User manual DAXTEN DOMINION KX

[. . . ] 1-732-764-8887 E-mail: sales@raritan. com http://www. raritan. com/ Raritan Computer Japan, Inc. Kuga Building 7F 11-6, Kuramae 4-chome Taitoo-ku, Tokyo 111-0051 Japan Tel. 81-3-5833-6336 E-mail: sales. japan@raritan. com http://www. raritan. co. jp Raritan Computer France 120 Rue Jean Jaures 93200 Levallois-Perret France Tel. 33-14-756-2061 E-mail: sales. france@raritan. com http://www. raritan. fr C Raritan Computer Europe, B. V. [. . . ] KX must be rebooted before Network Configuration changes 1. On the Setup menu, click Configuration, and then click Network. The Network Configuration window appears. Figure 32 Network Configuration Window You have seen most of these settings in networked devices, with the possible exception of the following parameters: - Manager Name: Type a unique name for the Dominion KX unit. Remote users will see and use this name to identify this particular Dominion CHAPTER 4: ADMINISTRATIVE FUNCTIONS 35 KX unit. However, if an RRC user has created a Connection Profile for a device, that user will see the Description field from the Profile instead. - Use Default TCP Port 5000: Besides the initial download of Raritan Remote Client and Dominion KX Manager (which occurs over secure HTTPS Port 443), all communication to and from Dominion KX occurs over a single, configurable TCP Port. By default, this is set to Port 5000, but you may configure it to use any TCP port of your choice, except 80 and 443. Note: In order to access Dominion KX from beyond a firewall, your firewall settings must enable two-way communication through the default port 5000 or the non-default port configured above. - Enable Syslog Forwarding: Click on this check box to send Dominion KX log messages to a remote syslog server. Type the IP Address of your syslog server in the Remote IP Address field, and click on the Category and Priority Threshold drop-down arrows to select the level of event sensitivity. Set System ACL: Click on this button to set a global-level access control list for Dominion KX, enhancing security by ensuring that Dominion KX does not respond to packets being sent from disallowed IP addresses. The Access Control List window appears. - Figure 33 Access Control List Window These ACL values are global, affecting the Dominion KX unit as a whole. Dominion KX allows you to create ACLs for each user group, for example, you can create a user group "Outsourced Vendors, " that is permitted to access Dominion KX only from a given IP address range (please see the section Users, Groups, and Access Permissions in this chapter, for more information on how to create group-specific ACLs). Click [OK] to accept the Access Control List changes or [Cancel] to close the window without saving changes. Important: Please note that ACL rules are evaluated in the order in which they are listed. For instance, if in the above example, the two ACL rules were reversed, Dominion KX would accept no communication at all. Use the buttons on the right of the window to adjust the order of your list. 2. Enable Automatic Failover: Click on this check box to allow Dominion KX to automatically recover its network connection using a second network port if the active network port fails. The Ping Interval determines how often Dominion KX will check the status of the network connection (setting this too low may cause excess network traffic). Timeout determines how long a network port must be "dead" before the switch is made. Both network ports must be connected to the network, and this option must be checked for Automatic Failover to function. Click [OK] to set Network Configurations or [Cancel] to close the window without saving changes. - Reset Settings to Default To delete all configured Dominion KX network settings and return to factory default settings, use the Local Console Port to reset all network settings (please see Chapter 5: Local Console Port Access for more information). 36 DOMINION KX USER MANUAL System-Level Security Parameters Use these descriptions to change system-level security settings of your Dominion KX unit such as encryption levels, idle time, share mode, and other parameters. Important: Dominion take effect. KX must be rebooted before Network Configuration changes 1. On the Setup menu, click Security, and then click Setting. The Security Configuration window appears. Figure 34 Security Configuration Window - - Encryption mode ­ click on the drop-down arrow to select one of the following: SSL authentication, NO data encryption: Usernames and passwords are secured, but KVM transmissions are not. 128-bit Secure Socket Layer (SSL) protocol provides a private communications channel between Dominion KX and the Remote PC during initial connection authentication. SSL authentication, data encryption: Secures user names, passwords and KVM data, including video transmissions. [. . . ] Literally no data is transmitted between remote clients and Dominion KX that is not completely secured by encryption. Unlike competing solutions, which only encrypt keyboard and mouse data, Dominion KX does not compromise your security - it allows encryption of keyboard, mouse and video data. Through a very simple configuration, Dominion KX can be set to forward all authentication requests to an external server such as LDAP, Active Directory, or RADIUS. For each authenticated user, Dominion KX receives from the authentication server the user group to which that user belongs. [. . . ]