Will USB devices plugged in to a built-in USB hub on my Keyboard or Monitor work?
Raritan KVM switches are only capable of passing Keyboard, Mouse and Video signals. As a result, other USB devices connected to these hubs will not work.
I have a Digital Alpha running UNIX and want to use a standard PS/2 keyboard. How will that affect operation with my switch?
Merely connect a Raritan converter (AUKME) to any Alpha running UNIX and all computers will operate flawlessly with a standard PS/2 keyboard.
I have Suns and/or Macs in addition to PCs. Can I control them all from a single keyboard, mouse, and monitor?
Yes. Use Raritan's Sun or Mac Guardian converter (APSSUN or APSMAC) to convert the Sun and Mac keyboard and video ports to PS/2 keyboard and mouse and VGA video. APSSUN includes the built-in mapping of all the Sun L-keys to PS/2 F-keys.
I have a serially controlled device (i.e. Unix server, hub). Can I use my KVM switch to access and control this device?
Yes. Raritan's ASCII Terminal Converter (AUATC) adapter will convert the RS-232 connection to PS/2 and VGA video. Connect the AUATC to your serially controlled device, and then connect to your Raritan KVM switch with CCPdd or UTP Cable for access up to 650 feet.
I just received a Raritan product and I need help installing it. Where can I go to get help?
Raritan's technical support group can provide you with assistance over the phone or via e-mail. It does not make any difference where you purchased your product; Raritan will provide technical support. Please have your packing slip handy to verify the parts you received. Also, a general knowledge is very helpful to you when calling, so take a few minutes to familiarize yourself with the installation manual.
Can I use a flat screen monitor?
The monitor needs to be VGA, with an HD15 connector, and support the resolution and refresh rate of the video settings on the target servers. Make sure the LCD monitor will work when connected directly to all the PCs in a stand-alone mode.
What are the monitor resolution and refresh rates for Raritan KVM switches?
All Raritan KVM switches except SwitchMan operate up to 1600 x 1200 at 60Hz. SwitchMan operates at 1600 x 1200 at 70Hz.
Can I use a touch-screen monitor with my Raritan KVM switch?
No. Most touch-screen monitors use a serial connection to interact with the PC. Currently, Raritan's KVM switches do not support the use of this style monitor.
Is there any software requirement for PCs connected to a Raritan KVM switch?
No. The Raritan KVM switch does not require any software to be loaded or operated, it is 100% software independent.
My computer has USB connectors. Can I connect it to a Raritan KVM switch?
Yes, plug a APSUSB adapter into one of the USB computer ports to convert PS/2 keyboard and mouse. Plug the KVM switch cables into the APSUSB and access your USB computer just like a PS/2 PC.
If the video appears blocky and distorted when viewing your target remotely through the KSX, you may need to change your video preferences. This can be accessed through RRC !V Connection Properties. Disable the Auto Select Color option (default) and manually set the color depth to 15 bit. More information is available in the DKSX User Guide under the Raritan Remote Client section.
The console screen on serial targets attached to my DKSX serial port does not have properly-aligned text - the text is all over the screen and barely legible.
Check to make sure the serial targets are set for VT100 terminal type. Next, ensure you have used appropriate serial cable/adapter as suggested by Raritan, and confirm that your data communication parameters are matched on the DKSX serial port configuration as per target requirements.
Why do I get the error "Raritan Device was not found" when I double click on the IP profile of RRC to access the Dominion KSX?
This error message indicates that RRC and KSX are not communicating on the same port. The Factory default port is 5000 and can be found under network configuration. Right click on RRC profile and select "Modify profile" to verify which port is configured. Then, contact your administrator to obtain current port number being used by KSX and make appropriate change to your profile.
Why do I get the error "Unexpected communication error" when I try to access the KSX using web browser/RRC?
This error message can occur for 3 possible reasons.
1. The KSX is configured with a private key which is not matching the
local RRC profile. Contact the system administrator to verify private
key status and configure it accordingly on your local RRC profile.
2. The KSX is under control of a Command Center. As a result, direct access
is disabled. Contact administrator to verify this status.
3. Access Control List (ACL) is activated and you are trying to access
the unit from a restricted IP/subnet. Contact administrator to verify
if this is the case.
Why is the text misaligned and barely readable on
my serial devices console screen?
Check to make sure serial targets are set for VT100 terminal type. DKSX has VT100
terminal emulation and it only supports VT100 terminal type.
Also, make sure you have used the appropriate serial cable/adapter recommended
by Raritan and make sure data communication parameters are matched on
DKSX serial port configuration as per target requirement (see Configuring
Target Serial Devices section in Chapter 2 of KSX User Manual).
Why is there a large amount of UDP broadcast activity
on port 5000 and 5001?
When RRC is launched, it sends out UDP broadcast on port 5000 to discover Raritan
devices. If there is a Raritan device on the network, it will respond back
with broadcast on UDP 5001. While this happens, you will see browsed (sphere
like icon) profile. To prevent the UDP Broadcast, click on the globe like
icon on RRC icon menu to turn off browsing. Note that this action will work
only for this session. The Next time a user launches RRC, it will send out
broadcast again because this function is on by default.
Why do I get the error "Raritan Device was not found"
when I double click on the IP profile of RRC to access the Dominion KX?
This error message indicates that RRC and KX are not communicating on the same
port. The factory default port is 5000 and can be found under network configuration.
Right click on RRC profile and select “Modify profile” to verify
which port is configured. Then, contact your administrator to obtain current
port number being used by KX and make appropriate change to your profile.
Why do I get the error “Unexpected communication
error” when I try to access the KX using web browser/RRC?
This error message can occur for 3 possible reasons.
1. The KX is configured with a private key which is not matching the
local RRC profile. Contact the system administrator to verify private
key status and configure it accordingly on your local RRC profile.
2. The KX is under control of a Command Center. As a result, direct access
is disabled. Contact administrator to verify this status.
3. Access Control List (ACL) is activated and you are trying to access
the unit from a restricted IP/subnet. Contact administrator to verify
if this is the case.
Why is there a large amount of UDP broadcast activity
on port 5000 and 5001?
When RRC is launched, it sends out UDP broadcast on port 5000 to discover Raritan
devices. If there is a Raritan device on the network, it will respond back
with broadcast on UDP 5001. While this happens, you will see browsed (sphere
like icon) profile. To prevent the UDP Broadcast, click on the globe like
icon on RRC icon menu to turn off browsing. Note that this action will work
only for this session. The Next time a user launches RRC, it will send out
broadcast again because this function is on by default.
When I press Pause/Break + A on RRC, it does not send break
signal to my attached Sun server. The keyboard and mouse work fine, but
it does not send break. What could be wrong and how can I address it?
Create keyboard macro for Pause/Break + A and see if that work. If sun machine
does not respond to break signal, check to verify that the line 'KEYBOARD_ABORT=disable'
is commented in /etc/default/kbd file. If this line is not commented, It
will disable keyboard abort sequence. Comment this line out to enable it.
To enable it, you can either put comment (#) in front of this line in /etc/default/kbd
file and perform 'kbd -i' command at shell prompt or you can directly execute
command 'kbd -a enable'.
My screen freezes when I try to access a server connected
to a Dominion KX and I cannot ping the Dominion KX. However, a reboot
of the Dominion KX returns proper function.
This is may be the result of network dropout.
Make sure the network speed setting for both the Dominion KX and the network switch port it is connected to is set to 100MB Full duplex.
When trying to access Dominion KX via web browser, I keep
getting error message "Unexpected communication error." How
can I resolve this issue?
This error message may be a result of one of the following:
1. The DKX is configured with a Private Key. Verify that the local RRC
profile is also configured with a Private Key. Contact your System Administrator
to verify how the Private Key is configured, and configure it accordingly
on your local RRC profile.
2. The DKX is under control of a CommandCenter unit. In this case, direct
access is disabled.
3. The DKX is configured with IP ACL and your IP/subnet is not permitted
access to DKX. Contact your administrator to verify if this is the case.
When accessing Dominion KX using a Web browser or
RRC, I get the error message: "Raritan Device was not found"
when I double-click on the IP profile.
This message indicates that the RRC and DKX are not communicating on the same port. The factory default port under Network Configuration is 5000. Right-click on the RRC profile and select "Modify profile" to verify which port is configured. Contact your System Administrator to obtain the correct port number that is being used by DKX and make the appropriate changes to your profile.
What keyboard combination should I use for a ‘Send
Break’ signal to an attached Sun server (connected to KX) with DCIM-SUN/SUSB
CIM from RRC or locally?
Using a PS2 keyboard locally or remotely, use the Pause/Break + A key –
which is the equivalent to a STOP+A key on a Sun keyboard – to send
a break and drop Sun to OK (also referred as OBP - Open Boot Prom) prompt.
Where can I find information on LDAP and LDAPS for KX101?
KX101 does not support Secure LDAP (LDAPS). For information on LDAP authentication, see: Implementing LDAP Remote Authentication, under General Settings for Remote Authentication, pages 38-39 in the Dominion KX User Guide. The KX User Guide can be found on the Raritan website at Support > Product Documentation > Dominion KX.
Does Dominion KX101 support tiering of switches?
No, Dominion KX101 only supports direct connection to a single target server. It is not supported under tiering environments with other switches.
What is the voltage input for Power over Ethernet on the KX101?
Dominion KX101 supports Power over Ethernet with an input voltage of 48V. The input voltage range is 36V to 57V.
Are there any limits to what I can name my device and ports when administering my KX101?
Device names and port names are limited to 15 characters in length. Only alphanumeric characters are supported and the name may not begin with a numeral. The only special characters supported are dashes and underscores.
Does Dominion KX101 support Macintosh clients?
No, Dominion KX101 does not support Macintosh servers or clients. The KX101 supports Windows, Solaris and Linux servers.
Where can I get a copy of the MIB for Dominion SX?
Click HERE to get the SNMP MIB for Dominion SX - supported in Dominion SX version 2.2 and higher. (MIB last updated on 11/10/06)
I just upgraded my Dominion SX firmware. Why doesn’t
the console window pop up after logging in through the web interface and
clicking on a port?
The Dominion SX firmware upgrade is comprised of 2 components, the server portion
(MpAdmin) and console portion (Raritan Console). Check if the Raritan Console
portion of the upgrade was completed. Apply the Raritan Console upgrade
to resolve this issue.
When I SSH into Dominion SX, I am unable to log in, even when I use a local account that I know works through the web/GUI interface.
The initial login name for Dominion SX over SSH interface is dominion (no password). Once this account is accessed you will see the "Welcome to Raritan Dominion Server" message and be prompted to enter a username. At this prompt, type the account that exists locally on the SX or the remote account (this assumes that the SX unit is configured with remote authentication information).
My Dominion SX has just been configured with a network address and I can successfully ping the SX IP, but when I try to access it using a Web browser, the message reads "Page cannot be found or server error, please contact System Administrator".
Check your Web browser settings and confirm that a proxy server is being used. If so, click on the checkbox to 'Bypass local addresses or configure DSX IP in the exception list.'
Next, make sure the Web browser has 128-bit cipher strength. From the Help menu, click on "About" to find this information.
When I select the "Send Break" option from the Emulator menu in Raritan Console (on my DSX), it does not send a break to my Sun server. What could be wrong and how can I address it?
If the SUN machine does not respond to the break signal, verify that the line 'KEYBOARD_ABORT=disable' is commented out in the /etc/default/kbd file (on the Sun machine). If this line is not commented out, it will disable a keyboard abort sequence; comment out this line to enable the sequence.
Is there any software requirement for PCs connected to Dominion SX?
Depends. For access using a web-browser, the Dominion SX does not require any
software to be loaded on the client; the browser does have to be Java enabled.
it is 100% software independent. When using an SSH client, the customer
has to provide an SSH client. In some operating systems, like Linux, an
SSH client is included in the distribution. Also, OpenSSH.org has an SSH
client.
How can I consolidate the sites where I have a Dominion SX installed?
Raritan's CommandCenter is designed specifically to provide centralized management.
It is the ideal solution if you are looking to consolidate management of
devices such as Dominion SX and other Raritan network-based products.
Is Raritan new to the secure console server market?
No. On the contrary, Raritan has been in the secure console server business since
August 2002, following our acquisition of Arula Systems from Hewlett-Packard.
Will there be other models in the Dominion SX family?
Yes. Additional models of the Dominion family will be available in the future.
Is the Ethernet port on the Dominion SX unit 10/100Mbps auto sensing?
Yes
Does Dominion SX support RS422 and RS485?
No. Currently Dominion SX supports only asynchronous RS232 (also commonly called
serial, even though serial is a broad term that covers more than RS232).
RS 422 and RS485 are used in industrial automation and other markets. Dominion
SX is currently designed for connection to serially managed servers and
other devices typically found in the data-center and server rooms. This
includes serially controlled power strips like Raritan's line of remote
power control units.
Do I need to be a Unix expert to sell or install a Dominion SX?Is it easy to install?
Not at all. Dominion SX is the easiest to install of all the secure console servers
on the market. From power-up, typical time for installation is less than
3 minutes, with no need to edit files and use the command-line. Dominion
SX does not require an external server to operate.
I have a server/serially managed device that is more than 300 feet from the Dominion SX -how do I connect?
You will need to purchase a 3rd party RS232 to RS422/485 converter for each end (two units total)-one at the Dominion end and one connected to the device.
Does Dominion SX provide an integrated interface that allows you to view all the Serial devices that are connected?
Yes, Dominion SX provides a single, consolidated view of all serial devices via
one-sign-on. A single IP address gives access to all connected serial devices
while any Java-enabled Web browser provides VT100/ANSI terminal emulation.
Or, use an SSH client.
Can I open multiple windows and "tile" to monitor multiple servers and other IT equipment?
Yes, you may monitor and "tile" as many windows as there are serial ports on the Dominion SX. For example, up to 32 serial ports per Dominion SX32 unit.
I manage many servers. How do I select a server to connect to?
From a browser, a simple menu provides the user-assigned name of each server.
Users simply click on a server to connect to its console port. When using
SSH/telnet, the user gets a list of ports they are authorized to connect
with when they log in.
As a user, do I see all servers connected to a Dominion SX?
No. Each user sees only a list of servers they are authorized to manage/view. The administrator of the Dominion SX sets up the access privileges to each server.
Does Dominion SX work with Raritan's CommandCenter™?
Yes, Dominion SX is deployable as part of an enterprise-wide management solution
with Raritan's CommandCenter™. Hundreds of Dominion SX units can be
managed via CommandCenter.
Is the modem used only for administering the Dominion SX itself?
No. Unlike other products in its category, Dominion SX offers modem access to
administer the box AND get to the target servers.
Is a modem standard on any Dominion SX models?
Typically, Dominion SX Models with 16 or more serial ports include a built-in
56K modem. Competitors charge for an additional PCMCIA modem. Other models
have a dedicated modem port via a DB9-Male connector.
What level of control does Dominion SX have over attached target servers?
The remote user has direct command line access and total control of target devices
for maintenance, administration, troubleshooting, and even rebooting. User
rights are only restricted by their log-on privileges on Dominion SX and
the server itself.
What is the MTBF for the power supply in the Dominion SX?
350,000 hours. But, keep in mind that the life of a power supply depends on environmental factors like temperature, humidity, variation in power, and other factors.
What is the ESD (electro-static discharge) protection on the Dominion SX serial ports?
15KV (Kilo volts)
Why do I need to use a serial adapter to connect to some servers?
While EIA published a standard for RS232 on DB25 and DB9 connectors, there is
no standard for RS232 on RJ45. Also, some manufacturers have chosen not
to follow the pin out assignments of the EIA on DB25 and DB9 connectors.
Is the Dominion SX unit SUN "break-safe"?
All Dominion SX units are SUN "break-safe" for use with SUN Solaris.
I have lost my Admin password to the Dominion SX. Is there a back door or secret password?
For security reasons, Dominion SX does not have any factory default username or
password. There is no back-door password. The only option is to restore
the unit to its factory default settings and create the Admin username and
password again. A hardware reset function to restore the unit to factory
default facility is provided.
Does Dominion SX include the 19" rack mount kit or is there an extra charge for this option?
Dominion SX comes standard with a complete ready-to-install 19" rack mount
kit on the models with 16 or greater serial ports. Some competitors charge
extra for a rack mount kit. On models with less than 16 ports a rack mount
kit is available as an option.
What remote access connection methods can Dominion SX accommodate?
Dominion SX provides multiple choices for remote access. These include: Internet,
LAN/WAN, or dial-up modem. That means servers can be accessed both in and
out of band so remote access to mission critical target servers is always
available-even if the network is down.
Which ports need to be open on the corporate firewall for a secure console session using Dominion SX?
Port 443 (for https); optionally port 80 (http) for user sessions. For units running
software version 2.2 or higher, port 51000 (or other port between 1024-65536).
On software releases PRIOR to firmware 2.2 (2.0Bx or 2.1.x) either port
23 or a user-designated port between 2000 and 2400. When using SSH, port
22 needs to be open.
How do I get access to the operating system of the Dominion SX?
Dominion SX is a secure appliance. Therefore, NO access is possible to the operating
system.
I have a few serial devices located a distance away from my server closet and the Dominion SX. Can I connect these devices to my Raritan switch?
Yes. EIA RS232 specifications defined in the 1970s recommend that the maximum
distance serial devices be 30 feet (10 meters). However, with good cables,
no patch panels, and lower baud rates, customers report success up to 200
feet.
How do I upgrade the software on my Dominion SX?
Use the Administrator option for Upgrade from a menu. The upgrade is done over
the Ethernet port of the Dominion SX. Access to an FTP server is required.
Are updates to Dominion SX software free?
Yes. Currently all software upgrades are free.
Does Dominion SX require any additional client software?
No. Dominion SX is truly "Plug-and-Play" making installation quick and
set-up easy. It is not necessary to buy any additional client software or
hardware. In addition, no special networking equipment or design is necessary.
What code-sets does the terminal emulator in Dominion SX support?
Dominion SX supports VT100/ANSI with the following code-sets:
US-ASCII ((ISO 646)
ISO 8859- (Latin-1)
ISO-8859-15—
(Latin -9)
What is the name of the terminal emulation package included with Dominion SX?
RaritanConsole
Can I use Dominion SX over a VPN connection?
Yes, Dominion SX fits into most any network configuration utilizing TCP/IP. Set
up the VPN (typically IPSec) connection then start the web-browser and enter
the URL for the Dominion unit. The session to the Dominion runs transparently
over the VPN tunnel.
The Dominion SX uses the Web browser to access serial devices.
What are the advantages of Java-enabled Web browser access?
For many Solaris/Unix/Linux system administrators, the de facto standard for accessing
serial hosts is SSH. However, the SSH clients available for Unix/Linux do
not support Apple Macintosh. Additionally, Java-enabled browsers are available
on many platforms, including PDAs and handheld PCs. The easy "point-and-click"
access offered by Dominion SX allows administrators secure access from any
Java-enabled Web browser.
I need an IP-enabled console switch. Now that Dominion SX support local (direct) Port access, beginning with release 2.2, by using the AUATC, can I connect a Dominion SX to the Paragon network, instead of using an SCS232 Console Switch?
Yes. Connect the AUATC to the Paragon switch, and connect the AUATC (DB-25-Male connector) to the Dominion SX (DB9-Male connector) using a DB25-female to DB9-female cable. Then Enable the local port access feature on the Dominion SX; ensuring that the communication parameters (baud rate, parity, etc.) matches between the AUATC and the Dominion SX.
What Authentication mechanisms does the Dominion SX support?
Local database, RADIUS, LDAP/S, TACACS+, Active Directory.
What Authorization mechanisms does the Dominion SX support?
Local database, RADIUS, LDAP/S, TACACS+, Active Directory.
Can the Dominion SX support Authorization at a per port level?
Yes. Dominion SX can support Authorization at a per port level !V via Local database, RADIUS, LDAP/S, TACACS+, Active Directory.
Does Dominion SX support SNMP?
Yes. Dominion SX supports SNMP traps via the Raritan Enterprise MIB.
Does Dominion SX support syslog?
Yes. Dominion SX supports syslog !V to primary and secondary servers.
Can I log every keystroke of a session (input from user and response from a server/device) with a server?
Yes. Dominion SX supports logging over NFS.
Does Dominion SX support telnet?
Yes. Dominion SX supports enabling of the telnet daemon on the Dominion SX unit. Because telnet sends all information “in the clear”, enabling telnet is at the customers own discretion, and telnet is disabled by default when the unit ships from the factory. Raritan strongly suggests the use of SSH as a safer alternative to telnet, since all data is encrypted, including the login sequence.
Can I send an intentional “break” signal to the SUN Solaris server when using SSH?
Yes.
Can I send an intentional “break” signal to the SUN Solaris server when using a Web browser?
Yes.
Can I send an intentional “break” signal to the SUN Solaris server when using telnet?
Yes.
Can I get the buffered off-line data from a seral port when using SSH?
Yes.
Can I get the buffered off-line data from a seral port when using telnet?
Yes.
Can I get the buffered off-line data from a seral port when using a Java-enabled web-browser?
Yes.
Does Dominion SX support local (direct) port access for “crash-cart” applications in a data center?
Yes. Beginning with release firmware revision 2.2, Dominion SX supports local port access. Feature is disabled by default from the factory. Default parameters are 9600-N-8-1. The local port on the Dominion SX 4/8/16/32 is a DB9-Male.
Can I upgrade my SX16 or SX32 unit from December 2003 to firmware 2.2 and take advantage of the local port access feature?
Unfortunately not. The local port access feature on the Dominion SX required a hardware modification to the SX16 and SX32 units. A return to factory is required. Please contact Raritan Support to see how the unit can be upgraded to allow you to take advantage of this feature. However, all SX 16/32 units shipped after August 2 2004 have the hardware modifications made to enable use of this feature with Dominion SX firmware revision 2.2 or higher.
Can I upgrade my SX4 or SX8 unit from January 2004 to firmware 2.2 and take advantage of the local port access feature?
Yes. All SX4 and SX8 units, when upgraded to firmware revision 2.2 will allow use of this capability. Just enable the local port access option.
What are the pin-outs of the Dominion SX RJ45 serial ports?
Dominion SX Serial Pinouts
The RJ45 connector on the rear of the unit has the following
pinout:
RJ45 PIN
SIGNAL
1
RTS
2
DTR
3
TxD
4
GND
5
Signal GND
6
RxD
7
DSR
8
CTS
What Web browsers do have you tested with? Note that not all web-browsers and SUN JRE behave the same in all languages and operating system versions, so there may be some differences or compatibility issues in some geographies. Some additional testing has been done with Fedora Core 2. Other browsers, for example Mozilla Firefox may work as well, but are not officially tested.
Browser Requirements
PLATFORM
BROWSER
Netscape 7.0
Win 2K - SUN JRE 1.4.2
Netscape 7.1
Win 2K - SUN JRE 1.4.2
Mozilla 1.5
Win 2K - SUN JRE 1.4.2
Mozilla 1.6
Win 2K - SUN JRE 1.4.2
IE 6.0
Win XP - MS VM
Netscape 7.0
Win XP - SUN JRE 1.4.2
Netscape 7.1
Win XP - SUN JRE 1.4.2
Mozilla 1.5
Win XP - SUN JRE 1.4.2
Mozilla 1.6
Win XP - SUN JRE 1.4.2
Netscape 7.1
RedHat8
Mozilla 1.5
RedHat8
Mozilla 1.6
RedHat8
Netscape 7.1
RedHat9
Mozilla 1.5
RedHat9
Mozilla 1.6
RedHat9
IE 6.0, Netscape 7.0, Netscape 7.1, Mozilla 1.5, Mozilla 1.6
Win 2K - SUN JRE 1.4.2_3
IE 6.0, Netscape 7.0, Netscape 7.1, Mozilla 1.5, Mozilla 1.6
Win XP - SUN JRE 1.4.2_3
What are the most commonly used cables and adapters?
Connectivity Table:
This table lists the commonly used Dominion SX hardware (adapters and/or
cables) to common Vendor/Model combinations:
How can I send break signal to Sun target connected to Paragon through AUATC?
CTRL+ Pause/Break key will send break signal
What firmware version is required on the Paragon II to work with the Paragon Manager?
You need firmware version 3B1 or higher on your Paragon II switch in order to communicate with the Paragon Manager.
How do I setup users and channel names on the UST-IP?
In order to configure user names and channel names you need to connect to the UST-IP through the local console port. Connect your keyboard and mouse and then you can access either the user configuration or channel configuration screens by pressing F5.
What is the Paragon II Hub-Pac Power up Sequence?
New Installs
All devices and targets must be powered off
Connect CIMs to targets
Connect CIMs to Hub-Pac
Configure Hub-Pac to PII UMT (make topology connections with all devices off)
Power up Targets
Power up Hub-Pac (Power on one PII Hub-Pac at a time).
Execute the 1st to 3rd tier power sequence with a partial reset on base after the system database has been loaded.
If multiple base units are involved, execute partial reset on each base after the data base is loaded. The database is not completed loading if the LCD of the base UMT flashes "DB Sorting!K" message.
Existing PII Environment
Make sure PII firmware versions are P2-3B1/ UST-1B9 or above.
Make sure Hub-Pac is powered off
Configure Hub-Pac to PII UMT (make topology connections with Hub-Pac off)
Disconnect CIMs from UMT and execute a partial reset of all UMTs to clear the Paragon database of "ghost" names. (Will not affect user or system profiles).
Connect CIMs to PII Hub-Pac
Power on one PII Hub-Pac one at a time.
Verify Target Status and accessibility from PII-UST.
How many users can a Hub-Pac support?
Regardless of whether the switch being used is Paragon II or Paragon, the number of Hub-Pac users can be 32 or 64. For UMT832, this represents 4 Hub-Pac user ports x 8 users per Paragon switch (8x4=32). For UMT1664, this represents 4 Hub-Pac user ports x 16 users per Paragon switch (4X16=64).
How many servers can be supported in a Hub-Pac configuration?
On Paragon UMT8 or Paragon II UMT832 matrix switches, a Hub-Pac represents 8 servers utilizing 8 channels. On the Paragon UMT1664 matrix switch, a Hub-Pac represents 16 servers or 16 channels.
Since 32 channels are available on Paragon UMT8 or Paragon II UMT832, up to 3 more Hub-Pacs can be added for a full 32 user by 32 server configuration. Since 64 channels are available on Paragon UMT1664 or Paragon II UMT1664, 3 more Hub-Pacs can be added for a full 64 user by 64 server configuration.
Can Paragon II CIMs be mixed in Paragon environments?
No - P2 CIMs can not be used in P1 HUBPAC8-RK configurations.
What firmware version is required on the Paragon II to work with the Paragon Manager?
You must have firmware version 3B
1 or higher on your Paragon II switch to communicate with the Paragon Manager.
How do I get the serial number of my P2 UST from the menu?
Press F8 on your keyboard to view the serial number and firmware version.
Will Paragon II work with my current Paragon installation?
Yes. The new Paragon switch is backwards compatible with older Paragon components. Please consult the Paragon II manual for configuration and compatibility guidelines.
I have Suns and/or Macs in addition to PCs. Can I access and control them all with Paragon II?
Yes. The Paragon II User Station has built-in ports for PS/2, Sun, or USB keyboards and mice. Use Raritan's SUN or Mac adapters to convert keyboard and video ports to PS/2 keyboard/mouse and VGA video.
I have a Digital Alpha running UNIX and want to use a standard PS/2 keyboard. How will that affect operation with my switch?
Merely connect a Raritan converter (AUKME) to any Alpha running UNIX and all computers will operate flawlessly with a standard PS/2 keyboard.
I have a serially controlled device (i.e. Unix server, hub). Can I use Paragon II to access and control this device?
Yes. Raritan's ASCII Terminal Converter (AUATC) adapter will convert the RS-232 connection to PS/2 and VGA video. Connect the AUATC to your serially controlled device, then connect to your Paragon II switch with UTP Cable for access up to 1000 feet.
What is "Integrated Power Management"?
Integrated Power Management is a single, consolidated view (and control of) Raritan Remote Power Control Units connected to Paragon II.
So I can access and control all my connected Power Units via the Paragon II OSD?
Yes! Paragon II lets you control power to any connected device, set security permissions on a per-outlet basis, recycle power to multi-power supply servers, and get status information from each connected strip.
I would like to eliminate all the cables between cascaded Paragon units. Can I do this?
Yes, with Paragon II you get exclusive stacking capability that allows you to increase port density to 128 ports per switch
Is the stacking cable that connects base and expansion units together common to all Paragon II switches?
Yes, the stacking cable is common to all Paragon II switches.
Will stacking use up my ports like cascading does?
No! You can stack Paragon II units with just a single cable! 100% non-blocked access without sacrificing server or user ports.
How many Paragon II switches can be stacked?
You can stack 4 P2-UMT832 switches (1 P2-UMT832M + 3 P2-UMT832S) and 2 P2-UMT1664 switches (1 P2-UMT1664M + 1 P2-UMT1664S).
Can you stack second and third tier units?
Yes. Please consult the Paragon II manual for configuration and compatibility guidelines.
What is the primary difference between Paragon and Paragon II?
Paragon II is the next generation of KVM switch. While it builds upon the original Paragon technology, it adds advanced features including stacking, integrated power management, network firmware upgrade capability and optional IP-access.
When accessing a KX running the 1.4 Release from CC-SG 2.3 or 3.0.0, I receive the following warning message "The firmware version on this device is not officially supported by CommandCenter Secure Gateway." What should I do?
Respond to the prompt “Do you wish to proceed?” by clicking on “Yes.” All Dominion KX models including Release 1.4 have been certified for use with CommandCenter Secure Gateway (CC-SG) Release 2.3 and CC 3.0.
Is the status of CommandCenter limited by the status of the devices which it proxies?
No. Because CommandCenter software resides on a dedicated server, even if a device being proxied by the CommandCenter is turned off, you will still be able to access CommandCenter.
Can I upgrade to newer versions of CommandCenter software as they become available?
Yes. To upgrade your CC-SG G1 to, CC-SG 2.3, the latest available firmware, download the firmware and related documentation from http://www.raritan.com/support/sup_upgrades.aspx. The CC-SG 3.0 upgrade for existing CC-SG G1 customers will be available shortly. For more information contact your Raritan Sales representative or call Raritan directly at 1-800-724-8090 for details.
How many login accounts can be created for CommandCenter?
There is no specified limit to the number of login accounts that can be created for CommandCenter, but the number is not limitless. The size of the database, the performance of the processor, and the amount of memory on the hosting server will determine how many user accounts can actually be created. These user accounts can be any combination of Administrators and Operators with at least one Administrator account.
How many target devices (ports) and/or Dominion x16/x32 and/or IP-Reach units can be connected to CommandCenter?
There is no specified limit to the number of ports and/or Dominion x16/x32 and/or IP-Reach units that can be connected, but the number is not limitless: the performance of the processor and the amount of memory on the hosting server will determine how many ports can actually be connected.
Can I assign specific port access to a specific user?
Yes, if you have Administrator permissions. Administrators have the ability to assign specific ports per user.
Sometimes when I try to log in, I receive a message that states my "login is incorrect" even though I am sure I am entering the correct User Name and Password. Why is this?
There is a session-specific ID that is sent out each time you begin to login to CommandCenter. This ID has a time-out feature, so if you do not log on to the unit before the time-out occurs, then the session ID becomes invalid. Performing a Shift-Reload refreshes the page from CommandCenter. Similarly, you may close the current browser, open a new browser, and log on again. This provides an additional security feature so that no one can recall information stored in the Web cache to access the unit.
How is a password secure?
Passwords are encrypted using MD5 encryption, which is a one-way hash. This provides additional security to prevent unauthorized users from accessing the password list.
Is there any way to optimize the performance of Microsoft Internet Explorer if it is my preferred Web browser?
To improve the performance of Microsoft IE when accessing the console, disable the "JIT compiler for virtual machine enabled," "Java logging enabled," and "Java console enabled" options. From the main menu bar, select Tools > Internet Options > Advanced. Scroll down until you see the above items and make sure that they are not checked.
Sometimes I receive a "No longer logged in" message when I click on any Menu in CommandCenter, after leaving my workstation idle for a period of time. Why?
CommandCenter times each user session. If no activity happens for pre-defined period of time, CommandCenter logs the user out. The length of the time period is pre-set to 60 minutes, but can be reconfigured. It is recommended that users exit CommandCenter when they finish an operation.
An administrator added a new port to the CommandCenter database and assigned it to me, but I cannot see it in my Device Selection table. Why?
Ports assigned to you while you are logged in will not appear in your current Device Selection table. To update the table and see the newly assigned port, click on the [Refresh] button, but remember that refreshing CommandCenter will close all of your current console sessions.
The event times in the Audit Trail seem incorrect. Why?
Log event times are logged according to the time settings of computer that CommandCenter is installed on. You can correct this by adjusting the computer's time settings.
As a CommandCenter Administrator, I added over 500 ports and assigned all of them to me. Now it takes a long time to log on to CommandCenter.
When you, as Administrator, have many ports assigned to you, CommandCenter downloads all port information for all ports during the logging process, which slows the process considerably. It is recommended that Administrator accounts used primarily to manage CommandCenter configuration/settings do not have many ports assigned to them.
There are four levels of Vulnerability Scanning designated levels 1-4. The higher the level, the more intrusive the scan: Level 1 !V port scanning, Level 2 !V profiling, Level 3 !V intrusion attempts, Level 4 !V malicious intrusion attempts.
How are Service Level Availabilities calculated?
It is the number of successful polls divided by the number of attempted polls over the past 24 hours:
Successful polls over past 24 hours
------------------------------------------- = SLA percentage
Attempted polls over past 24 hours
The calculation is completed over a rolling 24 hour window, and the window size of 24-hours is not a user-configurable parameter.
How often are services polled?
The default polling interval is five minutes. Determining the most appropriate polling interval is always a challenge. More frequent intervals in larger networks can generate unacceptable network overhead. Longer intervals means longer periods of potential downtime before an outage is identified. A five minute polling interval provides a healthy balance between these risks. If your environment requires customization of these values, log in to your appliance as the administrator and visit the Admin->Configure Pollers page and change the interval.
Does CommandCenter NOC support multi-subnet?
Yes, CommandCenter NOC is able to manage multiple subnets with one hardware appliance. You can accomplish this by leveraging your WINS server if you have one, or by having a Windows proxy deployed in each subnet.
False alarms are always an issue for IT administrators. How does CommandCenter NOC control IDS false alarms?
Our IDS has a signature profiler which allows the administrator to tailor the IDS to the environment, thereby vastly reducing false alarms. This can even be done at the signature level.
What services and applications do you discover and monitor?
The list of services discovered and/or monitored include the following:
ICMP - If a device responds to a "ping," which uses ICMP for its transport, the device will be flagged as supporting ICMP and will be tested for ICMP availability on the standard polling interval.
MSExchange - If a device is determined to support MS Exchange, it means that we have discovered email-related services (IMAP, POP3, or SMTP) on one of its interfaces, and the banner received from that service identified the server as MS Exchange. The MS Exchange service indicates that the CommandCenter NOC was able to recognize that the server is MS Exchange, but due to potential configurations of the server that could disable banners, we do not guarantee that all MS Exchange servers will be identified as such.
Router - If a device is identified to support the "Router" service, it must first support either SNMP or SNMPv2, and it must respond positively to a query of the.ipForwarding OID. This service is not polled on a regular polling interval, but instead, is used to help maintain appropriate contextual displays in the CommandCenter NOC!|s user interface.
SNMP/SNMPv2 - Will discover if a device supports, specifically, SNMP version 2 (SNMPv2). SNMPv2 support implies that the devices supports the GET-BULK operator, which allows the CommandCenter NOC to pull performance data from the device using a far more efficient query, reducing network overhead, and freeing up the CommandCenter NOC to poll the next device in less time. Note that if a device supports both SNMP (which implies SNMP version 1) and SNMPv2, the CommandCenter NOC will query the device with SNMPv2 only, as it's more efficient and there is no need to retrieve redundant data.
Does CommandCenter NOC only monitor a Microsoft server?
It can monitor a comprehensive list of server brands and types. It supports Microsoft servers via WMI and any other server that supports SNMP. It will also provide an up/down status of any device that it can ping.
Do we need to install any agent on the servers we monitor?
No agents are used. CommandCenter NOC leverages WMI and SNMP which are typically already loaded on the target machines. Some Microsoft enterprise-level service monitoring features require WMI support enabled.
Will signatures for intrusion detection and vulnerability scans be maintained? How often will updates be available? How are customers charged for these updates?
Raritan will maintain and update signatures for customers who have support contracts. Customer!|s pay for the signatures as part of their software support agreement.
Power off the unit by pressing button 3 and powering it back on while pressing button 3.
I don't want to use the "scroll lock" to activate hot-key. What are my options?
The hot-key activator can be easily changed to either "num lock" or "caps lock". When in hot-key mode, touch the desired new hot-key activator followed by the enter key.
We have some mission critical servers and there are occasions when we may wish to disconnect a server from the Raritan switch and "hot-plug" a physical keyboard and mouse to operate the server. Is that possible?
Yes. Simply plug Raritan's virtual keyboard/mouse (APKME) device into the server's keyboard/mouse ports and then plug the MasterConsole cable into the APKME's keyboard/mouse ports. APKME will provide constant keyboard/mouse signals to the server and you can "hot-swap" a physical keyboard and mouse for direct server operation, at any time.
On the back of my MasterConsole MX4 there is a port labeled, "Admin". What is it used for?
The Admin. port is used for flash upgrades of firmware using MCUpdate. The Admin. port is also used for OverView, an add-on, PC Windows program to maintain configuration data and real-time tracking of user activity.
If I am cascading MX4 units and only have a need for 2 users on the base unit, do I need all four paths to each cascaded MX4?
No. You only need to connect an equal number of paths from the base unit to a 2nd tier as you have users on the base unit needing simultaneous access to the 2nd tier.
My Sun server has a 15 pin VGA type connection (PGX video card). How do I connect it to my MasterConsole SMX?
SMX CCSnn cables have a 13W3(M) video connector, so you'll need to convert it to HD15. Use Raritan's 1396C {HD15(M) to 13W3(F)} adapter plugged directly into the Sun's video port and then connect the CCSnn 13W3 connector into it.
On the back of my MasterConsole II there is a port labeled, "Admin". What is it used for?
The Admin. port is used for flash upgrades of firmware using MCUpdate. On the MX4 and SMX, the Admin. port is also used for OverView, a software application running on a PC that tracks MX4 activity and optionally maintains the configuration data.
The RMT or 2ND light on the front of my MasterConsole II is always on. Is that normal?
If the unit is used as a tier, it is normal to have the 2nd light lit. To use this unit as a stand alone unit, or a base unit, power on the MasterConsole II while holding in the channel 4 button on the front panel (Channel 3 on the MCC models) This will initialize the unit as a stand-alone device. The RMT light should only be on when using a remote access kit containing a remote RKVM module and the remote user is active.
I have a MasterConsole II MCC model. Is it the same as my MCX or MCS model?
The MCC model replaces both the MCX and the MCS models. It is 100% compatible and can be cascaded with another MCC model or MCX or MCS model.
I see that the CompuSwitch has an AC power socket. Where does it get its power?
CompuSwitch gets its power from the keyboard port of the PCs connected. Raritan offers an optional, external 6V DC power supply which is recommended for cascading CompuSwitch units.
Why do I get the error "Raritan Device was not
found" when I double click on the IP profile of RRC to access the
IP Reach?
This error message indicates that RRC and IP-Reach are not communicating on
the same port. The Factory default port is 5000 and can be found under network
configuration. Right click on RRC profile and select “Modify profile”
to verify which port is configured. Then, contact your administrator to
obtain current port number being used by IP-Reach and make appropriate change
to your profile.
Why do I get the error “Unexpected communication
error” when I try to access the IP-Reach using web browser/RRC?
This error message can occur for 3 possible reasons.
1. The IP-Reach is configured with a private key which is not matching
the local RRC profile. Contact the system administrator to verify private
key status and configure it accordingly on your local RRC profile.
2. The IP-Reach is under control of a Command Center. As a result, direct
access is disabled. Contact administrator to verify this status.
3. Access Control List (ACL) is activated and you are trying to access
the unit from a restricted IP/subnet. Contact administrator to verify
if this is the case.
Why is there a large amount of UDP broadcast activity on port 5000 and 5001?
When RRC is launched, it sends out UDP broadcast on port 5000 to discover Raritan devices. If there is a Raritan device on the network, it will respond back with broadcast on UDP 5001. While this happens, you will see browsed (sphere like icon) profile. To prevent the UDP Broadcast, click on the globe like icon on RRC icon menu to turn off browsing. Note that this action will work only for this session. The Next time a user launches RRC, it will send out broadcast again because this function is on by default.
When connecting to the IP-Reach remotely, the two mouse cursors do not
line up (are not synchronized). How do I synchronize the mouse cursors?
There are several steps you can take to optimize mouse synchronization.
1. Mouse acceleration must be disabled. On Windows Server 2003 and Windows
XP, this option is called "Enhanced Pointer Precision mode"
and is located under Mouse Properties. Windows NT, however, does not have
this option. Most other Operating Systems refer to this option simply
as "mouse acceleration."
2. Mouse speed must be adjusted to 50%. The only exception is Windows
NT, where you must set the mouse to the minimum mouse speed available.
3. The video resolution and refresh rate should be adjusted. High supported
refresh rates (70-75 Hz) improve your synchronization. The optimum setting
is 1024x768 at 75 Hz.
4. Perform the 'Auto-Sense video' on the RRC toolbar to resync the two
cursors.
What remote access connection methods can IP-Reach accommodate?
IP-Reach provides network administrators with a choice of remote access via Internet, LAN/WAN, or dial-up modem. That means servers can be accessed both in and out of band, so remote access to mission-critical target servers is always available--even if the network is down.
Can I customize IP-Reach to enhance performance relative to my specific KVM configuration?
Yes. A variety of fine-tuning procedures are available. Automatic Color calibration, KVM On-Screen Display tuning, and Target Mouse Pointer adjustments all serve to enhance IP-Reach performance.
Can I customize IP-Reach to enhance performance with regard to different remote access methods and situations?
Yes. IP-Reach offers a variety of performance enhancements to optimize a chosen connection method. Color Depth, Progressive Update, and Internet Flow Control are just a few of the adjustment options available to speed response time. Color Depth, for example, can be adjusted all the way down to black and white to decrease the data load during an emergency midnight modem connection to mission-critical servers over low-bandwidth.
Can I perform a dial-up modem connection to IP-Reach over a PBX line?
No. Modems require an analog telephone line.
How Is IP-Reach administration carried out?
Administrators access IP-Reach through a connected IP-Reach Admin Console. A simple keyboard driven interface of menus offers straightforward access to IP-Reach setup and control. User profiles, security settings, configuration and diagnostics are just a few of the options available. The IP-Reach Admin Console can be removed from the server room once IP-Reach setup is complete. Or for constant, clutter-free access to IP-Reach administrative menus from any location, IP-Reach can be designated as a Target to its KVM configuration.
Remote Access Software has been available for a long time. What makes IP-Reach different?
With IP-Reach, the software runs only on the IP-Reach unit itself, not on each individual Target Server. Traditional Remote Access Software solutions require software to be loaded and running on each Target Server, which must offer a supporting Operating System. This can create compatibility, performance, and reliability issues on mission critical Target Servers.
How does IP-Reach work?
IP-Reach connects to the keyboard, video, and mouse ports of a server or KVM switch. Using Raritan's powerful frame-grabber and compression technology, it captures, digitizes, and compresses the video signal before transmitting to a remote PC.
Is IP-Reach simple to install?
IP-Reach is very easy to install. Just connect it to a user port on an existing KVM configuration, and assign an IP address and/or telephone number for modem access. Run the short installation wizard for the Raritan Remote Client on your Remote PC, and you are ready for IP-Reach remote access.
What level of control does an IP-Reach remote user have over attached Target Servers?
The remote user has direct access and total control of target servers for maintenance, administration, and troubleshooting, from running GUI applications to BIOS-level troubleshooting, and even rebooting.
Can I continue to access my KVM configuration locally?
Yes. IP-Reach features a special Direct Analog User port for direct access to the KVM configuration. This pass through port provides an additional local access point, which is especially important for single-user switches or for providing critical access to servers if the network is down.
Can I use IP-Reach within my local network?
IP-Reach can be used in any computer network that supports TCP/IP (and UDP).
Can IP-Reach accommodate multiple remote connections at the same time?
IP-Reach TR364 and TR362 models enable 4 and 2 multiple user connections, respectively. In addition, up to 5 multiple users can remotely connect to IP-Reach and concurrently share control on a first active keyboard/mouse input status on each available channel.
Will other KVM switch brands work with IP-Reach?
Nothing complements IP-Reach better than a Raritan KVM Switch--especially Paragon. In theory, however, IP-Reach can also be used with any KVM switch that features an On-Screen User Interface menu for access to switching functions.
Are there security features to protect my Target Servers from an unauthorized remote connection?
Yes. IP-Reach provides many layers of security. IP-Reach can be configured to provide high-level connection authentication and video data transfer security during a remote session. User names, passwords, private-keys, and Secure Socket Layer (SSL) 128-bit encryption are all available. IP-Reach can also function as a RADIUS client. In addition, all Raritan KVM Switches that feature an On-Screen User Interface (OSUI) come with a complete security scheme, requiring user name and password access to Servers as designated by the network administrator.
What is the slowest connection IP-Reach can handle?
