Raritan SCS232 Betriebsanweisung

Copyright © 2014 Raritan, Inc. DSX-v3.5-0-Z-E September 2014 255-60-2000-00 Dominion® SX User Guide 3.5.0

Contents x Chapter 12 Intelligent Platform Management Interface 224 Discover IPMI Devices ...

Chapter 7: Security 100 Certificates The Certificate feature allows you to generate a Certificate Signing Request (CSR), install a user key on the

Chapter 7: Security 101 Generate a Certificate Signing Request To generate a Certificate Signing Request (CSR): 1. Choose Security > Certif

Chapter 7: Security 102 5. To view the default certificate or the CSR, click the appropriate radio buttons. 6. Click OK. The CSR is generated.

Chapter 7: Security 103 Install a User Certificate To install a user certificate on the SX: 1. Choose Security > Certificate. The Certific

Chapter 7: Security 104 SSL Client Certificate SSL Security certificates are used in browser access to ensure that the device to which you are att

Chapter 7: Security 105 Enable Client Certificate Authentication To enable Client Certificate Authentication: 1. Select the Enable SSL Clien

Chapter 7: Security 106 Install a New Trusted Certificate Authority To install a new trusted Certificate Authority (CA) to the SX, the CA certific

Chapter 7: Security 107 3. Click OK to add the CRL. Delete a Certificate Revocation List from the SX To delete a CRL from the SX: 1. Select

Chapter 7: Security 108 Banner SX optionally supports a customizable welcome banner with a maximum 5000 words, 8 words per row, that appears after

Chapter 7: Security 109 4. Locate and select the file that contains the Restricted Service Banner message you want to display on the SX login di

Contents xi SX Terminal Ports ...

Chapter 7: Security 110 4. Click OK. Edit the Custom Profile To edit the Custom profile: 1. Choose Security > Security Profiles. The Secu

Chapter 7: Security 111 Enable the Firewall To enable the firewall: 1. Choose Security > Firewall. The Firewall page opens, displaying the

Chapter 7: Security 112 Note: Rules are added using the IPTables command to the kernel. These rules take effect immediately but persist permanentl

113 In This Chapter Configuring Local Event Logging ... 113 Configuring SMTP Logging ...

Chapter 8: Logging 114 Enable System Logging This feature sends event log messages to a remote Syslog server. The messages from the SX unit are se

Chapter 8: Logging 115 Note: If no specific IPs are entered for the port data destination servers, port logs are sent to the Syslog server config

Chapter 8: Logging 116 3. Type the maximum file size allowed in the Size field. Once this size is reached, a new file is created to store the por

Chapter 8: Logging 117 Configure Encryption To configure encryption: 1. Go to the Encryption panel and select the Encryption checkbox. To turn

Chapter 8: Logging 118 Enable SMTP Logging To enable SMTP logging: 1. Go to the SMTP Settings panel and select the Enable SMTP Server checkbox.

Chapter 8: Logging 119 Select a New SMTP Event To select a new SMTP event: 1. Go to the New SMTP Event panel and select a new event from the E

Contents xii TACACS+ Server Configuration ... 282 Cis

Chapter 8: Logging 120 3. Click OK. Test SMTP Logging It is important that the SMTP server information be accurate so that the SX unit can send

Chapter 8: Logging 121 You must also enable port logging. For more information on port logging, see Enable Port Logging. Note: The NFS server mus

Chapter 8: Logging 122 Enable SNMP Logging To enable SNMP logging: 1. Choose Setup > SNMP. The SNMP page opens. 2. Go to the SNMP Setting p

Chapter 8: Logging 123 2. Go to the SNMP Setting panel and select the Enable SNMP v3 checkbox. 3. If needed, click View SNMP-MIB to view th

124 In This Chapter Managing the Local Event Log ... 124 Displaying a Configuration Repo

Chapter 9: Maintenance 125 Note: If the number of events in the log exceeds the size of one page, click the Next link that appears under “Event L

Chapter 9: Maintenance 126 2. Enter the IP address of the FTP server in the IP address field. 3. Enter a login name and password on the FTP serv

Chapter 9: Maintenance 127 Back Up the SX To back up the SX unit: 1. Choose Maintenance > Backup. The Backup page opens. 2. Type the IP

Chapter 9: Maintenance 128 Restore the SX Restoring the SX retrieves a copy of the SX configuration from the FTP server where it has been backed u

Chapter 9: Maintenance 129 Display the Current Firmware Version To display the current version of firmware running on an SX unit, choose Maintena

xiii To avoid potentially fatal shock hazard and possible damage to Raritan equipment:  Do not use a 2-wire power cord in any product configurati

Chapter 9: Maintenance 130 Note: Many upgrades can be performed "anonymously" from the FTP server. To perform the upgrade: 1. Choose

Chapter 9: Maintenance 131 Display a Firmware Upgrade History To display the firmware upgrade history for an SX unit, choose Maintenance > Fir

132 In This Chapter Network Infrastructure Tools ... 132 Administrator Tools - Proces

Chapter 10: Diagnostics 133 Network Statistics 1. Choose Diagnostics > Network Statistics. The Network Statistics page opens. 2. By defaul

Chapter 10: Diagnostics 134  Interfaces  Groups  Statistics  Program 3. Click Refresh to update the information. Ping Host 1. Choose Di

Chapter 10: Diagnostics 135 Administrator Tools - Process Status 1. Choose Diagnostics > Process Status. The Process Status page opens. 2.

