Opengear IP-KVM 1001 User Manual Download Page 97

Page: 97 / 109

KVM over IP User Manual

Page 97 of 109

Upload the new firmware file onto the IP-KVM unit

In order to do that you need to select the file on your local system using the

Browse

button. Click

Upload

. Once the firmware file has been uploaded, it is checked whether it is

a valid firmware file and whether there were any transmission errors. In case of any error

the Upload Firmware function will be aborted.

If everything went well, you see the

Update Firmware

panel

The panel shows you the version number of the currently running firmware and the

version number of the uploaded firmware. Pressing

Update

will store the new version and

substitute the old one completely

You will be advised when the firmware has updated successfully

The device will be rebooted and redirected to the login web page

Summary of Contents for IP-KVM 1001

Page 1: ...USER MANUAL IP KVM 1001 KVM over IP Switch User Manual Rev 1 0 April 30th 2009 ...

Page 2: ... Proper back up systems and necessary safety devices should be utilized to protect against injury death or property damage due to system failure Such protection is the responsibility of the user This device is not approved for use as a life support or medical system Any changes or modifications made to this device without the explicit approval or consent of Opengear will void Opengear of any liabi...

Page 3: ... 3 3 Initial IP configuration using the serial console 24 3 4 Keyboard mouse and video configuration 25 3 4 1 IP KVM keyboard settings 25 3 4 2 Remote Mouse Settings 25 3 4 3 Automatic mouse speed and mouse synchronization 26 3 4 4 Host system mouse settings 26 3 4 5 Single and Double Mouse Mode 27 3 4 6 Recommended Mouse Settings 27 3 4 7 Video Modes 27 4 Usage 28 4 1 Prerequisites 28 4 1 1 Brows...

Page 4: ...5 5 Serial Port 82 5 5 6 Date Time 84 5 5 7 Event Log 86 5 5 8 Authentication 88 5 5 9 USB 91 5 5 10 Config File 91 5 5 11 Authentication 92 5 6 Maintenance 94 5 6 1 Device Information 94 5 6 2 Event log 95 5 6 3 Update Firmware 96 5 6 4 Unit Reset 98 5 6 5 Reset to Factory Defaults 99 6 Addendum 102 A Key Codes 102 B Video Modes 103 C User Role Permissions 103 D Bandwidth Consumption 104 E Pin ou...

Page 5: ...th 43 Figure 4 15 Status line 43 Figure 4 16 Status line transfer rate 43 Figure 5 1 KVM Console 45 Figure 5 2 Telnet Console 47 Figure 5 3 Options of Drive Redirection 50 Figure 5 4 USB mass storage option 51 Figure 5 5 Virtual Media CD ROM Image 51 Figure 5 6 Explorer Context Menu 53 Figure 5 7 Share Configuration Dialog 54 Figure 5 8 Virtual Media Floppy Disk 56 Figure 5 9 RawWrite for Windows ...

Page 6: ...mote access and control software runs on its embedded processor only but not on mission critical servers so that there is no interference with server operation or impact on network performance 1 2 Main features Manage servers around the world Remote KVM keyboard video and mouse access over IP network or over a modem link Local console port for direct analogous access to KVM switch Combo PS2 USB Lo...

Page 7: ... LAN ports LED Indicators 2x LEDs Power red Ready green Push Button 1x Reset push button Video Resolution up to 2048 x 1536 60Hz Local Console up to 1600 x 1200 60Hz Remote Console Protocols TCP IP ARP ICMP HTTP HTTPS SSL Telnet DHCP PPP SMTP NTP DDNS Security AES 256 bit encryption for all transmitted data RSA 2048 bit encryption for authentication SSHv2 Authentication SSL Certificate RADIUS LDAP...

Page 8: ... network settings refer Chapter 3 1 3 3 Step 4 Configuring the KVM settings for the Target Server and IP KVM refer Chapter 3 4 2 2 Package checklist The IP KVM package consists of the followings items The IP KVM unit CD ROM software utilities and user manual Quick Start Guide DC power supply adapter 3 in 1 Integrated Adapting Local Cable USB A mini cable Serial cable RJ45 to DB9F Rack mounting kit...

Page 9: ... Power Jack 3 in 1 Integrated KVM Cable Host Serial Port 3 in 1 Integrated Adapting Cable for Local Console Dual USB2 0 Port for Local Console or general purpose USB devices Dual LAN Port for Local Console USB Host Reset LEDs ...

