To Log into the OSD 1. On the OSD login screen, enter “admin” as the Login name. 2. Enter the password. The default password is “cyclades.” If the password has been changed from the default, use the current password. 3. Press Enter.
Page 107 Performing Basic Network Configuration To Change a Password Using the OSD 1. From the OSD Main Menu, go to Configure > Users and Groups > Local Users > Change Password. Warning! If the “admin” password has not been changed, change it now. Changing the default password closes a security hole that could be easily exploited.
Page 108 4. Re-enter the new password. The password confirmation dialog box appears. 5. Press Enter. The Local Users menu appears. 6. Select Exit or press the Esc key to exit the Local Users menu. You can use the Exit or Cancel option or the Esc key to exit any window on the OSD.
Page 109 3. Enter the IP address for the KVM/net and press Enter. The Netmask form appears. 4. Enter the netmask (in the form 255.255.255.0) and press Enter. The Gateway form appears. 5. Enter the IP address for the gateway and press Enter. The DNS Server form appears.
Page 110 6. Enter the IP address for the DNS server and press Enter. The Domain form appears. 7. Enter the domain name and press Enter. The Hostname form appears. 8. Enter the hostname for the KVM/net and save the changes to complete the basic network configuration.
Page 111 • If you do not wish to configure the time and date at this time, and if you are performing an initial configuration of basic networking parameters, go to: “Completing Configuration Using the Web Manager” on page 98. • Otherwise, go to the appropriate menu option for your next task or exit from the OSD.
Page 112 To Set the Time and Date Using the OSD 1. From the Main menu of the OSD, go to Configure. The Configuration menu appears. 2. Select Date/time. The Date/time conf. form appears. 3. To enable the NTP time and date server, do the following. a.
Page 113 b. Enter the IP address of the NTP server. c. Save the changes. 4. To enter the date and time manually, do the following. a. On the Date/time conf. form, select disabled. The Date entry screen appears. b. Enter the date in the format shown and press Enter. The Time entry screen appears.
Page 114: Completing Configuration Using The Web Manager
Completing Configuration Using the Web Manager The “admin” user can administer the KVM/net and its connected devices through the Web Manager without doing any additional configuration. The following list shows other common configuration tasks: • Enable direct login to ports from the Web Manager login screen •...
Page 115: Changing Default Passwords
Changing admin’s Default Password [Web Manager] 1. Bring up the Web Manager. 2. Log in as admin using the default password, “cyclades”. 3. In Wizard Mode, go to Step2: Access. 4. Select “admin” from the Users List. 5. Click the “Change Password” button.
Page 116 b. Enter a new password when prompted. New password: new_password Re-enter new password: new_password Password changed 3. Save the new password by entering the saveconf command. [root@KVM /]# saveconf 4. Log out. [root@KVM /]# logout 5. Close the terminal session. 6.
Page 117: Enabling Access To The Web Manager Without Making A Direct Connection
Enabling Access to the Web Manager without Making a Direct Connection This section describes additional alternatives for enabling access to the Web Manager that do not require making a direct connection. Both of the two following approaches require an experienced administrator to configure: •...
Page 118: To Use A Dynamic Ip Address To Access The Web Manager
4. On a computer that resides on the same subnet with the KVM/net, change the network portion of the IP address of that computer to 192.168.160.NN, where NN is not 10, and change the Netmask to 255.255.255.0. For example, you could change the computer’s IP address to 192.168.160.44.
Page 119: Enabling Access To The Web Manager Without Making A Direct Connection
See “To Connect to the Console Port” on page 82 for instructions if needed. b. Execute the command ifconfig eth0 Output similar to the following will appear. The line in bold type face labelled “inet address” lists the IP address of the KVM/net: eth0 5.
Page 120: Preconfiguring The Kvm/Net For Remote Installation
If you would prefer to have Cyclades pre-configure the KVM/net with basic network parameters at Cyclades before it is shipped, ask your Cyclades contact to put you in touch with Cyclades professional services. For a fee, they can preconfigure the KVM/net with parameters you supply.
Page 121: Additional Configuration Tasks
To Set Up a Preconfigured KVM/net Perform the tasks shown in the following table with a KVM/net that has been preconfigured as described in“To Preconfigure the KVM/net” on page 104. After the tasks are completed in the order shown, a remote administrator can bring up the Web Manager by entering the KVM/net’s fixed IP address in a browser.
Page 122: Disabling Mouse Acceleration
Disabling Mouse Acceleration In a KVM-over-IP session you should synchronize the mouse cursor on your local PC or laptop with the mouse cursor of the remote server attached to a KVM port. The mouse acceleration should be disabled on the remote server’s operating system.
Page 123 4. In the Acceleration panel, click the “None” radio button. 5. Click OK. 6. To disable transition effects do the following: a. Go to: Control Panel > Display > Effects. b. Clear Use transition effects for menus and tooltips. c. Click OK. To Disable Mouse Acceleration [Windows 1.
Page 124 • Access on the KVM/net to the port where the computer is connected • Access as root on the connected computer 1. Log into the Cyclades Web Manager with the username and password of an account that has been configured to access the port where the computer is connected.
Page 125: Required Security Settings For Internet Explorer
The procedures described in this section must be performed on a PC running Windows XP with Service Pack 2 with Internet Explorer 5.5 or above, which is used to bring up the Cyclades Web Manager and the AlterPath Viewer. Modify IE Security Settings You must modify the IE security settings to enable ActiveX.
Page 126 Required Security Settings For Internet Explorer 3. Click the Sites button to open the Trusted sites dialog box. AlterPath KVM/net Installation, Administration, and User’s Guide...
Page 127 4. Add the KVM/net IP address to the list of the trusted sites and click the “Add” button. 5. Select the OK button to close the window. 6. Close the Internet Options dialog box. To Modify “Internet” or “Local Intranet” Zone Settings 1.
Page 128 2. Click the Custom Level button. The Security Settings form appears. 3. On the Security Settings form, go to ActiveX controls and plug-ins > Download signed ActiveX controls. AlterPath KVM/net Installation, Administration, and User’s Guide...
Page 129 Required Security Settings For Internet Explorer 4. Select either Enable or Prompt. 5. If you selected Enable, press the OK button. 6. If you selected Prompt, go to Downloads > Automatic prompting for file downloads, and select Enable. Installation...
Page 130 Required Security Settings For Internet Explorer 7. Select the OK button to close the window. AlterPath KVM/net Installation, Administration, and User’s Guide...
Page 131: Chapter 3: Advanced Installation Procedures
Chapter 3 Advanced Installation Procedures KVM/net supports the installation of related components, which are used to extend the access to and control of the KVM/net and its connected devices. The following table lists the components that can be installed with the KVM/ net and shows the page numbers where the tasks are described in more detail.
Page 132: Connecting An External Modem
Connecting an External Modem You can connect a modem to the AUX port on the KVM/net. After the modem is connected and properly configured, you can use it to dial in to the KVM/net when the production network or management network is down, or when Ethernet access is unavailable.
Page 133: Connecting Alterpath Pms To The Kvm/Net
Connecting AlterPath PMs to the KVM/net You can control an AlterPath Power Management (PM), intelligent power distribution unit (IPDU), by connecting it to the AUX port on the KVM/net. By daisy-chaining any combination of PM models, you can control up to 128 outlets from one KVM/net.
Page 134 To Connect Multiple PMs to the KVM/net This procedure assumes that you have one AlterPath PM connected to the AUX port of the KVM/net. See “To Connect an AlterPath PM to the AUX Port” on page 117 for the procedure. 1.
Page 135: Installing The Alterpath Kvm Expander
Installing the AlterPath KVM Expander The following table gives a high-level list of steps involved in setting up, installing, and configuring the information about each step. Review the contents of the shipping box Set up the KVM Expander Connect computers to the KVM ports on the KVM Expander Connect the KVM Expander to the KVM/net Power on the KVM Expander and connected devices Add the KVM Expander to the primary KVM unit’s list of cascaded...
Page 136: Shipping Box Contents Kvm Expander
CAT5 cable AlterPath KVM/net Installation, Administration, and User’s Guide contains the Purpose PDF copies of this guide and all other Cyclades product documents. Use to plug into a grounded AC power outlet. For other types of power sources, contact Cyclades sales for other cord options.
Page 137: Setting Up The Kvm Expander
“KVM Terminator Usage and Types” on page 58. Note: For more information about cabling, see “RS-232 Cabling Tutorial” at www.cyclades.com/resources, under “White Papers.” For ordering information, see “Cyclades Product Guide,” available at: www.cyclades.com/common/www/pdf/catalog.en.pdf. Setting Up the KVM Expander The KVM Expander is a 1U device that can be mounted on the side of a rack or placed on a desktop or other flat surface.
Page 138 To Mount the KVM Expander 1. Connect the two supplied brackets to the KVM Expander, connecting one bracket to each side of the box. a. Decide whether you need to mount the KVM Expander by the front or back and locate the appropriate sets of holes on the KVM Expander. The following figure shows the angle of a bracket being installed for rack mounting.
Page 139 The following figure shows the brackets as they appear from the top of the KVM Expander after the brackets are installed for wall mounting. KVM Expander back KVM Expander front The following figure shows the bracket flanges on the front of the KVM Expander after the brackets are installed for rack mounting.
Page 140: Powering On The Kvm Expander And Connected Devices
c. Use a Phillips screwdriver to tighten the screws. 2. Use screws or nuts and bolts as appropriate to mount the KVM Expander on the wall, on a rack, or in a cabinet. 3. Use screws or nuts and bolts as appropriate to mount the KVM Expander on a rack.
Page 141 Power switch To Power On the KVM Expander 1. Make sure the KVM Expander’s power switch is off. The power is off when the side of the power switch with the circle is pressed down. 2. Plug in the power cable.
Page 142: Connecting Cascaded Kvm Units To The Primary Kvm/Net
Connecting Cascaded KVM Units to the Primary KVM/net The KVM/net supports the cascading of three types of secondary KVM devices: the AlterPath KVM, the KVM Expander, and the KVM/net. See the following sections for the appropriate instructions: • “To Connect a Secondary KVM Unit to the Primary KVM/net” on page •...
Page 143 To Connect a Secondary KVM Unit to the Primary KVM/net 1. Power off all KVM hardware and connected devices. 2. To connect to the User 2 port of a secondary KVM unit, do the following: a. Connect one end of a CAT5 cable to a KVM port on the primary KVM/ net.
Page 144 To Connect a KVM Expander to the Primary KVM/net See “Installing the AlterPath KVM Expander” on page 119 for background information on the KVM Expander. 1. Power off all KVM hardware and connected devices. 2. Connect one end of a CAT5 cable to a KVM port on the primary KVM/net. 3.
Page 145: Installing The Alterpath Kvm Rp
Installing the AlterPath KVM RP With a CAT5 cable up to 500 feet long, the AlterPath KVM RP can be connected to the User 2 port of the KVM/net unit, enabling the extended user to perform local administration tasks or to select the local keyboard, video, and mouse console between a local station and a server connected to the KVM/net.
Page 146: Shipping Box Contents Alterpath Kvm Rp
Use to plug into a grounded AC power outlet. For other types of power sources, contact Cyclades sales for other cord options. Use to connect the User 2 port on the KVM/net to the Remote User port on the KVM RP.
Page 147: Options For Accessing The Kvm Rp
Table 3-2: KVM RP Shipping Box Contents, Part Numbers, and Description Item To Connect the KVM RP to the KVM/net 1. Put one end of a CAT5 cable into the Remote User port on the KVM RP. 2. Put the other end of the CAT5 cable into the User 2 port on the KVM/net. Options for Accessing the KVM RP The KVM RP offers two options for monitor, keyboard, and mouse control.
Page 148: Supplying Power To The Kvm Rp
1. If the KVM RP has its own dedicates keyboard, monitor, and mouse connected to its USER port, do the following: a. Make sure the KVM/net’s power switch is off. b. Plug in the power cable. c. Turn the KVM/net’s power switch on.
Page 149: Chapter 4: Web Manager For Administrators
Chapter 4 Web Manager for Administrators This chapter is for administrators who use the Web Manager for managing and configuring the KVM/net. Two types of administrators can access all the Web Manager functions described in this chapter: • An administrator who knows the password for the “admin” account, which is configured by default •...
Page 150: Common Tasks
Administrative Modes Wizard Mode Expert Mode Common Tasks The following table lists common tasks that KVM/net administrators perform with links to the procedures. Task Select a pre-defined security profile, or configure a custom security profile. Set up other users to access connected devices without being able to make changes to the KVM/net configuration Assign users or groups to specific ports,...
Page 151 Task Configure power management for the AUX port (if the port is connected to an optional AlterPath PM) Manage power on an optional AlterPath Choose among authentication methods and specify authentication servers for logins to the KVM/net and for logins to devices connected to the KVM/net’s ports Specify encryption levels for KVM ports...
Page 152: Common Features Of Administrators' Windows
Common Features of Administrators’ Windows The features of all Web Manager windows for KVM/net administrators are described in the following sections: • Control and logout buttons and KVM/net Information See “Administrators’ Control Buttons, Logout Button, and KVM/net Information.” • Getting more information See “Obtaining More Information”...
Page 153: Obtaining More Information
Button Name The following table describes the logout button and the other information that displays in the upper right corner of all Web Manager windows. Window Area Obtaining More Information Information about the purpose of each Web Manager form and the values to be specified on the form is available by clicking the Help button.
Page 154 For procedures specific to each mode, see “Administrative Modes” on page 141. To Log In to the Web Manager as Admin This procedure assumes that the prerequisites described under “Prerequisites for Using the Web Manager” on page 19 are done and that you can connect to the Web Manager.
Page 155 Figure 4-1:KVM/net Login Form If direct logins to KVM ports is enabled, a “port” field also appears in the login area of the screen, as shown in the following screen example. 2. If direct logins to ports is enabled, to bring up the Web Manager with the port number filled in, enter the IP address of the KVM/net followed by the port number in the form: IP_address/login.asp?portname=portnumber...
Page 156 See “Web Manager Login Screen” on page 316 for background information on the multiple ways to login to the Web Manager. 3. Enter your account’s username and password. If another administrator is already logged in as “admin,” the dialog box shown in the following screen example appear.
Page 157: Administrative Modes
Administrative Modes This section describes the two administrative modes of the web manager: • “Wizard Mode” on page 141 • “Expert Mode” on page 159 Wizard Mode The Wizard mode guides the administrator through four configuration steps. The following figure shows a typical window in Wizard mode. Selecting an item from the left menu brings up a corresponding form in the middle.
