Raritan Computer CCA-0N-V5.1-E User Manual Page 1

Copyright © 2011 Raritan, Inc. CCA-0N-v5.1-E February 2011 255-80-5140-00-0N CommandCenter Secure Gateway Administrators Guide Release 5.1

Contents x Audit Trail Report ...

Chapter 6: Devices, Device Groups, and Ports 82 6. To view more import results details, check the Audit Trail report. See Audit Trail Entries for

Chapter 6: Devices, Device Groups, and Ports 83 Backing Up a Device Configuration You can back up all user configuration and system configuratio

Chapter 6: Devices, Device Groups, and Ports 84 Restoring Device Configurations The following device types allow you to restore a full backup of t

Chapter 6: Devices, Device Groups, and Ports 85 Restore All Configuration Data Except Network Settings to a KX2, KSX2, or KX2-101 Device The Prot

Chapter 6: Devices, Device Groups, and Ports 86 Restore All Configuration Data to a KX2, KSX2, or KX2-101 Device The Full restore option allows yo

Chapter 6: Devices, Device Groups, and Ports 87 3. Click Upload. Navigate to and select the device backup file. The file type is .rfp. Click Ope

Chapter 6: Devices, Device Groups, and Ports 88 Restarting a Device Use the Restart Device function to restart a device. To restart a device 1.

Chapter 6: Devices, Device Groups, and Ports 89 Resuming Management of a Device You can resume CC-SG management of a paused device to bring it ba

Chapter 6: Devices, Device Groups, and Ports 90 6. Select the devices to include in the task by selecting a device group from the Device Group dr

Chapter 6: Devices, Device Groups, and Ports 91 Disconnecting Users Administrators can terminate any user's session on a device. This includ

Contents xi Chapter 15 Advanced Administration 237 Configuring a Message of the Day ...

Chapter 6: Devices, Device Groups, and Ports 92 IP-Reach and UST-IP Administration You can perform administrative diagnostics on IP-Reach and UST-

93 There are three ways to configure power control using powerstrips in CC-SG. 1. All supported Raritan-brand powerstrips can be connected to anot

Chapter 7: Managed Powerstrips 94 Configuring Powerstrips that are Managed by Another Device in CC-SG In CC-SG, managed powerstrips can be connect

Chapter 7: Managed Powerstrips 95 Configuring PowerStrips Connected to KX, KX2, KX2-101, KSX2, and P2SC CC-SG automatically detects PowerStrips c

Chapter 7: Managed Powerstrips 96 Delete a PowerStrip Connected to a KX, KX2, KX2-101, KSX2, or P2SC Device You cannot delete a PowerStrip connect

Chapter 7: Managed Powerstrips 97 10. For each Category listed, click the Element drop-down menu and select the element you want to apply to the

Chapter 7: Managed Powerstrips 98 Configuring Powerstrips Connected to SX 3.1 You can perform the following tasks in CC-SG to configure and manage

Chapter 7: Managed Powerstrips 99 Move an SX 3.1's Powerstrip to a Different Port When you physically move a Powerstrip from one SX 3.1 devi

Chapter 7: Managed Powerstrips 100  To configure multiple outlets with the default names shown in the screen, select the checkbox for each outle

101 This section covers how to view, configure, and edit nodes and their associated interfaces, and how to create node groups. Connecting to nodes

Contents xii Refresh a Neighborhood ... 266 Delete a

Chapter 8: Nodes, Node Groups, and Interfaces 102 Node Names Node names must be unique. CC-SG will prompt you with options if you attempt to manua

Chapter 8: Nodes, Node Groups, and Interfaces 103 Node Profile Click a Node in the Nodes tab to open the Node Profile page. The Node Profile page

Chapter 8: Nodes, Node Groups, and Interfaces 104 Interfaces tab The Interfaces tab contains all the node's interfaces. You can add, edit,

Chapter 8: Nodes, Node Groups, and Interfaces 105 Control system server nodes, such as VMware's Virtual Center, include the Control System D

Chapter 8: Nodes, Node Groups, and Interfaces 106 Service Accounts Service Accounts Overview Service accounts are special login credentials that y

Chapter 8: Nodes, Node Groups, and Interfaces 107 Add, Edit, and Delete Service Accounts To add a service account: 1. Choose Nodes > Servic

Chapter 8: Nodes, Node Groups, and Interfaces 108 2. Find the service account whose password you want to change. 3. Enter the new password in th

Chapter 8: Nodes, Node Groups, and Interfaces 109 Adding, Editing, and Deleting Nodes Add a Node To add a node to CC-SG: 1. Click the Nodes ta

Chapter 8: Nodes, Node Groups, and Interfaces 110 Nodes Created by Configuring Ports When you configure the ports of a device, a node is created a

Chapter 8: Nodes, Node Groups, and Interfaces 111 Adding Location and Contacts to a Node Profile Enter details about the location of the node, an

Contents xiii Navigate Administrator Console ... 305 Edit Diag

Chapter 8: Nodes, Node Groups, and Interfaces 112 Configuring the Virtual Infrastructure in CC-SG Terminology for Virtual Infrastructure CC-SG use

Chapter 8: Nodes, Node Groups, and Interfaces 113 Virtual Nodes Overview You can configure your virtual infrastructure for access in CC-SG. The V

Chapter 8: Nodes, Node Groups, and Interfaces 114  To use a service account for authentication, select the Use Service Account Credentials check

Chapter 8: Nodes, Node Groups, and Interfaces 115  Use Ctrl+click or Shift+click to select multiple virtual machines that you want to add.  I

Chapter 8: Nodes, Node Groups, and Interfaces 116  One node for each virtual host. Each virtual host node has a VI Client interface. Virtual Hos

Chapter 8: Nodes, Node Groups, and Interfaces 117 12. Add virtual machines to CC-SG. One node will be created for each virtual machine. Each asso

Chapter 8: Nodes, Node Groups, and Interfaces 118  VI Client Interfaces  VMware Viewer Interfaces  Virtual Power Interfaces  RDP, VNC, and

Chapter 8: Nodes, Node Groups, and Interfaces 119 5. Change the information as needed. See Add a Control System with Virtual Hosts and Virtual M

Chapter 8: Nodes, Node Groups, and Interfaces 120 Delete Control Systems and Virtual Hosts You can delete control systems and virtual hosts from C

Chapter 8: Nodes, Node Groups, and Interfaces 121 vSphere 4 Users Must Install New Plug-In When upgrading your virtual environment from a previou

Contents xiv Appendix B CC-SG and Network Configuration 349 Required Open Ports for CC-SG Networks: Executive Summary ...

Chapter 8: Nodes, Node Groups, and Interfaces 122 Synchronize the Virtual Infrastructure You can perform a synchronization of CC-SG with your virt

Chapter 8: Nodes, Node Groups, and Interfaces 123 Reboot or Force Reboot a Virtual Host Node You can reboot or force reboot the virtual host serv

Chapter 8: Nodes, Node Groups, and Interfaces 124 Connecting to a Node Once a node has an interface, you can connect to that node through the inte

Chapter 8: Nodes, Node Groups, and Interfaces 125 Adding, Editing, and Deleting Interfaces Add an Interface Note: Interfaces for virtual nodes, s

Chapter 8: Nodes, Node Groups, and Interfaces 126 See Interfaces for Out-of-Band KVM, Out-of-Band Serial Connections (on page 128). Power Control

Chapter 8: Nodes, Node Groups, and Interfaces 127 Interfaces for In-Band Connections In-band connections include RDP, VNC, SSH, RSA KVM, iLO Proc

Chapter 8: Nodes, Node Groups, and Interfaces 128 Microsoft RDP Connection Details  If using a Windows XP client, you must have Terminal Server

Chapter 8: Nodes, Node Groups, and Interfaces 129 Interfaces for DRAC Power Control Connections To add an interface for DRAC power control conn

Chapter 8: Nodes, Node Groups, and Interfaces 130 RSA Interface Details When you create an In-Band RSA KVM or Power interface, CC-SG discards the

Chapter 8: Nodes, Node Groups, and Interfaces 131 3. Power Strip Name: select the Power Strip or PX device that provides power to the node. The

Contents xv Appendix C User Group Privileges 357 Appendix D SNMP Traps 366 Appendix E CSV File Imports 368 Common CSV File Requiremen

Chapter 8: Nodes, Node Groups, and Interfaces 132 Interfaces for Power IQ Proxy Power Control Connections Add a Power IQ Proxy power control inter

Chapter 8: Nodes, Node Groups, and Interfaces 133 Web Browser Interface You can add a Web Browser Interface to create a connection to a device wi

Chapter 8: Nodes, Node Groups, and Interfaces 134 5. Type the field names for the username and password fields used in the login screen for the w

Chapter 8: Nodes, Node Groups, and Interfaces 135 Results of Adding an Interface When you add an interface to a node, it appears in the Interface

Chapter 8: Nodes, Node Groups, and Interfaces 136 Bookmarking an Interface If you frequently access a node via a particular interface, you can boo

Chapter 8: Nodes, Node Groups, and Interfaces 137 Configuring Direct Port Access to a Node You can configure Direct Port Access to a node using t

Chapter 8: Nodes, Node Groups, and Interfaces 138 Using Chat Chat provides a way for users connected to the same node to communicate with each oth

Chapter 8: Nodes, Node Groups, and Interfaces 139 Nodes CSV File Requirements The nodes CSV file defines the nodes, interfaces, and their details

Chapter 8: Nodes, Node Groups, and Interfaces 140 Column number Tag or value Details 3 Node Name Enter the same value as entered for Raritan Port

Chapter 8: Nodes, Node Groups, and Interfaces 141 Column number Tag or value Details Raritan Port Name. 8 Baud Rate Valid for SX ports only. 9 Pa

Contents xvi User Information ...

Chapter 8: Nodes, Node Groups, and Interfaces 142 Column number in CSV file Tag or value Details Default is Java. To add an SSH or TELNET interf

Chapter 8: Nodes, Node Groups, and Interfaces 143 Column number Tag or value Details 6 TCP Port Default is 5900. 7 Service Account Name Optional.

Chapter 8: Nodes, Node Groups, and Interfaces 144 Column number Tag or value Details 7 Username You must enter either a service account or a usern

Chapter 8: Nodes, Node Groups, and Interfaces 145 Column number Tag or value Details 10 Description Optional. To add an IPMI power control inte

Chapter 8: Nodes, Node Groups, and Interfaces 146 Column number Tag or value Details 5 Powerstrip Name Required field. 6 Outlet Required field. 7

Chapter 8: Nodes, Node Groups, and Interfaces 147 Column number Tag or value Details 12 Description Optional. To add a Power IQ Proxy power con

Chapter 8: Nodes, Node Groups, and Interfaces 148 To assign categories and elements to a node to the CSV file: Categories and elements must alre

Chapter 8: Nodes, Node Groups, and Interfaces 149  If the file is not valid, an error message appears. Click OK and look at the Problems area o

Chapter 8: Nodes, Node Groups, and Interfaces 150 7. Import the .csv file. See Import Nodes (on page 148). Adding, Editing, and Deleting Node Gr

Chapter 8: Nodes, Node Groups, and Interfaces 151 Add a Node Group To add a node group: 1. Choose Associations > Node Group. The Node Group

xvii The following sections have changed or information has been added to the CommandCenter Secure Gateway Administrators Guide based on enhancemen

Chapter 8: Nodes, Node Groups, and Interfaces 152  To remove a node from the group, select the node name in the Selected list and click Remove.

Chapter 8: Nodes, Node Groups, and Interfaces 153 An example rule might be Department = Engineering, meaning it describes all nodes that the cate

Chapter 8: Nodes, Node Groups, and Interfaces 154 Note: You should have a space before and after operators & and |. Otherwise, the Short Expre

Chapter 8: Nodes, Node Groups, and Interfaces 155

156 User accounts are created so that users can be assigned a username and password to access CC-SG. A User Group defines a set of privileges for i

Chapter 9: Users and User Groups 157 The Users Tab Click the Users tab to display all user groups and users in CC-SG. Users are nested underneat

Chapter 9: Users and User Groups 158 Default User Groups CC-SG is configured with three default user groups: CC-Super User, System Administrators,

Chapter 9: Users and User Groups 159 Adding, Editing, and Deleting User Groups Add a User Group Creating user groups first will help you organize

Chapter 9: Users and User Groups 160 The All Policies table lists all the policies available on CC-SG. Each policy represents a rule allowing or d

Chapter 9: Users and User Groups 161 7. Select the checkbox that corresponds to each privilege you want to assign to the user group. Deselect a

Chapter 9: Users and User Groups 162 Limit the Number of KVM Sessions per User You can limit the number of KVM sessions allowed per user for sessi

Chapter 9: Users and User Groups 163 2. Select the Require Users to Enter Access Information When Connecting to a Node checkbox. 3. In the Mess

Chapter 9: Users and User Groups 164 If strong passwords are enabled, the password entered must conform to the established rules. The information

Chapter 9: Users and User Groups 165 4. In the New Password and Retype New Password fields, type a new password to change this user's passw

Chapter 9: Users and User Groups 166 4. Users who are not assigned to the target group appear in the Users not in group list.  Select the users

Chapter 9: Users and User Groups 167 Users CSV File Requirements The import enables you to add user groups, users, and AD modules, and assign pol

Chapter 9: Users and User Groups 168 Column number Tag or value Details 2 USERGROUP-PERMISSIONS Enter the tag as shown. Tags are not case sensit

Chapter 9: Users and User Groups 169 Column number Tag or value Details command ADD. 2 USERGROUP-ADMODULE Enter the tag as shown. Tags are not

Chapter 9: Users and User Groups 170 Column number Tag or value Details Periodically is set to TRUE, specify the number of days after which passwo

Chapter 9: Users and User Groups 171 Import Users Once you've created the CSV file, validate it to check for errors then import it. Duplicat

1 The CommandCenter Secure Gateway (CC-SG) Administrators Guide offers instructions for administering and maintaining your CC-SG. This guide is int

Chapter 9: Users and User Groups 172 Your User Profile My Profile allows all users to view details about their account, change some details, and c

Chapter 9: Users and User Groups 173  Find Matching String - Does not support the use of wildcards and will highlight the closest match in the

Chapter 9: Users and User Groups 174 To log out all users of a User Group: 1. In the Users tab, select the user group you want to log out of CC

175 Policies are rules that define which nodes and devices users can access, when they can access them, and whether virtual-media permissions are e

Chapter 10: Policies for Access Control 176 Adding a Policy If you create a policy that denies access (Deny) to a node group or device group, you

Chapter 10: Policies for Access Control 177 14. If you selected Control in the Device/Node Access Permission field, the Virtual Media Permission

Chapter 10: Policies for Access Control 178 9. Select the checkbox that corresponds to each day you want this policy to cover. 10. In the Start T

Chapter 10: Policies for Access Control 179 Support for Virtual Media CC-SG provides remote virtual media support for nodes connected to virtual

180 Custom Views enable you to specify different ways to display the nodes and devices in the left panel, using Categories, Node Groups, and Device

Chapter 11: Custom Views for Devices and Nodes 181 Using Custom Views in the Admin Client Custom Views for Nodes Add a Custom View for Nodes To

This document contains proprietary information that is protected by copyright. All rights reserved. No part of this document may be photocopied, repro

Chapter 1: Introduction 2 Terminology/Acronyms Terms and acronyms found in this document include: Access Client - HTML-based client intended for u

Chapter 11: Custom Views for Devices and Nodes 182 2. Click the Name drop-down arrow and select a custom view from the list. 3. Click Apply Vi

Chapter 11: Custom Views for Devices and Nodes 183 2. Choose Nodes > Change View > Create Custom View. The Custom View screen appears. 3.

Chapter 11: Custom Views for Devices and Nodes 184 3. In the Custom View panel, click Add. The Add Custom View window appears. 4. Type a name fo

Chapter 11: Custom Views for Devices and Nodes 185 2. Choose Devices > Change View > Create Custom View. The Custom View screen appears. 3

Chapter 11: Custom Views for Devices and Nodes 186 Assign a Default Custom View for Devices To assign a default custom view for devices: 1. Cli

187 In This Chapter Authentication and Authorization (AA) Overview ... 187 Distinguished Names for LDAP and AD ...

Chapter 12: Remote Authentication 188 2. CC-SG connects to the external server and sends the username and password. 3. Username and password are

Chapter 12: Remote Authentication 189 Specify a Distinguished Name for LDAP Distinguished Names for Netscape LDAP and eDirectory LDAP should foll

Chapter 12: Remote Authentication 190 Establishing Order of External AA Servers CC-SG will query the configured external authorization and authent

Chapter 12: Remote Authentication 191 5. Type a name for the AD server in the Module name field.  The maximum number of characters is 31.  A

Chapter 1: Introduction 3 Ghosted Ports - when managing Paragon devices, a ghosted port can occur when a CIM or target server is removed from the

Chapter 12: Remote Authentication 192  [email protected]  Raritan/UserName Note: The user specified must have permission to execute search

Chapter 12: Remote Authentication 193 5. Type a user's attributes in the Filter field so the search query will be restricted to only those

Chapter 12: Remote Authentication 194 3. Type a user's attributes in the Filter field so the search query for the user in the group will be

Chapter 12: Remote Authentication 195 Editing an AD Module Once you have configured AD modules, you can edit them at any time. To edit an AD mo

Chapter 12: Remote Authentication 196 2. Click the Authentication tab. All configured Authorization and Authentication Servers appear in a table.

Chapter 12: Remote Authentication 197 Synchronizing AD with CC-SG There are several methods for synchronizing the information on CC-SG with the i

Chapter 12: Remote Authentication 198 Synchronize All User Groups with AD You should synchronize all user groups if you have made a change to a us

Chapter 12: Remote Authentication 199 Synchronize All AD Modules You should synchronize all AD Modules whenever you change or delete a user in AD

Chapter 12: Remote Authentication 200 To disable daily synchronization of all AD modules: 1. Choose Administration > Security. 2. Click the

Chapter 12: Remote Authentication 201 Renaming and Moving AD Groups Renaming a group in AD: When an AD group that has been imported into CC-SG

Chapter 1: Introduction 4 Node Groups - a defined group of nodes that are accessible to a user. Node groups are used when creating a policy to con

Chapter 12: Remote Authentication 202 LDAP General Settings 1. Click the General tab. 2. Type the IP address or hostname of the LDAP server in t

Chapter 12: Remote Authentication 203 2. Select Base 64 if you want the password to be sent to the LDAP server with encryption. Select Plain Tex

Chapter 12: Remote Authentication 204 OpenLDAP (eDirectory) Configuration Settings If using an OpenLDAP server for remote authentication, use this

Chapter 12: Remote Authentication 205 About TACACS+ and CC-SG CC-SG users who are remotely authenticated by a TACACS+ server must be created on

Chapter 12: Remote Authentication 206 About RADIUS and CC-SG CC-SG users who are remotely authenticated by a RADIUS server must be created on the

Chapter 12: Remote Authentication 207 Two-Factor Authentication Using RADIUS By using an RSA RADIUS Server that supports two-factor authenticatio

208 In This Chapter Using Reports ... 208 Audit Trail Report .

Chapter 13: Reports 209 View Report Details  Double-click a row to view details of the report.  When a row is highlighted, press the Enter ke

Chapter 13: Reports 210 Purge a Report's Data From CC-SG You can purge the data that appears in the Audit Trail and Error Log reports. Purgin

Chapter 13: Reports 211 3. You can limit the data that the report will contain by entering additional parameters in the Message Type, Message, U

5 You can access CC-SG in several ways:  Browser: CC-SG supports numerous web browsers (for a complete list of supported browsers, see the Compat

Chapter 13: Reports 212  Click Purge to delete the Error Log. See Purge a Report's Data from CC-SG (on page 210). Access Report Generate t

Chapter 13: Reports 213 3. Click Apply. Active Users Report The Active Users report displays current users and user sessions. You can select ac

Chapter 13: Reports 214  The Password Expiration field displays the number of days that the user can use the same password before being forced t

Chapter 13: Reports 215 Device Group Data Report The Device Group Data report displays device group information. To generate the Device Group

Chapter 13: Reports 216 State Type Port State Definition been configured. 3. Select Ghosted Ports to include ports that are ghosted. A ghosted po

Chapter 13: Reports 217 3. The URL column contains direct links to each node. You can use this information to create a web page with links to ea

Chapter 13: Reports 218 Node Group Data Report The Node Group Data report displays the list of nodes that belong to each group, the user groups th

Chapter 13: Reports 219 Scheduled Reports Scheduled Reports displays reports that were scheduled in the Task Manager. You can find the Upgrade De

Chapter 13: Reports 220 Upgrade Device Firmware Report The Upgrade Device Firmware report is located in the Scheduled Reports list. This report is

221 In This Chapter Maintenance Mode ... 221 Entering Maintenance Mode

Chapter 2: Accessing CC-SG 6 JRE Incompatibility If you do not have the minimum required version of JRE installed on your client computer, you wil

Chapter 14: System Maintenance 222 Entering Maintenance Mode 1. Choose System Maintenance > Maintenance Mode > Enter Maintenance Mode. 2.

Chapter 14: System Maintenance 223 4. Select a Backup Type: Full or Standard. See What is the difference between Full backup and Standard backup

Chapter 14: System Maintenance 224 What is the difference between Full backup and Standard backup? Standard backup: A standard backup includes a

Chapter 14: System Maintenance 225 3. Click OK to delete the backup from the CC-SG system. Restoring CC-SG You can restore CC-SG using a backup

Chapter 14: System Maintenance 226  Restore Data - CC-SG configuration, Device and Node configuration, and User Data. Selecting Data restores th

Chapter 14: System Maintenance 227 Option Description Full Database This option removes the existing CC-SG database and builds a new version with

Chapter 14: System Maintenance 228 Option Description  Read-write Community: private  System Contact, Name, Location: none  SNMP Trap Config

Chapter 14: System Maintenance 229 Restarting CC-SG The restart command is used to restart the CC-SG software. Restarting CC-SG will log all acti

Chapter 14: System Maintenance 230 CC-SG will reboot as part of the upgrade process. DO NOT stop the process, reboot the unit manually, power off,

Chapter 14: System Maintenance 231 10. Clear the Java cache. See Clear the Java Cache (on page 231). 11. Launch a new web browser window. 12. Log

Chapter 2: Accessing CC-SG 7 4. If the CC-SG is configured for secure browser connections, you must select the Secure Socket Layer (SSL) checkbo

Chapter 14: System Maintenance 232 Upgrading a Cluster To upgrade a CC-SG cluster, follow this recommended upgrade procedure. Only physical CC-SG

Chapter 14: System Maintenance 233 Primary Node Upgrade Failure If the upgrade of your primary node fails while following the Upgrading a Cluste

Chapter 14: System Maintenance 234 Note: The CC-SG that you are migrating to must have its own valid licenses to be fully operational. A valid lic

Chapter 14: System Maintenance 235 Restarting CC-SG after Shutdown After shutting down CC-SG, use one of these two methods to restart the unit: 

Chapter 14: System Maintenance 236 2. Click Yes to log out of CC-SG. Once you log out, the CC-SG login window opens. Exit CC-SG 1. Choose Secur

237 In This Chapter Configuring a Message of the Day ... 237 Configuring Applications for Acce

Chapter 15: Advanced Administration 238 c. Click the Font Size drop-down menu and select a font size for the message text.  If you select Messa

Chapter 15: Advanced Administration 239 2. Click the Application name drop-down arrow and select the application that must be upgraded from the

Chapter 15: Advanced Administration 240 5. Click OK. An Open dialog appears. 6. Navigate to and select the application file (usually a .jar or .

Chapter 15: Advanced Administration 241 View the Default Application Assignments To view the default application assignments: 1. Choose Admini

Chapter 2: Accessing CC-SG 8 CC-SG Admin Client Upon valid login, the CC-SG Admin Client appears.

Chapter 15: Advanced Administration 242 2. Click Add to add a new firmware file. A search window opens. 3. Navigate to and select the firmware f

Chapter 15: Advanced Administration 243 Model Primary LAN Name Primary LAN Location Secondary LAN Name Secondary LAN Location V1-0 or V1-1 LAN1 L

Chapter 15: Advanced Administration 244 If the Primary LAN is connected and receiving a Link Integrity signal, CC-SG uses this LAN port for all co

Chapter 15: Advanced Administration 245 6. Click the Adapter Speed drop-down arrow and select a line speed from the list. Make sure your selecti

Chapter 15: Advanced Administration 246 What is IP Isolation mode? IP Isolation mode allows you to isolate clients from devices by placing them on

Chapter 15: Advanced Administration 247  Specify at most one Default Gateway in the Network Setup panel in CC-SG. Use Diagnostic Console to add

Chapter 15: Advanced Administration 248 Recommended DHCP Configurations for CC-SG Review the following recommended DHCP configurations. Make sure

Chapter 15: Advanced Administration 249 Purge CC-SG's Internal Log You can purge the CC-SG's internal log. This operation does not dele

Chapter 15: Advanced Administration 250 Note: Network Time Protocol (NTP) is the protocol used to synchronize the attached computer's date an

Chapter 15: Advanced Administration 251 Configure Direct Mode for All Client Connections To configure direct mode for all client connections: 1

Chapter 2: Accessing CC-SG 9  Nodes tab: Click the Nodes tab to display all known target nodes in a tree view. Click a node to view the Node Pr

Chapter 15: Advanced Administration 252 3. Select a Device Type in the table and double-click the Default Port value. 4. Type the new Default

Chapter 15: Advanced Administration 253 Enabling the AKC Download Server Certificate Validation If you are using the AKC client, you can choose t

Chapter 15: Advanced Administration 254 3. Click OK. Configuring Custom JRE Settings CC-SG will display a warning message to users who attempt t

Chapter 15: Advanced Administration 255 3. Click Restore Default. 4. Click Update. To clear the default message and minimum JRE version: 1.

Chapter 15: Advanced Administration 256 9. Select the checkboxes before the traps you want CC-SG to push to your SNMP hosts: Under Trap Sources,

Chapter 15: Advanced Administration 257 Requirements for CC-SG Clusters  The Primary and Secondary nodes in a cluster must be running the same

Chapter 15: Advanced Administration 258 5. Type a valid user name and password for the Backup node in the Username for Backup Secure Gateway and

Chapter 15: Advanced Administration 259 Switch the Primary and Secondary Node Status You can exchange the roles of Primary and Secondary nodes wh

Chapter 15: Advanced Administration 260 Note: If the clustered CC-SG units do not share the same time zone, when the Primary node failure occurs,

Chapter 15: Advanced Administration 261 Cluster Licenses You can operate a CC-SG cluster using separate standalone licenses with the same node ca

10 Before you can begin configuring and working in CC-SG, you must have valid licenses installed. Then, upon first login, you should confirm the IP

Chapter 15: Advanced Administration 262 Configuring a Neighborhood What is a Neighborhood? A Neighborhood is a collection of up to 10 CC-SG units.

Chapter 15: Advanced Administration 263  If one or more CC-SG units cannot be found, a message appears and these CC-SG units will be highlighte

Chapter 15: Advanced Administration 264 Add a Neighborhood Member To add a new CC-SG unit into the Neighborhood 1. Choose Administration > N

Chapter 15: Advanced Administration 265  To deactivate a CC-SG unit, deselect the Active checkbox next to the unit.  To change a Secure Gat

Chapter 15: Advanced Administration 266 Refresh a Neighborhood You can retrieve the latest status of all Neighborhood members immediately in the N

Chapter 15: Advanced Administration 267 Check Your Browser for AES Encryption CC-SG supports AES-128 and AES-256. If you do not know if your brow

Chapter 15: Advanced Administration 268  Click the Key Length drop-down arrow to select the encryption level - 128 or 256.  The CC-SG Port fie

Chapter 15: Advanced Administration 269 Require strong passwords for all users 1. Choose Administration > Security. 2. Click the Login Setti

Chapter 15: Advanced Administration 270 Lockout settings Administrators can lock out CC-SG users and SSH users after a specified number of failed

Chapter 15: Advanced Administration 271 2. Open the Login Settings tab. 3. Deselect the Lockout Enabled for Local Users checkbox to disable loc

Chapter 3: Getting Started 11 Licensing - Basic License Information Licenses are based on the number of nodes configured in CC-SG. Your purchas

Chapter 15: Advanced Administration 272 Logo A small graphic file can be uploaded to CC-SG to act as a banner on the login page. The maximum size

Chapter 15: Advanced Administration 273  Click Browse. A dialog window opens.  In the dialog window, select the text file with the message yo

Chapter 15: Advanced Administration 274 a. Encryption Mode: If Require AES Encryption between Client and Server is selected in the Administration

Chapter 15: Advanced Administration 275 14. Type raritan in the Password field if the CSR was generated by CC-SG. If a different application gene

Chapter 15: Advanced Administration 276 Access Control List An IP Access Control List specifies ranges of client IP addresses for which you want t

Chapter 15: Advanced Administration 277 6. Click the Action drop-down arrow and select Allow or Deny to specify whether the specified users in t

Chapter 15: Advanced Administration 278 7. Type a valid email address that will identify messages from CC-SG in the From field. 8. Type the numb

Chapter 15: Advanced Administration 279 Schedule Sequential Tasks You may want to schedule tasks sequentially to confirm that expected behavior o

Chapter 15: Advanced Administration 280 Schedule a Task This section covers most tasks that can be scheduled. See Schedule a Device Firmware Upgra

Chapter 15: Advanced Administration 281  Upgrade Device Firmware (individual device or device group): See Schedule a Device Firmware Upgrade (o

iii Contents What's New in the CC-SG Administrators Guide xvii Chapter 1 Introduction 1 Prerequisites ...

Chapter 3: Getting Started 12 CC-SG product Description Information needed to create license for first time CC-V1-256 CC-SG V1 Appliance, includ

Chapter 15: Advanced Administration 282 10. If a task fails, CC-SG can retry the task at a later time as specified in the Retry tab. Type the numb

Chapter 15: Advanced Administration 283 d. Concurrent Upgrades: Specify the number of devices that should begin the file transfer portion of the

Chapter 15: Advanced Administration 284 When the task starts running, you can open the Upgrade Device Firmware report any time during the schedule

Chapter 15: Advanced Administration 285 Delete a Task You can delete a task to remove it from the Task Manager. You cannot delete a task that is

Chapter 15: Advanced Administration 286 To display all SSH commands:  At the shell prompt, type ls to display all commands available. Get

Chapter 15: Advanced Administration 287 SSH Commands and Parameters The following table lists all commands available in SSH. You must be assigned

Chapter 15: Advanced Administration 288 To search for text from piped output stream: grep search_term To view the help screen for all commands

Chapter 15: Advanced Administration 289 To restart a device: restartdevice <[-id <device_id>] | [host]> To restore a device confi

Chapter 15: Advanced Administration 290 Command syntax Device ID value You should type ssh -id <device_id> 100 ssh -id 100  The default es

Chapter 15: Advanced Administration 291 2. Connect to the device by typing ssh -id <device_id> . Using the figure above as an example, y

Chapter 3: Getting Started 13 3. Check the number of nodes in your database on this page. You can determine how many more nodes you can add up t

Chapter 15: Advanced Administration 292 Command Alias Description get_write gw Gets Write Access. Allows SSH user to execute commands at target se

Chapter 15: Advanced Administration 293 Serial Admin Port The serial admin port on CC-SG can be connected directly to a Raritan serial device, su

Chapter 15: Advanced Administration 294 Finding Your CC-SG Serial Number To find your CC-SG serial number: 1. Log into the Admin Client. 2. Ch

Chapter 15: Advanced Administration 295 e. State or Province: Maximum 64 characters. Type in the whole state or province name. Do not abbreviate

296 The Diagnostic Console is a non-graphical, menu-based interface that provides local access to CC-SG. You can access Diagnostic Console from a s

Chapter 16: Diagnostic Console 297 Status Console About Status Console  You can use the Status Console to check the health of CC-SG, the vari

Chapter 16: Diagnostic Console 298 2: Access the Status Console via web browser: 1. Using a supported Internet browser, type this URL: http(s):

Chapter 16: Diagnostic Console 299 CC-SG Title, Date and Time The CC-SG title is constant so users know that they are connected to a CC-SG unit.

Chapter 16: Diagnostic Console 300 Information Description suspended. Down Database server has not started yet. Web Status Most of the access to

Chapter 16: Diagnostic Console 301 Information Description Duplex Indicate whether the interface is Full- or Half-duplex. IPAddr The current Ipv4

Chapter 3: Getting Started 14 Licensing - New Customers - Physical Appliance If you are a new customer who has just purchased a physical CC-SG 5.0

Chapter 16: Diagnostic Console 302 Status Console via Web Browser After connecting to the Status Console via the web browser, the read-only Status

Chapter 16: Diagnostic Console 303 Administrator Console About Administrator Console The Administrator Console allows you to set some initial par

Chapter 16: Diagnostic Console 304 The main Administrator Console screen appears. Administrator Console Screen Administrator Console screen cons

Chapter 16: Diagnostic Console 305  Status bar: Status bar is just above the navigation keys bar. It displays some important system information

Chapter 16: Diagnostic Console 306 Edit Diagnostic Console Configuration The Diagnostic Console can be accessed via the serial port (COM1), VGA/Ke

Chapter 16: Diagnostic Console 307 4. Click Save. Edit Network Interfaces Configuration (Network Interfaces) In Network Interface Configuratio

Chapter 16: Diagnostic Console 308  Even if DHCP is being used to determine the IP configuration for an interface, you must provide a properly f

Chapter 16: Diagnostic Console 309 Option Description Record Route Records route. Turns on the IP record route option, which will store the route

Chapter 16: Diagnostic Console 310 Option Description No DNS Resolution Does not resolve addresses to host names. Use ICMP (vs. normal UDP) Use IC

Chapter 16: Diagnostic Console 311 Although you can delete all other routes, including the Default Gateway, doing this will greatly impact the co

Chapter 3: Getting Started 15 4. Click the link in the email to go to the Software License Key Login page on Raritan's website and login

Chapter 16: Diagnostic Console 312 View Log Files in Diagnostic Console You can view one or more log files simultaneously via LogViewer, which all

Chapter 16: Diagnostic Console 313 3. Click with the mouse or use the arrow keys to navigate and press the Space bar to select a log file, marki

Chapter 16: Diagnostic Console 314 Option Description contents of this package is not available to customer. Exported logfiles will be available f

Chapter 16: Diagnostic Console 315 Note: System load is static as of the start of this Admin Console session - use the TOP utility to dynamically

Chapter 16: Diagnostic Console 316 Diagnostic Console. See Restarting CC-SG (on page 229). Restarting CC-SG in Diagnostic Console will NOT notify

Chapter 16: Diagnostic Console 317 2. Either click REBOOT System or press Enter to reboot CC-SG. Confirm the reboot in the next screen to procee

Chapter 16: Diagnostic Console 318 2. Either click Power OFF the CC-SG or press Enter to remove AC power from the CC-SG. Confirm the power off op

Chapter 16: Diagnostic Console 319 2. Either click Reset CC-SG GUI Admin Password or press Enter to change the admin password back to factory de

Chapter 16: Diagnostic Console 320 Option Description Full CC-SG Database Reset This option removes the existing CC-SG database and builds a new v

Chapter 16: Diagnostic Console 321 Option Description Diagnostic Console Reset This option restores Diagnostic Console settings back to factory d

Chapter 3: Getting Started 16 Step 3: Check out the licenses you want to activate: You must check out licenses to activate the features.  Sele

Chapter 16: Diagnostic Console 322 2. In the Password History Depth field, type the number of passwords that will be remembered. The default sett

Chapter 16: Diagnostic Console 323 Password setting Description every password must have at least one digit in it. Diagnostic Console Account C

Chapter 16: Diagnostic Console 324 Setting Description User \ User Name (Read-only). This is the current user name or ID for this account. Last Ch

Chapter 16: Diagnostic Console 325 Configure Remote System Monitoring You can enable the remote system monitoring feature to use the GKrellM tool

Chapter 16: Diagnostic Console 326 3: Configure the remote system monitoring client to work with CC-SG: Follow the instructions in the Read Me f

Chapter 16: Diagnostic Console 327 Display RAID Status and Disk Utilization This option displays the status of CC-SG disks, including disk size,

Chapter 16: Diagnostic Console 328 Perform Disk or RAID Tests You can manually perform SMART disk drive tests or RAID check and repair operations.

Chapter 16: Diagnostic Console 329 d. After the test is complete, you can view the results in the Repair/Rebuild RAID screen. See Repair or Rebu

Chapter 16: Diagnostic Console 330 Schedule Disk Tests You can schedule SMART-based tests of the disk drives to be periodically performed. Firmwar

Chapter 16: Diagnostic Console 331 2. Click with the mouse or use the arrow keys to navigate and press the Space bar to select a test type, mar

Chapter 3: Getting Started 17 Licensing - Virtual Appliance with License Server The CC-SG virtual appliance requires you to install a license ser

Chapter 16: Diagnostic Console 332 2. If any item does not show "No" under the "Replace??" or "Rebuild??" column, c

Chapter 16: Diagnostic Console 333 4. Selecting either Replace Disk Drive or Rebuild RAID Array, and follow onscreen instructions until you fini

Chapter 16: Diagnostic Console 334  NTP is not enabled or not configured properly:  NTP is properly configured and running:

Chapter 16: Diagnostic Console 335 Take a System Snapshot When CC-SG does not function properly, it is extremely helpful if you can capture the i

Chapter 16: Diagnostic Console 336 2: Retrieve the CC-SG snapshot file: 1. Using a supported Internet browser, type this URL: http(s)://<IP_

337 If you have a CC-SG and Power IQ, there are severals ways to use them together. 1. Control power to Power IQ IT devices via CC-SG. For example

Chapter 17: Power IQ Integration 338 Configuring Power IQ Services You must configure the Power IQ Service before you can add Power IQ proxy inter

Chapter 17: Power IQ Integration 339 Troubleshoot Connections to Power IQ Check these possible error messages and solutions to troubleshoot your

Chapter 17: Power IQ Integration 340 Configuring Synchronization of Power IQ and CC-SG CC-SG will synchronize with Power IQ to add the IT Devices

Chapter 17: Power IQ Integration 341 Step 3 - Create a synchronization policy: Note: The synchronization policy applies to ALL Power IQ instanc

Chapter 3: Getting Started 18 Download Installation Files The complete set of installation files is available at http://www.raritan.com/support/Co

Chapter 17: Power IQ Integration 342 Power IQ Synchronization Policies When CC-SG detects a duplicated node, the synchronization policy you choose

Chapter 17: Power IQ Integration 343 Import Power Strips from Power IQ You can import Dominion PX devices and their outlet names from Power IQ. I

Chapter 17: Power IQ Integration 344 Column number Tag or value Details 6 Configure All Outlets TRUE or FALSE Default is FALSE. 7 Description Opti

Chapter 17: Power IQ Integration 345 3. Type a name for the file and choose the location where you want to save it 4. Click Save. Step 2: Edi

346 In This Chapter V1 Model... 346 E1 Model...

Appendix A: Specifications for V1 and E1 347 Operating Humidity 5% - 95% RH Altitude Operate properly at any altitude between 0 to 10,000 feet, s

Appendix A: Specifications for V1 and E1 348 Operating Non-Operating Temperature -40°-70° C Humidity 5-90%, non-condensing Altitude Sea level to 4

349 This appendix contains network requirements, including addresses, protocols, and ports, of a typical CC-SG deployment. It includes information

Appendix B: CC-SG and Network Configuration 350 Port Number Protocol Purpose Details Raritan device that will be externally accessed. The other po

Appendix B: CC-SG and Network Configuration 351 CC-SG and Raritan Devices A main role of CC-SG is to manage and control Raritan devices, such as

Chapter 3: Getting Started 19 7. Move the Raritan vendor daemon file using this command: cp raritan /home/flex/flexserverv11.8/i86_lsb/ 8. Ente

Appendix B: CC-SG and Network Configuration 352 Communication Direction Port Number Protocol Configurable? Details CC-SG to CC-SG 5432 TCP no From

Appendix B: CC-SG and Network Configuration 353 Communication Direction Port Number Protocol Configurable? Details PC Client to CC-SG 443 TCP n

Appendix B: CC-SG and Network Configuration 354 Communication Direction Port Number Protocol Configurable? Details Client to Raritan Device to Out

Appendix B: CC-SG and Network Configuration 355 Communication Direction Port Number Protocol Configurable? Details CC-SG to SNMP Manager 162 UDP

Appendix B: CC-SG and Network Configuration 356 VNC Access to Nodes Port 5800 or 5900 must be open for VNC access to nodes. SSH Access to Nodes P

357 This table shows which privilege must be assigned for a user to have access to a CC-SG menu item. *None means that no particular privilege is r

Appendix C: User Group Privileges 358 Menu > Sub-menu Menu Item Required Privilege Description Node Auditing User Management Devices This men

Appendix C: User Group Privileges 359 Menu > Sub-menu Menu Item Required Privilege Description > Launch Admin Device, Port, and Node Manag

Appendix C: User Group Privileges 360 Menu > Sub-menu Menu Item Required Privilege Description Management > By Port Number Device, Port, an

Appendix C: User Group Privileges 361 Menu > Sub-menu Menu Item Required Privilege Description Group Power Control Power Control Configure

Chapter 3: Getting Started 20 3. Check your email for another message from Raritan Licensing Portal from the email address [email protected],

Appendix C: User Group Privileges 362 Menu > Sub-menu Menu Item Required Privilege Description Node Out-of-Band Access or Node Power Control &

Appendix C: User Group Privileges 363 Menu > Sub-menu Menu Item Required Privilege Description > User Group Data User Management > Dev

Appendix C: User Group Privileges 364 Menu > Sub-menu Menu Item Required Privilege Description Firmware CC Setup and Control or Device Configu

Appendix C: User Group Privileges 365 Menu > Sub-menu Menu Item Required Privilege Description Export Nodes CC Setup and Control and Device

366 CC-SG provides the following SNMP traps: SNMP Trap Description ccUnavailable CC-SG application is unavailable. ccAvailable CC-SG application i

Appendix D: SNMP Traps 367 SNMP Trap Description ccDiagnosticConsoleLogout User has logged out of the CC-SG Diagnostic Console. ccUserGroupAdded

368 This section contains more information about CSV file imports. In This Chapter Common CSV File Requirements ...

Appendix E: CSV File Imports 369 Common CSV File Requirements The best way to create the CSV file is to export a file from CC-SG, and then use th

Appendix E: CSV File Imports 370 Audit Trail Entries for Importing Each item imported into CC-SG is logged in the Audit Trail. Skipped duplicates

Appendix E: CSV File Imports 371 Troubleshoot CSV File Problems To troubleshoot CSV file validation: Error messages appear in the Problems area

Chapter 3: Getting Started 21  Linux: su - root; dmidecode -s system-uuid  Windows: Use cd to change to the /flexnet-win/i86_n3 directory, th

372  Launching CC-SG from your web browser requires a Java plug-in. If your machine has an incorrect version, CC-SG will guide you through the in

Appendix F: Troubleshooting 373  If you access more than one CC-SG unit using the same client and Firefox, you may see a "Secure Connectio

374 CC-SG comes with a few diagnostic utilities which may be extremely helpful for you or Raritan Technical Support to analyse and debug the cause

Appendix G: Diagnostic Utilities 375  Capture the Memtest86+ screen containing the memory errors and contact Raritan Technical Support for assi

Appendix G: Diagnostic Utilities 376 CC-SG Disk Monitoring If CC-SG disk space exhaustion in one or more file systems occurs, it may negatively im

Appendix G: Diagnostic Utilities 377 File system Data Corrective action /sg/DB CC-SG database Contact Raritan Technical Support /opt CC-SG backup

Appendix G: Diagnostic Utilities 378 Note: For file system problems that are not mentioned in this section, or when the corrective actions you tak

379 CC-SG can be configured to point to an RSA RADIUS Server that supports two-factor authentication via an associated RSA Authentication Manager.

380 In This Chapter General FAQs ... 380 Authentication FAQs .

Appendix I: FAQs 381 Question Answer access CC-SG. Can I upgrade to newer versions of CC-SG software as they become available? Yes. Contact you

Contents iv Licensing - Limited Operation Before License Install ... 28 Licensing -

Chapter 3: Getting Started 22 2. Enter this command to change to the directory. cd c:\flexnet-win\i86_n3\ 3. Run lmgrd to start the server. In t

Appendix I: FAQs 382 Question Answer is the most effective and cost-efficient way to scale a single location. It also supports the network model w

Appendix I: FAQs 383 Question Answer for authentication with directory services and security tools such as LDAP, AD, RADIUS, and so on? authentic

Appendix I: FAQs 384 Question Answer well as external (not just WAN, but LAN, too)? LAN or WAN. Does CC-SG support CRL List, that is, LDAP list of

Appendix I: FAQs 385 Grouping FAQs Question Answer Grouping Is it possible to put a given server in more than one group? Yes. Just as one user

Appendix I: FAQs 386 Interoperability FAQs Question Answer Interoperability How does CC-SG integrate with Blade Chassis products? CC-SG can suppor

Appendix I: FAQs 387 Licensing FAQs If you must replace your installed licenses, follow these rules. Base licenses must be replaced first. For

388 The following keyboard shortcuts can be used in the Java-based Admin Client. Operation Keyboard Shortcut Refresh F5 Print panel Ctrl + P Help F

389 This appendix includes information about the naming conventions used in CC-SG. Comply with the maximum character lengths when naming all the pa

Appendix K: Naming Conventions 390 Field in CC-SG Number of characters CC-SG allows Audit Information 256 Location Information Field in CC-SG N

Appendix K: Naming Conventions 391 Field in CC-SG Number of characters CC-SG allows periods are converted to hyphens. Device Description 160 Devi

Chapter 3: Getting Started 23 b. Type and then confirm the new password. The new password must be a strong password consisting of at least eight

392 Prior to version 4.0, CC-SG Diagnostic Console displays a number of messages on the screen each time when it boots up. These messages are stand

393 A About Administrator Console • 296, 303 About Applications for Accessing Nodes • 238 About Associations • 41 About CC-SG LAN Ports • 242, 243,

Index 394 Adding, Editing, and Deleting Node Groups • 150 Adding, Editing, and Deleting Nodes • 109 Adding, Editing, and Deleting User Groups • 10

Index 395 Change your default search preference • 52, 172 Change your email address • 173 Change your name • 172 Change your password • 172 Chang

Index 396 Default CC-SG Settings • 23 Default User Groups • 158 Delete a Backup File • 224 Delete a Blade Chassis Device • 67, 68 Delete a Categor

Index 397 End SSH Connections • 290, 292 Ending CC-SG Session • 235 Entering Maintenance Mode • 32, 222, 230, 232, 238 Error Log Report • 211 Est

Index 398 Licensing - New Customers - Physical Appliance • 10, 11, 12, 14, 16 Licensing - Rehosting • 29 Licensing - Virtual Appliance with Licens

Index 399 Q Query Port Report • 215 R RADIUS General Settings • 206 RDP Access to Nodes • 355 Reboot CC-SG with Diagnostic Console • 316, 336, 37

Index 400 Specify a Distinguished Name for AD • 188 Specify a Distinguished Name for LDAP • 189 Specify a Username for AD • 189 Specifying Modules

Index 401 Virtual Appliance Installation Requirements • 17 Virtual Appliances with Remote Storage Servers • 27 Virtual Nodes Overview • 113 VNC A

Chapter 3: Getting Started 24 6. Select the CCSG128-VA base license then click Check-Out to activate it. 7. To activate Add-On licenses, sel

U.S./Canada/Latin America Monday - Friday 8 a.m. - 6 p.m. ET Phone: 800-724-8090 or 732-764-8886 For CommandCenter NOC: Press 6, then P

Chapter 3: Getting Started 25 Restart License Servers After an Outage If the license server goes down, and then resumes operation, or if you move

Chapter 3: Getting Started 26 lmdown Allows for the graceful shutdown of selected license daemons. lmdown -vendor raritan is used to shut down the

Chapter 3: Getting Started 27 lmver Reports the version of a FLEXnet Publisher library or binary file, such as lmgrd, lmadmin, lmdown, vendor dae

Chapter 3: Getting Started 28 Licensing - Limited Operation Before License Install Until you have installed and checked out the proper licenses, C

Chapter 3: Getting Started 29 Licensing - Existing Customers If you are an existing CC-SG customer, with a physical CC-SG appliance, when you upg

Chapter 3: Getting Started 30 Add a License You can add a license to CC-SG if you purchase a new add-on license, or need to replace your licenses.

Chapter 3: Getting Started 31 Only the CC Super-User and users with similar privileges can configure Time and Date. Changing the time zone is dis

Contents v Discovering Devices ...

Chapter 3: Getting Started 32 Checking and Upgrading Application Versions Check and upgrade the CC-SG applications, including Raritan Console (RC)

33 Guided Setup offers a simple way to complete initial CC-SG configuration tasks once the network configuration is complete. The Guided Setup inte

Chapter 4: Configuring CC-SG with Guided Setup 34 Associations in Guided Setup Create Categories and Elements To create categories and elements

Chapter 4: Configuring CC-SG with Guided Setup 35 Discover and Add Devices The Discover Devices panel opens when you click Continue at the end of

Chapter 4: Configuring CC-SG with Guided Setup 36 14. If you are manually adding a PowerStrip device, click the Number of ports drop-down arrow an

Chapter 4: Configuring CC-SG with Guided Setup 37 3. There are two ways to add devices to a group, Select Devices and Describe Devices. The Sele

Chapter 4: Configuring CC-SG with Guided Setup 38  Select Nodes a. Click the Select Nodes tab in the Node Group: New panel. b. In the Availabl

Chapter 4: Configuring CC-SG with Guided Setup 39 Add User Groups and Users The Add User Group panel opens when you click Continue at the end of

Chapter 4: Configuring CC-SG with Guided Setup 40 13. Select the Login Enabled checkbox if you want the user to be able to log in to CC-SG. 14. Se

41 In This Chapter About Associations ... 41 Adding, Editing, and De

Contents vi Copying Device Configuration ... 87

Chapter 5: Associations, Categories, and Elements 42 Policies also use categories and elements to control user access to servers. For example, the

Chapter 5: Associations, Categories, and Elements 43  Select Integer if the value is a number. 5. In the Applicable For field, select whether

Chapter 5: Associations, Categories, and Elements 44 Categories and Elements CSV File Requirements The categories and elements CSV file defines th

Chapter 5: Associations, Categories, and Elements 45 Sample Categories and Elements CSV File ADD, CATEGORY, OS, String, Node ADD, CATEGORYELEMENT

Chapter 5: Associations, Categories, and Elements 46 Export Categories and Elements The export file contains comments at the top that describe eac

47 To add Raritan PowerStrip Devices that are connected to other Raritan devices to CC-SG, see Managed PowerStrips (on page 93). Note: To configure

Chapter 6: Devices, Device Groups, and Ports 48 Viewing Devices The Devices Tab Click the Devices tab to display all devices under CC-SG managemen

Chapter 6: Devices, Device Groups, and Ports 49 Icon Meaning Serial port unavailable Ghosted port (See Raritan's Paragon II User Guide for

Chapter 6: Devices, Device Groups, and Ports 50 Note: For blade servers without an integrated KVM switch, such as HP BladeSystem servers, their pa

Chapter 6: Devices, Device Groups, and Ports 51 The Device Profile includes tabs that contain information about the device. Associations tab Th

Contents vii Adding Location and Contacts to a Node Profile ... 111 Adding No

Chapter 6: Devices, Device Groups, and Ports 52 2. Choose Devices > Device Manager > Topology View. The Topology View for the selected devi

Chapter 6: Devices, Device Groups, and Ports 53 Discovering Devices Discover Devices initiates a search for all devices on your network. After di

Chapter 6: Devices, Device Groups, and Ports 54 Adding a Device Devices must be added to CC-SG before you can configure ports or add interfaces th

Chapter 6: Devices, Device Groups, and Ports 55 6. Type the time (in seconds) that should elapse before timeout between the new device and CC-SG

Chapter 6: Devices, Device Groups, and Ports 56 14. If the firmware version of the device is not compatible with CC-SG, a message appears. Click Y

Chapter 6: Devices, Device Groups, and Ports 57  If you do not see the Category or Element values you want to use, you can add others. See Asso

Chapter 6: Devices, Device Groups, and Ports 58 2. Type the new device properties in the appropriate fields on this screen. If necessary, edit th

Chapter 6: Devices, Device Groups, and Ports 59 Adding Location and Contacts to a Device Profile Enter details about the location of the device a

Chapter 6: Devices, Device Groups, and Ports 60 Configuring Ports If all ports of a device were not automatically added by selecting Configure all

Chapter 6: Devices, Device Groups, and Ports 61 3. Click the Configure button that corresponds to the KVM port you want to configure. 4. Type a

Contents viii Limit the Number of KVM Sessions per User ... 162 Configuri

Chapter 6: Devices, Device Groups, and Ports 62 3. Click the Access Application drop-down menu and select the application you want to use when yo

Chapter 6: Devices, Device Groups, and Ports 63 3. Select the checkbox of the port you want to delete. 4. Click OK to delete the selected port.

Chapter 6: Devices, Device Groups, and Ports 64 Add a Blade Chassis Device The procedure to add a blade chassis device varies depending on the bla

Chapter 6: Devices, Device Groups, and Ports 65 Configuring Slots on a Blade Chassis Device If the blade servers or slots are not configured yet

Chapter 6: Devices, Device Groups, and Ports 66  To configure each slot individually, click the Configure button next to the slot. Then type a n

Chapter 6: Devices, Device Groups, and Ports 67 To delete a slot using the Delete Blade command: 1. In the Devices tab, click the + next to th

Chapter 6: Devices, Device Groups, and Ports 68 Move a Blade Chassis Device to a Different Port When physically moving a blade chassis device from

Chapter 6: Devices, Device Groups, and Ports 69 Bulk Copying for Device Associations, Location and Contacts The Bulk Copy command allows you to c

Chapter 6: Devices, Device Groups, and Ports 70 Configuring Analog KVM Switches Connected to KX2 2.3 or Higher KX2 version 2.3 enables you to conn

Chapter 6: Devices, Device Groups, and Ports 71 4. Select the checkbox for each slot you want to configure, then click OK. To configure slots

Contents ix Specify a Base DN... 189 Spec

Chapter 6: Devices, Device Groups, and Ports 72 Device Groups Overview Device groups are used to organize devices into a set. The device group wil

Chapter 6: Devices, Device Groups, and Ports 73 2. Click the New Group icon in the toolbar. The Device Group: New panel appears. 3. In the G

Chapter 6: Devices, Device Groups, and Ports 74  Category - Select an attribute that will be evaluated in the rule. All categories you created i

Chapter 6: Devices, Device Groups, and Ports 75 Example 2: If you want to describe a group of devices that belong to the engineering department o

Chapter 6: Devices, Device Groups, and Ports 76 Describe Method versus Select Method Use the describe method when you want your group to be based

Chapter 6: Devices, Device Groups, and Ports 77 Adding Devices with CSV File Import You can add devices to CC-SG by importing a CSV file that con

Chapter 6: Devices, Device Groups, and Ports 78 Column number Tag or value Details spaces or certain special characters. Dominion PX device names

Chapter 6: Devices, Device Groups, and Ports 79 To add a port to the CSV file: Use the DEVICE-PORT tag only if you add a device with Configure

Chapter 6: Devices, Device Groups, and Ports 80 Column number Tag or value Details 6 Blade Name Optional. If left blank, the name assigned at the

Chapter 6: Devices, Device Groups, and Ports 81 Column number Tag or value Details 2 DEVICE-CATEGORYELEMENT Enter the tag as shown. Tags are no