Page 10: ...ond when system is ready Ethernet Ethernet Link Act 10 100Mbps Orange 10BaseT Ethernet connection established Green 100BaseT Ethernet connection established Blinking data in activity ON no data in activity and link connected A recessed RESET button is located on the rear panel Press the button to reboot the IP KVM unit 2 5 System requirements Hardware Item Description Local Host side One Computer ...

Page 11: ...Note The Remote Console browser needs to JRE Java Runtime Environment v5 0 version 1 5 or above You can get the Java Software from the website http www java com en download It s recommended to install newer Java version e g version 6 update 11 or above for better performance 2 6 Hardware installation The IP KVM can be placed on the desktop or rack mounted on a 19 1U rack Screw the mounting bracket...

Page 12: ...the attached 3 in 1 Integrated Host Cable to the Host computer Connect the 3 in 1 Integrated Adapting Cable to the Local DB 15 connector of IP KVM Connect the monitor to the Adapting Cable Connect the keyboard to the Adapting Cable Connect the mouse to the Adapting Cable Connect one end of Ethernet cable to LAN1 or LAN 2 jack of IP KVM and the other end to the Remote Console computer ...

Page 13: ...KVM over IP User Manual Page 13 of 109 Figure 2 5 Cable Connections stand alone PS 2 ...

Page 14: ...and alone host computer with USB keyboard mouse Connect the VGA of the attached 3 in 1 Integrated Host Cable to the Host computer Connect the USB connectors of USB A mini cable to the host computer and the IP KVM module while for remote mass storage control Connect the 3 in 1 Integrated Adapting Cable to the Local DB 15 connector of IP KVM Connect the monitor to the Adapting Cable Connect the USB ...

Page 15: ...KVM over IP User Manual Page 15 of 109 Figure 2 6 Cable Connections stand alone USB ...

Page 16: ... KVM has a built in Ethernet hub so it is simple to cascade multiple IP KVM devices to control multiple host computers Figure 2 7 Cable Connections stand alone PS 2 Install cable connections between each stand alone IP KVM and Host computer as described in 2 6 1 and 2 6 2 ...

Page 17: ...vices and the other end to the Remote Console computer 2 8 Cabling the connection to a multi port KVM switch As well as connecting to a standalone computer the IP KVM host side can alternately be connected to a multi port KVM switch The installation procedures are as for stand alone computer except that the host signals are connected to the PS 2 Local Console of the KVM Switch Figure 2 8 below dep...

Page 18: ...KVM over IP User Manual Page 18 of 109 Figure 2 8 Cable Connections with a Multi port KVM Switch ...

Page 19: ... environment Run special diagnostic programs 2 10 When the server is dead Obviously fixing hardware defects is not possible through a remote management device Nevertheless IP KVM gives the administrator valuable information about the type of a hardware failure that has occurred so they can initiate appropriate recovery action Type of failure Detected by Hard disk failure Console screen CMOS set up...

Page 20: ...tool can locate all the IP KVM units on your IP network and set their network configuration IP address subnet mask DHCP etc 3 1 1 Reset the Super User password Make sure to change the super user password immediately after you have installed and accessed your IP KVM for the first time Not changing this password for the super user is a severe security risk and might result in unauthorized access to ...

Page 21: ...and display them by their MAC addresses For Authentication enter the Super User login name super and the new Super User password Set IP auto configuration as None and enter the new IP address and Subnet mask and optionally enter the IP address of the Gateway for the network segment Click Setup Device If super login was authenticated it ll show Successfully configured device Otherwise it ll show Pe...

Page 22: ...n a network with DHCP enabled when you plug the Ethernet cable to IP KVM it will be assigned an IP address via DHCP You can use psetup to find out this IP Click Refresh Devices button to detect connected IP KVM devices and select MAC address of the IP KVM in Device MAC address box You can find the MAC address labeled on the bottom side of the IP KVM unit MAC address is detected as connection from ...

Page 23: ...g the default system user name super and the default password pass When connecting to the IPK KVM unit the IPK KVM system web server Telnet server or SSH server will prompt user to enter the user name and password in order to access to the system If this is the first time logging in log in with the factory default username and password you will be prompted to change the default password Make sure ...

Page 24: ...line interface host side which can be accessed using a serial terminal or terminal emulator This connector is compliant with the RS 232 serial line standard and is configured as shown below Parameter Value Bits second 115200 Data bits 8 Parity No Stop bits 1 Flow Control None When configuring the IP with a serial terminal such as Hyper Terminal Reset the IP KVM and immediately press the ESC key Yo...