Page 158: Procedures In Wizard Mode
Left menu Figure 4-2:Example Window in Wizard Mode After you log in as described in “To Log In to the Web Manager as Admin” on page 138, Expert mode is in effect by default. To change to Wizard mode, select the Wizard button, which displays only in Expert mode. Procedures in Wizard Mode The following table lists all procedures that are performed in Wizard mode.
Page 159: Steps In Wizard Mode [Wizard]
To Add a Syslog Server [Wizard] To Delete a Syslog Server [Wizard] Steps in Wizard Mode [Wizard] Four configuration steps display in the left menu of the Web Manager in Wizard mode. The following table lists the sections where the steps are described.
Page 160: Custom Security Profile
3. Open - The Open profile enables all services such as Telnet, SSHv1, SSHv2, HTTP, HTTPS, SNMP, RPC, ICMP, and Telnet. Direct access to KVM connections are available. The following table show the enabled protocols and services under each Security Profile. Table 4-1: Enabled Protocols and Services under each Security Profile Security Profile SSH Access...
Page 161 Table 4-2: Available Protocols and Services under the Custom Security Profile Security Profile SSH Access • SSHv1 Custom • SSHv2 SSH Options •SSH • allow root access allow Direct Access to KVM Ports To Select or Configure a Security Profile [Wizard] Note: The following procedure assumes you have installed a new KVM/net at your site, or you have reset the unit to factory default.
Page 162 Wizard Mode Figure 4-3:Security Advisory Dialog Box Note: Your browser’s pop-up blocker should be disabled for this dialog box to appear. 2. Review the Security Advisory and click the “Close” button. 3. The Web Manager is redirected to Wizard > Step 1: Security Profile The following form is displayed.
Page 163 Wizard Mode Figure 4-4:Security Profile in Wizard Mode 4. Select a pre-defined Security Profile by pressing one of the “Secured”, “Moderate”, “Open”, or “Default” profiles, or create a “Custom” profile. Web Manager for Administrators...
Page 164 Wizard Mode Figure 4-5:Custom Security Profile Dialog Box Caution! Take the required precautions to understand the potential impacts of each individual service configured under the "Custom" profile. Refer to Table 4-1 on page 144 for a comparison of the available services in each security profile.
Page 165: Step 2: Network Settings [Wizard]
other sections of the Web Manager. 5. Once you select a security profile or configure a custom profile and apply the changes, the KVM/net Web Manager restarts in order for the changes to take effect. The following dialog box appears. 6.
Page 166 the administrator configures the default basic network settings that were needed to enable logins through the Web Manager. (See “Performing Basic Network Configuration” on page 84, if desired, for more information about the initial network configuration.) You can skip this step if the current settings are correct.
Page 167: Step 3: Access [Wizard]
Figure 4-6:Network Settings in Wizard Mode 3. If the “DHCP” check box is not checked, enter the network information in the fields. 4. Click the “apply changes” button. Note: If you change the KVM/net’s IP address and apply the changes, you will need to reconnect to the Web Manager with the new IP address.
Page 168 Figure 4-7:User Access in Wizard Mode The Access form lists the currently defined Users and has three buttons: Add, Change Password, and Delete. In the Users list, by default, are two user accounts that cannot be deleted: • Admin • Generic User The Admin (the “admin”...
Page 169 Note: To perform advanced configuration of users and groups, for example, to restrict user access to KVM ports, or to create a group, go to Expert>Configuration>Users and Groups. To Add a User [Wizard] 1. In Wizard mode, go to Step 3: Access. The Access form appears.
Page 170 Optional. The default shell when the user makes a SSH or Telnet Shell connection with the switch. Choices are sh or bash. The default is sh. Optional notes about the user’s role or configuration. Comments 4.
Page 171 KVM/net and connected devices open to anyone who knows the default passwords and the KVM/net’s IP address. For security’s sake, make sure the admin and root passwords have been changed from the default “cyclades.” If either the admin or root passwords have not been changed, change them now.
Page 172 Wizard Mode 2. Select the name of the user whose password you want to change. 3. Click “Change Password.” The “Change User Password” dialog box appears. 4. Enter the new password in both fields, and click OK. 5. Click the “apply changes” button. AlterPath KVM/net Installation, Administration, and User’s Guide...
Page 173: Step 4: System Log [Wizard]
Wizard Mode Step 4: System Log [Wizard] In Wizard mode, selecting “Step 4: System Log” brings up a form for identifying one or more syslog servers to receive syslog messages from the KVM/net. Figure 4-8:System Log in Wizard Mode Before performing this procedure, make sure an already-configured syslog server is available to the KVM/net.
Page 174 The following table has links to the procedures for adding and deleting a syslog server. To Add a Syslog Server [Wizard] To Delete a Syslog Server [Wizard] Use this form to configure system logging for the KVM/net. More advanced configuration of syslog servers and event notification can be done in Expert mode.
Page 175: Expert Mode
3. Click “apply changes.” Expert Mode To perform advanced configuration, click the Expert button at the bottom of the left menu to switch to Expert mode. The following figure shows a typical window in Expert mode. Top Menu Tab Area...
Page 176: Access
An option in the left menu (such as KVM in the preceding figure) often has several forms associated with it. Selecting a tab labeled with the name of the form or selecting the form’s name in the left menu brings up the form. Note: Procedures in this manual use shortcuts to tell how to get to Web Manager forms.
Page 177: Connect To Server
See the following sections for details about the tasks performed using the forms under Access in Expert mode. • “Connect to Server” on page 161 • “IPDU Power Management” on page 161 For instructions for forms that allow the regular user to connect to ports on the KVM/net to administer connected devices and perform power management, see Chapter 5: Web Manager for Regular Users.
Page 178: Outlets Manager
You can manage power when the following two prerequisites are completed: • An AlterPath PM is connected to an AUX port on the KVM/net. The AlterPath PM can be daisy chained to allow you to manage power for up to 128 devices from the KVM/net.
Page 179: To View Status, Lock, Unlock, Rename, Or Cycle Power Outlets
An orange “Cycle” button is active next to each outlet that is on. 2. To switch an outlet on or off, click the adjacent light bulb. 3. To lock or unlock an outlet, click the adjacent padlock.
Page 180: View Ipdus Info
4. To momentarily power an outlet off and then on again, click the adjacent “Cycle” button. 5. To change the outlet’s name or the power up interval, click the adjacent “Edit” button. The Edit Outlet dialog box appears. a. To change the name assigned to the outlet, enter a new name in the “Outlet Name”...
Page 181: To View And Reset Ipdu Information
• Alarm threshold levels • Firmware version You can also clear values for the maximum current and the maximum temperature. Figure 4-13:Power Management - View IPDUs Info Form To View and Reset IPDU Information 1. In Expert mode, go to Access>IPDUPower Management>View IPDUs Info.
Page 182 To Configure Users to Manage Specific Power Outlets 1. In Expert mode, go to Access>IPDUPower Management>Users Manager. The “Users Manager” form appears. 2. To remove a user’s ability to manage power, select the username and click “Delete.” 3. To edit a user, select the username from the view table and click “Edit.” Skip to Step 5.
Page 183: Configuration
5. In the “Add/Edit User x Outlets” dialog box, do the following as appropriate. a. Enter the username in the “User” field. b. Enter or modify the numbers of the outlets to which the user is assigned in the “Outlets” field. Use a comma to separate outlet numbers, and use a hyphen to indicate a range of outlets (for example: 1, 3, 6, 9-12).
Page 184 Figure 4-15:Power Management - Configuration Form To Specify or Change the Alias of an IPDU 1. In Expert mode, go to Access>IPDUPower Management>Configuration. The Configuration form displays entries for all ports configured for power management. 2. In the Name field, enter the alias of the IPDU. 3.
Page 185: Software Upgrade
To Upgrade Firmware on an AlterPath PM 1. Contact the Cyclades FTP server, and if a more recent version of the firmware is available, download the updated firmware onto a computer with a direct connection to the KVM/net.
Page 186: Kvm
Configuration Figure 4-17:KVM Configuration General Form See the following sections for details about the tasks performed using the forms under Configuration in Expert mode: • “KVM” on page 170 • “Configuring Inband (RDP) Servers” on page 199 • “Security” on page 204 •...
Page 187: General
You can use the KVM menu options for custom configuration of KVM ports. The following table provides links to the sections where the options are described. Web Manager Form General Devices Users & Groups General Selecting Configuration>KVM>General in Expert mode brings up the form shown in the following figure.
Page 188: General
The following table provides links to the sections that describe how to use the forms under Configuration>KVM>General in Expert mode. General User 1 , User 2, and IP Users General On the General form under Configuration>KVM>General in Expert mode, you can specify the parameters shown in the following table, which offers cross-references to where you can find more information on each parameter.
Page 189: Enabling Direct Access To Kvm Ports
Parameter Name Definition Port Authentication Allows you to choose an authentication method for “Direct Access” only. Note: To enable the port authentication drop-down menu, activate the “Direct Access” option. Enabling Direct Access to KVM Ports When direct access to KVM ports is enabled, users authorized to access KVM ports can use a port field on the Web Manager login screen to log in and connect directly to the port.
Page 190 The following table summarizes the format of the hot keys for KVM connections, the defaults, and where they can be redefined. Common Escape Sequence “Ctrl” + Format “letter key” Ctrl+k Defaults To Redefine KVM Session Keyboard Shortcuts 1. Go to Configuration>KVM>General in Expert mode. The General form appears.
Page 191: Redefining Sun Keyboard Modifier Keys
4. On the “User 1”, “User 2”, or “IP Users” tab, redefine the command keys, if desired, in any of the following fields: “Quit,” “Power Management,” “Mouse/Keyboard Reset,” “Video Control,” “Switch Next,” “Switch Previous,” “Port Info.” 5. Click “apply changes.”...
Page 192: Local Users And Ip Users
Configuration Note: The Port Authentication drop-down menu is disabled by default. To enable, activate the “Direct Access” check box on the KVM > General form. If the “Direct Access” check box is greyed out, you need to modify the security profile to Open, or select the Custom security profile and enable “Access to KVM Ports”...
Page 193 Configuration Figure 4-18:KVM Configuration User 1/User 2/IP Users Form On the “User 1” form under Configuration>KVM>General in Expert mode you can redefine the default session parameters that apply when a user (called the Local User) is using the OSD through a direct connection to the KVM. On the “User 2”...
Page 194 The following tables describes the parameters that appear on the User 1 and User 2 forms. Table 4-4: User 1 and User 2 forms parameters Field Name Idle Timeout (min) Screen Saver Timeout (min) Keyboard Type Cycle Time Escape Sequences The following tables describes the parameters that appear on the IP Users form.
Page 195 Table 4-5: IP Users form parameters Field Name Idle Timeout (min) TCP Viewer Ports IP Security Escape Sequences To Configure Local User 1 and User 2 Sessions Perform this procedure if you want to redefine the parameters that apply to KVM port sessions when a local user is directly logged in to the KVM/net.
Page 196 Time” field. 8. To change any of the command key portions of KVM hot key combinations, enter a different letter in the “Quit,” “Power Management,” “Mouse/Keyboard Reset,” “Video Control,” “Switch Next,” “Switch Previous,” or “Port Info” fields. 9. Click “apply changes.”...
Page 197 5. To change any of the command key portions of KVM hot key combinations, enter a different letter in the “Quit,” “Power Management,” “Mouse/Keyboard Reset,” “Video Control,” “Switch Next,” “Switch Previous,” or “Port Info” fields. 6. Click “apply changes” to complete the procedure.
Page 198: Devices
Configuration Devices Selecting Configuration>KVM>Devices in Expert mode brings up the form shown in the following figure. Figure 4-19:KVM Device Configuration Form The device name “master” stands for the KVM/net, which is the master KVM unit in a cascaded configuration. Other device names may appear below “master”...
Page 199: Configuring Individual Kvm Ports
Configuring Individual KVM Ports On the Modify Port dialog box, you can do the following: • Configure an alias for a single KVM port • Assign a Lockout Macro to the KVM connected server • Configure power management for the server that is connected to the KVM port while the user is logged in to the server •...
Page 200 IPDU connected to the cascaded KVM to servers connected to the master KVM/net. The following error message appears if you try to configure a master KVM port with the slave connected IPDU. • If the KVM port is on the cascaded device, for example Slave-1, the power outlets can be assigned from the IPDUs connected to the master KVM/net or from the IPDUs connected to Slave-1.
Page 201 3. Select the port you want to modify and click the Modify button. The Modify Port dialog box appears. 4. In the Alias field, type an alias for the port 5. In the Lockout Macro field, enter the key sequence assigned to lock the server.
Page 202 To Specify or Change the Alias for a KVM Port 1. Go to Configuration>KVM>Devices in Expert mode, select the device that includes the port(s) you wish to modify. 2. Click the “Ports” button. A list of all the selected ports appears. 3.
Page 203: Configuring Cascaded Kvm Units
Configuring Cascaded KVM Units The Devices form allows you to configure one or more secondary KVM units to a primary KVM unit, a process also known as cascading or daisy-chaining. See “Cascaded Devices” on page 21 for background information. Selecting Configuration>KVM>Devices in Expert mode brings up the Devices form on which you can perform the following tasks.
Page 204 2. Click the Add Device button. The Modify Device dialog box appears. 3. In the Device Name field, specify a name for the secondary device or KVM unit. 4. In the Number of Ports field, enter the number of ports contained in the cascaded device.
Page 205 Note: See “Connecting Cascaded KVM Units to the Primary KVM/net” on page 126 for a background on the possible devices that can be cascaded and for instructions on connecting these devices to the master KVM/net. 6. In the Port Connected to User 1 or (KVM) or A (Expander) drop-down list, enter the secondary KVM port that is connected to the User 1 port of the primary KVM/net or the User A port on the Expander.
Page 206 3. In the Number of Ports field, enter the number of ports contained on the cascaded device. 4. To enable one user to access the ports on the cascaded KVM unit, in the KVM Port Connected to User 2 (KVM) or B (Expander) drop-down list, select the port number on the master KVM/net that is connected to the User 2 port on the secondary KVM device or the B port on the Expander.
Page 207: Users & Groups
To Delete the Configuration of a Cascaded KVM Unit 1. In Expert mode, go to: Configuration>KVM>Devices. The Devices form appears. 2. Select the item you wish to delete and click the Delete button. The system deletes the selected device. 3. Click “apply changes” to save your configuration. Users &...
