Raritan DOMINION SX - Betriebsanweisung

Dominion SX User Guide Release 3.1.5 Copyright©2008Raritan,Inc.DSX‐0O‐EApril,2008255‐60‐2000‐00

Contents x CLIPrompts ...

Installing Standalone RSC for Windows 78 7. ClickNext.TheWindowsshortcutscreenappears.8. SpecifythedesiredProgramGroupfortheShortc

Chapter 8: Port Configuration and Port Access Application 79 Launching RSC on Windows Systems 1. Double‐clicktheshortcutoruseStartPrograms

Installing RSC for Sun Solaris and Linux 80 3. ClickStart.TheRSCopenswithaconnectiontotheport.Note:Incaseofunrecognizedcharacters

Chapter 8: Port Configuration and Port Access Application 81 c. ClickNextwhentheinstallationiscomplete.d. ClickNextagain.Theinstalla

82 Thereareanumberofelementstoconsiderwhenaddressingsecurityforconsoleservers.ThefollowingaresomeoftheSecurityaspects:• Encr

Chapter 9: Security 83 Security Settings ChoosetheSecuritytabtobringupthesecurity‐relatedtools.TheSecuritySettingsscreenappears.

Login Settings 84 Login Settings ChooseSecurity>LoginSettings.ThispanelincludesLocalAuthentication,LoginHandling,andStrongPassword

Chapter 9: Security 85  InvalidLoginRetries:3 LockoutPeriodonInvalidLogin(minutes):53. Acceptthesystemdefaultsortypeyour

Configure Kerberos 86 Configure Kerberos 1. ClickEnableKerberos.2. TypethenameofthefileyouwantforyourHostsFileintheHostsFilef

Chapter 9: Security 87 Generate a Certificate Signing Request TogenerateaCertificateSigningRequest(CSR):1. ChooseSecurity>Certifica

Contents xi ConfiguringServices...

Certificates 88  Emailaddress5. ToviewthedefaultcertificateortheCSR,clicktheappropriateradiobuttons.6. ClickOK.TheCSRisgene

Chapter 9: Security 89 1. ClickthecheckboxlabeledInstallUserCertificate.2. Typethefollowinginformationinthecorrespondingfields:

SSL Client Certificate 90 SSL Client Certificate SSLSecuritycertificatesareusedinbrowseraccesstoensurethatthedevicethatyouareattach

Chapter 9: Security 91 

SSL Client Certificate 92 Enabling Client Certificate Authentication: ToenableClientCertificateAuthentication:1. ClickEnableSSLClientCer

Chapter 9: Security 93 Adding a New Certificate Revocation List to the DSX ToaddanewCRLtotheDSX,theCRLlistmustbeonanaccessibleFTP

Banner 94 Banner DominionSXoptionallysupportsacustomizable(maximum5000words,8wordsperrow)welcomebannerthatisdisplayedafterlogin.

Chapter 9: Security 95 4. LocateandselectthefilethatcontainstheRestrictedServiceBannermessageyouwanttodisplayontheDSXloginsc

Firewall 96 3. Selecttheprofilefromthedrop‐downmenuintheProfilefield.4. ClickOK. Edit the Custom Profile ToedittheCustomprofile:

Chapter 9: Security 97 Enable the Firewall Toenablethefirewall:1. ChooseSecurity>Firewall.TheFirewallScreenappears.TheFirewalls

Contents xii VieweventlogCommand ... 199 Se

Firewall 98 Note:RulesareaddedusingtheIPTablescommandtothekernel.Theserulestakeeffectimmediatelybutpersistpermanentlyonlyafter

99 ThischapterexplainshowtoenableandconfigurethevariousDSXlogs.In This Chapter ConfiguringLocalEventLogging...

Configuring Local Event Logging 100 Enable System Logging ThisfeaturesendseventlogmessagestoaremoteSyslogserver.ThemessagesfromtheDo

Chapter 10: Logging 101 Enable Port Logging YouneedtoconfigureportloggingafteryouhaveenabledNFSlogging(see“ConfiguringNFSLogging”

Configuring Local Event Logging 102 5. Typethetimeinterval(inseconds)betweentwoupdatesoftheportlogfileintheNFSUpdateFrequency(s

Chapter 10: Logging 103 Thefollowingisanexampleofanoutputfile.

Configuring Local Event Logging 104 Configure Input Port Logging Toenableinputportlogging:1. GototheInputPortLoggingpanelandclickthe

Chapter 10: Logging 105 Configuring SMTP Logging ToconfigureSMTPlogging,chooseSetup>Events.TheSMTPLoggingscreenappears.Thisscree

Configuring SMTP Logging 106 Select a New SMTP Event ToselectanewSMTPevent:1. GototheNewSMTPEventpanelandselecttheneweventinthe

Chapter 10: Logging 107 2. TypetheemailaddresstosendtheeventintheDestinationfield.3. ClickOK. Test the SMTP Logging Itisimporta

Contents xiii Appendix A Specifications 245 DominionSXModelsandSpecifications ...

Configuring SNMP Logging 108 Youmustalsoenableportlogging.Formoreinformationonportlogging,see“EnablePortLogging” above.Note:TheN

Chapter 10: Logging 109 2. GototheSNMPSettingpanelandclicktheEnableSNMPcheckboxtoenabletheSNMPfeature.3. TypeanSNMPpublic

110 TheDominionSXmaintenancefeaturespresentedinthischapterallowtheadministratorperformthefollowingtasks:• Manageeventlogs.• Vi

Chapter 11: Maintenance 111 Display the Local Event Log Todisplaythecontentsofthelocaleventlog,chooseMaintenance>ViewEventLog.T

Managing the Local Event Log 112 Note:Ifthenumberofeventsinthelogexceedsthesizeofonescreen,aNextlinkisaddedunder“EventLog”at

Chapter 11: Maintenance 113 Send the Event Log TosendthecontentsoftheeventlogtoaremoteFTPserver:1. ChooseMaintenance >SendEv

Displaying a Configuration Report 114 Displaying a Configuration Report TheConfigurationReportisareportthatprovidesdetailedinformationabo

Chapter 11: Maintenance 115 2. IntheIPAddressfield,typetheIPaddressofthetargetFTPserverwherethebackupwillbewritten.3. Inth

Upgrading the DSX Firmware 116 6. IntheRemoteFilefield,typethenameofthefileinwhichtherestorewillbesaved.7. ClickOK. Upgrading

Chapter 11: Maintenance 117 Interruptingtheupgradeprocedurecancausememorycorruptionandrendertheunitnon‐functional.Suchanactionmay

Contents xiv CreateanIASPolicy ...

Performing a Factory Reset on the DSX 118 Note:Iftheupgradefails,thesystemwilldisplayanerrormessagedetailingthefailure. Display a Fi

119 TheDiagnosticsfunctionprovidestheadministratorwiththetoolstotestthenetworkandmonitorprocesses.ClicktheDiagnosticstabtodisp

Network Infrastructure Tools 120 Status of Active Network Interfaces 1. ChooseDiagnostics>StatusofActiveNetworkInterfaces.Thesystemdi

Chapter 12: Diagnostics 121 Network Statistics 1. ChooseDiagnostics>NetworkStatistics.Thesystemdisplaysnetworkstatistics.2. Byde

Network Infrastructure Tools 122  Interfaces Groups Statistics Program3. ClickRefreshtoupdatetheinformation. Ping Host 1. Choos

Chapter 12: Diagnostics 123 Administrator Tools - Process Status 1. ChooseDiagnostics>ProcessStatus.Thescreendisplaystheresultsofy

124 In This Chapter CommandLineInterfaceOverview...125AccessingtheDominionSXUsing

Chapter 13: Command Line Interface 125 Command Line Interface Overview TheDominionSXSerialConsolesupportsallserialdevicessuchas:• Ser

Command Line Interface Overview 126

Chapter 13: Command Line Interface 127 ThefollowingcommoncommandscanbeusedfromalllevelsoftheCLItotheprecedingfigure:top,hist

xv Thischapterincludes10ofthemostlycommoncasestohelpfamiliarizeusersquicklywithpracticaloperationonDominionSXunits.Plea

Accessing the Dominion SX Using CLI 128 Accessing the Dominion SX Using CLI AccesstheDominionSXbyusingoneofthefollowingmethods:• TELNET

Chapter 13: Command Line Interface 129 SSH Access from a UNIX/Linux Workstation ¾ To open an SSH session from a UNIX/Linux workstation and log on

Local Port Connection to the Dominion SX 130 Accessing Telnet from a Windows PC ¾ To open a Telnet session from a Windows PC: 1. ChooseStartup&g

Chapter 13: Command Line Interface 131  usernameSeetheLogin(onpage131)sectionforlogininformation. To Change the Local Port Paramete

Navigation of the CLI 132 Thewelcomemessagedisplays.YouarenowloggedinasanAdministrator. AfterreviewingthefollowingNavigationofth

Chapter 13: Command Line Interface 133 CLI Syntax -Tips and Shortcuts Tips • Commandsarelistedinalphabeticalorder.• Commandsarenotcase

Navigation of the CLI 134 

Chapter 13: Command Line Interface 135 Show Command Theshowcommanddisplaysvariousconfigurationsettingsandisavailableatalllevels.The

Initial Configuration 136 KernelVersion:2.4.12PMONVersion:2.0.1RSCVersion:1.0.0.1.16Supportingsoftware: OpenSSH_4.3p2, OpenSSL 0.9.7i

Chapter 13: Command Line Interface 137 Date and Time Configuration Note:Itisimportanttosetthedateandtimecorrectlytoensurethatlogen

Case 2. Configuring and Using Direct Port Access via SSH xvi 5. Afterfirmwareupgradeiscompleted,loginSXandcheckthefirmwareversionagai

CLI Prompts 138 CLI Prompts TheCommandLineInterfacepromptindicatesthecurrentcommandlevel.Therootportionofthepromptistheloginname

Chapter 13: Command Line Interface 139 ifconfig Showdetailednetworkconfiguration.interface ConfiguretheDominionSXnetworkinterface.ipm

CLI Commands 140 top Returntotherootmenu.traceroute Printtheroutetoaremotesystemupgrade Systemcommandtoupgradethefirmware. upg

Chapter 13: Command Line Interface 141 Defining SSL Security Certificates SSLSecuritycertificatesareusedinbrowseraccesstoensurethatthe

Target Connections and the CLI 142 Command Language Interface Permissions Administratorscanexecuteallcommands.OperatorsandObserverscanonly

Chapter 13: Command Line Interface 143 Set Escape Sequence TosettheEscapesequence,ensurethatthedefaultEscapesequencesetontheDominio

Configuring Authorization and Authentication (AA) Services 144 primaryldapsecondaryldapradius primaryradiussecondaryradiustacacsplus primar

Chapter 13: Command Line Interface 145 Command Description ldaps Switchestotheldapsmenuwhichincludesthefollowingcommands:getservercer

Administering the Dominion SX Console Server Configuration Commands 146 TACACSPLUS Command Thetacacsplusmenuprovidesaccesstocommandsusedto

Chapter 13: Command Line Interface 147 Command Description add AddanSMTPevent.delete DeleteanSMTPevent.smtp ConfiguretheSMTPserver

How to - Dominion SX Essentials xvii 5. IntheRSCwindow,chooseEmulator>GetWriteLock(IfsomeotheruserhaspreviouslyobtainedWrit

Configuring Log 148 Eventlogfile Command Theeventlogfilecommandcontrolsandconfigurestheloggingofeventstothelocallog.Thesyntaxofthe

Chapter 13: Command Line Interface 149 Eventsyslog Command Example admin > Config > Log > eventsyslog enable true primip 192.168.134.11

Configuring Log 150 keystring ProvidekeystringtobeusedforencryptionNote:aes128isnotsupportedin3.0.Command Example admin > Confi

Chapter 13: Command Line Interface 151 inputlog<true|false>Enable/Disableloggingofuserinputdataontheport.Inputimpliesdatasent

Configuring Log 152 2. admin > Config > Log > nfsgetkey type rc43. (cutandpastetheresponseofthiscommandintoafile,suchas:ds

Chapter 13: Command Line Interface 153 Vieweventlog Command Thevieweventlogcommanddisplaysthelocallogfile.Thesyntaxofthevieweventlog

Configuring Modem 154 Modem Menu Command Examples admin > Config > modem > dialin enable true serverip 10.0.13.211 clientip 10.0.13.212ad

Chapter 13: Command Line Interface 155 Primary Server Enabled - true IP Address - 10.0.0.188 Port - 1812 Secret -

Configuring Network 156 TheRemoteLDAPServeruserʹsconfigurationshouldbe:Dialback with remote TACACS user. (Tacacs+ v.4.0.3a) DialinandDial

Chapter 13: Command Line Interface 157 Note:Alloperationsthatnormallytriggerarebootorprompttheuserforfeedbacksarenowaddedanewp

Case 6. Performing Factory Reset on DSX xviii 4. SelectthePowerStripandoutletfromthedrop‐downmenutomatchhowthedeviceisconnectedto

Configuring Network 158 gwipaddress GatewayIPAddressobtainedfromtheIPadministrator.mode<auto|100fdx> SetEthernetModetoautod

Chapter 13: Command Line Interface 159 Ports Command Theportscommandisusedtoconfigurethenetworkports.Thesyntaxoftheportsis:ports

Configuring Network 160 Routeadd Command Therouteaddcommandisusedtoaddaroutetothekernelroutingtable.Thesyntaxofthecommandis:rou

Chapter 13: Command Line Interface 161 Getconfig Command ThegetconfigcommandretrievesthescriptfromanFTPserver.Thiscommandappearsonly

Configuring NFS 162 Configuring NFS ThenfscommandenablesallkeystrokesechoedfromthetargetdevicetobeloggedtoaremoteNFSserverlocate

Chapter 13: Command Line Interface 163 Configuring Ports Ports Configuration Menu TargetserialportsareconfiguredfromtheCLIusingtheports

Configuring Ports 164 Command Description flowcontrol<none|hw|sw>Portflowcontroltypehw=hardwareflowcontrolsw=Xon/Xoff)detec

Chapter 13: Command Line Interface 165 Command Example admin > ports >config port 1 name ld1 bps 115200 parity odd flowcontrol hw detect tr

Configuring Ports 166 Authentication successful. Port 1: Configuration Saved. Afterenteringthepassword,youhavedirectaccesstoport1,using

Chapter 13: Command Line Interface 167 Inbothcasesabove,port1willhavesshport7000andtelnetport8000assignedfordirectportaccess,

How to - Dominion SX Essentials xix Case 7. Managing User Profiles on DSX 1. Purpose:Tocreate,updateordeleteaDSXuser.2. LoginSXvia

Configuring Services 168 Ports Keyworddelete Command Thekeyworddeletecommandremovesanexistingkeyword.Thesyntaxofthekeyworddeletecommand

Chapter 13: Command Line Interface 169 dpa Command ThepermittedTCPPortRangeis1024‐64510.Whenrunwithoutthemodeparameter,thesystemdi

Configuring Services 170 dpa Command Example ThefollowingexamplechoosestheDPAIPmodeIP:admin > Config > Services > dpa mode IPNot

Chapter 13: Command Line Interface 171 Group Settings: Name: Anonymous Class: Observer Ports:ToconfigureAnonymousgrou

Configuring Services 172 Ifoptionsuppressisʺnoneʺ,authenticationcredentialsareshown(username:password:).configuration > ports > co

Chapter 13: Command Line Interface 173 HTTP Command Thehttpcommandisusedtocontrolhttpaccessandredirection,anddefinetheport.Thesyn

Configuring Services 174 HTTPS Command Example admin > Config > Services > httpsHttps Settings: Enabled : true Port : 44

Chapter 13: Command Line Interface 175 SSH Command Thesyntaxofthesshcommandis:ssh [enable <true|false>] [port value]Thesshcommand

Configuring SNMP 176 Configuring SNMP TheDominionSXserversupportssendingSNMPalertstoapredefinedSNMPserver.TheRaritanSNMPMIBmaybe

Chapter 13: Command Line Interface 177 SNMP Delete Command TheSNMPdeletecommanddeletestraprecipients.ArecipientisanIPaddresswithan

Thisdocumentcontainsproprietaryinformationthatisprotectedbycopyright.Allrightsreserved.Nopartofthisdocumentmaybephotocopied,repr

Case 9. Port Configuration xx Case 9. Port Configuration 1. Purpose:ToconfigureDSXserialportstosetupcorrectserialcommunicationsparamet

Configuring Time 178 Configuring Time Timerelatedconfigurationmodecommandsare:• clock• ntp• timezonelist Clock Command Theclockcomma

Chapter 13: Command Line Interface 179 NTP Command ThentpcommandletstheadministratordetermineifaNetworkTimeProtocol(NTP)servershoul

Configuring Users 180 Configuring Users Thefollowingcommandsprovidedtheadministra torswiththeabilitytomanagerusers:• addgroup• addus

Chapter 13: Command Line Interface 181 Adduser Command Theaddusercommandisusedtomanageinformationaboutaspecifieduser.Thesyntaxofth

Configuring Users 182 Command Example admin > Config > User > deletegroup name unixgroup Deleteuser Command Thedeleteusercommandisus

Chapter 13: Command Line Interface 183 sharing<true|false> Indicatewhetherportaccessissharedwhiletheportisbeingutilized.Comma

Connect Commands 184 Groups Command Thegroupscommandshowsthedetailsofexistinggroups.Thesyntaxofthegroupscommandis:groupsCommand Ex

Chapter 13: Command Line Interface 185 Command Description powerstatus QueryPowerstatusofthisport.powertoggle TogglePowerOn/Offofthi

IPMI Commands 186 Command Description ifconfig Showdetailednetworkconfigurationnetstat Printnetworkconnectionsping Pingaremotesystemp

Chapter 13: Command Line Interface 187 Command Example admin> IPMI > ipmidiscover -t 20 10.0.22.1 10.0.22.10Discovering IPMI Devices :IP

How to - Dominion SX Essentials xxi a. Enterthefollowingcommandtologin:ssh -l admin 192.168.0.192b. Entertheadminusernameandpassw

IPMI Commands 188 Command Description [‐U<username>]Remoteserverusername,defaultisNULLuser.[‐L<privlvl>] Forcesessionpriv

Chapter 13: Command Line Interface 189 Command Description <command> raw‐SendaRAWIPMIrequestandprintresponsei2c‐SendanI2CM

IPMI Commands 190 Command Example Thefollowingcommandallowstheusertogetthechassisstatusandsetthepowerstate.admin> IPMI > ipmi

Chapter 13: Command Line Interface 191 Portnamesupto23charactersaredisplayed.Longerportnamesaretruncatedto22characters,witha$si

Maintenance Commands 192 Maintenance Commands ThemaintenancecommandsareusedbyadministratorstoperformmaintenancerelatedtasksontheDomin

Chapter 13: Command Line Interface 193 Backup Command ThebackupcommandmakesacopyoftheDominionSXconfigurationandwritesthebackuponto

Maintenance Commands 194 Cleareventlog Command Thecleareventlogcommandclearsthecontentsofthelocaleventlog.Thesyntaxofthecleareventlo

Chapter 13: Command Line Interface 195 Thesyntaxofthefactoryresetcommandis:factoryresetCommand Example admin > Maintenance > factor

Maintenance Commands 196 Command Description logoff Forcelogoff(terminate)auserorportsession. Reboot Command Therebootcommandrestarts

Chapter 13: Command Line Interface 197 <passwordpassword>Passwordfortheaboveaccount.[pathpathname] Specifiesthepathtothebacku

Maintenance Commands 198 Upgrade Command Note:inordertoperformanupgrade,thereshouldbeaconfiguredremoteftpserver.Theupgradecommand

Chapter 13: Command Line Interface 199 Userlist Command Theuserlistcommanddisplaysalistofalluserswhoareloggedin,theirsourceIPAddr

Security Commands 200 Banner Command Thebannercommandcontrolsthedisplayofasecuritybannerimmediatelyafterlogin..Thesyntaxofthebanne

Chapter 13: Command Line Interface 201 Command Example admin > Security > Banner> ftpgetbanner ip 72.236.162.171 login raritan password

Security Commands 202 Client Command Example EnableSSLClientCertificates admin > Security > certificate > clientcert enable true Instal

Chapter 13: Command Line Interface 203 Server Command Example InstallUserCertificate admin > Security > certificate > installusercert

Security Commands 204 IPtables Command TheiptablescommandisanadministrationtoolforIPv4packetfilteringandNetworkAddressTranslation(NA

Chapter 13: Command Line Interface 205 iptables Command Examples Iptablescanbeconfiguredinaplethoraofwaysthatisoutsidethescopeofth

Security Commands 206 ViewthecurrentiptablesToviewthecurrentiptablesrule:admin > Security > firewall > iptables --list or admin

Chapter 13: Command Line Interface 207 Kerberos and DSX DSXcanusekerberosauthenticationbyusingthefollowingsteps.Asaresult,Kerberos‐

1 TheDominionSXUserGuideprovidestheinformationneededtoinstall,setupandconfigure,accessdevicessuchasrouters,servers,switches,V

Security Commands 208 DiagnosticTips:• UsethenamecommandinthenetworkmenutosettheFQDNforDSX.• DisableHTTPredirectfromtheservi

Chapter 13: Command Line Interface 209 Command Description idletimeout Setsystemwideidletimeout.inactiveloginexpiry Configurelocallogine

Security Commands 210 Command Description days<value> NumberofdaysbeforeaccountwillexpireforlocalusersoninactivityCommand Examp

Chapter 13: Command Line Interface 211 Lockoutperiod Command Thelockoutperiodcommanddefinesthelockoutperiodoninvalidloginattempts.The

Security Commands 212 Strongpassword Command TheDominionSXserversupportsbothstandardandstrongpasswords.• Standardpasswordshavenorule

Chapter 13: Command Line Interface 213 Strongpassword Command Example ThefollowingexamplesetstheStrongPasswordrulesineffect:• Strongp

Security Commands 214 Portaccess Command Example admin > Security > LoginSettings > portaccess share admin > Security > LoginSetting

Chapter 13: Command Line Interface 215 [timeout<true|false>] Enable/Disableidletimeout.[single<true|false>] Enable/Disablesin

216 TheIntelligentPlatformManagementInterface(IPMIletsyoumanagetheIPMIfunctionsofaremotesystem.Thefollowingtopicsarecoveredin

Chapter 14: Intelligent Platform Management Interface 217 Discover IPMI Devices TodiscoverIPMIserversonthenetwork:1. ChooseIPMI>Dis

Notices 2 Acronym Meaning CLI CommandLineInterfaceCSC CommonSocketConnectionDPA DirectPortAccessHTTP HypertextTransferprotocolHTTP

IPMI Configuration 218 IPMI Configuration IPMIconfigurationletsyoumanagetheIPMIfunctionsofaremotesystem.Thesefunctionsincludeprintin

Chapter 14: Intelligent Platform Management Interface 219 ‐Hhostname  RemotehostnameforLANinterface‐pport  RemoteRMCPpo

IPMI Configuration 220 i2c SendanI2CMasterWrite‐Readcommandandprintresponselan ConfigureLANChannelschassis

Chapter 14: Intelligent Platform Management Interface 221 6. TypeanoptionintheOptionfield.7. TypeacommandintheCommandfield.8. Cl

222 PowerControlletsyoumanagethepowerfunctions.Thefollowingtopicsarecoveredinthischapter:• PowerControl• AssociationsPowerCon

Chapter 15: Power Control 223 2. ClickAdd.ThePortPowerAssociationscreenappears.3. Selecttheportfromthedrop‐downmenuinthePort

Power Strip Configuration 224  Delete a Port Power Association Todeleteaportpowerassociation:1. ChooseSetup>PortPowerAssociationLi

Chapter 15: Power Control 225 2. ClickAdd.ThePowerAssociationGroupsscreenappears.3. TypeanameanddescriptionintheGroupNameand

Associations Power Control 226 Associations Power Control ChoosePowerControl>AssociationsPowerControltoaccessthetooltomanagepowerc

Chapter 15: Power Control 227 Power Strip Power Control ChoosePowerControl>PowerStripPowerControltoaccessthetooltomanagepowerst

Chapter 1: Preface 3 Note:generalinformationthatissupplementaltothetext.

Power Strip Status 228 Power Strip Status ChoosePowerControl>PowerStripStatustocheckpowerstripstatus. CLI Command for Power Control

Chapter 15: Power Control 229 CLIInput Command:associateport1powerstripPowerStr1outlet1 Scenario #2 Port power association - associate

CLI Command for Power Control 230 Scenario #4 Port power association - associate one outlet to two ports Pre‐condition Administratoruserislogged

Chapter 15: Power Control 231 Action EntercommandtoassociatePort1toOutlet1fromPowerStr1.PressEnter.EntercommandtoassociatePort1t

CLI Command for Power Control 232 Action EnterCommandtoeditoutlet1nameofPowerStr1.PressEnter.CLIInput outletnamePowerStr1outlet1n

Chapter 15: Power Control 233 Scenario #1 Configure a DSX port to contain a power strip device (the port is previously connected to a power strip

CLI Command for Power Control 234 CLIInput Command:addpowergroupnameʺTestGroupʺdescriptionʺTestgroupʺ Scenario #2 Add a port to a power

Chapter 15: Power Control 235 Scenario #5 Delete power group Pre‐condition AdministratoruserisloggedinviaCLI.Powerstripdevice(DPX)name

CLI Command for Power Control 236 Pre‐condition AdministratoruserisloggedinviaCLI.PowerStripdevice(DPX)namedPowerStr1isphysicallycon

Chapter 15: Power Control 237 Action Entercommandtosetsequenceinterval.PressEnter.Entercommandtoswitchongroupofoutlets.PressEnt

4 In This Chapter DominionSXOverview...4ProductFeatures...

CLI Command for Power Control 238 Action SelectPortAssociationnamedTarget2ClickonPowerRecycleIntervalandentervalue:PressRecyclebutt

Chapter 15: Power Control 239 Scenario#4 AssociationPowerControl‐RecyclePortAssociation(outletsintheassociationarewithdifferents

CLI Command for Power Control 240 Pre‐condition AdministratoruserisloggedinviaCLI.Administratorisinpowermenu.GroupAssociationnamedGr

Chapter 15: Power Control 241 CLIInput powerdelaysequence2cycle5cyclenodegroupGroup1 Scenario#6 RecycleGroupAssociation(outletsin

CLI Command for Power Control 242 Action EnterCommand.PressEnter.CLIInput powerdelaysequence2cycle5offport3nodegroupGroup1 Scenari

Chapter 15: Power Control 243 Result StatusofPDUshouldcorrectlydisplaythefollowingparameters:PowerConsumptionAveragePowerApparentP

CLI Command for Power Control 244 Pre‐condition AdministratoruserisloggedinviaCLI.Powerstripdevice(DPX)namedPowerStr1isphysicallycon

245 Thisappendixcontainssectionsdescribing:• DSXmodelsandspecifications• Requirementsandtestedbrowserrequirements• DSXhardwarefo

Dominion SX Models and Specifications 246 MODEL Ports Built-In Modem # of Local Ports # of Ethernet Ports Power Supply DSXB‐8‐M 8 Yes 1 1 Si

Appendix A: Specifications 247 MODEL DIMENSIONS (W) x (D) x (H) WEIGHT DSXA‐16 17.32ʺx11.41ʺx1.75ʺ;440x290x44mm 8.28lbs;3.756kgDS

Chapter 2: Introduction 5 Product Features Comprehensive Console Management • RemoteManagement:Access,monitor,administer,andtroubleshoot

Requirements 248 Part Number Description CSCSPCS‐1 1’(0.3m)Cat5eadaptercable(RJ45MaletoRJ45Female)toconnectDominionSXtoRaritanrem

Appendix A: Specifications 249 Requirements Description Approvals CE,FCCPart15ClassA,USandCanadianUL,VCCI‐ARemote Connection Network

Connectivity 250 PLATFORM BROWSER Netscape7.1Slackware10.2 FireFox1.5.0.6FreeBSD6.1 FireFox1.5.0.7 Connectivity Thefollowingtablelis

Appendix A: Specifications 251 Vendor Device Console Connector Serial Connection Sun NetraT1 RJ‐45 CRLVR‐15cable;orCRLVR‐1adapteranda

Dominion SX Serial RJ-45 Pinouts 252 GotothefollowinglinktofindthelatestinformationabouttheDominionSXserialpinouts(RJ‐45).http:/

Appendix A: Specifications 253 RJ-45 (female) DB25 (female) 1 52 6,83 34 15 76 27 208 4 DB25M Nulling Serial Adapter Pinouts

Dominion SX Terminal Ports 254 Dominion SX Terminal Ports AllDominionSXmodels,excepttheDSX16andDSX32,havethesamepinoutsonthetwoDB9M

Appendix A: Specifications 255 DB9M PIN SIGNAL 12 RxD3 TxD4 DTR(H)5 GND67 RTS(H)89 Dominion SX16 and SX32 Terminal Ports A

Dominion SX16 and SX32 Terminal Ports 256 HereissomeadditionalinformationabouttheDominionSX16andSX32TerminalPorts:• Pins1and9are

257 Thisappendixcontains thesystemdefaultsanddirectionsforportaccess. Item Default IPAddress 192.168.0.192SubnetMask 255.255.255

Product Features 6 Strong Security and User-Authentication • SSHv2Support• EncryptionSecurity:128‐bitSSLhandshakeprotocolandRC4encrypti

Dominion SX16 and SX32 Terminal Ports 258 Item Default Serial Ports BaudRate 9600Parity NoneFlowControl NoneUsethefollowinginformatio

259 ThisappendixcontainssectionsdescribingCertificatesandCertificateAuthorityandprovidesdirectionsabouthowto:• InstallDominionSX

Default SX Certificate Authority Settings 260 Default SX Certificate Authority Settings TheServerCertificategeneratedintheDominionSXunitmu

Appendix C: Certificates 261 3. TypeUsernameandPasswordwhenprompted,andlogontotheunit.4. ChoosetheSecuritytabandthenclickthe

Install CA Root for IE Browsers 262 2. ChooseContent>Certificates.TheCertificatesManagerwindowappears.3. Scrollthroughthelistof

Appendix C: Certificates 263 Install Dominion SX Server Certificate for Netscape Navigator ByinstallingtheDominionSXServercertificateinNe

Install Dominion SX Server Certificate for Netscape Navigator 264 3. IntheManageCertificatessection,clicktheManageCertificates...button.

Appendix C: Certificates 265 4. SelecttheWebSitestabandselectthecertificatenamethatisthecommonnameoftheIPaddressoftheDomini

Install a Third-Party Root Certificate 266  VeriSignIncorporated http://www.verisign.com/http://www.verisign.com/Note:SomeCAswillprovide

Appendix C: Certificates 267 9. FindthenameoftheCAwhosecertificateyouareinstalling.TheremaybemorethanonelistingforyourCA.Se

Chapter 2: Introduction 7 Package Contents EachDominionSXshipswiththefollowing:• (1)DominionSXunitwithmountingkit(Rack‐mountkiti

Install a Third-Party Root Certificate 268 5. SendthegeneratedCSRtoathirdpartyCAtogetitsigned.6. CAreturnsaSignedCertificatebui

Appendix C: Certificates 269 Install Client Root Certificate into the DominionSX InorderforClientCertificatestoberecognizedasvalidbyth

Import Certificates for LDAP 270 Install Client Certificate into Internet Explorer InstallingclientcertificateintoInternetExplorermostlyfoll

Appendix C: Certificates 271 3. ClicktheRemoteAuthenticationbutton.4. ClicktheLDAPSCertificateSettingslink.5. FillinIP,username,

Import Certificates for LDAP 272 Import Certificates from Dominion SX via CLI AuserwithAdministratorprivilegescandothefollowingtoimportc

Appendix C: Certificates 273 D4:1D:8C:D9:8F:00:B2:04:E9:80:09:98:EC:F8:42:7EFingerprint(SHA1):DA:39:A3:EE:5E:6B:4B:0D:32:55:BF:EF:95:6 0:18:90

274 ThisappendixcontainssectionsdescribingthestepstoconfigureDominionSXunitsandauthenticationserversforthefollowi ng authenticati

Appendix D: Server Configuration 275 Configure the Dominion SX to Use an IAS RADIUS Server ThetaskstosetuptheDominionSXunittouseanIAS

Microsoft IAS RADIUS Server 276 Add Dominion SX to the client list: 1. FromtheInternetAuthenticationService,right‐clickonRADIUSClientsand

Appendix D: Server Configuration 277 Note:ThisversionofDominionSXdoesnotsupportChallengeAuthenticationProtocol(CHAP).11. Selectthe

3 ToavoidpotentiallyfatalshockhazardandpossibledamagetoRaritanequipment:• Donotusea2‐wirepowercordinanyproductconfiguration.

8 TherearetwowaysofcompletingtheinitialnetworkinstallationoftheDominionSX:• UsingaserialcablewithaVT100/equivalent,suchasa

Cisco ACS RADIUS Server 278 18. EnsurethattheActiveDirectory/LocalaccountfortheuserhasDialInaccessenabledintheiruserprofile. I

Appendix D: Server Configuration 279 5. ClickAuthenticateUsingdrop‐downmenuandselectRADIUS(IETF).6. ClickSubmit.7. ClickInterface

TACACS+ Server Configuration 280 Note:IfthereismorethenoneRadiususerrequiringthesameauthorizationontheDominionSX,theFilter‐Idatt

Appendix D: Server Configuration 281 CiscoSecure ACS TheseinstructionsarewrittenforCiscoSecureACSversion3.2.Note:Refertothefollowing

CiscoSecure ACS 282 2. SelectInterfaceConfiguration.3. SelectTACACS+(CiscoIOS).4. AdddominionsxserviceundertheheadingNewServices.

Appendix D: Server Configuration 283 5. Whenaddingoreditingauserorgroup,thedominionsxservicewillappearundertheheadingTACACS+Set

Active Directory 284 Active Directory MicrosoftActiveDirectoryusestheLDAPprotocolnatively,andcanfunctionasanLDAPserverandauthentica

285 In This Chapter ClientDial‐UpNetworkingConfiguration...285WindowsNTDial‐UpNetworkingConfig

Windows NT Dial-Up Networking Configuration 286 2. ClickNewintheDial‐UpNetworkingdialog.TheNewPhonebookEntrydialogallowsyoutoconfig

Appendix E: Modem Configuration 287  Dialusing‐ModembeingusedtoconnecttoDominionSX;ifthereisnoentryhere,thereisnomodemins

Chapter 3: Installation 9 Pre-Installation Ensurethatyouhavethecorrectcablingreadytoconnecttotheserialconsolesofthetargetserver(

Windows 2000 Dial-Up Networking Configuration 288 5. ClicktheʺAcceptanyauthenticationincludingcleartextʺradiobutton.6. ClickOKtoret

Appendix E: Modem Configuration 289 2. Double‐clicktheMakeNewConnectioniconwhentheNetworkandDial‐UpConnectionswindowappears.3. C

Windows 2000 Dial-Up Networking Configuration 290 4. ClicktheʺDial‐uptoprivatenetworkʺradiobuttonandclickNext.5. Selectthecheckbox

Appendix E: Modem Configuration 291 7. ClicktheCountry/regioncodedrop‐downarrowandselectthecountryorregionfromthelist.8. Click

Windows XP Dial-Up Networking Configuration 292 10. ClickNext.TheNetworkConnectionhasbeencreated.11. TypethenameoftheDial‐upconnect

Appendix E: Modem Configuration 293 4. ClicktheʺSetupmyconnectionmanuallyʺradiobuttonandclickNext.

Windows XP Dial-Up Networking Configuration 294 5. ClicktheradiobuttonbeforeʺConnectusingadial‐upmodemʺandclickNext.

Appendix E: Modem Configuration 295 6. TypeanametoidentifythisparticularconnectionintheISPNamefieldandclickNext.

Windows XP Dial-Up Networking Configuration 296 7. TypethephonenumberfortheconnectioninthePhonenumberfieldandclickNext.8. Typey

Appendix E: Modem Configuration 297 9. ClickthecheckboxbeforetheappropriateoptionbelowthefieldsandclickNext.10. ClickFinish.11.

Hardware Installation 10 4. ConnecttheotherendofthenetworkLANcabletothenetworkcardintheinstallationcomputer.5. Connectthefemal

298 Thefollowingtablesdescribeproblemsandsuggestedsolutionsfortheproblems.In This Chapter PageAccess...

Appendix F: Troubleshooting 299 Problem Solution DNSError/ServerUnreachableWhenattemptingtoconnecttotheDominionSXURLusingMicrosoft

Login 300 Problem Solution LoginFailure FirewallsmustbeconfiguredtoallowconnectionsusingtheDominionSXconfigurableportnetworkparame

Appendix F: Troubleshooting 301 Port Access Problem Solution PortAccessRefresh TheunitdoesnotautomaticallyrefreshthePortAccesslist.

Upgrade 302 Problem Solution InsufficientPartitionSize Thelatest3.1.0.5.7firmwareisspecificallyapplicabletoDominionSXmodels‐DSX‐16

Appendix F: Troubleshooting 303 

Upgrade 304  Problem Solution Upgradefailedindual‐LANunitsWhileupgradingdual‐LANunitsfrom2.5.xversions,anerrormessageappearsstati

Appendix F: Troubleshooting 305  Modem Problem Solution LoginFailure TheunitsupportsWeb‐browseraccessthroughthemodematconnectionsp

307 A AboutSecurityProfiles•97AcceptaCertificate(Session‐Based)•264,267AccessingTelnetfromaWindowsPC•133AccessingtheDominion

Chapter 3: Installation 11  Windows98/2000/NTsystem:route add 192.168.0.192 <INSTALLATION COMPUTER IP ADDRESS>.[Example:route add

Index 308 ConfiguringAuthorizationandAuthentication(AA)Services•147ConfiguringEncryption•106ConfiguringEvents•150ConfiguringIPFor

Index 309 EnablingClientCertificateAuthentication:•94EnablingFirewallProtection•144EnablingSecurityProfiles•144EnablingTelnet•

Index 310 LaunchingRSConWindowsSystems•81LDAPConfigurationMenu•148LEDState•12ListportsCommand•194LocalAuthentication•86Loca

Index 311 RemoteServices•147RemoveanAcceptedCertificate•267RemoveanAcceptedCertificateInInternetExplorer•265RemovingaUser‐Ad

Index 312 W WelcomeBannerConfiguration•144Windows2000Dial‐UpNetworkingConfiguration•292WindowsNTDial‐UpNetworkingConfiguration•28

Hardware Installation 12 SeeSecurity(onpage82)andAppendixC:Certificates(seeʺCertificatesʺonpage259)forinformationaboutinstalling

Chapter 3: Installation 13 Loginwiththedefaultusernameadminandpasswordraritan.Usealllowercaseletters.7. Afterlogin,theDominion

Hardware Installation 14 Network Access 1. Ensurethattheinstallationcomputerhastheroutefor192.168.0.192andthatitcancommunicatewith

Chapter 3: Installation 15 Inthisexample,9isthetimezonecode(Step3)andʺ2007‐02‐0509:22:33ʺthedate/timestringintheformatʺYYYY‐M

Hardware Installation 16 To add a user 1. Typeadduser user <user name> fullname <full name> group <group name> password <pas

17 Afterthehardwareinstallation,performtheinitialsoftwareconfiguration.DothisbyloggingontotheDominionSXfromeitherabrowserorth

4 InRaritanproductsthatrequirerackmounting,followtheseprecautions:Operationtemperatureinaclosedrackenvironmentmaybegreaterthan

Dominion SX Initial Software Configuration 18 Important:Afteryoucompleteeachconfigurationtask,youmustreturntotheSetuptabtoperformt

Chapter 4: Initial Software Configuration 19 Date / Time Configuration 1. ChooseSetup>Date/Time.TheDate/TimeConfigurationscreenap

Dominion SX Initial Software Configuration 20  SynchronizewithNTPServer‐ClickthisradiobuttonandentertheIPaddressofaNetworkTimeP

Chapter 4: Initial Software Configuration 21 Note:Yournetworkadministratorusuallyassignsthevaluesforthefollowingparameters:2. Type

Deployment 22 7. ClickOK.DominionSXdisplayseitheraconfirmationorerrorscreen.1. ClickOKwhentheconfirmationwindowappears.Aftert

Chapter 4: Initial Software Configuration 23 Modem Connection (Optional) ToconfiguretheDSXforamodemconnection:1. Connectaphonelineto

24 ThischapterexplainshowtoconfigurethebasicnetworksettingsfortheDSX,andhowtoconfigurethevariousaccessprotocols(SSH,telnet,e

Chapter 5: Network Settings and Services 25  Give the Dominion SX a Name TogivetheDSXunitanametohelpidentifyit:1. Typeanameinthe

Configuring the Network Service Settings 26 Configuring the Network Service Settings Thetablebelowindicatesthedefaultsettingsforthevarious

Chapter 5: Network Settings and Services 27 To change any of these network service settings: 1. ChooseSetup>Services.TheNetworkService

v Contents Safety Guidelines 3 Rack Mount Safety Guidelines 4 How to - Dominion SX Essentials xv Case1.UpgradingDSXFirmwareviaWebBrowser.

Configuring Modem Access 28 Configuring Modem Access YoucanaccesstheDSXviaamodem.Tosetthisup:1. ChooseSetup>Modem.TheModemSet

Chapter 5: Network Settings and Services 29 2. GototheIPForwardingpanelandclickthecheckboxlabeledEnableIPForwarding.3. ClickOK.

Configuring IP Forwarding and Static Routes 30 2. GototheStaticRoutesListandclickAddNewRoute.TheStaticRoutescreenappears.3. Ona

Chapter 5: Network Settings and Services 31  Netmeansthisrouteitforasubnet.9. ClickOK. Delete a Static Route Todeleteastaticrout

32 Thischapterexplainshowtocreateandmanageuserprofilesandusergroups.In This Chapter ManagingUserProfil es...

Chapter 6: User Profiles and Groups 33 2. TheUserListscreenshowseveryuserprofilecreatedtodate,andforeachonegivesthe: Username

Managing User Profiles 34 3. TypealoginnameintheUsernamefield. ThisisthenametheuserenterstologintotheDSX.Thisfieldisrequire

Chapter 6: User Profiles and Groups 35 2. ClicktheUsernameoftheprofileyouwanttoedit.TheEditUserscreenappears.Itlooksexactlylik

Managing User Groups 36 Display a List of User Groups Todisplayalistofexistingusergroups,chooseUserManagement>UserGroupList.TheG

Chapter 6: User Profiles and Groups 37 2. ClickAddNewUserGroup.TheNewGroupscreenappears.

Contents vi PackageContents ...

Managing User Groups 38 

Chapter 6: User Profiles and Groups 39 3. TypeagroupnameintheGroupNamefield. Youcanenteranynumberofcharactersuptoamaximum

Managing User Groups 40  Operator Thisisthedefault.UsersassociatedwiththeOperatorclasshaveread/writeaccesstotheconsolewindow,an

Chapter 6: User Profiles and Groups 41 3. SelectDelete.Youarepromptedtoconfirmthedeletion.4. ClickOK.Theselectedusergroupsarede

42 ThischapterexplainshowtoconfigureRADIUS,LDAP,andTACACS+authentication.Tip:Ifyouaresettingupremoteauthentication,itisagood

Chapter 7: Remote Authentication 43 2. IntheRADIUSpanel,clicktheRADIUSbuttontoenableRADIUSauthentication.3. UnderPrimaryRadius,t

Configuring LDAP 44 3. UnderPrimaryLDAP,typetheIPaddressoftheLDAPserverandtheportitislisteningon(defaultis389)intheIPAddre

Chapter 7: Remote Authentication 45 Configuring TACACS+ YoucanusetheTerminalAccessControllerAccess‐ControlSystemPlus(TACACS+)toauthen

46 PortconfigurationallowsAdministratorstodefinetheserial/consoleportsettingsinordertocommunicatewithremotetargetdevices.Note:Yo

Chapter 8: Port Configuration and Port Access Application 47 Port Keywords Youcancreateportkeywordsandassociatethemwith:• Events• Loc

Contents vii ModifyaUserGroup...

Port Configuration 48 Port Configuration Toconfigureoneormoreports:1. ChooseSetup>PortConfiguration.ThePortConfigurationscreenap

Chapter 8: Port Configuration and Port Access Application 49 TheEditPortscreenappears.3. Makesuretheportvaluesmatchthetargetsystem

Port Configuration 50 6. Selecttheescapemode.ThedefaultisNone.TheescapesequenceonlyaffectstheCLI(CommandLineInterface).Whenente

Chapter 8: Port Configuration and Port Access Application 51 Note:AnonymousaccessshouldbeenabledforDPAtosucceed.11. ClickOK. Direct

Anonymous Port Access 52 Anonymous Port Access AnonymousportaccessallowsuserstoaccessDPAconfiguredportswithoutenteringapassword.Toen

Chapter 8: Port Configuration and Port Access Application 53 Note:ASecuritypopupscreenappearsonlyifyouusedhttpstoconnecttotheRSC.

Raritan Serial Client Requirements for Java 54 Java Applets and Memory Considerations Usually,abrowserbasedRSCdoesnotneedtomakeanychange

Chapter 8: Port Configuration and Port Access Application 55 Values - Syntax Description Default/Comments ‐Xms<Size>inbytes Setsthein

Raritan Serial Console Interface 56 CommandExample:-Xms128M -Xmn128M -Xmx512MRefertothefollowinglinksforadditionalinformationandforal

Chapter 8: Port Configuration and Port Access Application 57 Emulator 1. ClicktheEmulatordrop‐downmenutodisplayalistoftopics.IMPORTA

Contents viii InstallaUserKey ...

Raritan Serial Console Interface 58 Settings Note:TerminalemulationsettingsaresetwiththeportbyanAdministratorusingtheSetup‐>Port

Chapter 8: Port Configuration and Port Access Application 59 5. AccepttheBackspaceSends:defaultofASCIIDELorchooseControl‐HfromtheBa

Raritan Serial Console Interface 60 Display Settings 1. ReturntotheEmulatormenu,chooseSettingsandthenclicktheDisplaytab.2. ClickDe

Chapter 8: Port Configuration and Port Access Application 61 5. Ifyouwanttochangethesizeofthefont,checktheLockFontSizeboxandcho

Raritan Serial Console Interface 62  BackgroundColor8. ChooseoneofthefollowingfromtheEncodingdrop‐downmenu: US‐ASCII ISO‐8859‐1

Chapter 8: Port Configuration and Port Access Application 63 Get Write Access OnlyAdministratorsandOperatorscangetwriteaccess.Theuserwi

Raritan Serial Console Interface 64 Connected Users TheConnectedUserscommandallowsyoutoviewalistofotheruserswhoarecurrentlyconnecte

Chapter 8: Port Configuration and Port Access Application 65 Edit UsetheCopy,Paste,andSelectAlltextcommandstorelocateand/orre‐useimp

Raritan Serial Console Interface 66 Tools ClicktheToolsdrop‐downmenutodisplayalistoftopics.Start Logging TheStartLoggingfunctionall

Chapter 8: Port Configuration and Port Access Application 67  Whenanexistingfileisselectedforlogging,datagetsappendedtothecontents

Contents ix DisplayingaConfigurationReport...

Raritan Serial Console Interface 68 Send Text File 1. OntheToolsmenu,clickSendTextFile.ASendTextFilescreenappears.2. Openthedirec

Chapter 8: Port Configuration and Port Access Application 69 Chat WhenusingbrowseraccessoverSSL,aninteractivechatfeaturecalledChatpro

Standalone Raritan Serial Console Installation 70 Help HelpTopicsincludeonlineassistanceforoperatingtheRaritanSerialConsoleandreleasei

Chapter 8: Port Configuration and Port Access Application 71 Standalone Raritan Serial Client Requirements Thefollowingrequirementsmustbemet

Standalone Raritan Serial Client Requirements 72 2. GotoAdvancedandopenEnvironmentVariables.3. IntheSystemvariablessection,clickNew

Chapter 8: Port Configuration and Port Access Application 73 5. ClickOK.6. SelectthePATHvariableandclickEdit.7. Add%JAVA_HOME%\bin

Standalone Raritan Serial Client Requirements 74 8. ClickOK.9. SelecttheCLASSPATHvariableandclickEdit.10. EnsuretheCLASSPATHVariabl

Chapter 8: Port Configuration and Port Access Application 75 Setting Linux OS Variables IfyouwanttosetJavaforaspecificuser,openandedi

Installing Standalone RSC for Windows 76  Thesecommandscaneitherbetypedattheterminaleachtimeyoulogon,oryoucanaddthemtoyour.b

Chapter 8: Port Configuration and Port Access Application 77 Note:ThestandaloneversionofRaritanSerialConsole(RSC)isavailablefromtheR