Page 25: ...ouse and video configuration Between the IP KVM and the Host there are two interfaces available for transmitting keyboard and mouse data USB and PS 2 The correct operation of the remote mouse depends on several settings which will be discussed in the following subsections 3 4 1 IP KVM keyboard settings The IP KVM settings for the host s keyboard type have to be corrected in order to make the remot...

Page 26: ...ure that there are no window at the top left corner of the remote desktop that are able to change the mouse cursor shape from the normal state The Sync mouse button on top of the Remote Console can behave differently depending on the current state of mouse synchronization Usually pressing this button leads to a fast sync except in situations where the KVM port or the video mode changed recently No...

Page 27: ...pointer will be hidden and the remote one can be controlled directly To leave this mode it is necessary to define a mouse hotkey in the Remote Console Settings Panel Press this key to free the captured local mouse pointer 3 4 6 Recommended Mouse Settings For the different operating systems we recommend MS Windows In general we recommend the usage of a mouse via USB Choose USB without Mouse Sync Fo...

Page 28: ...et A standard Telnet client can also be used to access an arbitrary device connected to the IP KVM s serial port via a terminal mode However this is not the primary interface and is addressed in subtopics 4 1 1 Browser In order to use the Remote Console window of your managed host system the browser has to come with a Java Runtime Environment version 1 5 or above If the browser has no Java support...

Page 29: ...default Full access administrator user define Has partial rights to change configuration of critical parts user user define Has permission to access basic function of open Remote Console These users are created and removed by the super user refer Chapter 5 3 User Management and the permission items for each user level are detailed in Appendix C To log in Launch your web browser and direct it to th...

Page 30: ...ory default username and password you will be prompted to change the default password Make sure to change the super user password immediately after you have installed and accessed your IP KVM for the first time Not changing this password for the super user is a severe security risk and might result in unauthorized access to the IP KVM and to the host system Having logged into the IP KVM successful...

Page 31: ...f the links will bring you back to the login screen Within the right frame the task specific information is displayed that depends on the section you have chosen before Click on Click to open to start the remote console redirection Click on Refresh to refresh the picture 4 2 2 Log out from the IP KVM This link logs out the current user and presents a new login screen Please note that an automatic ...

Page 32: ...e a private internal network your NAT Network Address Translation settings have to be configured accordingly In case the IP KVM is connected to your local network environment and your connection to the Internet is available using a proxy server only without NAT being configured the Remote Console is very unlikely to be able to establish the desired connection This is because today s web proxies ar...

Page 33: ...ptimal size That means it will adapt its size to the size of the remote screen initially and after the screen resolution of the remote screen has been changed However you can always resize the Remote Console window in your local window system as usual Note The Remote Console window on your local window system is just one window among others In order to make keyboard and mouse work your Remote Cons...

Page 34: ...he Single Mouse Mode where only the remote mouse pointer is visible and the Double Mouse Mode where remote and local mouse pointers are visible and need to be synchronized Single mouse mode is only available if using SUN JVM 1 5 or higher Options To open the Options menu click on the button Options Figure 4 3 Remote Console Options Menu ...

Page 35: ... Only Toggles the Monitor only filter on or off If the filter is switched on no remote console interaction is possible and monitoring is possible Exclusive Access If a user has the appropriate permission he or she can force the Remote Consoles of all other users to close No one can open the Remote Console at the same time again until this user disables the exclusive access or logs off A change in ...

Page 36: ... size of Remote Console window Figure 4 5 Remote Console Options Menu Scaling Mouse Handling The submenu for mouse handling offers two options for synchronizing the local and the remote mouse cursors i Fast Sync The fast synchronization is used to correct a temporary but fixed skew ii Intelligent Sync Use this option if the fast sync does not work or the mouse settings have been changed on the hos...

Page 37: ...tings i Video Settings through the HTML Frontend To enable local video port select this option This option decides if the local video output of IP KVM is active and passing through the incoming signal from the host system The option Noise Filter defines how IP KVM reacts to small changes in the video input signal Turning on the noise filter can help reduce video flickering that is often caused by ...

Page 38: ...e to achieve a better quality Phase Defines the phase for video sampling used to control the display quality together with the setting for sampling clock Horizontal Position Use the left and right buttons to move the picture in horizontal direction while this option is selected Vertical Position Use the left and right buttons to move the picture in vertical direction while this option is selected ...

Page 39: ...or some reason for example noise filter for VGA is setting too large Soft Keyboard Opens up the Menu for the Soft Keyboard Figure 4 8 Soft Keyboard Show Pops up the Soft Keyboard The Soft Keyboard is necessary in case your host system runs a completely different language and country mapping than your administration machine Mapping Used for choosing the specific language and country mapping of the ...

Page 40: ...of hotkeys defined before Choose one entry the command will be sent to the host system A confirmation dialog can be added that will be displayed before sending the selected command to the remote host Select OK to execute the command on the remote host Figure 4 10 Remote Console Confirmation Dialog Encoding These options are used to adjust the encoding level in terms of compression and color depth ...

Page 41: ...e colors or the diversity of pixels The lower the compression quality the more data have to be sent and the longer it may take to transfer the whole video picture If level 0 is chosen the video compression is disabled completely The option Video Optimized has its advantages if transferring high quality motion pictures In this case the video compression is disabled completely and all video data is ...

Page 42: ... 13 Lossy Compression Color Depth Set the desired color depth You may select between 8 or 16 bit for Video Optimized compression level 0 or between 1 and 8 bit for compression level 1 to 9 The higher the color depth the more video information has to be captured and to be transferred ...

Page 43: ... 4 3 3 Status Line of Remote Console The status line shows both console and the connection state The size of the remote screen is displayed HFigure 4 15 belowwas taken from a Remote Console with a resolution of 800x600 pixels The value in brackets describes the connection to the Remote Console Norm indicates a standard connection without encryption whereas SSL means a secure connection Figure 4 15...

Page 44: ...rtual Media 5 1 Remote Control The Remote Console is the redirected screen keyboard and mouse of the remote host system that the IP KVM controls The Remote Console window is a Java Applet that tries to establish its own TCP connection to the IP KVM Starting the Remote Console opens a new window displays screen movement of host system with its size automatically adjusted to optimum Keyboard and mou...

Page 45: ...t or SSH interface supports two operation modes the command line mode and the terminal mode The command line mode is used to control or display some parameters In terminal mode the pass through access to serial port is activated if the serial settings were configured accordingly All inputs are redirected to the device on serial port and its answers are displayed on the Telnet interface In order to...

Page 46: ... via a standard Telnet client In case the Telnet program is using a VT 100 VT 102 or VT 220 terminal or an according emulation it is even possible to perform a console redirection as long as the IP KVM host machine is using a text mode screen resolution To log into the Telnet Console either click Remote Control Telnet Console or ...

Page 47: ...nterface is entirely controlled with the according functions of the web interface Once you have successfully logged into the IP KVM a command line will be presented and you can enter according management commands Figure 5 2 Telnet Console The following list shows the according command mode command syntax and their usage Help Displays the list of possible commands cls Clears the screen quit Exits t...

Page 48: ...lnet console except that SSH is data encrypted and secured and can be accessed using SSH supported terminal emulation programs such as PuTTY 5 2 Virtual Media The IP KVM provides a powerful capability called Virtual Media or Virtual Disk Using the USB port the IP KVM can present either a local floppy disk image or a redirected remote CD DVD ROM image to the target computer This can allow system re...

Page 49: ...ent computer since it redirects based on a drive letter Before using Virtual Media connect the USB cable from IP KVM to host computer After connecting the USB cable you can see a new removable risk on the host computer e g the host computer screen below shows a new CD Drive F 5 2 1 Drive Redirection The Drive Redirection is another possibility to use a virtual disc drive on the remote computer Wit...

Page 50: ...ta and the file system on the redirected device On the other hand if the local operating system writes data to the redirected device the drive cache of the operating system of the remote host might contain older data This may confuse the remote host s operating system We recommend you use the Drive Redirection with care especially the write support To use Drive Redirection Click Virtual Media and ...

Page 51: ...GRUB This case was reported for some Windows versions 2000 XP other OS might not be fully excluded This behavior depends on the BIOS version used in that machine 5 2 3 CD DVD Image To use an image on Windows share via SAMBA click Virtual Media and select Virtual Drive select CD DVD Image from the submenu Figure 5 5 Virtual Media CD ROM Image Share host The server name or its IP address the PC that...

Page 52: ...ection function 3 The above information has to be given from the point of view of IP KVM with correct IP address and device name Administrative permission is required as regular user may not have the right to access Please login as a system administrator or as root on UNIX systems 4 The specified image file is supposed to be accessible from the IP KVM The information above has to be given from the...

Page 53: ...that shares out the image file Copy the CD DVD ISO image file to this sharing folder Make sure password has to be setup with the authorized user during Sharing Permission settings For Windows Open the Explorer navigate to the directory or share and press the right mouse button to open the context menu Select Sharing to open the configuration dialog Figure 5 6 Explorer Context Menu ...

