background image

Single Port KVM over IP 

The IP-KVM uses the Secure Socket Layer (SSL) protocol for any encrypted 
network traffic between itself and a connected client. During the 
connection establishment the IP-KVM has to expose its identity to a client 
using a cryptographic certificate. The default certificate comes with IP-KVM 
device upon delivery is for testing purpose only. System administrator 
should not rely on this default certificate as the secured global access 
mechanism through Internet. 

However, it is possible to generate and install a new base64 X.509 
certificate that is unique for a particular IP-KVM. In order to do that, the 
IP-KVM is able to generate a new cryptographic key and the associated 
Certificate Signing Request (CSR) that needs to be certified by a 
certification authority (CA). A certification authority verifies that you are 
the person who you claim you are, and signs and issues a SSL certificate to 
you. 

The following steps are necessary to create and install a SSL certificate for 
the IP-KVM:   

• Create a SSL Certificate Signing Request using the panel shown in Figure. 

You need to fill out a number of fields that are explained below. Once this 
is done, click on the button “Create” which will initiate the Certificate 
Signing Request generation. The CSR can be downloaded to your 
administration machine with the “Download CSR” button. 

• Send the saved CSR string to a CA for certification. You will get the new 

certificate from the CA after a more or less complicated traditional 
authentication process (depending on the CA). 

• Upload the certificate to the IP-KVM using the “Upload” button as shown 

in Figure below.

 

83 / 109 

Summary of Contents for IKVM-101Plus

Page 1: ...IKVM 101Plus User Manual HANWELL Single Port KVM over IP V1 0 www hanwell com tw Hanwell Technology...

Page 2: ...nce with the requirements of the following regulations EN 55022 CLASS B RoHS All contents of this package including products packing materials and documentation comply with RoHS 2008 by Hanwell Techno...

Page 3: ...onfiguration Setup via Serial Console 158 2 12 Keyboard Mouse and Video configuration 159 2 12 1 IP KVM keyboard settings 19 2 12 2 Remote Mouse Settings 19 2 12 3 Automatic mouse speed and mouse sync...

Page 4: ...4 3 1 Change Password 62 4 3 2 Users and Groups 63 4 4 KVM Settings 65 4 4 1 User Console 65 4 4 2 Keyboard Mouse 69 4 4 3 Video 71 4 5 Device Settings 73 4 5 1 Network 73 4 5 2 Dynamic DNS 77 4 5 3...

Page 5: ...Single Port KVM over IP E Bandwidth Consumption 105 F Cable Connectors 106 G Well Known TCP UDP Port Numbers 107 H Protocol Glossary 108 5 109...

Page 6: ...sion 37 Figure 3 12 Predefined Compression 37 Figure 3 13 Lossy Compression 38 Figure 3 12 Encoding Color depth 38 Figure 3 13 Status line 39 Figure 3 14 Status line transfer rate 39 Figure 4 1 KVM Co...

Page 7: ...ain Rules of IP Filtering 81 Figure 4 23 Certificate Settings 82 Figure 4 24 SSL Certificate Upload 84 Figure 4 25 CSR string 84 Figure 4 26 Serial Port 86 Figure 4 27 Date Time 88 Figure 4 28 Event L...

Page 8: ...usive solution for remote access and control Remote access and control software runs on its embedded processors only but not on mission critical servers so that there is no interference with server op...

Page 9: ...wings items 1x the single port IP KVM unit 1x CD ROM software utilities and User s manual 1x AC to DC Power Adapter DC 5V 2 6A 1x Rack Mount Kit Brackets and screws 1x Null modem cable 6 feet 1x USB A...

Page 10: ...and mouse and to send special commands to the server You can also perform periodic maintenance of the server Using the Console Redirection Service you are able to do the following I Reboot the system...

Page 11: ...on command has been given CPU Controller main board failure Power supply is on but there is no video output CPU fan failure By server specific management software RAM failure Boot Sequence on boot con...

Page 12: ...Single Port KVM over IP 2 7 Cable Connections stand alone The figure below depicts the installation connection Host side Console side Figure 2 2 Cable Connections stand alone 12 109...

Page 13: ...1 cable to the PS 2 mouse port on the host computer KVM and the other end of 3 in 1 cable to the host PS 2 mouse port on the IP KVM 8 Connect one green end of 3 in 1 cable to PS 2 keyboard port on the...

Page 14: ...Single Port KVM over IP Host side Console side Figure 2 3 Cable Connections with a Multi port KVM Switch 14 109...

Page 15: ...enabled IP auto configuration DHCP the IP KVM will try to contact a DHCP server in the subnet to which it is physically connected If a DHCP server is found it may provide a valid IP address gateway ad...

Page 16: ...2 Using PSetup to look for IP KVM a Click Refresh Devices button to detect connected devices b Select MAC address of the IP KVM in Device MAC address box You can find the MAC address labeled on the b...

Page 17: ...n settings enter your login as a super user and change your password Super user login Enter the login name of the super user The initial value is super All characters are in lower case Super user pass...

Page 18: ...lt values shown in square brackets below press Enter key IP auto configuration none dhcp bootp IP 192 168 0 70 Net mask 255 255 255 0 Gateway 0 0 0 0 for none 0 0 0 0 IP auto configuration With this o...

Page 19: ...KVM Auto mouse speed The automatic mouse speed mode tries to detect the speed and acceleration settings of the host system automatically See the section below for a more detailed explanation Fixed mo...

Page 20: ...pointer is not synchronized with the remote mouse pointer press the Auto Adjust Button once 2 12 4 Host system mouse settings The host s operating system knows various settings from the mouse driver N...

Page 21: ...2 12 6 Recommended Mouse Settings For the different operating systems we can give the following advice MS Windows In general we recommend the usage of a mouse via USB Choose USB without Mouse Sync Fo...

Page 22: ...e IP KVM s serial port via a terminal mode The primary interface of the IP KVM is the HTTP interface This is covered extensively in this chapter Other interfaces are addressed in subtopics In order to...

Page 23: ...sers generally support strong encryption on default 3 2 Login into the IP KVM and logout 3 2 1 Login into the IP KVM Launch your web browser Direct it to the address of your IP KVM which you configure...

Page 24: ...of the password for the super user is a severe security risk and might result in unauthorized access to the IP KVM and to the host system including all possible consequences Warning Your web browser...

Page 25: ...le Exit from the IP KVM front end Warning If there is no activity for 30 minutes the IP KVM will log you out automatically A click on one of the links will bring you back to the login screen Remote Co...

Page 26: ...nection is neither HTTP or HTTPS but RFB Remote Frame Buffer Protocol As default RFB tries to establish a connection to TCP port number 443 Your local network environment has to allow this connection...

Page 27: ...ans keyboard and mouse can be used in the usual way However be aware of the fact that the remote system will react to keyboard and mouse actions with a slight delay The delay depends on the bandwidth...

Page 28: ...e window contains a control bar Using its elements you can see the state of the Remote Console and adjust the local Remote Console settings A description for each control follows Figure 3 2 Remote Con...

Page 29: ...1 4 2 or higher Options To open the Options menu click on the button Options Figure 3 3 Remote Console Options Menu A short description of the options as follows Monitor Only Toggles the Monitor only...

Page 30: ...all display details When you designate 25 50 or100 scaling the size of Remote Console window is calculated according to the remote host video setting with scaling algorithm execution When you designat...

Page 31: ...e time than the fast one and requires a correctly adjusted picture Use the auto adjustment function to setup the picture Local Cursor Offers a list of different cursor shapes to choose from for the lo...

Page 32: ...efines how IP KVM reacts to small changes in the video input signal Turning on the noise filter can help reduce video flickering that is often caused by distortions as well as lowering unnecessary ban...

Page 33: ...e horizontal frequency for a video line and depends on the video mode Different video card types may require different values here The default settings in conjuction with the auto adjustment procedure...

Page 34: ...permanently Undo Changes Restore last settings Refresh Video Click to run this menu item for retrieving the whole video again from the controlled host and displayed on Remote Console In normal situat...

Page 35: ...on your particular JVM and your browser settings this is not always possible A typical example is a German localized system that uses an US English keyboard mapping In this case you have to change th...

Page 36: ...between two single video pictures We recommend to use a higher compression level if the network bandwidth is low The higher the compression level the more time is needed to pack and unpack the video...

Page 37: ...g Compression The next two options allow you to set the compression level to a predefined level OR to set a level for lossy compression This compresses well but leads to a degradation in image quality...

