CN8000 User Manual FCC, CE Information FEDERAL COMMUNICATIONS COMMISSION INTERFERENCE STATEMENT: This equipment has been tested and found to comply with the limits for a Class A digital device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference when the equipment is operated in a commercial environment.
CN8000 User Manual User Information Online Registration Be sure to register your product at our online support center: International http://eservice.aten.com Telephone Support For telephone support, call this number: International 886-2-8692-6959 China 86-10-5255-0110 Japan 81-3-5615-5811 Korea 82-2-467-6789 North America 1-888-999-ATEN ext 4988...
Chapter 6, The JavaClient Viewer, describes how to connect to the CN8000 with the Java Applet software, and explains how to use the OSD to access and control the computers connected to the switch.
CN8000 User Manual Conventions This manual uses the following conventions: Monospaced Indicates text that you should key in. Indicates keys you should press. For example, [Enter] means to press the Enter key. If keys need to be chorded, they appear together in the same bracket with a plus sign between them: [Ctrl+Alt].
Terminology Throughout the manual we make reference to the terms Local and Remote in regard to the operators and equipment deployed in a CN8000 installation. Depending on the point of view, users and servers can be considered Local under some circumstances, and Remote under others: Switch’s Point of View...
For information about all ATEN products and how they can help you connect without limits, visit ATEN on the Web or contact an ATEN Authorized Reseller. Visit ATEN on the Web for a list of locations and telephone numbers: International http://www.aten.com...
Net – whether that computer is located down the hall, down the street, or half- way around the world. Operators at remote locations connect to the CN8000 via its IP address. Once a connection has been established and authorization granted, the remote...
Page 16
Once an operator successfully connects and logs in, his screen displays what is running on the remote unit attached to the CN8000 (a KVM OSD display, a server's desktop, or a running program, for example) and he can control it from his console just as if he were there.
1. Introduction Features and Benefits The features and benefits provided by a CN8000 deployment are described in the following table: Features Benefits Over-IP Protects your original KVM switch investment. No need to Capability for purchase new KVM switches to achieve the benefits of over-IP Legacy KVM connectivity.
Page 18
On-Screen languages with the CN8000's convenient on-screen keyboard. Keyboard Multi-Users / The CN8000 supports up to 64 user accounts, and allows up to 32 Multi-Logins concurrent user logins for single-bus access. Message Board To alleviate the possibility of access conflicts that may result from multiple user logins, and facilitate communication among the logged-in users, a message board –...
Page 19
1. Introduction Features Benefits Upgradeable No need to add yet another cable to your installation – stay current Firmware over with the latest functionality improvements and updates, all over the the Internet Internet. Remote Power You can add a PON (Power Over the NET™) power management Control unit and remotely control the power status of devices on your installation, including monitoring their current status, as well as...
CN8000 User Manual System Requirements Remote User Computers Remote user computers (also referred to as client computers) are the ones the users log into the switch with from remote locations over the internet (see Terminology, page xiii). The following equipment must be installed on these...
1. Introduction Cables Two custom KVM cable sets (1 USB; 1 PS/2) to link the CN8000 to a server or KVM switch are provided with this package. Custom KVM cable sets are available in various lengths, as shown in the...
1600 x 1200 Operating Systems Supported operating systems for remote user computers that log into the CN8000 include Windows 2000 and higher, and other systems capable of running Sun's Java Runtime Environment (JRE) 6, Update 3, or higher (Linux, Mac, Sun, etc.).
1. Introduction Browsers Supported browsers for users that log into the CN8000 include the following: Browser Version 6 and higher Firefox 1.5 and higher Mozilla 1.7 and higher Safari* 2.0 and higher Opera 9.0 and higher Netscape 8.1 and higher...
CN8000 User Manual Components Front View Component Description The Cat 5e cable that connects the CN8000 to the LAN, WAN, LAN Port or Internet plugs in here. Firmware 1. Pressing and releasing this switch performs a CN8000 Upgrade/Reset system reset. (See Erratic operation, page 179.) Switch 2.
Description Power Jack The power adapter cable plugs in here. The cable that connects the CN8000 to a USB port on your Virtual Media Port server or KVM switch plugs in here. See Virtual Media, page 91, for virtual media details.
CN8000 User Manual Custom KVM Cables Description For use with PS/2 configuration servers or KVM switches. For use with USB configuration servers or KVM switches. Note: The advantage of using a USB cable is that it allows automatic locked- in mouse synchronization. See Mouse DynaSync Mode, page 98, for details.
Mounting Rack Mounting For convenience and flexibility, the CN8000 can be mounted on a system rack. To rack mount the unit do the following: 1. Remove the two original screws from the bottom of the unit (near the rear of the unit).
DIN Rail Mounting To mount the CN8000 on a DIN rail: 1. Screw the mounting bracket to the back of the CN8000 as described in steps 1 and 2 of the wall mounting procedure. 2. Use the larger screws supplied with the Rack Mount Kit to screw the DIN rail brackets to the mounting bracket –...
2. Hardware Setup Installation To install the CN8000, refer to the installation diagrams on the next two pages (the numbers correspond to the numbers of the steps), and do the following: 1. Use the Console cable provided with this package to connect the CN8000’s Console port, to the local console keyboard, monitor and...
Page 30
AC power source. This completes the hardware installation, and you are ready to start up. Note: When starting up, be sure to first power on the CN8000, then power on the server or KVM switch. Modem...
Logging In To operate the CN8000 from an Internet browser, begin by logging in: 1. Open your browser and specify the IP address of the CN8000 you want to access in the browser's URL location bar. Note: 1. For security purposes, a login string may have been set by the administrator.
Page 34
If you see this message, log in again being careful with the Username and Password. 5. If this is a newer CN8000 model and you are logging in for the first time with the administrator account, an Easy Installation Wizard will appear to help you setup the network configuration, new password, and default login settings.
IP address (192.168.0.60). 2. If the CN8000 is on a network that uses DHCP to assign network addresses, and you need to ascertain its IP address, see IP Address...
CN8000 User Manual DNS Server The CN8000 can either have its DNS server address assigned automatically, or a fixed address can be specified. For automatic DNS Server address assignment, select the Obtain DNS server address automatically, radio button. To specify a fixed address, select the Set DNS server address manually, radio button and fill in the required information.
Java will open the Java based viewer regardless of the web browser being used. 9. Click Apply, then OK to confirm the Operation Succeeded. 10. Click Yes to logout and allow the CN8000 to reset and apply the new settings. After the device resets, login again.
Page 38
CN8000 User Manual 11. After you have successfully logged in, the CN8000 Main Screen appears:...
The screen to the right of the sidebar is your main work area. The screens that appear reflect your sidebar menu choices, and allow you to make changes to the CN8000. Note: If a user doesn’t have permission to perform a particular activity, the menu for that activity doesn’t appear.
Launches the Java or WinClient Viewer application for remote Viewer server access. Click this icon to log out and end your CN8000 session. For secu- rity reasons, it is important to log out when your session ends. Otherwise, if Disable Duplicate Login is checked, other users...
3. Browser Login Viewer You can connect to the remote server by clicking the Viewer icon from the lower section of the sidebar. After clicking the Viewer icon: If you are logged in with a browser other than Windows Internet Explorer, a Java Applet Viewer application will open your remote server session.
Page 42
CN8000 User Manual This Page Intentionally Left Blank...
Chapter 4 Administration Introduction Administration of the CN8000 using a web browser is divided into 3 sections: Basic Settings, Advanced Settings, and Preferences. Each section is listed on the sidebar with submenus that are used to configure the CN8000’s operating environment.
CN8000 User Manual Basic Settings This section provides 3 submenus: User Management, Sessions, and Maintenance, used to manage user accounts and perform system maintenance on the CN8000. User Management The User Management page is used to create and manage user profiles. Up to 64 user profiles can be established.
Page 45
CN8000, but they are not allowed to perform any operations on the computers. Configure: Checking Configure gives a user Administrator privileges, and allows the user to set up and modify the CN8000's operating environment. Power Management: Checking Power Management allows a user to Power On / Power Off / Reset devices via an attached Power Over the NET™...
The Session page lets the administrator see at a glance all the users currently logged into the CN8000, and provides information about each of their sessions. The meanings of the headings at the top of the page are fairly straightforward.
To upgrade the firmware, do the following: 1. Download the new firmware file to your computer. 2. Open your browser; log in to the CN8000; and click the Maintenance link to bring up the Firmware File dialog box: 3. Click Browse; navigate to the directory that the new firmware file is in and select the file.
3. When the browser asks what you want to do with the file, select Save; then save it in a convenient location. Note: The CN8000 saves all its backup files as CN8000BKUP.conf. If you want to save more than one backup file, simply rename the file to something convenient when you save it.
Page 49
4. Administration 1. If a password was set when the backup was made, key the same password that you used to save the backup file in the Password field. If a password wasn’t set, you can leave this field blank. 2.
Device Name: To make it easier to manage installations that have more than one CN8000, each one can be given a name. To assign a name for the CN8000, key in one of your choosing here (50 characters max.), then click Apply.
IP Installer utility. See page 165 for IP Installer details. Note: 1. If you select View Only, you will be able to see the CN8000 in the IP Installer’s Device List, but you will not be able to change the IP address.
IP address when they login from a WinClient or Java Client AP program. If not, an invalid port number (or no port number) is specified, the CN8000 will not be found. An explanation of the fields is given in the table below:...
IP address (192.168.0.60.) 2. If the CN8000 is on a network that uses DHCP to assign network addresses, and you need to ascertain its IP address, see IP Address Determination, page 165, for information.
4. Key in the Username and Password that authenticates you with your DDNS service. 5. In the DDNS Retry Time field, key in how many hours the CN8000 waits before it tries to reconnect to the DDNS server, when the CN8000 fails to connect.
It is divided into several sections, described in the sections that follow. SMTP Settings To have the CN8000 email reports from the SMTP server to you, do the following: 1. Enable the Enable report from the following SMTP server, and key in the IP address of your SMTP server.
Report system reboot, Report user login and Report user logout. Log Server Important transactions that occur on the CN8000, such as logins and internal status messages, are kept in an automatically generated log file. See Chapter 7, The Log Server, for details on setting up the log server.
4. Administration Syslog Server To record all the events that take place on the CN8000 and write them to a Syslog server, do the following: 1. Check Enable. 2. Key in the Server IP address and Service Port number of the Syslog server.
2. Fill in the IP addresses and port numbers for the Preferred and Alternate RADIUS servers. 3. In the Timeout field, set the time in seconds that the CN8000 waits for a RADIUS server reply before it times out. 4. In the Retries field, set the number of allowed RADIUS retries.
Allows the user to access the system via an SSH session. Allows the user to access the system via a Telnet or SSH session su/user Where user represents the Username of a CN8000 user whose permissions reflect the permissions you want the RADIUS authorized user to have.
For LDAP, the default port number is 389; for LDAPS, the default port number is 636. Timeout Set the time in seconds that the CN8000 waits for an LDAP or LDAPS server reply before it times out. LDAP Administrator Consult the LDAP / LDAPS administrator to ascertain the appropriate entry for this field.
LDAP / LDAPS administrator to ascertain the appropriate value. CC Management Settings To allow authorization for the CN8000 through a CC (Control Center) server, check Enable and fill in the CC Server’s IP address and the port that it listens on in the appropriate fields.
If any filters have been configured, they appear in the IP Filter and/or MAC Filter list boxes. IP and MAC Filters control access to the CN8000 based on the IP and/or MAC addresses of the computers attempting to connect. A maximum of 100 IP filters and 100 MAC filters are allowed.
4. Administration Adding Filters To add an IP filter, do the following: 1. Click Add. A dialog box similar to the one below appears: 2. Key the address you want to filter in the From: field. To filter a single IP address, key the same address in the To: field. To filter a continuous range of addresses, key in the end number of the range in the To: field.
To delete a filter, select it in the IP Filter or MAC Filter list box and click Delete. Login String The Login String lets the Administrator specify a login string that users must include (in addition to the IP address) when they access the CN8000 with a browser. For example: 192.168.0.126/CN8000 The following characters are allowed: 0–9 a–z A–Z ~ ! @ $ ^ &...
4. Administration Account Policy In the Account Policy section, system administrators can set policies governing usernames and passwords. The meanings of the Account Policy entries are explained in the table below: Entry Explanation Minimum Username Length Sets the minimum number of characters required for a username.
CN8000 User Manual Login Failures For increased security, the Login Failures section allows administrators to set policies governing what happens when a user fails to log in successfully. To set the Login Failures policies, check the Enable checkbox (the default is for Login Failures to be enabled).
The RC4 + DES combination offers the least impact of any combination Virtual Media The CN8000’s Virtual Media feature allows a drive, folder, image file, removable disk, or smart card reader on a user’s system to appear and act as if it were installed on the remote server.
For enhanced security, the Private Certificate section allows you to use your own private encryption key and signed certificate, rather than the default ATEN certificate. There are two methods for establishing your private certificate: generating a self-signed certificate;...
Others Browser Service allows the administrator to limit the scope of browser access to the CN8000. Put a check in the checkbox to enable this function, then select the browser limitation in the drop down list box. Choices are explained in the following table:...
The Console Management page consists of two pages – Serial Console and OOBC – that are used to set up the operating parameters for the CN8000's RS- 232 (serial) port. Use the radio buttons to access each page. An explanation of the parameters and how to set them are given in the sections that follow.
4. Administration To set up the serial communications parameters, put a check in the Enable checkbox, and make your parameter selections according to the information provided in the table below. Port Property Settings The meanings of the property settings are given in the following table: Setting Meaning Baud Rate...
CN8000 writes the event information to the log file. OOBC In case the CN8000 cannot be accessed with the usual LAN-based methods, it can be accessed with an external modem via the switch’s RS-232 port. To enable support for PPP (modem) operation, click to put a checkmark in the Enable Out of Band Access checkbox.
Item Action Enable Flexible Dial If Flexible Dial Back is enabled, the modem that the CN8000 Back dials back to doesn’t have to be fixed. It can dial back to any modem that is convenient for the user, as follows: 1.
Page 74
CN8000 User Manual Item Action Dial Out Schedule This entry sets up the times you want the CN8000 to dial out over the ISP connection. Every provides a listing of fixed times from every hour to every four hours. If you select Every two hours (for example), the CN8000 will start dialing out every two hours beginning at the next complete hour (if it is now 13:10, it will start dialling at 14:00).
Set the parameters according to the information below. Time Zone To establish the time zone that the CN8000 is located in, drop down the Time Zone list and choose the city that most closely corresponds to where it is at.
CN8000 User Manual Date Select the month from the dropdown list box. Click < or > to move backward or forward by one year increments. In the calendar, click on the day. Time To set the time, key in the numbers using the 24 hour HH:MM:SS format.
Parameter Explanation Client Timeout Control If there is no user input for the amount of time specified here, the user is automatically logged out, and must log in again before the CN8000 can be accessed. The default is 3 minutes.
Page 78
CN8000 User Manual Parameter Explanation Working Enable If ICMP is enabled, the CN8000 can be pinged. If it is not Mode ICMP enabled, the device cannot be pinged. The default is Enabled. Enable If this item is enabled, the device will show up in the list of...
Page 79
4. Administration Parameter Explanation Local/Remote Share Defines how the CN8000 is to be controlled when multiple Mode users have logged on, as follows: Share: Enables both local and remote users to simultaneously share control over the CN8000. Commands are executed in a chronological order.
CN8000 User Manual Preferences This section provides three submenus: User Preferences, Log, and Remote Console, used to configure user, log, and console settings on the CN8000. User Preferences The User Preferences page allows users to set their own Default Settings, and change their password.
Change Password to set the new password. The CN8000 logs all the events that take place on it. Following a reset, it writes them to a log file, which can be used as a searchable database with a log server.
To configure the PN0108 (a Power Over the NET™ device), click Open Power Management. When a connection between the devices is established, you can use the CN8000 to access the configuration screens of the PN0108. Clicking this button opens the login page of the PN0108 device.
4. Administration 2. Refer to ATEN’s PN0108 User Manual (or a compatible PON device’s manual) for details on editing the power management configuration screens. About Click About to view the CN8000’s firmware version.
Page 84
CN8000 User Manual This Page Intentionally Left Blank...
The WinClient Viewer is available by logging in using Microsoft's Internet Explorer, selecting Auto as the Default Viewer (under Preferences - User Preferences) and clicking launch from the sidebar, at which time the CN8000 WinClient application will install on your computer. You can also use the WinClient Viewer to log in directly to the server from your computer.
CN8000 User Manual A second or two after you click the Viewer icon, the remote server’s display appears as a window on your desktop: Navigation You can work on the remote computer via the screen display, just as if it were your local system.
(see User Info, page 101), the total number of users currently logged into the CN8000 displays to the right of the video resolution in the text row. Right clicking in the text row area brings up a menu that allows you to select options for the Screen Mode, Zoom, Mouse Pointer type, Mouse Sync Mode, Macro List, and Local/Remote Share Mode.
CN8000 User Manual Control Panel Functions The Control Panel functions are described in the table below. Note: Clicking the T button at the top right of the windows that appear for the control panel functions brings up a slider bar to adjust the transparency of the dialog box.
Page 89
5. The WinClient Viewer Icon Function Click to send a Ctrl+Alt+Del signal to the remote system. Click to toggle the remote display between color and grayscale. Click to bring up the Virtual Media dialog box. The icon changes when a virtual media device is started on the port (see Virtual Media, page 91, for details).
Page 90
To configure the PN0108 (a Power Over the NET™ device), click Power Management. When a connection between the devices is established, you can use the CN8000 to access the configuration screens of the PN0108. Clicking this button opens the login page of the device.
5. The WinClient Viewer Macros The Macros icon provides access to three functions found in the Macros dialog box: Hotkeys, User Macros, and System Macros. Each of these functions is described in the following sections. Hotkeys Various actions, corresponding to clicking the Control Panel icons, can be accomplished directly from the keyboard with hotkeys.
Page 92
CN8000 User Manual An explanation of the Hotkey actions is given in the table below: Action Explanation Exit remote location Exits the remote view and goes back to the web browser Main Page. This is equivalent to clicking the Exit icon on the Control Panel.
5. The WinClient Viewer User Macros User Macros are used to perform specific actions on the remote server. To create the macro, do the following: 1. Select the User Macros radio button, then click Add. 2. In the dialog box that comes up, replace “NewMacro” with a name of your choice for the macro:...
Page 94
CN8000 User Manual 3. Click Record. The dialog box disappears, and a small panel appears at the top left of the screen: 4. Press the keys for the macro. To pause macro recording, click Pause. To resume, click Record again.
Page 95
5. The WinClient Viewer 5. If you haven’t brought up the Show dialog, click Done when you have finished recording your macro. You return to the Macros dialog box with the macro keys that you pressed displayed in the Macro column: 6.
Page 96
CN8000 User Manual After creating your macros, you can run them in any of three ways: 1. By using the hotkey (if one was assigned). 2. By opening the Macro List on the Control Panel and clicking the one you want (see Macro List, page 75).
5. The WinClient Viewer Search Search, at the bottom of the dialog box, lets you filter the list of macros that appear in the large upper panel for you to play or edit. Click a radio button to choose whether you want to search by name or by key; key in a string for the search;...
Page 98
CN8000 User Manual 3. Click Record. The dialog box disappears, and a small panel appears at the top left of the screen: 4. Press the keys for the macro. To pause macro recording, click Pause. To resume, click Record again.
Page 99
Once the system macros have been created, you can choose to run any one of them upon logging out of the CN8000. System macros will only execute when the last user has logged out of the viewer (see Exit Macro, page 68, for details).
CN8000 User Manual Video Settings The Video Settings dialog box allows you to adjust the placement and picture quality of the remote screen display on your monitor. The meanings of the adjustment options are given in the table below: Option...
Page 101
The CN8000 can redraw the screen every 1 to 99 seconds, eliminating unwanted artifacts from the screen. Select Enable Refresh and enter a number from 1 through 99. The CN8000 will redraw the screen at the interval you specify. This feature is disabled by default.
CN8000 User Manual Gamma Adjustment If it is necessary to correct the gamma level for the remote video display, use the Gamma function of the Video Adjustment dialog box. For greater control, clicking the Advanced button brings up the following dialog box: There are ten preset and four user-defined levels to choose from.
5. The WinClient Viewer The Message Board To alleviate the possibility of access conflicts resulting from multiple user logins, the CN8000 provides a message board that allows users to communicate with each other: The Button Bar The buttons on the Button Bar are toggles. Their actions are described in the...
CN8000 User Manual Message Display Panel Messages that users post to the board - as well as system messages - display in this panel. If you disable Chat, however, messages that get posted to the board won't appear. Compose Panel Key in the messages that you want to post to the board in this panel.
5. The WinClient Viewer Virtual Media The Virtual Media feature allows a drive, folder, image file, or removable disk on a local client computer to appear and act as if it were installed on the remote server. Virtual Media also supports a smart card reader function that allows a reader plugged into a local client computer to appear as if it were plugged into the remote server.
Page 106
CN8000 User Manual Depending on your selection, additional dialog boxes appear enabling you to select the drive, file, folder, or removable disk you desire. See Virtual Media Support, page 186 for details about mounting these media types. 3. To add additional media sources, click Add, and select up to three media sources.
Page 107
5. The WinClient Viewer 3. To remove an entry from the list, select it and click Remove. 4. After you have made your media source selections, click Mount. The dialog box closes. The virtual media devices that you have selected are redirected to the remote system, where they show up as drives, files and folders on the remote file system.
CN8000 User Manual Smart Card Reader The smart card reader function allows a reader plugged into a local client computer’s USB port to be redirected, and appear as if it were plugged into the remote server. One purpose of smart cards (Common Access Cards, for example), is to allow authentication to the remote server from the local client.
5. The WinClient Viewer Zoom The Zoom icon controls the zoom factor for the remote view window. Settings are as follows: Setting Description 100% Sizes and displays the remote view window at 100%. Sizes and displays the remote view window at 75%. Sizes and displays the remote view window at 50%.
CN8000 User Manual The On-Screen Keyboard The CN8000 supports an on-screen keyboard, available in multiple languages, with all the standard keys for each supported language. Click this icon to pop up the on-screen keyboard: One of the major advantages of the on-screen keyboard is that if the keyboard languages of the remote and local systems aren’t the same, you don’t have to...
Page 111
5. The WinClient Viewer To display/hide the expanded keyboard keys, click the arrow to the right of the language list arrow.
CN8000 User Manual Mouse Pointer Type The CN8000 offers a number of mouse pointer options when working in the remote display. Click this icon to select the type that you would like to work with: Note: The icon on the Control Panel changes to match your choice.
5. The WinClient Viewer Mac and Linux Considerations For Mac systems, there is a second DynaSync setting to choose from. If the default synchronization result is not satisfactory, you can try the Automatic For Mac 2 setting. To select Mac 2, right click in the text area →...
CN8000 User Manual Customize Control Panel Clicking the Customize Control Panel icon brings up a dialog box that allows you to configure the items that appear on the Control Panel, as well as its graphical settings: The dialog box is organized into six main sections as described in the table,...
Page 115
User Info If Show User Numbers is enabled, the total number of users logged into the CN8000 displays in the text row of the Control Panel (See the Control Panel diagram on page 73 for an example.) Snapshot These settings let the user configure the CN8000’s screen capture...
CN8000 User Manual Power Management Clicking the Power Management icon brings up the power manager window, allowing you to log in and configure devices connected to a PN0108 Power Over the NET™ device: For information on configuring Power Over the NET™ devices, see the...
Admin Utility Clicking the Admin Utility icon brings up a window that allows you to configure the CN8000 via Viewer based GUI with the web browser administrative functionalities: The sidebar menu items available on this page are based upon the user’s permissions.
Page 118
CN8000 User Manual This Page Intentionally Left Blank...
Chapter 6 The JavaClient Viewer Introduction The JavaClient Viewer makes the CN8000 accessible to all platforms that have the Java Runtime Environment (JRE) installed. (See System Requirements, page 6, for the required JRE version.) The JRE is available for free download from the Java web site (http://java.com).
CN8000 User Manual A second or two after you click the Viewer link, the remote server’s display appears as a window on your desktop: Navigation You can work on the remote system via the screen display on your monitor just as if it were your local system.
If the Show User Numbers function has been enabled under Control Panel Configuration (see User Info, page 101), the total number of users currently logged into the CN8000 displays next to the text row on the right. Right clicking in the text row area brings up a menu that allows you to select and use the Control Panel options.
CN8000 User Manual Control Panel Functions The Control Panel functions are described in the table below: Icon Function This is a toggle. Click to make the Control Panel persistent – i.e., it always displays on top of other screen elements. Click again to have it display normally.
Page 123
To configure the PN0108 (a Power Over the NET™ device), click Power Management. When connection between the devices is established, you can use the CN8000 to access the configuration screens of the PN0108. Clicking this button opens the login page of the device.
Page 124
CN8000 User Manual Icon Function These icons show the Num Lock, Caps Lock, and Scroll Lock status of the remote computer. When the lock state is On, the LED is bright green and the lock hasp is closed. When the lock state is Off, the LED is dull green and the lock hasp is open.
6. The JavaClient Viewer Macros The Macros icon provides access to three functions found in the Macros dialog box: Hotkeys, User Macros, and System Macros. Each of these functions is described in the following sections. Hotkeys Various actions related to manipulating the remote server can be accomplished with hotkeys.
CN8000 User Manual User Macros User Macros are used to perform specific actions on the remote server. To create the macro, do the following: 1. Select the User Macros radio button, then click Add. User Macro operation is the same under the JavaClient as it is under the WinClient.
6. The JavaClient Viewer Search Search allows you to find previously created macros and have them listed in the large upper panel for you to play or edit. The Search operation is the same under the JavaClient as it is under the WinClient.
CN8000 User Manual Message Board The CN8000 supports multiple user logins, which can possibly give rise to access conflicts. To alleviate this problem, a message board feature, similar to an internet chat program, allows users to communicate with each other: The buttons on the Button Bar are toggles.
Page 129
6. The JavaClient Viewer The names of all the logged in users appear in the User List panel. Select the users that you want to post to before sending your message. Users that aren’t selected won’t see the message. To Hide/Unhide the User List panel, click on the arrows in the panel separator.
CN8000 User Manual Virtual Media The Virtual Media feature allows a folder or image file on a local client computer to appear and act as if it were installed on the remote server. Virtual Media also supports a smart card reader function that allows a reader plugged into a local client computer to appear as if it were plugged into the remote server.
WinClient. See The On-Screen Keyboard, page 96, for details. Mouse Pointer Type The CN8000 offers a number of mouse pointer options when working in the remote display. Click this icon to select the type that you would like to work with:...
CN8000 User Manual Mouse DynaSync Mode Clicking this icon selects whether synchronization of the local and remote mouse pointers is accomplished either automatically or manually. DynaSync operation is the same under the JavaClient as it is under the WinClient. See Mouse DynaSync Mode, page 98, for details.
The Log Server The Log Server is a Windows-based administrative utility that records all the events that take place on selected CN8000 units and writes them to a searchable database. This chapter describes how to install and configure the Log Server.
The screen is divided into three components: A Menu Bar at the top A panel that will contain a list of CN8000 units in the middle (see The Log Server Main Screen, page 125, for details). A panel that will contain an Events List at the bottom...
CN8000 units from the list. To add a CN8000 to the CN8000 List, click Add. To edit or delete a listed CN8000, first select the one you want in the CN8000 List window, then open this menu and click Edit or Delete.
Explanation Address This can either be the IP address of the CN8000 or its DNS name (if the network administrator has assigned it a DNS name). Key in the value specified for the CN8000 in the ANMS settings (see ANMS - Event Destination, page 41).
Server List CN8000 units are listed according to their IP address. Select the unit that you want to perform the search on from this list. You can select more than one unit for the search. If no units are selected, the search is performed on all of them.
CN8000 User Manual Options Network Retry allows you to set the number of seconds that the Log Server should wait before attempting to connect if the previous attempt to connect failed. When you click this item, a dialog box, similar to the one below appears: Key in the number of seconds, then click OK to finish.
Log Server to track (see Configure, page 121). The lower (Event) panel displays the log events for the currently selected CN8000 (the highlighted one - if there are more than one). To select a CN8000 unit in the list, simply click on it.
Recording Determines whether the Log Server records log events for this CN8000 or not. If the Recording check box is checked, the field displays Recording, and log events are recorded. If the Recording check box is not checked, the field displays Paused, and log events are not recorded.
2. Run the program and follow along with the installation dialog boxes. When the installation completes, an icon – CN8000 WinClient – is placed on your desktop and a program entry is made in the Windows Start menu: →...
(Continued from previous page.) Starting Up To connect to the CN8000, either click its icon on the desktop or click its entry on the Start menu. If this is the first time that you are running the utility, a dialog box appears requesting you to input your serial number.
Click Logout to end the connection. Server This area is used when you want to connect to a CN8000 at a remote location. If the IP address that appears isn’t the one you want, or if there is no entry at all, key in the IP address you want.
(see User Management, page 30, for details). After you have successfully logged in, the Connection screen reappears: At this time there are five active buttons, as described in the table, below: Button Action Logout Breaks the connection to the CN8000.
Page 145
Remote View In some cases, administrator’s do not wish to have users connect to the CN8000 with a browser. Remote View solves this problem. It opens a window on the user’s desktop containing the remote server’s display that is the same as the one that appears with the browser-based Windows client.
The Administrator Utility Clicking Admin Utility brings up a window that allows you to configure the CN8000 via AP based GUI with the web browser administrative functionalities. The Admin Utility is the same as a web-browser session, and appears with menu options that depend on the permissions set for the user that is logged in.
8. AP Operation The Java Client AP The Java Client AP is provided to make the CN8000 accessible to all platforms. Systems that have JRE 6 Update 3 or higher installed can connect. If you don't already have Java, it is available for free download from Sun's Java web site (http://java.sun.com).
CN8000 User Manual The Java Client Connection Screen To connect to the CN8000 1. Key in its IP address in the Server field. 2. If the port number shown isn’t correct, key in the correct number. 3. Click Connect.
8. AP Operation Logging In Once the CN8000 connects to the unit you specified, a login window appears: Provide a valid Username and Password, then Click OK. Note: The default Username is administrator; the default Password is password. For security, we strongly recommend that you change these to something unique (see User Management, page 30, for details).
Page 150
CN8000 User Manual This Page Intentionally Left Blank...
To allow authentication and authorization for the CN8000 via LDAP or LDAPS, the Active Directory’s LDAP Schema must be extended so that an extended attribute name for the CN8000 – permission – is added as an optional attribute to the person class.
CN8000 User Manual Install the Active Directory Schema Snap-in To install the Active Directory Schema Snap-in, do the following: 1. Open a Command Prompt. 2. Key in: regsvr32 schmmgmt.dll to register schmmgmt.dll on your computer. 3. Open the Start menu; click Run; key in: mmc /a; click OK.
LDAP server; the second supports shadow user access rights – where authentication takes place on the LDAP server, but authorization is via the CN8000’s user database. Editing Active Directory users with the Type 1 schema is described on page 142;...
CN8000 User Manual Note: The Unique X500 Object ID uses periods, not commas. Extending the Object Class With the New Attribute To extend the object class with the new attribute, do the following: → → 1. Open the Control Panel...
Page 155
9. LDAP Server Configuration 4. Select Properties; the person Properties dialog box comes up with the General page displayed. Click the Attributes tab. 5. On the Attributes page, click Add:...
For Type 1 users, both authentication and authorization parameter settings are supported on the LDAP server. To edit a Type 1 Active Directory user do the following: 1. Run ADSI Edit. (Installed as part of the Support Tools.) 2. Open domain, and navigate to the cn=users dc=aten dc=com node.
Page 157
9. LDAP Server Configuration 3. Locate the user you wish to edit. (Our example uses jason.) 4. Right-click on the user’s name and select properties. 5. On the Attribute Editor page of the dialog box that appears, select permission from the list.
Page 158
CN8000 User Manual 6. Click Edit to bring up the String Attribute Editor: 7. Key in the desired CN8000 permission attribute values (see The Permission Attribute Value, page 146 for details). For example:...
Page 159
9. LDAP Server Configuration 8. Click OK. When you return to the Attribute Editor page, the permission entry now reflects the new permissions: a) Click Apply to save the change and complete the procedure. b) Repeat the Editing Active Directory Users procedure for any other Type 1 users you wish to add.
The attribute value for permission is made up of two parts: 1) the IP address of the CN8000 a user will access; and 2) a string that indicates the access rights the user has on the CN8000 at that IP address. For example: 192.168.0.80&c,w,j;192.168.0.188&v,l...
Page 161
User String Meaning User1 10.0.0.166&w,v 1. User has Windows Client and View Only rights on a CN8000 with an IP address of 10.0.0.166. 2. User has no rights on any other CN8000 units administered by the LDAP server. User2 10.0.0.164&p,s;10.0.0.166&j,c 1. User has PON and Virtual Media rights on a CN8000 with an IP address of 10.0.0.164.
Page 162
Type 2 For Type 2 users, authentication takes place on the LDAP server, but authorization is via the CN8000’s user database. To edit a Type 2 user, do the following: 1. Follow Steps 1 – 6 of Editing a Type 1 user (beginning on page 142) 2.
9. LDAP Server Configuration c) Click Apply to save the change and complete the procedure. Jason now has the same permissions as user. d) Repeat the Editing Active Directory Users procedure for any other users you wish to add. OpenLDAP OpenLDAP is an Open source LDAP server designed for Unix platforms.
Specify the server suffix. All entries in the directory will have this suffix, which represents the root of the directory tree. For example, with suffix dc=aten,dc=com, the fully qualified name of all entries in the database will end with dc=aten,dc=com.
9. LDAP Server Configuration Starting the OpenLDAP Server To start the OpenLDAP Server, run slapd (the OpenLDAP Server executable file) from the command line. slapd supports a number of command line options, the most important option is the d switch that triggers debug information.
The schema that slapd uses may be extended to support additional syntaxes, matching rules, attribute types, and object classes. In the case of the CN8000, the CN8000User class and the permission attribute are extended to define a new schema. The extended schema file used to...
Directory Information Tree (DIT). The nodes in the tree are directory entries, and each entry contains information in attribute-value form. An example of the LDAP directory tree for the CN8000 is shown in the figure, below: (Continues on next page.)
The LDAP Data Interchange Format (LDIF) is used to represent LDAP entries in a simple text format (please refer to RFC 2849). The figure below illustrates an LDIF file that creates the DIT for the CN8000 directory tree (shown in the figure, above).
Page 169
9. LDAP Server Configuration The following figure illustrates an LDIF file that defines the OpenLDAP group for the CN8000. (Continues on next page.)
Using the New Schema To use the new schema, do the following: 1. Save the new schema file (e.g., cn8000.schema) in the /OpenLDAP/ schema/ directory. 2. Add the new schema to the slapd.conf file, as shown in the figure, below: 3.
Appendix Safety Instructions General This product is for indoor use only. Read all of these instructions. Save them for future reference. Follow all warnings and instructions marked on the device. Do not place the device on any unstable surface (cart, stand, table, etc.). If the device falls, serious damage will result.
Page 172
CN8000 User Manual extension cord ampere rating. Make sure that the total of all products plugged into the wall outlet does not exceed 15 amperes. To help protect your system from sudden, transient increases and decreases in electrical power, use a surge suppressor, line conditioner, or un-interruptible power supply (UPS).
Appendix Rack Mounting Before working on the rack, make sure that the stabilizers are secured to the rack, extended to the floor, and that the full weight of the rack rests on the floor. Install front and side stabilizers on a single rack or front stabilizers for joined multiple racks before working on the rack.
CN8000 User Manual Consignes de sécurité Général Ce produit est destiné exclusivement à une utilisation à l’intérieur. Veuillez lire la totalité de ces instructions. Conservez-les afin de pouvoir vous y référer ultérieurement. Respectez l’ensemble des avertissements et instructions inscrits sur l’appareil.
Page 175
Appendix L’équipement doit être installé à proximité de la prise murale et le dispositif de déconnexion (prise de courant femelle) doit être facile d’accès. La prise murale doit être installée à proximité de l’équipement et doit être facile d’accès. Veillez à ce que rien ne repose sur le cordon d’alimentation ou les câbles. Acheminez le cordon d’alimentation et les câbles de sorte que personne ne puisse marcher ou trébucher dessus.
Page 176
CN8000 User Manual L’unité a été exposée à la pluie ou à l’eau. L’unité est tombée ou le boîtier a été endommagé. Les performances de l’unité sont visiblement altérées, ce qui indique la nécessité d’une réparation. L’unité ne fonctionne pas normalement bien que les instructions d’utilisation soient respectées.
Appendix Montage sur bâti Avant de travailler sur le bâti, assurez-vous que les stabilisateurs sont bien fixées sur le bâti, qu’ils sont étendus au sol et que tout le poids du bâti repose sur le sol. Installez les stabilisateurs avant et latéraux sur un même bâti ou bien les stabilisateurs avant si plusieurs bâtis sont réunis, avant de travailler sur le bâti.
CN8000 User Manual Technical Support International For online technical support – including troubleshooting, documentation, and software updates: http://eservice.aten.com For telephone support, see Telephone Support, page iii. North America Email Support support@aten-usa.com Online Troubleshooting http://www.aten-usa.com/support Technical Documentation Support Software Updates Telephone Support...
If you are an administrator logging in for the first time, you need to access the CN8000 in order to give it an IP address that users can connect to. There are three methods to choose from. In each case, your client computer must be on the same network segment as the CN8000.
The way that the IP Installer works is that it searches and lists all compatible ATEN devices on your network. You can select a model from the Device List and set it’s IP Address settings using the options listed below, then click Set IP to implement the change on the device.
2. Specify the switch's default IP address (192.168.0.60) in your browser, and you will be able to connect. 3. Assign a fixed IP address for the CN8000 that is suitable for the network segment that it resides on. 4. After you log out, reset your client computer's IP address to its original value.
At power on, the CN8000 is automatically configured with a Link Local IPv6 Address (for example, fe80::210:74ff:fe61:1ef). To find out what the Link Local IPv6 Address is, log in with the CN8000’s IPv4 address and click the Basic Settings icon. The address is displayed at the bottom of the Basic Settings page (see page 30).
Appendix IPv6 Stateless Autoconfiguration If the CN8000’s network environment contains a device (such as a router) that supports the IPv6 Stateless Autoconfiguration function, the CN8000 can obtain its prefix information from that device in order to generate its IPv6 address. For example, 2001::74ff:fe6e:59.
For example, if the CN8000 connected to a particular router has an IP address of 192.168.1.180, you would log into your router’s setup program and access the Port Forwarding (sometimes referred to as Virtual Server) configuration page.
Appendix Keyboard Emulation The PC compatible (101/104 key) keyboard can emulate the functions of the Sun and Mac keyboards. The emulation mappings are listed in the table below. PC Keyboard Sun Keyboard PC Keyboard Mac Keyboard [Ctrl] [T] Stop [Shift] Shift [Ctrl] [F2] Again...
PPP Modem Operation Basic Setup In addition to the browser and AP methods, the CN8000 can also be accessed through its RS-232 port using a PPP dial-in connection, as follows: 1. Set up your hardware configuration to match the diagram, below:...
Appendix Connection Setup Example (Windows XP) To set up a dial-in connection to the CN8000 under Windows XP, do the following: → → 1. From the Start menu, select Control Panel Network Connections Create a New Connection. 2. When the Welcome to the New Connection Wizard dialog box appears, click Next to move on.
CN8000 User Manual Trusted Certificates Overview When you try to log in to the device from your browser, a Security Alert message appears to inform you that the device’s certificate is not trusted, and asks if you want to proceed.
Appendix Installing the Certificate To install the certificate, do the following: 9. In the Security Alert dialog box, click View Certificate. The Certificate Information dialog box appears: Note: There is a red and white X logo over the certificate to indicate that it is not trusted.
CN8000 User Manual 13. Next, click Finish to complete the installation; then click OK to close the dialog box. Certificate Trusted The certificate is now trusted: When you click View Certificate, you can see that the red and white X logo is...
Mismatch Considerations If the site name or IP address used for generating the certificate no longer matches the current address of the CN8000 a mismatch warning occurs: You can click Yes to go on, or you can disable mismatch checking.
CN8000 User Manual Self-Signed Private Certificates If you wish to create your own self-signed encryption key and certificate, a free utility – openssl.exe – is available for download over the web at www.openssl.org. To create your private key and certificate do the following: 1.
Erratic operation The CN8000 needs to be started before the KVM switch 1. If the CN8000 is connected to a KVM switch, make sure to power it on before powering on the switch. 2. If the KVM switch was started before the CN8000, reset or restart the KVM switch.
(windows.ocx) that some antivirus programs mistakenly see trojan after I access the as a virus or trojan. We have tested our firmware extensively CN8000 with my browser and found no evidence of a virus or trojan. You can add the and then open the plugin to your antivirus program’s White List and use the...
CN8000 your computer. 2. Make sure to include the correct login string when you specify the CN8000's IP address. 3. Close the Java Applet, reopen it, and try again. I have installed the latest Java There may be issues with the latest version JRE, but I am having performance because it is so new.
CN8000 User Manual Sun Systems Problem Resolution Video display problems with The display resolution should be set to 1024 x 768: HDB15 interface systems (e.g., Under Text Mode: Sun Blade 1000 servers). 1. Go to OK mode and issue the following com-...
Appendix Mac Systems Problem Resolution The local and remote There are two USB I/O settings for the Mac: Mac 1, and mouse pointers do not Mac 2 (see Date/Time, page 61). In general, Mac 1 sync. works with older operating system versions, whereas Mac 2 works with the newer ones.
CN8000 User Manual Additional Mouse Synchronization Procedures If the mouse synchronization procedures mentioned in the manual fail to resolve mouse pointer problems for particular computers, try the following: Windows: Note: In order for the local and remote mice to synchronize, you must use the generic mouse driver supplied with the MS operating system.
Appendix b) Click the Pointer Options tab c) Set the mouse speed to the middle position (6 units in from the left) d) Disable Enhance Pointer Precision 3. Windows ME: Set the mouse speed to the middle position; disable mouse acceleration (click Advanced to get the dialog box for this).
CS1758 CS228 CS428 Note: 1. Some of the CN8000’s features may not be supported, depending on the functionality of the cascaded KVM switch. (For example, some switches do not support virtual media.) 2. Some features found on the cascaded KVM switches may not be supported on the CN8000.
To clear the login information do the following: 1. Power off the CN8000 and remove its housing. 2. Use a jumper cap to short the jumper on the mainboard labeled J6.
CN8000 User Manual Specifications Function CN8000 Connectors Console 1 x SPHD-18 Male (Yellow) KVM (Computer) 1 x SPHD-18 Female (Yellow) 1 x DB-9 Male (Black) Modem 1 x DB-9 Male (Black) 1 x RJ-45 Female Power 1 x DC Jack...
Appendix About SPHD Connectors This product uses SPHD connectors for its KVM and/or Console ports. We have specifically modified the shape of these connectors so that only KVM cables that we have designed to work with this product can be connected. Limited Warranty ALTUSEN warrants this product against defects in material or workmanship for a period of one (1) year from the date of purchase.
Page 204
CN8000 User Manual This Page Intentionally Left Blank...
Page 207
Index Server Installation, 149 SMTP Settings, 41 Overview, 1 SNMP Server, 42 Sun Keyboard Emulation, 171 Sun Systems Port Access Troubleshooting, 182 Sessions, 32 Supported KVM Switches, 186 Port Alert Settings, 58 Synchronization Port Forwarding, 170 mouse, 98, 118 Port Property Settings, 57 System Macros, 83, 112 PPP, 172 System Requirements, 6...
Page 208
CN8000 User Manual Windows Client, 86 Virtual Media WinClient Viewer, 71 JavaClient, 116 Windows Client WinClient, 91 Installation, 127 Virtual Media Support, 186 Message Board, 89 Starting up, 71 Windows Client AP, 127...
Need help?
Do you have a question about the CN8000 and is the answer not in the manual?
Questions and answers