CC2000 User Manual FCC Information This is an FCC Class A product. In a domestic environment this product may cause radio interference in which case the user may be required to take adequate measures. This equipment has been tested and found to comply with the limits for a Class A digital device, pursuant to Part 15 of the FCC Rules.
86-10-5255-0110 Japan 81-3-5323-7178 Korea 82-2-467-6789 North America 1-888-999-ATEN ext 4988 United Kingdom 44-8-4481-58923 User Notice All information, documentation, and specifications contained in this manual are subject to change without prior notification by the manufacturer. The manufacturer makes no representations or warranties, either expressed or implied, with respect to the contents hereof and specifically disclaims any warranties as to merchantability or fitness for any particular purpose.
Manual Part No. PAPE-0304-AX2G F/W Version: V2.0.193 Manual Date: 2010/12/21 ALTUSEN and the ALTUSEN logo are registered trademarks of ATEN International Co., Ltd. All rights re- served. All other brand names and trademarks are the registered property of their respective owners.
CC2000 User Manual About This Manual This User Manual is provided to help you get the most from your CC2000 system. It covers all aspects of installation, configuration and operation. An overview of the information found in the manual is provided below. Generally speaking, chapters 1, 3, and 4 are sufficient for basic users.
For information about all ALTUSEN products and how they can help you connect without limits, visit ALTUSEN on the Web or contact an ALTUSEN Authorized Reseller. Visit ALTUSEN on the Web for a list of locations and telephone numbers: International http://www.aten.com North America ATEN TECH http://www.aten-usa.com ATEN NJ http://www.aten.com xiii...
Page 14
CC2000 User Manual This Page Intentionally Left Blank...
By consolidating the management of your ATEN/ALTUSEN IT devices, the CC2000 allows every device to be securely accessed and controlled by means of a single IP address.
Multiplatform client support (Windows, Mac OS X, Linux, Sun) ATEN/ALTUSEN device auto-discovery with device-availability status, and alarms All devices are integrated into a single tree view for centralized access,...
CC2000 User Manual Powerful Security Powerful security features include both internal and external authentication – external authentication support includes LDAP, LDAPS, Active Directory, RADIUS, TACACS+, and NT Domain – only after being authenticated can users gain access to the devices Option to force users of all CC managed devices to be authenticated through the CC –...
Chapter 1. Introduction Requirements Server Requirements Systems that the CC2000 server will be installed on should meet the following requirements: Hardware Requirements CPU: Pentium 4, 2.60 GHz or higher Memory: At least 512MB (1GB or more recommended) Hard drive: 500MB or more free space Ethernet: At least 1 Ethernet adapter (100Mbps or higher) –...
CC2000 User Manual Client Requirements Hardware Requirements CPU: For best results we recommend that the computers used to access the switch have at least a P III 1 GHz processor, with their screen resolution set to 1024 x 768. Memory: At least 512MB (1GB or more recommended) Ethernet: At least 1 Ethernet adapter –...
9.0 and higher Device Requirements All ALTUSEN/ATEN IP products must be at a firmware level that contains the CC Management function, and the CC Management function must be enabled. Download and install the latest version of the relevant firmware from our Website, if necessary.
Aggregate Device, the Aggregate Device counts as a single node, and only requires a single license. Ports on ATEN/ALTUSEN NET™ devices, when not part of an aggregate device, must be unlocked (see Locking / Unlocking Ports, page 99) in order to be used.
Chapter 2 CC2000 Server Installation Overview Recognizing the increasing importance of Linux in the server environment, the CC2000 Control Center Over the NET™ system makes the CC2000’s management services available on both the Windows and Linux platforms. This chapter describes how to install the CC2000 server on each of them. CC1000 Considerations Upgrading the CC1000 Users who already have CC1000 USB license keys for a minimum of 2 users...
CC2000 User Manual Windows Version Installation Before You Begin Before running the installation program make sure of that the Sun's Java Runtime Environment (JRE) 6, Update 11, or higher has been installed on your system. If not, you need to download and install it. You can get the latest version from the Java web site: http://java.com After the JRE has been installed on your system, you are ready to install the...
Page 25
Chapter 2. Chapter 2. CC2000 Server In- 3. In the screen that comes up, read the License Agreement, then click to enable the I accept... radio button: 4. Click Next to continue. 5. The following dialog box appears: 6. Key in the CC2000’s software serial number (the serial number can be found on the CD case), then click Next to continue.
Page 26
CC2000 User Manual 7. In the Choose Installation Folder dialog box, specify the CC2000’s installation folder. If you don’t want to use the default entry, click Choose... to browse to the location that you want, then click Next to continue. 8.
Page 27
CC2000 servers use the same port setting. Device port The port that the CC2000 server uses to communicate with the devices (ALTUSEN/ATEN IP products) on the installation. The default is 8000. Each CC2000 can have a separate Device port number, but in order...
Page 28
CC2000 User Manual 10. After the fields have been filled, click Next to continue. Note: You can change any of these settings following the installation. See Server Information, page 137, for details. 11. The dialog box changes to inform you that files are being copied to the installation folder.
Chapter 2. Chapter 2. CC2000 Server In- 14. At the completion of the installation, a CC2000 entry is created in the Windows Start menu: Post-installation Check After the installation completes successfully, the CC2000 program starts automatically (and starts automatically with every bootup). To check that the CC2000 has started, navigate through the following folders: →...
CC2000 User Manual Linux Version Installation Before you Begin The procedure for installing CC2000 on a Linux system is similar to that for Windows, but there are Java considerations to take note of first. If Java isn’t already installed on your system, you will need to download from the Java web site: http://java.com Installation instructions are provided on the Java download page.
Chapter 2. Chapter 2. CC2000 Server In- 4. In the screen output, look for the line (it will be in bold) that starts: Using VM..to see which Java your distribution is defaulting to. 5. If the Using VM entry shows a path to a file named java in the old Java version directory, go to that directory and either delete the java file or rename it.
CC2000 User Manual 4. From here, the installation procedure is the same as the one for Windows. Refer to the Windows installation procedure (see page 10), for details on how to proceed. Post-installation Check After the installation completes successfully, the CC2000 program starts automatically (and starts automatically with every bootup).
Chapter 2. Chapter 2. CC2000 Server In- Uninstalling the CC2000 Uninstalling from a Windows System To uninstall the CC2000 from a Windows system, do the following: 1. Open the Start menu. → 2. Navigate to the CC2000 entry (Programs CC2000), and select Uninstall CC2000.
CC2000 User Manual Upgrading the CC2000 If the CC2000 program has already been installed, it is not necessary to perform a full install. You can upgrade to the latest CC2000 version by running the CC2000-Upgrade program: CC2000Upgrade_Win.exe (for Windows) CC2000Upgrade_Linux.bin (for Linux) Note: When you upgrade, you must upgrade the master and each of the slaves.
Chapter 2. Chapter 2. CC2000 Server In- CC2000 Slave Servers A complete CC2000 installation can comprise 1 Master and up to 31 Slave servers located anywhere throughout the world. The Master server becomes automatically designated when you upgrade the demo license that came with your CC2000 software.
Page 36
CC2000 User Manual This Page Intentionally Left Blank...
Chapter 3 Browser Operation To ensure multi-platform operability, access to the CC2000 is available through most standard web browsers. Once users log in and are authenticated, the CC2000’s browser GUI comes up. This chapter explains the login procedure, and describes the CC2000’s browser GUI components. Logging In To log into the CC2000, do the following: 1.
CC2000 User Manual 3. Provide your CC2000 Username and Password, then click Login. Note: There is a pre-installed system administrator account that can be used to log in for the first time to begin creating users and groups, adding devices, configure the system, etc. The Username for this account is administrator;...
Chapter 3. Browser Operation Screen Components The CC’s screen components are described in the table, below: Item Description Tab Bar The tab bar contains the CC2000’s main operation categories. The items that appear in the tab bar are determined by the user’s type, and the authorization options that were selected when the user’s account was created.
CC2000 User Manual The Navigation Buttons The navigation buttons move you through the items in the Sidebar as follows: Button Action Moves to the item in the tree that is one level out and one step up from the current selection (its parent item). In the diagram below: If the focus were on OutletA, it would move to PN0108RPSwitch.
Chapter 3. Browser Operation Tree View Considerations Only items a user is authorized to access appear in the Sidebar tree view. A plus (+) sign in front of an item means that there are additional items nested inside of it. Click the plus sign to expand the view and show the nested items.
CC2000 User Manual (Continued from previous page.) Item Description Panel Menu Refines the menu category into smaller related groupings. If there are secondary Panel Menu pages, hovering over the Panel Menu title causes a popup menu to appear. Click on the menu item to go to the desired secondary page.
Chapter 3. Browser Operation Preferences Users can set individual preferences for their browser sessions by clicking the Preferences tab on the Tab Bar. The Interactive Display Panel opens to the default page – Color Scheme. The Panel Menu bar shows the available categories: Color Scheme, Web Options, and Password.
CC2000 User Manual Web Options For Language: Click the Use Browser Settings radio button to have the CC2000’s pages display in the same language that your browser is set to. Note: If your browser is set to a non-supported language, the CC2000 looks to what your server’s operating system is set to.
Chapter 3. Browser Operation For Welcome Page: If you want the Welcome Message to appear on screen, select Show; if you don’t want it to appear, select Hide. If you want a Screen Name to appear with the Welcome Message, key it into the Display screen name text box.
Page 46
CC2000 User Manual This Page Intentionally Left Blank...
Chapter 4 Port Access Overview The Port Access page is used to access and control the devices, ports and outlets that are managed over the CC2000 network. The page’s Menu Bar provides different organizational views of those items, as shown in the screenshot, below: Click the view on the Menu Bar that you want to see the items organized by.
CC2000 User Manual Table Headings An explanation of the column headings is provided in the table, below. Note: 1. The headings at the top of the table don’t all appear for each view. Which ones appear vary depending on the view selected. 2.
Chapter 4. Port Access Action Buttons There are two buttons at the top right of the main panel: Filter, and Launch Multiviewer: Filter Filter allows you to control which items appear in the main panel list. Key in a string and click Filter (or tap [Enter]). Only items that have that particular string in their names display in the list.
CC2000 User Manual The Sidebar Devices, ports and outlets that have been configured on the CC2000 are listed in a tree structure in the Sidebar at the left of the screen: Sidebar Characterisitcs The characteristics of the Sidebar tree structure are the following: Users are only allowed to see the devices, ports and outlets that they have access permission for.
Chapter 4. Port Access Sidebar Filter Filter allows you to control the number and type of devices, ports and outlets that display in the Sidebar. When you click the upward-pointing chevron at the bottom left of the Sidebar panel it brings up the Filter dialog, which looks similar to the image, below: The meanings of the choices are explained in the following table: Choices...
CC2000 User Manual Port Operation Depending on the item chosen, various port operation methods are available to access and control it. Click the arrow at the right of the Operation cell to select an operation method. An explanation of the methods is given in the sections that follow.
Chapter 4. Port Access To switch ports in the viewer, open the hidden Control Panel (by hovering over the top center of the viewer window), and select the Port List icon. The port list choices include all the ports belonging to the device. In the list, select the device the port belongs to (SN0108 in the screenshot), then click the port you want to access.
CC2000 User Manual Power ON / OFF For Aggregate and Power devices you can choose All ON or All OFF to turn all the outlets belonging to that device on or off. For Power outlets, you can choose ON or OFF. If the port’s status is ON, the choice is OFF –...
Chapter 4. Port Access Port Access Views Port View When Port Access is selected on the tab bar, the default page is Port View. This page lists all of the ports that have been deployed under the CC2000 management system, independently of their devices: To only see a particular port, click on it in the Sidebar.
CC2000 User Manual Device View Device view displays all of the devices that have been deployed under the CC2000 management system: To only see the ports for a particular device, click on the device in the Sidebar. Department View Department view displays all of the departments that have been created under the CC2000 management system, and the ports that have been assigned to each: To only see the ports belonging to a particular department, click on the...
Chapter 4. Port Access Location View Location View displays all of the locations that have been created under the CC2000 management system, and the ports that have been assigned to each: To only see the ports belonging to a particular location, click on the location in the Sidebar.
CC2000 User Manual Favorites View The Favorites page is similar to a bookmarks feature. Devices and ports that you frequently access can be saved under favorite names of your choosing here. Simply open this page and select the name – rather than hunting for devices and ports in the Sidebar.
Chapter 4. Port Access 2. In the page that comes up, give the Favorite a name, click the checkboxes of the ports you want to include, then click Save. When the operation completes, your Favorite displays in the main panel, and it is also listed in the Sidebar.
CC2000 User Manual Managing Favorites To add or remove ports from a Favorite. do the following: 1. Select the Favorite in the filter list. 2. Click Edit Ports (at the top-right of the panel). A page comes up showing all of the ports available to the user, with the ports that are currently included in the Favorite having a check in their checkboxes: 3.
Chapter 4. Port Access User Preferences The last item on the Menu Bar, User Preferences, is different from the other Menu Bar items in that it doesn’t provide an organizational view of the devices and ports. It has two Panel Menu items: Port Display, and Alias. Port Display lets you configure how the device tree appears in the Sidebar;...
CC2000 User Manual Alias Selecting Alias on the Panel Menu, brings up a page that allows you to give your devices, ports, and outlets a nickname to make it more convenient to remember which items you are managing: The default view only shows devices. To give an alias to a port or outlet, click the arrowhead in front of the device’s name to show them.
Chapter 5 User Management Overview The User Management page is used to perform the following functions: Add, modify and delete user accounts Create user groups and assign users to them Specify device access rights for users and groups based on system default or custom defined user types Specify whether the user's authentication will be performed via the CC2000 (internal) or via an external authentication server...
CC2000 User Manual Accounts The Accounts page is used to add, modify and delete user accounts. The default Accounts page looks similar to the one below: Adding User Accounts To add a user, do the following: 1. Select Users in the Sidebar. 2.
Page 65
Chapter 5. User Management 3. Enter the required information in the appropriate fields. A description of each of the fields is given in the table below: Field Description Login name Internal (CC2000) Accounts: A maximum of the equivalent of 16 English alphanumeric characters is allowed. The minimum number of characters is based on the CC2000’s account policy settings (see CC2000 Authentication, page 67).
Page 66
CC2000 User Manual 4. Click Next at the top-right of the main panel. If CC2000 was chosen for authentication, The Add User - Account Status page appears: Note: If an external authentication server was chose for authentication, the account status information is maintained on that server, so this page doesn’t appear.
Page 67
Chapter 5. User Management Field Description Restrictions Disable account temporarily cancels a user’s account without deleting it – so that the account can easily be reinstated at a future time. If User cannot change password is enabled, the user can’t change his own password.
CC2000 User Manual Managing User Accounts To manage a user account do the following: 1. Select Users in the Sidebar. 2. Either click the user’s name in the Sidebar, or click the user’s name in the main panel. The user’s Account Information page appears: This page is similar to the adding a user account page, except there are three Panel Menu items at the top: User Information, Group Membership, and Access Rights.
Chapter 5. User Management Access Rights To configure a user’s access rights to devices, ports, and outlets, do the following: 1. Select Accounts on the Menu Bar. 2. Select the User in the Sidebar. 3. Select Access Rights on the Panel Menu Bar in the Interactive Display Panel to bring up the user’s Access Rights page.
Page 70
The device (or specified ports on the device) must be accessed over a Telnet connection. Serial The device (or specified ports on the device) must be accessed over an SSH connection. Administrator ATEN The administrator can perform all configurations and Generic; operations. Web SSO User ATEN The user can perform all operations.
Chapter 5. User Management 5. When you have finished making your selections, click Save. 6. To add access for additional devices, bring up the user’s Access Rights page and repeat the procedures described above. Modifying Device Access To change the access rights to a device, port, or outlet, bring up the user’s Access Rights page;...
CC2000 User Manual Unlocking User Accounts If a user has been locked out due to exceeding the number of login attempts, and the Force manual unlock option has been enabled (see Lockout Policy, page 135), to unlock the user, do the following: 1.
Chapter 5. User Management Groups Groups allow administrators to easily and efficiently manage users and devices. Since device access rights apply to anyone who is a member of the group, administrators need only set them once for the group, instead of having to set them for each user individually.
CC2000 User Manual 3. Click Save to create the group. The group now appears in the Sidebar and the Group Information list in the Interactive Display Panel. Note: You can add users to the group before performing this step. See the next section for details on adding users to groups.
Chapter 5. User Management Removing Users from Groups To remove a user from a group, do the following: 1. Select Groups from the User Management menu bar. 2. Either in the Sidebar or the Interactive Display panel, click the group’s name.
CC2000 User Manual Access Rights To configure the access rights for a group, do the following: 1. Select Groups from the User Management menu bar. The Group List page appears. 2. Select the group that you want to configure the access rights for. 3.
Chapter 5. User Management User Types Members Clicking a user type in the Sidebar or in the Interactive Display panel brings up the Members Panel Menu page showing all the users that belong to that type. Clicking a user’s name brings you to that user’s Account Information page. To add a user to the type, click Add at the top-right of the main panel.
CC2000 User Manual System Types The roles performed by members of the System category are fixed. The roles associated with each type are summarized in the table below: Super System User Device Assigned Roles User Auditor Admin Admin Admin Admin √...
Chapter 5. User Management Custom Types The CC2000 provides the ability to create custom user types, with any combination of roles assigned to them, which may better suit your requirements than the pre-defined System types. To create a custom user type, do the following: 1.
CC2000 User Manual Authentication Services The CC2000 provides an internal Username / Password authentication service. In addition, the CC2000 supports the following third party external authentication servers: LDAP, LDAPS, Active Directory, RADIUS, TACACS+, and Windows NT Domain. Note: 1. Authentication refers to determining the authenticity of the person logging in;...
Chapter 5. User Management CC2000 Authentication With regard to the CC2000’s internal authentication services, there are some configuration settings you can make to the password policy function. All user accounts must follow the requirements you set here. To configure the CC2000’s password policy, do the following: 1.
CC2000 User Manual External Authentication Servers Adding an External Authentication Server In order to use a third party external authentication server, you must first add it to the Authentication Server list. To do so: 1. Select Authentication Services from the User Management menu bar to bring up the Authentication Server list: 2.
Chapter 5. User Management Service Information An explanation of the information required for each of the services is provided, below. 1. LDAP/LDAPS Heading Information Connection Settings Get the information for these fields from the LDAP administrator. The port default is 636, but check with the LDAP/LDAPS administrator to see if it may be something else.
CC2000 User Manual 2. Active Directory Heading Information Connection Settings Get the information for these fields from the Active Direc- tory administrator. For example settings see Active Direc- tory Settings Example, page 239. SSL Mode Click a radio button to choose whether or not to use SSL in Trust All mode.
Chapter 5. User Management 4. Windows NT Domain Get the information for the Domain Name from the service administrator. For example settings see NT Domain Settings Example, page 244. Deleting an External Authentication Server To delete an external authentication server, do the following: 1.
CC2000 User Manual Group Authorization For LDAP, LDAPS, and Active Directory there is an additional authentication method in which the access rights for a specified group are set. This function is used to make it easier to authorize users with accounts on an external authentication server.
Page 87
Chapter 5. User Management 4. There are two methods to add users to an authorization group: Click Add. In the page that comes up either key in the user’s RDN, or retrieve it with the Browse button, then click Save. –...
Page 88
CC2000 User Manual This Page Intentionally Left Blank...
Chapter 6 Device Management Overview The Device Management page is used to add, configure, and organize the devices that will be managed over the CC2000 network. When you click the Device Management tab, the CC2000 opens to the default Devices page, which looks similar to the screen, below: All devices and device folders that have been configured for use on the CC2000 server and have been added into its database are listed in the Sidebar...
CC2000 User Manual Preliminary Procedures Before devices can be managed, they must first be added into the system. This involves four basic steps: 1. Connecting the devices to the same network segment as the CC2000. You must do this for the Master and each of the Slaves. 2.
Chapter 6. Device Management Menu Structure The Device Management menu structure is described in the table below: Page Menu Panel Menu Page Device Devices Devices Management Tools Device Sync Sidebar Device Tree Properties (KVM) Access Rights (KVM) Device Configuration (KVM) Port Configuration (KVM) Properties (Power) Access Rights (Power)
Type Purpose Device Select this type to add ATEN/ALTUSEN NET™devices into the CC2000 management system. See CC2000 Capable ALTUSEN/ ATEN IP Products, page 199 for details. Note: When devices are added all of their ports are locked by default and must be unlocked.
Page 93
Type Purpose Aggregate Device Select this to create a logical device consisting of ports selected from ATEN/ALTUSEN NET™ devices that have been added to the CC2000 management system. This type of device is used to manage a device with multiple connection methods (KVM, power, and serial ports, for example), without having to use a separate connection for each.
CC2000 User Manual Type Purpose Folder Device folders provide another method (in addition to Departments and Locations) of organizing related devices into useful categories. (Putting all PN0108s into one folder, for example.) Doing so makes it easy to configure and maintain similar types of objects. Note: 1.
This item actually refers to adding ATEN/ALTUSEN NET™ devices into the CC2000 management system (see page 199 for details). Note: 1. Before attempting to add an ATEN/ALTUSEN NET™ device to the CC2000 server, make sure it has been recognized. See Preliminary Procedures, page 76 for details.
Page 96
CC2000 User Manual When you select Device as an item to be added, the Choose Device page comes up listing all the online devices that can be added: To add a device, do the following: 1. Click to put a check in the checkbox in front of the device you wish to add. 2.
Page 97
Chapter 6. Device Management 3. Fill in the fields according to the information provided in the table, below: Field Information Basic Information Name: Provide a name to identify the device. The default is the name given to the device under its independent configuration.
Page 98
CC2000 User Manual Field Information CC2000 Options Disable other authentication: As an added security measure, if this feature is enabled, the device will only accept logins through the CC2000. While the device is connected to the CC2000 system, users cannot log in to the device using the device’s own authentication system, and they can only manage the device through the CC2000’s interface.
Chapter 6. Device Management Creating Devices Once devices have been added, you can create several types of logical device constructs by combining various ports as described in the sections that follow. Adding an Aggregate Device When you select Aggregate Device as an item to be added, the Add Aggregate Device page comes up: Note: See Aggregate Device, page 79, for an explanation of aggregate devices.
Page 100
CC2000 User Manual 5. When you have finished with this page, click Next. The Configure Network Connectivity page comes up: 6. Fill in the fields according to the information in the table, below: Field Explanation Network Information Select network: If the server for the aggregate device only has one network interface, select Primary, then move on to configure the remaining fields.
Page 101
Chapter 6. Device Management Field Explanation Web Session URL: To access the Aggregate Device server via the Web, key in the URL that will bring up its management page. Access type: Drop down the list to select the access type. The choices are Generic, or one of the supported blade chassis types.
CC2000 User Manual Adding Ports to an Aggregate Device To add ports to your Aggregate Device, do the following: 1. Select your Aggregate Device in the Device List or the Sidebar. The Port List page comes up: Note: 1. Redundant Power settings are only enabled for Aggregate Devices if power outlets have been added to the device.
Chapter 6. Device Management 3. You can combine any of the ports that are listed on the page in the Aggregate Device. Put a check in the checkbox in front of the ports that you want, then click Save. 4. If a port is already part of another aggregate or group device, a dialog box appears to notify you that it will be removed from the original device when added to this aggregate device and asks you to confirm that this is what you want to do.
Page 104
CC2000 User Manual Field Information Username / Key in a username and password that will be required to access Password the blade server (via Telnet or SSH). Note: Use an account with administrator privileges to get needed information. Timeout The amount of time to wait for a connection request to complete before cancelling the request.
Page 105
Chapter 6. Device Management 5. When you have finished with this page, click Next. The Configure Blade Properties page comes up: 6. For each blade, you can specify its Department, Location, and Type, and provide a brief Description. 7. When you have finished with this page, click Save. The Add Ports page comes up: 8.
CC2000 User Manual Adding a Virtual Machine When you select Virtual Machine as an item to be added, the Add VMware page comes up. 1. Fill in the fields according to the information provided in the table, below: Field Information IP / Port Key in the virtual machine’s IP address and the access port used to connect to it (via browser).
Chapter 6. Device Management 3. This page is similar to the one described under Adding an Aggregate Device. Fill in the fields according to the information provided on page 85, then click Next. The Configure Network Connectivity page comes up. 4.
Page 108
CC2000 User Manual 1. Fill in the fields according to the information provided in the table, below: Field Information Device Information Name: Provide a name to identify the device. Description: If you wish to provide extra information to describe the device, enter it here. This field is optional. Department: For organizational purposes you can establish department categories (R&D, for example), and assign devices to them (see Departments, Locations and...
Page 109
Chapter 6. Device Management To give users and groups access rights to the device, do the following: 1. Select the newly added Generic Device in the main panel or the Sidebar, then select Access Rights on the Panel Menu bar. The User/Group List page comes up.
CC2000 User Manual Adding a Group Device When you select Group Device as an item to be added, the Add Group Device page comes up. The procedure for adding Group Devices is essentially the same as that for adding Aggregate Devices. Follow the steps described in that section (see page 85) to add a Group device and assign ports to it.
Chapter 6. Device Management Deleting Devices To delete a device, do the following: 1. Select Devices either from the Sidebar list, or on the main menu bar (the orange bar). 2. Click to put a check in front of the device you wish to delete. Note: You can delete more than one device by checking as many of them as you require.
CC2000 User Manual Redundant Power This page section becomes available in the Ports Panel Menu when a device has a Power Over the NET™ (PNXXXX) device associated with it. It is provided so that a second PON outlet can be configured for devices with redundant power supplies –...
Chapter 6. Device Management Locking / Unlocking Ports When physical devices are added to the CC2000 management system, their ports are locked by default – to make a port available, it must be unlocked. When a port is selected, two buttons appear at the top-right of the Port Properties page: Lock and Unlock.
CC2000 User Manual Tools When you click Tools on the Panel Menu bar, the following page comes up: Clicking an icon performs a specific task. The task that each of the icons performs is described in the table, on the next page. Icon Task Broadcast IP address and port number to the devices: Before a device...
Chapter 6. Device Management Icon Task Restore device configuration: This feature is used to restore a device’s configuration and/or account information to one saved on a previously backed up configuration file (See Backup Device Configuration/Account Information, page 169). See the section, below, for the restoration procedure. Device Name Sync: If device name changes have taken place, this feature is used to manually sync the names between the devices and the CC2000.See Device Sync, page 102 for automatic syncing details.
CC2000 User Manual Device Sync When you click Device Sync on the Panel Menu bar, the following page comes This page lets you configure automatic syncing of names between the CC2000 and the installed devices. Check the boxes for the features you want to enable, then click Save.
Chapter 6. Device Management Sidebar Device Configuration Certain aspects of a device’s configuration are established when the device is created. There are additional settings for managing your devices that become available when you select a device item in the Sidebar or from the Device List in the main panel.
Page 118
CC2000 User Manual An explanation of the property items is given in the table, below: Item Explanation Basic Information Name: Provide a name to identify the port. The default is the port name it was given under its original device configuration. If you change the name here, the change only takes place in the CC2000 database.
Chapter 6. Device Management Properties Page Action Buttons When a top-level (non-nested) ATEN/ALTUSEN device is selected in the Sidebar or the Interactive Display Panel, a series of action buttons appear at the top-right of the Interactive Display Panel. The purpose of these buttons are...
CC2000 User Manual Access Rights – KVM Devices When a KVM device is selected in the Sidebar or the Interactive Display Panel, you can set the configuration and access rights for it by clicking the Access Rights Panel Menu item. Clicking this item brings up a page that shows a list of all the users and groups that have been given access to it.
Chapter 6. Device Management Modifying a User’s or Group’s Rights To modify a user’s or group’s rights to the device, do the following: 1. In the Configuration Rights column that corresponds to the user or group you want to modify, click on the arrow; make your new selection; then click Close.
CC2000 User Manual Access Rights – KVM Ports When a port is selected in the Sidebar or the Main panel list you can set the rights for which users will be allowed to configure and access it by clicking the Access Rights Panel Menu item.
Chapter 6. Device Management Modifying a User’s or Group’s Rights To modify a user’s or group’s rights to the port, do the following: 1. In the Configuration Rights column that corresponds to the user or group you want to modify, click on the arrow; make your new selection; then click Close.
CC2000 User Manual Device Configuration (For KVM Devices) The purpose of Device Configuration is to allow you to configure the device from within the CC2000, without having to access the device directly. Changes on these pages actually get made on the device, itself. Note: If the link between the CC2000 and the device should be broken for some reason, device configuration changes made on these pages will not be transmitted to the device.
Chapter 6. Device Management The secondary Panel Menu pages correspond to the administration functions described in the device’s User Manual. For configuring the settings, refer to the manual’s Device Management chapters to obtain the necessary information. When you have finished making your configuration settings, click Save. Note: 1.
Page 126
CC2000 User Manual This Panel Menu page is used to set the I/O attributes of the selected port: The meanings of the attribute headings are described in the table, below: Heading Meaning Port Name This is the name given to the port. Exit Macro If system macros have been made, drop down the list to select the one you want.
Chapter 6. Device Management Power Devices, Stations, and Outlets Selecting a Power device or one of its outlets, brings up a page with two entries on the Panel Menu bar: Properties, and Access Rights. Each of these items is discussed in the sections that follow. Note: 1.
CC2000 User Manual Access Rights – Power Devices, Stations, and Outlets Access rights can be configured for the entire device (nested stations and outlets), station-by-station, or outlet-by-outlet. After selecting the device, station, or outlet, clicking this Panel Menu item brings up a page that shows a list of all the users and groups that have been given access to it.
Chapter 6. Device Management Device Configuration (For Power Devices) This Panel Menu item is similar to the one for KVM device configuration discussed on page 110, except it has different secondary pages: The purpose of these secondary pages is to allow you to configure the device from within the CC2000, without having to access the device directly.
Page 130
CC2000 User Manual The secondary pages correspond to the administration functions described in the device’s User Manual. For configuring the settings, refer to the manual’s Administration chapter to obtain the necessary information. When you have finished making your configuration settings, click Save. Note: 1.
Chapter 6. Device Management Station Configuration (For Power Devices) Since Power devices can be daisy chained, the chained stations are nested under the Power device’s entry in the Sidebar. The Properties and Access Rights pages for this Panel Menu item have already been discussed, starting on page 113.
Page 132
CC2000 User Manual The User Management secondary Panel Menu page lets you Add, Edit, and Remove user access to the ports on the station. To Add a user, do the following: 1. Click the Add button (at the top-right of the panel). The User Management page comes up: 2.
Chapter 6. Device Management Port (Outlet) Configuration (For Power Devices) Power outlets are nested under each of their stations. Each outlet’s settings can be configured independently – on an outlet-by-outlet basis. The Port Configuration Panel Menu has two secondary items: Port Settings and Schedule Settings.
CC2000 User Manual If you want to make changes to the settings, refer to the configuration sections of the device’s User Manual for an explanation of the fields. Depending on the device, the sections will be found under Outlet Level Configuration (PN7XXX Series), Power Management Configuration (PN9108), or Device Control (PN0108).
Page 135
Chapter 6. Device Management If the outlet is on a PN7XXX Series PDU, the page that comes up looks similar to the screen below: Refer to the Schedule section of each device’s User Manual for a description of how to set up a scheduled Power On/Off configuration for the outlets. When you have finished making your changes on the Port Configuration page, click Save.
CC2000 User Manual Serial Devices and Ports Selecting a Serial device, such as the SN0108, brings up a page with the following entries on the Panel Menu bar: Properties, Access Rights, and Device Configuration. When you select a port on the Serial device, the Device Configuration heading changes to Port Configuration.
Chapter 6. Device Management 6. When you have finished making your access rights settings, click Save. The new users and groups are added to the device or port User/Group list. Modifying a User’s or Group’s Rights To modify a user’s or group’s rights to the device, station, or port, do the following: 1.
CC2000 User Manual Device Configuration (For Serial Devices) The Device Configuration page is similar to the one for Power Devices, Stations, and Outlets (see Device Configuration (For Power Devices), page 115), but there are some differences in the secondary Panel Menu pages: The purpose of these secondary pages is to allow you to configure the device from within the CC2000, without having to access the device directly.
Chapter 6. Device Management Port Configuration (For Serial Devices) Serial COM ports are nested under each of their devices. Each port’s settings can be configured independently – on a port-by-port basis. Port Configuration has two secondary Panel Menu items: Port Settings and Advanced Port Settings.
CC2000 User Manual Advanced Port Settings This page provides a way for you to be notified about problems that occur on a device’s COM ports on a port-by-port basis. To configure notification, do the following: 1. Select the port in the sidebar; hover over Port Configuration on the Panel Menu bar;...
Chapter 6. Device Management Departments, Locations and Types For convenience, and ease of management, the Departments, Locations, and Types pages provide three more ways of organizing your devices. To use this organizational scheme, you would first create appropriate categories (such as R&D and Manufacturing under Departments;...
CC2000 User Manual Modifying a Department, Location, or Type To change the name or description of a Department, Location, or Type, do the following: 1. Select Department, Location, or Type on the Menu Bar. 2. In the Sidebar or Main Panel, select the Department, Location, or Type you want to modify.
Chapter 6. Device Management Unsupported Devices Unsupported devices are ATEN/ALTUSEN devices whose firmware level is not compatible with the CC2000’s current firmware level. Clicking Unsupported Devices on the Menu Bar brings up a page that lists all such devices deployed on the CC2000 installation: To make these devices available for management under the CC2000, their firmware must be upgraded to the latest version.
Page 144
CC2000 User Manual This Page Intentionally Left Blank...
Chapter 7 System Management Overview A CC2000 installation is comprised of CC2000 compatible devices residing on a network segment that are connected – over-IP – to a CC2000 server that also resides on that same network segment. By connecting individual CC2000 server segments through their IP addresses into an integrated worldwide network, the CC2000 Control Center Over the NET™...
CC2000 User Manual Menu Structure The System Management menu structure is described in the table below: Panel Menu Page Menu Panel Menu Page Submenus System CC Network CC Servers Properties Management Sessions Sessions Security Monitor This Server Server Information SMTP Server Settings Syslog Dial In...
Chapter 7. System Management CC Network The CC Network menu offers four Panel Menu choices: CC Servers, Sessions, Security, and Monitor. The default CC Network page is CC Servers, and looks similar to the one below: CC Servers The Sidebar provides a tree view listing of all the CC2000 servers that exist on the installation.
CC2000 User Manual The meanings of the Server table headings are given below: Heading Meaning Server Name The name given to the server when it was installed (see Server Information, page 137). Server Type /IP Local indicates the CC2000 that you have logged into. For other CC2000s on the installation, the term Remote and the CC2000’s IP address appears.
Chapter 7. System Management Security The Security Panel Menu offers two setting categories: Login Policy and Lockout Policy: Login Policy Select Allow single login if you don’t want users to be able to log in more than once at the same time. Select Allow duplicate logins if you want users to be able to log in with the same account more than once at the same time.
CC2000 User Manual Monitor The Monitor Panel Menu item offers another way of accessing one of the CC2000 servers on your installation: The page opens to a live map view. It allows you to see at a glance all the CC2000 servers on the installation, and their online/offline status.
Chapter 7. System Management This Server The This Server Page Menu refers to the CC2000 you are currently logged into – other CC2000 servers on the installation are ignored. The menu offers five Panel Menu choices: Server Information, Server Settings or Master Settings, VMWare Settings, Security, and Certificate.
Page 152
CC2000 User Manual This page allows you to configure the CC2000 server’s settings. The meanings of the field headings are described in the table, below: Field Description Name* You can change the CC2000 server’s name by editing this field. Description You can change the CC2000 server’s description by editing this field.
Chapter 7. System Management Action Buttons In addition to the Save button, there are two other action buttons at the top-right of the panel: Promote Role, and Register. Their functions are described in the sections below: Promote Role (Slave to Master) The Promote Role button at the top-right of the panel, is used to transform a slave CC2000 to a master.
CC2000 User Manual Register The Register button at the top-right of the panel, is used to integrate a CC2000 server as a slave into a larger CC2000 network. When you click this button, the following screen appears: To integrate the server into the larger network, enter the required information in the appropriate fields, then click Register.
Chapter 7. System Management Server Settings The Server Settings Panel Menu item only appears for master servers, and contains several secondary pages. To modify the information on these pages, you can either move through them sequentially, by clicking the arrow icons ( at the left of the main panel in the gray bar, or you can go directly to a page by hovering over the menu and selecting the page from the popup menu that appears.
Page 156
CC2000 User Manual 5. If the SMTP server requires authentication, check the SMTP server requires authentication checkbox, then specify the authentication account name and password in the appropriate fields. 6. Click Test to check that the SMTP server setting is configured properly. A screen similar to the one below appears: 7.
Chapter 7. System Management The NTP page lets you have the CC2000’s time automatically synchronized to a network time server: Note: 1. The top three fields are filled automatically by the CC2000, and can’t be edited. 2. If you are in a timezone that doesn’t have daylight savings time, the Automatically adjust clock for daylight savings time, checkbox is disabled.
CC2000 User Manual Syslog To record all the events that take place on the CC2000 and write them to a Syslog server, do the following: 1. Check Enable. 2. Key in the IP address and the port number of the Syslog server. The valid port range is 1-65535.
Chapter 7. System Management Dial In In addition to Internet connections, the CC2000 can also be accessed via PPP (modem). The Dial In settings page is used to specify which users can make use of this feature, and the methods that they can use to connect. When you select Dial In, a page, similar to the one below, appears: To allow PPP dial in connections, do the following: 1.
CC2000 User Manual Dial Out For the dial out function, you must establish an account with an ISP (Internet Service Provider), and then use a modem to dial up to your ISP account. If you want to be able to dial out, activate the dial out function by putting a checkmark in the Enable Dial Out checkbox.
Page 161
Chapter 7. System Management An explanation of the items on the Dial Back page is given in the table below: Item Action ISP Settings 1. Provide a name for the dial out connection (optional). 2. Specify the telephone number, account name (username), and password that you use to connect to your ISP.
Page 162
CC2000 User Manual Item Action Mail Configuration This section provides email notification of problems that occur on the devices connected to the CC2000's ports. Selecting Default SMTP server uses the server you set as the CC2000's SMTP server (see SMTP, page 141). If you would prefer to use a different SMTP server for Dial Out purposes, select the Preferred SMTP server radio button.
Chapter 7. System Management Master Settings This menu item is only found on slave CC2000 servers. It is used under the following conditions: If the master’s IP address changes. If the slave is offline at the time the master’s CC Port or HTTPS port changes.
CC2000 User Manual VMWare Settings The VMWare Remote Console (VMRC) plugin lets you access a VMWare virtual machine from within the browser. You will need to install this plugin if you have added a VMWare virtual machine to your CC2000 management system.
Chapter 7. System Management Security This page provides a level of security by controlling access to the CC2000. IP Filtering IP filtering controls access to the CC2000 based on the IP addresses of the computers attempting to connect to it. To enable IP filtering, check the Enable IP Filter checkbox.
CC2000 User Manual MAC Filtering MAC filtering controls access to the CC2000 based on the MAC addresses of the computers attempting to connect to it. To enable IP filtering, check the Enable IP Filter checkbox. If Validate MAC at CC2000 login is enabled, the CC2000 will verify the client PC’s MAC address when the user attempts to log in.
Chapter 7. System Management Certificate When logging in over a secure (SSL) connection, a signed certificate is used to verify that the user is logging in to the site he intended. The Certificate page is used to create, modify, or obtain a certificate for this purpose. During installation, each CC2000 creates its own, independent, self-signed certificate based on the installation information, similar to the one below: Changing a Self-Signed Certificate...
Page 168
CC2000 User Manual 2. Select the Create a new self signed SSL server certificate radio button, then fill in the fields according to the information in the table below: Field Description Common Name This is the Fully Qualified Domain Name (FQDN) for which you are requesting the SSL certificate.
Chapter 7. System Management Importing a Signed SSL Server Certificate In order to avoid users having to go through the certificate acceptance prompt each time they log in, administrators may choose to use a third party certificate authority (CA) signed certificate. To use a third party signed certificate, do the following: 1.
CC2000 User Manual License The CC2000 license controls the number of nodes permitted on the CC2000 server installation. The default license that comes with your purchase is a demo license for one master (no slaves), that allows 16 nodes. To add anything more (slave servers and nodes), you must upgrade the license.
Chapter 7. System Management Upgrading the License To upgrade the license: 1. Contact your dealer to obtain a license key for the number of slaves and nodes you want to be able to access. 2. Insert the license key into a USB port on your master server. 3.
CC2000 User Manual License Conflict If there are two masters on the same network segment that have been upgraded with the same license key, a license conflict will occur. The CC2000 Browser GUI of the CC2000 server that was the second one to be installed, will open to a page that looks similar to the one below: To confirm that a conflict has occurred, click the Logs tab.
Chapter 7. System Management Tasks The Tasks menu allows authorized administrators to perform a number of system maintenance tasks. The tasks that can be performed are determined by the user’s type, and the authorization options that were selected when the user’s account was created.
CC2000 User Manual The Task List table lists all the tasks that have been configured. The meanings of the headings are explained in the table, below: Heading Explanation Name The name you gave to the task when you configured it. Type The type of task that it is.
Chapter 7. System Management Backup the Master Server Database When you choose the Backup the master server database task, the following page appears: 1. Key in a name for the task, and a password. Note: 1. This task is only available on the master server. 2.
Page 176
CC2000 User Manual 3. When you have filled in the information called for, click Next. The Schedule page appears: 4. Drop down the list to see the available choices. Depending on what you select, further scheduling choices may appear. For example, if you choose Monthly, a page that allows you to set the monthly schedule appears: Note: If you set a time in the schedule for the backup to take place...
Chapter 7. System Management 5. When you have finished making your schedule choices, click Next. The task is now added to the Task List on the main page. Note: You can run a task (or tasks) at any time by putting a check in the box in front of its name and clicking Run Now at the top-right of the panel.
Page 178
CC2000 User Manual 1. Key in a name for the task in the Task name field. Note: The Export Event Log operation is performed on each server independently. To search a server’s records you must look at its particular file. You can identify the file by means of the Task name you gave it.
Chapter 7. System Management 10. When you have completed your schedule choices, click Next. The procedure completes and you return to the Tasks main page. The Export Event Log task, configured according to the choices you made, is now added to the Sidebar and the Task List: Power Control a Device This task allows you to set a time schedule that automates turning power ports on and off for the selected device as a whole, or on a port-by-port basis.
CC2000 User Manual 5. Make your schedule choices in the Schedule page that comes up. Note: The schedule choices are similar to the ones described for the Backup master server database task. Refer back to page 162 for details, if necessary. 6.
Page 181
Chapter 7. System Management To schedule the firmware upgrade of selected appliances, do the following: 1. Click a radio button to choose whether to use the latest upgrade file stored with the CC2000 server, or to upgrade with a selected file that you have uploaded.
Page 182
CC2000 User Manual 5. Click a radio button to select which appliances will receive the upgrade. 6. If you choose Selected device type, drop down the list and select the device type. Only those devices that are of the selected device type receive an upgrade.
Chapter 7. System Management Backup Device Configuration/Account Information When you choose the Backup device configuration/account information task, the following page appears: 1. Provide a name for the task and a password. Note: Make a note of the password and store it in a safe place. You will need it when restoring the configuration/account information.
CC2000 User Manual Export Device Log The CC2000 acts as a log server for all ATEN/ALTUSEN NET™ devices, recording the system events that take place on the devices in a database. This task allows you to write the contents of the device database to a file. When you choose the Export device log task, the following page appears: 1.
Page 185
Chapter 7. System Management 2. Select the location where you want to store the exported file, and fill in the fields accordingly. The default setting is for the file to be exported to a directory on the current CC2000 server. Note: The path to the directory on your server that will hold the backup file is pre-configured based on the directory that the CC2000 was installed in.
CC2000 User Manual Export Session History The CC2000 keeps a record of all user sessions that take place (see Session History, page 193). This function lets you save the session history of each device and port to file. When you choose the Export session history task, the following page appears: 1.
Chapter 7. System Management 3. When you have finished with this page, click Next (at the top-right of the panel), to move on. 4. Make your schedule choices in the pages that come up. Note: The schedule choices are similar to the ones described for the Backup master server database task.
CC2000 User Manual Replicate Database The Tasks page for a slave server is similar to that of a master server (see page 159), except that it has a pre-configured default entry, Replicate Database, that replicates its database on the master it is connected to: When you select Replicate Database, the Schedule page comes up.
Chapter 7. System Management Appliance Files The Appliance Files menu is used for two purposes: centralized firmware management, and restoring previously backed up configuration files. Firmware Files The Appliance Files menu opens to the Firmware Files page, which looks similar to the screen shown below: This page lists all the firmware upgrade files stored on the CC2000 –...
CC2000 User Manual 2. Browse to the location where the upgrade files that you have downloaded from our website are stored, and select the appropriate file. 3. Provide a description for the file. 4. click Save (at the top-right of the main panel) to complete the procedure and add the firmware file to the list.
Chapter 7. System Management Configuration Files Deleting Configuration Files Clicking on Configuration in the Sidebar brings up the Configuration Files page, which looks similar to the screen shown below: This page lists the backup configurations for the server made with the Backup device configuration/account information task (see page 169 for details), and allows you to delete the files you no longer wish to keep.
CC2000 User Manual Sidebar Server Tree When CC Network is selected on the menu bar, clicking on a server name – either in the Sidebar or in the Interactive Display Panel – brings up a page with two Panel Menu entries: Properties, and Sessions. Properties The Properties page is loaded as the default: This page displays information reflecting the server’s configuration settings.
Chapter 7. System Management Sessions Clicking Sessions on the Panel Menu that appears when a particular CC2000 server is selected in the Sidebar or the main panel list, brings up a screen that lets the administrator see at a glance all the users currently logged into this particular CC2000, and provides information concerning the “who, where and when”...
Page 194
CC2000 User Manual This Page Intentionally Left Blank...
Chapter 8 Logs Overview The CC2000 keeps an extensive record of all the transactions that take place on its installation. The Logs page provides a powerful array of filters and functions that allow you to view and export the log file data, as well as be informed by email of specified events as they occur.
Page 196
CC2000 User Manual The Sidebar provides a filtering function – click an item to only display the events that pertain to it. The last item, Advanced Search, is described in detail on page 189. Note: 1. In general, a blank page, indicates that there were no log events recorded for that category.
Chapter 8. Logs CC Log Options The CC Log Options page gives you control over log file composition and maintenance. When you select Options, a page similar to the one below appears: The meanings of the configuration items are described in the table, below: Item Description Maintenance Click a radio button to select whether to maintain the log database on a...
CC2000 User Manual Item Description Events Lets you select which events you want to track, and whether to record them in the CC Log, the Syslog, or both. Clicking to put a checkmark in a checkbox enables your choice. There are 7 event categories; each category contains a list of separate events.
Chapter 8. Logs Adding and Configuring Notification Users To add users and specify the events they will receive notification of, do the following: 1. Click Add at the top-right of the panel. The Email Notification - Add/Edit Notification Events page appears: 2.
CC2000 User Manual Modifying Notification Configurations To modify a notification configuration, click its Subject name in the Email Notification table; make your desired changes on the Email Notification - Add/ Edit Notification Events page; and click Save at the top-right of the panel. Deleting Notification Configurations To delete a notification configuration, click to put a check in the checkbox in front of its Subject name in the Email Notification table;...
Page 201
Chapter 8. Logs To save specified logged events to a file, do the following: 1. Select a log file item that you want to include in the exported file in the Available column, then click Add to move it into the Selected column. Repeat for any other log file items you want to include.
CC2000 User Manual Import Logs The Import Logs page is used to open previously saved log files for viewing. When you select Import Logs on the Submenu bar, a page similar to the one below appears: To import a previously saved log file, do the following: 1.
Chapter 8. Logs Advanced Search Advanced Search lets you very finely tune your search by narrowing down the parameters for each of the search choices. To perform an advanced search, do the following: 1. In the Sidebar, click Advanced Search. A screen, similar to the one below appears: 2.
CC2000 User Manual Device Logs The CC2000 acts as a log server for all ATEN/ALTUSEN NET™ devices, recording the system events that take place on those devices in a database. When you click Device Logs on the Submenu bar, the Device Logs Search...
Chapter 8. Logs To save the log list to a file, click the button with the diskette icon. (Only the list that is displayed – all, or a filtered choice – is saved). To print out the log list, click the button with the printer icon. (Only the list that is displayed –...
CC2000 User Manual Device Log Options The Device Log Options page provides management options regarding the CC2000’s device log database. When you select Device Log Options, a page similar to the one below appears: Maintenance allows you to select whether to maintain the device log database on a days or records basis.
Chapter 8. Logs Session History The CC2000 keeps a record of all user sessions that take place. When you click Session History on the Submenu bar, the Session History Search page appears: Session History Search To search the session history records, do the following: 1.
CC2000 User Manual Session History Options The Session History Options page provides management options regarding the CC2000’s session history database. When you select Session History Options, a page similar to the one below appears: Maintenance allows you to select whether to maintain the session history database on a days or records basis.
Appendix A Technical Information Safety Instructions General Read all of these instructions. Save them for future reference. Follow all warnings and instructions marked on the device. Do not place the device on any unstable surface (cart, stand, table, etc.). If the device falls, serious damage will result.
Page 210
CC2000 User Manual If an extension cord is used with this device make sure that the total of the ampere ratings of all products used on this cord does not exceed the extension cord ampere rating. Make sure that the total of all products plugged into the wall outlet does not exceed 15 amperes.
Safety Instructions Rack Mounting Before working on the rack, make sure that the stabilizers are secured to the rack, extended to the floor, and that the full weight of the rack rests on the floor. Install front and side stabilizers on a single rack or front stabilizers for joined multiple racks before working on the rack.
CC2000 User Manual Technical Support International For online technical support – including troubleshooting, documentation, and software updates: http://support.aten.com For telephone support, see Telephone Support, page iii. North America Email Support support@aten-usa.com Online Troubleshooting http://www.aten-usa.com/support Technical Documentation Support Software Updates Telephone Support...
CC2000 Capable ALTUSEN/ATEN IP Prod- CC2000 Capable ALTUSEN/ATEN IP Products The following is a list of ALTUSEN/ATEN IP products that are capable of being managed in a CC2000 Control Center Over the NET™ installation. CN8000 CS1708i; CS1716i IP8000 KH1508i; KH1516i KL9108;...
CC2000 User Manual Supported KVM Switches The following is a list of fully supported KVM switches that can be used in a cascaded installation. KH88 KH98 KH1508 KH1516 CS9134 CS9138 Note: The installation cannot be cascaded beyond the second level. Device ANMS Settings To enable CC Management of a device from the device’s ANMS settings page, do the following:...
Device ANMS Settings VPNs Basically, a VPN (virtual private network) is a private network that uses a public network (usually the Internet) to connect several sites together. It typically includes several WANs. Many companies create their own VPN to provide a secure network connection between two sites. One drawback to VPNs, however, is that while the network is secure, throughput can be slow.
CC2000 User Manual Firewalls When several CC2000 servers are located behind separate firewalls, the following service ports must be specified on the servers, and the corresponding ports must be opened on the firewall. 1. CC Port Note: Each CC2000 server can have a different setting (8001 on Server 1; 8005 on Server 2, for example).
Device ANMS Settings CC2000 Proxy Function The CC2000 Proxy function relates to CC2000 servers located behind a firewall. For CC2000 Client Workstations that are outside the firewall to access KVM and Serial devices managed by CC2000 servers inside the firewall, the CC2000 Proxy function must be enabled on those servers, and the port specified as the proxy port must be opened on the firewall.
CC2000 User Manual Name, Description and Range Parameters The following table lists the parameters and defaults for names, descriptions and ranges found in the CC2000 management system: Note: Unless otherwise specified, field entries can be input in any supported language. Category Length / Range Default...
Page 219
Device ANMS Settings Category Length / Range Default User Types Name 2–32 Bytes. The following characters may not be used: " ' Description Up to 256 Bytes. Authentication Server name 2–32 Bytes. Server The following characters may not be used: " ' Description Up to 256 Bytes.
Page 220
CC2000 User Manual Category Length / Range Default Tasks All Tasknames No limit on the number of Bytes. Master Database 0–8 Bytes. Backup Password 0 means no password authentication. Export Device Log No limit on the number of Bytes. Pattern CC Log By Period 7–90 days...
Device ANMS Settings Trusted Certificates Overview When you try to log in to the device from your browser, a Security Alert message appears to inform you that the device’s certificate is not trusted, and asks if you want to proceed. The certificate can be trusted, but the alert is triggered because the certificate’s name is not found on the Microsoft list of Trusted Authorities.
CC2000 User Manual Troubleshooting Problem Resolution When I try to install the The CC1000 and CC2000 cannot exist on the same CC2000 software, I get the server. You must first uninstall CC1000 before installing following error message: CC2000. See Uninstalling the CC1000, page 9, for “CC1000 is already details.
Page 223
Device ANMS Settings Problem Resolution The language of the login The language precedence of the login page is to first dialog box wording is not the look at the language that your browser is set for, and language I have set in my next to look at what your OS language is.
Page 224
CC2000 management system. See CC2000 Capable the CC2000. ALTUSEN/ATEN IP Products, page 199, for a list of supported devices. 2. The device’s firmware must be upgraded to the latest version in order to be capable of CC2000 management.
Page 225
Device ANMS Settings Q1: When I open a viewer, the web page does not display or work correctly, and I receive an error message that is similar one of the following: 1. Reset the Internet Explorer security settings to enable Active Scripting, ActiveX controls, and Java applets By default, Internet Explorer 6 and some versions of Internet Explorer 5.x use the High security level for the Restricted sites zone and Microsoft...
Page 226
CC2000 User Manual 4. Delete all the temporary Internet-related files To remove all the temporary Internet-related files from your computer, follow these steps: a) Start Internet Explorer. b) On the Tools menu, click Internet Options. c) Click the General tab. d) Under Temporary Internet files, click Settings.
Appendix B The CC2000 Utility Overview The CC2000 Utility gets installed as part of the CC2000 installation procedure. It allows you to configure a number of the CC2000’s parameters from the desktop of the computer that the CC2000 runs on, without having to invoke the browser GUI.
CC2000 User Manual When you run the program, a screen, similar to the one below, appears: The Utility offers three tabs: System Settings; Restore; and View Licenses. Each of the tabs is described in the sections that follow. System Settings Apache Tomcat is the program that serves the CC2000’s web pages.
System Settings Restore Clicking the Restore tab brings up a dialog box that looks similar to the one below: The dialog box is divided into three panels, as described in the table below: Panel Description Operation Status You can use this to check that the CC2000 service is up and running normally.
CC2000 User Manual View License The View Licenses tab lets you view the licenses that are related to the CC2000 package. To view a license, click its radio button.
Appendix C Authentication Key Utility Overview The Authentication Key Utility (CCAuthKeyStatus.exe), is a Windows-based utility for accessing and updating the information and data contained in the CC2000 Authentication Key. CCAuthKeyStatus.exe, can be found on the CD that comes with the CC2000 package. When you run the program, a screen, similar to the one below, appears: Key Status Information The layout of the dialog box is described in the table, below:...
CC2000 User Manual Key Firmware Upgrade The CC2000 Authentication Key’s firmware is upgradable. As new revisions of the firmware become released, upgrade file are posted on our web site. Check the web site regularly to find the latest files and information relating to them.
Page 233
Overview (Continued from previous page.) 5. In the File Open dialog box that appears, select the firmware upgrade file, then click Open. 6. Read and Agree to the License Agreement (enable the I Agree radio button). (Continues on next page.)
Page 234
CC2000 User Manual (Continued from previous page.) 7. The utility searches your installation. When it finds your device, it lists it in the Device List panel. Note: If you enable Check Firmware Version, the Utility compares the device's firmware level with that of the upgrade files. If it finds that the device's version is higher than the upgrade version, it brings up a dialog box informing you of the situation and gives you the option to Continue or Cancel.
Overview (Continued from previous page.) Upgrade Succeeded After the upgrade has completed, a screen appears to inform you that the procedure was successful: Click Finish to close the Firmware Upgrade Utility.
CC2000 User Manual Key License Upgrade Overview The CC series has a feature that allows end users (clients) to update their authentication keys to reflect an increase to their number of licenses. The key license upgrade can be performed either by the clients or by the dealers/ distributors, and can take place either in a browser session over the Internet (an Online upgrade), or via a stand-alone utility program (an Offline upgrade).
To perform a an online upgrade, do the following: 1. Plug the authentication key into a USB port on your computer. 2. Open a browser and log into the URL indicated in the email. Note: Accept the certificate(s) if asked. The ATEN Partner Center page appears:...
Page 238
CC2000 User Manual 3. The key license upgrade panel is at the lower right. Click the Click to go button to start the upgrade procedure. Note: 1. You can open an online help file for performing the upgrade by clicking the Upgrade Help button 2.
Page 239
Overview 6. In the License Upgrade Order Information screen, key in the current number of licenses in the From fields (the To fields are automatically filled in), and select Online upgrade. Note: You can use the Key status utility (CCAuthKeyStatus.exe) to see the current number of licenses.
Page 240
CC2000 User Manual 7. Click Continue. 8. When the CC Authentication Key License Upgrade by Distributor screen comes up, click Download. 9. When the browser asks what to do with the file (KeyUpgrade.exe), select Save to disk. 10. Leave the browser open, exactly as it is; go to where you downloaded the file and execute it.
Overview 11. When the upgrade is finished, a window pops up to inform you that the upgrade was successful. Click OK to close the popup.The browser screen provides a summary of the upgrade: 12. Click Logout to exit. You can use the Key status utility (CCAuthKeyStatus.exe) to confirm that the number of licenses on the key has been changed to reflect the successful upgrade: Upgrade Succeeded...
CC2000 User Manual Offline Upgrade An Offline upgrade can be performed either by the dealer/distributor, or the end user client. The advantage of this type of upgrade is that the client doesn’t give up the use of his key. All he needs to do is email a key information data file to the dealer/distributor and receive a key upgrade file in return.
Overview Performing the Upgrade After the dealers/distributors place the upgrade orders with an ALTUSEN sales representative, they receive a confirmation and authorization email from ALTUSEN, for example: Your order is ready to be processed. Please go to http://xxx.xxx.x.xxx to upgrade your key's license. Login Information: Username: myname3 Password: mypassword3...
Page 244
CC2000 User Manual 3. In the screen that comes up, key in the Order ID number and Order Authorization number that applies to the upgrade, then click Continue. 4. When the License Upgrade Order Information screen comes up, key in the number of current licenses in the From fields.
Page 245
Overview 6. When the Upload Key Information screen comes up, click Browse; load the KeyUpload.dat file that was generated in the Preliminary Steps section; then click Continue. 7. The next screen that comes up summarizes the transaction up to this point. Click Continue to move on.
Page 246
CC2000 User Manual 8. In the screen that appears next, click Download to download the key license upgrade data file (KeyUpgrade.dat). 9. When the browser asks what to do with the key upgrade file, select Save to disk. After the file is saved to disk, click Continue to go on. 10.
Page 247
Overview 13. In the License Upgrade panel, click Upgrade. 14. In the dialog box that comes up, navigate to the upgrade file (KeyUpgrade.dat) and select it. Once you click Open, a window pops up stating that the upgrade was successful. The figure for the number of licenses in the License Information panel changes to reflect the upgrade.
CC2000 User Manual Offline Upgrade Failure If the offline upgrade fails, it may be due to the key upgrade file (KeyUpgrade.dat), having become corrupted during the file transfer process. There are two ways to proceed: When the key upgrade file is downloaded, an email is sent to the dealer/ distributor containing the particulars, along with a copy of the upgrade file in case there was a problem with the original file transfer –...
Overview Order Expiration Once ALTUSEN sends the dealer/distributor the confirmation/authorization email informing him that the order is ready to be processed, he has a total of two weeks to process the order. If during that time the order is not processed, two more emails reminding him that order has not been processed are sent: 1.
Page 250
CC2000 User Manual This Page Intentionally Left Blank...
In this example, the external server uses OpenLDAP; its IP address is 192.168.10.100; its service port is 389, and the server administrator has created a file named: cc2000ldap.ldif in the OpenLDAP directory, that contains the following: dn: cn=cc2000,ou=software,dc=aten,dc=com objectclass: top objectclass: person objectclass: organizationalPerson...
Page 252
The CC2000 Administrator gets this information to use in the Adding an External Authentication Server procedure (see LDAP/LDAPS, page 69). In this example, the fields would be filled in as follows: IP: 192.168.10.100 Port: 389 BaseDN: dc=aten,dc=com UserRDN: ou=software Key attribute: cn Object class: person Full name attribute: sn...
Active Directory → → Users and Computers Domain (aten.com in our example) Users. A window, similar to the one below, appears: The CC2000 Administrator gets this information to use in the Adding an External Authentication Server procedure (see Active Directory, page 70). In this example, the fields would be filled in as follows: IP: 192.168.10.100...
CC2000 User Manual RADIUS Settings Example In this example the external server is RADIUS: Microsoft IAS for Windows Server 2003; its IP address is 10.0.0.100. Configure RADIUS as follows: → → → 1. Open Start Control Panel Administrative Tools Internet Authentication Services.
Page 255
LDAP/LDAPS – OpenLDAP Setting Exam- 8. In this example we use CHAP for encrypted authorization The CC2000 Administrator gets this information to use in the Adding an External Authentication Server procedure (see RADIUS and TACACS+, page 70). In this example, the fields would be filled in as follows: IP: 10.0.0.100 Authentication type: CHAP Shared secret: password...
CC2000 User Manual TACACS+ Settings Example In this example the external server is TCACS+: Microsoft IAS for Windows Server 2003 (ClearBox); its IP address is 10.0.0.100. Configure TCACS+ as follows: → → → 1. Open Start All Programs ClearBox RADIUS TACACS+ Server Server Manager.
Page 257
LDAP/LDAPS – OpenLDAP Setting Exam- 9. In this example we use MS-CHAP for the allowed authentication protocol. 10. You return to the ClearBox Server Configurator screen. In the left panel → select Data Sources users. 11. In the main panel of the screen that comes up, there is an MS Access entry field with a path specifying the general.mdb file.
CC2000 User Manual NT Domain Settings Example In this example the external server is Microsoft Windows NT Domain; its Server IP is QA_NT_SERVER. Configure NT Domain as follows: → → → Open Start Programs Administrative Tools (Common) User Manager for Domains. A screen, similar to the one below, appears: The CC2000 Administrator gets this information to use in the Adding an External Authentication Server procedure (see Windows NT Domain, page 71).
LDAP/LDAPS – OpenLDAP Setting Exam- LDAP Group Authorization Setting Examples Example 1 In this example the external server is OpenLDAP on Windows Server 2003 as shown in the LDAP/LDAPS Settings Example on page 237. → 1. Under the CC2000 User Manager tab, select Authentication Services Authentication Servers.
Page 260
MAY ( businessCategory $ seeAlso $ owner $ ou $ o $ description ) ) 2. Edit the cc2000ldap.ldif file to add a definition for groups1 and have cc2000 user accounts fall under groups1, as follows: dn: cn=groups1,ou=groups,dc=aten,dc=com objectclass: groupofnames member: cn=cc2000,ou=software,dc=aten,dc=com cn: groups1 Note: 1.
4. The above example has added a member – cc2000 – to the groups1 group. To add additional members to the group, edit the file to include them. For example: member: cn=cc2000-1,ou=software,dc=aten,dc=com member: cn=cc2000-2,ou=software,dc=aten,dc=com Once these procedures are completed, CC2000 users who are authenticated through the LDAP/LDAPS server, are authorized according to the permissions assigned to the group.
Page 262
MUST ( cn ) MAY ( userPassword $ description $ sn $ mail $ memberof ) ) 2. Edit the cc2000ldap.ldif file to add a user account to the groups1 group, as follows: dn: cn=cc2000test,ou=software,dc=aten,dc=com objectclass: top objectclass: person objectclass: organizationalPerson...
Page 263
LDAP/LDAPS – OpenLDAP Setting Exam- sn: cc2000test memberof: cn=groups1,ou=groups,dc=aten,dc=com userPassword: password Note: 1. The entry after dn: cn= should be an actual user login name. 2. The entry after objectclass: should be consistent with the name that was entered for NAME in the extended schema.
CC2000 User Manual Active Directory Group Authorization Setting Example In this example the external server is Active Directory on Windows Server 2003 as shown in the Active Directory Settings Example on page 239. → 1. Under the CC2000 User Manager tab, select Authentication Services Authentication Servers.
Page 265
LDAP/LDAPS – OpenLDAP Setting Exam- 4. In the right panel, right click CC2000GP; select Properties; select Members. A window, similar to the one below, appears: 5. Click Add. The dialog that comes up lets you add members to the group. The members are selected from the accounts found in the Users folder (see the left panel of the original screen).
Page 266
CC2000 User Manual This Page Intentionally Left Blank...
Page 267
Index CC Viewer, 38 CC2000 Access Rights capable products, 199 Groups, 62 redundancy, 21 KVM devices, 106 CC2000 Authentication, 67 KVM ports, 108 CC2000 Utility Power devices, 114 Overview, 213 Serial devices, 122 Restore, 215 Users, 55 System settings, 214 Active Directory View license, 216 setting example, 239...
Page 268
CC2000 User Manual Restoring, 101 Adding, 81 Device Logs, 190 Options, 192 Search, 191 Generic Device Device Management, 75 Adding, 93 Menu structure, 77 Group Authorization Device Name Sync, 101 settings example, 245 Device Sync, 102 Group Device Device View, 42 Adding, 96 Devices, 78 Groups...
Page 269
Index Assigning devices and ports, 127 Locking ports, 99 Parameters Lockout Policy, 135 Name, description, range, 204 Login Policy, 135 Password Logs System administrator, 24 Advanced search, 189 Port Access, 33 CC log Options, 183 Connections, 41 CC Logs, 181 Department view, 42 Device logs, 190 Device view, 42...
Page 270
CC2000 User Manual OS Support, 6 System administrator password, 24 Server, 5 System Management, 131 Restore, 215 Appliance Files, 175 RoHS, ii CC Servers, 133 CCNetwork, 133 Certificate, 153 Safety Instructions Dial In settings, 145 General, 195 Dial Out settings, 146 Rack Mounting, 197 License, 156 Search...
Page 271
Index Type View, 43 Authentication Services, 66 Types, 62, 127 Deleting User Accounts, 57 Assigning devices and ports, 127 Groups, 59 Managing user accounts, 54 Types, 62 Uninstalling, 19 Unlocking User Accounts, 58 Unlocking ports, 99 User Notice, iii Unlocking user accounts, 58 User Preferences, 29 Unsupported Devices, 129 Port access, 47...
Need help?
Do you have a question about the ALTUSEN CC2000 and is the answer not in the manual?
Questions and answers