Page 54: ...may also add a short description for this folder input field Comment If necessary adjust the permissions Permissions button Click OK to set the options for this share For UNIX and UNIX like OS UNIX Solaris Linux If you like to access the share via SAMBA SAMBA has to be set up properly You may either edit the SAMBA configuration file etc samba smb conf or use the Samba Web Administration Tool SWAT ...

Page 55: ... at the man entry of smb conf is very helpful Fill in the sharing information on Image on Windows Share click on the Set button If the Image file set successfully shown below then open the remote console and you can see the virtual CD as pictured below ...

Page 56: ...wWrite software or any other image creator software to create floppy image Locate where the image file you create is saved Open the browser to log into the IP KVM Click Virtual Media and select Floppy Disk Click the Browse button to choose the image file Click on the button Upload to initiate the transfer of the chosen image file into the IP KVM module s on board memory After you uploading the ima...

Page 57: ... only This drive would be bootable under DOS mode if the motherboard BIOS on the host computer supporting USB BOOTABLE function The maximum image size is limited to 1 44MB To use a larger image mount this image via Windows Share or SAMBA Notes 1 If using other image creator software the output image extension file name has to be img e g floppy_vir img 2 The uploaded image file will be kept in the ...

Page 58: ...he menu select the tab Read Enter or choose the name of the file in which you would like to save the floppy content Click on the button Copy to initiate the image creation process For UNIX and UNIX like OS To create an image file make use of dd This is one of the original UNIX utilities and is included in every UNIX like OS UNIX Sun Solaris and Linux To create a floppy image file copy the contents...

Page 59: ...isc section Select the CD ROM or DVD drive you would like to create an image from Specify the filename of the image and save the CD ROM content in that file Figure 5 10 Nero selection dialog For UNIX and UNIX like OS To create an image file make use of dd This is one of the original UNIX utilities and is included in every UNIX like OS UNIX Sun Solaris and Linux To create a CD ROM image file copy t...

Page 60: ...ake a drive redirection are as follows Click Remote Control and select KVM Console Click on the Floppy icon You will see the Driver Redirection window as below Figure 5 11 Built in Java Drive Redirection You can either redirect a local drive only available under Windows or redirect an ISO CD DVD image ...

Page 61: ...e computer is allowed to write on your local drive As you can imagine this is very dangerous If both the remote and the local system try to write data on the same device this will certainly destroy the file system on the drive Please use this only when you exactly know what you are doing Device Authentication The factory default Username is super and the default Password is pass click Connect to r...

Page 62: ...KVM over IP User Manual Page 62 of 109 the established Drive Redirection connection will now be displayed Open My Computer and you will see the virtual drive appears on the remote host PC window ...

Page 63: ...e note above is respected If the write support is enabled a drive which is not locked might be damaged by the Drive Redirection Clicking on the Disconnect button will disconnect the Drive Redirection connection Note Virtual Drive creation is by Device manner not by Partition Which means it looks for I O in BIOS and sends the corresponding signal to host computer This way you are sending the entire...

Page 64: ...KVM s web pages A newly assigned user has permissions inherited from an assigned group if any or individual permissions if no group is assigned 5 3 1 Change Password A currently logged in user can change their password Click User Management and select Change Password Figure 5 12 Setting Password Enter the current password In Old Password Enter the new password in New Password Re type the new passw...

Page 65: ...n name which must be 4 to 32 characters long Confirm password Confirmation of the password above Email address This information may be optionally provided Mobile number This information may be optionally provided Role Each user can be a member of a group named a role There are three kinds of roles Super has all possible rights to configure the device Administrator has partial rights to change conf...

Page 66: ...ocessing instructions and memory space To guarantee an acceptable response time we recommend not to exceed the number of 15 users connected to the IP KVM at the same time The memory space that is available onto the IP KVM mainly depends on the configuration and the usage of the IP KVM log file entries etc That s why we recommend not to store more than 150 user profiles 5 4 KVM Settings 5 4 1 User ...

Page 67: ...KVM over IP User Manual Page 67 of 109 Select the particlular user from selection box and make the stting changes ...

Page 68: ...rk connections in order to allow a faster transmission of data Therefore compression level 0 no compression uses only 16 Bit color depth At lower bandwidths only 4 Bit 16 colors and 2 Bit 4 gray scales are recommended for typical desktop interfaces Photo like pictures have best results with 4 Bit 16 gray scales 1 Bit color depth black white should only be used for extremely slow network connection...