136 In This Chapter Command Line Interface Overview ... 137 Accessing the SX Using CLI...

Chapter 11: Command Line Interface 137 Command Line Interface Overview The SX Serial Console supports all serial devices, including:  Servers,

Chapter 11: Command Line Interface 138 SSH Connection to the SX Use any SSH client that supports SSHv2 to connect to the SX. You must enable SSH a

Chapter 11: Command Line Interface 139 The welcome message appears. You are now logged in as an Administrator. After reviewing Navigation of the

Chapter 1: Package Contents xiv NOTICE: This equipment meets the applicable Industry Canada Terminal Equipment Technical Specifications. This is c

Chapter 11: Command Line Interface 140 Note: By default, the telnet port is set to 23. You may change it by issuing the following command: Admin

Chapter 11: Command Line Interface 141 Connection To make a local port connection: 1. Open a HyperTerminal application or equivalent. 2. Ensu

Chapter 11: Command Line Interface 142 CLI Syntax -Tips and Shortcuts Tips  Commands are listed in alphabetical order.  Commands are not case

Chapter 11: Command Line Interface 143 Show Command The show command displays various configuration settings and is available at all levels. The

Chapter 11: Command Line Interface 144 PMON Version: 2.0.1 RSC Version: 1.0.0.1.16 Supporting software: OpenSSH_4.3p2, OpenSSL 0.9.7i 14 Oct 200

Chapter 11: Command Line Interface 145 Date and Time Configuration Note: It is important to set the date and time correctly to ensure that log en

Chapter 11: Command Line Interface 146 CLI Prompts The Command Line Interface prompt indicates the current command level. The root portion of the

Chapter 11: Command Line Interface 147 Command Definition cleareventlog Clear Contents of the local log eventlogfile Local log configu

Chapter 11: Command Line Interface 148 Command Definition fixedtcpwindow TCP Window Tuning Parameter http HTTP configuration

Chapter 11: Command Line Interface 149 Command Definition ifconfig Show detailed network configuration netstat Print network connectio

Package Contents xv Check the contents of the carton containing the SX against the packing list that ships with your SX. If any piece is missing

Chapter 11: Command Line Interface 150 Command Definition association View Currently configured associations cycle Power cycle s

Chapter 11: Command Line Interface 151 Command Definition generatecsr View Default System Cert generatedefaultcert Generate

Chapter 11: Command Line Interface 152 Command Definition userlist List active user sessions Security Issues Elements to consider when add

Chapter 11: Command Line Interface 153 Enabling Firewall Protection SX provides a firewall function to provide protection for the IP network and

Chapter 11: Command Line Interface 154 Target Connections and the CLI The purpose of the SX is to let authorized users establish connections to va

Chapter 11: Command Line Interface 155 Port Sharing Using CLI Access Client users can share ports with other authenticated and authorized users,

Chapter 11: Command Line Interface 156 Note: When configuring the LDAP server, the query string format on the server should contain the name of a

Chapter 11: Command Line Interface 157 LDAP Command Examples admin > Config > Authentication > ldap admin > Config > Authenticati

Chapter 11: Command Line Interface 158 RADIUS Command The RADIUS menu provides access to commands used to configure access to a RADIUS server. Syn

Chapter 11: Command Line Interface 159 TACACS+ Command The TACACS+ menu offers commands used to configure access to a TACACS+. Syntax primaryt

xvi Case 1. Upgrading SX Firmware via Web Browser Upgrade the SX firmware version for enhanced features or service patches. During the upgrade, SX

Chapter 11: Command Line Interface 160 Command Description smtp Configure the SMTP server settings. Events Menu Command Examples admin > Conf

Chapter 11: Command Line Interface 161 Eventlogfile Command The eventlogfile command controls and configures the logging of events to the local l

Chapter 11: Command Line Interface 162 Command Description primip ipaddress Primary FTP server address secip ipaddress Secondary FTP server addres

Chapter 11: Command Line Interface 163 nfsgetkey Command Description encryption (rc4 or aes128) nfsgetkey Command Example admin > Config >

Chapter 11: Command Line Interface 164 portlog Command Description enable <true|false> Enable/Disable logging of port data to remote NFS se

Chapter 11: Command Line Interface 165 Portlog Command Example portlog enable true prefix DomSX1size 1000000 timestamp 1 update 20 inputlog false

Chapter 11: Command Line Interface 166 Sendeventlog Command The sendeventlog command sends the local logfile to a remote FTP server. Syntax sende

Chapter 11: Command Line Interface 167 Configuring a Modem The Modem menu offers commands used to configure modem access. Callback (dialback) occ

Chapter 11: Command Line Interface 168 Modem Menu Command Examples admin > Config > modem > dialin enable true serverip 10.0.13.211 clien

Chapter 11: Command Line Interface 169 admin > Config > Authentication > RADIUS > primaryradius RADIUS Server Settings --------------

How to - Dominion SX Essentials xvii 2. Log back in to the SX and select the port enabled for DPA in Setup > Port Configuration. 3. Edit th

Chapter 11: Command Line Interface 170 The Remote LDAP Server user's configuration should be: Dialback with remote TACACS user (Tacacs+ v.4.

Chapter 11: Command Line Interface 171 Commands Description routeadd Add route to kernel routing table routedelete Delete route of kernel routing

Chapter 11: Command Line Interface 172 interface Command Description administrator gw ipaddress Gateway IP Address obtained from the IP administr

Chapter 11: Command Line Interface 173 Name Command The name command is used to configure the unit and host name. Syntax name [unitname name] [d

Chapter 11: Command Line Interface 174 Routeadd Command The routeadd command is used to add a route to the kernel routing table. Syntax routeadd

Chapter 11: Command Line Interface 175 Getconfig Command The getconfig command retrieves the script from an FTP server. This command appears only

Chapter 11: Command Line Interface 176 nfs Command Description enable <true|false> Enable or disable NFS logging. primaryip primaryip IP ad

Chapter 11: Command Line Interface 177 Configuring Ports Ports Configuration Menu Target serial ports are configured from the CLI using the ports

Chapter 11: Command Line Interface 178 ports config Command Description sw =X on/X off) detect <true|false> Enable/Disable detection of por

Chapter 11: Command Line Interface 179 ports config Command Example admin > ports >config port 1 name ld1 bps 115200 parity odd flowcontrol

Chapter 1: How to - Dominion SX Essentials xviii 3. Click OK. See Configuring LDAP (on page 58) for details. Case 5. Creating Power Associatio

Chapter 11: Command Line Interface 180 Authentication successful. Port 1: Configuration Saved. After entering the password, you have direct access

Chapter 11: Command Line Interface 181 or admin > Config > Port > config port * ssh 7000 telnet 8000 In both cases above, port 1 will ha

Chapter 11: Command Line Interface 182 Ports Keyworddelete Command The keyworddelete command removes an existing keyword. Syntax keyworddelete [ke

Chapter 11: Command Line Interface 183 dpa Command The permitted TCP Port Range is 1024-64510. When run without the mode parameter, the system di

Chapter 11: Command Line Interface 184 Note: There is currently no way to set the unit back to the default DPA IP of 0.0.0.0. dpa Command Example

Chapter 11: Command Line Interface 185 Enable: 1 Group Settings: Name: Anonymous Class: Operator Ports: To config

Chapter 11: Command Line Interface 186 If option suppress is "none", authentication credentials are shown (username: password:). configu

Chapter 11: Command Line Interface 187 http Command Description enable <true|false> Enable/Disable HTTP access port value HTTP server defa

Chapter 11: Command Line Interface 188 LPA Command The lpa command is used to display and set local port access configuration. SX units have one o

Chapter 11: Command Line Interface 189 Telnet Command Syntax telnet [enable <true|false>] [port value] telnet Command Description enabl

How to - Dominion SX Essentials xix Case 6. Performing Factory Reset on SX To set the SX configuration back to the factory defaults through th

Chapter 11: Command Line Interface 190 SMNP Add Command The add command adds trap recipients. A recipient is an IP address with an optional space-

Chapter 11: Command Line Interface 191 public community-string Community string snmp Command Example admin > Config > SNMP > snmp enable

Chapter 11: Command Line Interface 192 ntp Command Description enable Enable or disable the use of NTP. primip primip The primary NTP server to u

Chapter 11: Command Line Interface 193 addgroup Command Description name groupname Group name class <op|ob> Group user class <op>era

Chapter 11: Command Line Interface 194 Deletegroup Command The deletegroup command deletes an existing group. Syntax deletegroup [name groupname]

Chapter 11: Command Line Interface 195 editgroup Command Description assigned to the group. sharing <true|false> Indicate whether port acc

Chapter 11: Command Line Interface 196 Users Command The users command shows the details of existing users. Syntax users users Command Example ad

Chapter 11: Command Line Interface 197 Command Description associate Associate a Power Strip outlet to a SX Port. association View Currently con

Chapter 11: Command Line Interface 198 IPMI Commands IPMIDiscover and IPMITool commands allow you to work with IPMI-supported devices. IPMIDISCOV

Chapter 11: Command Line Interface 199 IPMITOOL This command lets you manage the IPMI functions of a remote system, including printing FRU inform

This document contains proprietary information that is protected by copyright. All rights reserved. No part of this document may be photocopied, rep

Chapter 1: How to - Dominion SX Essentials xx 3. Select Yes to proceed through the security warning(s). The Raritan Serial Console (RSC) launches

Chapter 11: Command Line Interface 200 ipmitool Command Description [-o <oemtype>] Select OEM type to support. This usually involves minor h

Chapter 11: Command Line Interface 201 ipmitool Command Description firewall - Configure firmware firewall (IPMIv2.0) sunoem - OEM Commands for S

Chapter 11: Command Line Interface 202 Command Description listports List accessible ports. admin > listports Port no. Port name 1 Port1 [U] 2

Chapter 11: Command Line Interface 203 Maintenance Commands The maintenance commands allow you to perform maintenance-related tasks on the SX fir

Chapter 11: Command Line Interface 204 backup is written. <login login> Username of the account on the system where the backup is stored. &l

Chapter 11: Command Line Interface 205 Syntax factoryreset factoryreset Command Example admin > Maintenance > factoryreset Network Setting

Chapter 11: Command Line Interface 206 Reboot Command The reboot command restarts the SX console server. This command is only available to users

Chapter 11: Command Line Interface 207 restore Command Example In this example, the console server data is being retrieved from a system at IP ad

Chapter 11: Command Line Interface 208 Upgrade Command Note: To perform an upgrade, there must be a configured remote ftp server. The upgrade comm

Chapter 11: Command Line Interface 209 Userlist Command The userlist command displays a list of all users who are logged in, their source IP Addr

How to - Dominion SX Essentials xxi f. To return to the SX console, enter the escape sequence characters. For example, simultaneously press the

Chapter 11: Command Line Interface 210 banner Command Example admin > Security > banner > banner display true audit false Ftpgetbanner C

Chapter 11: Command Line Interface 211 Certificate Command Menu The certificate command menu provides the client and server commands to create an

Chapter 11: Command Line Interface 212 Certificate Client Command Example Enable SSL Client Certificates: admin > Security > certificate >

Chapter 11: Command Line Interface 213 Server Command Example Install User Certificate: admin > Security > certificate > installusercer

Chapter 11: Command Line Interface 214 IPtables Command The iptables command is an administration tool for IPv4 packet filtering and Network Addre

Chapter 11: Command Line Interface 215 iptables Command Examples Iptables can be configured in a plethora of ways that is outside the scope of th

Chapter 11: Command Line Interface 216 admin > Security > firewall > iptables --list or admin > Security > firewall > iptables -

Chapter 11: Command Line Interface 217 3. Use kadmin to add the keys to /etc/krb5.keytab for HTTP/FQDN@REALM and host/FQDN@REALM. These keys are

Chapter 11: Command Line Interface 218 Loginsettings Commands The loginsettings command menu offers commands used to configure the systemwide logi

Chapter 11: Command Line Interface 219 inactiveloginexpiry Command Description account will expire for local users on inactivity Command Example

22 In This Chapter Dominion SX Overview ... 22 SX Connections, Ports and I

Chapter 11: Command Line Interface 220 lockoutperiod Command Example admin > Security > LoginSettings > lockoutperiod time 120 Singlelog

Chapter 11: Command Line Interface 221 strongpassword Command Description expiry Number of days before password will expire for local users. his

Chapter 11: Command Line Interface 222 Portaccess Command Syntax portaccess <share|private> portaccess Command Description portaccess &

Chapter 11: Command Line Interface 223 profiledata Command Description [name <Standard|Secure|Custom>] Specifies the type of security prof

224 In This Chapter Discover IPMI Devices ... 224 IPMI Configuration ...

Chapter 12: Intelligent Platform Management Interface 225 Example The following is an example of the output when nothing has been entered in the

Chapter 12: Intelligent Platform Management Interface 226 ipmitool version 1.8.7 usage: ipmitool [options...] -h This help -V

Chapter 12: Intelligent Platform Management Interface 227 lan IPMI v1.5 LAN Interface Commands: raw Send a RAW IPMI request

Chapter 12: Intelligent Platform Management Interface 228 5. Type your password in the Password field. 6. Type an option in the Option field. 7.

229 In This Chapter Port Power Associations ... 229 Power Strip Configuration

Chapter 1: Introduction 23 SX Connections, Ports and Indicators Note the image shown here is an example, so it may be different from your SX mode

Chapter 13: Power Control 230 2. Click Add. The Port Power Association page opens. 3. Select the port from the drop-down menu in the Port field

Chapter 13: Power Control 231 2. Click Add. The Port Power Association page opens. 3. Select the association in the Outlet Association list. 4.

Chapter 13: Power Control 232 2. Click Add. The Power Association Groups page opens. 3. Type a name and description in the Group Name and Descr

Chapter 13: Power Control 233 Associations Power Control Choose Power Control > Associations Power Control to access the tool to manage power

Chapter 13: Power Control 234 Power Strip Power Control Choose Power Control > Power Strip Power Control to access the Outlet Control page, whe

Chapter 13: Power Control 235 Power Strip Status Choose Power Control > Power Strip Status to check power strip status. CLI Command for Powe

Chapter 13: Power Control 236 Scenario #2 Port power association - associate 6 outlets to one port Pre-condition Administrator user is logged in v

Chapter 13: Power Control 237 Scenario #4 Port power association - associate one outlet to two ports Action Enter command Press Enter CLI Input a

Chapter 13: Power Control 238 Scenario #7 Port power association - associate outlets from 6 different power strips to one port 6 Power strip (DPX)

Chapter 13: Power Control 239 Scenario #1 Remove port power association Press Enter. CLI Input Command: unassociate port 1 powerstrip PowerStr1 o

Chapter 1: Introduction 24 DC unit diagram key A DC power connections B Power on/off switch C Internal modem (if available) D Terminal port/co

Chapter 13: Power Control 240 CLI Power Association Group Description: Power > PowerGroups menu Scenario #1 Create new power group Pre-conditi

Chapter 13: Power Control 241 Scenario #4 Remove group member Administrator is in Power > PowerGroups menu. Action Enter Command. Press Enter

Chapter 13: Power Control 242 Scenario #2 Switch on/off all Outlets Press Enter. CLI Input on powerstrip PowerStr1 outlet * off powerstrip PowerSt

Chapter 13: Power Control 243 Scenario #6 Sequence interval for switch on operation Pre-condition Administrator user is logged in via CLI. Power

Chapter 13: Power Control 244 A powerdelay setting of 0 executes the commands as fast as possible. Example: powerdelay sequence 2 cycle 5 Note: T

Chapter 13: Power Control 245 Scenario #2 Association Power Control - Recycle Port Association (Target is associated to Two Outlets from one pow

Chapter 13: Power Control 246 CLI Association Power Control - Group Association Description: Power Control Menu Scenario #1 Turn ON Group Assoc

Chapter 13: Power Control 247 Scenario #4 Turn OFF Group Association (outlets in association are with different statuses) Administrator is in pow

Chapter 13: Power Control 248 Scenario #7 Turn ON Group and Port Association simultaneously outlet8 of PowerStr1 which has been created and availa

Chapter 13: Power Control 249 CLI Power Strip Status Description: Power Control Menu Scenario #1 Power Strip Status Pre-condition Administrator

Chapter 1: Introduction 25 8 Port SX Models Single-feed AC power Dual-feed AC power Single-feed DC power Console ports 19" rack-mount ki

Chapter 13: Power Control 250 Scenario #3 Power Strip Status - Outlet status Action Check the current status of outlets - outlet1 is turn on Turn

Chapter 13: Power Control 251 Scenario #5 Power Strip Status - Outlet status when group association is removed CLI Input powerstrip name PowerStr

252 In This Chapter SX Models and Specifications ... 252 Maximum Number of Connections

Appendix A: Specifications 253 Model Ports Built-In Modem # of Local Ports # of Ethernet Ports Power Supply DLM DSXA-48 48 Yes 1 2 Dual AC DSXA-

Appendix A: Specifications 254 The following table lists the information of Cables/Adapters/Brackets. The SX is able to support long distance cabl

Appendix A: Specifications 255 Pin Pin 1 8 2 7 3 6 4 5 5 4 6 3 7 2 8 1 Maximum Number of Connections for a Single User The following maximum n

Appendix A: Specifications 256 Requirements The following table lists the requirements for the SX. Requirements Description Form factor 1U, rack

Appendix A: Specifications 257 Operating Systems Browsers Java™ versions Windows 7® Home Premium SP1 64-bit  Internet Explorer® 10, 11  Fir

Appendix A: Specifications 258 Vendor Device Console Connector Serial Connection Cisco® PIX Firewall and a CAT 5 cable Cisco Catalyst RJ-45 CRLVR-

Appendix A: Specifications 259 RJ-45 PIN SIGNAL 1 RTS 2 DTR 3 TxD 4 GND 5 Signal GND 6 RxD 7 DSR 8 CTS See http://www.raritan.com/support for th

Chapter 1: Introduction 26 32 Port SX Models Dual-feed AC power Dual-feed DC power Dual Ethernet Console port Local access ports 19" ra

Appendix A: Specifications 260 RJ-45 (female) DB9 (male) 6 3 7 4 8 7 DB25F Nulling Serial Adapter Pinouts RJ-45 (female) DB25 (female) 1 5 2 6,

Appendix A: Specifications 261 SX Terminal Ports All SX models, except the DSX16 and DSX32, have the same pinouts on the two DB9M serial ports. T

Appendix A: Specifications 262 DB9M PIN SIGNAL 4 DTR (H) 5 GND 6 7 RTS (H) 8 9 SX16 and SX32 Terminal Ports A modem should not be connected t

Appendix A: Specifications 263 Additional information about the SX16 and SX32 Terminal Ports:  Pins 1 and 9 are used to factory reset units shi

264 In This Chapter Initiate Port Access ... 264 Supported Character L

Appendix B: System Defaults 265 Field Type Character Length username 255 user full name 255 user information 64 user password 64 group name 255 R

Appendix B: System Defaults 266 Field Type Character Length PortLog NFS Update 0-99999 PortLog In/Out Directory 64 SMTP Username 255 SMTP Password

267 In This Chapter Default SX Certificate Authority Settings ... 267 Installing Dominion SX Server Cer

Appendix C: Certificates 268 2. Select Accept this certificate permanently and click OK. 3. Select OK on the Security Warning window 4. The Rar

Appendix C: Certificates 269 3. In the Manage Certificates section, click the Manage Certificates... button to view the Certificate Manager.

Chapter 1: Introduction 27 Models Dual-feed AC power Dual-feed DC power Dual Ethernet Console port 19" rack-mount kit Internal modem DSXA-4

Appendix C: Certificates 270 4. Select the Web Sites tab, select the certificate name that is the common name of the IP address of the SX, and cl

Appendix C: Certificates 271 Note: Some CAs will provide the root certificate code in text format rather than providing a downloadable root certi

Appendix C: Certificates 272 Generate a CSR for a Third Party CA to Sign To have a third party CA certificate (for example, Verisign) installed on

Appendix C: Certificates 273 7. Install the certificate to SX. 8. Reboot the SX. If the CSR is generated by an external source: 1. Generate

Appendix C: Certificates 274 Install Client Root Certificate In order for Client Certificates to be recognized as valid by the SX, the Root Certif

Appendix C: Certificates 275 6. If the certificate is ASCII encoded, select ASCII. If it is a binary certificate file, select binary. 7. Enter

Appendix C: Certificates 276 Import Certificates from Dominion SX via CLI A user with Administrator privileges can do the following to import cert

Appendix C: Certificates 277 D4:1D:8C:D9:8F:00:B2:04:E9:80:09:98:EC:F8:42:7E Fingerprint (SHA1): DA:39:A3:EE:5E:6B:4B:0D:32:55:BF:EF:95:60:18:90:

278 In This Chapter Microsoft IAS RADIUS Server ... 278 Cisco ACS RADIUS Server ...

Appendix D: Server Configuration 279 IAS Active Directory Access If using a Domain Controller, set IAS to access the Active Directory® using the

Chapter 1: Introduction 28 Product Features Comprehensive Console Management  Remote Management: Access, monitor, administer, and troubleshoot u

Appendix D: Server Configuration 280 7. Select the Grant remote access permission radio button. 8. Click Next>. The Profile dialog appears. 9

Appendix D: Server Configuration 281 18. Ensure that the Active Directory®/Local account for the user has Dial In access enabled in their user pr

Appendix D: Server Configuration 282 TACACS+ Server Configuration The SX has the capability to use Terminal Access Controller Access-Control Syste

Appendix D: Server Configuration 283 2. Select Interface Configuration. 3. Select TACACS+ (Cisco IOS). 4. Add dominionsx service under the he

Appendix D: Server Configuration 284 5. When adding or editing a user or group, the dominionsx service will appear under the heading TACACS+ Sett

285 In This Chapter Client Dial-Up Networking Configuration ... 285 Windows NT Dial-Up Networking Confi

Appendix E: Modem Configuration 286 2. Click New in the Dial-Up Networking dialog. The New Phonebook Entry dialog allows you to configure the det

Appendix E: Modem Configuration 287  Dial using - Modem being used to connect to SX; if there is no entry here, there is no modem installed in

Appendix E: Modem Configuration 288 5. Click the "Accept any authentication including clear text" radio button. 6. Click OK to return

Appendix E: Modem Configuration 289 2. Double-click the Make New Connection icon when the Network and Dial-Up Connections window appears. 3. C

Chapter 1: Introduction 29 Strong Security and User-Authentication  SSHv2 Support  Encryption Security: 128-bit SSL handshake protocol and RC

Appendix E: Modem Configuration 290 4. Click the Dial-up to private network radio button and click Next. 5. Select the checkbox before the mode

Appendix E: Modem Configuration 291 7. Click the Country/region code drop-down arrow and select the country or region from the list. 8. Click

Appendix E: Modem Configuration 292 10. Click Next. The Network Connection has been created. 11. Type the name of the Dial-up connection. 12. Clic

Appendix E: Modem Configuration 293 Windows XP Dial-Up Networking Configuration 1. Choose Start > Programs > Accessories > Communicatio

Appendix E: Modem Configuration 294 4. Click the "Set up my connection manually" radio button and click Next.

Appendix E: Modem Configuration 295 5. Click the "Connect using a dial-up modem" radio button and click Next.

Appendix E: Modem Configuration 296 6. Type a name to identify this particular connection in the ISP Name field and click Next.

Appendix E: Modem Configuration 297 7. Type the phone number for the connection in the Phone number field and click Next. 8. Type your ISP inf

Appendix E: Modem Configuration 298 9. Select the checkbox before the appropriate option below the fields and click Next. 10. Click Finish. 11.

299 In This Chapter Overview ... 299 Connecting the S

iii Contents CS03 Certification - DSXA-16 and DSXA-48 xiii Package Contents xiv How to - Dominion SX Essentials xvi Case 1. Upgrading SX Firmwar

30 In This Chapter Overview ... 30 Factory Defaults

Appendix F: Accessing a PX2 from the SX 300 3. Power on the PX2. The CLI interface appears. Connecting the SX to the PX2 FEATURE Port In this

Appendix F: Accessing a PX2 from the SX 301 3. Power on the PX2. You can now add the PX2 as a managed powerstrip to the SX.

302 In This Chapter Page Access ... 302 Firewall ...

Appendix G: Troubleshooting 303 Problem Solution error and reading that the server is unreachable. Remove any installed SX certificates and resta

Appendix G: Troubleshooting 304 Problem Solution SSL Security Warnings The unit embeds its Internet Address (IP) in its SSL certificate. Should th

Appendix G: Troubleshooting 305 Problem Solution Whenever possible, it is recommended that Administrators not change port access rights to a user

Appendix G: Troubleshooting 306 Problem Solution upgrade pack again. Events Not Captured in Event Log The eventlogfile command can fail to be ca

Appendix G: Troubleshooting 307 Problem Solution TCP auto tuning. Vista's Enterprise (and Business) editions utilize an aggressive scaling

Appendix G: Troubleshooting 308 Lines are Overwritten after Column 80 in Linux The default Linux® terminal display is set up for 80 columns, while

309 In This Chapter FAQs ... 310 Appendix H Fr

Chapter 2: Installation and Configuration 31 Factory Defaults The SX device is shipped from the factory with the following default settings built

310 FAQs Questions Answers How do I enable Direct Port Access with a Dominion SX unit running SX3.1+ firmware? Enabling Direct Port Access (DPA) f

Chapter 14: Frequently Asked Questions 311 Questions Answers How do I enable Direct Port Access with a Dominion SX unit running SX3.1+ firmware?

Chapter 14: Frequently Asked Questions 312 Questions Answers How do I enable Direct Port Access with a Dominion SX unit running SX3.1+ firmware?

Chapter 14: Frequently Asked Questions 313 Questions Answers How do I enable Direct Port Access with a Dominion SX unit running SX3.1+ firmware?

Chapter 14: Frequently Asked Questions 314 Questions Answers How do I enable Direct Port Access with a Dominion SX unit running SX3.1+ firmware?

Chapter 14: Frequently Asked Questions 315 Questions Answers How do I enable Direct Port Access with a Dominion SX unit running SX3.1+ firmware?

Chapter 14: Frequently Asked Questions 316 Questions Answers How do I enable Direct Port Access with a Dominion SX unit running SX3.1+ firmware?

Chapter 14: Frequently Asked Questions 317 Questions Answers How do I enable Direct Port Access with a Dominion SX unit running SX3.1+ firmware?

Chapter 14: Frequently Asked Questions 318 Questions Answers How do I enable Direct Port Access with a Dominion SX unit running SX3.1+ firmware?

Chapter 14: Frequently Asked Questions 319 Questions Answers How do I enable Direct Port Access with a Dominion SX unit running SX3.1+ firmware?

Chapter 2: Installation and Configuration 32 Power and Connect the SX There are various SX models. The model shown here contains two power outlet

Chapter 14: Frequently Asked Questions 320 Questions Answers How do I enable Direct Port Access with a Dominion SX unit running SX3.1+ firmware?

Chapter 14: Frequently Asked Questions 321 Questions Answers How do I enable Direct Port Access with a Dominion SX unit running SX3.1+ firmware?

Chapter 14: Frequently Asked Questions 322 Questions Answers How do I enable Direct Port Access with a Dominion SX unit running SX3.1+ firmware?

Chapter 14: Frequently Asked Questions 323 Questions Answers How do I enable Direct Port Access with a Dominion SX unit running SX3.1+ firmware?

Chapter 14: Frequently Asked Questions 324 Questions Answers How do I enable Direct Port Access with a Dominion SX unit running SX3.1+ firmware?

Chapter 14: Frequently Asked Questions 325 Questions Answers How do I enable Direct Port Access with a Dominion SX unit running SX3.1+ firmware?

U.S./Canada/Latin America Monday - Friday 8 a.m. - 6 p.m. ET Phone: 800-724-8090 or 732-764-8886 For CommandCenter NOC: Press 6, then Pres

Chapter 2: Installation and Configuration 33 Configure the SX You can configure the SX using a web browser or a command line interface (CLI).

Chapter 2: Installation and Configuration 34 a. Click the checkbox next to a port with a target device connected to it. If more than one target d

Chapter 2: Installation and Configuration 35 12. At the admin > prompt, enter config and at the next prompt enter time. 13. At the admin >

36 In This Chapter Configuring the Basic Network Settings ... 37 Configuring the Network Service Set

Chapter 3: Network Settings and Services 37 Configuring the Basic Network Settings Network basic settings include:  Enabling/disabling Ethernet

Chapter 3: Network Settings and Services 38 Configure the Network Settings of SX SX dual LAN models can be configured for failover or for dual LAN

Chapter 3: Network Settings and Services 39 e. Type the IP address of the gateway router in the Gateway IP Address field. f. Select the speed f

Contents iv Chapter 2 Installation and Configuration 30 Overview ...

Chapter 3: Network Settings and Services 40 Change the Discovery Ports To change the discovery ports: 1. Choose Setup > Network. The Networ

Chapter 3: Network Settings and Services 41 Service Default Setting Windows Vista® operating system. Available authorization methods are:  Both

Chapter 3: Network Settings and Services 42

Chapter 3: Network Settings and Services 43 Change Network Service Settings To change network service settings: 1. Choose Setup > Services.

Chapter 3: Network Settings and Services 44 a. Select All to allow modem access to all modems. Looks for a PPP signal and falls back to allow con

Chapter 3: Network Settings and Services 45 Add a New Static Route To add a new Static Route: 1. Choose Setup > Static Routes. The Static

Chapter 3: Network Settings and Services 46 5. Type the TCP maximum segment size (MSS) in bytes in the MSS field. 6. Type the TCP windows size f

47 In This Chapter Managing User Profiles ... 47 Managing User Groups ...

Chapter 4: User Profiles and Groups 48  User group 3. The User List page also indicates whether the user profile is active or inactive. Create

Chapter 4: User Profiles and Groups 49 4. Type the user's full name in the Full Name field. This field is required. 5. Type the user'

Contents v Chapter 5 Remote Authentication 57 Configuring RADIUS ...

Chapter 4: User Profiles and Groups 50 6. When you SSH with this user, the key data should be used for authentication and you should not have to

Chapter 4: User Profiles and Groups 51 4. For security reasons, the password is not displayed. To change the profile's password, type a new

Chapter 4: User Profiles and Groups 52 The Group List page shows every user group created to date, and for each one gives the group's name an

Chapter 4: User Profiles and Groups 53 2. Click Add New User Group. The New Group page opens.

Chapter 4: User Profiles and Groups 54

Chapter 4: User Profiles and Groups 55 3. Type a group name in the Group Name field.  You can enter any number of characters up to a maximum

Chapter 4: User Profiles and Groups 56 6. Select the ports that the users associated with this group are permitted to access. You can select all

57 In This Chapter Configuring RADIUS ... 57 Configuring LDAP ...

Chapter 5: Remote Authentication 58 5. Click OK. RADIUS authentication is enabled. Configuring LDAP You can use the Lightweight Directory Access

Chapter 5: Remote Authentication 59 7. Type the domain name where the search starts in the Search field. The Search field is the sub-tree of the

Contents vi SSL Client Certificate ...

