Raritan Dominion KX II User Manual
  1. Manuals
  2. Brands
  3. Raritan Manuals
  4. Switch
  5. Dominion KX II
  6. User manual

Raritan Dominion KX II User Manual

Hide thumbs Also See for Dominion KX II:
Table of Contents

Advertisement

Quick Links

Download this manual See also: Configuration Manual, User Manual
Dominion KX II
User Guide
Release 2.3
Copyright © 2010 Raritan, Inc.
DKX2-v2.3.0-0M-E
July 2010
255-62-4023-00

Advertisement

Table of Contents
loading
Need help?

Need help?

Do you have a question about the Dominion KX II and is the answer not in the manual?

Questions and answers

Subscribe to Our Youtube Channel

Related Manuals for Raritan Dominion KX II

Summary of Contents for Raritan Dominion KX II

  • Page 1 Dominion KX II User Guide Release 2.3 Copyright © 2010 Raritan, Inc. DKX2-v2.3.0-0M-E July 2010 255-62-4023-00...
  • Page 2 Raritan, Inc. © Copyright 2010 Raritan, Inc. All third-party software and hardware mentioned in this document are registered trademarks or trademarks of and are the property of their respective holders.

  • Page 3: Table Of Contents

    Dominion KX II Local Console Interface ................37 Dominion KX II Remote Console Interface ................ 37 Proxy Server Configuration for use with Dominion KX II, MPC, VKC and AKC ......50 Multi-Platform Client Interface ..................... 51 Launching MPC from a Web Browser ................51 Virtual KVM Client ........................
  • Page 4 Contents Connection Properties ....................... 57 Connection Information ..................... 59 Keyboard Options ......................59 Video Properties ........................ 62 Mouse Options........................68 VKC Virtual Media ......................73 Smart Cards (VKC, AKC and MPC) .................. 74 Tool Options ........................76 View Options ........................79 Help Options ........................
  • Page 5 Configuring Power Strip (Rack PDU) Targets ..............159 Configuring Blade Chassis ....................165 Configuring USB Profiles (Port Page) ................185 Configuring Dominion KX II Local Port Settings .............. 188 Chapter 9 Security Management Security Settings ........................193 Login Limitations ......................194 Strong Passwords ......................
  • Page 6 Setting Network Parameters .................... 236 CLI Prompts ..........................236 CLI Commands .......................... 236 Security Issues ........................ 237 Administering the Dominion KX II Console Server Configuration Commands ......237 Configuring Network ........................238 Interface Command ......................238 Name Command ......................239...
  • Page 7 Connect Key Examples ....................247 Special Sun Key Combinations ....................248 Accessing a Target Server ......................249 Returning to the Dominion KX II Local Console Interface ............249 Local Port Administration ......................250 Configuring Dominion KX II Local Console Local Port Settings ........250 Dominion KX II Local Console Factory Reset ..............
  • Page 8 CC-SG ............................302 Virtual KVM Client Version Not Known from CC-SG Proxy Mode ........302 Single Mouse Mode - Connecting to a Dominion KX II Target Under CC-SG Control Via VKC Using Firefox ......................302 Proxy Mode and MPC ..................... 303 Moving Between Ports of the Dominion KX II ..............
  • Page 9 Contents Appendix D FAQs General Questions ........................305 Remote Access .......................... 307 Universal Virtual Media ......................309 USB Profiles ..........................310 Bandwidth and KVM-over-IP Performance ................312 Ethernet and IP Networking ....................... 317 IPv6 Networking ......................... 320 Servers ............................322 Blade Servers ..........................

  • Page 10: Chapter 1 Introduction

    Raritan's website. Installation requirements and instructions for client applications used with the Dominion KX II can be found in the KVM and Serial Access Clients Guide, also found on the Raritan website. Where applicable, specific client functions used with the Dominion KX II are...

  • Page 11: What's New In The Help

     You are now able to use a tiering configuration in which a base Dominion KX II device is used to access multiple other tiered devices. See Configuring and Enabling Tiering (on page 139) for more information on tiering.

  • Page 12: Dominion Kx Ii Overview

    Up to 64 servers can be controlled with a standard Dominion KX II. With the Dominion KX II 8-user model, up to 32 servers can be controlled with the KX2-832 and up to 64 servers can be controlled with the KX2-864.
  • Page 13 Chapter 1: Introduction...

  • Page 14: Client Applications That Can Be Used With The Dominion Kx Ii

    Modem PSTN Remote (network) access Client Applications that Can Be Used with the Dominion KX II The following client applications can be used in the Dominion KX II: Product Works with... KX II (Generation 2) KX II 2.2 (or later) See the KVM and Serial Client Guide for additional information on the client applications.

  • Page 15: Virtual Media

    Chapter 1: Introduction Virtual Media All Dominion KX II models support virtual media. The benefits of virtual media - mounting of remote drives/media on the target server to support software installation and diagnostics - are now available in all of the Dominion KX II models.

  • Page 16: Product Photos

    Chapter 1: Introduction Product Photos Dominion KX II KX2-832...
  • Page 17 Chapter 1: Introduction KX2-864...

  • Page 18: Product Features

    8, 16, 32, or 64 (on KX2-464) server ports  32 (KX2-832) or 64 (KX2-864) server ports  Support for tiering in which a base Dominion KX II device is used to access multiple other tiered devices. See Configuring and Enabling Tiering (on page 139) for more information on tiering.

  • Page 19: Software

     IPv4 and IPv6 support  Power control associated directly with servers to prevent mistakes  Integration with Raritan's CommandCenter Secure Gateway (CC-SG) management unit  CC Unmanage feature to remove device from CC-SG control Terminology This manual uses the following terminology for the components of a...
  • Page 20 Local User - an optional user console (consisting of a keyboard, mouse, and multi-sync VGA monitor) attached directly to the Dominion KX II to control KVM target servers (directly at the rack, not through the network). A USB smart card reader can also be attached at the Local port to mount onto a target server.

  • Page 21: Package Contents

    Chapter 1: Introduction Package Contents Each Dominion KX II ships as a fully-configured stand-alone product in a standard 1U (2U for DKX2-864) 19" rackmount chassis. Each Dominion KX II device ships with the following contents: Amount Item included Dominion KX II device...

  • Page 22: Chapter 2 Installation And Configuration

    For example, the default password raritan must be entered entirely in lowercase letters. The first time you start the Dominion KX II, you are required to change the default password. IP address The Dominion KX II ships with the default IP address of 192.168.0.192.

  • Page 23: Getting Started

    Step 1: Configure KVM Target Servers KVM target servers are the computers that will be accessed and controlled via the Dominion KX II. Before installing the Dominion KX II, configure all KVM target servers to ensure optimum performance. This configuration applies only to KVM target servers, not to the client workstations (remote PCs) used to access the Dominion KX II remotely.
  • Page 24 Chapter 2: Installation and Configuration Windows 7, Windows XP, Windows 2003 and Windows 2008 Settings ® To configure KVM target servers running Microsoft Windows ® , Windows XP ® operating system, Windows 2003 ® operating system or Windows 2008 ® operating systems: 1.
  • Page 25 Note: For KVM target servers running Windows XP, Windows 2000 or Windows 2008, you may wish to create a user name that will be used only for remote connections through the Dominion KX II. This will enable you to keep the target server's slow mouse pointer motion/acceleration settings exclusive to the Dominion KX II connection.
  • Page 26 Note: For KVM target servers running Windows XP, Windows 2000 or Windows 2008, you may wish to create a user name that will be used only for remote connections through the Dominion KX II. This will enable you to keep the target server's slow mouse pointer motion/acceleration settings exclusive to the Dominion KX II connection.
  • Page 27 Dominion KX II. c. From the Advanced tab, verify that the Refresh Rate is supported by the Dominion KX II. Note: Once connected to the target server, in many Linux graphical environments, the <Ctrl> <Alt> <+> command will change the video resolution, scrolling through all available resolutions that remain enabled in the XF86Config or /etc/X11/xorg.conf, depending on your X server...
  • Page 28 Chapter 2: Installation and Configuration 2. Ensure that each target server running Linux is using a resolution supported by the Dominion KX II at a standard VESA resolution and refresh rate. 3. Each Linux target server should also be set so the blanking times are within +/- 40% of VESA standard values: a.
  • Page 29 Choose Main Menu > System Settings > Display. The Display Settings dialog appears. b. On the Settings tab, select a Resolution supported by the Dominion KX II. c. Click OK. Note: Once connected to the target server, in many Linux graphical environments, the <Ctrl>...
  • Page 30 1. Choose Desktop Preferences > Graphics Card and Monitor. The Card and Monitor Properties dialog appears. 2. Verify that a Resolution and Refresh Rate is in use that is supported by the Dominion KX II. See Supported Video Resolutions (on page 274) for more information.
  • Page 31 The command line xset mouse a t where a is the acceleration and t is the threshold. 2. All KVM target servers must be configured to one of the display resolutions supported by the Dominion KX II. The most popular supported resolutions for Sun machines are: Display resolution...
  • Page 32 Chapter 2: Installation and Configuration If you have: Use this video output adapter: Sun HD15 with composite 1396C converter to convert from sync output HD15 to 13W3 and an APSSUN II Guardian converter to support composite sync Sun HD15 with separate sync APKMSUN Guardian converter output Note: Some of the standard Sun background screens may not center...
  • Page 33 Chapter 2: Installation and Configuration Video Settings (GUI) The GUI resolution can be checked and set using different commands depending on the video card in use. Run these commands from the command line. Note: 1024x768x75 is used as an example here; substitute the resolution and refresh rate you are using.

  • Page 34: Step 2: Configure Network Firewall Settings

    Chapter 2: Installation and Configuration 6. Select a resolution and refresh rate supported by the Dominion KX II. Supported Video Resolutions (on page 274) for more information. Note: If you change the video resolution, you must log out of the target server and log back in for the video settings to take effect.

  • Page 35: Step 3: Connect The Equipment

    A. AC Power To connect the power supply: 1. Attach the included AC power cord to the Dominion KX II and plug into an AC power outlet. 2. For dual power failover protection, attach the second included AC power cord and plug it into a different power source than the first power cord.
  • Page 36 B. Modem Port (Optional) The Dominion KX II features a dedicated modem port for remote access even when the LAN/WAN is unavailable. Using a straight-through serial (RS-232) cable, connect an external serial modem to the port labeled...
  • Page 37 D. Local Access Port (Local PC) For convenient access to target servers while at the rack, use the Dominion KX II Local Access port. While the Local Access port is required for installation and setup, it is optional for subsequent use. The...

  • Page 38: Step 4: Configure The Dominion Kx Ii

    Dominion KX II you are required to change that password. To change the default password: 1. Power on the Dominion KX II using the power switch(s) at the back of the unit. Wait for the Dominion KX II unit to boot. (A beep signals that the boot is complete.)
  • Page 39 Chapter 2: Installation and Configuration 2. Once the unit has booted, the Dominion KX II Local Console is visible on the monitor attached to the Dominion KX II local port. Type the default username (admin) and password (raritan) and click Login.
  • Page 40 Select the IPv6 checkbox to active the fields in the section. b. Enter a Global/Unique IP Address. This is the IP address assigned to the Dominion KX II. c. Enter the Prefix Length. This is the number of bits used in the IPv6 address.

  • Page 41: Valid Special Characters For Target Names

    Chapter 2: Installation and Configuration a. Primary DNS Server IP Address b. Secondary DNS Server IP Address 7. When finished, click OK. Your Dominion KX II device is now network accessible. LAN Interface Settings (on page 135) for information in configuring this section of the Network Settings page.
  • Page 42 LED at the front of the device turns red. To disable power supply autodetection for the power supply not in use: 1. Using the Dominion KX II Local Console, choose Device Settings > Power Supply Setup. The Power Supply Setup page opens.
  • Page 43 Power Supply Setup (on page 154). Note to CC-SG Users If you are using the Dominion KX II in a CC-SG configuration, perform the installation steps, and when finished, consult the CommandCenter Secure Gateway User Guide, Administrator Guide, or Deployment Guide to proceed (all found on Raritan's website, www.raritan.com,...