Page 69: ...emote Console or is used to leave the single mouse mode Remote Console Button Keys Button Keys allow simulating keystrokes on the remote system that cannot be generated locally The reason for this might be a missing key or the fact that the local operating system of the Remote Console is unconditionally catching this keystroke already Typical examples are Control Alt Delete on Windows or Control B...

Page 70: ...le Macintosh Keyboard timeout Recommanded as enable for keyboard timeout when host is UNIX or UNIX like OS USB Mouse Type Enables USB mouse type Choose between Windows 2000 MacOSX for MS Windows 2000 or Windows XP Mac OSX or Other Operating Systems for MS Windows NT Unix or Unix like OS or OS X In Windows 2000 MacOSX mode the remote mouse is always synchronized with the local mouse Mouse Speed Aut...

Page 71: ... to small changes in the video input signal Turning on the noise filter can help reduce video flickering that is often caused by distortions as well as lowering unnecessary bandwidth consumption A large filter setting needs less network traffic and leads to a faster video display but small changes in some display regions may not be recognized immediately A small filter displays all changes instant...

Page 72: ...ice Settings 5 5 1 Network The Network Settings panel allows changing network related parameters Once applied the new network settings will immediately come into effect Select Device Settings Network and under Network Basic Settings you can set new IP address or enable DHCP BOOTP ...

Page 73: ...k of the local network Gateway IP address In case the IP KVM should be accessible from networks other than the local one this IP address must be set to the local network router s IP address Primary DNS Server IP Address IP address of the primary Domain Name Server in dot notation This option may be left empty however the IP KVM will not be able to perform name resolution Secondary DNS Server IP Ad...

Page 74: ...able Setup Protocol Enable this option to exclude the IP KVM from the setup protocol Setup protocol is a proprietary layer 2 MAC based protocol to allow some configuration software to detect IP KVM devices in the network even without IP address and then config network related settings to IP KVM Under LAN Interface Settings the Autodetect will set the ethernet speed to the fastest possible value su...

Page 75: ...ote administrator does not know the IP address assigned by the provider however the IP KVM connects to the dynamic DNS server in regular intervals and registers its IP address there So the administrator can contact this server as well and pick up the same IP address relating to his IP KVM unit Figure 5 17 Dynamic DNS By default the IP KVM supports Dynamic DNS service offered at Dynamic DNS Network...

Page 76: ... Hostname This is the hostname of the IP KVM that is provided by the Dynamic DNS Server use the whole name including the domain e g testserver dyndns org not just the actual hostname Username You have registered this username during your manual registration with the Dynamic DNS Server Spaces are not allowed in the Nickname Password You have used this password during your manual registration with t...

Page 77: ...oth the screen data to the administrator machine and keyboard and mouse data back to the host If set to Off no encryption will be used If set to Try the applet tries to make an encrypted connection In case connection establishment fails for any reason an unencrypted connection will be used If set to Force the applet tries to make an encrypted connection with certificate An error will be reported i...

Page 78: ... with the chain rule depicted below The process ordering is important as the packet will enter the chain Rule 1 first and if it meets the rule then it will take Action 1 directly otherwise go to chain rule 2 Figure 5 20 Chain Rules of IP Filtering Check the Enable Group based System Access Control to edit the rules Add a new IP filtering rule by setting the properties at adding line by Append or I...

Page 79: ... Figure 5 21 IP Filter Settings 5 5 4 Certificate The IP KVM uses the Secure Socket Layer SSL protocol for any encrypted network traffic between itself and a connected client During the connection establishment the IP KVM has to expose its ...

Page 80: ...enerate a new cryptographic key and the associated Certificate Signing Request CSR that needs to be certified by a certification authority CA A certification authority verifies that you are the person who you claim you are and signs and issues a SSL certificate to you To create and install a SSL certificate for the IP KVM Create a SSL Certificate Signing Request using the panel shown in Figure 5 2...

Page 81: ...sword to authorize later changes on the certificate e g revocation of the certificate The minimal length of this password is 4 characters Confirm Challenge Password Confirmation of the Challenge Password Email The email address of a contact person that is responsible for the IP KVM and its security Key length This is the length of the generated key in bits 1024 Bits are supposed to be sufficient f...

Page 82: ...wn certificate that is used for identifying the IP KVM to its clients If you destroy the CSR on the IP KVM there is no way to get it back In case you deleted it by mistake you have to repeat the three steps as described above 5 5 5 Serial Port The IP KVM Serial Settings allows you to specify what device is connected to the serial port and how to use it ...

Page 83: ...acts as an Internet Service Provider ISP to which you can dial in The connection is established using the Point to Point Protocol PPP Before you connect to the IP KVM make sure to configure your console computer accordingly For instance on Windows based operating systems you can configure a dial up network connection which defaults to the right settings like PPP The Modem Settings panel allows you...

Page 84: ...work in most cases Modem client IP address This IP address will be assigned to your console computer during the PPP handshake Since it is a point to point IP connection virtually every IP address is possible but you must make sure it is not interfering with the IP settings of the IP KVM and your console computer The default value will work in most cases Pass through access to serial port via Telne...

Page 85: ...To avoid this you can use a NTP timeserver which sets up the internal clock automatically to the current UTC time Because NTP server time is always UTC there is a setting that allows you to set up a static offset to get your local time Note There is currently no way to adjust the daylight saving time automatically So you have to set up the UTC offset twice a year properly to the local rules of you...

Page 86: ... Event Log The common way to log events is to use the internal log list of the IP KVM These logs can be viewed by selecting Event Log on the Maintenance page menu To configure the event logs Figure 5 27 Event Log Select Device Settings Event Log ...

Page 87: ...en you change the NFS settings and press the button Apply The NFS share will be mounted immediately That means the NFS share and the NFS server must be filled with valid sources or you will get an error message SMTP Logging enabled With this option the IP KVM is able to send Emails to an address given by the Email address text field in the Event Log Settings These mails contain the same descriptio...

Page 88: ... file is not limited Every log event will be appended to the end of the file so it grows continuously and you may have to delete it or move it away from time to time 5 5 8 Authentication To log in to the IP KVM a user must be authenticated by means of a password By default this authentication takes place locally with the user name and associated password being stored in the IP KVM s internal datab...

Page 89: ...eed to configure a DNS server in the network settings E g 192 168 1 250 Base DN of User LDAP Server Specify the distinguished name DN where the directory tree starts in the user LDAP server E g dc test dc domain dc com Type of external LDAP Server With this option you set the type of the external LDAP server This is necessary since some server types require special handling Additionally the defaul...

Page 90: ... implementations such as freeRADIUS openRADIUS or RADIUS on UNIX systems The RADIUS protocol itself is well specified and tested Note The IP KVM currently does not support challenge response An Access Challenge response is seen and evaluated as an Access Reject To configure the IP KVM to use the RADIUS protocol Check RADIUS and enter details for Server Enter the name or IP address of the RADIUS se...

Page 91: ...and password and the IP KVM will contact the RADIUS server for authentication The RADIUS server reads your input data Authentication and the IP KVM looks for your profile Authorization The profile defines or limits your actions and may differ depending on your specific situation If there is no such profile your access via RADIUS will be refused The RADIUS implementation also has a timeout whereby ...

Page 92: ... other options allow you to specify an LDAP or a RADIUS Server to use for the login authentication These methods are very useful when you want to map users into specific groups which have certain privileges It is usually far easier and simpler to refer to already existing groups rather than having to re enter everything into the IP KVM Note Whatever you configure you can always login over the netw...

Page 93: ...ary since some server types require special handling Additionally the default values for the LDAP scheme are set appropriately You can choose between a Generic LDAP Server a Novell Directory Service and a Microsoft Active Directory If you have neither a Novell Directory Service nor a Microsoft Active Directory then choose a Generic LDAP Server and edit the LDAP scheme used see below Name of login ...

Page 94: ...ins a table with information about the IP KVM s hardware and firmware This information is useful if technical support is required Figure 5 28 Device Information The data file for support allows you to download the IP KVM data file with specific support information This is an XML file with certain customized support information like the serial number etc You may send us this information together wi...

Page 95: ...ty From left to right it displays IP address from which host the user comes from ts activity status is displayed RC means that the Remote Console is open If the Remote Console is opened in exclusive mode the term exclusive mode is added For mation about this option see the Remote Console Control Bar the last column contains either the term active for an active user or 30 min idle user who is inact...

Page 96: ...has to be accessible on the system that you use for connecting to the IP KVM This process is not reversible and will take few minutes During this upgrading process you must not disconnect the power or the Ethernet cable as this may cause upgrade failure and destroy the image in Flash memory The IP KVM will automatically initiate a self reboot upon completion of upgrade process to make newly upgrad...

Page 97: ...ether there were any transmission errors In case of any error the Upload Firmware function will be aborted If everything went well you see the Update Firmware panel The panel shows you the version number of the currently running firmware and the version number of the uploaded firmware Pressing Update will store the new version and substitute the old one completely You will be advised when the firm...

Page 98: ... the device This involves resetting keyboard mouse USB video engine or the IP KVM device itself In general the IP KVM requires a reset when implementing a firmware update In the event of an abnormal operation a number of subsystems may be reset without resetting the entire IP KVM Note Only the super user is allowed to reset the IP KVM Click Maintenance Unit Reset the following window displays ...

Page 99: ...The unit will reboot after this command All current settings will be lost The following procedures will revert to factory default settings Connect a RS232 null modem cable from your local console PC to the IP KVM Serial port Configure your terminal emulation program such as HyperTerminal or PuTTY to the following settings Baud rate 115200 Data stop bits 8 1 Parity none Flow control none Enter the ...

Page 100: ... Manual Page 100 of 109 Key in defaults command and then Enter The unit will automatically set to factory default settings and reboot the system The following window displays if reverting to factory default is complete ...

Page 101: ...KVM over IP User Manual Page 101 of 109 ...

Page 102: ...es in application programs are on an identical position no matter what language mapping you are using Some of the keys have aliases also means they can be named by 2 key codes separated by comma in the table Key and aliases 0 9 A Z TILDE MINUS EQUALS LESS SLASH BACK SPACE TAB ENTER CAPS LOCK BACK SLASH LSHIFT SHIFT RCTRL RSHIFT LCTRL CTRL LALT ALT SPACE ALTGR ESCAPE ESC F1 F2 F3 F4 F5 F6 F7 F8 F9 ...

Page 103: ... 75 85 1600 x 1200 60 2048 x 1536 local console 85 C User Role Permissions The table below lists the user role permissions granted for three user role groups Super Administrator and User Function User Administrator Super Remote Control KVM x x x Remote Control Remote Power x x Remote Control Telnet Console x x x Virtual Media x x x User Management Change Password x x x User Management Users x KVM ...

Page 104: ... Comment Video Optimized Video Optimized 8 bit 3 0 3 3 MB s uncompressed synchronized video data most bandwidth needed Video Optimized high color Video Optimized 16 bit 4 3 5 0 MB s uncompressed synchronized video data most bandwidth needed LAN high color 0 no compression 16 bit 1 0 1 3 MB s uncompressed video data LAN 0 no compression 8 bit 500 700 kb s uncompressed video data DSL 2 8 bit 110 140...

Page 105: ...ts port numbers Port Number Protocol TCP UDP 21 FTP File Transfer Protocol TCP 22 SSH Secure Shell TCP 23 Telnet TCP 25 SMTP Simple Mail Transfer Protocol TCP 37 Time TCP UCP 39 RLP Resource Location Protocol UDP 49 TACACS TACACS UDP 53 DNS UDP 67 BOOTP server UDP 68 BOOTP client UDP 69 TFTP UDP 70 Gopher TCP 79 Finger TCP 80 HTTP TCP 110 POP3 TCP 119 NNTP Network News Transfer Protocol TCP 161 16...

Page 106: ...RADIUS Remote Authentication Dial In User Service is an authentication and accounting protocol Enables remote access servers to communicate with a central server to authenticate dial in users and their access permissions A company stores user profiles in a central database that all remote servers can share SNMP Simple Network Management Protocol is a protocol that system administrators use to moni...

Page 107: ...eplacement products will be provided on an exchange basis and will be either new or reconditioned Opengear will retain as its property all replaced parts and products Notwithstanding the foregoing this hardware warranty does not include service to replace or repair damage to the product resulting from accident disaster abuse misuse electrical stress negligence any non Opengear modification of the ...

Page 108: ...om this warranty may be brought by either party more than two 2 years after the cause of action has occurred Purchaser expressly agrees that Opengear s liability if any shall be limited solely to the replacement or repair of the product in accordance with the warranties specifically and expressly set forth herein The remedies of the Purchaser are the exclusive and sole remedies available and in th...

Page 109: ...KVM over IP User Manual Page 109 of 109 OR ANTICIPATED PROFITS OR ANY INCIDENTAL EXEMPLARY SPECIAL OR CONSEQUENTIAL DAMAGES REGARDLESS OF WHETHER OPENGEAR WAS ADVISED OF THE POSSIBILITY OF SUCH DAMAGES ...

Search results

Summary of Contents for IP-KVM 1001

Reviews:

Opengear IP-KVM 1001, User Manual, Page: 97 / 109

Search results

Summary of Contents for IP-KVM 1001

Reviews: