Uniclass Prima IP 8, Prima IP 16, Prima IP 8 Port, Prima IP 16 Port User Manual
IP
8/16-PORT
IP KVM SWITCH
CASCADABLE RACKMOUNT
USB AND PS/2 TYPE
OSD, FRONT-PANEL BUTTONS, KEYBOARD HOTEKYS
User Guide
Revision 1.4
Copyright © 2007
About this manual
This User Guide is the complete reference to the Prima IP KVM Switch, its functional features
and usage. The Complete User Guide can be found only on the Prima IP Support CD-ROM disc.
Prima IP documentation List
Installation Guide Printout / Prima IP support CD-ROM disc
User Guide Prima IP Support CD-ROM disc
How to generate your own set of Certificates Prima IP Support CD-ROM disc
FCC Statement
This equipment has been tested and found to comply with the regulations for a Class B digital
device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable
protection against harmful interference when the equipment is operated in a commercial
environment. This equipment generates, uses, and can radiate radio frequency energy and, if
not installed and used in accordance with this User Guide, may cause harmful interference to
radio communications. Operation of this equipment in a residential area is likely to cause harmful
interference in which case, the user will be required to correct the interference at his/her own
expense.
CE Statement
This is a Class B product in a domestic environment, this product may cause radio interference,
in which case the user may be required to take adequate measures.
Prima IP User Guide R1.4
i
TABLE OF CONTENTS
1 INTRODUCTION ..............................................................................................................................1
1.1 PRIMARY FEATURES .......................................................................................................................4
1.2 SYSTEM ARCHITECTURE.................................................................................................................6
1.3 PRIMA IP EXTERNAL VIEWS.......................................................................................................... 8
2 PRIMA IP INTALLATION ............................................................................................................ 11
2.1 CHECKLIST BEFORE INSTALLATION ...............................................................................................11
2.2 SET UP THE PHYSICAL CONNECTIONS...........................................................................................12
2.3 CONFIGURE YOUR SERVERS FOR CONNECTIONS TO PRIMA IP......................................................14
2.4 MORE TIPS FOR SERVER DESKTOP CONFIGURATION.....................................................................16
2.5 CONFIGURE IP ADDRESS AND PORT BASE ....................................................................................18
2.6 CONFIGURE YOUR FIREWALL/ROUTER FOR ACCESSING PRIMA IP ACROSS INTERNET....................... 21
2.7 INSTALL CERTIFICATES ON PRIMA IP...........................................................................................22
2.8 SELECT A SECURITY LEVEL FOR VIEWER CONNECTION..................................................................24
2.9 SELECT A USER PASSWORD POLICY.............................................................................................. 25
3 MAKING A VIEWER CONNECTION......................................................................................... 27
3.1 INSTALL WIN32 VIEWER ON THE CLIENT COMPUTER.................................................................... 27
3.2 INSTALL JAVA VIEWER ON THE CLIENT COMPUTER ........................................................................27
3.3 IMPORT CERTIFICATES TO PRIMA IP VIEWER ON THE CLIENT COMPUTER...................................... 28
3.4 SPECIFY THE VIEWER CONNECTION OPTION BEFORE MAKING A CONNECTION ...............................29
3.5 ESTABLISH THE VIEWER CONNECTION...........................................................................................30
3.6 MOUSE CURSORS SYNCHRONIZATION........................................................................................... 32
3.7 SAVE THE CONNECTION OPTIONS ................................................................................................33
3.8 WIN32 VIEWER CHARACTERISTICS..............................................................................................33
3.9 TITLE BAR INFORMATION ............................................................................................................37
3.10 THE SELECT COMPUTER BOX ........................................................................................................ 37
3.11 VIEWER QUICK MENU.................................................................................................................. 39
3.12 JAVA VIEWER CHARACTERISTICS.................................................................................................. 43
3.13 COMMON VIDEO DISPLAY PROBLEM TROUBLESHOOTING............................................................... 43
4 PRIMA IP UNIT MANAGEMENT OVER A SECURE HTTPS BROWSER CONNECTION46
4.1 WEB-BASED MANAGEMENT INTERFACE.........................................................................................46
4.2 DOWNLOAD – DOWNLOAD PROGRAMS FOR VIEWERS....................................................................48
4.3 DATE & TIME – DATE, TIME, GLOBAL TIME ZONE SUPPORT AND NTP SERVER SYNCHRONIZATION 49
4.4 VIDEO SERVER – MISCELLANEOUS SETTINGS FOR VIDEO SERVERS ...............................................51
4.5 POWER CONTROL – SETTINGS FOR SERIAL POWER CONTROL UNIT ..............................................55
4.6 COMPUTERS – SETTINGS FOR SPECIFIC COMPUTERS.....................................................................56
4.7 SERVER LOG – LOGGING SERVER EVENTS ....................................................................................58
4.8 VIDEO MODES – KEEPING, MODIFYING AND AUGMENTING YOUR VIDEO MODE DATA BASE ...........59
4.9 ALARMS – E-MAIL NOTIFICATIONS AND SNMP LOGGING SUPPORT ...............................................61
4.10 LAN TCP/IP – PORT AND IP SETTINGS.......................................................................................65
4.11 WAN PPP – PPP SERVER AND CLIENT........................................................................................ 67
4.12 USER STATUS – SHOW THE CURRENTLY CONNECTED USERS......................................................... 71
4.13 USER MANAGEMENT – MANAGE USER ACCOUNTS, RADIUS ACCOUNTING AND REMOTE
AUTHENTICATIONS .................................................................................................................................... 72
4.14 USER GROUP – MANAGE USER GROUP, AND ACCESS RIGHT TO EACH COMPUTER WITHIN THAT
GROUP 77
4.15 SECURITY – CERTIFICATES INSTALLATION, VIEWER ENCRYPTION AND PASSWORD POLICIES.......... 80
Prima IP User Guide R1.4
- -
ii
4.16 MAINTENANCE – FIRMWARE/SOFTWARE VERSION INFORMATION, UPGRADE, CONFIGURATION
BACKUP AND UPLOAD................................................................................................................................. 84
4.17 LOGOUT – LOG OUT THE WEB MANAGEMENT ...............................................................................87
4.18 APPLY SETTINGS – VALIDATE NEW SETTINGS...............................................................................88
5 LOCAL CONSOLE OPERATION.................................................................................................90
5.1 CONTROL INTERFACES.................................................................................................................90
5.2 LOCAL CONSOLE HOTKEY OPERATIONS ........................................................................................94
Prima IP KVM Switch User Guide R1.4
1 INTRODUCTION
The Prima IP 8 / Prima IP 16 is a 16-port IP-based KVM Switch with single-port KVM Link
Extender over IP. In addition to the traditional local console, it provides a remote access over the
LAN/Internet IP network. It is functionally versatile, robust and ultra-secure. It supports full 1024bit PKI authentication, 256-bit SSL data encryption, LDAP, RADIUS as well Active Directory
authentication and RADIUS accounting.
Prima IP KVM Switches
Today, the IP-based KVM Switch with multi-port capacity has been regarded as a reliable
solution to address the critical issue of server rack management with admin’s ready access
anytime anywhere. Prima IP 8 / Prima IP 16 is designed with a view to offer a cost-effective yet
full-featured functionality under these scenarios.
Total server control from BIOS level up anytime anywhere
The Prima IP 8 / Prima IP 16 gives users total control over its total 16 server ports, from preboot
stage such as the BIOS-level CMOS setting up to the GUI applications and daily maintenance
routines such as power cycling (power control unit required). And all these could be nicely done
either on local console or using a thin-client software viewer on any computer. All you need for
accessing your computer remotely is to login, download the viewer, and get yourself connected to
a whole bunch of servers in seconds.
Upgrade and Configuration Backup is just a breeze
The Prima IP 8 / Prima IP 16 is fully Web-enabled to allow software upgrade and config uration
upload/backup over the Web Management Interface. All you need to do is upload the files from its
web management interface, and restart it to work with latest functionalities within minutes and
can be performed across oceans-by an SUPERADMIN remotely!
T ot al Control Anytime Anywhere
With Prima IP 8 / Prima IP 16, the server administrator can access enterprise serve r room or
data center on his own seat without toils and troubles of going anywhere from across the street to
oversea. Organizations can enjoy a centralized and cost-effective control over its dispersed
servers in different branch offices around the world, saving money for outsourcing costs.
Rackmount Cascadable with OSD Menu Control
In addition to keyboard hotkeys and front-panel buttons, Prima IP 8 / Prima IP 16 also provides
OSD Menu for intuitive KVM switching operations. Its cascadable feature can upscale the server
number to 128 by cascading with other PRIMA-4, PRIMA-8 or PRIMA-16 KVM Switch. Both USB
and PS/2 interface support on PC side offers maximum convenience in a computing environment
- -
1
Prima IP KVM Switch User Guide R1.4
- -
2
that accommodates both newer USB-enabled computers and older computers with only PS/2
interfaces.
Versatile backup connection featuring a PPP Server or PPP Client
To provide a redundancy of a backup connection system while network might no longer function
in critical situation, Prima IP also allows an easy and convenient PPP connection over the dial-in
modem phone line. It could serve as a PPP server to accept a peer computer to make PPP
connection request over a dial-in modem phone line. On the other hand, Prima IP could also
serve as a PPP client to dial-in to your ISP or enterprise PPP server to connect to internet. Thus,
the PPP server/client feature allows users a second backup system, which offers a direct
cable/modem dial-in access to your connected servers via PSTN while your network is down.
Critical Advantage over other remote server management solution
The advantages of using Prima IP KVM Switch, as compared to the conventional software
remote control solution is that: The hardware-based remote control solution such as Prima IP is
capable of accessing the connected servers regardless of the server states while software
remote control solution cannot be functional while the server is still in the POST or preboot stage
or in a “blue screen of death”. The Prima IP offers a server management capacity of up to 128
connected servers by cascading with Prima KVM switches. There is no need to install any
software utility on the server side. Prima IP also offers power on/off alternatives if used with a
remote power control unit.
KVM Switch Management
Prima IP 8 / Prima IP 16 not only provides remote user access, but also plays the role of KVM
management. It manages the software version of all KVM switches connected in the daisy-chain,
and upgrades automatically any KVM switches whose software is not the latest. It displays the
KVM error and information messages into its server log. It permits to setup remotely the name of
computers that are displayed in the OSD, the local user name and password.
Stability and ultra-security with flexibility and convenience
The Prima IP distinguishes itself among its peer products not only in its stability and durable
performance, but also in its industry-standard security features such as full 1024-bit PKI
Authentication and 256-bit SSL data encryption. Together with 3 levels of viewer connection
security levels in combination with 3 types of password policies plus three categories of user
privileges, all these make Prima IP a ultra-powerful IP KVM Switch with ultra-flexibility for a
customized balance between data safety and user convenience. On the other hand, the
robustness and the ease of maintenance of the embedded systems involve zero costs for the unit
management and maintenance.
Global Time Zone and Time Servers Support
To make Prima IP really comfortable with all the global time zones it will be deployed in, it is vital
to provide a convenient Global Time Zone support for a correct time stamp to all logging events,
alert e-mail notifications. This will not leave server administrators in troubles with calculating time
differences. Additionally, the Prima IP also supports NTP time server and keep its time always
sync with the timer server you specify. The Prima IP is even sophisticated enough to take care of
the daylight saving time in each and every Time Zone/Region, thus saving troubles for updating
time frame with daylight saving specifics every six months.
Upgrade and Configuration Backup is just a breeze
Prima IP KVM Switch User Guide R1.4
- -
3
Prima IP is fully Web-enabled to allow software upgrade and configuration upload/backup over
the Web Management Interface. All you need to do is to upload the files to Prima IP over Web
interface and it is freshly restarted and begins working with those latest update functionalities and
features. Web update can be easily performed across internet-by a remote SUPE RADMIN!
Advantages Galore
With Prima IP, the server administrator can access enterprise server room or data center on his
own seat without toils and troubles of going anywhere from across the street to oversea. And
organizations can enjoy a uniquely centralized and cost-effective control over its dispersed
servers in different branch offices around the world, saving money for outsourcing costs.
Prima IP KVM Switch User Guide R1.4
- -
4
1.1 Primary features
General features
▪ 8/16-port IP-based Cascadable 19” Rackmount USB PS/2 KVM Switch w/ OSD
▪ Provides 1 digital port for remote control over IP
▪ Port capacity scalable up to a maximum of 128 computers with cascaded configuration of
other Prima KVM Switches (Prima 4/Prima 8/Prima 16)
▪ PS/2 local [analog] console for local rack server management
▪ USB and PS/2 Dual Interface Support on PC side
▪ Operation and channel selection by front-panel buttons, keyboard hotkeys, OSD menu and
Viewer interface
▪ Dual numerical LED displays and LED port indicators for easy bank/port status monitoring
▪ Autoscan mode for quick browsing of all connected computers
▪ Serial port for external modem/remote power control device
▪ Multiple users can login in a same remote server desktop
▪ Total control over the remote server from BIOS level up to GUI applications
▪ Remote Power On/Off support
▪ Ultra-security using full 1024-bit PKI Authentication / 256-bit SSL encryption
▪ Work with LDAP / RADIUS / Active Directory Servers
▪ Ethernet 10/100 and serial PPP server and client connections
TCP/IP remote connection
▪ 256-bit SSL-encrypted Web Management Interface for all settings and upgrade/ backup
features
Thin-client Viewer Program
▪ Win-32 viewer and Java viewer for cross-platform compatibility
▪ Connection options configurable for optimized performance
▪ Shared, Non-Shared and View Only sessions
▪ Easy download and installation
▪ Multiple viewer instances can be run on a same client computer
▪ Options for Automatic video centering and optimization
Hi-Speed PPP Connection
▪ PPP Connection support over serial interface [RJ12] up to 1 Mbps
▪ PPP server enabling for PPP connection across a pair of modems for secure or backup
direct access
▪ PPP client enabling for PPP connection to the internet with a modem
Video server
▪ Support up to 1600 x 1200 @ 60 Hz resolution
▪ 8/16-bit color
▪ 3 Video Quality settings
▪ 4 Video Compression schemes
▪ 8-bit color reduction
▪ Configurable database to set up new or unknown VGA modes
▪ Virtually compatible to any KVM Switch through automatic video quality optimization
Power ON-OFF Control Support
▪ Remote power ON-OFF control over serial interface
▪ Serial commands configurable to fit serial power control devices
▪ Power ON-OFF privilege only for the SUPERADMIN users
Prima IP KVM Switch User Guide R1.4
- -
5
Security
▪ 1024-bit Public key Authentication using certificates generated by an external CA
▪ 256-bit SSL Encryption for keyboard, mouse and video signal transmissions
▪ Remote authentication support for LDAP or RADIUS servers
▪ RADIUS accounting support
▪ 3 SSL security levels :
o No authentication – No encryption
o Server Authentication – SSL encryption
o Server & Client authentication – SSL encryption
▪ 3 password policies :
o No Password
o One global password for all users
o One different password for each user
Alarms and Notifications
▪ Alert e-mail notification and SNMP trap messages for critical server events such as No Video,
Blue Screen and NumLock Test Failure
User Management
▪ User login either by querying the local user database or by connection to remote LDAP or
RADIUS server
▪ 3 user privileges :
o SUPERADMIN – to access complete set of management features and user
features, including Power ON-OFF remote servers
o ADMIN – partial set of management and all user features
o USER – only user features
User Group management
▪ Create specific user groups, each of which is assigned with privilege to access only those
computers that are within that group
Global Time Zone Support
▪ Time support for all continents and major cities
▪ Time synchronization by connection to any NTP time servers
▪ Automatic Daylight Saving management
Maintenance and KVM management
• Manages the software version of all KVM switches connected in the daisy-chain
• Upgrades automatically any KVM switch whose software is not the latest
• Record the error and information messages of all KVM switches in the daisy-chain within its
server log
• Setup remotely the name of computers that are displayed in the OSD, the local user name
and password
Prima IP KVM Switch User Guide R1.4
1.2 System Architecture
The Prima IP is based on an embedded Linux platform for computing power and rugged
stability. The Prima IP employs a High speed Processor to ensure excellent video quality and
fast keyboard / mouse response across the Internet, even when bandwidth availability is limited.
LAN/WAN Configurations
The Prima IP KVM switch enables local and remote access of the connected computers/servers
behind anytime anywhere.
Prima IP KVM Switch - Basic Configuration
The Prima IP KVM switch can be daisy-chained with multiple Prima KVM switches (up to 8 units)
to upscale port capacity up to hundred computers/servers.
Prima IP KVM switch daisy-chained with other Prima KVM Switches.
- -
6
Prima IP KVM Switch User Guide R1.4
Power Control Configuration
The Prima IP KVM switch supports Serial Power Control device to facilitate the remote Power
ON/OFF and power cycling of the connected computers/servers.
Prima IP connected to a Remote Power Control Device
PPP connections
The Prima IP KVM switch can serve either as a PPP client or a PPP server to support PPP
connection. The Prima IP offers a second backup connection over modem phone line in case
the network is down.
Prima IP as PPP server to accept dial-in request from a remote PPP clie nt via mode m line
Prima IP as PPP client to dial-out to ISP for remote clients to access via internet
- -
7
Prima IP KVM Switch User Guide R1.4
1.3 Prima IP External Views
Prima IP Front View
Prima IP 8 - Front-panel
Prima IP 16 - Front-panel
Status LEDs
The Dual Numerical LED shows bank number of the Prima IP KVM Switch within a Daisy-chain
The
10/100Mbps
LED is lit as solid orange when the current digital link is running on 100Mbps
speed.
The
Link/Act
LED gives off solid green light when a network link is established and flashes
whenever network transmission are perceived on the digital port.
The
Power
LED indicates the Power On status when it is lit as solid red.
The
Video
LED indicates the normal functioning of video server when it is blinking orange.
Prima IP Rear View
Prima IP 8 - Rear-panel
- -
8
Prima IP KVM Switch User Guide R1.4
Prima IP 16 - Rear-panel
8 x 16 PC ports
The PC port is where you connect to your computer. The PC port is a HDB 15 connector
integrated with USB and PS/2 keyboard, mouse and video. To connect PC port to one of your
computer, you may either use USB KVM Combo Cable, or PS/2 KVM Combo Cable, or Combo-free
USB PS/2 KVM Cable, depending on your package option.
Local Console - PS/2 Keyboard port
This is where you connect the PS/2 keyboard for local console.
Local Console - PS/2 Mouse port
This is where you connect the PS/2 mouse for local console.
Local Console - Monitor Port (HDB-15)
This is where you should plug in the Monitor for your local console on Prima IP.
Ethernet Port (RJ-45)
The Ethernet port, or digital port, offers anytime anywhere access of Prima IP and
subsequently the conventional KVM Switch(es) and servers/computers connected behind it to the
remote login clients lover LAN/Internet.
The Daisychain OUT Port (RJ-45)
The Daisychain OUT port is of a HDB 15 female connector, where you can daisy-chain
downstream to a Prima KVM switch.
Serial Port 1 (RJ-12)
This is the so-called Console Management port, and it is where you connect the serial console
cable for advanced console management of Prima IP unit via a serial terminal emulation utility
such as Windows HyperTerminal or Minicom on Linux/Unix.
Serial Port 2 (RJ-12)
The serial control port allows you to connect to either an external modem or a power control unit
or to a cascaded chain of power control units. When added with an external modem to its serial
control port, Prima IP could serve either as a PPP server to allow direct cable connection or
dial-in connection from its peer computers, or as a PPP client to dial-in to the ISP or an
enterprise PPP server. Furthermore, through serial commands sent over its serial control port,
Prima IP can perform remote power on/off and power cycling task via the (cascaded) power
control module(s).
Prima IP Power Receptacle
You should use the DC9V 2A Adapter provided within the package. The center pin is of a positive
polarity. Use of any other adapter will nullify the warranty.
- -
9
Prima IP KVM Switch User Guide R1.4
- -
10
Restore-to-Default Button
The
Res ore o-Default but on
is a tiny recessed button located to the left of the Power
Receptacle, and can only be accessed by prying down with a pointed needle tip. To depress the
recessed button for over 5 seconds, and upon release, it will restore Prima IP to factory default –
the default IP settings and user account settings that come with f actory default.
t -t t
Prima IP KVM Switch User Guide R1.4
2 PRIMA IP INTALLATION
Before installing the KVM switch, you should run through the following peripheral
checklist to ensure a proper setup of your KVM Switch….
2.1 Checklist before Installation
: Suitable KVM cables to connect the Prima IP KVM Switch to the
keyboard, video and mouse ports of each of your PC. For each USB style (or
PS/2 style) computer connected, you should have the USB (or PS/2) KVM
combo cable (all male), or the Combo-free USB PS/2 KVM cable. The Combofree USB PS/2 KVM cable is highly recommended for your convenience.
: A monitor with a standard D-sub 15-pin video connector (HDB-
15) that you have verified to be working when connected directly to each of
your PCs.
: A standard PS/2 style Microsoft or Logitech keyboard.
: A standard PS/2 style Microsoft or Logitech compatible 5-key
mouse
: Daisy-chain cable(s), necessary only if you need to connect to
other Prima KVM Switch (Prima 4/Prima 8/Prima 16).
: Terminator, necessary only if you need to daisy-chain multiple
Prima KVM Switches.
Figure 2-1 The 3-1 USB Combo KVM cable
Figure 2-2 The 3-1 PS/2 combo KVM cable
- -
11
Prima IP KVM Switch User Guide R1.4
Figure 2-3 The Combo-free USB PS/2 KVM cable
Figure 2-4 The Daisy-chain Cable [M-HDB15-to-HDB15-F]
Figure 2-5 The [Daisy-chain] Terminator
2.2 Set up the Physical Connections
Step 1. Power on the Prima IP: Connect the Prima IP Power adapter to power on the Prima
IP KVM Switch.
Step 2. Set up a local console on Prima IP: If a local console (that is a physical keyboard,
mouse and monitor connected to the Prima IP) is required, connect a keyboard and mouse to
the Prima IP local console ports (that is keyboard, mouse and monitor port specifically).
Step 3. Connect to Computers: If you have no intention to daisy-chain your Prima IP KVM
switch with either of the Prima KVM switches (Prima 4/Prima 8/Prima 16). You just con nect each
PC port to a computer, using the USB KVM cable, or PS/2 KVM cable, or the Combo-free USB
PS/2 KVM cable that come with the Prima IP packing box.
If you are using any PS/2 computer: Please make sure all of your PS/2 computers are
powered off before connecting to the KVM Switch. Otherwise, the non-PnP P S/2 interfaces
might not recognize the PS/2 keyboard and mouse later. However, USB computers do not h ave
this limitation.
- -
12
Prima IP KVM Switch User Guide R1.4
Prima IP configuration – Single server mode
3.1 Make sure (at least the PS/2) computers that are to be connected to the KVM switch are
powered off. If not, power them off before you proceed with the following steps.
If you use only one single Prima IP KVM switch in non-cascaded application, you should
ignore step 3.2, 3.3, and 3.4 and jump directly to step 4.
If you want to daisy-chain multiple Prima KVM Switches to the [master] Prima IP KVM
switch, go to step 3.2. You can daisy-chain up to 8 levels of KVM Switches.
3.2 Use the daisy-chain cable (M-HDB15-HDB15-F) to connect the DaisyChain Port (HDB 15
female) of the [master] Prima IP KVM Switch to the DaisyChain IN Port (HDB 15 male) of
the second Prima KVM switch. Then connect the power adapter cord to the second Prima
KVM switch to power it on.
3.3 If you have yet another switch to be daisy-chained, just repeat Step 3.1 to connect them.
You can daisy-chain up to 8 units. Remember to plug a Terminator onto the Da isy-chain
Out Port of the last Prima KVM switch unit.
Combo-free USB PS/2 KVM Cable
3.4 (Now your Prima IP KVM switch, and those Prima KVM Switches daisy-chained below should
have been powered-up and initialized….) Connect each computer to a PC port on the
backpanel of the KVM switch(es). You should use the special [Combo-free] USB PS/2
KVM cable (with the USB-to-PS/2 adapter) for connection to a USB computer (PS/2
computer). (Other types of cables may be used accordingly.)
- -
13
Prima IP KVM Switch User Guide R1.4
The special Combo-free KVM cable provides a PS/2 keyboard connector, a USB connector and
a HDB video connector for the computer connection. When connecting with a USB computer, just
plug the USB connector to it and leave the PS/2 connector free. When connecting with a PS/2
computer, just add one USB-to-PS/2 adapter to the USB connector and you’ll have a PS/2
connector for mouse. DO NOT try to connect both USB connector and PS/2 keyboard
connector to a computer at the same time.
Step 4. Boot up connected computers (if they are not powered-on yet): After the
computers has booted. Then, you can go forth to verify the connections with each of the
connected computers. On the Prima local console you should switch to every computer and verify
that the keyboard, mouse and monitor are all working on each of the connected server(s).
Now that you have set up your local console on
Prima IP
, you can now configure your
connected servers just by using the ready access provided by
Prima IP
’s local console.
2.3 Configure Your Servers for Connections to
Prima IP
Mouse acceleration is not supported in Prima IP. Therefore, you must turn off mouse
acceleration on all your connected servers.
Turn off mouse acceleration & “Snap to” option
Windows XP Platform
Access
Control Panel Mouse
. On the
Mouse Properties
tab, select the
Pointer Options
page :
/
1. Adjust the pointer spe ed slide bar to the exact middle.
2. Uncheck th e
Enhance pointer precision
option.
3. Uncheck th e
Automatically move pointer to the default button in a dialog box
- -
14
Prima IP KVM Switch User Guide R1.4
Click OK.
Windows 2000 Platform
Access
Control Panel Mouse
. On the
Mouse Properties
tab, select the
Pointer Options
page :
/
1. Adjust the pointer speed slide bar to the exact middle
2. Select the Acceleration as
None
3. Uncheck th e
Move pointer to the default button in dialog box
Click
OK.
Windows 98
Access
Control Panel Mouse
. On the
Mouse Properties
tab, select the
Motion
page. Under the
Pointer Speed
category:
/
1. Adjust the pointer speed slide bar to the slowest (leftmost) position.
- -
15
Prima IP KVM Switch User Guide R1.4
Click OK.
The mouse setting page on different Windows platforms might be quite different, some gives mouse
acceleration option and some don’t. If you see any mouse acceleration option, please uncheck it. If there is
no mouse acceleration available on the setting page, you can adjust the mouse speed slide bar to either x1 or
the slowest position (such as on Linux platforms). But sometimes, it requires a middle position on the speed
slide bar to make mouse synchronization on the viewer side, for example, Windows XP requires a middle
position on mouse speed. Anyway, the worst case is that you have to make some trial and error to make your
mouse acceleration off and the speed as x 1 (could be at the slowest position or the middle position).
2.4 More Tips for Server Desktop Configuration
There are several aspects that have to be taken into consideration and maybe configured on
your computers or servers for best performance:
(1) Resolution modes should refrain from too much peculiarity and better adopt ones
that are within Prima IP’s standard support.
(2) Turn off the Menu special transition effects on your operating system (especially on
Windows XP, if you are using any) such as
fade
for best video refreshing effect,
especially when you are using Medium or Low Video Quality as your video filter
setting on Prima IP.
(3) Adjust the server desktop backgrounds as containing preferably plain, solid colors
with simple designs (only for improving video refreshing speed when bandwidth is
critically limited. No need to do so when bandwidth is ample)
Configure Display Resolution on your Server
Prima IP supports most display modes up to 1600 x 1200. However, you might encounter some
display problems when your display card is outputting an unusual display mode. These possible problems
are either no video or abnormal display on viewer screen.
To simplify the display factor before connection to Prima IP, we suggest you use more standard display
modes such as: 800 x 600 @ 72Hz/75Hz, 1024 x 768 @ 72Hz/75Hz, etc. For the suggested display modes,
please refer to the following table.
- -
16
Prima IP KVM Switch User Guide R1.4
- -
17
640 x 400 640 x 480 800 x 600
1024 x
768
1152 x
864
1280 x
1024
1600 x
1200
56Hz
60Hz
D D D D
D
D
61Hz
64Hz
70Hz
D
D D
D
D
72Hz
D D
74Hz
75Hz
D D D
76Hz
D
78Hz
D
84Hz
85Hz
D D D D
100Hz
D D D
Note: These are suggested display modes for server desktop-connected Prima IP. However, the actual display modes
for as specific server desktop will be dependent on its display card. Some display modes listed here might not be
feasible with some display card. Try to do some trials to determine the best display mode for your desktop on Prima IP
viewer.
Disable special transition effects on the screen outputs of your connected servers
Go to Control Panel/ Display / Appearance / Effects. And then uncheck the option to disable transition
effects such as Fade for the menus and tool tips. You should perform the same check on each of your
connected servers.
On Windows platforms such as Windows 98, 2000, XP and 2003 Server, some transition effects might
yield undesirable video refreshing artifacts, especially when you are using Medium or Low Video Quality as
your video filter settings. To avoid undesirable artifacts from appearing on your screen, please turn off the
special transition effects.
Prima IP KVM Switch User Guide R1.4
Choose plain and solid server desktop backgrounds for your connected servers.
To optimize the bandwidth efficiency and speed up video performance across bandwidth-limited
environment, one should preferably adopt a server desktop which should be as plain as a color
background with a solid and light-colored graphics. Complex patterns or color gradients should
be avoided, if bandwidth is critical in your application, since they will create more bandwidth
demands for their transmission across internet.
2.5 Configure IP Address and Port Base
Step 1. Connect your Prima IP to the Ethernet LAN.
The factory default network settings for Prima IP are as follows:
IP address: 192.168.1.200
Net mask: 255.255.255.0
Gateway: 192.168.1.254
DNS: 192.168.1.254
Step 2. Access Prima IP Web Browser Management interface by typing the following in the
address bar of your browser window on a remote client:
https://192.168.1.200:5908
Step 3. Then a login prompt will ask you for the account name the password. Use the default
account and password:
User Name: superuser
Password: superu
After logging in, you will see the Prima IP Web Browser Management Interface.
- -
18
Prima IP KVM Switch User Guide R1.4
Step 4. Go to the LAN TCP/IP page on the Prima IP Browser Management Interface and
modify the IP address and port base for your Prima IP KVM switch. For example, if you choose
your IP seeting for the Prima to be 192.168.1.210 with a port base of 5900. Refer to
Section
4.10, LAN TCP/IP – Port and IP Settings.
Step 5. Apply the new setting by clicking
Apply Settings
.
Step 6. Verify Prima IP’s network connection.
Connect to Prima IP by Web Management Interface using the new IP address.
Note that the IP address should be followed immediately by a colon and the port base +8 for
port number,
https://<IP_address>:<PortBase+8>.
For example, if the IP address is 192.168.1.210 and the port base number is 5970, then you
should enter
https://192.168.1.210:5978
Remember that it’s a secure SSL encrypted connection, so you should type “https” instead of the usual
“http”. Otherwise, the connection will not be established.
- -
19
Prima IP KVM Switch User Guide R1.4
If you are satisfied with the default port base setting as 5900, you can leave the port base unmodified.
The default port base for Prima IP connection is set at 5900. This means it will use port 5900
(port base) for viewer connection and port 5908 (port base + 8) for https web browser
connection.
<Port base> – used for viewer connection
<Port base + 8> – used for secure browser connection
However, if you intend to use your own port base setting, just access the Web Management
interface and configure the port base.
For example, if you choose 5970 as your port base, then you have:
5970 – used for viewer connection
5978 – used for secure browser connection
Click
Submit button and Apply Settings
button to validate your new setting.
Now you have installed Prima IP within your Local Area Network environment, and
can try to establish a remote viewer connection…
- -
20
Prima IP KVM Switch User Guide R1.4
2.6 Configure your firewall/router for accessing
Prima IP across internet
To allow access to the Prima IP behind corporate firewall/router, please configure the following
settings on your firewall/router (not on your Prima IP):
Step 1. Configure a virtual server on your router: you should configure (or ask your net
admin to configure for you!) a virtual server as mapped to the Prima IP local IP address.
Step 2. Open a port range: (<port_base> ~ <port_base_+_9>) both inbound and
outbound for the virtual server: you should open a port range according to what you have
configured as port base for Prima IP previously.
Taking previous example, if we configure Prima IP as having a port base of 5970, then we should
open port range 5970~5979 ( that is, <port_base> ~ <port_base +9>) both for inbound and
outbound, in which,
<port_base> = 5970 is the Prima IP viewer connection port
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
<port_base + 8> = 5978 is the browser SSL connection port
<port_base + 9> = 5979 is for viewer internal communication, etc.
For example:
Router internet IP ÅÆ virtual server (port range open) ÅÆ Prima IP local IP
61.232.134.120 ÅÆ virtual server (port 5970~5979 open) ÅÆ 192.168.1.7
Once you haved configure a virtual server with appropriate port range open (<port_base> ~
<port_base_+_9>), you can then try to access your Prima IP across internet by using in the
public IP address and designated port number. For example, in this case, we have
Browser access: https://
61.232.134.120:5978
Viewer access: 61.232.134.120:5970
If you have domain name mapping to the public IP address, you can also use the domain
name, for example:
Browser access: https://
www.mycompany.com:5978
Viewer access: www.mycompany.com:5970
Once you have changed the port base of your Prima IP, you should also modify the open port range on
your router accordingly, if you want internet access to come across.
- -
21
Prima IP KVM Switch User Guide R1.4
2.7 Install Certificates on Prima IP
You could use the default set of certificates (could be found on CD-ROM) to practice making some
PKI-authenticated connections as long as your network safety is not jeopardized. We advise that it is better to
do the practices within your Local Area Network, which is supposed to be well secured with adequate firewall
and other due precautions against network intrusions. Or if you have already obtained a set of certificates
with the file names and formats required by Prima IP, you can then use them for Prima IP viewer
authentication. However, if you simply use the default set of certificates that comes with Prima IP, anybody
who has a copy of the default certificates may establish a connection to your servers. . So we strongly
recommend that you obtain your own certificates for Prima IP or go forth to generate them using software
like XCA….. For certificate generation using XCA, please refer to
How to Generate Prima IP Certificates
using XCA
(could be found on the Prima IP support CD-ROM).
First you have to have these certificates ready on your client computers for uploading to Prima IP
via a Web browser. If you haven’t obtained your own Prima IP certificates, you can use the
default set of certificates (could be found on the Prima IP support CD-ROM).
Certificates for the PKI Authentication to be installed on Prima IP:
(1) the root certificate (root.crt)
(2) the server certificate (server.crt), and
(3) the server private key (serverkey.pem)
Certificates for the LDAP Authentication to be installed on Prima IP:
(1) the LDAP certificate (ldapcert.crt)
(2) the LDAP private key (ldapkey.pem)
Step 1: Access Prima IP Web Management Interface and go to the Security page.
Step 2: Click the
Browse
Button and use the
Choose File
dialog box to browse to your certificate
files ….
- -
22
Prima IP KVM Switch User Guide R1.4
Step 3. Click UPLOAD button to upload the root certificate to Prima IP. After the uploading is
completed, you can then see the prompt page for reboot.
Click
Reboot
and wait till Prima IP is booted up, then likewise try to import the
server.crt
and the
serverkey pem
.
.
The certificate and key for LDAP authentication could be uploaded likewise.
You don’t have to reboot each time when you finish uploading one certificate. You could do one
complete reboot at the end when you finish uploading all of them. To return to the previous Security page
for uploading another certificate without going to immediate reboot, you just click the Security page
hyperlink on the left frame of the browser window.
- -
23
Prima IP KVM Switch User Guide R1.4
2.8 Select a Security Level for Viewer Connection
Step 1. Go to the Security page on the Prima IP Web management interface and select a viewer
connection security level.
There are three security levels for choice:
• Level 1: No encryption (No SSL)
• Level 2: 256-bit encryption, no user certificate required for user authentication
• Level 3: 256-bit encryption, user certificate required for authentication (PKI)
Security level 1 offers a non-secured connection, and hence should be used with caution when
Prima IP is intended to be accessed through external network. For level 1, there’s virtually no
encryption.
Security Level 2 offers a secured SSL connection that provides encryption for mouse, keyboard
and video but uses no PKI-authentication.
Security Level 3 offers a secured SSL connection that provides encryption for mouse, keyboard
and video, and uses 1024-bit PKI-authentication.
The choice of a security level to be implemented for the Prima IP viewer connection is of most
importance, especially when your remote server connections requires a high security that can keep your
servers safe from unauthorized entries and/or network sniffers.
Step 1-a. If you choose to implement PKI authentication feature on Prima IP viewer, you have
to select Level 3 viewer security connection on the Security page of your Prima IP browser
interface.
Then Enter the server password.
Here you should enter the password that has encrypted the
server private key
in the server
private key file,
serverkey.pem
. You should enter the correct server password here in order to
make successful viewer connection with Prima IP in level 3 security setting. If you use the
standard set of certificates provided on the Support CD ROM disc, the password that encrypts
the server private key is
serverpwd
- -
24
Prima IP KVM Switch User Guide R1.4
However, if you use your own set of certificates, you should get the correct server password
from the Certificate Authority that issues those certificates.
Step 2. Go to the
Apply Setting
page and hit the
Apply Setting
button to validate your selection.
2.9 Select a User Password Policy
Step 1. Select a User Password Policy.
Prima IP offers three types of password policies On the drop-down combo box, you can select
your password policy for viewer connections:
No Password
Global Password
User Password
No Password – the viewer will prompt you for no password. Anyone who is with the viewer and passes the
security level check of the viewer could well establish the connection.
Global Password
– the viewer will prompt you for a global password, which is used by all who want to make
viewer connections to Prima IP.
User Password – the viewer will prompt you with user-specific password. With this setting, each login user
will be checked against his or her corresponding password before allowing viewer connection.
Global user password
: If you adopt the Global Password Policy. Here you should enter the
password that is used when the global user password setting is enabled as your active password
policy.
Step 2. Go to the
Apply Setting
page and hit the
Apply Setting
button to validate your selection.
There are altogether nine ( 3 x 3) possible combinations of Viewer Security Levels + Password Policies
that are available for a flexibility to adapt to your security needs. The administrator can choose an optimized
combination of user password policy and the SSL / PKI Authentication according to his security/convenience
concern.
User Password Policy
No password Global Password
User-specific
Password
No SSL-No PKI N – N – N G – N – N U – N - N
SSL – No PKI N – S – N G – S – N U – S - N
SSL / PKI
Authentication
SSL - PKI N – S – P G – S – P U – S - P
G – Global Password U – User-specific Password
S – 256-bit SSL Encryption
P – 1024-bit PKI Authentication
N – Not available
Please note: Either Password Policy or Security Level (SSL/PKI authentication) settings should be used
with due precaution: If you adopts No Password Policy and No SSL encryption/No SSL authentication,
anyone with a viewer and knowledge of the access IP and port number of Prima IP can establish a remote
connection
Now your Prima IP is ready for a PKI-authenticated plus SSL-encrypted viewer
connection! All you have to do is to distribute the followings to you remote connection
client:
- -
25
Prima IP KVM Switch User Guide R1.4
- -
26
1. Certifidcates: (as you have obtained from your CA (Certification Authority).
They are required only if you select level 3 viewer security)
root.crt
client_name.p12. (client_name is freely chosen)
2. Certificate password: (as you have obtained from your CA. It is required
only if you select level 3 viewer security)
clientpwd (if you use the default set of certificate provided on Prima IP
CD-ROM)
3. User account and password: (as you have specified in the User Management
page. It is required only if you choose User Password Policy)
Superuser / superu
Admin / 123456
User / 123456
(If you use the default user accounts/passwords)
4. Global Password: (as you have specified in the Security Page. It is required
only if you use the Global Password Policy)
(You will be prompted when choosing it as your password policy on the
Security Page.)
Loading...