Page 1: User Guide
HP IP Console Viewer User Guide Part Number 409053-003 July 2008 (Third Edition)
Page 2: Intended Audience
© Copyright 2006, 2008 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice. The only warranties for HP products and services are set forth in the express warranty statements accompanying such products and services. Nothing herein should be construed as constituting an additional warranty. HP shall not be liable for technical or editorial errors or omissions contained herein.
Page 3: Table Of Contents
Contents Product overview .......................... 8 HP IP Console Viewer overview........................8 System components ........................... 8 Main window ..........................8 Video Session Viewer ........................9 Serial Session Viewer........................9 Manage Console Switch windows ..................... 9 OBWI ............................10 Features and benefits ..........................10 Directory services integration (LDAP) ....................
Page 4 Viewing and configuring parameters through the Settings tab ............... 37 Configuring global parameters......................37 Configuring user accounts ......................44 Viewing interface adapter parameters....................53 Configuring SNMP parameters......................55 Viewing server parameters ......................59 Configuring cascade switch parameters ................... 64 Viewing version parameters......................65 Viewing the Status tab ..........................
Page 5 Configuring global parameters for serial console switches ..............99 Configuring user accounts for serial console switches ............... 113 Configuring port parameters for serial console switches..............125 Configuring SNMP parameters for serial console switches ..............132 Viewing server parameters for serial console switches ................136 Modifying server names for serial console switches................
Page 6 Customizing options ..........................192 Creating custom field labels ......................192 Modifying the selected view on startup................... 195 Changing the default browser ....................... 195 Using Direct Draw ........................195 Assigning units to sites, departments, locations, or folders................196 Deleting and renaming a unit........................196 Deleting a unit, site, department, location, or folder .................
Page 7 Setting virtual media options ........................258 Troubleshooting ........................260 Troubleshooting chart ..........................260 Certificate errors ........................... 262 Microsoft Internet Explorer 6 ......................263 Microsoft Internet Explorer 7 ......................266 Mozilla Firefox..........................270 Upgrading the firmware ......................272 Using the file system to upgrade firmware ....................272 Using TFTP for firmware upgrades ......................
Page 8: Product Overview
Product overview HP IP Console Viewer overview The HP IP Console Viewer is a cross-platform management application that enables you to view, control, and group console switches and the servers and network devices that are attached to them. The HP IP Console Viewer: •...
Page 9: Video Session Viewer
From the main window, you can select a server from a Unit list and then click an icon to launch a session to it. You can also select a console switch and then click an icon to launch management and control functions.
Page 10: Obwi
OBWI The OBWI provides management functions that are similar to those of the HP IP Console Viewer software. However, the OBWI does not require a software server or installation. Instead, you use a supported browser ("Browser requirements" on page 11) to launch the OBWI directly from the console switch. Any servers that are connected to the console switch are automatically detected.
Page 11: Directory Services Integration (Ldap)
3 x 1, where three remote user sessions are supported 4 x 1, where four remote user sessions are supported Each managed serial console switch supports up to 64 internal user accounts and can support client sessions for all ports simultaneously. •...
Page 12: Supported Directory Services
Supported directory services Microsoft® Active Directory on: • Windows Server® 2003 • Windows Server® 2008 System requirements The following is a list of the hardware and browser requirements for running the HP IP Console Viewer on the supported operating systems. Configurations with less than the recommended requirements are not supported.
Page 13: Installation
Installation Setting up the HP IP Console Switch Before installing the HP IP Console Viewer, see the following sections to be sure that you have all the items necessary for proper installation and that you synchronize your mouse pointers. Adjust the mouse acceleration on each server to none. Install the console switch hardware, connect the interface adapters, and connect the keyboard, monitor, and mouse to the analog ports.
Page 14: Establishing Lan Connections
NOTE: The following Linux example uses Red Hat 3.0. For more information, refer to your Linux operating system's HELP or documentation. To synchronize the mouse pointers for Linux operating systems (GNOME): Click the main menu. From the main menu task list, select Programs>Settings>Peripherals. From the Peripherals task list, select Mouse.
Page 15: Installing The Hp Ip Console Viewer
Installing the HP IP Console Viewer IMPORTANT: To ensure that you have the latest software, see the HP website (http://www.hp.com/go/kvm). To install the HP IP Console Viewer on Windows® operating systems: Installation 15...
Page 16: Launching The Hp Ip Console Viewer
Insert the HP IP Console Viewer CD in to the CD-ROM drive. If AutoPlay is supported and enabled, the setup program starts automatically. -or- If your system does not support AutoPlay, set the default drive to the CD-ROM drive letter, and execute the following command to start the install program: <CD-ROM drive>:\WIN32\SETUP.EXE Follow the on-screen instructions.
Page 17 Install the HP IP Console Viewer on each HP IP Console Viewer client. From one of the HP IP Console Viewer clients, launch the HP IP Console Viewer. Click New Console Switch to add the new console switch to the HP IP Console Viewer database. The New Console Switch wizard appears.
Page 18 Adjust the resolution by selecting View>Auto Scale, and click Maximize. Select Tools>Automatic Video Adjust for the server video in the Video Session Viewer. After setting the mouse properties, click mouse synchronization in the HP IP Console Viewer menu bar. Installation 18...
Page 19: Navigating The Hp Ip Console Viewer
Navigating the HP IP Console Viewer HP IP Console Viewer components overview The HP IP Console Viewer consists of several components: the main window, the Manage Console Switch window, the Video Session Viewer component, and Serial Session Viewer component. After you launch the HP IP Console Viewer, the main window appears.
Page 20: Main Window Features
Main window features Position Feature Function Title bar Provides the title of the HP IP Console Viewer Menu bar Contains six menus (File, Edit, View, Tools, Window, and Help) View Selector tabs Contains four tabs (Console Switches, Servers, Sites, and Folders) Group view Contains a tree view representing the groups that are selected from the tab view (The group...
Page 21: Auto Searching For A Server In The List View
Position Feature Function Task window Contains buttons representing tasks that can be executed (Some buttons are dynamic, based on the type of items selected in the list view, and other buttons are fixed and always present.) Auto searching for a server in the list view Click Servers, and click any item in the List view.
Page 22: Adding And Discovering Console Switches
Adding and discovering console switches Adding console switches Before a console switch can be accessed through the HP IP Console Viewer, you must add it to the HP IP Console Viewer database. After the console switch has been manually added or discovered, it appears in the list view.
Page 23 The New Console Switch Wizard appears. Click Next. The Product Type window appears. Adding and discovering console switches 23...
Page 24 Select a product from the product list. The IP Address window appears. Indicate that the HP IP Console Switch does not have an IP address assigned by selecting No, and click Next. The Network Address window appears. Adding and discovering console switches 24...
Page 25 Enter the IP address, subnet mask, and gateway for the console switch, and click Next. The HP IP Console Viewer searches for the console switch and interface adapter IDs and server names associated with the particular console switch. The Found window appears. Click Next.
Page 26: Adding A Console Switch With An Assigned Ip Address
If no cascade switches attached to any interface adapters were detected, then the Completing Wizard window appears. Click Finish to exit and return to the main window. Click Next. The Completing the New Console Switch Wizard window appears. Click Finish to exit and return to the main window. The console switch displays in the list view. Adding a console switch with an assigned IP address Select File>New>Console Switch, or click New Console Switch.
Page 27 Select a product from the product list, and click Next. The IP Address window appears. Indicate that the HP IP Console Switch has an IP address assigned to it by selecting Yes, and click Next. The Locate IP Console Switch window appears. Adding and discovering console switches 27...
Page 28 Enter the HP IP Console Switch IP address or DNS name, and click Next. The IP Console Viewer searches for the console switch and all interface adapter IDs and server names associated with the particular console switch. The Found window appears. Click Next.
Page 29: Discovering One Or More Console Switches With The Discover Wizard
Discovering one or more console switches with the Discover Wizard Select Tools>Discover. The Discover Wizard window appears. Adding and discovering console switches 29...
Page 30 Click Next. The Enter Address Range window appears. Enter the IP address range or IP subnet by choosing one of the following options: Select Use IPv4 address range,and then enter a valid range of network IPv4 addresses to search on the network in the From Address and the To Address fields. Use the IP address dot notation: xxx.xxx.xxx.xxx.
Page 31 Click Next. The Searching Network window appears. Progress text indicates how many addresses have been probed from the total number specified by the range and the number of IP console switches found. If one or more new console switches are discovered, the Select Console Switches window appears.
Page 32 If no new console switches are found or if you pressed Stop during the add process, the Discover Wizard was unsuccessful window appears. Click Finish to exit. You must manually add the console switch. For more information, see "Adding a console switch without an assigned IP address (on page 22)."...
Page 33: Managing Multiple Connections
Managing multiple connections A server that has connections to more than one console switch managed by the HP IP Console Viewer usually appears as two different servers in the main window when the console switches are initially discovered. For example, a server can have a serial console port connected to a serial console switch, in addition to being connected to a kvm console switch.
Page 34: Server Naming
Resynchronize the server list in the appropriate Manage Console Switch window. For more information, see "Resynchronizing the server listing for console switches (on page 61)" or "Resynchronizing the server listing for serial console switches (on page 138)." For example, if you changed the server name on the serial console switch, resynchronize the server list in the Manage Serial Console Switch window.
Page 35: Sorting Displays
comprised of the console switch's MAC Address and the port number of the port to which the server is attached. Non-default server names that are read from the console switch during a resynchronization are allowed to override the locally defined names. Sorting displays In certain displays, an HP IP Console Viewer component displays a list of items with columns of information about each item.
Page 36: Accessing Console Switches
Accessing console switches Accessing console switches overview When you click the Console Switches icon, you see a list of the console switches currently defined in the local database. To access a console switch, first log in with a valid password and user name. After you log into the console switch, the HP IP Console Viewer caches the user name and password into memory for the duration of the HP IP Console Viewer session.
Page 37: Managing Kvm Console Switches
Managing KVM console switches Manage Console Switch window overview for KVM console switches After you have installed a new KVM console switch, you can view and configure unit parameters, view and control currently active video sessions, and execute a variety of control functions, such as rebooting and upgrading your KVM console switch.
Page 38: Configuring Network Parameters
The Serial Number (EID) field contains information for the HP IP Console Switch hardware and the EID attached to that console switch. Configuring network parameters The Network subcategory enables you to view the network settings of a console switch, including the Name (read-only), IP Address, Subnet Mask, Gateway, MAC Address (read-only), LAN Speed, DNS Servers, and Bootp settings.
Page 39 The DNS Server fields appear only if LDAP Authentication is licensed on the console switch. To change network parameters: Select Network. Select Enabled if a BOOTP server is to be used to obtain the network configuration. The remaining fields on this panel are disabled. -or- Select Disabled if a static network configuration is used to obtain the network configuration.
Page 40: Configuring Session Parameters
Click OK to save any changes and exit. Configuring session parameters The Sessions subcategory enables you to specify the active Video Session Timeout, which configures the console switch to close an inactive video session after a specified number of minutes. NOTE: If a video session is associated with a reserved Virtual Media session, then the video session is not subject to the video session timeout.
Page 41 For more information on connection sharing, see "Video session types (on page 79)." Managing KVM console switches 41...
Page 42 Configuring Virtual Media parameters The Virtual Media subcategory enables you to specify the settings for Virtual Media sessions. Parameter Function Lock to KVM Session When selected, a Virtual Media session is not allowed to remain after the Video Session Viewer that launched it closes. If not selected, the virtual media session is allowed to remain when the associated video session is closed.
Page 43 Parameter Function Encryption level This control can be used to specify the encryption method to use for all Virtual Media sessions. This information is used when new client connections are requested. At that point, the console switch will attempt to negotiate for the highest enabled encryption mechanism level.
Page 44: Configuring User Accounts
Provides a secure managed directory-based authentication for user names and passwords, as well as access control. User rights and user accounts are stored in the directory. For more information on LDAP Access Control, see "Using directory services integration (on page 201)." Configuring user accounts The Users category enables you to configure user accounts.
Page 45 Assign access levels: Console Switch Administrator or User Assign individual server access rights to a user through the User Access Level function Enable the Security Lock-out feature that can lock out users if they try to enter an invalid password five consecutive times (This feature enables you to configure the Security Lock-out settings, as well as unlock any users.) NOTE:...
Page 46 Operation Console Switch User Administrator Configure Global and Network settings (security mode, timeout, and SNMP) Reboot Upgrade Administer user accounts Configure port settings Monitor server status Server device access Assigned by admin Server resync Adding or modifying a user Adding or modifying a Local Authentication user Select Users.
Page 47 NOTE: The password fields are disabled (grayed-out), when using LDAP Authentication Only mode. Select the appropriate access level for the user from the Access Level dropdown list. If you select the User option, the Access Rights button activates. Click Access Rights to select individual servers for that user. The User access rights dialog box appears.
Page 48 Click Modify to modify a current user. The Modify User dialog box appears. Select the appropriate access level for the user from the Access Level dropdown list. If you select the User option, the Access Rights button activates. Click Access Rights to select individual servers for that user. The User access rights dialog box appears.
Page 49: Deleting A User
Deleting a user Select Users. Select a user. Click Delete. The Confirm Deletion dialog box appears. Click Yes to confirm the deletion, or click No to exit the window without deleting the user. Locking and unlocking user accounts If the console switch is configured for Local Authentication and a user enters an invalid password five consecutive times, the Security Lock-out feature temporarily disables that account.
Page 50 Unlocking an account Select Users. Managing KVM console switches 50...
Page 51 Click Unlock. The Lock icon next to the user name disappears. Click OK or Apply. The user can log in. -or- Click Cancel to exit without saving. Enabling or disabling a security lock-out Select Users. Select Enable Lock-outs. Enter the number of hours (1 to 99) in the lock-out period in the Duration field.
Page 52: Override Admin
Specifying a security lock-out duration Select Users. Select Enable Lock-outs. Enter the number of hours that a user is locked out (1 to 99) in the Duration field. Click Apply, and then click OK. Override Admin Override Admin is the one account that can be used to get into the console switch from a network, even if the local accounts are locked or do not exist or if LDAP is not working properly.
Page 53: Viewing Interface Adapter Parameters
Viewing interface adapter parameters The Interface Adapters category displays a list of interface adapters attached to the HP IP Console Switch and their statuses, as well as the port, interface adapter ID, type, and language. A green circle indicates that the interface adapter is online. A yellow circle indicates that the interface adapter is being upgraded, and a red X indicates that interface adapter is offline.
Page 54 Setting interface adapter language parameters The Language setting specifies the keyboard layout language to be reported by USB interface adapters to the attached servers. Select Interface Adapter. Click Language. Select the keyboard layout from the dropdown menu. Managing KVM console switches 54...
Page 55: Configuring Snmp Parameters
Click OK to select the keyboard layout. -or- Click Cancel to return without changing the language. Click Apply to save any changes without exiting. -or- Click OK to save any changes and exit. -or- Click Cancel to exit without saving any changes. All online interface adapters report in the new language.
Page 56 The allowable managers setting does not affect whether the HP IP Console Viewer can view or manage the console switch. Configuring general SNMP parameters Select SNMP. Select Enable SNMP to configure the console switch to respond to SNMP requests over UDP port 161.
Page 57 Add up to four SNMP management stations that are allowed to monitor the console switch, such as HP Systems Insight Manager, or leave the field blank to allow any SNMP management station to manage the console switch. For more information, see "Adding, modifying, and deleting allowable managers (on page 57)."...
Page 58: Configuring Trap Parameters
Modify the entry as needed. Click OK to save the changes. To delete a trap destination: Select an entry in the Trap Destinations list, and click Delete. You are prompted to confirm the deletion. Click Yes to confirm the deletion. Configuring a cascade switch connection Select the Cascade Switches category.
Page 59: Viewing Server Parameters
Viewing server parameters When you select the Servers category for the first time, the Manage Console Switch window retrieves the servers that exist in the HP IP Console Viewer database and information on how the servers are connected to the selected console switch. The Servers category enables you to view the list of newly detected servers and update the HP IP Console Viewer database.
Page 60 If you select either an interface adapter or a cascade switch in the Connections column, the Video Session Viewer appears. Modifying server names The Servers category can be used to modify the server name on the console switch and in the client database.
Page 61 -or- Click OK to save any changes and exit. -or- Click Cancel to exit without saving any changes. Resynchronizing the server listing for console switches You can choose to periodically resynchronize the database on the HP IP Console Viewer client with the database stored in the console switch.
Page 62 (Optional) Select the Exclude Servers with Default Names checkbox. Click Next. A progress bar appears, indicating that the console switch information is being reviewed. If no cascade switches attached to any interface adapters were detected, then the Completing the Resync Console Switch Wizard page appears. Click Finish to exit. -or- Managing KVM console switches 62...
Page 63 If any changes were detected, the Detected Changes window appears. Click Next to update the database. If a cascade switch attached to at least one interface adapter is detected, then the Enter Cascade Switch Information window appears. Select the type of cascade switch connected to the console switch from the dropdown menu.
Page 64: Configuring Cascade Switch Parameters
Configuring cascade switch parameters The Cascade Switches category enables you to view, modify, and add cascade switch information into the HP IP Console Viewer database. The Assign Cascade Switch list displays only interface adapter IDs currently attached to a cascade switch in the database. Managing KVM console switches 64...
Page 65: Viewing Version Parameters
Viewing version parameters When you select the Versions category for the first time, the Manage Console Switch window retrieves the firmware versions from the console switch itself. The Hardware subcategory displays the version information for the console switch itself. The Interface Adapter subcategory enables you to view and load all the interface adapters in the system.
Page 66 Viewing hardware version parameters The Hardware subcategory displays the version information for the console switch itself. Managing KVM console switches 66...
Page 67 Viewing interface adapter version parameters The Interface Adapter subcategory enables you to view and load all the interface adapters in the system. Enabling automatic interface adapter firmware upgrades For HP IP Console Switches with Virtual Media, you can set the console switch to upgrade the interface adapter firmware automatically.
Page 68 NOTE: This method of loading the interface adapter firmware will always overwrite the current version of firmware in the interface adapter. HP recommends using the Tools tab to upgrade your interface adapter firmware, which will only upgrade interface adapters needing a new version of firmware.
Page 69 Viewing licensed options When you click Licensed Options in the Management Console Switch window, the Licensed Options window appears and enables you to configure options for use that are available on the console switch firmware. The HP IP Console Switches with Virtual Media and the HP Serial Console Servers (serial console switches) have the LDAP Authentication option enabled by default.
Page 70: Viewing The Status Tab
Viewing the Status tab You can view and disconnect the current active user connections and unlock user accounts by using the Status tab in the Manage Console Switch window. You can view the length of time users have been connected, the server names or interface adapter to which they are connected, and their system addresses.
Page 71: Using The Tools Tab
Using the Tools tab The Tools tab enables you to reboot, upgrade firmware, and save and restore both configuration and user database files. Rebooting the console switch You can reboot the console switch using the Tools tab on the Manage Console Switch window. Clicking the Reboot Console Switch button causes the console switch to broadcast a disconnect message to any active users, then logs out the current user, and immediately reboots the console switch.
Page 72: Upgrading Console Switch Firmware
Wait 60 seconds after powering up before performing any console switch operations. Upgrading console switch firmware You can upgrade the console switch firmware by using TFTP or File System. The interface adapter can be upgraded individually in the Settings tab or simultaneously in the Tools tab. NOTE: If you made changes in the Settings tab of the Manage Console Switch window, but have not yet applied those changes before starting the upgrade, a warning message prompts...
Page 73: Upgrading Interface Adapter Firmware Simultaneously
If you enabled TFTP Server, enter the TFTP Server IP Address where the firmware is located, the firmware file name, and directory location. Click Upgrade. The Upgrade button deactivates, and a progress message appears. When the transfer is complete, a message prompting you to confirm a reboot appears. The new firmware is not used until the console switch reboots.
Page 74: Managing Console Switch Configuration Files
Click Upgrade. The Upgrade button deactivates. In the Last Status column, In Progress displays until the upgrade for that interface adapter type is complete, and then Succeeded appears. A Firmware upgrade currently in progress message appears until all the selected interface adapters are upgraded.
Page 75: Managing Console Switch User Databases
Click OK to return to the Tools tab. Restoring a console switch configuration database The Restore Configuration tool restores a previously saved console switch configuration database from the system running HP IP Console Viewer to the console switch. The database file can be restored to either the console switch from which it was saved or to another console switch of the same type.
Page 76 Click Save User Database. The Save User Database dialog box appears. Click Browse, and select a location to save the user database file. The location appears in the Save to: field. Click Save. The Enter Password dialog box appears. Enter a password in the Password: field and re-enter it in the Verify Password: field. The configuration file is read from the console switch and saved in the desired location.
Page 77: Managing Remote Servers Through The Video Session Viewer
Managing remote servers through the Video Session Viewer About the Video Session Viewer After you have connected to a server, the server desktop appears in a separate window called the Video Session Viewer. You see both the local and the server cursor. You might need to align these cursors if they do not move together or adjust the video if they seem to behave sporadically.
Page 78: Video Session Viewer Window
Video Session Viewer window Item Description Title bar—Displays the name of the server you are viewing To access the menu bar, place your cursor in the middle bottom of the title bar. Menu bar—Enables you to access features Server desktop—Enables you to interact with the server through this desktop Align Local Cursor icon—Enables you to reestablish proper tracking of the local cursor to the remote server...
Page 79: Accessing The Video Session Viewer
Accessing the Video Session Viewer Click Servers. Double-click the server name. -or- Select a server, and click Launch KVM Session. -or- Right-click the server name, and select Launch KVM Session. -or- Select a server, and press Enter. The Video Session Viewer launches in a new window. NOTE: If this is the first unit access of the HP IP Console Viewer session, you might be prompted for a user name and password.
Page 80 Session type Description Normal KVM You are conducting a normal KVM session that is not exclusive but is not currently shared. An active session icon is displayed. Scanning You can monitor up to 16 servers in thumbnail view. Exclusive You have exclusive control over the target server. During this KVM session, the connection to the server cannot be (HP IP Console shared, but it can be preempted or observed in stealth...
Page 81 Select Exclusive Connections in Connection Sharing. To access the Video Session Viewer in exclusive mode: Open a Video Session Viewer session to a server. Select Tools>Exclusive Mode from the Video Session Viewer toolbar. If the Video Session Viewer is currently shared, only the primary user can designate the session as exclusive.
Page 82 Select a server, and press Enter. When another user is viewing this server, a message notifies you that the server is already involved in a KVM session. If the server has multiple session types enabled, you are prompted to choose the session type. If connection sharing is enabled on the console switch and your access rights are sufficient, you are prompted to either share or preempt the existing session.
Page 83 -or- Right-click the server. Select Launch KVM Session. -or- Select the server, and press Enter. When the local user is viewing this server, a message prompts you to terminate the local user’s session (if you have appropriate access rights). Click Yes to terminate the local user’s connection. The local user receives a notification message. The Video Session Viewer launches.
Page 84: Connection Sharing (Hp Ip Console Switches With Virtual Media Only)
Click Yes or OK. -or- Click No to cancel the stealth request. The Video Session Viewer of the target server session opens, and the administrator can view all video output of the target server while remaining undetected. NOTE: If Stealth is not listed as a session type or if you are not prompted to connect in stealth mode, either the server properties are not configured to accept stealth mode sessions or you do not have the access rights necessary.
Page 85: Adjusting The Local Cursors
icon, Refresh Video, enables you to refresh the video. The third icon, Align Local Cursor, enables you to align the mouse cursors. Adjusting the local cursors To adjust the local cursors, click Align Local Cursor. The local cursor aligns with the cursor on the remote server.
Page 86: Adjusting The Video Quality
Adjusting the video quality The Video Session Viewer offers both automatic and manual video adjustment capability. In most instances, the Automatic Video Adjustment optimizes the video for the best possible view. The Performance Monitor provides feedback while adjusting the settings. Adjust the settings until the Performance Monitor displays no values.
Page 87: Configuring Session Options
Configuring session options You can enable keyboard pass-through, select a Menu Activation Keystroke, and enable Background Refresh Selection in the General Session Options dialog box. Configuring keyboard pass-through Keyboard pass-through eliminates the need for most macros by capturing the keystrokes before the local operating system and passing them through to the target server.
Page 88: Linux Operating Systems
For Windows Server™ 2003, set the Speed setting to 50% (default) and clear the Enhance Pointer Precision option. Linux operating systems NOTE: The following Linux example uses Red Hat 3.0. For more information, refer to your Linux operating system's HELP or documentation. To synchronize the mouse pointers for Linux operating systems (GNOME): Click main menu.
Page 89: Accessing Scan Mode
Scan mode is a lower priority than an active connection. If you have an interactive session with a server, that server is omitted in the scan sequence and the scan proceeds to the next server. No login error messages display. After the interactive session is closed, the server is included in the scan sequence again.
Page 90: Navigating The Thumbnail View
Navigating the thumbnail view When you highlight an individual thumbnail frame and select the Thumbnail menu, you can launch an interactive session to that server, add that server to the scan sequence, or set the login credentials for that server. The Options menu enables you to access scanning preferences, pause the scan, and set the thumbnail size for all servers.
Page 91: Using Macros For Kvm Console Switches
From the Thumbnail View, select Thumbnail>[server name]>Credentials. -or- Right-click a server thumbnail, and select Credentials. The login dialog box appears. Enter a user name and password for the selected server. Press the Enter key. Using macros for KVM console switches The Video Session Viewer macro function enables you to: •...
Page 92: Using Virtual Media (Hp Ip Console Switches With Virtual Media Only)
Using Virtual Media (HP IP Console Switches with Virtual Media only) NOTE: The HP IP Console Viewer database is designed to store up to 25 managed console switches and up to 1,024 target servers (devices). If more units are added, performance may decrease.
Page 93: Virtual Media Sharing And Preemption Considerations
the BIOS of your target server or operating system does not support such devices, you must perform one of the following actions: • Purchase a PS2 interface adapter with Virtual Media and map a single, non-composite Virtual Media device. • Disable the USB 2.0 function of the USB 2.0 interface adapter with Virtual Media from the console switch local OSD, allowing the interface adapter to operate in 1.1 mode.
Page 94: Virtual Media Session Settings
drives (non-USB hard drives are not available for mapping). You can also add .iso and floppy image files and then map them using the Virtual Media window. After a target server is mapped, the Virtual Media window Details View displays information about the amount of data transferred and the time elapsed since the target server was mapped.
Page 95 From the Video Session Viewer toolbar, select Tools>Virtual Media. The Virtual Media window appears. If you want to make this a reserved session, on the Virtual Media window, click Details, and select the Reserve checkbox. Mapping to Virtual Media drives NOTE: In a Windows®...
Page 96 You might want to enable the Read Only checkbox if the session settings enabled read and write access, but you wanted to limit a particular drive's access to read only. Unmapping a Virtual Media drive In the Video Session viewer window, using the appropriate procedure for the target server's operating system, perform an eject operation on the Virtual Media device.
Page 97 Displaying Virtual Media drive details Click Details in the Virtual Media window. The window expands to display the Details view. Each row indicates the following: Target Drive—A name used for the mapped drive, such as Virtual CD 1 or Virtual CD 2. Mapped to—Identical to drive information that displays in the Client View Drive column.
Page 98: Closing A Virtual Media Session
Click Details again to close the Details view. Closing a Virtual Media session Click Exit. -or- Click X to close the window. If you have any unmapped drives, a message appears, indicating that the drives will be unmapped. Click Yes to confirm and close the window. -or- Click No to cancel the close.
Page 99: Managing Serial Console Switches
Managing serial console switches Manage Console Switch window overview for serial console switches After you have installed a new serial console switch, you can view and configure serial console switch parameters, view and control currently active video sessions, and execute a variety of control functions, such as rebooting and upgrading your serial console switch.
Page 100 The Serial Number (EID) field contains information for the serial console switch hardware and the EID attached to that serial console switch. Configuring network parameters for serial console switches The Network subcategory enables you to view the network settings of a serial console switch, including the Name (read-only), MAC Address (read-only), Bootp, IP Address, Subnet Mask, Gateway, and DNS Servers settings.
Page 101 The DNS Servers field appears only if LDAP Authentication is licensed on the serial console switch. To change network parameters: Select Network. Select Enabled if a BOOTP server is to be used to obtain the network configuration. The remaining fields on this panel are disabled. -or- Select Disabled if a static network configuration is to used to obtain the network configuration.
Page 102 Click Apply to save any changes without exiting. -or- Click OK to save any changes and exit. -or- Click Cancel to exit without saving any changes. Configuring CLI parameters for serial console switches The CLI subcategory specifies the CLI port terminal type and whether users can connect to other ports from the CLI port.
Page 103 • PPP settings—When PPP is enabled, you specify the local IP address that will be used to communicate with this serial console switch over a PPP connection on the serial CLI port. You also specify the remote IP address for the client that connects to the serial console switch over the PPP connection.
Page 104 Select or clear Enabled in the PPP Settings area. If you enable the PPP Settings, set the IP address for PPP. Enter the address to be used to communicate with this serial console switch, in IP dot notation in the Local IP Address field.
Page 105 • If LDAP is selected, the Authentication Parameters tab becomes active. For more information, see "Using directory services integration (on page 201)." To change authentication settings: Select Authentication. Select Use Local Authentication. -or- Select Use LDAP Authentication. -or- Select Use RADIUS Authentication. If use local authentication is enabled, see "Configuring user accounts for serial console switches (on page 113)."...
Page 106 If RADIUS is enabled, the following information must be set for the primary server. The RADIUS Servers area is valid only if RADIUS is the selected authentication method. Information for the secondary server is optional. Enter the addresses of the RADIUS servers in IP dot notation in the IP Address fields. These values cannot be loopback addresses or all zeros.
Page 107 Either plaintext sessions or SSH (or both) must be enabled to launch the Serial Session Viewer. Failure to have either or both enabled will result in an invalid configuration. Plaintext sessions are enabled by default. Specifying a history buffer control Select Sessions.
Page 108 Specifying a session time-out setting Select Sessions. Select or clear the Enabled checkbox in the Serial Session Timeout area. If time out is disabled, a session will not time-out. If session time–out is enabled, specify the time-out value. You can choose a value from the Minutes dropdown list or you can enter a value in the range 1 to 90 minutes.
Page 109 Click Enable SSH. The Enable SSH dialog box appears. Select the SSH Authentication Mode from the pull-down menu. If an SSH key does not exist, the Create new key checkbox is automatically selected and a new key is created. After a new key is created, you cannot disable it. If an SSH key exists and you want to create a new key, select the Create new key checkbox.
Page 110 Disabling SSH Click Disable SSH. The Confirm Disable SSH dialog box appears. To delete the SSH key, select the Delete Key checkbox. Click Yes. SSH is now disabled. Click No. SSH is still enabled. Viewing key information Click Fingerprints. The SSH Fingerprints dialog box appears and displays the MD5 hash and bubble babble.
Page 111 You can specify one or two NTP servers to provide the time. An NTP server can be external or an internal server that you supply. The primary server is queried for the time first. If it does not respond with a valid time, the secondary server is queried for the time.
Page 112 When the NFS feature is enabled, the port history data is written to a file on an NFS server, in addition to the local history buffer on the serial console switch. Each port has its own files on the NFS server where data is written.
Page 113: Configuring User Accounts For Serial Console Switches
Configuring user accounts for serial console switches The Users category lists user names and their access levels. You can add, modify, or delete a user account from this dialog box. Up to 64 user accounts can be created. The Security Lock-out feature is also controlled from this panel.
Page 114 Operation Console Switch Administrator User Administrator Administer user accounts Configure port settings Monitor server status Target server access Assigned by admin Server resync Adding or modifying a user for serial console switches Select Users. To add a new user, click Add. The Add User dialog box appears. -or- To modify a user, select the name, and then click Modify.
Page 115 Select the appropriate access level from the dropdown list. If you select User, the Access Rights button appears. To select individual server access for the user, click Access Rights. The User access rights dialog box appears. To add access to a server, select a server in the No access to: column. Click Add. To remove access to a server, select a server in the Allow access to: column.
Page 116 Click Browse to specify a path and file name for the public/private key files to change the Identity File field content. By default, these key files are stored under "<user home directory>\IPViewer\userkeys." Enter a secret pass phrase for accessing the private key file in the Passphrase field. Asterisks display instead of the actual data you enter.
Page 117 When the completion percentage reaches 100, the dialog box closes, a confirmation dialog box displays and the generated key displays in the SSH Public Key field of the Add User or Modify User dialog box. Click OK to save the settings and return to the Users category. Click Apply to save any changes without exiting.
Page 118 Setting user access rights for serial console switches Click Access Rights to select individual servers for that user. The User access rights dialog box appears. Select a server in the No access to: and click Add. Select a server in the Allow access to: and click Remove. Repeat steps 2 and 3 until the right column represents the appropriate server access for the assigned user, and click OK.
Page 119 To modify a user, select the name, and then click Modify. The Modify User dialog box appears. To configure the SSH Public Key of a user: Enter a one- to 1,024-character key in the SSH Public Key field. -or- Click Browse to navigate to the path or file name containing an SSH key. The public key contained in the selected file will appear in the SSH Public Key field.
Page 120 Repeat the pass phrase in the Retype Passphrase field. (Optional) Enter information in the Comment field. Click Generate. The text area of the dialog box displays help information and senses movement as the mouse is dragged across it. Move the mouse to assist the random number generator. It passes a seed that is based on the mouse’s location.
Page 121 Deleting a user for serial console switches Select a user in the Users category. Click Delete. The Confirm Deletion dialog box appears. Click Yes to confirm the deletion. -or- Click No to exit the window without deleting the user. Locking and unlocking user accounts for serial console switches If the serial console switch is configured for Local Authentication and a user enters an invalid password five consecutive times, the Security Lock-out feature temporarily disables that account.
Page 122 Unlocking an account for serial console switches Select Users. Managing serial console switches 122...
Page 123 Click Unlock. The Lock icon next to the user name disappears. Click OK or Apply. The user can log in. -or- Click Cancel to exit without saving. Enabling or disabling a security lock-out Select Users. Select Enable Lock-outs. Enter the number of hours (1 to 99) in the lock-out period in the Duration field.
Page 124 Specifying a security lock-out duration Select Users. Select Enable Lock-outs. Enter the number of hours that a user is locked out (1 to 99) in the Duration field. Click Apply, and then click OK. Override Admin subcategory for serial console switches Override Admin is the one account that can be used to get into the serial console switch from a network, even if the local accounts are locked or do not exist or if LDAP is not working properly.
Page 125: Configuring Port Parameters For Serial Console Switches
Configuring port parameters for serial console switches The Ports category lists all configuration parameters for the serial console switch ports. You can change any port parameter except the name and type. Modifying port parameters for serial console switches Select Ports. Managing serial console switches 125...
Page 126 Select a port, and click Modify. The Modify Port dialog box appears. To change the session time-out, enter a value in the Session Timeout field in the range of 1 to 90. -or- Choose a value from the pull-down menu. If you choose Global Setting, the values specified in the Sessions category are used.
Page 127 Select a value from the dropdown menu in the Flow Control field o change the flow control method. This value cannot share the same signal as the Power On Signal value. Select a value from the dropdown menu in the Toggle Signal field to change the toggle signal. NOTE: If you are modifying the dedicated CLI port, then the Toggle Signal field is disabled.
Page 128 Select a port or server from the Server dropdown menu. The Alert Strings list contains the alert strings that have already been defined for that server. If fewer than 10 alert strings have been defined, the list also contains a entry.
Page 129 Select the port from which to copy the alert strings in the Server dropdown menu. The alert strings from the port are listed. Select the port to which the alert strings are copied from the Copy To dropdown menu. -or- Select All, which copies the alert strings to all ports on this console switch.
Page 130 Viewing NFS parameters for serial console switches The NFS subcategory enables you to configure NFS parameters on a port. For more information, see the documentation included with your serial console switch. Viewing statistics parameters for serial console switches The Statistics subcategory displays serial console switch port statistics and EIA signal settings. To display port statistics, select Ports>Statistics.
Page 131 On = Power on *On = Power on and value toggled since last poll Off = Power off *Off = Power off and value toggled since last poll • The remaining columns contain strings that represent a portion of the EIA signals of the port: TD = Transmit Data DSR = Data Set Ready RD = Receive Data DCD = Data Carrier Detect RTS = Request to Send RI = Ring Indicator...
Page 132: Configuring Snmp Parameters For Serial Console Switches
Configuring SNMP parameters for serial console switches SNMP is a protocol used to communicate management information between network management applications and serial console switches. Other SNMP managers can communicate with your serial console switch by accessing MIB-II and the public portion of the enterprise MIB. MIB-II is a standard MIB that many SNMP servers support.
Page 133 The allowable managers setting does not affect whether the HP IP Console Viewer can view or manage the serial console switch. Configuring general SNMP parameters for serial console switches Select SNMP. Select Enable SNMP to configure the serial console switch to respond to SNMP requests over UDP port 161.
Page 134 Add up to four SNMP management stations that are allowed to monitor the serial console switch, such as HP Systems Insight Manager, or leave the field blank to allow any SNMP management station to manage the serial console switch. For more information, see "Adding, modifying, and deleting allowable managers for serial console switches (on page 134)."...
Page 135 Adding, modifying, and deleting trap destinations for serial console switches In the Trap Destinations area, you can specify up to four SNMP trap destinations to which this serial console switch sends traps. You can also modify and delete existing trap destinations. To add a trap destination: Click Add.
Page 136: Viewing Server Parameters For Serial Console Switches
Viewing server parameters for serial console switches The Servers category displays connection information for each server. The Connections column identifies the port to which the server is connected. If there is no server connection, the Servers column indicates None. Click a connection to launch the Serial Session Viewer. Managing serial console switches 136...
Page 137: Modifying Server Names For Serial Console Switches
You can resynchronize the database on your system with the database on the serial console switch from this category. Modifying server names for serial console switches The Servers category can be used to modify the port on the serial console switch that the server is connected to and in the HP IP Console Viewer main window.
Page 138: Resynchronizing The Server Listing For Serial Console Switches
Resynchronizing the server listing for serial console switches During the resynchronization process, a warning message indicates that the database is updated to match the current configuration in the serial console switch. This warning contains a checkbox that indicates whether servers that are configured with default names should be excluded. If servers are excluded, they are not added to (or they can be removed from) the database if they already exist in the database.
Page 139 Click Next. The Warning window appears, indicating that the database is updated to match the current configuration in the serial console switch. Select or clear the Exclude Servers with Default Names checkbox. Managing serial console switches 139...
Page 140 Click Next. A Polling Console Switch message box appears with a progress bar, indicating that serial console switch information is being retrieved. If no changes were detected in the serial console switch, the Completing the Resync Console Switch Wizard page appears. Click Finish to exit. Managing serial console switches 140...
Page 141 -or- If server changes were detected, the Detected Changes window appears. Click Next to update the database. Managing serial console switches 141...
Page 142 Click Next. The Completing the Resync Console Wizard window appears. Click Finish to exit. Managing serial console switches 142...
Page 143: Viewing Version Parameters For Serial Console Switches
Viewing version parameters for serial console switches When you select the Versions category for the first time, the Manage Console Switch window retrieves the firmware versions from the serial console switch itself. Managing serial console switches 143...
Page 144: Viewing The Status Tab For Serial Console Switches
Viewing the Status tab for serial console switches You can view and disconnect the current active user connections and unlock user accounts by using the Status tab in the Manage Console Switch window. You can view the length of time users have been connected, the port on the serial console switch that the server is connected to, and their system addresses.
Page 145: Using The Tools Tab For Serial Console Switches
Using the Tools tab for serial console switches The Tools tab enables you to reboot, upgrade firmware, and save and restore both configuration and user database files. Rebooting the serial console switch You can reboot the serial console switch using the Tools tab on the Manage Console Switch window. Clicking the Reboot Console Switch button causes the serial console switch to broadcast a disconnect message to any active users, then logs out the current user, and immediately reboots the serial console switch.
Page 146: Upgrading Serial Console Switch Firmware
Click Reboot Serial Console Switch. A reboot warning appears. Click Yes. Wait 60 seconds after powering up before performing any console switch operations. Upgrading serial console switch firmware You can upgrade the serial console switch firmware by using TFTP or file system. NOTE: If you made changes in the Settings tab of the Manage Console Switch window, but have not yet applied those changes before starting the upgrade, a warning message prompts...
Page 147: Managing Serial Console Switch Configuration Files
Enter the Firmware File. Click Upgrade. The Upgrade button deactivates, and a progress message appears. When the transfer is complete, a message prompting you to confirm a reboot appears. The new firmware is not used until the console switch reboots. Click Yes to reboot the console switch.
Page 148 Click Save Configuration. The Save Configuration dialog box appears. Click Browse, and select a location to save the configuration file. The location appears in the Save to: field. Click Save. The Enter Password dialog appears. Enter a password in the Password: field and re-enter it in the Verify Password: field. This password is requested when you restore this database to the serial console switch.
Page 149: Managing Serial Console Switch User Databases
Managing serial console switch user databases User database files contain all the user accounts assigned to a serial console switch, except for the Override Admin. You can save user account database files and use them to configure user accounts on multiple serial console switches by writing the user account file to the new serial console switch.
Page 150 Click Restore User Database. The Restore User Database dialog box appears. Click Browse, and select the location of the saved user database file. The file name and location appear in the File name: field. Click Restore. The Enter Password dialog appears. Enter the password you created when the user database file was saved.
Page 151: Managing Remote Servers Through The Serial Session Viewer
Managing remote servers through the Serial Session Viewer About the Serial Session Viewer The built-in Serial Session Viewer is a telnet client that enables you to establish serial sessions with servers attached to serial console switches. You can tailor user preferences for all sessions, as well as session properties for each server.
Page 152 From the Serial Session Viewer, you can access all the normal serial console functions of the server. You can also perform Serial Session Viewer specific tasks, such as sending macro commands to the server. Item Description Title bar—Displays the name of the server you are viewing Toolbar—Provides button equivalents to many menu commands...
Page 153: Accessing The Serial Session Viewer
• Customize global preferences for the Serial Session Viewer, that is, customize the settings that all sessions use. • Customize individual server session properties. These settings are server-specific. They can be set differently for each server. • Use the logging feature to save session data to a file. •...
Page 154 SSH settings are configured in the Manage Console Switch window. For more information, see "Configuring session parameters for serial console switches (on page 106)." To choose an encryption method: Click Servers. Double-click the server in the Unit list. Select the server, and click Launch Serial Session. -or- Right-click the server.
Page 155: Closing The Serial Session Viewer
Closing the Serial Session Viewer To close a Serial Session Viewer, select File>Exit. Customizing preferences Preferences are used for all sessions. There are three types of preferences: • Prompt on exit—When the exit warning prompt is enabled, a message appears when you try to exit the session.
Page 156: Customizing Session Properties
Click Cancel to exit without saving any changes. Customizing session properties Session properties are set on a per-server basis. There are three session properties tabs: • Terminal session properties (on page 156) • Login scripts session properties (on page 159) •...
Page 157 • Macro group. This option specifies the macro group to be used during a server session. The macros in the specified group appear in the Macro menu. For more information, see "Using macros for serial console switches (on page 169)." Customizing terminal session properties Select Options>Sessions.
Page 158 From the Macro Group dropdown list, select a group name or All. The default value is All (all macros will be available). Select or clear the New Line Mode>Inbound option. When enabled, an inbound carriage return from the server is treated as if both a carriage return and a linefeed were received. When disabled, a linefeed is not added to an inbound carriage return.
Page 159: Login Scripts Session Properties
Login scripts session properties The Login Scripts tab contains the dialog box for enabling or disabling and editing automatic login scripts. For more information, see "Using login scripts (on page 160)." Managing remote servers through the Serial Session Viewer 159...
Page 160: Logging Session Properties
Logging session properties The Logging tab enables or disables automatic logging during the next server session. For more information, see "Using logging (on page 165)." Using login scripts The Serial Session Viewer has a login script function that enables you to automatically log in to a server. A login script contains a sequence of Expect and Send strings and initial transmission characters that work with them.
Page 161: Changing A Default Login Script
You can use the default login script, customize the default login script or create an entirely different login script. If you customize the default login script and later decide to return to the original, you can easily restore the default script content. When you build the login script, you specify the Initial Character to be sent to the unit as soon as the telnet session is established.
Page 162 Click Login Scripts. In the Default Login Timeout field, enter the number of seconds the Serial Session Viewer waits for a valid response to automatic login information, in the range 1 to 99999. The default value is 30 seconds. In the Initial character dropdown list, select: CR (carriage return), CR+LF (carriage return and linefeed), CR+CR (carriage return and carriage return), ESC (Escape), CTRL+P (Control+P sequence, 0x10 in hex), or None (no initial transmission character).
Page 163: Enabling Or Disabling Automatic Login
%W Password Enter additional Expect and Send field entries, as needed, to a maximum of four each. In the Success String field, enter the string that indicates the login was successful. This field must contain a value when automatic login is enabled. In the Failure String field, enter the string that indicates the login was unsuccessful.
Page 164: Enabling Or Disabling Debug Mode For Login Scripts
Click Login Scripts. Select or clear the Automate Login checkbox. The default value is enabled. When automatic login is enabled, the login script must contain Success and Failure strings. Click OK to exit the dialog box and save any changes. -or- Click Cancel to exit the dialog box without saving any changes.
Page 165: Using Logging
Click Telnet. Select or clear the Open Window before login checkbox. When enabled, the Serial Session Viewer window appears before login is attempted. When disabled, the Serial Session Viewer window appears only after a successful login. Click OK to save the new setting. -or- Click Cancel to exit without saving the new setting.
Page 166: Enable Or Disabling Automatic Logging
The format of log file names is shown as follows, where <mmddyy> represents the month, day and year, and <hhmmss> represents the current hour, minute, and second in military time. scvTelnet<mmddyy>_<hhmmss>.log The default log directory is session-specific. Each Serial Session Viewer session can have its own location for storing log files.
Page 167: Changing The Default Log File Directory
When you enable logging, the Default Directory field displays the current default location for log files. If that is the desired directory, click OK. To change the default log file directory, see "Changing the default log file directory (on page 167)." Automatic logging will start or stop when you initiate the next Serial Session Viewer session to that server.
Page 168: Pausing Logging
Enter a new file name in the File name field. If you enter a file name that already exists, the new file overwrites the old file. Click Log to confirm the directory selection and begin logging. -or- Click Cancel to exit the dialog box and cancel the request to start logging. When logging begins, the logging status label indicates Logging.
Page 169: Pasting System Clipboard Contents
The copied data is saved to the system clipboard. You can then paste the clipboard contents into this or another application. Pasting system clipboard contents Place textual data on the system clipboard, using a text editor or other application. Initiate a Serial Session Viewer session. At the point where the clipboard contents should be pasted, select Options>Edit>Paste from the Serial Session Viewer.
Page 170 Select Macros>Configure. The Configure Macros dialog box appears. To create a macro, click Create. -or- To edit a macro, click Edit. The Create Macro or Edit Macro dialog box appears. If you are creating a macro, enter a 1 to 32 character name in the Name field. Select a from the Key dropdown menu to define a hotkey for the macro.
Page 171: Grouping Macros For Serial Console Switches
Select the macro from the Defined Macros list. Click Delete. You are prompted to confirm the deletion. Click Yes to confirm. -or- Click No to cancel the deletion. You are returned to the Configure Macros dialog box. Click Close. Grouping macros for serial console switches The Configure Macro Groups dialog box enables you to group macros into logical groups.
Page 172 Select Macros>Configure Macro Groups. Click Create. The Configure Macro Groups dialog box appears. In the Create Macro Group panel, click Create. Position the cursor in the Group Name field, and enter the new group name. Duplicate macro group names are not allowed. Press Enter.
Page 173 Click Cancel to return to the Configure Macros Groups dialog box without saving any changes. Click Close. To delete a macro group: Select Macros>Configure Macro Groups. The Create Macro dialog box appears. In the Configure Macro Groups panel, select the macro group name in the Group Name column. To select multiple macro group names, press the Shift or Ctrl key while clicking the group names.
Page 174: Organizing The System
Organizing the system Customizing console switch and server properties Individual console switch and server properties can be altered by selecting a console switch or server from the selected view and selecting the Properties dialog box. The KVM console switch Properties dialog box contains the following: •...
Page 175 (Optional for servers only) Select the server type (user definable). If the selection is not in the dropdown list, enter the name of the new type. (Optional) Select the icon to display for the unit. (Optional) Select the Site, Department, and Location. If the selection is not in the dropdown list, enter the name of the new assignment.
Page 176 Serial console switch General tab Server General tab Organizing the system 176...
Page 177: Telnet Tab
Telnet tab The serial console switch and server Telnet tabs enable you to view and change Telnet properties and options. Telnet properties include the IP address (for servers only) and the port number to connect to when establishing a telnet session to the unit. You can designate the built-in Serial Session Viewer as the telnet client or you can specify another telnet application.
Page 178 Server Telnet tab Telnet properties include the IP address (for servers only) and the port number to connect to when establishing a telnet session to the unit. You can designate the built-in Serial Session Viewer as the telnet client or you can specify another telnet application. When you specify the built-in application, you can choose to open the window before logging in to troubleshoot login scripts.
Page 179 For servers only, in the Port field, enter a port number in the range 23 to 65535. If the field is left blank, port 23 is used. For serial console switches, the console switch's IP address is used along with default CLI telnet port 23.
Page 180: Network Tab
Click Cancel to exit without saving the new settings. Network tab The Network tab enables you to change the IP address for the console switch. Select an individual console switch from the selected view. Select View>Properties from the menu bar. The General tab appears. -or- Click Properties.
Page 181 KVM console switch Network tab Serial console switch Network tab Organizing the system 181...
Page 182: Ilo Tab
iLO tab The iLO tab enables you to populate the iLO URL field with the iLO address for the server. After you have entered your iLO addresses, an iLO button appears at the bottom of the main window. By default, clicking iLO launches the default system browser and goes to the specified URL.
Page 183 Select an individual unit from the selected view. Select View>Properties from the menu bar. The General tab appears. -or- Click Properties. The General tab appears. -or- Highlight and right-click the unit, and select Properties. The General tab appears. (Optional) Click Information, and then enter complete the required fields. Click Apply>OK to save the new settings.
Page 184: Connections Properties
Serial console switch Information tab Server Information tab Connections properties Selecting Connections enables enables you to view connections. Organizing the system 184...
Page 185: Vnc Tab
Select an individual server from the selected view. Select View>Properties from the menu bar. The General tab appears. -or- Click Properties. The General tab appears. -or- Highlight and right-click the server, and select Properties. The General tab appears. Click Connections to view the connection path. Click Apply>OK to save the new settings.
Page 186 When you indicate a user-specified VNC application to launch, you can include its command line arguments. A selection of macros is available for placement in the command line. This might be useful for automatic replacement of variables such as IP address, port number, user name, and password. For VNC commands that do not provide their own GUI, such as those for standard Windows®, Linux, and UNIX®, you can have the VNC application launch from within an operating system command window.
Page 187 Select or clear the Use Default option. When enabled, the default global settings specified in Options will be used, and all other portions of the VNC Application to Launch area are disabled. (Optional) Enter the directory path and name, or click Browse to locate the path and name. (Optional) Enter command line arguments in the box below the path and name.
Page 188: Rdp Tab
(Optional)Select or clear the Launch in command window option. When enabled, the user-specified VNC application will be launched from within an operating system command window. If finished, click Apply>OK to save new settings. -or- Click Cancel to exit without saving the new settings. RDP tab Selecting Tools>Options RDP enables you to configure the default RDP properties.
Page 189 When you indicate a user-specified RDP application to launch, you can include its command line arguments. A selection of macros is available for placement in the command line. This might be useful for automatic replacement of variables such as IP address, port number, user name, and password. For RDP commands that do not provide their own GUI, such as those for standard Windows®, Linux, and UNIX®, you can have the RDP application launch from within an operating system command window.
Page 190 Select or clear the Use Default option. When enabled, the default global settings specified in Options will be used, and all other portions of the RDP Application to Launch area are disabled. (Optional) Enter the directory path and name, or click Browse to locate the path and name. (Optional) Enter command line arguments in the box below the path and name.
Page 191 (Optional)Select or clear the Launch in command window option. When enabled, the user-specified RDP application will be launched from within an operating system command window. If finished, click Apply>OK to save new settings. -or- Click Cancel to exit without saving the new settings. Organizing the system 191...
Page 192: Http/Https Ports Tab
Http/Https Ports tab Selecting Tools>Options HTTP/HTTPS Ports enables you to configure the default HTTP/HTTPS ports used by the HP IP Console Viewer for Discovery. Customizing options Creating custom field labels A custom field label enables you to change the Site, Department, and Location names of the column headings that display in the group and selected views.
Page 193 Setting up custom field labels From the main window, select Tools>Options. The Options dialog box appears. Select a custom field label. Click Modify. The Modify Custom Field dialog box appears. Enter the singular and plural versions of the field label. The length can be from one to 32 characters. A blank value is not allowed.
Page 194 Creating new sites, departments, or locations Select View>Properties. -or- Select the unit, and click Properties. The Properties dialog box appears. Click General, and select the site, department, or location from the dropdown list. NOTE: The dropdown lists are empty until you enter more than one name for the selected category.
Page 195: Modifying The Selected View On Startup
Modifying the selected view on startup The main window can be resized. Each time the HP IP Console Viewer is displayed, the window appears in the default size and location. The default size and location can be changes while the HP IP Console Viewer is running, but the information is not saved.
Page 196: Assigning Units To Sites, Departments, Locations, Or Folders
Assigning units to sites, departments, locations, or folders You can assign a console switch or server to a site, department, location, or folder. This menu item is enabled only when a single console switch or server is selected in the selected view. These custom targets are defined in the General tab of the Properties dialog box.
Page 197: Deleting A Unit, Site, Department, Location, Or Folder
types, sites, departments, location, and folders. However, none of these actions results in console switches being deleted from the local database. The HP IP Console Viewer also provides the ability to rename items in the database, including individual devices, sites, departments, locations, and folders. NOTE: For legacy analog console switches (such as HP 2 x 16 KVM Server Console Switches, HP 1 x 8 IP Console Switches, and Compaq legacy analog switches) if you delete or rename a...
Page 198: Exporting Local Databases
While the database is being saved, no other activity is allowed. All other windows, including the Video Session Viewer and Serial Session Viewer, and Manage Console Switch windows, must be closed. If other windows are open, a message appears, prompting you to either continue, which closes all open windows, or quit, which cancels the database save process.
Page 199: Loading Local Databases
Select File>Database>Export. The Database Export dialog box appears. Enter a file name in the file name: field, and browse to the location where you want to save the exported file. Select the type of export format from the Files of Type: dropdown list. Click Export.
Page 200 Click Load. A progress bar appears. When loading is finished, a message appears, indicating that the load was successful. Organizing the system 200...
Page 201: Using Directory Services Integration
Using directory services integration Using LDAP You have two options for using LDAP: • LDAP Authentication Only • LDAP Authentication and Access Control LDAP Authentication Only mode In LDAP Authentication Only mode, the domain controller authenticates the user name and password, but access rights are still held on the console switch itself.
Page 202: Ldap Authentication And Access Control Mode
LDAP Authentication and Access Control mode In LDAP Authentication and Access Control mode, the domain controller authenticates and authorizes access. Item Description User sends request to console switch to access server Console switch sends ID and password to domain controller Directory authenticates and authorizes If authenticated and authorized, console switch opens console session for user...
Page 203 • User Attribute mode • Group Attribute mode LDAP Authentication and Access Control Basic Mode In basic mode, if the domain controller authenticates the user, the console switch grants full access to the console switch or the server. HP recommends that the basic mode only be used for setup and testing and not in the production environment.
Page 204 LDAP Authentication and Access Control User Attribute Mode In user attribute mode, if the domain controller authenticates the user, it grants access to the console switch or the server based on the access rights assigned to the user in the Active Directory. Item Description User sends request to console switch to access server...
Page 205: Enabling Directory Services Integration
LDAP Authentication and Access Control Group Attribute Mode In group attribute mode, if the domain controller authenticates the user, it grants access to the console switch or the server based on the permissions granted to the group that the user and the console switch, or server, are in.
Page 206 Click Console Switches, and press the Enter key. A login dialog box appears. Enter a valid user name and password. If a new user name and password have not been created, the default user name is Admin (case-sensitive) and the default password field is blank. IMPORTANT: If you have previously logged in to the console switch during the same HP IP Console Viewer session, the login dialog does not display unless authentication or...
Page 207: Entering The Default Ldap License Key
To enable LDAP authentication and authorization, select Use LDAP Authentication. The LDAP method uses information from the LDAP Directory Service to authenticate and authorize users attempting to either manage the console switch or view and attached server. If Use LDAP Authentication is selected, then by default both authentication and authorization are controlled by information stored in the LDAP Directory Service.
Page 208: Configuring Ldap Parameters
Click Add. The Enter Key dialog box appears. Enter 387S9-M3228-JRM85-D2RZQ-NK8JR. Click OK. -or- Click Cancel to exit without saving changes. Configuring LDAP parameters There are differences between the LDAP-based access controls used by console switches and Kerberos- based access control that Windows® uses by default when users log in to workstations and servers. Some of the user account properties in Active Directory apply only to Kerberos, while some apply to both Kerberos and the LDAP-based access controls used by console switches.
Page 209: Server Parameters Tab
Server Parameters tab The Server Parameters tab displays the parameters that define LDAP server connection information. Enter the primary and secondary server IP address of Directory servers in the IP Address fields. Each address can be entered in numeric form or by specifying a symbolic name that is registered in the DNS service.
Page 210: Query Parameters Tab
The Search DN field enables you to define any user in the directory that the console switch uses to log in to the Directory Service. NOTE: HP recommends creating a user account specifically for LDAP queries instead of using the admin account. After the console switch is authenticated, the Directory Service grants it access to the directory to perform the user authentication queries, specified on the Query Parameters tab.
Page 211 The Query Parameters tab specifies which query method is used to authenticate and authorize the user. It also specifies the parameters associated with each query method. The console switch performs two different types of queries. Query Mode (Console Switch) is used to authenticate administrators attempting to access the console switch itself.
Page 212: Console Switch And Server Query Modes
The Group Container Mask field defines the object type of the Group Container, which is normally an organizational unit. The default value is ou=%1. The Target Mask field defines a search filter for the server. The default value is cn=%1. The Access Control Attribute field specifies the name of the attribute that is used in Attribute query modes.
Page 213 The following are examples showing how the Admin and Console Switch User attribute modes are defined in Active Directory for a user named Charlie. Using directory services integration 213...
Page 214 • Group Attribute A user name, password, and group attribute query is made to the LDAP Directory Service for a console switch when using Query Mode (Console Switch) or for all servers when using Query Mode (Server). If a group is found containing the user and the console switch, the user is given access to the console switch, connected servers, or both, depending on the group contents, when using Query Mode (Console Switch).
Page 215 a member named R&D, which is a group. The R&D group might contain a member named Domestic, which is a group. IMPORTANT: Before implementing LDAP functionality, see "HP IP Console Switch directory services integration setup tutorial (on page 277)" for a better understanding of how LDAP works.
Page 216 The following are examples of groups defined in Active Directory. Using directory services integration 216...
Page 217: Setting Up The Active Directory For Performing Group Attribute Mode Queries
Setting up the Active Directory for performing group attribute mode queries Before you can use any of the querying modes for console switches or servers, first make changes to your Active Directory so that the selected querying mode can assign the correct authorization level for the user. IMPORTANT: Before implementing LDAP functionality, see "HP IP Console Switch directory services integration setup tutorial (on page 277)"...
Page 218 On the domain controller, add an OU group container. Create a user, and assign a password (consoleldap) in the Users Directory. Create a computer account for the console switch in the Directory. Create groups for console switch administrators and users. Add the users and servers (or console switches) to the appropriate groups.
Page 219: Using The On-Board Web Interface (Obwi)
Using the on-board Web interface (OBWI) Setting up the OBWI Install a version of the HP IP Console Viewer that supports the OBWI. Upgrade the firmware on the console switch ("Upgrading the console switch firmware for OBWI compatibility" on page 219). Upgrade the firmware on the interface adapter ("Upgrading interface adapter firmware for OBWI compatibility"...
Page 220: Upgrading Interface Adapter Firmware For Obwi Compatibility
When the upgrade is complete, you are prompted to reboot the console switch so that it can use the new firmware. Click Yes to reboot now, or click No to reboot later. Upgrading interface adapter firmware for OBWI compatibility You can upgrade the firmware for all interface adapters of a given type in one batch process, or you can upgrade the firmware for each interface adapter individually.
Page 221: Migrating Console Switches To The Obwi
Under the Versions heading in the Category list, select the Interface Adapters subcategory. From the ID list, select the interface adapter. The IDs that appear in the list are a combination of the EID of the interface adapter and the name of the device (server or console switch) that is connected to the interface adapter.
Page 222: Synchronizing The Local And Console Switch Databases
Click Next. From the Available Console Switches list, select the console switch to migrate. If the console switch is not listed, you might have closed the Manage Console Switch window before the firmware upgrade was complete. If so, close the Migration Wizard, and then open the Manage Console Switch window to enable the upgraded firmware to be detected.
Page 223: Launching The Obwi
Click Next. (Optional) To include offline servers in the database, select Include Offline Servers. (Optional) To overwrite the server names in the local database, select Replace Database names with names from the IP Console Switch. Click Next. When synchronization is complete, the Detected Changes window opens. Click Finish.
Page 224 To prevent this dialog box from appearing every time you launch the OBWI, manually install the certificate ("Installing the certificate" on page 226). NOTE: For information on troubleshooting security certificate errors, see the Certificate error troubleshooting ("Certificate errors" on page 262) section in this guide. Enter your username and password.
Page 225 Select a server from the Connections tab to launch a video viewer session. NOTE: If Java™ is not installed, a Java Not Detected error message appears. If Java™ is installed, the following dialog appears and you must manually check the file association of the .jnlp file with Java(TM) Web Start Launcher.
Page 226: Installing The Certificate
Installing the certificate Click Tools. Select Install Web Server Certificate. Use one of the following options to install the certificate. Select Fields, and then complete the required fields. NOTE: The name entered in the Common Name field must match the fully qualified domain name you designated for the device.
Page 227 Select File, browse to the location of the certificate file, and then click Open. IMPORTANT: When installing the certificate using the file method, the certificate file must be in an encrypted format, with no human readable characters within the key definitions. Using the on-board Web interface (OBWI) 227...
Page 228: Downgrading Console Switch Firmware
Click Install. Downgrading console switch firmware Using the OBWI, load an older version of the console switch firmware that does not support the OBWI ("Upgrading console switch firmware" on page 243). Delete the console switch from the HP IP Console Viewer software database: In the Explorer, click the Console Switches tab.
Page 229: Status
Status The Status tab enables you to disconnect users, view information about user connections, and take control of a server (preemption). Configure The Configure tab lists various console switch features (categories). When you select a category, the category parameters for that console switch appear and can be modified. For example: Using the on-board Web interface (OBWI) 229...
Page 230 • The Console Switch category enables you to view the console switch type and serial number. • The Users category ("User accounts" on page 234) enables you to add, modify, or delete user accounts and assign access levels to each user. Using the on-board Web interface (OBWI) 230...
Page 231 • The Network subcategory enables you to change the network settings (IP address, Subnet Mask, Gateway, and LAN speed), specify up to three IP addresses for DNS servers, and enable or disable BOOTP and IPv4 or IPv6. The use of either IPv4 or IPv6 is available through the network, however you cannot simultaneously use these functions.
Page 232 • The Sessions subcategory enables you to apply controls to video sessions. Changes that you make to session parameters apply only to future connection requests, not to existing connections. The Video Session parameter includes the following options: — The timeout option specifies how long a video session can remain inactive before the console switch closes the session.
Page 233: Tools
Tools The Tools tab enables you to upgrade firmware on interface adapters and console switches, save and restore configuration files, reboot console switches, manage and restore user databases, and install web server certificates. Using the on-board Web interface (OBWI) 233...
Page 234: User Accounts
User accounts User account information is located in the Users category under the Configure tab. When you select the Users category, the OBWI displays a list of usernames and their user access levels. You can add, modify, or delete a user, and you can assign their access level (Console Switch Administrator or User).
Page 235: Changing A User Password
Enter a password. The password must have 5-16 characters and must contain uppercase characters, lowercase characters, and a number. In the Verify Password box, enter the password again. Select the access level for this user. If you select the User access level, set the server access rights for the user. Click Set User Access Rights.
Page 236: Snmp
In the Duration field, enter a value from 1 to 99 to indicate the number of hours that a lockout lasts. To disable the Security Lock-Out feature: Click the Configure tab. In the left column, select the Users category. Clear the Enable Lock-Outs checkbox. This procedure does not unlock any locked accounts.
Page 237: Enabling Snmp Traps
Select the Enable SNMP checkbox. In the Name box, enter the fully qualified domain name of the system. In the Contact box, enter the name of a contact person. Enter the names of the Read, Write, and Trap communities. These names (using from 1 to 64 characters) specify the community strings that must be used in SNMP actions.
Page 238: Resynchronizing Server Connections
Resynchronizing server connections The Servers category displays the servers that exist in the software database and information about how the servers are connected to the selected console switches. The Path column displays the current server connection. This can be to either an interface adapter or a tiered switch.
Page 239: Configuring Tiered Switches
Configuring tiered switches Click the Configure tab. Select the Servers category, and then select the Cascade Devices subcategory. Select the name of the console switch. (Optional) Enter the new name of the console switch. Enter the number of channels on the console switch. (Acceptable values are from 4 to 24.) Click Save.
Page 240: Versions
Versions The Versions category displays the version numbers of the console switch firmware, FGPA, and ASIC. Using the on-board Web interface (OBWI) 240...
Page 241 The Interface Adapters subcategory displays version information. You can upgrade the interface adapter firmware by clicking the interface adapter EID. If the interface adapter is connected to a tiered switch, clicking the EID also enables you to reset the interface adapter. Using the on-board Web interface (OBWI) 241...
Page 242 If you select Enable Auto-Upgrade for all Interface Adapters, all interface adapters that are connected to the console switch automatically update their firmware to the version available on the console switch when they are connected. To view firmware version information for an interface adapter: Click the Configure tab.
Page 243: Upgrading Firmware Using The Obwi
Select the EID of the interface adapter. If the interface adapter uses a PS2 connection, the console switch might not recognize the tiered switch. In this case, you must reset the interface adapter that connects the tiered switch to the console switch. To reset an interface adapter: Click the Configure tab.
Page 244 Click Upgrade Console Switch Firmware. Use one of the following options to specify the firmware file to be used for the upgrade: Select TFTP Server, enter the IP address of the server on which the firmware file is stored, and then enter the firmware filename and directory location.
Page 245 Select File System, browse to the location where the firmware file is stored, and then click Open. Select FTP Server, enter the IP address of the FTP server where the firmware file is located, enter the filename and directory location of the file, and then enter the user name and password. Click Upgrade.
Page 246 When the upgrade is complete, the console switch automatically reboots. Upgrading interface adapter firmware in batch mode Click the Tools tab. Click Upgrade IA Firmware. Select the checkbox for each type of interface adapter to upgrade. If a checkbox is clear, either no interface adapters of that type are in the system or all such interface adapters are already running the latest firmware.
Page 247: Rebooting A Console Switch
Select the EID of the interface adapter. Compare the existing firmware with the firmware that appears in the Firmware Available field to confirm that upgrades are available. Click Load Firmware. (Optional) When the upgrade is complete, repeat steps 3 to 5 for other interface adapters. Click OK.
Page 248 Saving console switch configuration files Click the Tools tab. Click Save Console Switch Configuration. Choose one of the following options to save the Console Switch Configuration file to: Using the on-board Web interface (OBWI) 248...
Page 249 Select File System. (Optional) Enter a password that you want to use when restoring the configuration file to a console switch, and then enter the password again in the Verify Password field. Click Browse and then navigate to the location where you want the configuration file to be saved.
Page 250 Select FTP Server. (Optional) Enter a password that you want to use when restoring the configuration file to a console switch, and then enter the password again in the Verify Password field. Then enter the filename, IP address and your user name and password. Click Save.
Page 251 Restoring a configuration file to a console switch Click the Tools tab. Click Restore Console Switch Configuration. Use one of the following options to restore the configuration file: Using the on-board Web interface (OBWI) 251...
Page 252 Select File System. Click Browse to navigate to the location where the configuration file is saved, and then enter the file password. Select FTP Server and then enter the file name, file password, IP address, user name, and password. Using the on-board Web interface (OBWI) 252...
Page 253: Managing User Databases
Click Restore. (Optional) If the configuration file was saved with a password, enter the password. Click OK. When the file restoration process is complete, a confirmation dialog box opens. Click OK. Managing user databases You can simplify the process for configuring several console switches by saving a user database file that contains all user accounts for one particular console switch and then writing the file to other console switches.
Page 254 Select File System. (Optional) Enter a password that you want to use when restoring the user database file to a console switch, and then enter the password again in the Verify Password field. Click Browse and then navigate to the location where you want the user data file to be saved. Using the on-board Web interface (OBWI) 254...
Page 255 Select FTP Server. (Optional) Enter a password that you want to use when restoring the user database file to a console switch, and then enter the password again in the Verify Password field. Then enter the filename, IP address, user name, and password. Click Save.
Page 256 Restoring a user database Click the Tools tab. Click Restore Console Switch User Database. Use one of the following options to restore the configuration file from: Using the on-board Web interface (OBWI) 256...
Page 257 Select File System. Click Browse to navigate to the location where the configuration file is saved, and then enter the file password. Select FTP Server and then enter the file name, file password, IP address, user name, and password. Using the on-board Web interface (OBWI) 257...
Page 258: Setting Virtual Media Options
Click Restore. (Optional) If the configuration file was saved with a password, enter the password. Click OK. When the file restoration process is complete, a confirmation dialog box opens. Click OK. Setting virtual media options Click the Configure tab. In the left column, select Console Switch. Select Virtual Media.
Page 259 Click Save. Using the on-board Web interface (OBWI) 259...
Page 260: Troubleshooting
Troubleshooting Troubleshooting chart Issue Resolution You cannot access any The IP address in the Network subcategory and under the console switch Properties servers on the console window must match to have full functionality. switch after changing the IP address. The LAN connection in Wait one minute and verify the status of the LAN connection in the Diagnostics the Diagnostic screen screen.
Page 261 Issue Resolution The Discover Wizard Erase the IP address in the From Address: and the To Address: fields and enter the does not discover correct information. console switches. The Discover Wizard is It takes 4 seconds to scan each IP address. Enter a smaller range of IP addresses. taking a long time to scan a range of IP addresses.
Page 262: Certificate Errors
Issue Resolution Virtual Media is not Be sure that you are using a: working properly. • HP IP console switch with Virtual Media (2 x 1 x 16, 4 x 1 x 16), or an HP KVM Server Console Switch with Virtual Media (2 x 16) •...
Page 263: Microsoft Internet Explorer 6
Microsoft Internet Explorer 6 To resolve security certificate errors in Microsoft® Internet Explorer 6, you must complete the following steps to import a certificate: Select View Certificate. Troubleshooting 263...
Page 264 Select Install Certificate. Troubleshooting 264...
Page 265 Complete the steps in the Certificate Import Wizard. Select Place all certificates in the following store. Troubleshooting 265...
Page 266: Microsoft Internet Explorer 7
Click Browse and select the Trusted Root Certification Authorities folder. Select Yes when prompted with the Security Warning. Microsoft Internet Explorer 7 To resolve security certificate errors in Microsoft® Internet Explorer 7, you must complete the following steps to import a certificate: Troubleshooting 266...
Page 267 Select the error field in the browser to view the certificate error. Select View Certificates. Troubleshooting 267...
Page 268 Select Install Certificate. Troubleshooting 268...
Page 269 Complete the steps in the Certificate Import Wizard. Select Place all certificates in the following store. Troubleshooting 269...
Page 270: Mozilla Firefox
Click Browse and select the Trusted Root Certification Authorities folder. Select Yes when prompted with the Security Warning. Mozilla Firefox To resolve security certificate errors in Mozilla Firefox, you must complete the following steps to install a certificate for the IP Console Switch: Select Accept this certificate permanently.
Page 271 When prompted with the Domain Name Mismatch dialog, click OK. Ensure that the name entered in the Common Name matches the fully qualified domain name you designated for the device. To locate the device name, click the Configure tab and then select the SNMP category from the left column.
Page 272: Upgrading The Firmware
Upgrading the firmware Using the file system to upgrade firmware You can upgrade the console switch and serial console switch firmware by using the file system. CAUTION: Do not power down the console switch while it is upgrading. This process can take up to 10 minutes to complete.
Page 273: Using Tftp For Firmware Upgrades
Using TFTP for firmware upgrades To upgrade the firmware using TFTP, you need a TFTP service application on the workstation or server that will be used to perform upgrades. After the TFTP has been enabled, then begin the upgrade. Before beginning the upgrade procedure, be sure that the Secure TFTP Server is installed and that the GET access permissions for the folder that the updated file is in is selected.
Page 274: Upgrading The Firmware Using Tftp On Linux Operating Systems
Verify that in.tftpd service is running with the following ps -ef | grep tftpd. By default, the /etc/xinetd.d/tftp configuration files use /tftpboot as the directory. Create a /tftpboot directory, if it does not exist, and set the permissions for public access. Copy the firmware file to /tftpboot.
Page 275 F—Hardware Flow Control: No G—Software Flow Control: No Press the Enter key to return to the Confirmation menu. Scroll down to the Save setup as dfl option, and press the Enter key. Scroll down the Configuration menu to the Exit from Minicom option, and press the Enter key. From the Linux command prompt, enter minicom.
Page 276 Select Option 2—Firmware Management. The Firmware Management menu appears. Select Option 1—Flash Download. Enter the IP address of the TFTP server that has the updated file and the exact path of the updated file (for example, C:\tftp\h3_0_0_english.fl). Enter Y at the prompt to download the upgrade file from the given IP address. The console switch begins upgrading.
Page 277: Hp Ip Console Switch Directory Services Integration Setup Tutorial
HP IP Console Switch directory services integration setup tutorial HP IP Console Switch directory service setup This section is intended as a tutorial to familiarize you with the LDAP directory functionality of the HP IP Console Switch. It walks you through the steps to set up an HP IP Console Switch to work with a Microsoft®...
Page 278: Settings Used For This Example
Item Description Interface adapter (Widget-AD-IA) Server (Brahms) Interface adapter (Brahms) HP IP Console Switch (Rack-10-KVM) Server (Handel) Interface adapter (Handel) Server (Bach) Interface adapter (Bach) Windows Server™ 2003 HP IP Console Viewer (Vivaldi) Interface adapter (Vivaldi) Settings used for this example •...
Page 279 From the local OSD, press the Print Scrn key. The Main dialog box appears. Click Setup>Names. The Names dialog box appears. Click the name you want to change, and click Modify, rename the interface adapter and click Install and launch the HP IP Console Viewer on a Windows® workstation that has network connectivity to the HP IP Console Switch.
Page 280 IMPORTANT: The HP IP Console Switch names must always be synchronized with the names used for associated computer account objects in the directory LDAP Directory Service. It is also important to note that active directory allows multiple computer accounts to have the exact same name, as long as each account is in a different domain from the others.
Page 281 Select Global>Authentication. Enable LDAP on the HP IP Console Switch. Click Use LDAP Authentication. On the Server Parameters tab, enter the IP address of the Primary Server (domain controller). On the Search Parameters tab, enter the Search DN: cn=consoleldap,cn=users,dc=widget,dc=com HP IP Console Switch directory services integration setup tutorial 281...
Page 282 NOTE: The first cn field must match the full name of the user, not the login name. For example, if the user name is John Doe, then cn=John Doe (note the space in the name). Enter the search password for the consoleldap user account. Enter the search base: dc=widget,dc=com.
Page 283 NOTE: In a production environment, work with your IT department to create the console query user account and add the console switches OU. You need a level of access that enables you to create, delete, modify groups, and add computer objects for interface adapters connected to non-domain systems within the console switches OU.
Page 284 Create a user named consoleldap, and assign a password. Select User>New>User. Follow the wizard. Set the password to not expire. HP IP Console Switch directory services integration setup tutorial 284...
Page 285 Click Finish. Create two groups for console switch administrators and users. Right-click CONSOLESWITCHES OU. Choose New Group. Create groups names ConsoleSwitchAdministration and ServerAdministration. HP IP Console Switch directory services integration setup tutorial 285...
Page 286 NOTE: In a production environment, groups in the Active Directory console switches OU would match the organization's hierarchy, usually by function, geography, or a combination. • Set up the default access control for the Server Administration group by right-clicking the group object and selecting Properties for the group and entering KVM User and Serial User in the group's notes field.
Page 287 Click OK. From HP IP Console Viewer, log in to the HP IP Console Switch from the HP IP Console Viewer. Click Global>Authentication. On the Query Parameters tab, click Basic for Query Mode (Console Switch) and Basic for Query Mode (Server). IMPORTANT: This query mode should be used to test your LDAP configuration only.
Page 288 Test the LDAP communications from the HP IP Console Viewer. Click Tools>Clear Login Credentials. IMPORTANT: Perform this step each time you want to test authentication of a user to a target system. HP IP Console Switch directory services integration setup tutorial 288...
Page 289 Choose a server previously added to the directory as a computer to one of the groups, and log in as user from the same group. After the basic LDAP communication test succeeds, log in to the HP IP Console Switch from the HP IP Console Viewer.
Page 290: Authentication Only
Enter the Group Container CONSOLESWITCHES and test again. Authentication only This procedure gives an example of how to use Active Directory for authentication only. Perform steps 2 through 10 from the procedure in "Authentication and group-level access controls (on page 278)." Enable LDAP, if necessary.
Page 291 IMPORTANT: Perform this step each time you want to test authentication of a user to a target system. After the basic LDAP communication test succeeds, log in to the console switch from the HP IP Console Viewer. Select Global>Authentication. Select Use LDAP for Authentication Only. The fields on the Query Parameters tab are deactivated when this box is selected.
Page 292: Ldap Client Behavior Overview
LDAP client behavior overview UID masks (simple and complex) The client application login dialog enables you to enter two fields, labeled User name and Password. Before the HP IP Console Viewer was enhanced with support for directory services integration (LDAP), the product supported only one form of authentication, which used an internal database.
Page 293 • User Logon Name (pre-Windows® 2000) When a new object is created, the values entered for each of these fields is stored in a specific attribute type within the object. In some cases, a value gets stored in more than one attribute. Some of the values are subsequently available for viewing and modification in the Properties dialog.
Page 294 Field label in new Field label in user Active Directory Comments object-user dialog properties attribute type - - - - - E-mail mail - - - - - - - - - - employeeID Accessed by LDAP tool, such as ADSI Editor.
Page 295 As an example, consider the following instance of the New Object-User dialog. LDAP client behavior overview 295...
Page 296 LDAP client behavior overview 296...
Page 297: Additional Attributes Available In User Properties
Additional attributes available in user properties In addition to the Properties that are set during object creation, there is at least one property that could potentially be useful as a credential: E-mail. LDAP client behavior overview 297...
Page 298: Additional Attributes Available Through The Adsi Editor
Additional attributes available through the ADSI Editor In addition to the attributes set during object creation and in the Properties dialog, at least two other attributes could be useful as a credential: employeeID and employeeNumber. These attributes can be viewed and set using a standard Microsoft tool, ADSI Editor. The following is an example of using the ADSI Editor tool to set the value of employeeID.
Page 299: Uid Mask For Single Factor Credentials
UID mask for single factor credentials The UID Mask field is used to specify which attributes are used as credentials. The default value for UID mask is shown in the following example. In the preceding example, the UID mask value indicates that a single attribute, sAMAccountName, is being used in the credentials.
Page 300 In the following example, the user name field contents would be parsed into two tokens: the first token is the string anystringvalue and the second token is widget.com. LDAP client behavior overview 300...
Page 301 These two tokens are referenced in the UID mask by using the replacement parameters %1 and %2, respectively. Consider the use of UPN as an example of using two replacement parameters. LDAP client behavior overview 301...
Page 302 When using UPN, enter the entire UPN in the User logon name field of the login dialog of the client application. In this example, the console switch firmware parses the user name field into two pieces: the replacement parameter %1 gets the value "anystringvalue" and the replacement parameter %2 gets the value "widget.com."...
Page 303 The corresponding UID mask is shown in the following example. LDAP client behavior overview 303...
Page 304 Another valid way to UPN is to change the first part to have the form: <first name>.<last name>. The UID mask does not need to change because the period between the first name and the last name is not a token delimiter.
Page 305 Of course, for this example, the user logon name would have to be changed in the Active Directory object representing the user. LDAP client behavior overview 305...
Page 306 To use the e-mail address as part of the credentials, the UID mask would be changed to the following. LDAP client behavior overview 306...
Page 307: Uid Mask For Multiple Factor Credentials
UID mask for multiple factor credentials For added security, an administrator might want to implement a policy that says authentication is based on UPN, password, and employeeID. In other words, the user logging in must know the UPN, password, and employeeID. The UID mask must be changed to indicate there are two attributes used as the "user name."...
Page 308 The string entered by the user in the login dialog can be any of the following three token delimiters from which to choose. LDAP client behavior overview 308...
Page 309: Serial Session Viewer Terminal Emulation Modes
Serial Session Viewer terminal emulation modes Terminal emulation modes overview The Serial Session Viewer supports several terminal emulation modes. This section lists the supported terminal emulation control characters and byte sequences for the modes. Encode refers to how the client application processes typed keys. Decode refers to how the client application processes data coming from the server.
Page 310: Vt100 Terminal Emulation
VT102 receive code Action Insert Line (IL) Inserts n lines at the line where the cursor is currently positioned. Lines displayed below the cursor position move down. Lines moved past the bottom margin are lost. Delete Line (DL) Deletes n lines starting with the line where the cursor is currently positioned. As lines are deleted, lines below the cursor position move up.
Page 311 Hex code Function mnemonic Encode/decode Ctrl+W Yes/No Ctrl+X Yes/No Ctrl+Y Yes/No Ctrl+Z Yes/No Ctrl+[ Yes/No Ctrl+\ Yes/No Ctrl+] Yes/No Ctrl+- Yes/No Ctrl+? Yes/No VT100 ANSI set and reset mode cursor keys VT100 ANSI set and reset mode cursor keys lists the VT100 ANSI mode and cursor keys for set and reset modes.
Page 312 Control sequence Definition Encode/Decode Esc [ Pn; Pn H Cursor position No/Yes Esc [ Pn A Cursor up No/Yes Esc [ Pn c Device attributes No/No Esc # 8 Screen alignment display No/Yes Esc # 3 Double height line- top half No/No Esc # 4 Double height line- bottom half No/No...
Page 313 Control sequence Definition Encode/Decode Esc ( 1 Select character set G0 alt. No/No character ROM standard character set Esc ) 1 Select character set G1 alt. No/No character ROM standard character set Esc ( 2 Select character set G0 alt. No/No character ROM special graphics...
Page 314: Vt220 Terminal Emulation
Control sequence Definition Encode/Decode Esc [ ? 1 l Modes to rest- cursor key No/No mode cursor Esc [ ? 2 l Modes to reset VT52 No/No Esc [ ? 3 h Modes to set- 132 columns No/No Esc [ ? 3 l Modes to reset- 80 columns No/No Esc [ ? 4 h...
Page 315 VT220 keyboard PC keyboard VT200 KB byte sequence Right arrow Right arrow Esc [ C Up arrow Up arrow Esc [ A Down arrow Down arrow Esc [ B Keypad / Keypad / Keypad * Keypad * Keypad - Keypad - Keypad + Keypad + Keypad .
Page 316 VT220 keyboard function VT220 keyboard byte sequence Up arrow Esc [ A Down arrow Esc [ B Right arrow Esc [ C Left arrow Esc [ D Set cursor to home position Esc [ H Set cursor to home position Esc [ f Character attributes Esc [ m...
Page 317: Vt52 Terminal Emulation
VT220 keyboard function VT220 keyboard byte sequence Insert character Esc [ Pn @ Erase Pn characters Esc [ Pn X VT52 terminal emulation VT52 encoding lists the keystroke mapping (encoding) for VT52 terminal emulation. VT52 keyboard PC character sequence VT52 keyboard byte sequence Delete Delete 0x7F...
Page 318 VT320 keyboard PC character sequence VT320 keyboard byte sequence Esc O T Esc [ 1 7 ~ Esc [ 1 8 ~ Esc [ 1 9 ~ Esc [ 2 0 ~ Esc [ 2 1 ~ Esc [ 2 3 ~ Esc [ 2 4 ~ Ctrl - F5 Esc [ 2 5 ~...
Page 319 VT320 keyboard function VT320 keyboard byte sequence Set cursor to home position Esc [ H Set cursor to home position Esc [ f Character attributes Esc [ m Erase from cursor to end of line Esc [ K Erase from cursor to end of screen Esc [ J Programmable LEDs Esc [ q...
Page 320: Keyboard And Mouse Shortcuts
Keyboard and mouse shortcuts Divider pane keyboard and mouse shortcuts This table lists the keyboard and mouse shortcuts that can be used in main window. Operation Description Navigates between the split-screens and gives focus to the last element that had focus.
Page 321 Operation Description Enter or Return Launches the default action for the selected unit. Up arrow Clears the current selection and moves selection up one row. Down arrow Clears the current selection and moves selection down one row. Page up Clears the current selection and scrolls up one page, then selects the first item on the page.
Page 322: Acronyms And Abbreviations
Acronyms and abbreviations 3DES Triple Data Encryption Standard Access Control List Active Directory ADAM Active Directory Application Mode ADSI Active Directory Service Interface ADUC Active Directory users and computers Advanced Micro Devices ASCII American Standard Code for Information Interchange ASIC Application Specific Integrated Circuit Backup Domain Controller Command Line Interface...
Page 323 comma-separated value directory access protocol Data Encryption Standard DHCP Dynamic Host Configuration Protocol Directory Information Tree distinguished name domain name system electronic identification number global catalog Graphics Device Interface graphical user interface HP SIM HP Systems Insight Manager integrated device electronics Integrated Lights-Out Acronyms and abbreviations 323...
Page 324 Internet Protocol keyboard, video, and mouse local-area network LDAP Lightweight Directory Access Protocol manage console switch panels management information base Microsoft® Management Console Network Address Translation network file system network time protocol OBWI on-board Web interface on-screen display organizational unit Primary Domain Controller Acronyms and abbreviations 324...
Page 325 point-to-point protocol Relative Distinguished Name Remote Desktop Protocol RILOE Remote Insight Lights-Out Edition Red Hat Package Manager Systems Insight Manager SLES SUSE Linux Enterprise Server secure management protocol surname SNMP Simple Network Management Protocol Secure Shell Secure Sockets Layer Transmission Control Protocol TFTP Trivial File Transfer Protocol Acronyms and abbreviations 325...
Page 326 tab-separated value User Datagram Protocol unit identification user principal name universal serial bus virtual network computing virtual private networking Acronyms and abbreviations 326...
Page 327: Glossary
Glossary active directory Active directory is the latest generation of network directory services offered by Microsoft®. It is supported by Windows® 2000 and Windows Server™ 2003. As a network directory system, active directory provides a highly scalable distributed repository for information about objects that reside in the network environment, such as users, applications, and console switches.
Page 328: Distinguished Name
be explicitly controlled by group policies. This property makes objects of class OU the most significant structural components that active directory administrators create and use. Continuation Reference The LDAP searchResult might be returned by an active directory server when it holds the baseObject of a searchRequest, but is unable to search all of the entries in the scope under the baseObject (that is, when some of the entries in the scope might be held in other domains).
Page 329 than one domain. There is a derivative product of active directory, known as ADAM, which does support more than one domain in a single host platform. domain controller (pre-Windows 2000) A Windows NT® 4.0-based server configured as a PDC or as a BDC. domain controller (Windows 2000 and Windows Server 2003) A Windows®...
Page 330 functional levels (Windows Server™ 2003) Windows Server™ 2003 expands on the domain mode concept introduced in Windows® 2000 (see Mixed Domain Mode and Native Domain Mode). Functional levels apply to both forests and domains. Like the domain mode, functional levels limit what type of operating systems can run on domain controllers in a domain or forest.
Page 331: Name Resolution
Mixed Domain Mode For Windows® 2000, Mixed Domain Mode refers to a configuration of active directory that allows it to coexist in a domain that includes one or more Windows NT® 4.0 BDCs. In Mixed Mode the domain features from previous versions of Windows NT® server are still enabled, while some Windows® 2000 features are disabled.
Page 332 organizational unit Each OU created in active directory is a container that is an active directory administrative boundary, controlled by group policy. OUs can contain users, groups, resources, and other OUs. An OU can be thought of as providing the administrative functionality found in Windows NT® 4.0 domains. In other words, the administrative control provided by Windows NT®...
Page 333 SAM Account Name See Relative Distinguished Name. schema The rules used to control the structure of active directory data within a domain. The schema defines the object classes that can be used to create objects in a domain. For each object class, the schema defines exactly what attributes an instance of that class must have, what additional attributes it might have, and what object class can be its parent within nested hierarchies.
Page 334: Index
Index configuring parameters, cascade switch 64 configuring parameters, general SNMP 56, 132, access rights, setting user 48 configuring parameters, global 37, 99 accessing, Video Session Viewer 79, 153 configuring parameters, LDAP 208 Active Directory, attributes 292, 297, 298 configuring parameters, network 38, 100 Active Directory, performing group attribute 217 configuring parameters, NFS 111 adding a user 46...
Page 335 field labels 194 credentials 35 iLO tab 182 credentials, clearing login 35 Information tab 182 installation 13 installing the HP IP Console Viewer 15 database synchronization 222 interface adapter firmware upgrades, enabling decoding, VT220 315 automatic 67 decoding, VT320 318 interface adapter firmware, loading and decoding, VT52 317 upgrading 67...
Page 336 logging, resuming 168 logging, stopping 168 parameters, configuring authentication 43 login script 160 parameters, configuring global 37 login script, automatic login 163 parameters, configuring network 38 login script, changing a default 161 parameters, configuring Virtual Media 42 login script, debug mode 164 parameters, viewing and configuring 37 password, changing 235 plaintext sessions 108...
Page 337 serial console switches, deleting a user 121 specifying, history buffer control 107 serial console switches, locking and unlocking specifying, session time-out settings 107 user 121 SSH, changing authentication mode 109 serial console switches, managing 99 SSH, disabling 110 serial console switches, modifying server SSH, viewing and configuring 108 names 137 SSH, viewing key information 110...
Page 338 thumbnail view, pausing or restarting a scan user session, disconnecting 70, 236 sequence 90 thumbnail view, setting server credentials 90 tiered switches, configuring 239 version parameters, viewing 65, 143 Tools tab 71, 145, 233 Versions 240 Tools tab, managing console switch configuration Video Session Viewer 77, 151 files 74, 147 Video Session Viewer types, digital share mode 81...
Page 339 Virtual Media, mapping physical drives 95 Virtual Media, mapping to ISO or floppy drives 96 Virtual Media, mapping virtual drives 95 Virtual Media, opening a session 94 Virtual Media, requirements 92 Virtual Media, resetting all USB devices 97 Virtual Media, session settings 94 Virtual Media, sharing and preemption considerations 93 Virtual Media, unmapping virtual drives 96...

This manual is also suitable for:

1x1x16 - ip console switch kvm

HP 262586-B21 - IP Console Switch 3x1x16 KVM User Manual

Product Overview

Installation

Navigating the HP IP Console Viewer

Adding and Discovering Console Switches

Accessing Console Switches

Managing KVM Console Switches

Managing Remote Servers through the Video Session Viewer

Managing Serial Console Switches

Managing Remote Servers through the Serial Session Viewer

Organizing the System

Using Directory Services Integration

Using the On-Board Web Interface (OBWI)

Troubleshooting

Upgrading the Firmware

HP IP Console Switch Directory Services Integration Setup Tutorial

LDAP Client Behavior Overview

Serial Session Viewer Terminal Emulation Modes

Keyboard and Mouse Shortcuts

Acronyms and Abbreviations

Glossary

Index

Quick Links

User Guide

Related Manuals for HP 262586-B21 - IP Console Switch 3x1x16 KVM

Summary of Contents for HP 262586-B21 - IP Console Switch 3x1x16 KVM