HP 1x1x16 - IP Console Switch KVM User Manual Download Page 282

Page: 282 / 339

HP IP Console Switch directory services integration setup tutorial 282

NOTE:

The first cn field must match the full name of the user, not the login name. For example,

if the user name is John Doe, then

cn=John Doe

(note the space in the name).

Enter the search password for the consoleldap user account.

Enter the search base:

dc=widget,dc=com.

NOTE:

The search base should always be at the root of the domain.

On the Query Parameters tab, click

Basic

for Query Mode (Console Switch) and

Basic

for Query

Mode (Server).

Apply the settings.

NOTE:

This query mode is used for testing and troubleshooting, but it should not be used in a

production environment. After the basic LDAP communication is tested successfully, change the

query mode.

Summary of Contents for 1x1x16 - IP Console Switch KVM

Page 1: ...HP IP Console Viewer User Guide Part Number 409053 003 July 2008 Third Edition ...

Page 2: ...direct incidental special exemplary or consequential damages including but not limited to procurement of substitute goods or services loss of use data or profits or business interruption however caused any on any theory of liability whether in contract strict liability or tort including negligence or otherwise arising in any way out of the use of Hypersonic SQL even if advised of the possibility o...

Page 3: ...nsole Viewer 16 Navigating the HP IP Console Viewer 19 HP IP Console Viewer components overview 19 Viewing the main window 19 Main window features 20 Auto searching for a server in the list view 21 Searching for a server in the local database 21 Adding and discovering console switches 22 Adding console switches 22 Adding a console switch without an assigned IP address 22 Adding a console switch wi...

Page 4: ...g and refreshing the Video Session Viewer 84 Adjusting the local cursors 85 Refreshing the screen 85 Expanding to full screen mode 85 Adjusting the Video Session Viewer 85 Adjusting the Video Session Viewer size 85 Adjusting the video quality 86 Configuring session options 87 Configuring keyboard pass through 87 Selecting function buttons for the Video Session Toolbar 87 Aligning the cursors 87 Mo...

Page 5: ...er 151 Serial Session Viewer window 151 Accessing the Serial Session Viewer 153 Closing the Serial Session Viewer 155 Customizing preferences 155 Customizing session properties 156 Terminal session properties 156 Login scripts session properties 159 Logging session properties 160 Using login scripts 160 Changing a default login script 161 Enabling or disabling automatic login 163 Enabling or disab...

Page 6: ...DAP parameters 208 Server Parameters tab 209 Search Parameters tab 209 Query Parameters tab 210 Console switch and server query modes 212 Setting up the Active Directory for performing group attribute mode queries 217 Using the on board Web interface OBWI 219 Setting up the OBWI 219 Upgrading the console switch firmware for OBWI compatibility 219 Upgrading interface adapter firmware for OBWI compa...

Page 7: ... 290 LDAP client behavior overview 292 UID masks simple and complex 292 Active Directory attributes that can be used as credentials 292 Attributes initialized during creation of a new user object 292 Additional attributes available in user properties 297 Additional attributes available through the ADSI Editor 298 UID mask for single factor credentials 299 UID mask for multiple factor credentials 3...

Page 8: ...edia o PS2 with Virtual Media o PS2 o USB o Serial o HP Bladesystem CAT5 KVM System components The HP IP Console Viewer consists of the main window Video Session Viewer Serial Session Viewer the Manage Console Switch window and the OBWI Main window The HP IP Console Viewer utilizes a Microsoft Windows Explorer like navigation with an intuitive split screen interface providing you with a single poi...

Page 9: ...sing a CAT5 cable PN 336045 B21 Compaq legacy analog switches when attached to an interface adapter o 1 x 4 PN 400336 001 291 B31 o 1 x 8 PN 400337 001 291 B31 o 2 x 8 PN 400338 001 291 B31 o 2 x 8 48 VDC PN 400542 B21 Serial Session Viewer The Serial Session Viewer enables you to establish serial sessions with individual servers that support telnet or SSH You can configure user preferences for al...

Page 10: ...ns Ease of management The HP IP Console Viewer enables you to add and manage multiple console switches and servers in one system After a console switch or server is installed you can configure the console switch parameters launch share or preempt user video sessions and execute numerous control functions From the intuitive Manage Console Switch window you can enable SNMP traps configure target ser...

Page 11: ...ices integration LDAP Directory services integration or LDAP offers the following features and benefits Authenticates and authorizes users from a shared database Controls user privileges A user can be disabled globally with one change Enables users to use their domain credentials Does not require manual password synchronization when the user password is changed in the directory It is changed every...

Page 12: ...ardware and browser requirements for running the HP IP Console Viewer on the supported operating systems Configurations with less than the recommended requirements are not supported 500 MHz Intel Pentium III processor 256 MB RAM 10 or 100 BaseT NIC 100 recommended XGA video with graphics accelerator minimum 800 x 600 desktop size minimum 65 536 16 bit colors recommended ...

Page 13: ...rs through the Manage Console Switch window Synchronizing your mouse pointers When viewing a server attached to your console switch the viewer displays the mouse pointer of the accessed server and the mouse pointer for your local computer by default The pointer for the server follows the movement of the local pointer To maintain pointer synchronization the mouse speed and accelerations must be con...

Page 14: ... 10Base T Ethernet can be used HP recommends a dedicated switched 100Base T network or better for improved performance HP IP Console Switches with Virtual Media are capable of 1G Connect the network cable from the LAN port on the rear panel of the HP IP Console Switch to the network and then power on all attached systems The following ports must be open on your network for both UDP and TCP protoco...

Page 15: ...llation 15 Installing the HP IP Console Viewer IMPORTANT To ensure that you have the latest software see the HP website http www hp com go kvm To install the HP IP Console Viewer on Windows operating systems ...

Page 16: ...d to access the contents of the CD after it is mounted Typical values include mnt cdrom or media cdrom 2 Open a command window and navigate to the CD mount point For example cd mnt cdrom 3 Enter the following command to start the installation sh linux setup bin 4 Follow the on screen instructions Launching the HP IP Console Viewer To launch the HP IP Console Viewer on all Windows operating systems...

Page 17: ...t be configured to access the directory server For information on configuring LDAP Authentication see Using directory services integration on page 201 Serial console switches can be configured for internal authentication LDAP authentication and also RADIUS authentication For more information see Configuring authentication parameters for serial console switches on page 104 8 After one HP IP Console...

Page 18: ...ion by selecting View Auto Scale and click Maximize Select Tools Automatic Video Adjust for the server video in the Video Session Viewer 13 After setting the mouse properties click mouse synchronization in the HP IP Console Viewer menu bar ...

Page 19: ...d mouse functions of individual servers If the target device has a connection to a serial console switch click the Launch Serial Session icon to establish a telnet or SSH session to the target When you select a console switch you can click Manage Console Switch in the main window to launch the Manage Console Switch window This window enables you to configure and control the console switch Viewing ...

Page 20: ...iew Contains a tree view representing the groups that are selected from the tab view The group view also controls what appears in the selected view 5 List view Displays a list in the currently selected group view or the results of a search executed from the search bar 6 Status bar Displays the number of items shown in the list view 7 Selected view Displays the search bar list view and task window ...

Page 21: ...ny item in the List view 2 Begin entering the first few characters of a server name The highlight moves to the first server name beginning with those characters To reset the search so you can find another server pause for a few seconds and enter the first few characters of the next server Searching for a server in the local database 1 Click Servers 2 Insert your cursor in the Search text box and e...

Page 22: ... been assigned you must manually add the console switch If you are installing multiple console switches HP recommends using the Discover Wizard If you are installing a single console switch HP recommends using the New Console Switch Wizard NOTE For KVM console switches HP recommends that you assign names to the target servers in the console switch OSD before adding them to the HP IP Console Viewer...

Page 23: ...Adding and discovering console switches 23 The New Console Switch Wizard appears 2 Click Next The Product Type window appears ...

Page 24: ...le switches 24 3 Select a product from the product list The IP Address window appears 4 Indicate that the HP IP Console Switch does not have an IP address assigned by selecting No and click Next The Network Address window appears ...

Page 25: ...ialog box displays a list of all the interface adapters attached to a cascade switch Associate the appropriate console switch from the dropdown list for each interface adapter that has a console switch attached b The Existing Cascade Switches dialog box contains a list of all the current console switches defined in the database Click Add Modify or Delete to alter the list The HP IP Console Viewer ...

Page 26: ...o the main window 7 Click Next The Completing the New Console Switch Wizard window appears 8 Click Finish to exit and return to the main window The console switch displays in the list view Adding a console switch with an assigned IP address 1 Select File New Console Switch or click New Console Switch The New Console Switch Wizard window appears 2 Click Next The Product Type window appears ...

Page 27: ...s 27 3 Select a product from the product list and click Next The IP Address window appears 4 Indicate that the HP IP Console Switch has an IP address assigned to it by selecting Yes and click Next The Locate IP Console Switch window appears ...

Page 28: ...pter that has a console switch attached b The Existing Cascade Switches dialog box contains a list of all the current console switches defined in the database Click Add Modify or Delete to alter the list The IP Console Viewer searches only for the number of servers designated by the console switch type user definable After a cascade switch has been added to an Existing Cascade Switches list you ca...

Page 29: ...Adding and discovering console switches 29 Discovering one or more console switches with the Discover Wizard 1 Select Tools Discover The Discover Wizard window appears ...

Page 30: ...f the following options o Select Use IPv4 address range and then enter a valid range of network IPv4 addresses to search on the network in the From Address and the To Address fields Use the IP address dot notation xxx xxx xxx xxx o Select Use IPv6 subnet and then enter a valid IPv6 subnet prefix in Address Prefix Length notation to search an IPv6 subnet ...

Page 31: ...ow many addresses have been probed from the total number specified by the range and the number of IP console switches found o If one or more new console switches are discovered the Select Console Switches window appears From this window you can select the console switches to add to the local database Continue to step 6 ...

Page 32: ...onsole Switches window appears A progress bar appears while new console switches are added to the list When all of the selected consoles have been added to the local database the Completing the Discover Wizard window appears Click Finish to exit and return to the main window The new console switches appear in the list view If any console switches were not added to the local database for any reason...

Page 33: ...the server name 7 Repeat steps 1 through 5 for every server name that you want to change 8 Click Apply to save any changes This process dynamically updates the HP IP Console Viewer database the console switch and the interface adapter simultaneously To rename the serial ports on the serial console switch through the HP IP Console Viewer 1 Access the serial console switch Accessing console switches...

Page 34: ... KVM console switch is added the server names retrieved from the KVM console switch or serial console switch are stored in the HP IP Console Viewer database The operator can then rename a server in the main window and the new name is stored in the database and used in various HP IP Console Viewer component screens This new server name is not communicated to the KVM console switch or serial console...

Page 35: ...ng order A downward pointing arrow indicates the list is sorted by that column header in descending order Managing cached credentials To access KVM console switches serial console switches and servers you must first enter a user name and password credentials The HP IP Console Viewer uses credential caching which captures credentials upon first use and automates the authentication of subsequent uni...

Page 36: ... console switch A login dialog box appears or Select the console switch and click Manage Console Switch A login dialog box appears or Right click the console switch and select Manage Console Switch from the resulting list A login dialog box appears or Click Console Switches and press Enter A login dialog box appears 3 Enter a valid user name and password If a new user name and password have not be...

Page 37: ... a dialog box to appear indicating that a reboot is required for the change to take effect In such cases you can choose to reboot immediately or wait to reboot later NOTE References to the local user refer to an OSD user connected to the console switch For more information about the KVM console switch and its operations see the documentation included with the KVM console switch Viewing and configu...

Page 38: ...rk subcategory enables you to view the network settings of a console switch including the Name read only IP Address Subnet Mask Gateway MAC Address read only LAN Speed DNS Servers and Bootp settings You can change the console switch name in the SNMP category The DNS servers can be used to find domain controllers during LDAP authentication and authorization operations but HP recommends using IP add...

Page 39: ...he IP Address field enter the address in IP dot notation of the console switch The value cannot be a loopback address or all zeros b In the Subnet Mask field enter the subnet mask in IP address dot notation of the console switch The value cannot be a loopback address or all zeros c In the Gateway field enter the gateway address in IP address dot notation of the console switch The value cannot be a...

Page 40: ...o sessions to the console switch You can also enable video encryption Video encryption is optional but at least one Keyboard Mouse encryption level must be selected The Sessions subcategory can also be used to enable Connection Sharing options In the Connection Sharing area select sharing options as needed If you select Enable Share Mode users can share KVM sessions for the same server If you sele...

Page 41: ...Managing KVM console switches 41 For more information on connection sharing see Video session types on page 79 ...

Page 42: ...ed virtual media session is the owner of the Virtual Media session This setting affects the showing of the reserved setting in the Virtual Media If this feature is enabled KVM sharing is not allowed while there is a reserved Virtual Media session If you select Allow Reserved Sessions then the owner of the Virtual Media session can choose to prevent other users from establishing a KVM session to th...

Page 43: ...iting or Click OK to save any changes and exit or Click Cancel to exit without saving any changes Configuring authentication parameters The Authentication subcategory enables you to select the type of authentication method to be used IMPORTANT Before implementing LDAP functionality see HP IP Console Switch directory services integration setup tutorial on page 277 for a better understanding of how ...

Page 44: ... external accounts such as LDAP Authentication and Access Control accounts are stored in the directory When you select the Users category for the first time the Manage Console Switch function retrieves and displays user information and current access levels based on the type of authentication you have selected When Local Authentication or LDAP Authentication Only modes are enabled the Manage Conso...

Page 45: ... out feature applies only to Local authentication When LDAP authentication is used the lockout functionality of the directory service is used When LDAP Authentication and Access Control mode is enabled the user names and access rights are stored in and managed from the Active Directory A user can be assigned one of two access levels Console Switch Administrator or User The user access level enable...

Page 46: ...g box appears or Click Modify to modify a current user The Modify User dialog box appears IMPORTANT Passwords must be between five and 16 characters in length contain both alphabetic and numeric characters and contain both uppercase and lowercase alphabetic characters IMPORTANT User names must be between one and 16 characters If you intend on using the optional LDAP functionality in the future be ...

Page 47: ... Click Add c From the right column select one or more servers from which to remove the access rights of a user Click Remove d Repeat steps b and c until the right column represents the appropriate server access for this user and click OK 6 Click OK to save settings and return to the main window or click Cancel to exit Adding or modifying an LDAP Authentication Only user NOTE For LDAP Authenticatio...

Page 48: ...c From the right column select one or more servers from which to remove a user s access rights Click Remove d Repeat steps b and c until the right column represents the appropriate server access for this user and click OK 5 Click OK to save the settings and return to the main window or click Cancel to exit Setting user access rights 1 Click Access Rights to select individual servers for that user ...

Page 49: ...ication All local accounts except the Override Admin account are subject to this lock out policy An administrator can specify the number of hours 1 to 99 that accounts are locked When Enable Lock outs is not selected the Security Lock out feature is disabled and no users can be locked out If an account becomes locked it remains locked until the number of hours specified in the Duration field has e...

Page 50: ...Managing KVM console switches 50 Unlocking an account 1 Select Users ...

Page 51: ... Click Cancel to exit without saving Enabling or disabling a security lock out 1 Select Users 2 Select Enable Lock outs Enter the number of hours 1 to 99 in the lock out period in the Duration field or Clear Enable Lock outs 3 Click Apply and then click OK NOTE Disabling Security Lock out has no effect on users who are already locked out ...

Page 52: ...le Switch Administrator The ID and password should be closely held by authorities and should not be used as Admin or User accounts on a day to day basis The Override Admin account name and password settings are accessible only to the Override Admin user The Override Admin account authenticates only locally to the console switch and the directory NOTE For 1 x 1 x16 and 3 x 1 x16 IP console switches...

Page 53: ...cle indicates that the interface adapter is online A yellow circle indicates that the interface adapter is being upgraded and a red X indicates that interface adapter is offline To clear offline adapters click Clear Offline and then click OK when prompted to confirm NOTE The interface adapter Status Port ID Type and Language columns can be sorted by selecting the column name NOTE The Clear Offline...

Page 54: ...e adapter language parameters The Language setting specifies the keyboard layout language to be reported by USB interface adapters to the attached servers 1 Select Interface Adapter 2 Click Language 3 Select the keyboard layout from the dropdown menu ...

Page 55: ... The SNMP category enables you to enter system information and community strings designate the management stations that can manage the console switch and retrieve SNMP traps from the console switch If you select Enable SNMP the console switch responds to SNMP requests over UDP port 161 Port 161 is the standard UDP port used to send and retrieve SNMP messages NOTE The Manage Console Switch window u...

Page 56: ...ame field a description in the Description field and a contact person in the Contact field IMPORTANT If you are using LDAP or are planning to use LDAP in the future the name in the Name field must match the computer name that represents the console switch in the Active Directory 4 Enter the community names in the Read Write and Trap fields These specify the community strings that must be used in S...

Page 57: ...itch You can also modify or delete an existing allowable manager To add an Allowable Manager 1 Click Add The Allowable Manager dialog box appears 2 Enter the IP address of the management station 3 Click OK to add the management station To modify an Allowable Manager 1 Select and entry in the Allowable Managers list and click Modify The Allowable Manager dialog box appears 2 Modify the entry as nee...

Page 58: ...in the Existing Switches list and in the Cascade Switches dropdown list 3 Repeat step 2 for each interface adapter 4 When finished click Apply OK to save the new settings or Click Cancel to close without saving Configuring trap parameters An SNMP trap is a notification sent by the console switch to a management station to indicate that an unusual event has occurred in the switch that might demand ...

Page 59: ... selected console switch The Servers category enables you to view the list of newly detected servers and update the HP IP Console Viewer database The Connections column displays the current server connection to either an interface adapter or a cascade switch If the server is connected to an interface adapter then the interface adapter ID displays in the connection column If the server is connected...

Page 60: ...ervers 2 Highlight the server that you want to modify You can modify only one server at a time 3 Click Modify The pop up window lists the current name of the server as stored in both the console switch and the client database not necessarily the same 4 Enter the new name of the server in the New Name field 5 Click OK to change the server name or Click Cancel to keep the server name as is 6 Repeat ...

Page 61: ... can resynchronize if the local analog workstation has changed server names or the interface adapters have been added deleted or moved NOTE This procedure resynchronizes only the HP IP Console Viewer client that you use to resynchronize If you maintain multiple HP IP Console Viewer clients save your resynchronized local database and load it into the other HP IP Console Viewer clients to ensure con...

Page 62: ...ult Names checkbox 4 Click Next A progress bar appears indicating that the console switch information is being reviewed If no cascade switches attached to any interface adapters were detected then the Completing the Resync Console Switch Wizard page appears Click Finish to exit or ...

Page 63: ...etected then the Enter Cascade Switch Information window appears Select the type of cascade switch connected to the console switch from the dropdown menu If the type you are looking for is not available you can add it by clicking Add For more information see the Configuring cascade switch parameters on page 64 6 Click Next The Completing the Resync Console Wizard window appears 7 Click Finish to e...

Page 64: ...arameters The Cascade Switches category enables you to view modify and add cascade switch information into the HP IP Console Viewer database The Assign Cascade Switch list displays only interface adapter IDs currently attached to a cascade switch in the database ...

Page 65: ... the first time the Manage Console Switch window retrieves the firmware versions from the console switch itself The Hardware subcategory displays the version information for the console switch itself The Interface Adapter subcategory enables you to view and load all the interface adapters in the system ...

Page 66: ...Managing KVM console switches 66 Viewing hardware version parameters The Hardware subcategory displays the version information for the console switch itself ...

Page 67: ...e interface adapter firmware automatically 1 Select Interface Adapters 2 Enable the Enable Auto Upgrade for all Interface Adapters checkbox 3 Click Apply and then click OK Manually loading and upgrading the interface adapter firmware The interface adapter firmware can be loaded individually from the Settings tab or it can be upgraded simultaneously from the Tools tab Using the Tools tab on page 71...

Page 68: ...rmware version available to the interface adapter If the interface adapter requires upgrading click Load Firmware During the load process the progress message appears below the Firmware Available dialog box and the Load Firmware button deactivates When the load is complete a message appears confirming the upgrade 4 Repeat steps 3 through 4 for each interface adapter upgrade 5 When finished click O...

Page 69: ...lable on the console switch firmware The HP IP Console Switches with Virtual Media and the HP Serial Console Servers serial console switches have the LDAP Authentication option enabled by default The Licensed Options window lists each option available on the console switch and if the option has been enabled by a license key For more information on adding a license key see Enabling directory servic...

Page 70: ...f time users have been connected the server names or interface adapter to which they are connected and their system addresses Disconnecting user session 1 Click Status The currently active video sessions window appears 2 Select one or more users to disconnect 3 Click Disconnect Session The Confirm Disconnect dialog box appears 4 Click Yes to confirm the disconnection or Click No to exit without co...

Page 71: ...h button causes the console switch to broadcast a disconnect message to any active users then logs out the current user and immediately reboots the console switch IMPORTANT You must wait a minimum of 60 seconds after powering up to complete the boot cycle before performing any console switch operations Attempting to access servers during the boot process might cause system errors that require a ha...

Page 72: ...e starting the upgrade a warning message prompts you to confirm the upgrade because the upgrade process requires that the console switch be rebooted If you do not apply the changes they are discarded before upgrading the firmware To perform TFTP downloads TFTP must be enabled CAUTION Do not power down the console switch while it is upgrading This process can take up to 10 minutes to complete 1 Cli...

Page 73: ...5 Click Yes to reboot the console switch The Upgrade Console Switch Firmware dialog box displays a progress message eventually indicating that the upgrade and reboot are complete Click Close to exit or Click No to reboot at a later time Upgrading interface adapter firmware simultaneously 1 Click Tools 2 Click Upgrade Interface Adapter Firmware The Upgrade Interface Adapter Firmware dialog box appe...

Page 74: ...ging serial console switch user databases Managing serial console switch user databases on page 149 Saving a console switch configuration database The Save Configuration tool saves the console switch database from the console switch to a file on the system running the HP IP Console Viewer NOTE The file is encrypted during the save process and you will be prompted to create a password when you save...

Page 75: ...ated when the configuration database was saved 6 Click OK The configuration file is written to the console switch A progress message appears When the restore is complete a confirmation message appears 7 Click OK to return to the Tools tab Managing console switch user databases User database files contain all the user accounts assigned to a console switch except for the Override Admin You can save ...

Page 76: ...ore User Database tool restores a previously saved user configuration database from the system running the HP IP Console Viewer to the console switch The database file can be restored to either the console switch from which it was saved or to another console switch of the same type This eliminates the need to manually configure users on a new console switch To restore a user database file to a con...

Page 77: ...behave sporadically For more information on aligning cursors see Aligning the cursors on page 87 From the Video Session Viewer you can access all the normal functions of the server You can also perform Video Session Viewer specific tasks such as sending macro commands to the server You can also scan through a customized list of servers by enabling individual servers to display in the Thumbnail Vie...

Page 78: ...le bar 2 Menu bar Enables you to access features 3 Server desktop Enables you to interact with the server through this desktop 4 Align Local Cursor icon Enables you to reestablish proper tracking of the local cursor to the remote server cursor 5 Refresh Video icon Enables you to regenerate the digitized video image of the server desktop 6 Full Screen mode icon Enables you to expand the accessed se...

Page 79: ...e than one primary action for a selected unit because it has more than one connection type the Action Chooser dialog box appears and prompts you to select a single action from the list of possible actions to perform To select an action highlight it and click OK Closing the Video Session Viewer To close a Video Session Viewer select File Exit Video session types When using the Video Viewer with con...

Page 80: ...rs Digital share passive HP IP Console Switches with Virtual Media only You can view the video output of the target server if the primary user accepts the share request You do not have keyboard and mouse control over the computer Stealth HP IP Console Switches with Virtual Media only You can view the video output of the target server without the permission or knowledge of the primary user You do n...

Page 81: ...onsole Switches with Virtual Media only Multiple users can view and interact with a target device using digital share mode You can let users share sessions as active users with keyboard and mouse control or as passive users that can view only the video output To configure a console switch to share a Video Session Viewer session 1 Click Console Switches 2 Double click a console switch or Select a c...

Page 82: ...rs then have the ability to close the session and attempt to connect again The new connection attempt could be used to either preempt the session or connect in stealth mode NOTE If Share is not listed as a session type or if you are not prompted to connect in share mode the target server properties are not configured to accept digital share mode session Using preemption mode HP IP Console Switches...

Page 83: ... or mouse control over the target server To enable stealth Video Session Viewer sessions on a console switch 1 Click Console Switches 2 Double click a console switch or Select a console switch and click Manage Console Switch or Right click a console switch and select Manage Console Switch or Select a console switch and press Enter 3 Select Settings 4 Select Sessions 5 Select Stealth Connections in...

Page 84: ... The ability to open a stealth video session is governed by the privilege of the user If a user can preempt another user they can also open a Stealth video session Access to the server is governed by the nature of the current connection of the user to the server There are two types of Video Session Viewer users a primary user and up to 11 simultaneous secondary users a single console switch suppor...

Page 85: ...80 x 1024 If the client desktop has a higher resolution than the target desktop a blank background surrounds the full screen image A floating toolbar appears To exit full screen mode click Normal Window Mode on the floating toolbar in the upper right corner Adjusting the Video Session Viewer You can adjust both the resolution and the quality of the Video Session Viewer You can also expand your ses...

Page 86: ...left or right 4 Image Capture Vertical Position Adjusts the screen image vertical position up or down 5 Contrast Increases or decreases screen image lightness or darkness 6 Brightness Increases or decreases screen image intensity 7 Noise Threshold Adjusts the number of pixels in a block for which a change must be detected for the video data to be sent to the client 8 Priority Threshold Adjusts the...

Page 87: ...igning the cursors If the cursors no longer respond properly you can align them to reestablish proper tracking Alignment causes the local cursor to align with the cursor on the remote server CAUTION If the server does not support the ability to disconnect and reconnect the cursors then the cursor becomes disabled and the server must be rebooted To align the cursor for most operating systems click ...

Page 88: ...h thumbnail A green LED indicates that a server is currently being scanned A red X indicates that the last scan of the server was not successful The scan might have failed because of a credential or path failure for example the server path on the console switch was not available The tool tip for the LED indicates the reason for the failure The default thumbnail size is based on the number of serve...

Page 89: ...scan list Accessing Scan mode 1 From main window click Server Sites or Folders 2 Select two or more servers by clicking the servers while pressing the Shift key or the Control key The Scan Mode button appears 3 Click Scan Mode The Scan Mode window appears Setting scan preferences 1 From the thumbnail view select Options Preferences The Scan Mode Preference dialog box appears 2 Enter the time each ...

Page 90: ...right click a server thumbnail 2 Select Thumbnail and then select Enable That scan includes the server thumbnail in the scan sequence NOTE If a user is accessing a server the Enable Scan menu is disabled for that server thumbnail Launching a server video session from a thumbnail view Select a server thumbnail From the Thumbnail Viewer select Thumbnail server name View Interactive Session or Right ...

Page 91: ...acro function enables you to Send multiple keystrokes to a server including keystrokes that you cannot generate without affecting your local system such as Ctrl Alt Delete Send a macro from a predefined macro group Macro groups for Windows and SUN are already defined Change the macro group that displays by default This action causes the macros in the specified group to be available in that menu Ma...

Page 92: ...rtual Media drive on the target server Devices are presented as composite USB 2 0 devices unless you map only one Virtual Media device through a PS2 interface adapter with Virtual Media Only one Virtual Media session can be active to a server at one time Virtual Media resources Virtual Media resources cannot be shared between a local OSD console and a remote console For example a remote user using...

Page 93: ... many options for sharing reserving or preempting sessions The HP IP Console Viewer has the flexibility to accommodate the system needs For example the console switch and Virtual Media sessions can be locked together In this mode when a console switch session is disconnected the associated Virtual Media session is also disconnected If the sessions are not locked together the console switch session...

Page 94: ...edia session is locked to the console switch session on the target server When locking is enabled which is the default and the console switch session is closed the Virtual Media session is also closed When locking is disabled and the console switch session is closed the Virtual Media session remains active Mapped drives access mode You can set the access mode for mapped drives to read only When th...

Page 95: ...t hub also display in the Safely Remove Hardware utility in the system tray of the desktop If the devices or the rest hub are removed using the Safely Remove Hardware utility the Virtual Media function does not work until the USB devices are rediscovered Open a Virtual Media session from the Video Viewer toolbar by selecting Tools Virtual Media Mapping to a physical drive as a Virtual Media drive ...

Page 96: ...displayed 2 Select an iso or floppy image file and click Open The file s header is verified to be sure it is correct If it is the common file chooser window closes and the chosen image file opens in the Virtual Media Session window where it can be mapped by clicking Mapped 3 Repeat steps 1 and 2 for any additional iso or floppy images you want to add You can add any number of image files up to the...

Page 97: ...umn o Read Bytes and Write Bytes Amount of data transferred since the mapping o Duration Elapsed time since the drive was mapped 2 Click Details again to close the Details view Resetting all USB devices on the server NOTE The USB reset feature resets every USB device on the server including the mouse and keyboard It should only be used when the server is not responding 1 Click Details in the Virtu...

Page 98: ...es will be unmapped 2 Click Yes to confirm and close the window or Click No to cancel the close If you attempt to disconnect an active console switch session that has an associated locked Virtual Media session a confirmation message appears indicating that any Virtual Media mappings will be lost For more information concerning factors that can possible effect virtual media session closings see Vir...

Page 99: ...gh the Manage Console Switch window can cause a dialog box to appear indicating that a reboot is required for the change to take effect In such cases you can choose to reboot immediately or wait to reboot later For more information about the serial console switch and its operations see the documentation included with the serial console switch Viewing and configuring the Settings tab for serial con...

Page 100: ...switches The Network subcategory enables you to view the network settings of a serial console switch including the Name read only MAC Address read only Bootp IP Address Subnet Mask Gateway and DNS Servers settings You can change the serial console switch name in the SNMP category The DNS servers can be used to find domain controllers during LDAP authentication and authorization operations but HP r...

Page 101: ...ork configuration a In the IP Address field enter the address of the serial console switch in IP dot notation The value cannot be a loopback address or all zeros b In the Subnet Mask field enter the subnet mask of the serial console switch in IP address dot notation The value cannot be a loopback address or all zeros c In the Gateway field enter the gateway address of the serial console switch in ...

Page 102: ...ero value the serial console switch assumes a modem is attached to the serial CLI port At bootup and each time the serial console switch detects modem power up this string is sent to the modem to initialize it for call reception Modem power up is detected by a transition of serial console switch from low to high Connect control When this feature is enabled you can connect to other serial ports fro...

Page 103: ...containing the command to set the modem to autoanswer mode in the Modem Initialization field If no modem is connected leave this field blank 4 Select Enabled or Disabled from the dropdown list to indicate whether a user can connect to other serial ports from the CLI port in the Connect Control field 5 Enter a caret and the character that is used to access CLI mode during a server session in the CL...

Page 104: ...address or all zeros 9 Enter the subnet mask for the PPP connection in IP dot notation in the Subnet Mask field The value cannot be a loopback address or all zeros 10 Click Apply to save any changes without exiting or Click OK to save any changes and exit or Click Cancel to exit without saving any changes Configuring authentication parameters for serial console switches The Authentication subcateg...

Page 105: ...e 201 To change authentication settings 1 Select Authentication 2 Select Use Local Authentication or Select Use LDAP Authentication or Select Use RADIUS Authentication 3 If use local authentication is enabled see Configuring user accounts for serial console switches on page 113 or If use LDAP authentication is enabled see Using directory services integration on page 201 or ...

Page 106: ... fields e Enter the number of seconds to wait for a reply from the RADIUS servers in the range 1 to 60 in the Time Out fields f Enter the number of attempts that will be made to authenticate a user after a time out on the RADIUS servers in the range 1 to 10 in the Retry Count fields 4 Click Apply to save any changes without exiting or Click OK to save any changes and exit or Click Cancel to exit w...

Page 107: ...valid configuration Plaintext sessions are enabled by default Specifying a history buffer control 1 Select Sessions 2 In the History Buffer Control area select Auto or Hold for the Session Start action Select Keep or Clear for the Session End action 3 Click Apply to save any changes without exiting or Click OK to save any changes and exit or Click Cancel to exit without saving any changes ...

Page 108: ...text Sessions option 3 Click Apply to save any changes without exiting or Click OK to save any changes and exit or Click Cancel to exit without saving any changes Viewing and configuring SSH parameters for serial console switches The SSH Settings area of the Session subcategory lists the current SSH configuration and status information as follows SSH Status can be Enabled Disabled In Progress or F...

Page 109: ...y is created After a new key is created you cannot disable it If an SSH key exists and you want to create a new key select the Create new key checkbox or To use the existing key clear the Create new key checkbox 2 Click OK to close the dialog box SSH is now enabled Changing the SSH authentication mode 1 Click Modify SSH The Modify SSH dialog box appears 2 Select the SSH authentication mode from th...

Page 110: ...he SSH Fingerprints dialog box appears and displays the MD5 hash and bubble babble 2 Click OK to close the dialog box Configuring NTP parameters for serial console switches The NTP subcategory enables you to synchronize the time on your serial console switch to the time on a network server When NTP is enabled the real time clock on the serial console switch updates immediately after NTP is enabled...

Page 111: ...atus even if a valid time was obtained from the primary server To configure NTP parameters 1 Select NTP 2 Select the Enable NTP checkbox 3 Enter a primary NTP server address 4 Optional Enter a secondary NTP server address 5 Enter an update interval for sending time requests in hours or enter 0 If you select 0 the time updates when the system is rebooted or power cycles Configuring NFS parameters f...

Page 112: ...enabled all of the parameters in the NFS subcategory are disabled To configure NFS parameters 1 Select NFS 2 Select the Enable NFS checkbox 3 Select TCP or UDP for a network protocol that is used for communications between the serial console switch and the NFS server 4 Enter an NFS server IP address 5 Enter a mount point on the NFS server 6 Select Linear to have a new file A file is opened for wri...

Page 113: ...s panel A user can be assigned one of three access levels Console Switch Administrator Administrator or User The user access level enables you to assign individual server access rights to a user The table following indicates the types of console switch operations that may be performed in each access level Operation Console Switch Administrator Administrator User Preemption All Equal and lesser No ...

Page 114: ...e three to 16 character user name in the Name field Spaces are not allowed 4 Enter the user name and password user assigned and verify the password by entering it again in the Verify Password field Passwords must be five to 16 characters in length contain both alphabetic and numeric characters and contain both uppercase and lowercase alphabetic characters User names must be three to 16 characters ...

Page 115: ...lect a server in the Allow access to column Click Remove d Repeat steps b and c until the Allow access to column represents the appropriate server access for this user and then click OK 6 To configure the public SSH key of a user a Enter a one to 1 024 character key in the SSH Public Key field or Click Browse to navigate to the path or file name containing an SSH key The public key contained in th...

Page 116: ...phrase field Asterisks display instead of the actual data you enter If you leave this field blank your key is not encrypted d Repeat the pass phrase in the Retype Passphrase field e Optional Enter information in the Comments field f Click Generate The text area of the dialog box displays help information and senses movement as the mouse is dragged across it Move the mouse to assist the random numb...

Page 117: ...odify User dialog box 7 Click OK to save the settings and return to the Users category 8 Click Apply to save any changes without exiting or Click OK to save any changes and exit or Click Cancel to exit without saving any changes NOTE Each user must have a password to be able to access the Manage Console Switch window This requirement is independent of any configured SSH authentication mode that ma...

Page 118: ...og box appears 2 Select a server in the No access to and click Add 3 Select a server in the Allow access to and click Remove 4 Repeat steps 2 and 3 until the right column represents the appropriate server access for the assigned user and click OK Configuring the public SSH key for serial console switches 1 Select Users 2 To add a new user click Add The Add User dialog box appears or ...

Page 119: ... appear in the SSH Public Key field or Click Create The Create SSH Key Pair dialog box appears The Identity File field contains the private key file name and path b Click Browse to specify a path and file name for the public or private key files to change the Identity File field content By default these key files are stored under install directory userkeys c Enter a secret pass phrase for accessin...

Page 120: ...ndom number generator It passes a seed that is based on the mouse s location A progress bar indicates the completion percentage When the completion percentage reaches 100 the dialog box closes a confirmation dialog box appears and the generated key will appear in the SSH Public Key field of the Add User or Modify User dialog box 4 Click OK to save the settings 5 Click Apply to save any changes wit...

Page 121: ...ppears from the software client application All local accounts except the Override Admin account are subject to this lock out policy An administrator can specify the number of hours 1 to 99 that accounts are locked When Enable Lock outs is not selected the Security Lock out feature is disabled and no users can be locked out If an account becomes locked it remains locked until the number of hours s...

Page 122: ...Managing serial console switches 122 Unlocking an account for serial console switches 1 Select Users ...

Page 123: ...or Click Cancel to exit without saving Enabling or disabling a security lock out 1 Select Users 2 Select Enable Lock outs Enter the number of hours 1 to 99 in the lock out period in the Duration field or Clear Enable Lock outs 3 Click Apply and then click OK NOTE Disabling Security Lock out has no effect on users who are already locked out ...

Page 124: ...sole switch from a network even if the local accounts are locked or do not exist or if LDAP is not working properly The Override Admin account is a permanent account that cannot be deleted It has the same access right privileges as a Console Switch Administrator The ID and password should be closely held by authorities and should not be used as Admin or User accounts on a day to day basis The Over...

Page 125: ...parameters for serial console switches The Ports category lists all configuration parameters for the serial console switch ports You can change any port parameter except the name and type Modifying port parameters for serial console switches 1 Select Ports ...

Page 126: ...aret represents the Ctrl key and in combination with the next character can be used to access the console switch CLI mode during a server session D or Ctrl D is the default or Choose a value from the dropdown list If you choose Global Setting the value specified in CLI category are used NOTE If you are modifying the dedicated CLI port console port then the CLI Access Character field is disabled 5 ...

Page 127: ...nal as the Flow Control value 13 Click OK to save the changes locally and exit the dialog box If any field is invalid an error message appears and the focus is set to the field in error or Click Cancel to exit the dialog box without saving the changes locally 14 Click Apply to save any changes or Click OK to save any changes and exit or Click Cancel to exit the without saving any of the changes Co...

Page 128: ...st b In the text box under the list enter three to 32 characters c When complete click Check Mark next to the text box 4 To modify an alert string a Select the string in the Alert Strings list The selected string appears in the text box under the list b Modify the alert string in the text box c When complete click Check Mark next to the text box 5 To delete an alert string a Select the string in t...

Page 129: ...rt strings are copied from the Copy To dropdown menu or Select All which copies the alert strings to all ports on this console switch c Click Copy You are prompted to confirm the copy operation d Click Yes to confirm the copy or Click No to cancel the copy 7 Click Apply to save any changes without exiting or Click OK to save any changes and exit or Click Cancel to exit without saving any changes ...

Page 130: ...cs subcategory displays serial console switch port statistics and EIA signal settings To display port statistics select Ports Statistics The following display The Port and Name columns contain the number and name of the port The dedicated CLI port contains the name CLI with no port number The Tx Bytes and Rx Bytes columns indicate the number of bytes transmitted and received The Errors column indi...

Page 131: ...present a portion of the EIA signals of the port o TD Transmit Data DSR Data Set Ready o RD Receive Data DCD Data Carrier Detect o RTS Request to Send RI Ring Indicator o CTS Clear to Send SIG3 SIG3 o DTR Data Terminal Ready SIG4 SIG4 The possible values in each of these columns are o On Power on On Power on and value toggled since last poll o Off Power off Off Power off and value toggled since la...

Page 132: ...serial console switch and retrieve SNMP traps from the serial console switch If you select Enable SNMP the unit responds to SNMP requests over UDP port 161 Port 161 is the standard UDP port used to send and retrieve SNMP messages NOTE The Manage Console Switch window uses SNMP within a secure tunnel to manage console switches For this reason UDP port 161 must be open on firewalls You must expose U...

Page 133: ...e system in the Name field a description in the Description field and a contact person in the Contact field IMPORTANT If you are using LDAP or are planning to use LDAP in the future the name in the Name field must match the computer name that represents the console switch in the Active Directory 4 Enter the community names in the Read field Write field and Trap field These specify the community st...

Page 134: ...r Click Cancel to exit the window without saving Adding modifying and deleting allowable managers for serial console switches In the Allowable Managers area you can specify up to four SNMP management entities to monitor this serial console switch or leave this area blank to allow any station to monitor the serial console switch You can also modify or delete an existing allowable manager To add an ...

Page 135: ...ck Delete You are prompted to confirm the deletion 2 Click Yes to confirm the deletion Configuring trap parameters for serial console switches An SNMP trap is a notification sent by the serial console switch to a management station to indicate that an unusual event has occurred in the switch that might demand further attention You can specify what SNMP traps are sent to the management stations by ...

Page 136: ...ole switches The Servers category displays connection information for each server The Connections column identifies the port to which the server is connected If there is no server connection the Servers column indicates None Click a connection to launch the Serial Session Viewer ...

Page 137: ...ewer main window 1 From the Manage Console Switch window select Servers 2 Highlight the port in the Servers column that you want to modify You can modify only one port at a time 3 Click Modify The Modify dialog box appears with the current name of the server as stored in both the console switch and the client database not necessarily the same 4 Enter the new name of the server in the New Name fiel...

Page 138: ...d they are not added to or they can be removed from the database if they already exist in the database Excluded servers are removed only from the database if there are no other connections to the server NOTE This procedure resynchronizes only the HP IP Console Viewer client that you use to resynchronize If you maintain multiple HP IP Console Viewer clients save your resynchronized local database a...

Page 139: ...e switches 139 3 Click Next The Warning window appears indicating that the database is updated to match the current configuration in the serial console switch 4 Select or clear the Exclude Servers with Default Names checkbox ...

Page 140: ...Console Switch message box appears with a progress bar indicating that serial console switch information is being retrieved If no changes were detected in the serial console switch the Completing the Resync Console Switch Wizard page appears Click Finish to exit ...

Page 141: ...Managing serial console switches 141 or If server changes were detected the Detected Changes window appears 6 Click Next to update the database ...

Page 142: ...Managing serial console switches 142 7 Click Next The Completing the Resync Console Wizard window appears 8 Click Finish to exit ...

Page 143: ...witches 143 Viewing version parameters for serial console switches When you select the Versions category for the first time the Manage Console Switch window retrieves the firmware versions from the serial console switch itself ...

Page 144: ... view and disconnect the current active user connections and unlock user accounts by using the Status tab in the Manage Console Switch window You can view the length of time users have been connected the port on the serial console switch that the server is connected to and their system addresses ...

Page 145: ...witch window Clicking the Reboot Console Switch button causes the serial console switch to broadcast a disconnect message to any active users then logs out the current user and immediately reboots the serial console switch IMPORTANT You must wait a minimum of 60 seconds after powering up to complete the boot cycle before performing any console switch operations Attempting to access servers during ...

Page 146: ...upgrade process requires that the console switch be rebooted If you do not apply the changes they are discarded before upgrading the firmware To perform TFTP downloads TFTP must be enabled CAUTION Do not power down the console switch while it is upgrading This process can take up to 10 minutes to complete 1 Select Tools 2 Click Upgrade Console Switch Firmware The Upgrade Console Switch Firmware di...

Page 147: ...o new console switches avoiding the requirement to manually configure a new console switch NOTE User account information is stored in the user database not in the configuration file except for the Override Admin account which is stored in the configuration file and not in the user database file For more information see Managing console switch user databases on page 75 or Managing serial console sw...

Page 148: ... Restore Configuration tool restores a previously saved serial console switch configuration database from the system running HP IP Console Viewer to the serial console switch The database file can be restored to either the serial console switch from which it was saved or to another serial console switch of the same type This eliminates the need to manually configure a new serial console switch To ...

Page 149: ...rs 3 Click Browse and select a location to save the user database file The location appears in the Save to field 4 Click Save The Enter Password dialog box appears 5 Enter a password in the Password field and re enter it in the Verify Password field The configuration file is read from the serial console switch and saved in the desired location A progress window appears Blank passwords are accepted...

Page 150: ...e name and location appear in the File name field 4 Click Restore The Enter Password dialog appears 5 Enter the password you created when the user database file was saved 6 Click OK The user database file is read from the serial console switch and saved to a location A progress message appears When the restore is complete a confirmation message appears 7 Click OK to return to the Tools tab ...

Page 151: ... use either an SSH or plaintext non encrypted session depending on the settings of the serial console switch The serial console switch can be set to support SSH sessions only plaintext sessions only or both types of sessions at the same time When the serial console switch is set to support both types of sessions the Encryption Method Choosing an encryption method on page 153 dialog box appears You...

Page 152: ...wer specific tasks such as sending macro commands to the server Item Description 1 Title bar Displays the name of the server you are viewing 2 Toolbar Provides button equivalents to many menu commands 3 Server command prompt Enables you to interact with the server through this command prompt 4 Status bar Displays the current session status About options The Serial Session Viewer options enable you...

Page 153: ...on Method dialog box appears each time the Serial Session Viewer is launched 3 Click Yes to launch the Serial Session Viewer using SSH The Serial Session Viewer launches in a new window or Click No to launch the Serial Session Viewer in plaintext mode The Serial Session Viewer launches in a new window NOTE If this is the first unit access of the HP IP Console Viewer session you might be prompted f...

Page 154: ...ed for subsequent launch requests during the current HP IP Console Viewer session NOTE The Encryption Choice dialog box might reappear on your next server access depending on the credential caching settings For more information if cached credentials have been cleared see Managing cached credentials on page 35 or Continue to the next step to display the Encryption Method dialog box each time the Se...

Page 155: ...for the virtual terminal window during normal session operations normal mode Caret The Caret preference indicates whether the cursor appears as an underline or as a block To customize preferences 1 Select Options Preferences The Preferences dialog box appears 2 Select or clear the Prompt on exit checkbox to indicate if users should be prompted to verify a request to exit the session The default is...

Page 156: ... after each line of data This is useful when connecting to servers that do not insert a carriage return in incoming or outgoing data and it prevents overwriting data when a new line is received Auto line wrap This property enables or disables wrapping characters onto the next line when a new character is received and the cursor is at the end of the line When disabled new characters overwrite the l...

Page 157: ...e number of rows and columns in the Rows and Columns dropdown lists The default value is 24 rows and 80 columns 4 From the Terminal Emulation dropdown list select ASCII VT52 VT100 VT100 VT102 VT220 or VT320 The default value is VT102 5 The value in the Terminal Type field must exactly match what the telnet server expects of the unit For more information on requirements see the documentation includ...

Page 158: ... enabled an outbound carriage return to the server is always followed by a linefeed character When disabled a linefeed is not sent with a carriage return The default value is disabled 10 Select or clear Auto Wrap Line option The default value is enabled 11 Select or clear Local Echo option When enabled typed characters are echoed to the virtual terminal window When disabled they are not The defaul...

Page 159: ...gh the Serial Session Viewer 159 Login scripts session properties The Login Scripts tab contains the dialog box for enabling or disabling and editing automatic login scripts For more information see Using login scripts on page 160 ...

Page 160: ...ition of a login script can also contain the strings that indicate a successful and a failed login To use a login script you must enable Automatic Login in Session Properties dialog box the default value is enabled of the server The HP IP Console Viewer contains a default login script for supported console switches When a Serial Session Viewer telnet session is initiated to a supported unit the de...

Page 161: ...articular server will prompt for and what will be sent in response Changing a default login script You can change a default login script of a server in the Session Properties dialog box When you select the Login Scripts tab all the information from the current login script appears including the Initial Character to be transmitted the Send and Expect strings the string that indicates success and th...

Page 162: ...ct field enter the 1 to 32 alphanumeric character string that you expect from the unit Spaces are allowed The Manage Console Switch Default Values lists the serial console switch default values 6 In the first Send field enter the 0 to 32 alphanumeric character string to be sent in response to the Expect string Spaces are allowed and a blank field is valid A CR or CR LF is appended to the string ba...

Page 163: ...d must contain a value when automatic login is enabled 10 Select or clear the Press the Reset to Default button checkbox to reset the login script to its default content The default values are restored and displayed 11 Click OK to exit the dialog box and save any changes or Click Cancel to exit the dialog box without saving any changes Field Default value Initial character None First expect user n...

Page 164: ...exit the dialog box without saving any changes Enabling or disabling debug mode for login scripts You can enable or disable debug mode for login scripts in the main window options or in the properties of a server 1 To access the enable or disable debug mode option select Tools Options or To access the enable or disable debug mode property select a serial console switch or server and do one of the ...

Page 165: ...aves the contents of a session to a file You can enable automatic logging or dynamically start logging at any time Additionally you can pause resume and stop logging regardless of whether it was started automatically or dynamically While logging is occurring or when it is paused the status bar at the bottom of the Serial Session Viewer window contains a logging status label NOTE When you select or...

Page 166: ...e of the file and the location of the directory that stores the log files By default logs are created in the IPViewer logs directory under your home directory You can view a log file at any time using a standard text editor The screen buffer is written to the log file when the buffer is full or when logging is paused or stopped To ensure the log file is up to date either pause or stop the logging ...

Page 167: ... contain the name of the new directory 5 Click Set Directory to select the newly created or selected directory as the default log file directory The Set Directory dialog box closes The Default Directory field now contains the name of the newly created or selected directory 6 Click OK to save the new information or Click Cancel to exit the dialog box without saving any new information Starting dyna...

Page 168: ...ears Moving session data During a Serial Session Viewer session you can Highlight session data and copy it to the system clipboard Copy a screen of session data to the system clipboard Copy the entire history buffer contents to the system clipboard Paste the contents of the system clipboard into a session Print a screen of session data Information that is copied from a session can be pasted in oth...

Page 169: ...he appropriate settings The screen contents are then sent to the printer Using macros for serial console switches The Serial Session Viewer macro function enables you to Send multiple keystrokes to a server including keystrokes that you cannot generate without affecting your local system such as Ctrl Alt Delete Create edit and delete macros You can also define a hotkey for a macro that when entere...

Page 170: ...enu disable this checkbox In this case if the macro s definition includes a hotkey you will still be able to use the hotkey to run the macro even if the macro s name does not appear in the Macros menu In the Enter Keystrokes field enter the macro string You can include the following special control characters n Newline b Backspace r Carriage return d Delay character 500 milliseconds f Form feed 0x...

Page 171: ...les you to group macros into logical groups The groups can be altered or you can create an entirely new group You can also rename and delete groups that have been previously created Macro group settings are server specific They can be set differently for each server Macros in the selected group appear in the Macros menu If the definition of a macro has the Include in Menu checkbox disabled that ma...

Page 172: ...s Enter 6 Select one or more macros to include in this group from the Macros Available list and press Add 7 Select one or more macros in the Macros In Group list to remove and press Remove 8 Select the Active Group checkbox to have the macros in this group appear in the Macros menu Only macros that have been individually enabled to be included in the menu appear For more information see Using macr...

Page 173: ...onfigure Macro Groups The Create Macro dialog box appears 2 In the Configure Macro Groups panel select the macro group name in the Group Name column To select multiple macro group names press the Shift or Ctrl key while clicking the group names 3 Click Delete You are prompted to confirm the deletion 4 Click Yes to confirm or No to cancel the deletion The Configure Macro Groups dialog box appears 5...

Page 174: ... on page 180 Information tab on page 182 Telnet tab on page 177 The server Properties dialog box contains the following General tab on page 174 iLO tab on page 182 Information tab on page 182 Connections tab Connections properties on page 184 Telnet tab on page 177 VNC tab on page 185 RDP tab on page 188 HTTP HTTPS tab Http Https Ports tab on page 192 General tab The General tab enables you to spe...

Page 175: ...dropdown list enter the name of the new type 4 Optional Select the icon to display for the unit 5 Optional Select the Site Department and Location If the selection is not in the dropdown list enter the name of the new assignment 6 Click Apply OK to save the new settings or Click Cancel to exit KVM console switch General tab ...

Page 176: ...Organizing the system 176 Serial console switch General tab Server General tab ...

Page 177: ...those for standard Windows Linux and UNIX you can have the telnet application launched from within an operating system command window Serial console switch Telnet tab The Tools Options Telnet tab enables you to configure the global system settings for Telnet These settings can be overridden by individual console switch or server Telnet settings You can globally designate the built in Serial Sessio...

Page 178: ...e command line This might be useful for automatic replacement of variables such as IP address port number user name and password For telnet commands that do not provide their own GUI such as those for standard Windows Linux and UNIX you can have the telnet application launch from within an operating systems command window Viewing and changing telnet options 1 Select an individual unit from the sel...

Page 179: ...ial Session Viewer Telnet window opens before any login attempt is made to the unit This feature is useful when debugging a login script and is usually disabled otherwise 9 Select or clear the Launch user specified application option When enabled the telnet application specified in the field below the checkbox will be used 10 Enter the directory path and name or click Browse to locate the path and...

Page 180: ...the menu bar The General tab appears or Click Properties The General tab appears or Highlight and right click the console switch and select Properties The General tab appears 3 Click Network 4 Enter an IP address in the Address field This field can contain an IP address or a domain name Duplicate addresses are not allowed and the field cannot be left blank You can enter up to 128 characters 5 Clic...

Page 181: ...Organizing the system 181 KVM console switch Network tab Serial console switch Network tab ...

Page 182: ...he General tab appears or Click Properties The General tab appears or Highlight and right click the server then select Properties The General tab appears 3 Click iLO 4 Enter a URL in the iLO URL field The field is optional and can be left blank If the field contains a value then the iLO button appears in the Task window launching the default browser to the specified URL 5 Click Apply OK to save th...

Page 183: ...e General tab appears or Click Properties The General tab appears or Highlight and right click the unit and select Properties The General tab appears 3 Optional Click Information and then enter complete the required fields 4 Click Apply OK to save the new settings or Click Cancel to exit KVM console switch Information tab ...

Page 184: ...Organizing the system 184 Serial console switch Information tab Server Information tab Connections properties Selecting Connections enables enables you to view connections ...

Page 185: ... tab appears 3 Click Connections to view the connection path 4 Click Apply OK to save the new settings or Click Cancel to exit If a server is connected directly into a serial console switch or an expansion module then the connection sequence is as follows connection type Video or Serial console switch name with IP address in parentheses serial port number and the server name VNC tab Selecting Tool...

Page 186: ...and window Viewing and changing VNC options 1 Select an individual unit from the selected view 2 Select View Properties from the menu bar The General tab appears or Click Properties The General tab appears or Highlight and right click the unit and select Properties The General tab appears 3 Click VNC 4 For servers only in the IP Address field enter a valid IP address or a 1 to 128 character domain...

Page 187: ... disabled 7 Optional Enter the directory path and name or click Browse to locate the path and name 8 Optional Enter command line arguments in the box below the path and name 9 Optional To insert a predefined macro at the cursor location in the command line click Insert Macros and select a macro from the dropdown list The HP IP Console Viewer automatically replaces these variables when the applicat...

Page 188: ...abled the user specified VNC application will be launched from within an operating system command window 11 If finished click Apply OK to save new settings or Click Cancel to exit without saving the new settings RDP tab Selecting Tools Options RDP enables you to configure the default RDP properties ...

Page 189: ...and window Viewing and changing RDP options 1 Select an individual unit from the selected view 2 Select View Properties from the menu bar The General tab appears or Click Properties The General tab appears or Highlight and right click the unit and select Properties The General tab appears 3 Click RDP 4 For servers only in the IP Address field enter a valid IP address or a 1 to 128 character domain...

Page 190: ... disabled 7 Optional Enter the directory path and name or click Browse to locate the path and name 8 Optional Enter command line arguments in the box below the path and name 9 Optional To insert a predefined macro at the cursor location in the command line click Insert Macros and select a macro from the dropdown list The HP IP Console Viewer automatically replaces these variables when the applicat...

Page 191: ... the Launch in command window option When enabled the user specified RDP application will be launched from within an operating system command window 11 If finished click Apply OK to save new settings or Click Cancel to exit without saving the new settings ...

Page 192: ...options Creating custom field labels A custom field label enables you to change the Site Department and Location names of the column headings that display in the group and selected views This functionality enables you to group and sort console switches and servers in ways that are meaningful to you The Department field is a subset of Site If you customize these field names keep this hierarchy in m...

Page 193: ...dify Custom Field dialog box appears 4 Enter the singular and plural versions of the field label The length can be from one to 32 characters A blank value is not allowed Spaces are allowed in the middle but leading and trailing spaces are not allowed The label can consist of any combination of characters that can be entered from the keyboard 5 Click Apply OK or Click Cancel to exit ...

Page 194: ...ed in the middle but leading and trailing spaces are not allowed Duplicate names are not allowed 4 Click Apply OK The new site department or location is appears in the group view Creating new folders 1 Click Folders 2 Click the Folders directory and select File New Folder from the task bar The New Custom Folder dialog box appears 3 Enter a name up to 32 characters long Names are not case sensitive...

Page 195: ...fault checkbox and click OK to exit or Leave the default checkbox cleared and proceed to step 3 3 Select either Console Switches Servers Sites or Folders from the dropdown list 4 Click Apply OK to save the changes or Click Cancel to exit Changing the default browser You can specify which browser is displayed when a server URL in a browser window is viewed You can select a specific browser or use t...

Page 196: ...an be assigned to within the selected category This list is empty if no site department location or folder has been defined in the local database 5 Click OK to save the assignment or Click Cancel to exit To drag and drop a unit into a site department location or folder 1 From the main window click and hold the desired row in the selected view 2 Drag the item to the desired directory in the group v...

Page 197: ...ick Yes Additional message prompts might appear depending on the configuration Renaming a unit site department location or folder 1 Select the unit site department location or folder 2 Select Edit Rename The Rename dialog box appears 3 Enter a name up to 32 characters long Names are not case sensitive and can consist of any combination of characters entered from the keyboard Spaces are allowed in ...

Page 198: ...abase Save The Database Save dialog box appears 2 Enter a file name and browse to where the file is saved 3 Click Save A progress bar appears during the save When finished a message appears indicating that the save was successful Exporting local databases This function enables you to export fields from the local database to an ASCII CSV file or TSV file NOTE The Address field only applies to conso...

Page 199: ...ort was successful Loading local databases This function enables you to load a database that was previously saved While the database is being loaded no other activity is allowed All other windows including Video Session Viewer and Serial Session Viewer and the Manage Console Switch windows must be closed If other windows are open a message appears prompting you to either continue which closes all ...

Page 200: ...Organizing the system 200 3 Click Load A progress bar appears When loading is finished a message appears indicating that the load was successful ...

Page 201: ...word but access rights are still held on the console switch itself So the console switch authorizes access This solves the problem of distributed password management on the console switches and provides Directory based security Item Description 1 User sends request to console switch to access server 2 Switch sends ID and password to domain controller 3 Directory authenticates 4 If authenticated co...

Page 202: ... for user LDAP Authentication and Access Control Query types You can make three different types of requests To administer the console switch To administer users of a serial console switch To set up a remote console session with a server target device In LDAP Authentication and Access Control mode the console switch forwards these requests or query types to the domain controller Query modes The dom...

Page 203: ... full access to the console switch or the server HP recommends that the basic mode only be used for setup and testing and not in the production environment Item Description 1 User sends the request to console switch to access server 2 Console switch sends ID and password to domain controller 3 Directory authenticates the user name and password 4 If authenticated the console switch opens a console ...

Page 204: ...sole switch or the server based on the access rights assigned to the user in the Active Directory Item Description 1 User sends request to console switch to access server 2 Console switch sends ID and password to domain controller 3 Directory authenticates and authorizes based on the rights assigned to the user object 4 If authenticated and authorized console switch opens console session for user ...

Page 205: ...tch sends ID and password to domain controller 3 Directory authenticates and authorizes if user and console switch or server are in the same group 4 If authenticated and authorized console switch opens console session for user Enabling directory services integration IMPORTANT Before implementing directory services integration functionality refer to HP IP Console Switch directory services integrati...

Page 206: ... login dialog does not display unless authentication or authorization fails or you clear the login credentials d Click OK The Manage Console Switch window appears 2 Select Global Authentication the Use LDAP Authentication setting becomes accessible and the Authentication parameters are displayed but not accessible unless Use LDAP Authentication is selected 3 To enable local authentication and auth...

Page 207: ...by the LDAP Directory Service while authorization is to be controlled by information in the Users category Select Use LDAP for Authentication Only if authentication is to be controlled by the LDAP Directory Service and authorization is to be controlled by the console switch Entering the default LDAP license key The HP IP Console Switches with Virtual Media and the serial console switches have the ...

Page 208: ...f the complexity of Active Directory it is always useful to run test cases to confirm it is correctly configured to enforce the desired security policy It is important to remember that LDAP cannot access the ACL data used by Windows to make its access control decisions HP recommends following the configuration guidance provided by this user guide Configurations outside that guidance are not suppor...

Page 209: ...rectory server by selecting the appropriate Access Type radio button Selecting the LDAP radio button sends plaintext while the LDAPS radio button sends LDAP over SSL NOTE When the LDAP radio button is selected all communication is sent as non secure plaintext between a console switch and a Directory server are sent as non secure plaintext For secure encrypted communication between a console switch...

Page 210: ...NOTE A comma must separate each Search DN value The Search Password field is used to authenticate the administrator or user specified in the Search DN field The Search Base field enables you to define a starting point from which LDAP searches begin The default values are dc yourDomainName and dc com and should be modified for your network environment HP recommends that the Search Base field be set...

Page 211: ...d in the Active Directory by the administrator as the location for group objects Group Container is used when Query Mode is set to Group Attribute Each group object in turn is assigned members to associate with a particular access level for member objects people console switches and target servers Setting the value of an attribute in the group object configures the access level associated with a g...

Page 212: ...ted servers for Query Mode Console Switch or to any selected server for Query Mode Server IMPORTANT This mode enables any user that is in the Active Directory to have full access This mode is valuable for testing However for production HP recommends that you change this mode User Attribute A user name password and Access Control query for the console switch user is made to the Directory Service Th...

Page 213: ...Using directory services integration 213 The following are examples showing how the Admin and Console Switch User attribute modes are defined in Active Directory for a user named Charlie ...

Page 214: ...permissions in the Notes field o If the value KVM Appliance Admin is found the user is given administrator access to the console switch and any connected servers for Query Mode Console Switch or to any servers for Query Mode Server o If the value KVM User is found the user is given access to the server o If the value Serial User is found the user is granted access to the serial ports o If the valu...

Page 215: ...access permission to a group or user you must have one or more of the following delimiters to separate the permissions newline c r comma semicolon or tab NOTE Nesting to the maximum depth of 16 levels might not always be possible because of potential complexities among the nested groups For example if the nested groups are in different LDAP servers then delays might occur when searching for all me...

Page 216: ...Using directory services integration 216 The following are examples of groups defined in Active Directory ...

Page 217: ...ctory services integration setup tutorial on page 277 for a better understanding of how LDAP works The following is an overview of how to set up group attribute mode queries For more detailed information see HP IP Console Switch directory services integration setup tutorial on page 277 To set up group attribute mode queries 1 Name the interface adapters 2 Install and launch the HP IP Console Viewe...

Page 218: ...attribute queries are stored in the console switches The console switch name and server names specified in the SNMP and Servers categories of the Manage Console Switch must identically match the object names in the Active Directory Each console switch name and server name might be composed of any combination of uppercase and lowercase letters a through z A through Z digits 0 to 9 and hyphens Space...

Page 219: ...rating console switches to the OBWI on page 221 5 Synchronize the databases Synchronizing the local and console switch databases on page 222 Upgrading the console switch firmware for OBWI compatibility 1 In the Manage Console Switch window click the Tools tab 2 Click Upgrade Console Switch Firmware 3 Use one of the following procedures to determine the firmware file that provides the upgrade o Sel...

Page 220: ...in one batch process or you can upgrade the firmware for each interface adapter individually To upgrade interface adapter firmware in a batch process 1 In the Manage Console Switch window click the Tools tab 2 Click Upgrade Interface Adapter Firmware 3 Select the type of interface adapter to be upgraded 4 Click Upgrade When the upgrade is complete you are prompted to confirm the completion 5 Click...

Page 221: ...Compare the data in the Information field to that in the Firmware Available field to confirm that a firmware upgrade is available 5 Select the firmware 6 Click Load Firmware You are notified when the firmware upgrade is complete 7 Repeat steps 3 through 6 for each interface adapter that requires a firmware upgrade 8 When you finish upgrading interface adapter firmware click OK Migrating console sw...

Page 222: ...e button 7 Click Next 8 If you do not want to use local database information clear the checkbox 9 Click Next 10 Click Finish To revert to managing the console switch through the Manage Console Switch window downgrade the console switch firmware Downgrading console switch firmware on page 228 and then add the console switch back to the HP IP Console Viewer software Synchronizing the local and conso...

Page 223: ... more information on installing Java without internet capabilities see the Documentation CD 2 Open a browser window 3 Enter the secure IP address https of a console switch To set the IP address of the console switch you can use the OBWI the OSD or the serial port For more information see the installation guide or user guide specific to the console switch If you get a dialog box indicating that the...

Page 224: ...tificate Installing the certificate on page 226 NOTE For information on troubleshooting security certificate errors see the Certificate error troubleshooting Certificate errors on page 262 section in this guide 4 Enter your username and password By default the username is Admin case sensitive and the password field is left blank 5 Click OK ...

Page 225: ...ava is installed the following dialog appears and you must manually check the file association of the jnlp file with Java TM Web Start Launcher 8 Click OK When you are logged in you can launch multiple sessions of the OBWI without logging in again However if the connection is inactive for a time that exceeds the inactivity timeout set by the administrator or if you log out you must log in again ...

Page 226: ...e of the following options to install the certificate o Select Fields and then complete the required fields NOTE The name entered in the Common Name field must match the fully qualified domain name you designated for the device To locate the device name click the Configure tab and then select the SNMP category from the left column ...

Page 227: ...t File browse to the location of the certificate file and then click Open IMPORTANT When installing the certificate using the file method the certificate file must be in an encrypted format with no human readable characters within the key definitions ...

Page 228: ...iewer software database a In the Explorer click the Console Switches tab b Right click the console switch name and then select Delete c Click Yes 3 Add the console switch back to the HP IP Console Viewer software Managing console switches The OBWI has four tabs Connections Status Configure and Tools Connections When you open the OBWI the Connections tab is shown This tab lists the servers that are...

Page 229: ...connect users view information about user connections and take control of a server preemption Configure The Configure tab lists various console switch features categories When you select a category the category parameters for that console switch appear and can be modified For example ...

Page 230: ...e OBWI 230 The Console Switch category enables you to view the console switch type and serial number The Users category User accounts on page 234 enables you to add modify or delete user accounts and assign access levels to each user ...

Page 231: ...hange the network settings IP address Subnet Mask Gateway and LAN speed specify up to three IP addresses for DNS servers and enable or disable BOOTP and IPv4 or IPv6 The use of either IPv4 or IPv6 is available through the network however you cannot simultaneously use these functions ...

Page 232: ...ethod to use for video keyboard and mouse sessions You can specify several levels for each session and the console switch negotiates for the highest compatible method o The Sharing parameter include the following options The Connections option determine which sharing options are enabled You must select Enable Share Mode before you can select other options The Input Control Timeout option determine...

Page 233: ...OBWI 233 Tools The Tools tab enables you to upgrade firmware on interface adapters and console switches save and restore configuration files reboot console switches manage and restore user databases and install web server certificates ...

Page 234: ...r access level can only access target devices to which they have been granted access by an administrator whereas a Console Switch Administrator can also perform the following actions Preempt remote clients Configure network and global settings Reboot the console switch Upgrade firmware Administer User accounts Monitor server status Adding or modifying a user 1 Click the Configure tab 2 In the left...

Page 235: ...uppercase characters lowercase characters and a number 5 In the Verify Password box enter the password again 6 Click Save Deleting a user 1 Click the Configure tab 2 In the left column select the Users category 3 Select the checkbox next to the username 4 Click Delete 5 Click Yes Locking and unlocking user accounts If a user enters an invalid password five consecutive times and the Security Lock O...

Page 236: ...k Disconnect Session 4 Click OK SNMP SNMP is a protocol for communicating management information between network management applications and console switches Other SNMP managers can communicate with your console switches by accessing MIB II and the public portion of the enterprise MIB When you select the SNMP category the OBWI retrieves the SNMP parameters from the console switch In the SNMP categ...

Page 237: ...of up to four management workstations that have the rights to manage this console switch To allow any station to manage the console switch leave the boxes empty 8 In the Trap Destinations boxes enter the addresses of up to four management workstations to which this console switch sends traps 9 Click Save 10 To apply the changes reboot the console switch Enabling SNMP traps An SNMP trap is a notifi...

Page 238: ... the ARI port appears while if the connection is to a tiered switch the switch channel appears To launch a video viewer session click a server name Modifying a server name You can use the OBWI to modify a server name from a remote workstation rather than from the OSD of the console switches To modify a server name 1 Click the Configure tab 2 Select the Servers category 3 Click the name of the serv...

Page 239: ...pters in the system and provides information such as the port ID EID interface adapters type connection device and connection status The Clear Offline Interface Adapters button enables a Console Switch Administrator to remove an offline interface adapter from the list User access rights are updated at the same time to remove the servers associated with the cleared interface adapter However you can...

Page 240: ...Using the on board Web interface OBWI 240 Versions The Versions category displays the version numbers of the console switch firmware FGPA and ASIC ...

Page 241: ... Adapters subcategory displays version information You can upgrade the interface adapter firmware by clicking the interface adapter EID If the interface adapter is connected to a tiered switch clicking the EID also enables you to reset the interface adapter ...

Page 242: ...ace adapters that are connected to the console switch automatically update their firmware to the version available on the console switch when they are connected To view firmware version information for an interface adapter 1 Click the Configure tab 2 Click the Versions category 3 Click the IA Versions subcategory ...

Page 243: ...of the interface adapter 5 Click Reset IA 6 Click OK If the console switch is connected directly to a server not to a cascade switch the mouse and keyboard might not respond after the reset If this occurs reboot the target server Upgrading firmware using the OBWI The OBWI enables you to upgrade the firmware on both interface adapters and console switches You can perform only one firmware upgrade o...

Page 244: ...ole Switch Firmware 3 Use one of the following options to specify the firmware file to be used for the upgrade o Select TFTP Server enter the IP address of the server on which the firmware file is stored and then enter the firmware filename and directory location ...

Page 245: ... the location where the firmware file is stored and then click Open o Select FTP Server enter the IP address of the FTP server where the firmware file is located enter the filename and directory location of the file and then enter the user name and password 4 Click Upgrade ...

Page 246: ...rmware 3 Select the checkbox for each type of interface adapter to upgrade If a checkbox is clear either no interface adapters of that type are in the system or all such interface adapters are already running the latest firmware 4 Click Upgrade 5 Click OK 6 Click Close Upgrading interface adapters individually 1 Click the Configure tab 2 In the left column under Versions select the IA Versions sub...

Page 247: ...switch sends a disconnect message to any active user logs out the user and then reboots Managing console switch configuration files Configuration files contain console switch settings SNMP settings LDAP settings and NTP settings User account information is stored in the user database Managing user databases on page 253 If you must replace a console switch you can use a configuration file to quickl...

Page 248: ...rd Web interface OBWI 248 Saving console switch configuration files 1 Click the Tools tab 2 Click Save Console Switch Configuration 3 Choose one of the following options to save the Console Switch Configuration file to ...

Page 249: ...Optional Enter a password that you want to use when restoring the configuration file to a console switch and then enter the password again in the Verify Password field Click Browse and then navigate to the location where you want the configuration file to be saved ...

Page 250: ... want to use when restoring the configuration file to a console switch and then enter the password again in the Verify Password field Then enter the filename IP address and your user name and password 4 Click Save When the file save process in complete a confirmation dialog box appears 5 Click OK ...

Page 251: ...board Web interface OBWI 251 Restoring a configuration file to a console switch 1 Click the Tools tab 2 Click Restore Console Switch Configuration 3 Use one of the following options to restore the configuration file ...

Page 252: ...WI 252 o Select File System Click Browse to navigate to the location where the configuration file is saved and then enter the file password o Select FTP Server and then enter the file name file password IP address user name and password ...

Page 253: ...e switches by saving a user database file that contains all user accounts for one particular console switch and then writing the file to other console switches The file is encrypted and password protected when you create it Saving a user database on page 253 and the same password is then required to write the file to a console switch Restoring a user database on page 256 Saving a user database 1 C...

Page 254: ...m Optional Enter a password that you want to use when restoring the user database file to a console switch and then enter the password again in the Verify Password field Click Browse and then navigate to the location where you want the user data file to be saved ...

Page 255: ...t you want to use when restoring the user database file to a console switch and then enter the password again in the Verify Password field Then enter the filename IP address user name and password 4 Click Save When the file save process in complete a confirmation dialog box appears 5 Click OK ...

Page 256: ...ng the on board Web interface OBWI 256 Restoring a user database 1 Click the Tools tab 2 Click Restore Console Switch User Database 3 Use one of the following options to restore the configuration file from ...

Page 257: ...WI 257 o Select File System Click Browse to navigate to the location where the configuration file is saved and then enter the file password o Select FTP Server and then enter the file name file password IP address user name and password ...

Page 258: ...chronizes the KVM and virtual media sessions so that when a user disconnects a KVM connection the virtual media connection to that server is also disconnected A local user is also disconnected if the user attempts to switch to a different server Allow Reserved Sessions Ensures that a virtual media connection can be accessed only with your username and that no other user can create a KVM connection...

Page 259: ...Using the on board Web interface OBWI 259 5 Click Save ...

Page 260: ...ch the Video Session Viewer and a black screen appears There is no communication from the server Be sure that the server is powered on Be sure that the power source is valid Be sure that the cables are connected properly The local and remote cursors do not align See Aligning the cursors on page 87 See Synchronizing your mouse pointers on page 13 Select Tools Automatic Video Adjust in the Video Ses...

Page 261: ... DHCP server must be enable to respond to Bootp The Video Session Viewer is distorted when a serial interface adapter is connected Select Tools Automatic Video Adjust in the Video Session Viewer You get an Access cannot be granted due to Authentication Server errors error when correct user name and password is used while using LDAP for authentication and authorization Verify that the console switc...

Page 262: ...ault ports are 389 LDAP or 636 secure LDAP Ping the LDAP server from the console switch verify connectivity The HP IP Console Viewer does not work properly over a VPN connection or from a remote site Be sure that your default gateway and subnet mask is properly configured on the console switch Open or forward ports 2068 8192 3211 161 162 389 and 636 through routers and firewalls between the HP IP ...

Page 263: ...bleshooting 263 Microsoft Internet Explorer 6 To resolve security certificate errors in Microsoft Internet Explorer 6 you must complete the following steps to import a certificate 1 Select View Certificate ...

Page 264: ...Troubleshooting 264 2 Select Install Certificate ...

Page 265: ...Troubleshooting 265 3 Complete the steps in the Certificate Import Wizard 4 Select Place all certificates in the following store ...

Page 266: ...ed Root Certification Authorities folder 6 Select Yes when prompted with the Security Warning Microsoft Internet Explorer 7 To resolve security certificate errors in Microsoft Internet Explorer 7 you must complete the following steps to import a certificate ...

Page 267: ...Troubleshooting 267 1 Select the error field in the browser to view the certificate error 2 Select View Certificates ...

Page 268: ...Troubleshooting 268 3 Select Install Certificate ...

Page 269: ...Troubleshooting 269 4 Complete the steps in the Certificate Import Wizard 5 Select Place all certificates in the following store ...

Page 270: ...Authorities folder 7 Select Yes when prompted with the Security Warning Mozilla Firefox To resolve security certificate errors in Mozilla Firefox you must complete the following steps to install a certificate for the IP Console Switch 1 Select Accept this certificate permanently ...

Page 271: ...atch dialog click OK 3 Ensure that the name entered in the Common Name matches the fully qualified domain name you designated for the device To locate the device name click the Configure tab and then select the SNMP category from the left column 4 Select Install ...

Page 272: ... of the Manage Console Switch window but have not yet applied those changes before starting the upgrade a warning message prompts you to confirm the upgrade because the upgrade process requires that the console switch be rebooted If you do not apply the changes they are discarded before upgrading the firmware 5 Click Upgrade The Upgrade button deactivates and a progress message appears When the tr...

Page 273: ...tion refer to your Linux operating system s HELP or documentation NOTE By default TFTP executes in secure mode and only provides readable files under the tftpboot directory Other directories can be specified through the etc xinetd d tftp files In secure mode TFTP expects the file to be relative to the tftpboot directory To enable TFTP for Linux operating systems GNOME 1 From the main menu select P...

Page 274: ...nnect the other end of the above serial cable to the serial port on the console switch 3 Configure the terminal emulation software for the server such as Minicom IMPORTANT Minicom is a utility that is loaded during the installation of Linux However if you do not select the option to install the Linux Utilities during the operating system installation you cannot use Minicom without downloading the ...

Page 275: ...tion is established the Main menu for the console switch appears Follow the on screen options to configure the console switch The Main Menu with six options appears 4 Plug the supplied power cord into the rear of the console switch and then into a valid power source if not already connected 5 Power on the console switch if not already powered on The activity indicator on the rear panel powers on T...

Page 276: ... h3_0_0_english fl 9 Enter Y at the prompt to download the upgrade file from the given IP address The console switch begins upgrading CAUTION Do not cycle power to the console switch during this process The update can take as long as 10 minutes A loss of power might render the console switch inoperable and require that the unit be returned to the factory for repair When the upgrading process is co...

Page 277: ...oup and authenticate only mode in which the directory is used only to validate the use and access controls managed in the HP IP Console Switch A mode to use for testing communications with the directory server is explained as well NOTE The reader is expected to understand the concepts of LDAP directories and how to use Microsoft Active Directory tools This document is not intended to explain LDAP ...

Page 278: ...cess controls This procedure gives an example of how to use Active Directory for authentication and group level access controls 1 Name the interface adapters to match exactly the names of the computers with which they are connected This must be done using the OSD from the local port PS2 and video connectors The domain controllers interface adapters should have a different name than the domain cont...

Page 279: ...n that has network connectivity to the HP IP Console Switch 3 Discover or manually add the console switch For information on how to manually add or discover console switches see Adding and discovering console switches on page 22 4 Access the console switch and log in as admin with no password or with the admin level user name and password of your console switch For information on how to access the...

Page 280: ...uter accounts to have the exact same name as long as each account is in a different domain from the others When using the Group query mode it is important to have precisely one account for each console switch and precisely one account for each attached server If multiple accounts in the Active Directory forest are allowed to have the same name unexpected failures can occur when using the Group que...

Page 281: ... Global Authentication 8 Enable LDAP on the HP IP Console Switch a Click Use LDAP Authentication b On the Server Parameters tab enter the IP address of the Primary Server domain controller c On the Search Parameters tab enter the Search DN cn consoleldap cn users dc widget dc com ...

Page 282: ...ord for the consoleldap user account e Enter the search base dc widget dc com NOTE The search base should always be at the root of the domain f On the Query Parameters tab click Basic for Query Mode Console Switch and Basic for Query Mode Server g Apply the settings NOTE This query mode is used for testing and troubleshooting but it should not be used in a production environment After the basic LD...

Page 283: ... and Computers Close Add Remove Snap in and click OK From Active Directory User and Computers highlight Add Users and Computers Click Action Connect to Domain The domain list appears o 9 On the domain controller add an OU group container named CONSOLESWITCHES to Active Directory in the root of the domain for the console switch administrative groups a Right click widget com b Select New Organizatio...

Page 284: ...P IP Console Switch directory services integration setup tutorial 284 10 Create a user named consoleldap and assign a password a Select User New User b Follow the wizard c Set the password to not expire ...

Page 285: ...s integration setup tutorial 285 d Click Finish 11 Create two groups for console switch administrators and users a Right click CONSOLESWITCHES OU b Choose New Group c Create groups names ConsoleSwitchAdministration and ServerAdministration ...

Page 286: ...User in the group s notes field Set up the default access control for the Console Administration group by right clicking Properties for the group and entering KVM Appliance Admin in the group s notes field o 12 Add the users and interface adapters to the appropriate groups that associate them a Right click each of the two new groups b Click Properties c Click the Members tab d Click Add e Click Ob...

Page 287: ...hentication b On the Query Parameters tab click Basic for Query Mode Console Switch and Basic for Query Mode Server IMPORTANT This query mode should be used to test your LDAP configuration only After the basic LDAP communications configuration is successfully tested change the query mode because Basic mode gives full administration authorization to all console switches and all attached servers ...

Page 288: ...vices integration setup tutorial 288 14 Test the LDAP communications from the HP IP Console Viewer a Click Tools Clear Login Credentials IMPORTANT Perform this step each time you want to test authentication of a user to a target system ...

Page 289: ...ter to one of the groups and log in as user from the same group 15 After the basic LDAP communication test succeeds log in to the HP IP Console Switch from the HP IP Console Viewer a Click Global Authentication b On the Query Parameters tab click Group Attribute for Query Mode Console Switch and Group Attribute for Query Mode Server ...

Page 290: ... procedure in Authentication and group level access controls on page 278 2 Enable LDAP if necessary 3 Select Use LDAP Authentication Only 4 Create user accounts locally in the console switch IMPORTANT The console switch user names must match exactly with their user logon name in Active Directory 5 Set the access controls for the user locally on the console switch 6 Test the LDAP communication from...

Page 291: ...ication of a user to a target system 8 After the basic LDAP communication test succeeds log in to the console switch from the HP IP Console Viewer a Select Global Authentication b Select Use LDAP for Authentication Only The fields on the Query Parameters tab are deactivated when this box is selected 9 Apply the settings 10 Test again ...

Page 292: ...entials How does the value of each of those attributes get set in Active Directory How is the UID mask in the Manage Console Switch window used to implement a customer s choice of credentials These questions are addressed in the following subsections Active Directory attributes that can be used as credentials Several attributes that are candidates for use as credentials are defined when a new user...

Page 293: ...The full name is stored in two Active Directory attributes displayName and cn cn stands for Common Name User Logon Name User Logon Name sAMAccount Name This name is also used in pre Windows 2000 logon name However the pre Windows 2000 logon name might not be stored as an attribute depending on the mode used to create the Active Directory domain Native mode compared to Mixed mode Displayed but not ...

Page 294: ...P client behavior overview 294 Field label in new object user dialog Field label in user properties Active Directory attribute type Comments E mail mail employeeID Accessed by LDAP tool such as ADSI Editor ...

Page 295: ...LDAP client behavior overview 295 As an example consider the following instance of the New Object User dialog ...

Page 296: ...LDAP client behavior overview 296 ...

Page 297: ...or overview 297 Additional attributes available in user properties In addition to the Properties that are set during object creation there is at least one property that could potentially be useful as a credential E mail ...

Page 298: ... set during object creation and in the Properties dialog at least two other attributes could be useful as a credential employeeID and employeeNumber These attributes can be viewed and set using a standard Microsoft tool ADSI Editor The following is an example of using the ADSI Editor tool to set the value of employeeID ...

Page 299: ...following example In the preceding example the UID mask value indicates that a single attribute sAMAccountName is being used in the credentials The mask is set to 1 which refers to the first token entered by the user into the user name field of the login dialog of the client application The contents of the user name field is parsed into tokens using the following characters as token delimiters and...

Page 300: ...LDAP client behavior overview 300 In the following example the user name field contents would be parsed into two tokens the first token is the string anystringvalue and the second token is widget com ...

Page 301: ...client behavior overview 301 These two tokens are referenced in the UID mask by using the replacement parameters 1 and 2 respectively Consider the use of UPN as an example of using two replacement parameters ...

Page 302: ...g of the client application In this example the console switch firmware parses the user name field into two pieces the replacement parameter 1 gets the value anystringvalue and the replacement parameter 2 gets the value widget com The period character is not a token delimited and therefore widget com is a single token ...

Page 303: ...LDAP client behavior overview 303 The corresponding UID mask is shown in the following example ...

Page 304: ...he form first name last name The UID mask does not need to change because the period between the first name and the last name is not a token delimiter So the UID mask remains as in the preceding figure while the credentials entered in the login dialog of the client application become the following ...

Page 305: ...LDAP client behavior overview 305 Of course for this example the user logon name would have to be changed in the Active Directory object representing the user ...

Page 306: ...LDAP client behavior overview 306 To use the e mail address as part of the credentials the UID mask would be changed to the following ...

Page 307: ...ement a policy that says authentication is based on UPN password and employeeID In other words the user logging in must know the UPN password and employeeID The UID mask must be changed to indicate there are two attributes used as the user name The two attributes are separated by a in the UID mask as shown in the following figure ...

Page 308: ...LDAP client behavior overview 308 The string entered by the user in the login dialog can be any of the following three token delimiters from which to choose ...

Page 309: ...ty with the Microsoft headless server EMS serial port interface The Serial Console Viewer VT100 terminal emulation works identically to VT100 with the exception of support for the function keys listed in VT100 Function Key Support Function Sequence Function Sequence Home Esc h F4 Esc 4 End Esc k F5 Esc 5 Insert Esc F6 Esc 6 Delete Esc F7 Esc 7 Page Up Esc F8 Esc 8 Page Down Esc F9 Esc 9 F1 Esc 1 F...

Page 310: ...ing decoding support where Yes indicates supported and No indicates not supported Key Hex code Function mnemonic Encode decode Return 0D CR Yes Yes Linefeed 0A LF Yes Yes Backspace 08 BS Yes Yes Tab 09 HT Yes Yes Spacebar 20 SP Yes Yes Esc 1B ESC Yes No Ctrl Spacebar 00 NUL Yes No Ctrl A 01 SOH Yes No Ctrl B 02 STX Yes No Ctrl C 03 ETX Yes No Ctrl D 04 EOT Yes No Ctrl E 05 ENQ Yes No Ctrl F 06 ACK...

Page 311: ...c O A Down Esc B Esc O B Right Esc C Esc O C Left Esc D Esc O D VT100 PF1 through PF4 key definitions VT100 PF1 through PF4 key definitions lists the VT100 PF1 through PF4 key definitions Encoding of each listed key is supported decoding is not applicable Key Code sequence F1 Esc O P F2 Esc O Q F3 Esc O R F4 Esc O S VT100 ANSI mode control sequences VT100 ANSI mode control sequences lists the ANSI...

Page 312: ... sol x Request terminal parameters No No Esc 7 Save cursor No Yes Esc Pn Pn r Set top and bottom margins No No Esc 5 Single width line No No Esc 2 Ps y Invoke confidence test No No Esc Ps n Device status report No Yes Esc Ps J Erase in display No Yes Esc Ps K Erase in line No Yes Esc H Horizontal tabulation set No No Esc Pn Pn f Horizontal and vertical position No Yes Esc D Index No Yes Esc E Next...

Page 313: ... On No Reverse and Bold supported Blink and Underscore appear as italic Esc K or Esc 0 K Erase from cursor to end of line No Yes Esc 1 K Erase from beginning of line to cursor No No Esc 2 K Erase entire line containing cursor No No Esc J or Esc 0 J Erase from cursor to end of screen No Yes Esc 1 J Erase from beginning of screen to cursor No No Esc 2 J Erase entire screen No No Esc Ps Ps Ps q Progr...

Page 314: ...c 7 l Modes to reset wraparound Off No No Esc 8 h Modes to set auto repeat On No No Esc 8 l Modes to reset auto repeat Off No No Esc 9 h Modes to set interface On No No Esc 9 l Modes to reset interface Off No No Esc P1 Pc R Report cursor position response is No No Esc 5 n Status report invoked by No No Esc 0 n Status report response is terminal OK No No Esc 3 n Status report response is terminal n...

Page 315: ...c O S F6 F6 Esc 1 7 F7 F7 Esc 1 8 F8 F8 Esc 1 9 F9 F9 Esc 2 0 F10 F10 Esc 2 1 F11 F11 Esc 2 3 F12 F12 Esc 2 4 F13 Ctrl F5 Esc 2 5 F14 Ctrl F6 Esc 2 6 F15 Ctrl F7 Esc 2 8 F16 Ctrl F8 Esc 2 9 F17 Ctrl F9 Esc 3 1 F18 Ctrl F10 Esc 3 2 F19 Ctrl F11 Esc 3 3 F20 Ctrl F12 Esc 3 4 VT220 decoding VT220 decoding lists the VT220 terminal emulation decoding VT220 keyboard function VT220 keyboard byte sequence ...

Page 316: ...e 1 line Esc M Up arrow Esc O A Down arrow Esc O B Right arrow Esc O C Left arrow Esc O D Fill screen with Es Esc 8 Up arrow amount specified by Pn Esc Pn A Down arrow amount specified by Pn Esc Pn B Right arrow amount specified by Pn Esc Pn C Left arrow amount specified by Pn Esc Pn D Erase parts of current line Esc Pn K Erase parts of current screen Esc Pn J Direct cursor addressing Esc Pn H Dir...

Page 317: ...w Left arrow Esc D Shift F1 PF1 Esc P Shift F2 PF2 Esc Q Shift F3 PF3 Esc R Shift F4 PF4 Esc S VT52 decoding VT52 decoding lists the decoding for VT52 terminal emulation VT52 keyboard function VT52 keyboard byte sequence Cursor up Esc A Cursor down Esc B Cursor right Esc C Cursor left Esc D Cursor home Esc H Reverse linefeed Esc I Erase to end of screen Esc J Erase to end of line Esc K VT320 termi...

Page 318: ...3 2 F19 Ctrl F11 Esc 3 3 F20 Ctrl F12 Esc 3 4 Insert Insert Esc 1 Home Home Esc 2 Delete Delete 0x7F End End Esc 5 Up arrow Up arrow Esc A Down arrow Down arrow Esc B Left arrow Left arrow Esc D Right arrow Right arrow Esc C VT320 decoding VT320 decoding lists the decoding for VT320 terminal emulation VT320 keyboard function VT320 keyboard byte sequence Index Esc D New line Esc E Reverse index Esc...

Page 319: ...ow Esc O C Left arrow Esc O D Fill screen with Es Esc 8 Up arrow amount specified by Pn Esc Pn A Down arrow amount specified by Pn Esc Pn B Right arrow amount specified by Pn Esc Pn C Left arrow amount specified by Pn Esc Pn D Erase parts of current line Esc Pn K Erase parts of current screen Esc Pn J Direct cursor addressing Esc Pn H Direct cursor addressing Esc Pn f Programmable LEDs Esc Pn q Sc...

Page 320: ...le lists the keyboard and mouse shortcuts that can be used in main window Operation Description Mouse single click Clears the existing selection and selects the node the mouse pointer is over Mouse double click Toggles the expand collapse state of an expandable node a node with children Does nothing on a leaf node a node with not children Up arrow Clears the existing selection and selects the next...

Page 321: ...ion Ctrl Home Moves the focus and the selection to the first row in the table Ctrl End Moves the focus and the selection to the last row in the table Shift Up arrow Extends the selection up one row Shift Down arrow Extends the selection down one row Shift Page up Extends the selection up one page Shift Page down Extends the selection down one page Shift Mouse click Clears any existing selection an...

Page 322: ...Directory ADAM Active Directory Application Mode ADSI Active Directory Service Interface ADUC Active Directory users and computers AMD Advanced Micro Devices ASCII American Standard Code for Information Interchange ASIC Application Specific Integrated Circuit BDC Backup Domain Controller CLI Command Line Interface CN common name ...

Page 323: ...P Dynamic Host Configuration Protocol DIT Directory Information Tree DN distinguished name DNS domain name system EID electronic identification number GC global catalog GDI Graphics Device Interface GUI graphical user interface HP SIM HP Systems Insight Manager IDE integrated device electronics iLO Integrated Lights Out ...

Page 324: ...weight Directory Access Protocol MCS manage console switch panels MIB management information base MMC Microsoft Management Console NAT Network Address Translation NFS network file system NTP network time protocol OBWI on board Web interface OSD on screen display OU organizational unit PDC Primary Domain Controller ...

Page 325: ...ILOE Remote Insight Lights Out Edition RPM Red Hat Package Manager SIM Systems Insight Manager SLES SUSE Linux Enterprise Server SMP secure management protocol SN surname SNMP Simple Network Management Protocol SSH Secure Shell SSL Secure Sockets Layer TCP Transmission Control Protocol TFTP Trivial File Transfer Protocol ...

Page 326: ...s and abbreviations 326 TSV tab separated value UDP User Datagram Protocol UID unit identification UPN user principal name USB universal serial bus VNC virtual network computing VPN virtual private networking ...

Page 327: ...class Each attribute has a type and one or more values The attribute type defines the syntax of its values The schema specifies the type of each attribute and whether it is multi valued See also object and LDAP Display Name child domain A domain that is not a domain tree root See also descendant domains container In the context of active directory the word container is used in two general ways Fir...

Page 328: ...se Distinguished Names are embedded in the DNS name space itself a tree structure Inside each active directory server the objects form a micro structure of hierarchically related containers and leaf objects Distinguished Name Each object in the active directory has a unique Distinguished Name The DN identifies the domain that holds the objects as well as the complete path through the container hie...

Page 329: ...cords in a Domain Controller are held in its active directory database DNS zone transfers are handled as active directory replication operations and DNS and active directory are said to be tightly integrated domain tree See domain domain tree root The first domain created in a domain tree It might not be the forest root forest A group of one or more active directory domain trees that mutually trus...

Page 330: ... holds them and without requiring a contiguous extended name space in the enterprise The GC is built automatically by the active directory replication system Attributes can be easily added to the GC content by active directory administrators interim functional level A Windows Server 2003 configuration of active directory that allows it to coexist in a domain that includes one or more Windows NT 4 ...

Page 331: ...name represents Active directory forms a name space in which the name of an object in the directory can be resolved into the object itself name space A name or group of names that are defined according to some naming convention Any bounded area in which a given name can be resolved Active directory is primarily thought of as a name space as is any directory service Native Domain Mode For Windows 2...

Page 332: ...archResult Therefore some of the domains listed in a response containing Continuation References might not hold any of the target objects Relative Distinguished Name This is a term used extensively in the X 500 standards to denote the name used to uniquely reference an object relative to its parent container and the domain that holds the object In Microsoft active directory the term RDN is rarely ...

Page 333: ...AP enabled Directory Service product The default hierarchies allowed by each vendor are controlled by that vendor s default schema subdomains See descendant domains tree depth Refers to the number of generational levels in a specific subtree of a specific domain For a given forest the forest root domain is said to be at Tree Depth 1 The immediate child domains of the forest root if any are said to...

Page 334: ...onfiguring parameters general SNMP 56 132 133 configuring parameters global 37 99 configuring parameters LDAP 208 configuring parameters network 38 100 configuring parameters NFS 111 configuring parameters NTP 110 configuring parameters port 125 configuring parameters session 106 configuring parameters trap 135 configuring parameters user 44 configuring parameters Virtual Media 42 configuring the ...

Page 335: ...I iLO tab 182 Information tab 182 installation 13 installing the HP IP Console Viewer 15 interface adapter firmware upgrades enabling automatic 67 interface adapter firmware loading and upgrading 67 interface adapter firmware upgrading 220 239 interface adapter resetting 68 IP Console Switch setting up 13 IP Console Viewer components overview 19 IP Console Viewer installing 15 IP Console Viewer la...

Page 336: ... configuring authentication 43 parameters configuring global 37 parameters configuring network 38 parameters configuring Virtual Media 42 parameters viewing and configuring 37 password changing 235 plaintext sessions 108 port parameters configuring 125 Port parameters configuring Alert strings 127 Port parameters modifying 125 Port parameters viewing Statistics 130 product overview 8 Q query modes...

Page 337: ...r parameters 53 Settings tab viewing serial console switch parameters 99 Settings tab viewing server parameters 59 Settings tab viewing version parameters 65 Simple Network Management Protocol SNMP 236 SNMP Simple Network Management Protocol 236 SNMP parameters configuring 132 236 SNMP traps enabling 237 specifying history buffer control 107 specifying session time out settings 107 SSH changing au...

Page 338: ...rights 48 118 User parameters unlocking a user account 49 50 121 235 user session disconnecting 70 236 V version parameters viewing 65 143 Versions 240 Video Session Viewer 77 151 Video Session Viewer types digital share mode 81 Video Session Viewer types exclusive mode 80 Video Session Viewer types preemption mode 82 Video Session Viewer types stealth mode 83 Video Session Viewer accessing 79 153...

Page 339: ...l Media unmapping virtual drives 96 Virtual Media window 93 VNC options 186 VNC tab 185 VT terminal emulation 309 VT100 ANSI mode control sequences 311 VT100 ANSI set and reset mode cursor keys 311 VT100 PF1 through PF4 key definitions 311 VT100 terminal emulation 310 VT102 terminal emulation 309 VT220 decoding 315 VT220 terminal emulation 314 VT320 decoding 318 VT320 terminal emulation 317 VT52 d...

Search results

Summary of Contents for 1x1x16 - IP Console Switch KVM

Reviews:

Related manuals for 1x1x16 - IP Console Switch KVM

Brands by name

Popular brands

HP 1x1x16 - IP Console Switch KVM, User Manual

Search results

Summary of Contents for 1x1x16 - IP Console Switch KVM

Reviews:

Related manuals for 1x1x16 - IP Console Switch KVM

Brands by name

Popular brands