Chapter 5: Remote Authentication 60 4. Type the root password to access the directory server/manager in the Secret field. The name for this field

61 In This Chapter Port Keywords ... 62 Port Configuration ..

Chapter 6: Port Configuration and Port Access Application 62 Port Keywords You can create port keywords and associate them with:  Events  Loca

Chapter 6: Port Configuration and Port Access Application 63 Port Configuration To configure one or more ports: 1. Choose Setup > Port Conf

Chapter 6: Port Configuration and Port Access Application 64  Select control from the drop-down menu in the Escape Mode field.  Type the chara

Chapter 6: Port Configuration and Port Access Application 65 Note: Anonymous access should be enabled for DPA to succeed. 13. Select from the Mul

Chapter 6: Port Configuration and Port Access Application 66 Direct Port Access via Username for SSH and Telnet You are able to configure direct p

Chapter 6: Port Configuration and Port Access Application 67 Anonymous Port Access Anonymous port access allows users to access DPA configured po

Chapter 6: Port Configuration and Port Access Application 68 Note: A Security message appears only if you use HTTPS to connect to the RSC. 3. Cli

Chapter 6: Port Configuration and Port Access Application 69 Java Applets and Memory Considerations Usually, a browse- based RSC does not need to

Contents vii Upgrading Firmware ...

Chapter 6: Port Configuration and Port Access Application 70 Values - Syntax Description Default/Comments -Xmn<Size> in bytes Sets the in

Chapter 6: Port Configuration and Port Access Application 71 Raritan Serial Console Interface Important: The Raritan Serial Console page usually

Chapter 6: Port Configuration and Port Access Application 72 Emulator 1. Click the Emulator drop-down menu to display a list of topics.

Chapter 6: Port Configuration and Port Access Application 73 IMPORTANT: RSC sessions are affected by the Idle Timeout, which is set, by default,

Chapter 6: Port Configuration and Port Access Application 74 Settings Note: An Administrator can set Terminal emulation settings using Setup >

Chapter 6: Port Configuration and Port Access Application 75 5. The Backspace Sends default is ASCII DEL, or you can choose Control-H from the B

Chapter 6: Port Configuration and Port Access Application 76 b. The Antialiase Font checkbox is selected by default, or you can deselect the chec

Chapter 6: Port Configuration and Port Access Application 77  US-ASCII  ISO-8859-1  ISO-8859-15 5. Choose one of the following from the La

Chapter 6: Port Configuration and Port Access Application 78 Get Write Access Only Administrators and Operators can get write access. The user wit

Chapter 6: Port Configuration and Port Access Application 79 Connected Users The Connected Users command allows you to view a list of other users

Contents viii Configuring Authorization and Authentication (AA) Services ... 155 Remote Services

Chapter 6: Port Configuration and Port Access Application 80 Edit Use the Copy, Paste, and Select All text commands to relocate and/or re-use impo

Chapter 6: Port Configuration and Port Access Application 81 Note: The copy-paste limit of text in Raritan Serial Console is 9999 lines. Keyboard

Chapter 6: Port Configuration and Port Access Application 82 Start Logging The Start Logging function allows you to collect raw console data from

Chapter 6: Port Configuration and Port Access Application 83 Stop Logging Choose Tools > Stop Logging. The logging stops. Send Keystroke 1. C

Chapter 6: Port Configuration and Port Access Application 84 Toggle Power The Toggle Power function lets you power on or off the device that is co

Chapter 6: Port Configuration and Port Access Application 85 Chat When using browser access over SSL, an interactive chat feature called Chat all

Chapter 6: Port Configuration and Port Access Application 86 Help Help Topics include online assistance for operating the Raritan Serial Console a

Chapter 6: Port Configuration and Port Access Application 87 Standalone Raritan Serial Client Requirements The following requirements must be met

Chapter 6: Port Configuration and Port Access Application 88 2. Click the Advanced tab and then click Environment Variables. 3. In the System v

Chapter 6: Port Configuration and Port Access Application 89 8. Click OK. 9. Select the CLASSPATH variable and click Edit. 10. Ensure the CLAS

Contents ix Configuring Time ...

Chapter 6: Port Configuration and Port Access Application 90 Setting Linux OS Variables To set Java™ for a specific user, open and edit the .profi

Chapter 6: Port Configuration and Port Access Application 91 Installing Standalone RSC for Windows You must have administrative privileges to in

Chapter 6: Port Configuration and Port Access Application 92 7. Click Next. The Windows shortcut page opens. 8. Select the Program Group for th

Chapter 6: Port Configuration and Port Access Application 93 Launching RSC on Windows Systems 1. Double-click the shortcut or use Start Programs

Chapter 6: Port Configuration and Port Access Application 94 3. Click Start. The RSC opens with a connection to the port. Note: In case of unrec

Chapter 6: Port Configuration and Port Access Application 95 d. Click Next again. The installation is complete. The final page indicates where y

96 In This Chapter Security Settings ... 96 Login Settings ...

Chapter 7: Security 97 Login Settings  Choose Security > Login Settings. This panel includes Local Authentication, Login Handling, and Stron

Chapter 7: Security 98 3. Accept the system defaults or type your own. Login Handling 1. Go to the Login Handling panel and enter a value in t

Chapter 7: Security 99 Configure Kerberos 1. Click Enable Kerberos. 2. Type the name of the file you want for your Hosts File in the Hosts Fil