Page 38: ...to be captured and to be transferred Figure 3 14 Encoding Color depth Note If displaying motion pictures on a connection with low speed you may achieve an improvement regarding the video transfer rate...

Page 39: ...ibes the connection to the Remote Console Norm means a standard connection without encryption SSL means a secure connection Figure 3 15 Status line Furthermore both the incoming In and the outgoing Ou...

Page 40: ...e Console window is a Java Applet that tries to establish its own TCP connection to the IP KVM Starting the Remote Console opens a new window displays screen movement of host system with its size auto...

Page 41: ...gure 4 1 KVM Console To open the KVM console either click on the icon Console or Remote Control KVM Console of the menu entry on the left or Click to open of the console picture on the right 4 1 2 Tel...

Page 42: ...ace That means the user management of the Telnet interface is entirely controlled with the according functions of the web interface Once you have successfully logged into the IP KVM a command line wil...

Page 43: ...ter and local computer the one connected with xRemote would have to have Operating System Win2000 XP or above This function would not work on other platforms at this moment Before using Virtual Media...

Page 44: ...oppy Disk Figure 4 3 Virtual Media Floppy Disk 1 You need to create the floppy to an image file first 2 For this example we use RawWrite software or any other image creator software to create floppy i...

Page 45: ...lick Read 3 You can find a image file saved at desire destination after you created it with RawWrite 4 Open the browser to log into the IP KVM Click Virtual Media Floppy Disk Click the Browse button t...

Page 46: ...ould be bootable under DOS mode if the motherboard BIOS on the host computer supporting USB BOOTABLE function Notes 1 If using other image creator software the output image extension file name has to...

Page 47: ...imaging tool to create CD ROM ISO image 2 Please create a folder and share this folder Please make sure password has to be setup with the authorized user during Sharing Permission settings 3 Copy the...

Page 48: ...Folder Permission username and password 5 Image file set successfully 6 Open the remote console you can see the virtual CD as below picture Note the output image extension file name has to be iso e g...

Page 49: ...name of the image file on the share folder User name If necessary specify the user name for the share named in advance If unspecified and a guest account is activated this guest account information wi...

Page 50: ...n the configuration dialog Figure 4 6 Share configuration dialog Adjust the settings for the selected directory Activate the selected directory as a share Select Sharing this folder Choose an appropri...

Page 51: ...ices such as floppy drives hard discs CD ROMs and other removable devices like USB sticks can be redirected It is even possible to enable a write support so that for the remote machine it is possible...

Page 52: ...hed off Force read only connections If enabled the Write Support for the Drive Redirection is switched off It is not possible to write on a redirected device Click Apply to submit your changes Operati...

Page 53: ...onsist of X numbers of partitions and emulate whatever number of partitions on host computer You may also emulate a DVD Drive with the same procedure However this DVD Drive Does NOT support Bootable f...

Page 54: ...Single Port KVM over IP Figure 4 8 Drive Redirection Setup 54 109...

Page 55: ...dress of the IP KVM you would like to connect to Drive The local drive you want to share with the remote computer which could be Floppy disc CD ROMs USB Sticks and hard drives Port This is the network...

Page 56: ...at the remote computer is allowed to write on your local drive As you can imagine this is very dangerous If both the remote and the local system try to write data on the same device this will certainl...

Page 57: ...a serious problem when the note above is respected If the write support is enabled a drive which is not locked might be damaged by the Drive Redirection With the Disconnect button a connection via Dr...

Page 58: ...Single Port KVM over IP 4 2 3 2 Built in Java Drive Redirection 1 Run Remote Control KVM Console 2 Click Floppy icon Figure 4 10 Built in Java Drive Redirection 58 109...

Page 59: ...orage emulation and hide the virtual drive if no image file is currently loaded If unset and no file image will be found it may happen that the host system will hang on boot due to changes in the boot...

Page 60: ...dev fd0 of tmp floppy image dd reads the entire disc from the device dev fd0 and saves the output in the specified output file tmp floppy image Adjust both parameters exactly to your needs input devi...

Page 61: ...mage dd reads the entire disc from the device dev cdrom and saves the output in the specified output file tmp cdrom image Adjust both parameters exactly to your needs input device etc MS Windows To cr...

Page 62: ...Password Figure 4 14 Setting Password Change password of currently logged in user Old Password type in current password New Password type in new password Confirm New Password re type new password for...

Page 63: ...nfigured user account that has fixed permissions The account super has all possible rights to configure the device and to use all functions IP KVM offers Upon delivery the account super has the passwo...

Page 64: ...ayed user settings To delete an user press the button Delete Note The IP KVM is equipped with an host independent processor and memory unit which both have a limitation in terms of the processing inst...

Page 65: ...ngs 4 4 1 User Console The following settings are user specific That means the super user can customize these settings for every users separately Changing the settings for one user does not affect the...

Page 66: ...Single Port KVM over IP Figure 4 15 User Console Setting 66 109...

Page 67: ...optimized adjustment of compression and colour depth for the indicated network speed Manually Allows to adjust both compression rate and the colour depth individually Depending on the selected compres...

Page 68: ...tual Machine across different platforms The Remote Console software is optimized for this JVM versions and offers wider range of functionality when run in SUN s JVM Please make sure that you are insta...

Page 69: ...m requests confirmation by a dialog box before the key strokes will be sent to the remote host keycode is the key to be sent Multiple key codes can be concatenated with a plus or a minus sign The plus...

Page 70: ...ess of the host the following conditions must be fulfilled the host BIOS must have USB keyboard support the USB cable must be connected or must be selected in the Host interface option PS 2 Keyboard M...

Page 71: ...cceleration of OS should be disabled and the intelligent mouse synchronization of IP KVM is not functioning under this setting Absolute mouse scaling for MAC server Use this option for MAC server To s...

Page 72: ...orce Composite Sync Required for Sun Computers When connecting the device directly to legacy Sun computer with composite sync as the video output it may be possible that IP KVM don t recognize the com...

Page 73: ...4 5 Device Settings 4 5 1 Network The Network Settings panel allows changing network related parameters Each parameter will be explained below Once applied the new network settings will immediately c...

Page 74: ...k Settings Warning Changing the network settings of the IP KVM might result in losing connection to it In case you change the settings remotely make sure that all the values are correct and you still...

Page 75: ...he local one this IP address must be set to the local network router s IP address Primary DNS Server IP Address IP address of the primary Domain Name Server in dot notation This option may be left emp...

Page 76: ...M from the setup protocol Setup protocol is a proprietary layer 2 MAC based protocol to allow some configuration software to detect IP KVM devices in the network even without IP address and then confi...

Page 77: ...reely available Dynamic DNS service www dyndns org can be used in the following scenario Figure 4 20 Dynamic DNS Scenario The IP KVM is reachable via the IP address of the DSL router which is dynamica...

Page 78: ...ration dialog as shown in Figure Enable Dynamic DNS and change the settings according to your needs see below Enable Dynamic DNS This enables the Dynamic DNS service This requires a configured DNS ser...

Page 79: ...Make sure the time setting of the IP KVM is correct see the Section Date And Time 4 5 3 Security Figure 4 21 Device Security Force HTTPS If this option is enabled access to the web front end is only...

Page 80: ...s Control This is the IP filtering function it keeps unauthorized hosts from accessing to the IP KVM by specifying IP filtering rules It is important to fully understand what an IP filter is If you do...

Page 81: ...n 2 Yes Action 3 Action 4 Action 5 Yes Yes Yes Figure 4 22 Chain Rules of IP Filtering Check the Enable Group based System Access Control to edit the rules Users can add a new IP filtering rule by set...

Page 82: ...Single Port KVM over IP 4 5 4 Certificate Figure 4 23 Certificate Settings 82 109...

Page 83: ...Signing Request CSR that needs to be certified by a certification authority CA A certification authority verifies that you are the person who you claim you are and signs and issues a SSL certificate t...

Page 84: ...or identifying the card to its clients Warning If you destroy the CSR on the IP KVM there is no way to get it back In case you deleted it by mistake you have to repeat the three steps as described abo...

Page 85: ...y ISO code The country where the organization is located This is the two letter ISO code e g DE for Germany or US for the USA Note the country code has to be entered in CAPITAL LETTERS Challenge Passw...

Page 86: ...modem needs to be connected to the serial interface of the IP KVM Logically connecting to the IP KVM using a telephone line means nothing else than building up a dedicated point to point connection fr...

Page 87: ...giving a new string Refer to the modem s manual about the AT command syntax Modem server IP address This IP address will be assigned to the IP KVM itself during the PPP handshake Since it is a point t...