  • Page 44: Step 5 (Optional): Configure Keyboard Language

    Create User Groups and Users As part of the initial configuration, you must define user groups and users in order for users to access the Dominion KX II. The Dominion KX II uses system-supplied default user groups and allows you to create groups and specify the appropriate permissions to suit your needs.

  • Page 45: Chapter 3 Working With Target Servers

    Chapter 3 Working with Target Servers In This Chapter Interfaces ....................36 Proxy Server Configuration for use with Dominion KX II, MPC, VKC and AKC ......................50 Multi-Platform Client Interface ..............51 Virtual KVM Client ................... 52 Active KVM Client (AKC) ................. 80...

  • Page 46: Dominion Kx Ii Local Console Interface

    Chapter 3: Working with Target Servers Dominion KX II Local Console Interface When you are located at the server rack, the Dominion KX II provides standard KVM management and administration via the Dominion KX II Local Console. The Dominion KX II Local Console provides a direct KVM (analog) connection to your connected servers;...
  • Page 47 Firefox. 3. Type the following URL: http://IP-ADDRESS, where IP-ADDRESS is the IP address assigned to your Dominion KX II. You can also use https, the DNS name of the Dominion KX II assigned by the administrator (provided that a DNS server has been configured), or just simply type the IP address in the browser (Dominion KX II always redirects the IP address from HTTP to HTTPS.) The Login...
  • Page 48 Chapter 3: Working with Target Servers Interface and Navigation Dominion KX II Console Layout Both the Dominion KX II Remote Console and the Dominion KX II Local Console interfaces provide an HTML (web-based) interface for configuration and administration, as well as target server list and selection.
  • Page 49 Chapter 3: Working with Target Servers Left Panel The left panel of the Dominion KX II interface contains the following information. Note that some information is conditional and will only be displayed if you are a certain of user, are using certain features, and so on.
  • Page 50 When FIPS is enabled. Certificate: FIPS Mode Compliant Dominion KX II Console Navigation The Dominion KX II Console interfaces provide many methods for navigation and making your selections. To select an option (use any of the following):  Click on a tab. A page of available options appears.
  • Page 51 Note: For each connection to a KVM target server, a new Virtual KVM Client page is opened. If you are using a tiered configuration in which a base Dominion KX II device is used to access multiple other tiered devices, the tiered devices...
  • Page 52 Chapter 3: Working with Target Servers Note: Do not use apostrophes for the Port (CIM) Name.  Status - The status for standard servers is either up or down.  Type - The type of server or CIM. For blade chassis, the type can be Blade Chassis, Blade, BladeChassisAdmin, and BladeChassisURL.
  • Page 53 (KVM target server). This menu item is available only for KVM targets. This option is visible only when a Virtual KVM Client is opened. Note: This menu item is not available on the Dominion KX II Local Console. ...
  • Page 54 Retrieve discovered Dominion KX II devices from the connected KX device (after login) Note: This feature is available only on the Dominion KX II Remote Console (not the Dominion KX II Local Console or AKC). To access a favorite Dominion KX II device: ...
  • Page 55 PC's local subnet. Discover Devices - Dominion KX Discover the Raritan devices on II Subnet the Dominion KX II device subnet. Add New Device to Favorites Add, edit, and delete devices from your list of Favorites. Favorites List Page From the Favorites List page, you can add, edit, and delete devices from your list of favorites.
  • Page 56 Discovering Devices on the Local Subnet This option discovers the devices on your local subnet, which is the subnet where the Dominion KX II Remote Console is running. These devices can be accessed directly from this page or you can add them to your list of favorites.
  • Page 57 Discovering Devices on the Dominion KX II Subnet This option discovers devices on the device subnet, which is the subnet of the Dominion KX II device IP address itself. You can access these devices directly from this the Subnet page or add them to your list of favorites.
  • Page 58 Port (if necessary)  Product Type 4. Click OK. To delete a favorite: Important: Exercise caution in the removal of favorites. You are not prompted to confirm their deletion. 1. Select the checkbox next to the appropriate Dominion KX II device.

  • Page 59: Proxy Server Configuration For Use With Dominion Kx Ii, Mpc, Vkc And Akc

    Note: Logging out also closes any open Virtual KVM Client and serial client sessions. Proxy Server Configuration for use with Dominion KX II, MPC, VKC and When the use of a Proxy Server is required, a SOCKS proxy must also be provided and configured on the remote client PC.

  • Page 60: Multi-Platform Client Interface

    1. To open MPC from a client running any supported browser, type http://IP-ADDRESS/mpc into the address line, where IP-ADDRESS is the IP address of your Raritan device. MPC will open in a new window. Note: The Alt+Tab command will toggle between windows only on the local system.

  • Page 61: Virtual Kvm Client

    Connecting to a KVM Target Server To connect to a KVM target server: 1. From the Dominion KX II Remote Console, click the Port Access tab to open it. The Port Access page opens. 2. Click the Port Name of the target you want to access. The Port Action menu appears.

  • Page 62: Vkc Toolbar

    Chapter 3: Working with Target Servers VKC Toolbar Note: The KX II-101 VKC interface is different from the other Dominion KX products. See VKC Toolbar for the KX II-101. Button Button Description Name Connection Opens the Modify Connection Properties dialog Properties from which you can manually adjust bandwidth options (such as connection speed, color depth,...

  • Page 63: Switching Between Kvm Target Servers

    Switching Between KVM Target Servers With the Dominion KX II, you can access several KVM target servers. The Dominion KX II provides the ability to switch from one target server to another. Note: This feature is available in the Dominion KX II Remote Console only.

  • Page 64: Disconnecting Kvm Target Servers

    Chapter 3: Working with Target Servers To power off a target server: 1. From the Dominion KX II Remote Console, click the Port Access tab to open it. The Port Access page opens. 2. Click the port name of the appropriate target server. The Port Action menu appears.

  • Page 65: Choosing Usb Profiles

    Chapter 3: Working with Target Servers Choosing USB Profiles When you connect to a KVM target server for the first time, as described Connecting to a KVM Target Server (on page 52), the preferred USB profile for the port is automatically used. If you have connected to the target server previously using a different profile, the USB profile from the last connection is used.

  • Page 66: Connection Properties

    Chapter 3: Working with Target Servers Connection Properties The dynamic video compression algorithms maintain KVM console usability under varying bandwidth constraints. The devices optimize KVM output not only for LAN use, but also for WAN use. These devices can also control color depth and limit video output, offering an optimal balance between video quality and system responsiveness for any bandwidth.
  • Page 67 Chapter 3: Working with Target Servers  10 Mb Ethernet  1.5 Mb (MAX DSL/T1)  1 Mb (Fast DSL/T1)  512 Kb (Medium DSL/T1)  384 Kb (Slow DSL/T1)  256 Kb (Cable)  128 Kb (Dual ISDN)  56 kb (ISP Modem) ...

  • Page 68: Connection Information

    Chapter 3: Working with Target Servers Connection Information To obtain information about your Virtual KVM Client connection:  Choose Connection > Connection Info. The Connection Info window opens. The following information is displayed about the current connection:  Device Name - The name of the device. ...
  • Page 69 Chapter 3: Working with Target Servers Building a Keyboard Macro To build a macro: 1. Click Keyboard > Keyboard Macros. The Keyboard Macros dialog appears. 2. Click Add. The Add Keyboard Macro dialog appears. 3. Type a name for the macro in the Keyboard Macro Name field. This name will appear in the Keyboard menu after it is created.
  • Page 70 Chapter 3: Working with Target Servers 10. Click Close to close the Keyboard Macros dialog. The macro will now appear on the Keyboard menu in the application. Select the new macro on the menu to run it or use the keystrokes you assigned to the macro.

  • Page 71: Video Properties

    Chapter 3: Working with Target Servers To remove a macro: 1. Choose Keyboard > Keyboard Macros. The Keyboard Macros dialog appears. 2. Choose the macro from among those listed. 3. Click Remove. The macro is deleted. Hot-key combinations that coincide with blade chassis switching key sequences will not be sent to blades housed in those chassis.
  • Page 72 Chapter 3: Working with Target Servers Auto-Sense Video Settings The Auto-sense Video Settings command forces a re-sensing of the video settings (resolution, refresh rate) and redraws the video screen. Note: VKC for the KX II-101 uses an icon set that differs from the icon set used in VKC for other Dominion KX products.
  • Page 73 Warning: Exercise caution when changing the Clock and Phase settings. Doing so may result in lost or distorted video and you may not be able to return to the previous state. Contact Raritan Technical Support before making any changes. Horizontal Offset - Controls the horizontal positioning of the target server display on your monitor.
  • Page 74 Chapter 3: Working with Target Servers  Best possible video mode The device will perform the full Auto Sense process when switching targets or target resolutions. Selecting this option calibrates the video for the best image quality.  Quick sense video mode With this option, the device will use a quick video Auto Sense in order to show the target's video sooner.
  • Page 75 Chapter 3: Working with Target Servers Note: Some Sun background screens, such as screens with very dark borders, may not center precisely on certain Sun servers. Use a different background or place a lighter colored icon in the upper left corner of the screen.
  • Page 76 Chapter 3: Working with Target Servers Using Screenshot from Target You are able to take a screenshot of a target server using the Screenshot from Target server command. You can then save this screenshot to a file location of your choosing as a bitmap, JPEG or PNG file.

  • Page 77: Mouse Options

    Chapter 3: Working with Target Servers Changing the Maximum Refresh Rate If the video card you are using on the target uses custom software and you are accessing the target through MPC or VKC, you may need to change the maximum refresh rate of the monitor in order for the refresh rate to take affect on the target.
  • Page 78 Chapter 3: Working with Target Servers Mouse Pointer Synchronization When remotely viewing a target server that uses a mouse, you will see two mouse cursors: one belonging to your remote client workstation and the other belonging to the target server. When the mouse pointer lies within the Virtual KVM Client target server window, mouse movements and clicks are directly transmitted to the connected target server.
  • Page 79 Chapter 3: Working with Target Servers Additional Notes for Intelligent Mouse Mode  Be sure that there are no icons or applications in the upper left section of the screen since that is where the synchronization routine takes place.  Do not use an animated mouse.
  • Page 80 To be sure to avoid any problems with this function, Raritan recommends you do not have file icons or folder icons in the upper left corner of your desktop.
  • Page 81 Chapter 3: Working with Target Servers Please note that mouse configurations will vary on different target operating systems. Consult your OS guidelines for further details. Also note that intelligent mouse synchronization does not work with UNIX targets. Absolute Mouse Mode In this mode, absolute coordinates are used to keep the client and target cursors in sync, even when the target mouse is set to a different acceleration or speed.

  • Page 82: Vkc Virtual Media

    Chapter 3: Working with Target Servers 2. Click the Single/Double Mouse Cursor button in the toolbar. To exit single mouse mode: 1. Press Ctrl+Alt+O on your keyboard to exit single mouse mode. VKC Virtual Media See the chapter on Virtual Media for complete information about setting up and using virtual media.

  • Page 83: Smart Cards (Vkc, Akc And Mpc)

    Chapter 3: Working with Target Servers Smart Cards (VKC, AKC and MPC) Using the KX II 2.1.10 or later, you are able to mount a smart card reader onto a target server to support smart card authentication and related applications. For a list of supported smart cards, smart card readers, and additional system requirements, see Supported and Unsupported Smart Card Readers...
  • Page 84 Chapter 3: Working with Target Servers 4. A progress dialog will open. Check the 'Mount selected card reader automatically on connection to targets' checkbox to mount the smart card reader automatically the next time you connect to a target. Click OK to begin the mounting process.

  • Page 85: Tool Options

    Chapter 3: Working with Target Servers Tool Options From the Tools menu, you can specify certain options for use with the Virtual KVM Client, including logging, setting the keyboard type, and defining hot keys for exiting Full Screen mode and Single Cursor mode. To set the tools options: 1.
  • Page 86 Language Configuration on Linux Because the Sun JRE on Linux has problems generating the correct Key Events for foreign-language keyboards configured using System Preferences, Raritan recommends that you configure foreign keyboards using the methods described in the following table. Language...
  • Page 87 Chapter 3: Working with Target Servers Language Configuration method System Settings (Control Center) Korean System Settings (Control Center) Belgian Keyboard Indicator Norwegian Keyboard Indicator Danish Keyboard Indicator Swedish Keyboard Indicator Hungarian System Settings (Control Center) Spanish System Settings (Control Center) Italian System Settings (Control Center) Slovenian...

  • Page 88: View Options

    Chapter 3: Working with Target Servers View Options View Toolbar You can use the Virtual KVM client with or without the toolbar display. To toggle the display of the toolbar (on and off):  Choose View > View Toolbar. Scaling Scaling your target window allows you to view the entire contents of the target server window.

  • Page 89: Help Options

    Help Options About Raritan Virtual KVM Client This menu command provides version information about the Virtual KVM Client, in case you require assistance from Raritan Technical Support. To obtain version information: 1. Choose Help > About Raritan Virtual KVM Client.

  • Page 90: Akc Supported Operating Systems And Browsers

    Chapter 3: Working with Target Servers AKC Supported Operating Systems and Browsers .NET Framework ® AKC requires Windows .NET version 3.5, and will work with both 3.5 and 4.0 installed. Operating Systems ® When launched from Internet Explorer or as a standalone application, AKC allows you to reach target servers via the KX II 2.2 (or later).

  • Page 91: Prerequisites For Using Akc

    Chapter 3: Working with Target Servers Prerequisites for Using AKC In order to use AKC:  Ensure the cookies from the IP address of the device that is being accessed are not currently being blocked.  Windows Vista, Windows 7 and Windows 2008 server users should ensure that the IP address of the device being accessed is included in their browser's Trusted Sites Zone and that Protected Mode is not on when accessing the device.

  • Page 92: Chapter 4 Power Strip (Rack Pdu) Outlet Control

    Overview ....................83 Turning Outlets On/Off and Cycling Power ..........84 Overview The Dominion KX II allows you to control Raritan PX and RPC series power strip outlets connected to the Dominion KX II through a D2CIM-PWR. Once a PX or RPC series is setup and then attached to the Dominion KX II, the power strip and its outlets can be controlled from the Powerstrip page in the Dominion KX II interface.

  • Page 93: Turning Outlets On/Off And Cycling Power

    Association - The ports associated with the outlet. Initially, when you open the Powerstrip page, the power strips that are currently connected to the Dominion KX II are displayed in the Powerstrip drop-down. Additionally, information relating to the currently selected power strip is displayed. If no power strips are connected to the Dominion KX II, a message stating "No powerstrips found"...
  • Page 94 Chapter 4: Power Strip (Rack PDU) Outlet Control 4. Click On. 5. Click OK to close the Power On confirmation dialog. The outlet will be turned on and its state will be displayed as 'on'. To turn an outlet off: 1.
  • Page 95 Chapter 4: Power Strip (Rack PDU) Outlet Control 2. Click OK. The outlet will then cycle (note that this may take a few seconds). 3. Once the cycling is complete the dialog will open. Click OK to close the dialog.

  • Page 96: Chapter 5 Virtual Media

    Chapter 5 Virtual Media In This Chapter Overview ....................88 Prerequisites for Using Virtual Media ............91 Using Virtual Media via VKC and AKC in a Windows Environment ..92 Using Virtual Media ................. 93 File Server Setup (File Server ISO Images Only) ........94 Connecting to Virtual Media ..............

  • Page 97: Overview

    Virtual media can include internal and USB-mounted CD and DVD drives, USB mass storage devices, PC hard drives, and ISO images (disk images). Note: ISO9660 is the standard supported by Raritan. However, other ISO standards can be used. Virtual media provides the ability to perform additional tasks remotely, such as: ...
  • Page 98 Chapter 5: Virtual Media...
  • Page 99 Chapter 5: Virtual Media Diagram key Desktop PC CD/DVD drive Dominion KX II USB mass storage device PC hard drive Target server Remote file server (ISO images)

  • Page 100: Prerequisites For Using Virtual Media

    Chapter 5: Virtual Media Prerequisites for Using Virtual Media With the virtual media feature, you can mount up to two drives (of different types) that are supported by the USB profile currently applied to the target. These drives are accessible for the duration of the KVM session.

  • Page 101: Using Virtual Media Via Vkc And Akc In A Windows Environment

    Chapter 5: Virtual Media Using Virtual Media via VKC and AKC in a Windows Environment ® Windows XP operating system Administrator and standard user privileges vary from those of the Windows Vista ® operating system and ® the Windows 7 operating system.

  • Page 102: Using Virtual Media

    Remote Console File Server Setup page. See File Server Setup (File Server ISO Images Only). Note: ISO9660 format is the standard supported by Raritan. However, other CD-ROM extensions may also work. 2. Open a KVM session with the appropriate target server.

  • Page 103: File Server Setup (File Server Iso Images Only)

    Note: This feature is only required when using virtual media to access file server ISO images. ISO9660 format is the standard supported by Raritan. However, other CD-ROM extensions may also work. Use the Remote Console File Server Setup page to designate the files server(s) and image paths that you want to access using virtual media.
  • Page 104 Chapter 5: Virtual Media Note: You cannot access a remote ISO image via virtual media using an IPv6 address due to technical limitations of third-party software used by the KX2. Note: If you are connecting to a Windows 2003 Server and attempt to load an ISO image from the server, you may receive an error stating "Virtual Media mounting on port failed.

  • Page 105: Connecting To Virtual Media

    Note: In the Dominion KX II 2.1.0 and above, when you mount an external drive, such as a floppy drive, the LED light on the drive will remain on because the device is checking the drive every 500 milliseconds to verify the drive is still mounted.

  • Page 106: Conditions When Read/Write Is Not Available

    Port Permission VM Access is set to Read-Only or Deny. CD-ROM/DVD-ROM/ISO Images This option mounts CD-ROM, DVD-ROM, and ISO images. Note: ISO9660 format is the standard supported by Raritan. However, other CD-ROM extensions may also work. To access a CD-ROM, DVD-ROM, or ISO image: 1.
  • Page 107 Chapter 5: Virtual Media 2. For internal and external CD-ROM or DVD-ROM drives: a. Choose the Local CD/DVD Drive option. b. Choose the drive from the Local CD/DVD Drive drop-down list. All available internal and external CD and DVD drive names will be populated in the drop-down list.

  • Page 108: Disconnecting Virtual Media

    Chapter 5: Virtual Media Disconnecting Virtual Media To disconnect the virtual media drives:  For local drives, choose Virtual Media > Disconnect Drive.  For CD-ROM, DVD-ROM, and ISO images, choose Virtual Media > Disconnect CD-ROM/ISO Image. Note: In addition to disconnecting the virtual media using the Disconnect command, simply closing the KVM connection closes the virtual media as well.

  • Page 109: Chapter 6 Usb Profiles

    BIOS level. USB profiles are configured on the Device Settings > Port Configuration > Port page of the Dominion KX II Remote and Local Consoles. A device administrator can configure the port with the profiles that best meet the needs of the user and the target server configuration.

  • Page 110: Cim Compatibility

    (on page 259) for additional information. Available USB Profiles The current release of the Dominion KX II comes with the selection of USB profiles described in the following table. New profiles are included with each firmware upgrade provided by Raritan. As new profiles are added, they will be documented in the help.
  • Page 111 Chapter 6: USB Profiles USB profile Description Restrictions:  USB bus speed limited to full-speed (12 MBit/s)  No virtual media support BIOS DellPowerEdge Dell PowerEdge BIOS Access Keyboard Only (Keyboard Only) Use this profile to have keyboard functionality for the Dell PowerEdge BIOS when using D2CIM-VUSB.
  • Page 112 Chapter 6: USB Profiles USB profile Description  USB bus speed limited to full-speed (12 MBit/s)  Absolute mouse synchronization™ not supported  Virtual CD-ROM and disk drives cannot be used simultaneously ™ ® BIOS HP Proliant DL145 HP Proliant DL145 PhoenixBIOS Use this profile for HP Proliant DL145 PhoenixBIOS during OS installation.
  • Page 113 Chapter 6: USB Profiles USB profile Description Restrictions:  Absolute mouse synchronization™ not supported  Virtual CD-ROM and disk drives cannot be used simultaneously Generic The generic USB profile resembles the behavior of the original KX2 release. ® Use this for Windows 2000 operating ®...
  • Page 114 Chapter 6: USB Profiles USB profile Description MAC OS X ® (10.4.9 and later) Mac OS-X, version 10.4.9 and later This profile compensates the scaling of mouse coordinates introduced in recent versions of Mac OS-X. Select this if the remote and local mouse positions get out of sync near the desktop borders.
  • Page 115 Chapter 6: USB Profiles USB profile Description  Keyboard and Mouse (Type 1)  USB bus speed limited to full-speed (12 MBit/s)  Virtual CD-ROM and disk drives cannot be used simultaneously WARNING: USB enumeration will trigger whenever virtual media is connected or disconnected.

  • Page 116: Selecting Profiles For A Kvm Port

    (12 MBit/s) Selecting Profiles for a KVM Port The Dominion KX II comes with a set of USB profiles that you can assign to a KVM port based on the characteristics of the KVM target server it connects to. You assign USB profiles to a KVM port in the Device Settings >...

  • Page 117: Chapter 7 User Management

    Changing a Password ................131 User Groups The Dominion KX II stores an internal list of all user and group names to determine access authorization and permissions. This information is stored internally in an encrypted format. There are several forms of authentication and this one is known as local authentication.

  • Page 118: User Group List

    Relationship Between Users and Groups Users belong to a group and groups have privileges. Organizing the various users of your Dominion KX II into groups saves time by allowing you to manage permissions for all users in a group at once, instead of managing permissions on a user-by-user basis.
  • Page 119 Setting Port Permissions (on page 113). 5. Set the IP ACL. This feature limits access to the Dominion KX II device by specifying IP addresses. It applies only to users belonging to a specific group, unlike the IP Access Control list feature that applies to all access attempts to the device (and takes priority).
  • Page 120 Chapter 7: User Management Note: Several administrative functions are available within MPC and from the Dominion KX II Local Console. These functions are available only to members of the default Admin group. Note: Both IPv4 and IPv6 addresses are supported.
  • Page 121 Simultaneous access to the same target by multiple users. If you are using a tiered configuration in which a base Dominion KX II device is used to access multiple other tiered devices, all devices must share the same PC-Share setting. See...
  • Page 122 (LDAP/LDAPS/RADIUS), login settings. If you are using a tiered configuration in which a base Dominion KX II device is used to access multiple other tiered devices, user, user group and remote authentication settings must be consistent across all devices. See...
  • Page 123 Group-Based IP ACL (Access Control List) Important: Exercise caution when using group-based IP access control. It is possible to be locked out of your Dominion KX II if your IP address is within a range that has been denied access.
  • Page 124 3. Choose the action from the available options:  Accept - IP addresses set to Accept are allowed access to the Dominion KX II device.  Drop - IP addresses set to Drop are denied access to the Dominion KX II device.

  • Page 125: Modifying An Existing User Group

    Chapter 7: User Management 2. Click Delete. 3. When prompted to confirm the deletion, click OK. Important: ACL rules are evaluated in the order in which they are listed. For instance, in the example shown here, if the two ACL rules were reversed, Dominion would accept no communication at all.

  • Page 126: Users

    Users must be granted user names and passwords to gain access to the Dominion KX II. This information is used to authenticate users attempting to access your Dominion KX II. Up to 254 users can be created for each user group.

  • Page 127: Adding A New User

    Chapter 7: User Management Adding a New User It is a good idea to define user groups before creating Dominion KX II users because, when you add a user, you must assign that user to an existing user group. See Adding a New User Group (on page 109).

  • Page 128: Logging A User Off (Force Logoff)

    Logging a User Off (Force Logoff) If you are an administrator, you are able to log out another locally authenticated user who is logged on to the Dominion KX II. To log out a user: 1. Open the User List page by choosing User Management > User List or click the Connected User link in the left panel of the page.

  • Page 129: Authentication Settings

    If you are using a tiered configuration in which a base Dominion KX II device is used to access multiple other tiered devices, the base device and the tiered devices must using the same authentication settings.

  • Page 130: Implementing Ldap/Ldaps Remote Authentication

    LDAP database you want to begin searching for user information. Up to 64 characters can be used. An example base search value might be: cn=Users,dc=raritan,dc=com. Consult your authentication server administrator for the appropriate values to enter into these fields.
  • Page 131 Chapter 7: User Management 9. Enter the Distinguished Name of the Administrative User in the DN of Administrative User field (up to 64 characters). Complete this field if your LDAP server only allows administrators to search user information using the Administrative User role. Consult your authentication server administrator for the appropriate values to type into this field.
  • Page 132 SSL. This will enable the Enable LDAPS Server Certificate Validation checkbox. Secure Sockets Layer (SSL) is a cryptographic protocol that allows Dominion KX II to communicate securely with the LDAP/LDAPS server. 12. The default Port is 389. Either use the standard LDAP TCP port or specify another port.
  • Page 133 Dominion KX II in order for the new certificate to take effect. Test LDAP Server Access 16. The Dominion KX II provides you with the ability to test the LDAP configuration from the Authentication Settings page due to the complexity sometimes encountered with successfully configuring the LDAP server and Dominion KX II for remote authentication.

  • Page 134: Returning User Group Information From Active Directory Server

    2. On your Active Directory server, create new groups with the same group names as in the previous step. 3. On your AD server, assign the Dominion KX II users to the groups created in step 2. 4. From the Dominion KX II, enable and configure your AD server properly.

  • Page 135: Implementing Radius Remote Authentication

    8. The Timeout is recorded in seconds and default timeout is 1 second, but can be changed as required. The timeout is the length of time the Dominion KX II waits for a response from the RADIUS server before sending another...
  • Page 136 Chapter 7: User Management 9. The default number of retries is 3 Retries. This is the number of times the Dominion KX II will send an authentication request to the RADIUS server. 10. Choose the Global Authentication Type from among the options in the drop-down list: ...

  • Page 137: Returning User Group Information Via Radius

    GROUP_NAME is a string denoting the name of the group to which the user belongs and Dial Back Number is the number associated with the user account that the Dominion KX II modem will use to dial back to the user account.
  • Page 138 Stop(2) - Stops the accounting NAS-Port-Type (61) VIRTUAL (5) for network connections. NAS-Port (5) Always 0. NAS-IP-Address (4) The IP address for the Dominion KX II. User-Name (1) The user name entered at the login screen. Acct-Session-ID (44) Session ID for accounting.

  • Page 139: User Authentication Process

    Chapter 7: User Management User Authentication Process Remote authentication follows the process specified in the flowchart below:...

  • Page 140: Changing A Password

    Chapter 7: User Management Changing a Password To change your password: 1. Choose User Management > Change Password. The Change Password page opens. 2. Type your current password in the Old Password field. 3. Type a new password in the New Password field. Retype the new password in the Confirm New Password field.

  • Page 141: Chapter 8 Device Management

     None (default) - This is the recommended option (static IP). Since the Dominion KX II is part of your network infrastructure, you most likely do not want its IP address to change frequently. This option allows you to set the network parameters.

  • Page 142: Network Basic Settings

    (on page 132). 1. Choose Device Settings > Network. The Network Settings page opens. 2. Specify a meaningful Device Name for your Dominion KX II device. Up to 32 alphanumeric characters using valid special characters and no spaces. 3. In the IPv4 section, enter or select the appropriate IPv4-specific network settings: a.
  • Page 143 DNS addresses that will be used if the primary DNS server connection is lost due to an outage. a. Primary DNS Server IP Address b. Secondary DNS Server IP Address 7. When finished, click OK. Your Dominion KX II device is now network accessible.

  • Page 144: Lan Interface Settings

    Autodetect (autonegotiator) does not properly set the network parameters, which results in network issues. In these instances, setting the Dominion KX II LAN Interface Speed & Duplex field to 100 Mbps/Full Duplex (or whatever option is appropriate to your network) addresses the issue.
  • Page 145 When this option is enabled, the following two fields are used:  Ping Interval (seconds) - Ping interval determines how often the Dominion KX II checks the status of the network path to the designated gateway. The default ping interval is 30 seconds. ...

  • Page 146: Device Services

    Device Services The Device Services page allows you to configure the following functions:  Enable SSH access.  Enable tiering for the base Dominion KX II.  Enter the discovery port.  Enable direct port access.  Enable the AKC Download Server Certificate Validation feature if you...

  • Page 147: Enabling Ssh

    HTTP and HTTPS Port Settings You are now able to configure HTTP and/or HTTPS ports used by the Dominion KX II. For example, if you are using the default HTTP port 80 for another purpose, changing the port will ensure the Dominion KX II does not attempt to use it.

  • Page 148: Configuring And Enabling Tiering

    (Port Access Page (on page 42)). When a Dominion KX II is configured to function as a base device or tiered device, they will be displayed as:  Configured As Base Device in the Device Information section of the left panel of the Dominion KX II interface for base devices.
  • Page 149 Chapter 8: Device Management Enabling Tiering Connect from a target server port on the base device to the tier Dominion KX II Local Access port video/keyboard/mouse ports using a D2CIM-DVUSB. If the tier device is a KX2-832 or KX2-864, connect from a target server port on the base device directly to the tier KX2-832/KX2-864 Extended Local port.
  • Page 150 KXII-832 and KXII-864 models, as well as Dominion KX II PDUs and blade chassis. If you are using a Dominion KX II to Dominion KX II configuration, the D2CIM-DVUSB must be used. If you are using a Dominion KX II to KXII-8xx configuration, only the extended local port can be used.
  • Page 151 The following diagram illustrates the cabling configurations between a Dominion KX II tiered device and a Dominion KX II base device. Connect from a target server port on the base device to the tier Dominion KX II Local Access port video/keyboard/mouse ports using a D2CIM-DVUSB.

  • Page 152: Enabling Direct Port Access

    Settings page appears. 2. Select Enable Direct Port Access via URL if you would like users to have direct access to a target via the Dominion KX II by passing in the necessary parameters in the URL. 3. Click OK.

  • Page 153: Enabling The Akc Download Server Certificate Validation

    To install the self-signed certificate when using Windows Vista operating system and Windows 7 ® operating system: 1. Include the Dominion KX II IP address in the Trusted Site zone and ensure 'Protected Mode' is off. 2. Launch Internet Explorer ®...

  • Page 154: Configuring Modem Settings

    Chapter 8: Device Management Configuring Modem Settings To configure modem settings: 1. Click Device Settings > Modem Settings to open the Modem Settings page. 2. Select the Enable Modem checkbox. This will enable the Serial Line Speed and Modem Init String field. 3.

  • Page 155: Configuring Date/Time Settings

    KX II via modem, see Creating, Modifying and Deleting Profiles in MPC - Generation 2 Devices in the KVM and Serial Access Clients Guide. Note: Modem access directly to the Dominion KX II HTML interface is not supported. You must use standalone MPC to access the Dominion KX II via modem.
  • Page 156 Chapter 8: Device Management 2. Choose your time zone from the Time Zone drop-down list. 3. To adjust for daylight savings time, check the "Adjust for daylight savings time" checkbox. 4. Choose the method you would like to use to set the date and time: ...

  • Page 157: Event Management

    3. In the Name, Contact, and Location fields, type the SNMP agent's name (that is, the device's name) as it appears in the Dominion KX II Console interface, a contact name related to this device, and where the Dominion device is physically located.
  • Page 158 Chapter 8: Device Management 2. Type the IP Address/Host Name of your Syslog server in the IP Address field. 3. Click OK. To reset to factory defaults:  Click Reset To Defaults. Note: Both IPv4 and IPv6 addresses are supported. Note: IPv6 addresses cannot exceed 80 characters in length for the host name.

  • Page 159: Event Management - Destinations

    Chapter 8: Device Management Event Management - Destinations System events, if enabled, can generate SNMP notification events (traps), or can be logged to Syslog or Audit Log. Use the Event Management - Destinations page to select the system events to track and where to send this information.
  • Page 160 Chapter 8: Device Management 3. Click OK.
  • Page 161 Click Reset To Defaults. Warning: When using SNMP traps over UDP, it is possible for the Dominion KX II and the router that it is attached to to fall out of synchronization when the Dominion KX II is rebooted, preventing the reboot completed SNMP trap from being logged.
  • Page 162 Power strip device outlet status notification. rebootCompleted The Dominion KX II has completed its reboot. rebootStarted The Dominion KX II has begun to reboot, either through cycling power to the system or by a warm reboot from the OS. securityViolation Security violation.

  • Page 163: Power Supply Setup

    Virtual Media. Power Supply Setup The Dominion KX II provides dual power supplies, and can automatically detect and provide notification regarding the status of these power supplies. Use the Power Supply Setup page to specify whether you are using one or both of the power supplies.
  • Page 164  Deselect the checkbox for the appropriate power supply. To reset to factory defaults:  Click the Reset To Defaults button. Note: The Dominion KX II does NOT report power supply status to CommandCenter. Dominion I (generation 1), however, does report power supply status to CommandCenter.

  • Page 165: Configuring Ports

    Chapter 8: Device Management Configuring Ports The Port Configuration page displays a list of the Dominion KX II ports. Ports connected to KVM target servers (blades and standard servers) and power strips are displayed in blue and can be edited. For ports with...

  • Page 166: Configuring Standard Target Servers

    Chapter 8: Device Management  Port Type Port type Description DCIM Dominion CIM Not Available No CIM connected PCIM Paragon CIM PowerStrip Power CIM Virtual media CIM (D2CIM-VUSB and D2CIM-DVUSB) Blade Chassis Blade chassis and the blades associated with that chassis (displayed in a hierarchical order) 2.

  • Page 167: Configuring Kvm Switches

    8. Click OK. Configuring KVM Switches The Dominion KX II also supports use of hot key sequences to switch between targets. In addition to using hot key sequences with standard servers, KVM switching is supported by blade chassis and in tiered configurations.

  • Page 168: Configuring Power Strip (Rack Pdu) Targets

    URL. For example username=admin, where username is the username field. Password Field - Enter the password parameter that will be used in the URL. For example password=raritan, where password is the password field. 10. Click OK. To change the active status of a KVM switch port or URL: 1.
  • Page 169 Chapter 8: Device Management Connecting a Power Strip Raritan PX series power strips are connected to the KX II using the D2CIM-PWR CIM. To connect the power strip: 1. Connect the male RJ-45 of the D2CIM-PWR to the female RJ-45 connector on the serial port of the power strip.
  • Page 170 Note: PX power strips can be named in the PX as well as in KX II. The Port page opens when you select a port from the Port Configuration page that is connected to a Raritan remote power strip. The Type and the Name fields are prepopulated.
  • Page 171 Chapter 8: Device Management 3. Click OK.
  • Page 172 Port Access page. To use this feature, you will need:  Raritan remote power strip(s)  Power CIMs (D2CIM-PWR) To make power associations (associate power strip outlets to...
  • Page 173 Chapter 8: Device Management Removing Power Associations When disconnecting target servers and/or power strips from KXII, all power associations should first be deleted. When a target has been associated with a power strip and the target is removed from the KX II, the power association remains.

  • Page 174: Configuring Blade Chassis

    Dominion KX II once they are connected. When a blade server chassis is detected by the Dominion KX II, a default name is assigned to it and it is displayed on the Port Access page along with standard target servers...
  • Page 175 II only supports auto-discovery for AMM[1] as the acting primary management module. The Dominion KX II also supports use of hot key sequences to switch KVM access to a blade chassis. For blade chassis that allow users to select a hot key sequence, those options will be provided on the Port Configuration page.
  • Page 176 Chapter 8: Device Management 2. Select Device Settings > Port Configuration to open the Port Configuration page. 3. On the Port Configuration page, click on the name of the blade chassis you want to configure. The Port page will open. 4.
  • Page 177 296) for information on cable lengths and video resolutions when using ® Dell chassis with the Dominion KX II. 1. Connect the blade chassis to the Dominion KX II. See Step 3: Connect the Equipment (on page 26) for details.
  • Page 178 Password - Enter the password used to access the blade chassis. Required for auto-discovery mode 2. If you want the Dominion KX II to auto-discover the chassis blades, select the Blade Auto-Discovery checkbox and then click the Discover Blades on Chassis Now button. Once the blades are discovered, they will be displayed on the page.
  • Page 179 Chapter 8: Device Management 5. In the Blade Chassis Managed Links section of the page, you are able to configure the connection to a blade chassis web browser interface if one is available. Click the Blade Chassis Managed Links icon to expand the section on the page.
  • Page 180 Chapter 8: Device Management To configure a Dell PowerEdge 1855/1955: 1. If you selected Dell 1855/1955, auto-discovery is not available. Configure the blade chassis as applicable. a. Switch Hot Key Sequence - Select the hot key sequence that will be used to switch from KVM to the blade server. b.
  • Page 181 Required and Recommended Blade Chassis Configurations (on page 182) for important, additional information when configuring the blade chassis. 1. Connect the blade chassis to the Dominion KX II. See Step 3: Connect the Equipment (on page 26) for details. 2. Select Device Settings > Port Configuration to open the Port Configuration page.
  • Page 182 Password - Enter the password used to access the blade chassis. Required for auto-discovery mode 2. If you want the Dominion KX II to auto-discover the chassis blades, select the Blade Auto-Discovery checkbox and then click the Discover Blades on Chassis Now button. Once the blades are discovered, they will be displayed on the page.
  • Page 183 Alternatively, use the Select All checkbox. If needed, change the blade server names. If it is not already named, the Dominion KX II assigns a name to the blade server. The default blade server naming convention is # Blade_Chassis_Port#_Slot#.
  • Page 184 Chapter 8: Device Management 4. In the Blade Chassis Managed Links section of the page, you are able to configure the connection to a blade chassis web browser interface if one is available. Click the Blade Chassis Managed Links icon to expand the section on the page.
  • Page 185 Chapter 8: Device Management Tips for Adding a Web Browser Interface You can add a Web Browser Interface to create a connection to a device with an embedded web server. A Web Browser interface can also be used to connect to any web application, such as the web application associated with an RSA, DRAC or ILO Processor card.
  • Page 186 These ports are eligible to be included in port groups. When Dominion KX II ports are connected to integrated KVM modules in a blade chassis and not to individual blades, the ports are configured as blade chassis subtypes.
  • Page 187 Note: This is especially important to CC-SG users who want HP blades to be organized on a chassis basis, although each blade has its own connection to a port on the Dominion KX II. 5. Click on a port in the Available box in the Select Ports for Group section.
  • Page 188 Supported Blade Chassis Models This table contains the blade chassis models that are supported by the Dominion KX II and the corresponding profiles that should be selected per chassis model when configuring them in the Dominion KX II application. A list of these models can be selected on the Port Configuration page from the Blade Server Chassis Model drop-down, which appears when the Blade Chassis radio button is selected.
  • Page 189  DCIM-USBG2  D2CIM-VUSB  D2CIM-DVUSB Following is a table containing supported CIMs for each blade chassis model that the Dominion KX II supports. Blade chassis Connection method Recommended CIM(s)  DCIM-PS2 Generic If a D2CIM-VUSB or D2CIM-DVUSB is used when connecting to a blade-chassis configured ...
  • Page 190 Chapter 8: Device Management Blade chassis Connection method Recommended CIM(s) M1000e with this chassis. The iKVM is compatible with the following peripherals:  USB keyboards, USB pointing devices  VGA monitors with DDC support. Source: Dell Chassis Management Controller, Firmware Version 1.0, User Guide ...
  • Page 191 Required and Recommended Blade Chassis Configurations This table contains information on limitations and constraints that apply to configuring blade chassis to work with the Dominion KX II. Raritan recommends that all of the information below is followed. Blade chassis Required/recommended action ...
  • Page 192  Exit the iKVM GUI menu before attaching Dell's chassis to a Raritan CIM. iKVM may not work correctly if this is not done.  Configure the iKVM GUI Main menu to select target blades by Slot, not by Name. iKVM may not work correctly if this is not done.
  • Page 193 The SSH port configured on the blade chassis management module and the port number entered on the Port Configuration page must match.  Raritan Dominion KX II virtual media is supported only on IBM IBM KX2 Virtual ® Media BladeCenter Models H and E.

  • Page 194: Configuring Usb Profiles (Port Page)

    (on page 100). Note: To set USB profiles for a port, you must have a VM-CIM connected with firmware compatible with the current firmware version of the Dominion KX II. See Upgrading CIMs (on page 215). The profiles available to assign to a port appear in the Available list on the left.
  • Page 195 Chapter 8: Device Management  Ctrl-Click to select several discontinuous profiles. 2. Click Add. The selected profiles appear in the Selected list. These are the profiles that can be use for the KVM target server connected to the port. To specify a preferred USB profile: 1.
  • Page 196 Chapter 8: Device Management 2. Click Remove. The selected profiles appear in the Available list. These profiles are no longer available for a KVM target server connected to this port. To apply a profile selection to multiple ports: 1. In the Apply Selected Profiles to Other Ports section, select the Apply checkbox for each KVM port you want to apply the current set of selected USB profiles to.

  • Page 197: Configuring Dominion Kx Ii Local Port Settings

    Configuring Dominion KX II Local Port Settings From the Local Port Settings page, you can customize many settings for the Dominion KX II Local Console including keyboard, hot keys, video switching delay, power save mode, local user interface resolution settings, and local user authentication. Further, you can change a USB profile from the local port.
  • Page 198 Chapter 8: Device Management Note: If you are using KX2-832 and KX2-864 as tiered devices, you must connect them to the base Dominion KX II via the extended local port. Note: If you connect a Paragon device to the KX2-832 and KX2-864 extended local port, you must use the remote client to change the USB profile.
  • Page 199 Set the amount of time (in minutes) in which Power Save Mode will be initiated. 10. Choose the resolution for the Dominion KX II Local Console from the drop-down list. The browser will be restarted when this change is made.
  • Page 200  Select the "Ignore CC managed mode on local port" checkbox if you would like local user access to the Dominion KX II even when the device is under CC-SG management. Note: If you initially choose not to ignore CC Manage mode on the local port but later want local port access, you will have to remove the device from under CC-SG management (from within CC-SG).
  • Page 201 Remote Console on the Port Configuration page or from the Local Console on the Local Port Settings page. For more information, see Configuring Dominion KX II Local Port Settings (on page 188). By default, the standard local port is enabled and the extended local port is disabled.

  • Page 202: Chapter 9 Security Management

    From the Security Settings page, you can specify login limitations, user blocking, password rules, and encryption and share settings. Raritan SSL certificates are used for public and private key exchanges, and provide an additional level of security. Raritan web server certificates are self-signed.

  • Page 203: Login Limitations

    Chapter 9: Security Management To reset back to defaults:  Click Reset to Defaults. Login Limitations Using login limitations, you can specify restrictions for single login, password aging, and the logging out idle users. Limitation Description Enable single login When selected, only one login per user name is limitation allowed at any time.

  • Page 204: Strong Passwords

    Strong passwords provide more secure local authentication for the system. Using strong passwords, you can specify the format of valid Dominion KX II local passwords such as minimum and maximum length, required characters, and password history retention. Strong passwords require user-created passwords to have a minimum of 8 characters with at least one alphabetical character and one nonalphabetical character (punctuation character or number).

  • Page 205: User Blocking

    Chapter 9: Security Management Field Description case character character is required in the password. Enforce at least one When checked, at least one numeric numeric character character is required in the password. Enforce at least one When checked, at least one special printable special character character (printable) is required in the password.

  • Page 206: Encryption & Share

    Dominion KX II Reset button is pressed. WARNING: If you select an encryption mode that is not supported by your browser, you will not be able to access the Dominion KX II from your browser. 1. Choose one of the options from the Encryption Mode drop-down list.
  • Page 207 Encryption mode Description Auto This is the recommended option. The Dominion KX II autonegotiates to the highest level of encryption possible. You must select Auto in order for the device and client to successfully negotiate the use of FIPS compliant algorithms.
  • Page 208 7. If needed, select Local Device Reset Mode. This option specifies which actions are taken when the hardware Reset button (at the back of the device) is depressed. For more information, see Resetting the Dominion KX II Using the Reset Button. Choose one of the following options: Local device reset...

  • Page 209: Enabling Fips 140-2

    Paragon CIMs with the Dominion KX II. Checking Your Browser for AES Encryption The Dominion KX II supports AES-256. If you do not know if your browser uses AES, check with the browser manufacturer or navigate to the https://www.fortify.net/sslcheck.html website using the browser with...
  • Page 210 Further, the SSL Certificate from the CA and its private key are not included in the full restore of the backed-up file. The key cannot be exported from Dominion KX II. FIPS 140-2 Support Requirements The Dominion KX II supports the use of FIPS 140-20 approved encryption algorithms.

  • Page 211: Configuring Ip Access Control

    3. Restart the browser. Configuring IP Access Control Using IP access control, you can control access to your Dominion KX II. By setting a global Access Control List (ACL) you are ensuring that your device does not respond to packets being sent from disallowed IP addresses.
  • Page 212 Chapter 9: Security Management 3. Click Append. The rule is added to the bottom of the rules list. To insert a rule: 1. Type a rule #. A rule # is required when using the Insert command. 2. Type the IP address and subnet mask in the IPv4/Mask or IPv6/Prefix Length field.
  • Page 213 Chapter 9: Security Management 3. You are prompted to confirm the deletion. Click OK.

  • Page 214: Ssl Certificates

    Chapter 9: Security Management SSL Certificates The Dominion KX II uses the Secure Socket Layer (SSL) protocol for any encrypted network traffic between itself and a connected client. When establishing a connection, the Dominion KX II has to identify itself to a client using a cryptographic certificate.
  • Page 215 Chapter 9: Security Management 2. Complete the following fields: a. Common name - The network name of the Dominion KX II once it is installed in the user's network (usually the fully qualified domain name). It is identical to the name that is used to access the Dominion KX II with a web browser but without the prefix “http://”.

  • Page 216: Security Banner

    Additionally, the security banner can be configured to require that a user accepts the security agreement before they are able to access the Dominion KX II or it can just be displayed following the login process. If the accept or decline feature is enabled, the user's selection is logged in the audit log.
  • Page 217 Chapter 9: Security Management 3. If you want to require users to acknowledge the banner prior to continuing the login process, select Require Acceptance of Restricted Service Banner. In order to acknowledge the banner, users will select a checkbox. If you do not enable this setting, the security banner will only be displayed after the user logs in and will not require users acknowledge it.

  • Page 218: Chapter 10 Maintenance

    Description - Detailed description of the event. To save the audit log: Note: Saving the audit log is available only on the Dominion KX II Remote Console, not on the Local Console. 1. Click Save to File. A Save File dialog appears.

  • Page 219: Device Information

    Device Information The Device Information page provides detailed information about your Dominion KX II device and the CIMs in use. This information is helpful should you need to contact Raritan Technical Support. To view information about your Dominion KX II and CIMs: ...

  • Page 220: Backup And Restore

    In addition to using backup and restore for business continuity purposes, you can use this feature as a time-saving mechanism. For instance, you can quickly provide access to your team from another Dominion KX II by backing up the user configuration settings from the Dominion KX II in use and restoring those configurations to the new Dominion KX II.
  • Page 221 In general tab, click Change and select Wordpad. To restore your Dominion KX II: WARNING: Exercise caution when restoring your Dominion KX II to an earlier version. Usernames and password in place at the time of the backup will be restored. If you do not remember the old administrative usernames and passwords, you will be locked out of the Dominion KX II.
  • Page 222  Protected Restore - Everything is restored except device-specific information such as IP address, name, and so forth. With this option, you can setup one Dominion KX II and copy the configuration to multiple Dominion KX II devices.  Custom Restore - With this option, you can select User and Group Restore, Device Settings Restore, or both: ...

  • Page 223: Usb Profile Management

    Raritan tech support. These profiles are designed to address the needs of your target server‟s configuration, in the event that the set of standard profiles does not already address them. Raritan tech support will provide the custom profile and work with you to verify the solution for your target server‟s specific needs.

  • Page 224: Handling Conflicts In Profile Names

    (on page 214) for more information. Upgrading CIMs Use this procedure to upgrade CIMs using the firmware versions stored in the memory of your Dominion KX II device. In general, all CIMs are upgraded when you upgrade the device firmware using the Firmware Upgrade page.

  • Page 225: Upgrading Firmware

    Upgrading Firmware Use the Firmware Upgrade page to upgrade the firmware for your Dominion KX II and all attached CIMs. This page is available in the Dominion KX II Remote Console only. Important: Do not turn off your Dominion KX II unit or disconnect CIMs while the upgrade is in progress - doing so will likely result in damage to the unit or CIMs.
  • Page 226 Upon completion of the upgrade, the unit reboots (1 beep sounds to signal that the reboot has completed). 8. As prompted, close the browser and wait approximately 5 minutes before logging in to the Dominion KX II again.
  • Page 227 Chapter 10: Maintenance For information about upgrading the device firmware using the Multi-Platform Client, see Upgrading Device Firmware in the KVM and Serial Access Clients Guide. Note: Firmware upgrades are not supported via modem. Note: If you are using a tiered configuration in which a base Dominion KX II device is used to access multiple other tiered devices, you may receive a low memory error during a firmware upgrade if you have a large number of user groups.

  • Page 228: Upgrade History

    Choose Maintenance > Upgrade History. The Upgrade History page opens. Information is provided about the Dominion KX II upgrade(s) that have been run, the final status of the upgrade, the start and end times, and the previous and current firmware versions. Information is also provided about the CIMS, which can be obtained by clicking the show link for an upgrade.
  • Page 229 Chapter 10: Maintenance To reboot your Dominion KX II: 1. Choose Maintenance > Reboot. The Reboot page opens. 2. Click Reboot. You are prompted to confirm the action. Click Yes to proceed with the reboot.

  • Page 230: Stopping Cc-Sg Management

    Chapter 10: Maintenance Stopping CC-SG Management While the Dominion KX II is under CC-SG management, if you try to access the device directly, you are notified that it the device is under CC-SG management. If you are managing the Dominion KX II through CC-SG and connectivity...
  • Page 231 Chapter 10: Maintenance 3. Click Yes to remove the device CC-SG management. Once CC-SG management has ended, a confirmation will be displayed.

  • Page 232: Chapter 11 Diagnostics

    Ping Host Page ..................226 Trace Route to Host Page ..............226 Device Diagnostics ................228 Network Interface Page The Dominion KX II provides information about the status of your network interface. To view information about your network interface: ...
  • Page 233 Chapter 11: Diagnostics  Statistics - Produces a page similar to the one displayed here.  Interfaces - Produces a page similar to the one displayed here.
  • Page 234 Chapter 11: Diagnostics  Route - Produces a page similar to the one displayed here. 3. Click Refresh. The relevant information is displayed in the Result field.

  • Page 235: Ping Host Page

    Ping is a network tool used to test whether a particular host or IP address is reachable across an IP network. Using the Ping Host page, you can determine if a target server or another Dominion KX II is accessible.
  • Page 236 Chapter 11: Diagnostics 2. Type either the IP address or host name into the IP Address/Host Name field. Note: The host name cannot exceed 232 characters in length. 3. Choose the maximum hops from the drop-down list (5 to 50 in increments of 5).

  • Page 237: Device Diagnostics

    Chapter 11: Diagnostics Device Diagnostics Note: This page is for use by Raritan Field Engineers or when you are directed by Raritan Technical Support. Device diagnostics downloads the diagnostics information from the Dominion KX II to the client machine. Two operations can be performed on this page: ...
  • Page 238 Click the Save to File button. The File Download dialog opens. b. Click Save. The Save As dialog box opens. c. Navigate to the desired directory and click Save. d. Email this file as directed by Raritan Technical Support.

  • Page 239: Chapter 12 Command Line Interface (Cli)

    Chapter 12 Command Line Interface (CLI) In This Chapter Overview ....................230 Accessing the Dominion KX II Using CLI ..........231 SSH Connection to the Dominion KX II ..........231 Telnet Connection to the Dominion KX II ..........232 Logging In ....................233 Navigation of the CLI ................

  • Page 240: Accessing The Dominion Kx Ii Using Cli

    ® To open an SSH session from a Windows 1. Launch the SSH client software. 2. Enter the IP address of the Dominion KX II server. For example, 192.168.0.192. 3. Choose SSH, which uses the default configuration port 22. 4. Click Open.

  • Page 241: Ssh Access From A Unix/Linux Workstation

    Due to the lack of security, user name, password and all traffic is in clear-text on the wire. Telnet access is disabled by default. Enabling Telnet If you wish to use Telnet to access the Dominion KX II, first access the Dominion KX II from the CLI or a browser. To enable Telnet: ...

  • Page 242: Logging In

    Logging In To log in, enter the user name admin as shown: 1. Log in as admin 2. The Password prompt appears. Enter the default password: raritan The welcome message displays. You are now logged on as an administrator. After reviewing the following...

  • Page 243: Navigation Of The Cli

    Chapter 12: Command Line Interface (CLI) Navigation of the CLI Before using the CLI, it is important to understand CLI navigation and syntax. There are also some keystroke combinations that simplify CLI use. Completion of Commands The CLI supports the completion of partially-entered commands. After entering the first few characters of an entry, press the Tab key.

  • Page 244: Common Commands For All Command Line Interface Levels

    (on page 14) for more information. Dominion KX II devices come from the factory with default factory settings. When you first power up and connect to the device, you must set the following basic parameters so the device can be accessed securely from the network: 1.

  • Page 245: Setting Network Parameters

    Important: If the password is forgotten, the Dominion KX II will need to be reset to the factory default from the Reset button on the back of the Dominion KX II. The initial configuration tasks will need to be performed again if this is done.

  • Page 246: Security Issues

     Providing authentication and authorization for users.  Security profile. The Dominion KX II supports each of these elements; however, they must be configured prior to general use. Administering the Dominion KX II Console Server Configuration Commands Note: CLI commands are the same for SSH, Telnet, and Local Port access sessions.

  • Page 247: Configuring Network

    Chapter 12: Command Line Interface (CLI) Configuring Network The network menu commands are used to configure the Dominion KX II network adapter. Commands Description interface Configure the Dominion KX II device network interface. name Network name configuration ipv6 Set/get IPv6 network parameters.

  • Page 248: Name Command

    Chapter 12: Command Line Interface (CLI) Name Command The name command is used to configure the network name. The syntax of the name is: name [devicename <devicename>] [hostname <hostname>] Device name configuration devicename <devicename> Device Name hostname <hostname> Preferred host name (DHCP only) Name Command Example The following command sets the network name:...

  • Page 249: Chapter 13 Dominion Kx Ii Local Console

    KVM target servers. Using the Local Console does not prevent other users from simultaneously connecting over the network. And even when remote users are connected to the Dominion KX II, you can still simultaneously access your servers from the rack via the Local...

  • Page 250: Dominion Kx Ii Local Console Interface

    In either case, the Dominion KX II allows access only to those servers to which a user has access permissions. See User Management (on page 108) for additional information on specifying server access and security settings.

  • Page 251: Local Console Smart Card Access

    Dominion KX II using one of the USB ports located on the Dominion KX II. Once a smart card reader is plugged in or unplugged from the Dominion KX II, the Dominion KX II autodetects it.

  • Page 252: Smart Card Access In Kx2 8 Devices

    Chapter 13: Dominion KX II Local Console To update the Card Readers Detected list:  Click Refresh if a new smart card has been mounted. The Card Readers Detected list will be refreshed to reflect the newly added smart card reader.

  • Page 253: Available Resolutions

    3. Click OK. The USB profile will be applied to the local port and will appear in the Profile In Use field. Available Resolutions The Dominion KX II Local Console provides the following resolutions to support various monitors:  800x600 ...

  • Page 254: Port Access Page (Local Console Server Display)

    Note: To view the blade chassis in a hierarchal order, blade-chassis subtypes must be configured for the blade server chassis. If you are using a tiered configuration in which a base Dominion KX II device is used to access multiple other tiered devices, the tiered devices...
  • Page 255 Port Number sequence.  Port Name - The name of the Dominion KX II port. Initially, this is set to Dominion-KX2-Port# but you can change the name to something more descriptive. When you click a Port Name link, the Port Action Menu appears.

  • Page 256: Hot Keys And Connect Keys

    GUI. A connect key is used to connect to a target or switch between targets. The Local Port hot key allows you to rapidly access the Dominion KX II Local Console user interface when a target server is currently being viewed.

  • Page 257: Special Sun Key Combinations

    Chapter 13: Dominion KX II Local Console Standard servers Connect key action Key sequence example  Double Click Scroll Lock Blade chassis Connect key action Key sequence example Access a port from Access port 5, slot 2: the local port GUI ...

  • Page 258: Accessing A Target Server

    Returning to the Dominion KX II Local Console Interface Important: The Dominion KX II Local Console default hot key is to press the Scroll Lock key twice rapidly. This key combination can be changed in the Local Port Settings page. See Dominion KX II Local Console Local Port Settings.

  • Page 259: Local Port Administration

    Chapter 13: Dominion KX II Local Console Local Port Administration The Dominion KX II can be managed by either the Dominion KX II Local Console or the Dominion KX II Remote Console. Note that the Dominion KX II Local Console also provides access to: ...
  • Page 260 Set the amount of time (in minutes) in which Power Save Mode will be initiated. 7. Choose the resolution for the Dominion KX II Local Console from the drop-down list. The browser will be restarted when this change is made.
  • Page 261  Select the "Ignore CC managed mode on local port" checkbox if you would like local user access to the Dominion KX II even when the device is under CC-SG management. Note: If you initially choose not to ignore CC Manage mode on the local port but later want local port access, you will have to remove the device from under CC-SG management (from within CC-SG).
  • Page 262 Chapter 13: Dominion KX II Local Console 10. Click OK. Configuring Dominion KX II Local Port Settings from the Local Console The standard local port and the extended local port can be configured from the Remote Console on the Port Configuration page or from the Local Console on the Local Port Settings page.

  • Page 263: Dominion Kx Ii Local Console Factory Reset

    Chapter 13: Dominion KX II Local Console Dominion KX II Local Console Factory Reset Note: This feature is available only on the Dominion KX II Local Console. The Dominion KX II offers several types of reset modes from the Local Console user interface.

  • Page 264: Resetting The Dominion Kx Ii Using The Reset Button

    1. Power off the Dominion KX II. 2. Use a pointed object to press and hold the Reset button. 3. While continuing to hold the Reset button, power the Dominion KX II device back on. 4. Continue holding the Reset button for 10 seconds. Once the device...

  • Page 265: Appendix A Specifications

    Supported Video Resolutions ..............274 Supported Keyboard Languages ............275 Smart Card Readers ................276 TCP and UDP Ports Used ..............279 Network Speed Settings ................ 281 Physical Specifications Dominion KX II Specifications Part Line item UPC code Power Weight...
  • Page 266 Appendix A: Specifications Part Line item UPC code Power Weight Product Shipping Shipping number description dimensions weight dimensions (WxDxH) (WxDxH) DKX2-132 32-Port 785813624079 Dual power 9.0 lbs 1.75" x 17.3" 14.9 lbs 22" x 16.6" x Dominion KX 100/240 V x 11.4"...

  • Page 267: Environmental Requirements

    17.3” x 14.2” 35.90 lbs 22” x 18.5” x DKX2-83 32-Port 0785813620019 Dual power 10.57 x 1.73” 11” Dominion KX II 100/240 V with 8-user 50/60 Hz network access, 4.8 kg 440 mm x 16.3 kg 560 mm x 470 1A (0.5A)

  • Page 268: Computer Interface Modules (Cims)

    Product Shipping Shipping UPC code description weight dimensions weight dimensions (WxDxH) (WxDxH) D2CIM-VUSB Dominion KX II 0.2 lbs 1.3" x 3.0" x 0.6" 0.2 lbs 7.2" x 9" x 785813332004 Computer 0.6" Interface Module [USB Port with Virtual Media] DCIM-PS2 Dominion KX I &...
  • Page 269 0.2 lbs 7.2" x 9" x 785813338549 II Computer 0.6" Interface Module [Sun Port, HD15 Video] D2CIM-PWR Dominion KX II 0.2 lbs 1.3" x 3.0" x 0.6" 0.2 lbs 7.2" x 9" x 785813332011 Computer 0.6" Interface Module for Remote...

  • Page 270: Supported Cims And Operating Systems (Target Servers)

    Appendix A: Specifications Supported CIMs and Operating Systems (Target Servers) ® In addition to the new Dominion KX II D2CIMs, most Paragon Dominion KX I CIMs are supported. The following table displays the supported target server operating systems, CIMs, virtual media, and mouse modes.
  • Page 271 Appendix A: Specifications Supported Operating system and Virtual Absolute Intelligent Standard Paragon CIMs serial devices (where media Mouse Mouse mode Mouse mode applicable) mode   ® P2CIM-PS2 Windows XP  ® Windows 2000  Windows 2000 ® Server  Windows 2003 ®...
  • Page 272  UKVMPD Windows XP (version 0C4)  Windows 2000  Note: Version 0C5 Windows 2000 does not work with Server Dominion KX II.  Windows 2003 Server  Windows Vista  Windows 7  Windows 2008  Red Hat Enterprise Linux 4 ES ...
  • Page 273 Appendix A: Specifications Supported Target server Virtual Absolute Intelligent Standard Dominion KX I media Mouse mode Mouse mode Mouse DCIMs mode   DCIM-PS2 Windows XP  Windows 2000  Windows 2000 Server  Windows 2003 Server  Windows Vista ...
  • Page 274 Appendix A: Specifications Supported Target server Virtual Absolute Intelligent Standard Dominion KX I media Mouse mode Mouse mode Mouse DCIMs mode   DCIM-USBG2 Windows XP  Windows 2000  Windows 2000 Server  Windows 2003 Server  Windows Vista ...
  • Page 275 Appendix A: Specifications Supported Target server and Virtual Absolute Intelligent Standard Dominion KX II remote power strips media Mouse mode Mouse Mouse D2CIMs (where applicable) mode mode   D2CIM-VUSB Windows XP  Windows 2000  Windows 2000 Server ...

  • Page 276: Supported Paragon Cims And Configurations

    Appendix A: Specifications Supported Paragon CIMS and Configurations The Dominion KX II supports the P2CIM-APS2DUAL and P2CIM-AUSBDUAL CIMs, which provide two RJ45 connections to different KVM switches. Support of these CIMs provides a second path to access the target in the event that one of the KVM switches is blocked or fails.

  • Page 277: Dominion Kx Ii To Dominion Kx Ii Guidelines

    Appendix A: Specifications Dominion KX II to Dominion KX II Guidelines The following system configuration guidelines should be followed when you are using Paragon CIMs in a Dominion KX II to Dominion KX II configuration: Concurrent Access Concurrent access guarantees that concurrent access to targets is prohibited for all targets by all user groups.

  • Page 278: Dominion Kx Ii To Paragon Ii Guidelines

    Appendix A: Specifications If a connection to the target is in place from the other Dominion KX II, the availability is checked when a connection is attempted. Access is denied or allowed consistent with the PC-Share policy in place for the Dominion KX II.
  • Page 279 CIM names updated from Paragon II are stored and retrieved from the CIM memory location corresponding to the Paragon naming convention.  CIM names updated from the Dominion KX II are stored and retrieved from the CIM memory location corresponding to the Dominion KX II naming convention. ...

  • Page 280: Supported Operating Systems (Clients)

    ® Red Hat Desktop 5.0 Yes. Locally held ISO image, Remote File Server mounting directly from Dominion KX II. Red Hat Desktop 4.0 Yes. Locally held ISO image, Remote File Server mounting directly from Dominion KX II. Open SUSE 10, 11 Yes.

  • Page 281: Supported Browsers

    Firefox 1.06 - 3 Windows Server 2003 64bit mode, 64bit browsers: Windows Server 2008  Internet Explorer 7.0 or Windows 7 Supported Browsers Dominion KX II supports the following browsers:  ® Internet Explorer 6, 7 and 8  ® Firefox 1.5, 2.0, and 3.0 (up to build 3.0.10)

  • Page 282: Devices Supported By The Kx2-832 And Kx2-864 Extended Local Port

    150 ft (45 m) Note: Due to the multiplicity of server manufacturers and types, OS versions, video drivers, and so forth and the subjective nature of video quality, Raritan cannot guarantee performance across all distances in all environments. See the...

  • Page 283: Remote Connection

    Supported Video Resolutions Ensure that each target server's video resolution and refresh rate are supported by the Dominion KX II and that the signal is noninterlaced. Video resolution and cable length are important factors in the ability to obtain mouse synchronization. See...

  • Page 284: Supported Keyboard Languages

    DDC-1440 or DDC-1680 adapter may be required. Supported Keyboard Languages The Dominion KX II provides keyboard support for the languages listed in the following table. Note: You can use the keyboard for Chinese, Japanese, and Korean for display only;...

  • Page 285: Smart Card Readers

    Appendix A: Specifications Language Regions Keyboard layout US English United States of America and US Keyboard layout International most of English-speaking countries: for example, Netherlands UK English United Kingdom UK layout keyboard Chinese Hong Kong S. A. R., Republic of Chinese Traditional Traditional China (Taiwan)
  • Page 286 SCM Microsystems firmware v5.25. Unsupported Smart Card Readers This table contains a list of readers that Raritan has tested with the KX II and we know not to work, therefore they are unsupported. If a smart card reader does not appear in the supported smart card readers table or in the unsupported smart card readers table, Raritan cannot guarantee it will function with the KX II.

  • Page 287: Minimum System Requirements

    Windows XP operating system targets must be running Windows XP SP3 in order to use smart cards with the Dominion KX II. If you are working with .NET 3.5 in a Windows XP environment on the target server, you must be using SP1.

  • Page 288: Tcp And Udp Ports Used

    If you are using a Linux client, the following requirements must be met to use smart card readers with the Dominion KX II. Note: User login to client, on smart card insertion, may take longer when 1 or more KVM sessions are actively in place to targets. As the login process to these targets is also under way.
  • Page 289 1813 or an additional port of your designation will be used to transfer log notifications. SYSLOG on If the Dominion KX II is configured to send messages to a Syslog Configurable UDP server, then the indicated port(s) will be used for communication - uses Port 514 UDP Port 514.

  • Page 290: Network Speed Settings

    Appendix A: Specifications Network Speed Settings Dominion KX II network speed setting Network Auto 1000/Full 100/Full 100/Half 10/Full 10/Half switch port Highest 1000/Full Dominion 100/Half Dominion 10/Half setting Auto Available KX II: KX II: Speed 100/Full 10/Full Switch: Switch: 100/Half...
  • Page 291 Note: For reliable network communication, configure the Dominion KX II and the LAN switch to the same LAN Interface Speed and Duplex. For example, configure both the Dominion KX II and LAN Switch to Autodetect (recommended) or set both to a fixed speed/duplex such as...

  • Page 292: Appendix B Updating The Ldap Schema

    From LDAP When an LDAP/LDAPS authentication is successful, the Dominion KX II determines the permissions for a given user based on the permissions of the user's group. Your remote LDAP server can provide these user group...

  • Page 293: Setting The Registry To Permit Write Operations To The Schema

    Appendix B: Updating the LDAP Schema Setting the Registry to Permit Write Operations to the Schema To allow a domain controller to write to the schema, you must set a registry entry that permits schema updates. To permit write operations to the schema: ®...

  • Page 294: Adding Attributes To The Class

    Appendix B: Updating the LDAP Schema 3. Click New and then choose Attribute. When the warning message appears, click Continue and the Create New Attribute dialog appears. 4. Type rciusergroup in the Common Name field. 5. Type rciusergroup in the LDAP Display Name field. 6.
  • Page 295 Appendix B: Updating the LDAP Schema 2. Scroll to the user class in the right pane and right-click it. 3. Choose Properties from the menu. The user Properties dialog appears. 4. Click the Attributes tab to open it. 5. Click Add.

  • Page 296: Updating The Schema Cache

    Appendix B: Updating the LDAP Schema 6. Choose rciusergroup from the Select Schema Object list. 7. Click OK in the Select Schema Object dialog. 8. Click OK in the User Properties dialog. Updating the Schema Cache To update the schema cache: ®...
  • Page 297 Appendix B: Updating the LDAP Schema 3. Go to the directory where the support tools were installed. Run adsiedit.msc. The ADSI Edit window opens. 4. Open the Domain.
  • Page 298 Appendix B: Updating the LDAP Schema 5. In the left pane of the window, select the CN=Users folder. 6. Locate the user name whose properties you want to adjust in the right pane. Right-click the user name and select Properties.
  • Page 299 7. Click the Attribute Editor tab if it is not already open. Choose rciusergroup from the Attributes list. 8. Click Edit. The String Attribute Editor dialog appears. 9. Type the user group (created in the Dominion KX II) in the Edit Attribute field. Click OK.

  • Page 300: Appendix C Informational Notes

    Raritan recommends using JRE version 1.6 for optimum performance, but the Dominion KX II Remote Console and MPC will function with JRE version 1.6.x and higher with the exception of 1.6.2. Note: In order for multi-language keyboards to work in the Dominion KX II Remote Console (Virtual KVM Client), install the multi-language version of JRE.

  • Page 301: Ipv6 Support Notes

    Windows XP and Windows 2003 users will need to install the Microsoft IPV6 service pack to enable IPV6. Mac Leopard  ® IPv6 is not supported in Dominion KX II version 2.0.20 for Mac ® Leopard Samba  IPv6 is not supported for use with virtual media when using Samba.

  • Page 302: Keyboards

    Appendix C: Informational Notes Keyboards Non-US Keyboards French Keyboard ® Caret Symbol (Linux Clients Only) The Virtual KVM Client and the Multi-Platform Client (MPC) do not process the key combination of Alt Gr + 9 as the caret symbol (^) when using French keyboards with Linux clients.
  • Page 303 ® Because the Sun on Linux has problems generating the correct KeyEvents for foreign-language keyboards configured using System Preferences, Raritan recommends that you configure foreign keyboards using the methods described in the following table. Language Configuration method US Intl Default...

  • Page 304: Macintosh Keyboard

    Appendix C: Informational Notes Note: The Keyboard Indicator should be used on Linux systems using Gnome as a desktop environment. When using a Hungarian keyboard from a Linux client, the Latin letter U with Double Acute and the Latin letter O with Double Acute work only with JRE 1.6.

  • Page 305: Mouse Pointer Synchronization (Fedora)

    To resynchronize the mouse cursors:  Use the Synchronize Mouse option from the Virtual KVM Client. The following table summarizes the Dominion KX II mouse modes, and whether or not these modes remain synchronized when accessing KVM target servers running Fedora:...

  • Page 306: Fedora

    Fedora Resolving Fedora Core Focus Using the Multi-Platform Client (MPC), occasionally there is an inability to log in to a Dominion KX II device or to access KVM target servers ® (Windows , SUSE, and so forth). In addition, the Ctrl+Alt+M key combination may not bring up the Keyboard Shortcut menu.

  • Page 307: Supported Video Resolutions Not Displaying

    With this change, the internal video mode timing from the X server will be used and will correspond exactly with the VESA video mode timing, resulting in the proper video display on the Dominion KX II. Supported Video Resolutions Not Displaying...
  • Page 308 The USB Profile Menu selections are configurable via the Console Device Settings > Port Configuration page. Should none of the standard USB profiles provided by Raritan meet your target server requirements, Raritan Technical Support can work with you to arrive at a solution tailored for that target. Raritan recommends that you do the following: 1.

  • Page 309: Changing A Usb Profile When Using A Smart Card Reader

    Appendix C: Informational Notes Changing a USB Profile when Using a Smart Card Reader There may be certain circumstances under which you will need to change the USB profile for a target server. For example, you may need to change the connection speed to "Use Full Speed for Virtual Media CIM"...

  • Page 310: Windows 2000 Composite Usb Device Behavior For Virtual Media

    As a result, the “Safely Remove Hardware” system tray icon does not appear for drives mapped by the D2CIM-VUSB and a warning message may appear when disconnecting the device. Raritan has not observed any problems or issues from this message, however.

  • Page 311: Accessing Virtual Media On A Windows 2000 Server Using A D2Cim-Vusb

    Gateway (CC-SG) in proxy mode, the Virtual KVM Client version is unknown. In the About Raritan Virtual KVM Client dialog, the version is displayed as “Version Unknown”. Single Mouse Mode - Connecting to a Dominion KX II Target Under CC-SG Control Via VKC Using Firefox ®...

  • Page 312: Proxy Mode And Mpc

    Appendix C: Informational Notes Proxy Mode and MPC If you are using Dominion KX II in a CC-SG configuration, do not use the CC-SG proxy mode if you are planning to use the Multi-Platform Client (MPC). Moving Between Ports of the Dominion KX II If you move a between ports of the same Dominion KX II and resume management within one minute, CC-SG may display an error message.

  • Page 313: Appendix D Faqs

    Appendix D FAQs In This Chapter General Questions ................. 305 Remote Access ..................307 Universal Virtual Media ................309 USB Profiles ..................310 Bandwidth and KVM-over-IP Performance ........... 312 Ethernet and IP Networking ..............317 IPv6 Networking ..................320 Servers ....................322 Blade Servers ..................

  • Page 314: General Questions

    Dominion KX II still works flawlessly to enable these configurations to be made. How do the new features of the Dominion KX II compare to the KX The Dominion KX II has many new and exciting features, including virtual ™...
  • Page 315 (MPC) both support KX I and Dominion KX II switches seamlessly. Will my existing KX I CIMs work with the Dominion KX II switches? Yes, existing KX I CIMs will work with the Dominion KX II switch. In addition, select Paragon CIMs will work with the Dominion KX II. This provides an easy migration to the Dominion KX II from Paragon I customers who wish to switch to KVM-over-IP.

  • Page 316: Remote Access

    Yes, the local port is completely independent of the remote “ports.” The local port can access the same server using the PC-Share feature. In order to access the Dominion KX II from a client, what hardware, software or network configuration is required? Because the Dominion KX II is completely web-accessible, it doesn't require installation of proprietary software on clients used for access.
  • Page 317 Cable modem download speed 8 seconds (typical) How do I access servers connected to the Dominion KX II if the network ever becomes unavailable? You can access servers at-the-rack or via modem. The Dominion KX II offers a dedicated modem port for attaching an external modem.

  • Page 318: Universal Virtual Media

    ISO images. What is required for virtual media? A Dominion KX II virtual media CIM is required. There are two of these CIMs: the D2CIM-VUSB and the new D2CIM-DVUSB. The D2CIM-DVUSB has dual USB connectors and should be purchased by customers who wish to utilize virtual media at the BIOS level.

  • Page 319: Usb Profiles

    Individual or groups of ports can be configured by the administrator to use a specific USB profile in the Dominion KX II‟s Port Configuration pages. A USB profile can also be selected in the Dominion KX II client when required. What happens if I don't choose the correct USB profile?
  • Page 320 You must use a D2CIM-VUSB or D2CIM-DVUSB with updated firmware. Will Raritan provide USB profiles for other target server configurations? Raritan will provide new USB profiles to suit customer needs. As these profiles become available, they will be included in firmware upgrades.

  • Page 321: Bandwidth And Kvm-Over-Ip Performance

    In general, there is a trade-off between bandwidth and performance. The more bandwidth available, the better performance can be. In limited bandwidth environments, performance can degrade. The Dominion KX II has been optimized to provide strong performance in a wide variety of environments. What factors affect bandwidth? There are many factors that determine how much bandwidth will be used.
  • Page 322 The table below summarizes some standard use cases using the Dominion KX II's default bandwidth settings and with two reduced bandwidth settings (Connection Speed setting of 1Mbit with 15 and 8 bit...
  • Page 323 Appendix D: FAQs User task Default 1Mbit speed 1Mbit speed & 15 bit & 8 bit color color QuickTime video #1 700 - 2500 400 - 500 150 - 350 KB/s KB/s KB/s QuickTime video #2 1500 - 2500 400 - 550 200 - 350 KB/s KB/s...
  • Page 324 How can I reduce bandwidth? The Dominion KX II provides a variety of settings in our remote clients to optimize bandwidth and performance. The default settings will provide an at-the-rack level of performance in standard LAN/WAN environments with economical use of bandwidth.
  • Page 325 RGB Color. What is the maximum remote (over IP) video resolution supported? The Dominion KX II is the first and only KVM-over-IP switch to support full High Definition (HD) remote video resolution – 1920x1080.

  • Page 326: Ethernet And Ip Networking

    Yes. The Dominion KX II features dual gigabit Ethernet ports to provide redundant failover capabilities. Should the primary Ethernet port (or the switch/router to which it is connected) fail, the Dominion KX II will failover to the secondary network port with the same IP address, ensuring that server operations are not disrupted.
  • Page 327 No. The Dominion KX II is a completely self-sufficient. After assigning an IP address to the Dominion KX II, it is ready to use. Its web browser and authentication capabilities are completely built-in. If an external authentication server (such as LDAP, Active Directory, RADIUS, etc.) is used, the Dominion KX II allows this as well, and will...
  • Page 328 Dominion KX II default port must be changed (or the other device must be changed). When changing the IP address of the Dominion KX II or swapping in a new Dominion KX II, sufficient time must be allowed for its IP and MAC...

  • Page 329: Ipv6 Networking

    How do I enable IPv6 on the Dominion KX II? Use the Network Settings page, available from the Device Settings menu in Dominion KX II. Enable IPv6 addressing and choose manual or auto-configuration. You must also enable it in MPC.
  • Page 330 Appendix D: FAQs The Dominion KX II‟s default networking is set at the factory for IPv4 only. When you are ready to use IPv6, then follow the above instructions to enable IPv6/IPv4 dual stack operation. Where can I get more information on IPv6? See www.ipv6.org for general information on IPv6.

  • Page 331: Servers

    Information Services (IIS) in order to use the Dominion KX II's web browser capability? No. The Dominion KX II is a completely self-sufficient device. After assigning an IP address to the Dominion KX II, it's ready to use since it comes with web browser and authentication capabilities completely built-in.

  • Page 332: Blade Servers

    Intelligent Mouse mode or the speedy, single mouse mode can be used to avoid changing the server mouse settings. Blade Servers Can I connect blade servers to the Dominion KX II? Yes you can. The Dominion KX II supports popular blade server models ® ® ®...
  • Page 333 With the Dominion KX II, you don't have to use these hotkeys. Just click on the name of the blade server and the Dominion KX II will automatically switch to that blade without the explicit use of the hotkey.
  • Page 334 OS running on the blade does. Is blade access secure? Yes, blade access uses all of the standard Dominion KX II security features such as 128 bit or 256 bit encryption. In addition, there are blade-specific security features such as per blade access permissions and hotkey-blocking that eliminates un-authorized access.

  • Page 335: Installation

    Servers that connect to the Dominion KX II require a Dominion or Paragon CIM, which connects directly to the keyboard, video, and mouse ports of the server. Then, connect each CIM to the Dominion KX II using standard UTP (twisted pair) cable such as Cat5, Cat5e, or Cat6.
  • Page 336 How many servers can be connected to each the Dominion KX II device? The Dominion KX II models range from 8, 16, or 32 server ports in a 1U chassis to 64 server ports in a 2U chassis. This is the industry's highest digital KVM switch port density.

  • Page 337: Local Port

    Can I access my servers directly from the rack? Yes. At the rack, the Dominion KX II functions just like a traditional KVM switch, allowing control of up to 64 servers using a single keyboard, monitor, and mouse.
  • Page 338 Appendix D: FAQs  If the Dominion KX II is configured to interact with an external RADIUS, LDAP, or Active Directory server, users attempting to access the local port will authenticate against the same server.  If the external authentication servers are unavailable, the Dominion KX II fails-over to its own internal authentication database.

  • Page 339: Extended Local Port (Dominion Kx2-832 And Kx2-864 Models Only)

    What is the extended local port? The Dominion KX2-832 and KX2-864 feature an extended local port. The Dominion KX II eight user models have a standard local port, plus a new extended local port that extends the local port, via Cat5 cable, beyond the rack to a control room, another point in the data center or to a Paragon II switch.

  • Page 340: Power Control

    If a power supply or input fails, will I be notified? The Dominion KX II front panel LED will notify the user of a power failure. An entry will also be sent to the Audit Log and displayed on the Dominion KX II Remote Client User Interface.
  • Page 341 Dominion KX II‟s browser­based interface. What type of power strips does the Dominion KX II support? To take advantage of the Dominion KX II's integrated power control user interface, and more importantly, integrated security, use Raritan's Remote Power Control (RPC) power strips. RPCs come in many outlet, connector, and amp variations.

  • Page 342: Scalability

    “tiered” (or “cascaded”) Dominion KX II switches to a “base” Dominion KX II using the “tiering” feature of the Dominion KX II. You can then access the servers connected to your Dominion KX II devices from a single point in the data center via a consolidated port list.
  • Page 343 For customers wanting stand-alone usage (without a central management system), multiple Dominion KX II units still interoperate and scale together via the IP network. Multiple Dominion KX II switches can be accessed from the Dominion KX II web-based user interface and from the Multiplatform Client (MPC).

  • Page 344: Computer Interface Modules (Cims)

    Dominion KX II. Also note that when connected to the Dominion KX II, Paragon CIMs transmit video at a distance of up to 150 feet, the same as the Dominion KX II CIMs; not at 1000 feet [300 meters], as they do when connected to Paragon.

  • Page 345: Security

    Security Is the Dominion KX II FIPS 140-2 Certified? The Dominion KX II, as of Release 2.2.0, provides users with the option to use an embedded FIPS 140-2-validated cryptographic module running on a Linux platform per FIPS 140-2 implementation guidelines. This cryptographic module is used for encryption of KVM session traffic consisting of video, keyboard, mouse, virtual media and smart card data.
  • Page 346 If the Dominion KX II encryption mode is set to Auto, what level of encryption is achieved? The encryption level that is autonegotiated is dependent on the browser in use.

  • Page 347: Smart Cards And Cac Authentication

    2.1.10 and later. What Dominion KX II models support smart cards/CAC? All Dominion KX II models are supported. The Dominion KSX2 and KX2-101 do not currently support smart cards and CAC. Do enterprise and SMB customers use smart cards, too? Yes.

  • Page 348: Manageability

    Can the Dominion KX II integrate with Syslog? Yes. In addition to the Dominion KX II's own internal logging capabilities, the Dominion KX II can send all logged events to a centralized Syslog server. Can the Dominion KX II integrate with SNMP? Yes.

  • Page 349: Miscellaneous

    I changed and subsequently forgot the Dominion KX II's administrative password; can you retrieve it for me? The Dominion KX II contains a hardware reset button that can be used to factory reset the device, which will reset the administrative password on the device.

  • Page 350: Index

    Changing the Maximum Refresh Rate • 68 Accessing a Target Server • 249 Checking Your Browser for AES Encryption • Accessing the Dominion KX II Using CLI • 231 198, 200 Accessing Virtual Media on a Windows 2000 Choosing USB Profiles • 56 Server Using a D2CIM-VUSB •...
  • Page 351 HP Blade Chassis Configuration (Port Group Dominion KX II Remote Console Interface • 37 Management) • 177, 179 Dominion KX II to Dominion KX II Guidelines • HTTP and HTTPS Port Settings • 2, 138, 280 Dominion KX II to Paragon II Guidelines • 269 IBM AIX 5.3 Settings •...
  • Page 352 Mouse Pointer Synchronization • 69 Mouse Pointer Synchronization (Fedora) • 296 Mouse Settings • 14 Java Runtime Environment (JRE) • 291 Moving Between Ports of the Dominion KX II • Multi-Platform Client Interface • 51 Keyboard Language Preference (Fedora Linux Clients) • 294 Keyboard Macros •...
  • Page 353 Required and Recommended Blade Chassis SSH Access from a Windows PC • 231 Configurations • 166, 168, 172, 182 SSH Connection to the Dominion KX II • 231 Resetting the Dominion KX II Using the Reset SSL Certificates • 205 Button •...
  • Page 354 VKC Toolbar • 53 TCP and UDP Ports Used • 279 VKC Virtual Media • 73 Telnet Connection to the Dominion KX II • 232 VM-CIMs and DL360 USB Ports • 298 Terminology • 10, 14 Tiering - Target Types, Supported CIMS and Tiering Configurations •...

  • Page 355: United Kingdom

    For CommandCenter Secure Gateway: Press 6, then Press 2 Phone: +31-10-2844040 Fax: 732-764-8887 Email: tech.europe@raritan.com Email for CommandCenter NOC: tech-ccnoc@raritan.com Email for all other products: tech@raritan.com United Kingdom Monday - Friday 8:30 a.m. to 5 p.m. GMT China Phone +44(0)20-7090-1390...

Table of Contents