Page 208 Figure 4-20:KVM Users & Groups Configuration Form You can use the Users & Groups form to do the following: • Add or delete users. • Assign or change user passwords. • Reset the permissions of the Generic User. Note: Permissions assigned to the Generic User define the default permissions for regular users.
Page 209 Optional. The default shell when the user makes an ssh or telnet Shell connection with the switch. Choices are: sh or bash. The default is Optional notes about the user’s role or configuration. Comments Web Manager for Administrators...
Page 210 4. Click OK. 5. Click “apply changes.” To Delete a User or Group [Expert] 1. In Expert mode, go to Configuration>Users & Groups. The Users & Groups form appears. 2. Select the name of a user or group to delete. 3.
Page 211 5. Click OK. 6. Click “apply changes.” To Modify a Group 1. In Expert mode, go to Configuration>Users & Groups. The Users & Groups form appears. 2. Select the name of a group to modify. 3. Click “Edit.” The “Edit Group” form appears. 4.
Page 212 3. To set KVM port access permissions for a group, select the name of the group from the Group List. 4. Click the “Set KVM Permissions” button. The “KVM Access list for “username” or “groupname” dialog box appears. Note: When the “Default Access List” check box is checked, the user or group has the same permissions that are assigned to the Generic User.
Page 213 4. Select the desired access option from the “Default Permission:” drop-down list. As shown in the previous screen example, the options are: “No access,” “Read only,” “Read/Write,” “Full access.” 5. To configure access to a device and all of its ports, do the following: a.
Page 214 Configuration In the fields for each desired category, type either port aliases or numbers, separating them either by commas or dashes. 7. Click OK. The newly set permissions appear next to the Device name in the Permissions column, as shown in the following screen example, which shows the restrictions applied to the user name “johnr.”...
Page 215: Configuring Inband (Rdp) Servers
Configuration 8. Click OK. 9. Click “apply changes.” Configuring Inband (RDP) Servers Selecting Configuration>Inband in Expert mode brings up the form displayed in the following figure. Figure 4-21:Inband Configuration Form You can use the Add, Edit, and Delete buttons to configure inband server connections to Windows Terminal Servers using RDP.
Page 216: Prerequisites For Inband Access To Rdp Servers
whole infrastructure (master and cascaded devices). Even though it is possible to configure a KVM port on the master or on any cascaded device for each inband server, all inband configuration and connections are done through the master KVM/net. For more complete access and as a backup to inband connection failures, inband servers can also be connected to KVM ports on the KVM/net.
Page 217 See “To Connect Computers to KVM Ports” on page 80 for instructions on physically connecting a server to a KVM/net port. Note: RDP connections does not work if IPSec is used to communicate with a RDP enabled server. NAT is used when a connection is established from the workstation to a RDP enabled server.
Page 218 The connected server must be a Windows (Win2000 or NT) Terminal Server with RDP enabled. 3. To modify a server, select the server on the list and click Modify. 4. In the Server Name field, specify a unique name for the inband server. This name will appear in the drop-down list on the Connect to Server form.
Page 219 This enables both inband and out-of-band access to the connected server. If the inband connection fails or if an RDP session already exists, the user is able to reconnect to the server using a KVM connection. This also enables users to view the BIOS, POST, and boot messages for server administration.
Page 220: Security
12.To connect to the inband server, in Expert mode, go to Access>Connect to Server. See “To Connect to Servers Through The Web Manager’s “Connect To Server” Form” on page 322. To Delete an inband (RDP) Server 1. In Expert mode, go to: Configuration>Inband. The Inband form appears.
Page 221: Configuring An Authentication Method
Configuring an Authentication Method Configuration>Security>Authentication in Expert mode brings up the form shown in the following figure. Pull-down Menu of Authentication Methods Figure 4-22:Authentication Configuration Form The administrator uses the Authentication forms for two main purposes: • To select an authentication method for the KVM/net only. The default authentication method for the KVM/net is Local.
Page 222 Any authentication method chosen for the KVM/net is used for authentication of any users attempting access through telnet, ssh, or the Web Manager. See “Authentication” on page 45 for more details. • To configure all authentication servers for the KVM/net ports. The administrator fills out one of the tabbed forms to set up an authentication server for each authentication method to be used by the KVM/net and by any of its ports: RADIUS, TACACS+, LDAP, Kerberos,...
Page 223 3. Make sure that an authentication server is specified for the selected authentication type. See “Configuring Authentication Servers for Logins to the KVM/net and Connected Devices” on page 208. To Configure an Authentication Method for KVM Port Logins This procedure configures a single authentication method that applies whenever anyone attempts to log in to a device through a connected KVM port.
Page 224: Configuring Authentication Servers For Logins To The Kvm/Net And Connected Devices
Configuring Authentication Servers for Logins to the KVM/ net and Connected Devices The administrator fills out the appropriate form to set up an authentication server for every authentication method to be used by the KVM/net and by any of its ports. The available authentication methods are RADIUS, TACACS+, LDAP, Kerberos, SMB/NTLM, and NIS.
Page 225: Group Authorization
Group Authorization Group authorization adds an additional level of system security by enabling a network-based authorization in addition to the initial authentication. A group information retrieval from the TACACS+, RADIUS, LDAP, and NTLM authentication servers enables authorization in addition to authentication.
Page 226 of the KVM/net and connected devices know the passwords assigned to the accounts: • An account for “admin” • If Kerberos authentication is specified for the KVM/net, accounts for all users who need to log in to the KVM/net to administer connected devices. •...
Page 227 Configuration 4. Go to Security > Authentication> Kerberos in Expert mode. The Kerberos form displays as shown in the following figure. Figure 4-24:Kerberos Server Authentication Form 5. Fill in the form according to your local setup of the Kerberos server. 6.
Page 228 To Identify an LDAP Authentication Server Perform this procedure to identify the authentication server when the KVM/ net or any of its ports is configured to use the LDAP authentication method or any of its variations (LDAP, Local/LDAP, LDAP/Local, or LDAP/ DownLocal).
Page 229 LDAP server is “o,” then replace dc in the base field with o, as in o=value,o=value. 4. Replace the default base name with the name of your LDAP domain. For example, for the LDAP domain name cyclades.com, the correct entry is: dc=cyclades,dc=com. 5. Enable “Secure LDAP”, if required.
Page 230 Configuration To Configure Group Authorization on a LDAP Server On the LDAP server edit the “info” attribute for the group and add the following syntax. info: group_name=<Group1>[,<Group2>,...,<GroupN>]; To Configure an SMB(NTLM) Authentication Server Perform the following to identify the authentication server if any of the ports is configured to use the NTLM (Windows NT/2000/2003 Domain) authentication method or NTLM/Downlocal.
Page 231 MMC Snap-in for adding the attribute "info" to the objectclass "Users”, and the ADSI Edit MMC Snap-in to edit the property "comment" as "group_name=<Group1> [,<Group2,...,GroupN>]; 1. Install the tools from the Windows Administration Pack. 2. Select [Start] > [Run] from the windows desktop. 3.
Page 232 You will see the path "Domain NC[domain.com]. 3. Double click "Domain NC[domain.com]. You will see expanded path "DC=xxx,DC=xxx,DC=com". 4. Double click "DC=xxx,DC=xxx,DC=com". You will see the expanded classes "CN=Builtin, ..." 5. Double click "CN=Users". You will see the expanded users list. 6.
Page 233 Configuration Figure 4-27:NIS Server Authentication Form 2. Fill in the form according to your configuration of the NIS server. 3. Click “Done.” 4. Click “apply changes.” To Identify a RADIUS Authentication Server Perform this procedure to identify the authentication server when the KVM/ net or any of its ports is configured to use the RADIUS authentication method or any of its variations (Local/RADIUS, RADIUS/Local, or RADIUS/ DownLocal).
Page 234 Figure 4-28:Radius Server Authentication Form 2. Fill in the form according to your local setup of the RADIUS server or servers. 3. Click “Done.” 4. Click “apply changes.” The changes are stored in /etc/raddb/server on the KVM/net. To Configure Group Authorization on a RADIUS Server 1.
Page 235 To Identify a TACACS+ Authentication Server Perform this procedure to identify the authentication server when the KVM/ net or any of its ports is configured to use the TACACS+ authentication method or any of its variations (Local/TACACS+, TACACS+/Local, or TACACS+/DownLocal). 1.
Page 236: Group Authorization On Tacacs
have administrative access, and users with regular user privileges have regular user access. 4. To specify a time out period in seconds for each authentication attempt, type a number in the “Timeout” field. If the authentication server does not respond to the client’s login attempt before the specified time period, the login attempt is cancelled.
Page 237: Security Profiles
To Configure Group Authorization on a TACACS+ Server 1. On the server, add “raccess” service to the user configuration and define which group or groups the user belongs to. user = usergroup1 { service = raccess { group_name = <Group1>[,<Group2>,...,<GroupN>]; 2.
Page 238: Custom Security Profile
The following table show the enabled protocols and services under each Security Profile. Table 4-6: Enabled Protocols and Services under each Security Profile Security Profile SSH Access • SSHv2 Secured • SSHv1 Moderate • SSHv2 (Default) • SSH root access •...
Page 239 Table 4-7: Available Protocols and Services under the Custom Security Profile Security Profile SSH Access • SSHv1 Custom • SSHv2 SSH Options •SSH • allow root access allow Direct Access to KVM Ports To Select or Configure a Security Profile [Expert] Selecting Configuration>Security>Profiles brings up the form shown in the following figure.
Page 240 1. Select a pre-defined Security Profile or click on the “Custom” button to configure individual protocols and services. The following “Custom Profile” dialog box opens. Figure 4-31: Custom Security Profile Dialog Box Caution! Take the required precautions to understand the potential impacts of each individual service configured under the "Custom"...
Page 241 3. Select “apply changes” to save the configuration to Flash. KVM/net Web Manager restarts. 4. Login after Web Manager restarts. 5. The Web Manager defaults to Access > Connect to Server form. Proceed to the desired forms and the related tasks outlined in the table below. Table 4-8: Configuring KVM/net in Expert Mode Security Configure Users and Groups Configure Network Settings...
Page 242: Network
Network Selecting Configuration>Network in Expert mode brings up the following form. Figure 4-32:Host Settings Configuration Form Network configuration comprises eight forms: Table 4-9: Network Forms Form Use this form to: Configure host connections, Host Settings including: Ethernet Port connections, DNS Service, and Name Service Access.
Page 243 Table 4-9: Network Forms (Continued) Form Use this form to: Configure the selective filtering of IP Filtering packets that may potentially crack your network system or generate unnecessary traffic. Configure IPsec tunnels to establish a secure connection between KVM/net and a security gateway machine. Configure the SNMP server to SNMP manage complex networks.
Page 244: To Configure Host Settings [Expert]
Host Settings When Configuration>Network>Host Settings is selected in Expert mode, the form shown in the following figure appears. To Configure Host Settings [Expert] The Host Settings form allows you to configure the network settings for the KVM/net. 1. Go to Expert>Network>Host Settings. The Host Settings form appears.
Page 245 3. Complete or edit the fields described in the following table as necessary. Table 4-10: Host Settings Configuration Fields Field Name Host Name Console Banner Ethernet Port Primary IP Network Mask Secondary IP Secondary Network Mask DNS Service Primary DNS Server Secondary DNS Server Web Manager for Administrators Definition...
Page 246 Table 4-10: Host Settings Configuration Fields (Continued) Field Name Domain Name Gateway IP 4. Select “apply changes” when done to save your configuration to flash. Definition The name that identifies the domain (for example, domainname.com). The gateway numeric identification number. AlterPath KVM/net Installation, Administration, and User’s Guide...
Page 247: Syslog
Configuration Syslog When Configuration>Network>Syslog is selected in Expert mode, the form shown in the following figure appears. Figure 4-33:Syslog Configuration Form You can use the Syslog form to configure how the KVM/net handles syslog messages. The Syslog form allows you to do the following: •...
Page 248 The top of the form is used to tell the KVM/net where to send syslog messages: • You can specify one facility number for messages from AUXports and another facility number for messages from KVM ports. Obtain the facility numbers to use from the syslog server’s administrator. See “To Add a Syslog Server [Wizard]”...
Page 249: Ip Filtering
Configuration IP Filtering Selecting Configuration>Network>IP Filtering in Expert mode brings up the IP Filtering form as shown in the following figure. Figure 4-34:IP Filtering Configuration Form You can use the IP Filtering form to filter traffic to and from the KVM/net and block traffic according to rules you define.
Page 250 Configuration Inverted Check Boxes If you check the “Inverted” check box on any line, the target action is performed on packets that do not match any of the criteria specified in that line when any other specified criteria are also met. For example, if you select DROP as the target action, check “Inverted”...
Page 251 Configuration Source or Destination IP and Mask If you fill in the “Source IP” field, incoming packets are filtered for the specified IP address. If you fill in the “Destination IP” field, outgoing packets are filtered for the specified IP address. If you fill in either “Mask”...
Page 252 The following table defines the fields and menu options in the “TCP Options ” Section. Field/Menu Option Source Port - OR - Destination Port -AND- TCP Flags UDP Protocol Fields If you select UDP as a protocol when specifying a rule, the additional fields shown in the following figure appear at the bottom of the form.
Page 253 The following table defines the fields in the UDP Options Section. Field Source Port - OR - Destination Port -AND- ICMP Protocol Fields If you select ICMP as a protocol when specifying a rule, the ICMP Type drop- down list appears in the ICMP Options Section at the bottom of the IP Filtering form.
Page 254 Input Interface, Output Interface, and Fragments If you enter an interface (such as eth0 or eth1) in the “Input Interface” field, incoming packets are filtered for the specified interface. If you enter an interface in the “Output Interface” field, outgoing packets are filtered for the specified interface.
Page 255 The following table defines the menu options, field, and check boxes in the “LOG Options Section.” Field or Menu Name Log Level Log Prefix TCP Sequence TCP Options IP Options REJECT Target If you select REJECT from the Target drop-down list, the following drop- down list appears Any “Reject with”...
Page 256: To Add A Chain
Firewall Configuration Procedures The following table has links to the procedures for defining packet filtering: To Add a Chain To Edit a Chain To Edit a Rule for IP Filtering To Add a Packet Filtering Rule To Add a Chain 1.
Page 257 Note:User-defined chains cannot be edited. 1. Go to Configuration>Network>Firewall Configuration in Expert Mode. 2. Select one of the default chains from Chain list, and then click the “Edit” button. If you select a user-defined chain, the following dialog box appears. If you select one of the default chains, the “Edit Chain”...
Page 258 2. Select a chain whose rule you want to edit. 3. Click the Edit Rule button. The Edit Rules form appears. Each line represents a rule for the selected chain. 4. Select the Chain you wish to edit from the Chain list, and click the Edit Rule button.
Page 259 To Add a Chain for IP Filtering 1. In Expert mode go to: Configuration>Network>IP Filtering. The IP Filtering configuration form appears. Each line in the list box represents a chain. For a definition or explanation of the field columns, refer to the introductory section of this procedure or to the field definitions for the Edit Rule dialog box, next section.
Page 260 5. Select OK to commit your changes. 6. To add rules to your new chain, see “To Add a Rule for IP Filtering” on page 244. To Edit A Chain for IP Filtering 1. In Expert mode go to: Configuration>Network>IP Filtering. The IP Filtering configuration form appears.
Page 261 Configuration 2. Click the Edit Rule button. The Edit Rules for Chain configuration form appears. 3. Click the Add button. Web Manager for Administrators...
Page 262 The Add Rule dialog box appears. 4. Complete the following data fields as necessary: Field Name Target Source IP Mask Inverted Destination IP Definition Indicates the action to be performed to the IP packet when it matches the rule. For example, the kernel can ACCEPT DROP, RETURN, LOG or REJECT the packet by sending a message, translating the source...
Page 263 Field Name Mask Inverted Protocol Inverted Input Interface Inverted Output Interface Web Manager for Administrators Definition Destination network mask. Select the check box adjacent to Destination IP to invert the target action. For example, the action assigned to the target will be performed to all Destination/ Mask IPs except to the one just defined.
Page 264 Field Name Inverted Fragments ICMP Type Inverted 5. Complete the following additional fields as necessary: • If you selected Log from the Target field, the following options also appear. Field Name Log Level Definition Select box adjacent to Output Interface to invert the target action.
Page 265 Field Name Log Prefix TCP Sequence TCP Options IP Options • If you selected Reject from the Target field, the following field appears: “Reject with” means that the filter drops the input packet and sends back a reply packet according to any of the reject types listed below. Using tcp flags and appropriate reject type, the packets are matched with the REJECT target.
Page 266: Vpn
Configuration VPN, or Virtual Private Network enables a secured communication between KVM/net and a remote network by utilizing a gateway, and creating a secured tunnel between KVM/net and the gateway. IPSec is the protocol used to construct the secure tunnel. IPSec provides encryption and authentication services at the IP level of the protocol stack.
Page 267 Configuration 2. To edit a VPN connection, select the VPN connection that you wish to edit from the form, and then select the Edit button. - OR - To add a VPN Connection, select the Add button. The New/Modify Connection dialog box appears. RSA Public Keys Shared Secret Web Manager for Administrators...
Page 268 Note: If the selected authentication method is RSA Public Keys, the dialog box on the left of the previous figure is used; if the authentication method is Shared Secret, the dialog box on the right is used. 3. Edit or complete the appropriate fields as follows. Field Name Connector Name Authentication...
Page 269: Snmp
Field Name Subnet RSA Key Public Keys is selected) Pre-Shared Secret “Shared Secret” is selected) Boot Action 4. Select the OK button when done. 5. Select the “apply changes” button to save your configuration. SNMP Short for Simple Network Management Protocol, SNMP is a set of protocols for managing network devices.
Page 270: To Configure Snmp
Configuration SNMP traps, a version of the Unix 'netstat' command using SNMP, and a Tk/ Perl mib browser. SNMP is configured with community names, OID and user names. The KVM/net supports SNMP v1, v2, and v3. The two versions require different configurations.
Page 271 2. Enter the following system information, as necessary: Field Name Community SysContact Web Manager for Administrators Definition The community name acts as a password to authenticate messages sent between an SNMP client and a router containing an SNMP server. The community name is sent in every packet between the client and the server.
Page 272 Field Name SysLocation If you are using SNMPv3, skip to Step 6. 3. To Add an SNMP agent using SNMPv1/SNMP2 Configuration, select the Add button located at the bottom of this view table. To edit an SNMP agent, select the Edit button. The New/Modify SNMP Daemon Configuration dialog box appears.
Page 273 Field Name Permission 5. If you are adding or editing an SNMP agent using SNMPv3, scroll down to the lower half of the SNMP Configuration form and select the Add button located at the bottom of this view table 6. To add an SNMP agent using SNMPv3, click Add. 7.
Page 274: Notifications
8. Complete the form and when done. Field Name Username Source Permission 9. Click the OK button. 10.Verify your entry or modification on the SNMP form. 11.Click “apply changes” to complete the procedure. Notifications The Notifications form allows you to configure the KVM/net to monitor and send notifications on the following system events by the way of SNMP traps.
Page 275 To Configure SNMP Traps 1. Go to Security>Profiles, click on Custom button to open the Custom Profile dialog box as shown below and enable SNMP service. 2. Go to Configuration>Network>Notifications. The following form appears. Web Manager for Administrators Configuration...
Page 276 Configuration 3. Click the “Add” button to open the Notifications Entry dialog box as shown in the following figure, and populate the fields per your site requirements. AlterPath KVM/net Installation, Administration, and User’s Guide...
Page 277 The following table describes the fields in the Notifications Entry dialog box. Table 4-11: SNMP Traps Notifications Entry Field Name Alarm Trigger OID Type Value Web Manager for Administrators Description Define the event you want to trigger a notification for. Object Identifier.
Page 278: Host Tables
Table 4-11: SNMP Traps Notifications Entry Field Name Trap Number Community Server Body Host Tables The Host Tables form enables you to keep a table of host names and IP addresses that comprise your local network, and thus provide information about your network environment.
Page 279 Figure 4-36:Host Tables Configuration Form 2. Do on of the following: • To edit a host, select the host IP address from the Host Table and then click the Edit button. If the list is long, use the Up and Down buttons to go through each item in the list.
Page 280: Static Routes
3. Enter the new or modified host address in the IP Address field and the host name in the Name field. 4. Click the OK button. 5. To delete a host, select the host you wish to delete from the Host Table form, and select the Delete button on the form.
Page 281 • To add a static route, select the Add button from the form. The New/Modify Route dialog box appears. 3. Complete the dialog box as follows: Table 4-12: Add/Modify Static Routes Fields Field Name Route Network IP Network Mask Host IP Go to Web Manager for Administrators Definition...
Page 282: Aux Port
Table 4-12: Add/Modify Static Routes Fields Field Name Field Adjacent to Go Metric 4. Click the Apply button to close the dialog box. The new or modified route appears in the list. 5. To delete a static route, select a route from the list and click Delete. 6.
Page 283 To Configure the AUX Port for Use With an IPDU or an External Modem 1. In Expert mode, go to: Configuration>AUX Port. The Aux Port form appears. 2. To configure the AUX Portfor Power Management, make sure that Power Management is selected in the Profile drop-down list. Note that the Aux port is enabled by default.
Page 284: System
Table 4-13: PPP Fields for Configuring the AUX Port (Continued) Field Name Stop Bits Modem Initialization Local IP Address Remote IP Address Authentication Required MTU/MRU PPP Options 6. Click “apply changes.” System Selecting Configuration>System in Expert mode brings up the System form as shown in the following figure.
Page 285: Time/Date
With the System form administrators can set the time and date on the KVM/ net and reboot the KVM/net if necessary. The following procedures are available on the System form: • “Creating a Custom Timezone Selection” on page 272 • “To Set The Time and Date With NTP” on page 270 •...
Page 286 To Set the KVM/net’s Date and Time Manually 1. In Expert Mode, go to: Configuration>System>Time/Date. The Date/Time form appears. 2. Make sure that Disabled is selected in the Network Time Protocol drop- down list. 3. Fill in the date and time fields by selecting the appropriate numbers from the drop-down lists.
Page 287: Setting Up Customized Timezone Configuration
Configuration 3. Enter the address of the NTP server in the NTP Server field. 4. Click the “apply changes” button. Setting up Customized Timezone Configuration The “Edit Custom” button next to the Timezone field allows you to set up a customized timezone function, such as for daylight savings time or any other timezone offset anomaly that might occur anywhere in the world.
Page 288 Configuration Creating a Custom Timezone Selection 1. Enter the name of the timezone you would like to appear in the Timezone pulldown menu on the main Time/Date screen. (“Pacific” entered here as an example.) 2. Choose the preferred or standard acronym for the timezone (“PST” is shown here for Pacific Standard Time).
Page 289: Boot Configuration
3. Enter the number of Hours:Minutes that the clock will be reset at the beginning of the Daylight Savings Time period. (Positive number only.) 4. In the following fields, enter the date (month, day) and time (hours:minutes) for both the beginning and ending dates of daylight time. 5.
Page 290 A TFTP or BOOTP server must be available on the network. • An upgraded KVM/net boot image file must be downloaded from Cyclades and available on the TFTP or BOOTP server. • KVM/net must be configured with a fixed IP address.
Page 291 Table 4-14: Boot Configuration Fields and Options (Continued) Field or Value Name Fast Ethernet Fast Ethernet Max Interrupt Events Web Manager for Administrators Description The speed of the Ethernet connection. Select the appropriate Ethernet setting if you need to change the Auto Negotiation (default value) 100BaseT Half-Duplex 100BaseT Full-Duplex 10BaseT Half-Duplex...
Page 292 To Configure KVM/net Boot For more information about the fields in the “Boot Configuration” form, see Table 4-14 on page 274, if desired. 1. Go to Configuration>System>Boot Configuration in Expert mode. 2. Enter the IP address of the KVM/net in the “IP Address assigned to Ethernet”...
Page 293: To Configure The Online Help Path
Figure 4-43:Online Help Configuration Form Cyclades host the online-help on a HTTP server accessible from the Internet. From any form in the Web Manager; pressing the “Help” button opens a new window and redirect its content to the configured path for the online help documentation.
Page 294: Viewing System Information
3. In the KVM/net Web Manager navigate to Configuration > System > Online Help in Expert mode. 4. In the “Online Help Path” field add the path to the online help directory on your local web server. If the online help path is ended with a “/”, when the user clicks on the “Help”...
Page 295: Station Status
To View General Information for Your KVM/net 1. In Expert mode, go to: Information>General. The General information form appears. Figure 4-44:General System Information Form Station Status Use the Station Status form to view the status of each KVM station on the KVM/net.
Page 296 To View Station Status 1. In Expert mode, go to: Information>Station Status. The Station Status form appears. Figure 4-45:KVM Station Status Information Form The following table describes the information displayed for each station on the Station Status form. Table 4-15: Station Status Information Field Station Connection Mode...
Page 297: Management
When connected to a port, displays the server name. When connected to a port, displays the type of switch, expander, and version number used. When connected to a port, displays the permissions the current user has on that port. When connected to a port and in Cycle Mode, this field displays the time in seconds that the system has been cycling.
Page 298 KVM Terminator, main AlterPath KVM RP, local AlterPath KVM RP, KVM Port Expander, KVM Video Compression Modules, and internal KVM/net switch. Reset any of the micro controller microcodes. AlterPath KVM/net Installation, Administration, and User’s Guide...
Page 299: Backup Configuration
Menu Selection Active Sessions Reboot Backup Configuration The Backup Configuration form allows you to set the KVM/net to use an FTP server to save and retrieve its configuration data. For the backup configuration to work, the FTP server must be on the same subnet as the KVM/net.
Page 300 The following table describes the information you need to enter in the fields on the “Backup Configuration” form when FTP is selected from the “Type” drop-down list. Field Definition IP address of the FTP server Server IP Path of a directory on the FTP server where you have write access for Path and saving the backup copy of the configuration file.
Page 301 To Back Up or Retrieve KVM/net Configuration Data 1. In Expert mode, go to: Management>Backup Configuration. The Backup Configuration form appears. 2. To save or retrieve data from an FTP server, do the following: a. From the Type drop-down list, select FTP. Selecting FTP (default) brings up the fields displayed in the following figure.
Page 302 • Server IP • Path and Filename • Username • Password 3. Click Save to save the configuration to the selected location. 4. Click Load to load the configuration from the selected location. 5. Click “apply changes.” 6. To run the loaded configuration, reboot the KVM/net. AlterPath KVM/net Installation, Administration, and User’s Guide...
Page 303: Firmware Upgrade
Management Firmware Upgrade Selecting Management>Firmware Upgrade in Expert mode brings up the form shown in the following figure. Figure 4-48:Firmware Upgrade You can use the form to set up operating system upgrade on the KVM/net. The form collects information used to download software from an FTP server and install it on the KVM/net.
Page 304 The address of the FTP server where the microcode is located. You can use FTP Site any FTP server if you download the firmware on it first. The Cyclades FTP site address is: ftp.cyclades.com. If desired, see “To Upgrade Firmware” on page 290 for instructions on how to download the firmware for installation on your own local FTP server.
Page 305 The following table has links to the related procedures. To Find the Cyclades Pathname for Firmware or Microcode Upgrades To Upgrade Firmware To Download Microcode From an FTP Server To Find the Cyclades Pathname for Firmware or Microcode Upgrades 1. To find the correct filename for the firmware or microcode updates at Cyclades, Corp., enter the following address in a browser:...
Page 306: To Upgrade Firmware
5. Enter the password associated with the username on the FTP server in the “Password” field. The Cyclades FTP server accepts any password for “anonymous” login. 6. Enter the pathname of the file on the FTP server in the “Path and Filename”...
Page 307 You can use the form to specify information used to automatically download microcode from an FTP server and install the microcode on various KVM/net components. You can specify either the Cyclades FTP server, ftp:// ftp.cyclades.com, or a local FTP server where you have previously downloaded the microcode.
Page 308 The address of the FTP server where the microcode is located. You can use FTP Server any FTP server if you download the firmware on it first. The Cyclades FTP site address is: ftp.cyclades.com. Username recognized by the FTP server. The Cyclades FTP username for Username microcode downloads is “anonymous.”...
Page 309 6. Enter the password associated with the username on the FTP server in the “Password” field. The Cyclades FTP server accepts an empty password for “anonymous” login. 7. Enter the pathname to the directory where the microcode resides on the FTP server in the “Directory”...
Page 310: Microcode Reset
Management 10.Click “apply changes.” 11.Go to “To Reset the Microcode After Upgrade” on page 294. Microcode Reset Selecting Management>Microcode Reset in Expert mode brings up the form shown in the following figure. Figure 4-50:Microcode Reset Form You can use the form to reset the microcode after an upgrade. To Reset the Microcode After Upgrade Perform this procedure if you have upgraded microcode as described in “To Upgrade Firmware”...
Page 311 2. To reset the microcode of a Target component, click the radio button for the Target component. If you select the KVM Terminator radio button, a scrollable port list appears next to the Target list. Select the port to which the KVM Terminator is connected from the port list.
Page 312: Active Sessions
Active Sessions The Active Sessions form is designed to provide you quick status and usage information pertaining to all active server sessions. Administrators may also kill sessions from this form. To View Active Sessions Information 1. In Expert mode, go to Management>Active Sessions. The Active Sessions window appears.
Page 313 Column From Login@ Idle JCPU PCPU What 3. Select the Refresh button to update the form with current information. To Kill an Active Session 1. In Expert mode, go to Management>Active Sessions. The Active Sessions window appears. 2. Select the sessions you wish to kill. 3.
Page 314: Reboot
Management Reboot Selecting Management>Reboot in Expert mode, brings up the following form. Figure 4-52:Reboot Form Selecting the Reboot button allows you to reboot the system without physically turning off the hardware. To Reboot the KVM/net From a Remote Location 1. In Expert mode, go to: Management>Reboot 2.
Page 315: Chapter 5: Web Manager For Regular Users
Chapter 5 Web Manager for Regular Users With the KVM/net Web Manager, regular users can, • Connect to PCs with USB or PS/2 connectors. • Connect to Sun servers with USB connectors through out-of-band. • Connect to Windows Terminal Servers through in-band connections. •...
Page 316: Web Manager For Regular Users
Web Manager for Regular Users When users without administrative privileges log in to the KVM/net, the Web Manager appears with three menu options: • Connect to Server – Form used to connect to servers with either an in-band or a KVM connection. See “Connecting to Servers Remotely Through the Web Manager”...
Page 317 Web Manager for Regular Users Main Menu User Entry Form Logout Button Help Button Figure 5-1:Example of Regular User Web Manager Form Web Manager for Regular Users...
Page 318: Prerequisites For Logging In To The Web Manager
Prerequisites for Logging in to the Web Manager You must collect the following information from your KVM/net administrator before accessing and logging into the KVM/net: • KVM/net IP address • Username • Password See the “Prerequisites for Accessing Servers With KVM Connections” on page 314.
Page 319 2. Enter your username and password as provided to you by your KVM/net administrator 3. Click Go. The “Connect to Server” form appears. Web Manager for Regular Users Prerequisites for Logging in to the Web Manager...
Page 320: Connect To Server
Connect to Server Use this form to connect to servers with either an in-band or a KVM connection. See “Connecting to Servers Remotely Through the Web Manager” on page 321. IPDU Power Management IPDU power management allows you to manage the outlets plugged into a PM that is configured on the KVM/net.
Page 321: Power Control Of Any Device Plugged Into An Alterpath Pm On The Kvm/Net
Web Manager and links to the associated procedures. Table 5-1: Power Management Tasks Available to Regular Users Task Switch on/off and lock/unlock outlets; reboot the network devices, and create an alias for an outlet. View IPDU information by ports on a master and a slave PM unit.
Page 322: Changing Your Kvm/Net Password
Changing Your KVM/net Password On the Security form on the KVM/net Web Manager, you can change your old password to a new password. To Change Your KVM/net Password 1. Log in to the Web Manager. 2. Select Security in the Main Menu. The Security Form appears.
Page 323: Chapter 6: Accessing Connected Devices
Chapter 6 Accessing Connected Devices With the KVM/net, users and administrators can connect to any PC or USB Sun servers through out-of-band, KVM connections and manage power of devices connected to AlterPath PMs from anywhere on a network with the Web Manager or locally with the OSD.
Page 324 The following table lists the procedures in this chapter. To Connect to a KVM Port Through the Web Manager Login Screen To Connect to Servers Through The Web Manager’s “Connect To Server” Form To Connect to Servers Through the OSD Connection Menu To Return to the Connection Menu After Connecting to a Port To View Connected Port Information To Initiate Cycle by Server...
Page 325: Who Can Access Connected Devices
Authorized users and KVM/net administrators have the following options for accessing connected devices: • Use the Web Manager for most connections to devices. See “Cyclades Web Manager” on page 18 and “Prerequisites for Using the Web Manager” on page 19 for background information about the Web Manager, if needed.
Page 326: Server Connections: What You See
Server Connections: What You See Once connected to a server, one or two windows appear depending on the type of server connection being made: • KVM connections • AlterPath Viewer is launched with the same interface as if you were directly logging into the connected server.
Page 327: Viewing Kvm Connections
Server Connections: What You See Viewing KVM Connections The AlterPath Viewer is the interface you use to manage servers over KVM over IP connections. Logins persist across connection sessions. If you close a connection without logging out, you are still logged in the next time you connect, unless the system has closed your session.
Page 328 Server Connections: What You See See “AlterPath Viewer Settings” on page 339 for more detailed information about using the AlterPath Viewer. Local KVM connections through the OSD do not use the AlterPath Viewer. Instead, the view of the connected server takes up the entire screen of local work station.
Page 329: Viewing In-Band Connections
Viewing In-band Connections The ActiveX viewer is the interface you use to manage servers over an in- band connection. The following graphic displays the login screen of a server running Windows 2003 in the ActiveX viewer for in-band connections. Figure 6-2:ActiveX Viewer for In-band Connections Prerequisites for Accessing Servers With In- band Connections A KVM/net user who needs to access any RDP server must have the...
Page 330: Prerequisites For Accessing Servers With Kvm Connections
Prerequisites for Accessing Servers With KVM Connections The following prerequisites must be met before you can access a KVM- connected server: • Know the KVM Port(s) to which you have access (specially if direct access to a port is configured) •...
Page 331: Screen Resolution And Refresh Rate
Depending on your server’s operating system refer to one of the following procedures. • “To Disable Mouse Acceleration [Windows XP/Windows 2003]” on page • “To Disable Mouse Acceleration [Windows 2000]” on page 106 • “To Disable Mouse Acceleration [Windows ME]” on page 107 •...
Page 332: Web Manager Login Screen
Web Manager Login Screen The following table list the sections that describe the three different possible views of the Web Manager login screen that can appear under various conditions. Table 6-2: Web Manager Login Screen Options Conditions Direct logins to KVM ports not enabled: •...
Page 333 Table 6-2: Web Manager Login Screen Options (Continued) Conditions Direct logins to KVM ports enabled (option 2): • You enter the KVM/net’s IP address along with the port name in a browser to bring up the Web Manager login screen. •...
Page 334: Login Screen: Direct Logins Not Enabled
Login Screen: Direct Logins Not Enabled The following screen shows an example of the Web Manager login screen as it appears if the following two conditions are true: • The IP address of the KVM/net is entered in the browser. •...
Page 335: Port Numbers Of Cascaded Kvm Devices In The Connect To Server Drop-Down List
connection only. An entry with “(In-band)” at the end of it can be accessed with an in-band connection only. An entry with “KVM + In-band”) can be accessed with both connection methods. See “Determining the Connection Type and its Supported Functionality” on page 31 for more detailed information.
Page 336: Login Screen: Direct Logins Enabled, Only Ip Address Entered
Login Screen: Direct Logins Enabled, Only IP Address Entered The following screen shows an example of the format of the Login portion of the Web Manager login screen as it appears if the following two conditions are true: • The IP address of the KVM/net is entered in a browser. •...
Page 337: Connecting To Servers Remotely Through The Web Manager
The “port” field is filled in with the port number when the Web Manager login window appears. The example in the following figure shows http://192.168.46.169/ login.asp?portname=Port_1 entered in the Address field of a Microsoft Internet Explorer browser. The login screen displays empty “username”...
Page 338 See the following procedures for connecting to servers: To Connect to a KVM Port Through the Web Manager Login Screen To Connect to Servers Through The Web Manager’s “Connect To Server” Form If needed, see one of the following login procedures. To Log In to the Web Manager as Admin To Log Into the KVM/net Web Manager as a Regular User To Connect to Servers Through The Web...
Page 339 3. From the drop-down menu, select the server or port to which you want to connect. A list similar to the list in the following graphic appears. See “Determining the Connection Type and its Supported Functionality” on page 31 for a description of each type of connection method and what happens once connected.
Page 340: To Connect To A Kvm Port Through The Web Manager Login Screen
The system may launch one or two browser windows: the AlterPath Viewer and the Access Window for KVM connections, or an ActiveX viewer for RDP connections. See “Server Connections: What You See” on page 310 for a description of each window. Note: The first time the system invokes the AlterPath Viewer, it prompts you to accept a security certificate.
Page 341: Connecting To Servers Locally Through The Osd
2. If you entered a KVM port ID in the URL, save the URL as a bookmark or in your favorites list in the browser. For future connections to that port, you can click on the bookmark or item in favorites list to easily bring up the Web Manager login screen again with the port number filled in.
Page 342: To Connect To Servers Through The Osd Connection Menu
on connecting to the User 1 port, or see “To Connect the KVM RP to the KVM/net” on page 131 for instructions on connecting to the User 2 port. Connections made through the OSD are to physically connected devices only. Use the Web Manager to connect to a remote device.
Page 343 • Type the first letters of the port name in the quick search box until the desired port is highlighted in the port list box. This field is case-sensitive. • Select the desired port using the port list box. 4. Press Enter. Your monitor displays the work station of the connected server.
Page 344: Controlling Kvm Port Connections
Controlling KVM Port Connections Once connected to a server, you may want do one or more of the procedures listed in the following table. Table 6-3: Tasks Available While Connected to KVM Ports Task Return to the OSD Connection menu after connecting to a port.
Page 345: Hot Keys For Kvm Connections
Table 6-4: Default KVM Connection Keyboard Shortcuts Key Combination Action Ctrl+k q Brings up the port connection list so you can switch ports. If you press "Esc", you will get disconnected. You can press "Enter" after selecting a different port, "Cycle", or "Exit". Ctrl+k p Power management.
Page 346: Hot Keys For Emulating Sun Keyboard Keys
Hot Keys for Emulating Sun Keyboard Keys The KVM/net provides a default set of hot keys for use while connected to Sun servers. You can use the PC keyboard to emulate keys that are present on Sun keyboards but are not available on PC keyboards. The hot keys are made up of a modifier key followed by a function key.
Page 347: To Return To The Connection Menu After Connecting To A Port
See “Redefining Sun Keyboard Modifier Keys” on page 175 for [Alt]. procedures. To Return to the Connection Menu After Connecting to a Port 1. Press Ctrl+k q to display the OSD Connect Menu. The Connection Menu appears. 2. Do one of the following: •...
Page 348: Cycling Between Servers
Cycling Between Servers Cycle refers to the capability to connect to one or more authorized servers from the server to which you are currently connected. Through the OSD menus or by using a keyboard shortcut, you have immediate access to all configured and authorized servers.
Page 349: To Connect To The Previous Authorized Server From The Current Server
The default is Ctrl+k q. To Connect to the Next Authorized Server from the Current Server • Use the Next keyboard shortcut. The default is Ctrl+k . The next authorized server appears. Repeat this step to move to the next server.
Page 350: To Reset The Keyboard And Mouse
2. To switch to the Auto control window or the Manual control window select Auto or Manual respectively. 3. To adjust screen brightness on the Automatic Control window, select the right or left arrows to set the desired adjustment value.The Automatic Control window is used to compensate for cable length.
Page 351: Controlling Power Of A Kvm-Connected Server
Controlling Power of a KVM-connected Server In order to control power of a server while connected to the server, the following conditions must be met: • The server must have at least one power cord plugged into an AlterPath PM that is properly configured and connected to the AUX port. •...
Page 352: Closing A Kvm Connection
Closing a KVM Connection The ways you can close a KVM connection are listed below: • For IP connections, select “Exit Viewer Client” from the AlterPath Viewer Shortcuts menu. • Use a hot key sequence (Ctrl+k q) to bring up the Connection menu, then select the Exit option.
Page 353 the connecting user’s access permissions. The following figure shows two options that are always presented on the menu to the connecting user. The two menu options are described in the following table. Quit this session Connect read only Accessing Connected Devices Ends the connection attempt and returns the user to the Connection Menu Connects the user in read-only mode and sends this notice to the...
Page 354 If the connecting user has either read-write, or full access permissions for the KVM port, additional menu options appear, as shown in the following figure. The two menu options are described in the following table. Connect read write Kill other session When the current user is in read only mode, the connecting user is always granted the highest level of access for which the connecting user is authorized.
Page 355: Alterpath Viewer Settings
AlterPath Viewer Settings You can configure the AlterPath Viewer settings from the top menu. For a definition of the menu settings, refer to the tables below. A T1 connection is recommended for best performance when using the AlterPath Viewer. Recommended Settings The recommended AlterPath Viewer settings are listed in the following table.
Page 356: Options Menu
Options Menu The following table describes the items in the AlterPath Viewer’s Options menu, which you can change as needed for your own requirements. Menu Selection Force Screen Refresh Force Screen Auto Alignment Toggle Full Screen Viewer Options Show Frames/sec and Network bits/sec Auto Sync Mouse Show Startup Dialog...
Page 357: Setting The Viewer Options
Setting the Viewer Options The Viewer Options window allows you to align or position the viewer window and to fine tune the image. The configuration for these settings may vary from one system to another. Figure 6-3:AlterPath Viewer Options Screen The following table defines the fields and menu items.
Page 358: Connection Menu
Table 6-6: AlterPath Viewer>Options>Viewer Options Menu (Continued) Field or Menu Item Image Sensitivity Tint Brightness Cable Length Adjustment Connection Menu The following table describes the Connection menu options. Menu Selection Low BW LAN Auto Encrypt Everything Encrypt Keyboard and Mouse Function Move slider to the right to increase the image sensitivity.
Page 359: Power Management
Menu Selection Encryption Type No Encryption High Color Low Color Grey Scale Low Grey Scale Power Management Administrators and authorized users can access Power Management windows, which allow you to check the status of the master IPDU connected to the AUX port in addition to all cascaded IPDUs, from the Web Manager and the OSD.
Page 360 To Power On, Power Off, Lock, Unlock, or Cycle Devices Plugged into PM Outlets 1. Go to: Configure > Power Management. The Outlet Status page appears with a list of all configured IPDUs. The status column displays whether the outlet is on or off, locked, or unlocked. The letter U displayed in the status window indicates that the outlet is unlocked;...
Page 361 An outlet that is turned off and unlocked displays the On, Lock, and Cycle options as in the following figure. 3. Use the arrow keys to select On, Off, Lock, Unlock, or Cycle and press <Enter>. 4. Select the arrow button and press <Enter> to return to the Power Management menu.
Page 362: Modem Connections
Modem Connections In addition to connecting to the KVM/net through a regular Ethernet connection, you can also access the KVM/net by dialing in through an installed external modem.Use PPP when dialing into any of the supported modems. Once the connection is made, all connections to the specified IP address are made through the PPP connection.
Page 363: To Configure A Ppp Connection On A Remote Computer
To Configure a PPP Connection on a Remote Computer Perform this procedure on a remote computer with a modem to do the following: • Create a PPP connection that anyone can use for dialing up the KVM/net • Optionally configure call back. See the prerequisites listed in “Modem Connections”...
Page 364: To Make A Ppp Connection From A Remote Computer
9. Type the username for accessing the KVM/net in the “Username” field. 10.Type the password for accessing the KVM/net in the “Password” and “Confirm Password” field and click “Next>.” 11.Click the “Finish” button. The “Connect connection_name” dialog appears. 12.Click the “Cancel” button. The name of the connection appears on the Network Connections”...
Page 365 1. From the Start menu, go to My Computer>My Network Places. 2. Under “Network Tasks,” click “View network connections.” 3. Double-click the name of the connection in the list. The “Connect connection_name” dialog appears. 4. Type the username and password in the “Username” and “Password” fields.
Page 366 Modem Connections AlterPath KVM/net Installation, Administration, and User’s Guide...
Page 367: Chapter 7: On Screen Display
Chapter 7 On Screen Display Administrators and regular users can use the OSD for troubleshooting when a direct connection method is required. However, most configuration and operations tasks are performed through the Web Manager. Access to the OSD requires a local keyboard, monitor, and mouse connected to the KVM management ports, User 1 or User 2, on the back of the KVM/net.
Page 368: Navigating The Osd
Navigating the OSD In the OSD you can use keyboard sequences to navigate the windows and make menu selections. The following sections describe: • Basic Navigation Keys • Common Navigation Actions Basic Navigation Keys The following table displays a short list of keyboard controls to help you navigate the KVM/net on screen display.
Page 369: Common Navigation Actions
Common Navigation Actions Table 7-2 shows how to perform common actions used to go to windows, select items, and commit changes in the OSD. Table 7-2: OSD Equivalents for Common Actions Action Select OK Save changes Select an option Go to a specific window, as in: Go to Configure>Users and Groups.”...
Page 370: Osd Main Menu
To Log into the KVM/net Through the OSD Type your username followed by your password. 1. Press <Enter>. The main menu of the KVM/net OSD appears. See the following section, “OSD Main Menu” on page 354 for a description of the OSD Main Menu items.
Page 371: Invoking Osd Using [Printscreen] Key
Table 7-3 gives a brief description of each menu item and lists where you can find more information. Table 7-3: OSD Main Menu Items Menu Selection Connect Power Management Configure System Info Reboot Exit Invoking OSD Using [PrintScreen] Key The [PrintScreen] keyboard button can be used instead of the escape sequences [^K-n] to invoke an OSD menu overlay when a local KVM connection or a KVM-over-IP connection is established with a server.
Page 372: Connection Menu
3. Select from the available options and press [Enter]. 4. To close the menu press the [Esc] or [PrintScreen] button on the keyboard. Note: If you are an administrator and are connected locally through one of the user ports on the KVM/net, the “Main Menu” option closes the connection and returns to the OSD main menu.
Page 373: Power Management Menu
Power Management Menu The Power Management windows allow you to check the status of the master AlterPath PM connected to the AUX port in addition to all cascaded PMs. Any user who has administration privileges can turn on, turn off, cycle (reboot), lock, and unlock the outlets.
Page 374: Configure Menu Overview
The available action options at the bottom of the window change depending on the status of the outlet. For example, an outlet that is locked displays only the Unlock option as in the following figure. An outlet that is turned off and unlocked displays the On, Lock, and Cycle options as in the following figure.
Page 375 Not all the options are visible. Table 7-4 gives a brief description of all the menu options and lists where you can find more information Table 7-4: Configuration Menu Items Menu Selection Select the menu item to: Configure authentication type for direct General logins to KVM ports;...
Page 376 Table 7-4: Configuration Menu Items (Continued) Menu Selection Select the menu item to: Configure the AUX port for PPP or power AUX Port management. Configure users and groups, user Users and passwords, and KVM port access Groups permissions. Add, edit, or delete configurations of Cascade cascaded (slave) KVM units.
Page 377: Understanding Osd Configuration Screen Series
Configure Menu Overview Understanding OSD Configuration Screen Series Selecting an option from the “Configure” menu usually brings you through a series of related screens, which you navigate through one at a time until you reach the final screen. For example, if you select Date/Time, you are presented with a series of “Date/time Config.”...
Page 378: General Configuration Screens [Osd]
General Configuration Screens [OSD] You can select the General option on the OSD Configuration Menu to configure several general features of the KVM/net, which are introduced under “General” on page 359. Selecting Configure>General from the OSD Main Menu brings up the Authentication type screen, which is the first in a series of configuration screens that appear in the sequence shown in the following table.
Page 379 Table 7-5: General Configuration Screens [OSD] (Continued) Screen Syslog Facility Escape Sequence Sun Keyboard IP Security Level 3DES On Screen Display Description The syslog facility number that is used by the administrator of the syslog server to identify messages generated by devices connected to the KVM ports.
Page 380 Table 7-5: General Configuration Screens [OSD] (Continued) Screen Direct Access TCP Port Viewer TCP RDP Ports Note: The Save button on every screen saves configuration changes into the configuration files. To permanently save the configuration changes, you must select Save/Load Conf. from the Configuration Menu. Description Enables or disables direct access to KVM ports from the Web Manager login screen.
Page 381: Network Configuration Menu Options [Osd]
Network Configuration Menu Options [OSD] You can select the Network option on the OSD Main Menu to configure network-related services for the KVM/net. Selecting Network under Configuration brings up the Network Configuration Menu. The Network Configuration Menu provides a number of options, as shown in the following screen.
Page 382: Network Configuration Screens [Osd]
The configuration screen series for each of the options under Configure>Network are listed and described in the following sections: Network Configuration Screens [OSD] SNMP Configuration Screens [OSD] VPN Configuration Screens [OSD] IP Filtering Configuration Screens Hosts Configuration Screens [OSD] Static Routes Configuration Screens Network Configuration Screens [OSD] You can select the Network option from the Network Configuration menu to configure DHCP or configure a fixed IP address and other basic network...
Page 383 Selecting Configure>Network>Network from the OSD Main Menu brings up the DHCP screen, which is the first in a series of configuration screens that appear in the sequence shown in the following table. The following table provides a description of all the related configuration screens.
Page 384 Table 7-6: Network Configuration Screens [OSD] (Continued) Screen Gateway DNS Server Domain Hostname Description The IP address for the gateway (if applicable). The IP address for the DNS server. The domain name. The hostname for the KVM/net. AlterPath KVM/net Installation, Administration, and User’s Guide...
Page 385: Snmp Configuration Screens [Osd]
Configure Menu Overview SNMP Configuration Screens [OSD] You can select the SNMP option from the Network Configuration menu to configure SNMP. Selecting SNMP under Configuration>Network brings up the SNMP Configuration Menu. The SNMP Configuration Menu provides a number of options, as shown in the following screen. The following diagram lists the names of all the configuration screen series accessed from the Configuure>Network>SNMP Configuration menu.
Page 386 Configure — Network — SNMP — SysContact — SysLocation — Access Control — SNMPv1/2 — Add | Edit — Delete — Exit — SNMPv3 — Add | Edit — Delete — Exit — Exit — Exit — Community — Source —...
Page 387 Community On Screen Display Description The email address for the KVM/net administrator, for example: kvm_admin@cyclades.com. The physical location of the KVM/net. Choices are SNMP v1/2 or SNMP v3. Appears when either SNMP v1/2 or SNMP v3 is selected. Choices are “Add,” “Edit/Delete,” or “Exit.”...
Page 388 Table 7-7: SNMP Configuration Screens [OSD] (Continued) Screen SNMPv1/v2 Source SNMPv1/v2 or v3 SNMPv1/v2 or v3 Permission Username SNMPv3 SNMPv3 Password Description The source IP address or range of IP addresses. Object Identifier. Each managed object has a unique identifier. Choices are “Read-Only”...
Page 389: Vpn Configuration Screens [Osd]
Configure Menu Overview VPN Configuration Screens [OSD] You can select the VPN option from the Network Configuration menu to configure VPN. Selecting VPN under Configuration>Network brings up the VPN Configuration Menu. The VPN Configuration Menu provides the options shown in the following screen. You can use these options to add a VPN connection or to edit or delete a previously configured VPN connection.
Page 390 Configure — Network — VPN — Add | Edit — Connection Name — Protocol — ESP — AH — Local ID — Local IP — Local Nexthop — Local Subnet — Remote ID — Remote IP — Remote Nexthop — Boot Action —...
Page 391 Table 7-8: VPN Configuration Screens [OSD] (Continued) Screen Local ID Local IP Local NextHop Local Subnet Remote ID Remote IP On Screen Display Description The hostname of the KVM/net, referred to as the “local” host. This is the hostname that a local system use for IPSec negotiation and authentication.
Page 392 Table 7-8: VPN Configuration Screens [OSD] (Continued) Screen Remote Nexthop Remote Subnet Boot Action Description The IP address of the router through which the host on the other side sends packets to the KVM/net. The netmask of the subnetwork where the remote host or security gateway resides, if applicable.
Page 393: Ip Filtering Configuration Screens
Configure Menu Overview IP Filtering Configuration Screens You can select the IP Filtering option from the Network Configuration menu to configure the KVM/net to filter packets like a firewall. Selecting IP Filtering under Configuration>Network brings up the “Filter Table.” The “Filter Table” lists the default chains along with any administratively configured chains, the “Add Chain,”...
Page 394 Configure — Network — IP Filtering — Filter Table — Add Chain — Chain Name — [Choose a chain] — Edit [default chain only] — Delete Chain chain_name? [user-added chain only] — Rules — Exit — Exit — Accept — Drop —...
Page 395 The following table shows the IP filtering screens. Table 7-9: IP Filtering Configuration Screens [OSD] Screen Filter Table Chain Name Chain - chain_name Delete Chain chain_name? Chain - CHAIN_NAME On Screen Display Description Lists the default chains along with any administratively configured chains, the “Add Chain,”...
Page 396 Table 7-9: IP Filtering Configuration Screens [OSD] (Continued) Screen Edit The following screens define the rules for packet filtering. The packet is filtered for the characteristics defined in the rule, for example, a specific IP header, input and output interfaces, TCP flags or protocol. The target action is performed on all packets that have the characteristic.
Page 397 Table 7-9: IP Filtering Configuration Screens [OSD] (Continued) Screen Destination IP Destination Mask Protocol Protocol Number Source Port Destination Port On Screen Display Description The IP address of an output packet’s destination. The netmask of the subnet to which an output packet is going. Choices are “All,”...
Page 398 Table 7-9: IP Filtering Configuration Screens [OSD] (Continued) Screen SYN Flag RST Flag ACK Flag URG Flag FIN Flag PSH Flag Description Appears only if “TCP” is selected from the “Protocol” menu. Options are “Any,” “Set,” “Unset.” Appears only if “TCP” is selected from the “Protocol” menu. Options are “Any,”...
Page 399 Table 7-9: IP Filtering Configuration Screens [OSD] (Continued) Screen Input Interface Output Interface Fragments On Screen Display Description Appears only if “All,” “Numeric,” “TCP,” “UDP,” or “ICMP are selected from the “Protocol” menu. Appears only if “All,” “Numeric,” “TCP,” “UDP,” or “ICMP are selected from the “Protocol”...
Page 400: Hosts Configuration Screens [Osd]
Table 7-9: IP Filtering Configuration Screens [OSD] (Continued) Screen ICMP Type Hosts Configuration Screens [OSD] You can select the Hosts option from the Network Configuration menu to configure hosts. Selecting Hosts under Configuration>Network brings up the “Hosts List” action menu, as shown in the following screen. Description Appears only if ICMP is selected from the “Protocol”...
Page 401 You can select the options on this menu to add, edit, or delete host entries. Selecting “Edit” or “Delete Entry” brings up the following “Select a host” screen. The following diagram lists the names of the configuration screens accessed under Configure>Network>Hosts. Configure —...
Page 402: Static Routes Configuration Screens
Table 7-10: Hosts Configuration Screens [OSD] Screen Name Alias Static Routes Configuration Screens You can select the Static Routes option from the Network Configuration menu to configure static routes. If judiciously used, static routes can sometimes reduce routing problems and routing traffic overhead.
Page 403 The following diagram lists the names of the configuration screens accessed under Configure>Network>Static Routes. Configure — Network — Static Routes — Add | Edit Entry — Select a route [Edit option only] — Host or Net Route [Select host | net | default] —...
Page 404 Table 7-11:Static Routes Screens [OSD] (Continued) Screen Host or Net Route Target Netmask Gateway or Device Gateway Device Description Types of routes: “host,” “net,” or “default.” Note: A default route is used to direct packets that are addressed to networks not listed in the routing table.
Page 405: Date/Time Configuration Screens
Table 7-11:Static Routes Screens [OSD] (Continued) Screen Metric Date/time Configuration Screens You can select the Date/time option from the OSD Configuration menu to either configure an NTP server or manually set the date and time. Selecting Date/time under Configuration>Network brings up the NTP menu, as shown in the following screen.
Page 406: User Station Screens
Configure — Date/time — NTP — enabled — NTP server — disabled — Date/time conf. — Date — Time If NTP is enabled, the following screen appears for entering the IP address of the NTP server. If NTP is disabled, the following series of two screens appears to allow you to enter the date and time manually.
Page 407 “Keyboard type” screen are for optionally redefining the command key portion of the KVM connection hot keys: “Quit,” “Power Management,” “Mouse/Keyboard Reset,” “Video Configuration,” “Switch Next,” “Switch Previous,” and “Port Info.” See “Redefining Keyboard Shortcuts (Hot Keys)” on page 35 for details, if needed.
Page 408 Table 7-12:User Station Configuration Screens (Continued) Screen Scr. saver timeout Cycling Keyboard Type Quit Power Management Description The period of inactivity before the screen saver starts. The default is 10 minutes. The number of seconds each server is viewed while the user is cycling from one port to another.
Page 409 Redefine the command key portion of the KVM connection video brightness and cable length adjustment hot key. Redefine the command key portion of the KVM connection switch next hot key. Redefine the command key portion of the KVM connection switch previous hot key.
Page 410: Kvm Ports Screens
KVM Ports Screens You can select the KVM Ports option on the OSD Configuration Menu to configure KVM ports. The following diagram lists the configuration screens accessed through the Configure>KVM ports option. Configure — KVM ports [Select a port] — Active —...
Page 411 Allows you to enter the key sequence to lock the server’s display. It allows the KVM connected servers to automatically switch to locked state when the AlterPath Viewer is closed or an idle time-out occurs. In addition, when a user tries to access a KVM connected server...
Page 412: Aux Port Screens
AUX Port Screens You can select the AUX Port option on the OSD Configuration Menu to configure the AUX port. The following diagram lists the configuration screens accessed through the Configure>AUX port option. Configure — AUX port — Disable — Power Management —...
Page 413 The following table shows the AUX port configuration screens. Table 7-14:KVM Port Configuration Screens Screen AUX port - Protocol AUX port - PPP AUX port - PPP Baud Rate On Screen Display Description Choices are “Disable,” “Power Management,” and “PPP.” The Aux port are enabled by default.
Page 414 Table 7-14:KVM Port Configuration Screens (Continued) Screen AUX port - PPP Flow Control AUX port - PPP Data Size AUX port - PPP Parity AUX port - PPP Stop Bits AUX port - PPP Local IP Description Gateway or interface address used for the route. The number of data bits.
Page 415: Cascade Devices
Table 7-14:KVM Port Configuration Screens (Continued) Screen AUX port - PPP Remote IP Cascade Devices You can select the Cascade Devices option on the OSD Configuration Menu to perform the following tasks: • Add a secondary KVM unit to be cascaded from the master KVM/net. •...
Page 416 netPlus, a KVM/net, a KVM, or a KVM Expander. The following diagram lists the configuration screens accessed through the Cascades devices option. Configure — Cascade devices — Add Device Enter Device Name — Select the port which connects to B/USER 2 —...
Page 417 Table 7-15:Cascade Devices Configuration Screens (Continued) Screen Cascade Device Edit Device Select the device Select the port which connects to B/USER 2 Select the port which connects to A/USER 1 Cascade device Add device Select Model On Screen Display Description Appears when Edit device is selected from the “Cascade device Choose an option”...
Page 418 Table 7-15:Cascade Devices Configuration Screens (Continued) Screen Cascade Device Select Delete Device the device Description Appears when Delete device is selected from the “Cascade device Choose an option” screen. The following confirmation screen appears once a cascaded device is selected. AlterPath KVM/net Installation, Administration, and User’s Guide...
Page 419: Users And Groups Screens
Configure Menu Overview Users and Groups Screens You can choose the “Users and groups” option from the OSD Configuration menu to configure users, groups, and KVM port permissions. When you select “Users and Groups,” the “Choose an option” screen appears, as shown in the following screen example.
Page 420 Configure — Users and groups — Local Users — Choose an option — Add User — Enter the username. — Type of user — Enter the password — Confirm the password — Change Password — Select the user — Enter the password —...
Page 421 The following table shows the configuration screens that appear when the “Local Users” option is selected from the Users and Groups menu under Configure in the OSD. Table 7-16:Local Users Configuration Screens Screen Choose an option User Database Enter the username Type of user Enter the password Confirm the password...
Page 422 Table 7-16:Local Users Configuration Screens (Continued) Screen Select the user The following table shows the configuration screens that appear when the “Local Groups” option is selected from the Users and Groups menu under Configure in the OSD. Table 7-17:Local Groups Configuration Screens Screen Choose an option Enter the group name...
Page 423 Table 7-17:Local Groups Configuration Screens (Continued) Screen Enter the username Delete user from group select group Select member Delete group select group On Screen Display Description When “Add user” or “Add user to group” are selected. To add multiple users, use a comma to separate each username. When the user is successfully added, the following confirmation screen appears.
Page 424 You can use the User Access Lists menu to view and change KVM port access permissions for the Default User and all administratively configured users and groups. See “Prerequisites for Accessing Servers With KVM Connections” on page 314 for details. The following table shows the configuration screens related to setting KVM port access permissions when the “User Access List”...
Page 425 Table 7-18:User Access List KVM Port Permissions Configuration Screens Screen Access list for username - select the server On Screen Display Description The access list includes the “Reset all,” “Default,” “Multiple servers,” and “Exit” options along with each individual KVM ports.
Page 426: Syslog Screens
Table 7-18:User Access List KVM Port Permissions Configuration Screens Screen Permissions for username port_number or for : followed username by another Access list option, such as “Default” or “Multiple Servers” Syslog Screens You can select the Syslog option on the OSD Configuration Menu to specify the IP address for a syslog server.
Page 427: Notification Screens
To complete the configuration of system logging, you must specify a facility number as shown in “Syslog Facility” on page 363. Notification Screens You can select the Notifications option on the OSD Configuration Menu to configure the KVM/net to monitor and send notifications by the way of SNMP traps.
Page 428 Screen Trap Number Community Server IP Description Object Identifier. Each managed object has a unique identifier. The trap types listed in the drop-down menu translates to a trap number in the system logs. A Community defines an access environment. The type of access is classified under “Permission”: either read only or read write.
Page 429: Authentication Screens
Screen Body Authentication Screens You can select the Authentication option on the OSD Configuration Menu to configure an authentication type (AuthType) for logins to the KVM/net and to configure authentication servers for any type of logins: to the KVM/net or to KVM ports.
Page 430 Configure — Authentication — Choose an option — Unit Authentication — Local — Local/Radius — Local/Tacplus — Local/Nis — Nis — Nis/Local — Nis/Downlocal — Radius — Radius/Local — RadiusDownLocal — TacacsPlus — Tacplus/Local — TacplusDownLocal — NTLM(Win NT/2k/2k3) — NTLMDownLocal —...
Page 431 The following tables show the screens that appear when the “Authentication” option is selected from the Configure menu in the OSD. The first table shows the screen for choosing a KVM/net login authentication method. Table 7-19:Authentication Configuration Screens for KVM/net Logins Screen Choose an option Unit Authentication...
Page 432 Table 7-20:Common Configuration Screens for Kerberos and LDAP Authentication Screen Kerberos Server IP Domain Name Description Choose Kerberos to configure a Kerberos authentication server. IP address of the Kerberos or LDAP server. Domain name. AlterPath KVM/net Installation, Administration, and User’s Guide...
Page 433 The following table shows the unique screens for configuring an LDAP server that appear in addition to the screens shown in Table 7-20, “Common Configuration Screens for Kerberos and LDAP Authentication,” on page 7- The following table shows the configuration screens for the Radius and Table 7-21:Unique LDAP Authentication Server Configuration Screens Screen User...
Page 434 TACACS+ authentication servers.The following table shows the Screens for Table 7-22:Configuration Screens for the Radius or TACACS+ Authentication Servers Screen Radius TacacsPlus Auth. Server1 Auth. Server2 Acct. Server1 and Acct. Server2 Secret Description Choose Radius or TacacsPlus to configure a Radius or TACACS+ authentication server.
Page 435 Table 7-22:Configuration Screens for the Radius or TACACS+ Authentication Servers (Continued) Screen Timeout Retries configuring a Smb (NTLM) authentication server. Table 7-23:Smb (NTLM) Configuration Screens Screen Smb(NTLM) Domain Name On Screen Display Description Timeout in seconds. The default is 3 seconds for Radius and 10 seconds for TacacsPlus.
Page 436 Table 7-23:Smb (NTLM) Configuration Screens (Continued) Screen Auth. Server1 and Auth. Server2 The following table shows the screens for configuring a NIS authentication server. Table 7-24:NIS Configuration Screens Choose the NIS authentication server Enter the Domain Name Domain Name IP address of the NIS server. Server IP Description IP addresses for one or two SMB (NTLM)
Page 437: Save/Load Configuration Screens
Configure Menu Overview Save/Load Configuration Screens You can use the Save/Load Config option on the OSD Configuration Menu to save any configuration changes you have made since the last save into a backup directory or onto an FTP server. You can also restore configuration file changes from a backup directory or FTP server to overwrite any configuration changes that were made since the last save.
Page 438 Configure — Save/Load Config. — Save Configuration — Saving configuration . . . — Configuration was . . . saved. — Load Configuration — Restoring configuration . . . — Configuration was loaded . . . — Save to FTP —...
Page 439 Table 7-25:Save/Load Configuration Screens (Continued) Screen Load Configuration Save to FTP Load from FTP On Screen Display Description When “Load Configuration” is selected, the following two screens appear. When “Save to FTP” is selected, the following five screens appear for you to enter the “Filename,” FTP “Server” name, FTP Login “Username”...
Page 440: System Info Menu
System Info Menu System Information window provides administrators detailed system information. The following table offers an example of the type of information you may see on the System Info window. Table 7-26: System Information Example Information Type Board Version Memory Time User1 connection Example...
Page 441 Table 7-26: System Information Example (Continued) Information Type User2 connection On Screen Display Example RP main, V1.0.4 RP local, V1.0.4 System Info Menu...
Page 442: Reboot
To Access System Information 1. On the Main Menu, select System Info. The System Info window appears. 2. Use the up and down arrow keys to view the information. 3. To exit, press the escape key. Reboot You can reboot the KVM/net from the Main Menu of the OSD. This is particularly useful when operating through the KVM RP.
Page 443 Reboot 2. Select Yes to reboot the KVM/net. On Screen Display...
Page 444: Controlling The Osd Through The Alterpath Kvm Rp
2. Power on the KVM RP. 3. Press the Select Local-Remote button on the front of the KVM RP unit to switch the local video display from your local work station to the KVM/net OSD. The OSD login screen appears.
Page 445 • If desired, power manage devices that are plugged into a configured AlterPath PM. See “Power Management Menu” on page 357 for instructions. To Switch the KVM RP Video Display from the OSD to the Local Computer Do one of the following: •...
Page 446 The green LED labelled Local turns off, and the green LED labelled Remote lights on. By default the KVM RP is set to beep when the monitor display switches from local to remote. See “To Turn the Beeper On or Off When Switching Between the Local and the Remote Work Stations”...
Page 447: Appendix A Troubleshooting
See the boot message in Figure A-1. To Boot From TFTP 1. Download the latest firmware from the Cyclades FTP server at ftp:// ftp.cyclades.com/ and save it on your TFTP Server. 2. Connect a terminal to the KVM/net Console Port with the following...
Page 448 Select the boot type at the following prompt. Boot type ((B)ootp,(T)ftp or Bot(H)) [T] : d. Enter the boot file name. This is the image you downloaded from the Cyclades FTP server. Boot File Name [zvmppckvm.bin] : For example, zImage_kvm_200.bin...
Page 449 Note: If you are unable to access the unit or the boot is not successful, then the zImage may be corrupted or damaged. You should download the firmware again from the Cyclades FTP server and restart the TFTP procedure described above.
Page 450 9. Log in to the unit and proceed with the following steps to save the zImage in flash memory. Note: If you are not seeing the initial boot messages (memory tests) but only the Linux boot, then check the cable you are using. The cable may not be properly wired or the terminal port is not providing the correct RS-232 signal.
Page 451 Table A-1: Boot Message Booting from Original Boot 2.0.7 (Apr/21/04) Cyclades Corporation Testing RAM ... SKIPPED Memory detected: 131072 Kbytes Testing FLASH ... OK Flash detected: 256 Kbytes Testing Flash [Configuration] ... OK Storage Device Detected ... OK Compact Flash SMC128AFA5 Size: 130 Mbytes Testing Storage Device [Op Code] ...
Page 452 To Save the zImage into the KVM/net’s Flash Memory. 1. Download the latest firmware from the Cyclades FTP server at ftp:// ftp.cyclades.com/ and save it on your FTP Server. Note: Make sure to set the transfer mode to binary (bin).
Page 453: How To Upgrade The Firmware On Kvm/Net
SSH/SCP Method Follow the below procedure if you use SSH/SCP. In the following case the assumption is that your local SSH/SCP server is 192.168.51.242, your username is paul and the firmware is saved at /home/paul/cyclades/ zImage_kvm_200.bin. http://www.cyclades.com/support/ or from Cyclades FTP server at...
Page 454 1. Login as root to your KVM/net and execute the following commands. [root@KVMNet root]#scp paul@192.168.51.242:/home/ paul/cyclades/zImage_kvm_200.bin /proc/flash/ zImage_kvm_200.bin [root@KVMNet root]#scp paul@192.168.51.242:/home/ paul/cyclades/zImage_kvm_200.md5 /proc/flash/ zImage_kvm_200.md5 2. Execute the following command as “root” to generate the md5 checksum of the upgraded firmware file.
Page 455 Warning! All configuration settings will be lost! #echo > /proc/flash/script 6. Reboot your unit by executing the following command. #reboot...
Page 456: How To Boot The Kvm/Net Over The Network
How to Boot the KVM/net Over the Network. Follow the steps described in section "To Boot From TFTP" to boot the KVM over the network. If you would like the KVM/net to boot always from the network follow the below procedure to configure the unit. 1.
Page 457 4. Press [Enter] to accept the default parameters, but change the following parameter to enable boot from the network. Firmware boot from ((F)lash or (N)etwork) [F] : N 5. The following prompt appears for you to review the changes before saving to flash memory.
Page 458: How To Boot The Kvm/Net In Single User Mode
How to Boot the KVM/net in Single User Mode The KVM/net has a single user mode that is used when: 1. The name or password of the user with root privileges is lost or forgotten. 2. When an upgrade or downgrade process does not work properly and the system turns unstable.
Page 459 4. When the boot process is completed, the following prompt appears. [root@(none) /]# 5. If the password is forgotten execute the following command. [root@(none) /]# passwd New password: ******* Re-enter new password: ******* Password changed Save the new configuration and reboot the unit. [root@(none) /]# saveconf Checking the configuration file list...
Page 460 Execute the following script, replacing the parameters with values appropriate for your system. The [root@(none)]# config_eth0 ip 192.168.51.242 mask 255.255.255.0 gw 192.168.51.1 b. Using the “vi editor”, edit the file(s) causing the problem and then reboot the unit. [root@(none) root]# saveconf [root@(none) root]# reboot c.
Page 461: How To Disable Mouse Acceleration Using Windows Registry
How to Disable Mouse Acceleration Using Windows Registry In order to disable the mouse acceleration and synchronize it on your PC or laptop with the remote server attached to KVM/net, run remote server, and disable the mouse acceleration by setting the mouse speed to “0”.
Page 462 AlterPath KVM/net Installation, Administration, and User’s Guide...
Page 463: Appendix B: Technical Specifications
Appendix B Technical Specifications The following table provides the technical specifications for the KVM/net. Table B-1: Technical Specifications Memory Interfaces Power Form Factor Operating Temperature Storage Temperature Humidity MPC855T (PowerPC) @ 48 Mhz 128 MB DIMM SDRAM/128 MB Compact Flash •...
Page 464 Table B-1: Technical Specifications (Continued) Dimensions (WxDxH) Certifications • KVM/net - 17 x 9.5 x 1.75 in (43.18 x 24.13 x 4.45 cm) • KVM Expander – 12 x 2.5 x 1.53 in (30.48 x 6.35 x 3.87 cm) • KVM Terminator 1.24 x 2.60 x 0.85 in (3.15 x 6.60 x 2.16 cm) •...
Page 465: Appendix C Safety Guidelines
• Chose a location that avoids excessive heat, direct sunlight, dust, or chemical exposure, all of which can cause the product to fail. For example, do not place a Cyclades product near a radiator or heat register. which can cause overheating.
Page 466 Make sure the power cords are plugged into single-phase power systems that have a neutral ground. • Do not use household extension power cords with Cyclades equipment because household extension cords are not designed for use with computer systems and do not have overload protection.
Page 467: Table Placement
Rack or Cabinet Placement When installing Cyclades equipment in a rack or cabinet, observe the following precautions: • Ensure that the floor’s surface is level. • Load equipment starting at the bottom first and filling the rack or cabinet from the bottom to the top.
Page 468 Safety Guidelines for Rack-Mounting the KVM/net Temperatur Die maximal empfohlene Umgebungstemperatur des AlterPath KVM/net beträgt 50 ºC (122 ºF). Elevated Operating Ambient Temperature If the AlterPath KVM/net is installed in a closed or multi-unit rack assembly, the operating ambient temperature of the rack environment may be greater than room ambient temperature.
Page 469: Safety Precautions For Operating The Alterpath Kvm/Net
Circuit Overloading Consideration should be given to the connection of the equipment to the supply circuit and the effect that overloading of circuits might have on overcurrent protection and supply wiring. Appropriate consideration of equipment nameplate ratings should be used when addressing this concern. Elektrische Überlastung Bitte beachten Sie beim elektrischen Anschluss der Geräte, dass diese zum Schutz vor Überlastung mit entsprechenden Schutzvorkehrungen ausgestattet...
Page 470 Sicherheitsvorkehrungen beim Betrieb des AlterPath KVM/net Bitte lesen Sie alle folgenden Sicherheitsrichtlinien um sich und Ihren AlterPath KVM/net vor Schäden zu bewahren. Caution: Do not operate your AlterPath KVM/net with the cover removed. Vorsicht: Bitte betreiben Sie den AlterPath KVM/net nicht mit geöffnetem Gehäuse. Caution! To avoid shorting out your AlterPath KVM/net when disconnecting the network cable, first unplug the cable from the Host Server, unplug external...
Page 471 where they can be stepped on or tripped over. Do not spill food or liquids on KVM/net. Vorsicht: Um den AlterPath KVM/net vor elektrischen Netzschwankungen zu bewahren bitte Überspannungsfilter, Entstörfilter oder eine UVS einsetzen. Stellen Sie bitte sicher dass sich keine Gegenstände auf den Kabeln des KVM/net befinden und dass die Kabel tritt- und stolpersicher geführt sind.
Page 472 Safety Precautions for Operating the AlterPath KVM/net AlterPath KVM/net Installation, Administration, and User’s Guide...
Page 473 Glossary 3DES Authentication Basic In/Out System (BIOS) Baud Rate Tripple Data Encryption Standard, an encrypting algorithm (cipher) that processes each data block three times, using a unique key each time. 3DES is much more difficult to break than straight DES. Because it is the most secure of the DES combinations, 3DES is also slower in performance.
Page 474 A measurement of processor speed made by the Linux kernel when it boots, to calibrate an internal busy-loop. Ability to detect communication failure transparently, and switch from one LAN connection to another. The Linux bonding driver has the ability to detect link failure and reroute network traffic around a failed link in a manner transparent to the application.
Page 475 CIDR Notation Cluster Community DHCP DNS Server Domain Name Classless Inter Domain Routing (CIDR) is a method for assigning IP addresses without using the standard IP address classes like Class A, Class B or Class C. In CIDR notation, an IP address is represented as A.B.C.D /n, where "/n"...
Page 476 Escape Sequence Ethernet Flash flow control but a given Domain Name points to only one machine. For example, the domain names: matisse.net, mail.matisse.net, workshop.matisse.net can all refer to the same machine, but each domain name can refer to no more than one machine. Usually, all of the machines on a given Network will have the same thing as the right-hand portion of their Domain Names (matisse.net in the examples above).
Page 477 Hot-Swap ICMP In-band IP address IP packet filtering in a buffer. When the buffer is nearly full, the receiving side signals the sending side to stop until the buffer has space again. Between hardware (such as your modem and your computer), hardware flow control is used;...
Page 478 IPsec Kerberos LDAP Short for IP Security Protocol, IPsec is an extended IP protocol that provides encrypted security services. These services enable authentication, as well as access and trustworthiness control. IPsec provides similar services as SSL, but it works on a network layer.
Page 479 Network Mask Every network has a different MTU, which is set by the network administrator. On Windows, you can set the MTU of your machine. This defines the maximum size of the packets sent from your computer onto the network. Ideally, you want the MTU to be the same as the smallest MTU of all the networks between your machine and a message's final destination.
Page 480 Object Identifiers (OID) The SNMP manager or the management application uses a well- OOBI Packet defined naming syntax to specify the variables to the SNMP agent. Object names in this syntax are called Object Identifiers (Object IDs or OIDs). OIDs are series of numbers that uniquely identify an object to an SNMP agent.
Page 481 Parity PCMCIA Port maximum length of a packet depends on the communication medium. As an example, in Ethernet networks the maximum length is1500 bytes. A data packet can be divided into two parts: the header part and the data part. The header contains information needed for communication between nodes;...
Page 482 RADIUS Root Access Routing Table Secure Shell (SSH) older protocol, SLIP, as it is more stable and has more error- checking features. PPP has been a widely used Internet standard for sending datagrams over a communications link. The PPP standard is described in RFC 1661 by the Point-to-Point Working Group of the Internet Engineering Task Force (IETF).
Page 483 Server Farm SMTP SNMP SNMP Traps A collection of servers running in the same location (see Cluster). Simple Mail Transfer Protocol. Specifies the format of messages that an SMTP client on one computer can use to send electronic mail to an SMTP server on another computer. Short for Simple Network Management Protocol, a set of protocols for managing complex networks.
Page 484 Stop Bit Subnet Mask Sudo TACACS TACACS+ TCP Keep-Alive Interval The time interval between the periodic polling of all inactive A bit which signals the end of a unit of transmission on a serial line.A stop bit may be transmitted after the end of each byte or character.
Page 485 Telnet TFTP U Rack Height Unit number of 'probe' packets has been ignored by the client, the server assumes the worst and the connection is closed. The keep-alive timer provides the capability to know if the client's host has either crashed and is down or crashed and rebooted.
Page 486 Watchdog timer A watchdog timer (WDT) is a device or electronic card that performs a specific operation after a certain period of time if something goes wrong with an electronic system and the system does not recover on its own. A common problem is for a machine or operating system to lock up if two parts or programs conflict, or, in an operating system, if memory management trouble occurs.
Page 487 Index Numerics 3DES access assigning KVM port user user and group Access Control Access list for username - select the server access to KVM ports, enabling direct Web Manager Web Manager, default IP address Web Manager, dynamic IP address accessing cascaded ports connected devices connected devices, tasks related to...
Page 488 modes of Web Manager windows, common features of alarms logging syslog alarms and syslog, configuring Alias alias for a KVM port, specifying AlterPath KVM Expander, installing AlterPath KVM Terminators AlterPath KVM/net ordering options AlterPath KVM/net, shipping box contents AlterPath PM connecting upgrading 68, 428...
Page 489 back up configuration data Backspace backup configuration Baud Rate, PPP configuration beeper on AlterPath KVM RP Board boot configuration configuring with Web Manager image, changing the Boot Action Boot Action, Local Boot File Name bootp box contents, shipping KVM Expander KVM RP brackets, mounting brightness, adjusting screen...
Page 490 Hosts IP Filtering Network Save/load SNMP Static Routes Configure configure menu overview configuring authentication method authentication method for logins through KVM ports authentication method, KVM/net logins authentication servers AUX 1 port basic networking OSD 89 wiz command 85 boot cascaded KVM units creation of alarms and syslog files for IPDUs encryption on port connections...
Page 491 Connectors console port, connection port, loging in through the port,changeing the password through the control buttons 424, 447 Custom Security Profile Cyclades Web Manager cycle Cycle Time Cycling cycling daisy chaing power data buffering Data Size, PPP configuration data, backing up configuration...
Page 492 direct access to KVM ports, enabling 82, 101 direct connection Disable Mouse Acceleration Linux Windows 2000 Windows 95/98/NT Windows ME Windows XP/2003 disabling KVM ports Disabling Mouse Acceleration DNS Server document xiii audience downloads organization related documentation Domain 416, 419, 420 Domain Name download microcode downloading...
Page 493 241, 244 rule for IP FIN Flag firewall configuration procedures 287, 290 firmware upgrade AlterPath PM Cyclades pathname for Flow Control, PPP configuration Force Screen Auto Alignment Force Screen Refresh forms FORWARD packet Fragments FTP server, download microcode...
Page 494 online hierarchy, KVM port permissions High Color Home Host IP Host or Net Route host settings host settings, configuring host tables Hostname hosts configuration screens hosts, configuring hot keys conventions for for emulating sun keyboard keys for local station redefining KVM connection redefining sun keyboard equivalent summary of tasks for redefining 144, 222...
Page 495 edit a rule for IP Options IP Security Level IPDU information, viewing and resetting IPDU Power Management IPDU power management forms, controlling power through IPDUs info, view IPDUs, alarms and syslog 208, 416 Kerberos Kerberos authentication server, configuring keyboard and mouse, resetting the equivalent hot keys, redefining sun keys, hot keys for emulating sun shortcuts (hot keys), redefining...
Page 496 logins, specifying authentication permissions hierarchy permissions, understanding power management, configuring 7, 394 KVM ports connecting computers to controlling power while connected to enable direct access to enabling direct access to syslogging for KVM ports screens KVM RP beep connectors powering on shipping box contents KVM session keyboard shortcuts, redefining KVM terminator usage and types...
Page 497 IP address and port entered 320 IP address entered 320 Direct Logins Not EnabLED login screen, connecting to a KVM port through the login screen, Web Manager logins through KVM ports, configuring an authentication method for logins, authentication method logins, authentication servers logins, simultaneous logins, specifying authentication for KVM port...
Page 498 KVM Expander, the mouse, resetting Mouse/Keyboard MTU/MRU, PPP configuration Name navigating conventions the OSD navigation actions, common keys, basic 367, 388 Netmask network Network bits/sec network configuration menu options network configuration screens network configuration, making a direct connection for network configuration, performing basic Network IP Network Mask network parameters...
Page 499 through the AlterPath KVM RP, controlling the time and date, setting OSD Reboot screen Outlets Manager outlets, configuring users for managing outlets, KVM Expander 238, 383 Output Interface OUTPUT packet overview, Configure menu, OSD overview, Expert mode packet filtering rule, adding a Page Up / Page Down parameters defined using the wiz command, applying and confirming the network...
Page 500 Web Manager Power Outlet power outlets configuring users to manage on the KVM Expander power outlets, KVM Expander power specification power switch power, supplying to the KVM RP powering KVM RP powering on connected devices KVM-connected devices the KVM the KVM Expander...
Page 501 Quit Quit this session raccess raccess authorization Rack Placement RADIUS Radius Radius authentication server RDP servers, prerequisites for access 298, 426 reboot reboot, remote location recommended settings redefining hot keys, summary of tasks for keyboard shortcuts (hot keys) KVM connection hot keys KVM connection keyboard shortcuts (hot keys) KVM session keyboard shortcuts...
Page 502 Safety Guidelines safety precautions Save changes Save Configuration Save to FTP save/load configuration screens saving changes, logging into the Web Manager and saving configuration changes Scr. saver timeout screen screen brightness and contrast, adjusting screen series, understanding OSD configuration screens authentication AUX ports date/time configuration...
Page 503 servers administering users of connected connecting, OSD connecting, Web Manager cycling between prerequisites for in-band access to RDP prerequisites for logging to syslog syslog servers with in-band connections, prerequisites for accessing servers with KVM connections, prerequisites for accessing servers, authentication session keyboard shortcuts, redefining KVM sessions active...
Page 504 Wizard mode Stop Bits, PPP configuration storage temperature Subnet Mask, Remote Sun Keyboard sun keyboard equivalent hot keys sun keyboard keys Switch Next Switch Previous switch, power SYN Flag 255, 371 SysContact 256, 371 SysLocation syslog Syslog Facility...
Page 505 Unit boot from Unset Up / Down upgrading Cyclades pathname 287, 290 firmware firmware AlterPath PM KVM Expander microcontroller code microcode resetting microcode after software URG Flag...
Page 506 and reset IPDU information connected port information general information in-band connections IPDUs info KVM connections port status system information 56, 250 VPN configuration screens VPN, configuring Watchdog Timer changing admin’s default password Web Manager access without direct connection completing configuration using the Connect to Server form connecting to servers through the for regular users...

Cyclades User's Guide User Manual

Table of Contents

Chapter 1: Introduction

Chapter 2: Installation

Chapter 3: Advanced Installation Procedures

Chapter 4: Web Manager for Administrators

Chapter 5: Web Manager for Regular Users

Chapter 6: Accessing Connected Devices

Table of Contents

Chapter 7: On Screen Display

Appendix A Troubleshooting

Appendix B: Technical Specifications

Appendix C Safety Guidelines

Quick Links

Chapters

Need help?

Questions and answers

Related Manuals for Cyclades User's Guide

Summary of Contents for Cyclades User's Guide