Page 88: ...setting will not be persistent so you have to adjust it again after IP KVM loses power for more than a few minutes To avoid this you can use a NTP timeserver which sets up the internal clock automati...

Page 89: ...or a firmware update are logged to a selection of logging destinations Each of those events belongs to an event group which can be activated separately The common way to log events is to use the inter...

Page 90: ...rectory or a static link have to be exported to write all logging data to a file that is located there To write logging data from more than one IP KVM devices to only one NFS share you have to define...

Page 91: ...e Firmware upload failed device No firmware file uploaded device Uploaded firmware file discarded device Firmware validation failed device Firmware file uploaded by user device Firmware updated by use...

Page 92: ...ce Summary This section contains a summary with various information about this IP KVM and it s current firmware and allows you to reset the card The Data file for support allows you to download the IP...

Page 93: ...nected user s its IP address from which host the user comes from and its activity status is displayed RC means that the Remote Console is open If the Remote Console is opened in exclusive mode the ter...

Page 94: ...t including the events that are logged by the IP KVM 4 6 3 Update Firmware Figure 4 32 Update Firmware The IP KVM is a complete standalone computer The software it runs is called firmware The firmware...

Page 95: ...e any transmission errors In case of any error the Upload Firmware function will be aborted Secondly if everything went well you see the Update Firmware panel The panel shows you the version number of...

Page 96: ...s mainly needed to activate a newly updated firmware It will close all current connections to the administration console and to the Remote Console The whole process will take about half a minute Reset...

Page 97: ...ion 10 100 Ethernet telephone line modem needed Firmware Upgrade Port 1 x Serial DB9 Pin Max Video Resolution Local 1600 x 1200 Remote 1280 x 1024 OS Compatibility MS Windows family Unix Sum Solaris L...

Page 98: ...the Remote Console Make sure the TCP port numbers 443 or 80 are open for incoming TCP connection establishments 5 No connection can be established to IP KVM Check whether the network connection is wor...

Page 99: ...r add a file helper using the Internet Explorer preferences for this type of file Make sure that the encoding is plain text and the checkbox use for outgoing is checked Another possibility is to use a...

Page 100: ...ards please try adjusting the brightness of the remote console by following steps below a Click Video Settings in Options menu of the remote console b Adjust the Brightness setting until the pinkish t...

Page 101: ...IP KVM can work with most standard KVM 6 How many letters the username and password can be set on IP KVM The IP KVM accepts 32 letters of username and password 7 How many concurrent user of IP KVM The...

Page 102: ...tion programs are on an identical position no matter what language mapping you are using Some of the keys have aliases also means they can be named by 2 key codes separated by comma in the table Key a...

Page 103: ...ese If done so IP KVM may not be able to detect them Resolution x y Refresh Rates Hz 640 x 350 70 85 640 x 400 56 70 85 640 x 480 60 72 75 85 90 100 120 720 x 400 70 85 800 x 600 56 60 70 72 75 85 90...

Page 104: ...eo x x Device Settings x Maintenance Device Information x x x Maintenance Event Log x Maintenance Update Firmware x Maintenance Unit Reset Keyboard Mouse Video Keyboard Mouse Video Keyboard Mouse Vide...

Page 105: ...dth Comment Video Optimized Video Optimized 8 bit 3 0 3 3 MB s uncompressed synchronized video data most bandwidth needed Video Optimized high color Video Optimized 16 bit 4 3 5 0 MB s uncompressed sy...

Page 106: ...onnectors PS 2 Cable Mini Din 6 pin Male to Male AT to PS 2 keyboard adapter Optional Din 5 pins Male to Mini Din 6 pin Female VGA Cable HDDB15 Male to Male USB 2 0 Cable USB A B cable CAT5 5E 6 Strai...

Page 107: ...processes or by programs executed by privileged users Table below shows some of the well known port numbers For more details please visit the IANA website http www iana org assignments port numbers Po...

Page 108: ...ectory Access Protocol A protocol for accessing directory information NAT Network Address Translation An Internet standard that enables a LAN to use one set of IP addresses for internal traffic and a...

Page 109: ...in a central database that all remote servers can share SNMP Simple Network Management Protocol A protocol that system administrators use to monitor networks and connected devices and to respond to q...

Reviews: