NetEnrich VPM Gateway Rel 1.6 A3000 Installation Guide

NetEnrich VPM Gateway™ A3000 Installation Guide Release 1.6

Copyright Copyright © 2004-2006 NetEnrich, Inc. All rights reserved.

Proprietary Rights

E

The information in this document is confidential to NetEnrich, Inc. and is legally privileged.

The information and this document is intended solely for the addressee. Use of this document by anyone else for any other purpose is unauthorized. If you are not the intended recipient, any disclosure, copying, or distribution of this information is prohibited and unlawful.

Disclaimer

SA

M

PL

This documentation might include technical inaccuracies or typographical errors and is subject to correction and other revision without notice. NetEnrich, Inc. GIVES YOU THE CUSTOMER THIS DOCUMENTATION "AS IS." EXPRESS OR IMPLIED WARRANTIES OF ANY KIND ARE NOT PROVIDED, INCLUDING BUT NOT LIMITED TO THE IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. Some states or jurisdictions do not allow disclaimer of express or implied warranties in certain transactions; therefore, this statement may not apply to you.

NetEnrich VPM Gateway™ A3000 Installation Guide Copyright © 2006, NetEnrich, Inc. All Rights Reserved.

Page 2 of 47 February 2006

Table of Contents 1.

Product Overview ............................................................................6

Introduction....................................................................... 6 Virtual Private Management Key Features ................................... 6 Secure Host Remote Control ................................................... 6 Site Host and Network Device Health Monitoring........................... 6 Troubleshooting & Incident Tracking ......................................... 7 Recovery .......................................................................... 7 Session Audit Trail "Black Box Flight Recorder" ............................. 7 Identity Management and Role Based Access ............................... 7 Specifications..................................................................... 7 NetEnrich VPM Hard Controller™ .............................................. 7 VPM Gateway ..................................................................... 8

1.3

2.

Pre-installation Tasks...................................................................... 10

2.1 2.2 2.3

Instructions to unpack the box ...............................................10 Hardware Checklist .............................................................10 Safety Procedures and Practices .............................................11

NetEnrich VPM Gateway Inventory and Description................................. 12

M

3.

PL

E

1.1 1.2

3.1

SA

3.2

List of items .....................................................................12 Items provided by NetEnrich ..................................................12 Other Items required for connection* .......................................13 Deployment Network ...........................................................15 Steps involved in Installation .................................................16

4.

Installing the NetEnrich VPM Gateway ................................................. 17

4.1 4.2 4.3

5.

Unpacking NetEnrich VPM Gateway ..........................................17 Rack Mounting NetEnrich VPM Gateway.....................................17 Cabling the NetEnrich VPM Gateway ........................................17 Step 1 - Power cord connection ..............................................18 Step 2 – Serial modem connection ...........................................18 Step 3 - LAN1 Connection .....................................................18 Step 4 - LAN2 Connection .....................................................18 Step 5 - Power on VPM Gateway .............................................18 Step 6 - Configuring NetEnrich VPM Gateway through Serial Console..18 Step 7 – Cross checking the connections ....................................21

Preparing Target Machines ............................................................... 22

NetEnrich VPM Gateway™ A3000 Installation Guide Copyright © 2006, NetEnrich, Inc. All Rights Reserved.

Page 3 of 47 February 2006

5.1

Installing NetEnrich VPM Hard Controller ............................................. 23

7.

Configuring the Administration of NetEnrich VPM Gateway ....................... 26

7.1 7.2 7.3 8.

Secure Shell based UI ..........................................................26 Web-based Administrative UI .................................................29 Next Steps........................................................................31

Troubleshooting ............................................................................ 32

8.1 8.2

8.3

Console related issues..........................................................32 Keyboard, Video, Monitors (KVM) ............................................32 Terminal related issues ........................................................33 Telnet.............................................................................33 Serial..............................................................................34 USB CDROM.......................................................................35

Appendix ..................................................................................... 36

M

9.

Unpacking NetEnrich VPM Hard Controller .................................23 Precautions for handling VPM Hard Controllers ............................23 Cabling the NetEnrich VPM Hard Controller ................................24

E

6.1 6.2 6.3

PL

6.

KVM Settings .....................................................................22 Keyboard .........................................................................22 Video..............................................................................22 Mouse .............................................................................22

9.1

SA

9.2

KVM Settings .....................................................................36 Video Settings ...................................................................36 Keyboard settings ...............................................................38 Mouse Settings...................................................................41 Other Settings ...................................................................42 USB Setting.......................................................................42 Absolute Mouse setting ........................................................44 Controller Configuration.......................................................44 Serial Console pin Layout......................................................44

Contact Information ............................................................................. 47

NetEnrich VPM Gateway™ A3000 Installation Guide Copyright © 2006, NetEnrich, Inc. All Rights Reserved.

Page 4 of 47 February 2006

Table of Figures

SA

M

PL

E

Figure 1 – Deployment Diagram .............................................................................................................. 15 Figure 2 – NetEnrich VPM Gateway Back view...................................................................................... 15 Figure 3- Connecting Cables to the NetEnrich VPM Gateway ........................................................... 17 Figure 4- Serial Setting main menu screen........................................................................................... 20 Figure 5- Network Configuration screen ............................................................................................... 21 Figure 6- Controller Installation Step1 ................................................................................................. 24 Figure 7- Controller Installation Step2 ................................................................................................. 24 Figure 8- Controller Installation Step4 ................................................................................................. 25 Figure 9- SSH based UI menu screen ...................................................................................................... 27 Figure 10- SSH UI- System Information screen..................................................................................... 27 Figure 11- VPMG Login screen................................................................................................................. 29 Figure 12- VPMG Menu screen................................................................................................................. 30 Figure 13- Setup (Network) Screen ........................................................................................................ 31 Figure 14- adjusting Video screen resolution....................................................................................... 36 Figure 15- Adjust the screen resolution using GNOME ....................................................................... 37 Figure 16 – Adjust Vertical Video Refresh rate.................................................................................... 38 Figure 17- Creating Device ...................................................................................................................... 39 Figure 18- Keyboard Properties .............................................................................................................. 39 Figure 19-Selecting Keyboard.................................................................................................................. 40 Figure 20- Mouse Properties.................................................................................................................... 41 Figure 21- Mouse Properties.................................................................................................................... 42 Figure 22- Verify USB................................................................................................................................ 43

NetEnrich VPM Gateway™ A3000 Installation Guide Copyright © 2006, NetEnrich, Inc. All Rights Reserved.

Page 5 of 47 February 2006

1. Product Overview 1.1 Introduction

M

PL

E

Thank you for purchasing NetEnrich Virtual Private Management Gateway (VPMG). This provides an "as-if-you-were-there" experience for operational management of remote IT assets. This means that you can interface to servers, clients, and network devices as if you had physical access to the device - via a browser from anywhere in the world - independent of whether there is a firewall between you and the managed device or not.

The NetEnrich VPM Gateway serves as the IT administration point of coordination for secured access, pooling IT administrators, remote monitoring, and remote management of heterogeneous infrastructure. For devices healthy enough to respond, the VPM Gateway provides secure in-band (VNC, RDP, Telnet & SSH) “as-if-you-were-there” remote control. Access to the server is via using a standard web browser, with all communication SSL encrypted. Also accessed via the site VPM Gateway, the NetEnrich VPM Hard Controller™ which are small form-factor controllers, provide out-of-band (KVM, serial console, USB, and power control) access to device command and control streams. This is critical for the building of new machines or the restoration of machines too sick to respond to in-band techniques.

This guide provides information on installing and configuring the NetEnrich VPM Gateway and the NetEnrich VPM Hard Controller for the first time.

1.2 Virtual Private Management Key Features The following are the major features of Virtual Private Management.

SA

Secure Host Remote Control • •

Enables secure remote access to hosts – both in-band and out-of-band consoles even when access is initiated external to the firewall.

Provides multi-level administrator policy control, session recording and logging, and a device dashboard that allows sessions to be initiated without having to know IP addresses or other local host information.

Site Host and Network Device Health Monitoring • •

Provides monitoring capabilities of key services such as DNS, IMAP, HTTP, Directory, and database.

Supports alerts, message notifications and dashboards

NetEnrich VPM Gateway™ A3000 Installation Guide Copyright © 2006, NetEnrich, Inc. All Rights Reserved.

Page 6 of 47 February 2006

2. Pre-installation Tasks 2.1 Instructions to unpack the box

PL

E

Before unpacking the NetEnrich VPM Hard Controller and the VPM Gateway, • Inspect the package for damage. If the box was damaged during shipment, inform the carrier, and fill out the appropriate damage claims.

• Ensure that the area where you plan the installation is well-ventilated.

If you plan to install the NetEnrich VPM Gateway in a server rack, make sure that: • There is enough room in the rear to attach the power cords and Ethernet cables (about four inches) • You have a Phillips-head screwdriver for rack mounting the NetEnrich VPM Gateway.

Before installing NetEnrich VPM Gateway, refer to the following list to ensure that you have all the items that are shipped and list of other items required for installation.

2.2 Hardware Checklist

M

The following items are included in the shipment: Serial No.

Description

Part No.

1

A3000 NetEnrich VPM Appliance (VPMG)

01-NET- A3000

2

Power Cord

SA

3

Null Modem Cable

4

Quick Start guide

232-000024-00

5

KVM-Serial-II Cable

01-NET-0BC10-KSU

6

RJ45-DB9 Converter

7

C600

8

Controller power adapter

01-NET-0C600

Notes: Depending on the order placed, the number may be one or more controllers and associated cables and power supply.

The Ethernet cables are NOT provided.

There may be additional items included in your shipment, based on your order.

If any component is missing, please contact NetEnrich Support immediately. It NetEnrich VPM Gateway™ A3000 Installation Guide Copyright © 2006, NetEnrich, Inc. All Rights Reserved.

Page 10 of 47 February 2006

3. NetEnrich VPM Gateway Inventory and Description This section gives an over view of all the items you require in different stages of installation such as the items you have received, the other items you should be ready with before starting with the installation procedure and the optional items that are required for specific functionality activations.

E

3.1 List of items Items provided by NetEnrich

NetEnrich VPM Hard Controller is a remote controller device that enables any remote system or device to be remotely manageable from the NetEnrich VPM Gateway™ (appliance) through the IP network.

PL

NetEnrich VPM Hard Controller

NetEnrich VPM Gateway (appliance) is the central management device, which provides secure administration through web-based interfaces in managing and controlling servers and devices connected to NetEnrich Controllers remotely.

M

NetEnrich VPM Gateway

SA

Cables

1 2 3 4 5 6

KVM-USB-Serial KVM-USB KVM-2-Serial 2-Serial KVM (PS/2 Only) KVM-USB-2-Serial

RJ45-DB9 converter

NetEnrich VPM Gateway™ A3000 Installation Guide Copyright © 2006, NetEnrich, Inc. All Rights Reserved.

Page 12 of 47 February 2006

Other Items required for connection*

E

AC Adapter

These are the items you already have in your site. Make sure you have access to these items.

Physical access to ports of target devices that you want to manage with NetEnrich such as a Network Switch (e.g. Serial Console port)

M

The target Device

Physical access to ports of target devices that you want to manage with NetEnrich such as a Windows Server (e.g. Keyboard, Video, Mouse, USB, Serial ports)

PL

The target device

SA

Multi-port Power-over-Ethernet (PoE) switch - IEEE 802.3af compliant

Multi-port Ethernet switch

(optional)

This is not required if you have a POE.

NetEnrich VPM Gateway™ A3000 Installation Guide Copyright Š 2006, NetEnrich, Inc. All Rights Reserved.

Page 13 of 47 February 2006

You may require this when you opt for the serial port or the network control

Firewall or DMZ

This is an optional connection to the internet.

While you are connected to this you can not have access to any of the external services.

PL

E

Remote Power Control Strip

Cat Cables –RJ45 for Ethernet

SA

M

* These are not provided by NetEnrich.

NetEnrich VPM Gateway™ A3000 Installation Guide Copyright © 2006, NetEnrich, Inc. All Rights Reserved.

Page 14 of 47 February 2006

PL

E

3.2 Deployment Network

M

Figure 1 – Deployment Diagram

SA

The basic deployment is depicted in the above diagram. The LAN1 port of the NetEnrich VPM Gateway is connected to the external network and the LAN2 port of the Gateway is used to connect to the Internal Network (for managing the NetEnrich controllers).

Figure 2 – NetEnrich VPM Gateway Back view

External Network: The LAN1 port hooks up to this network. This is also called as the user access network or External WAN network. This originates the default gateway for the appliance. It typically connects to the public internet via a firewall or DMZ. Internal Network: The LAN2 port hooks up to this network. This is the network where all the NetEnrich controllers reside. Internal Network is a closed network with access available only to the VPMG Appliance and the Controllers.

NetEnrich VPM Gateway™ A3000 Installation Guide Copyright © 2006, NetEnrich, Inc. All Rights Reserved.

Page 15 of 47 February 2006

4. Installing the NetEnrich VPM Gateway Installing NetEnrich VPM Gateway includes unpacking, mounting, and connecting appropriate cables to the NetEnrich VPM Gateway. It is recommended that all the connections are made before powering the NetEnrich VPM Gateway.

E

4.1 Unpacking NetEnrich VPM Gateway

Open the box and remove the NetEnrich VPM Gateway and place it on a clean, flat surface. Re-inspect for damages. Ensure that there is enough room at the back to run cables into it.

PL

4.2 Rack Mounting NetEnrich VPM Gateway

Ensure that you have at least 4 appropriate rack mount screws ready to mount the NetEnrich VPM Gateway on a rack.

The NetEnrich VPM Gateway already has rack-mounting brackets attached to it.

Position the server on the rack and align the rack-mounting bracket holes with the rack mount holes, and carefully screw-in the rack mount screws through the top and bottom holes of the rack mount bracket.

M

4.3 Cabling the NetEnrich VPM Gateway

SA

Your NetEnrich VPM Gateway comes with a standard power cord and a serial null modem cable.

Figure 3- Connecting Cables to the NetEnrich VPM Gateway

NetEnrich VPM Gateway™ A3000 Installation Guide Copyright Š 2006, NetEnrich, Inc. All Rights Reserved.

Page 17 of 47 February 2006

E PL Figure 5- Network Configuration screen

• • •

Modify the Host Name, Domain Name, and information under the “External Interface: eth0” section to match your network. User the configuration work sheet to fill-in this information. Go to the next screen Click SAVE or click CANCEL to go back to the main menu page.

The next menu will ask for confirmation of the changes made. Press YES to confirm changes.

You can also configuration through SSH based UI and web-based UI once VPMG is IP configured. For details on configuring for SSH and web UI refer to “configuring the Administration of NetEnrich VPM Gateway”.

M

•

SA

Step 7 – Cross checking the connections •

•

Once the configuration has been successfully applied, the EXTERNAL port (LAN1) of the NetEnrich VPM Gateway can be plugged into to the designated network of your configuration.

Connect to VPMG with the IP configured earlier in this section.

NetEnrich VPM Gateway™ A3000 Installation Guide Copyright © 2006, NetEnrich, Inc. All Rights Reserved.

Page 21 of 47 February 2006

5. Preparing Target Machines

E

Based on the type of NetEnrich VPM Hard Controller cable that you have ordered, you can connect various interfaces of the target device to the VPM HC. You can remotely control the device’s keyboard, video, and mouse with either the USB or PS/2 connections. Additionally, you can also connect the USB from the VPM Hard Controller. This USB connection can simulate three simultaneous interfaces – USB Mouse, USB Keyboard & USB Storage.

5.1 KVM Settings

PL

Keyboard

Check the Keyboard driver installed on the target OS. Refer to the Appendix, section “Keyboard settings > Verify the Keyboard drivers” for details.

Video

M

Screen Resolution Presently NetEnrich VPM Gateway supports the screen resolutions 640X480, 800X600, 1024X768, and 1280X1024. It is recommended to configure the target resolution to any one of the above value.

Refresh Rate NetEnrich Ver. 4.1 Controller only supports 60Hz Vertical video refresh rate.

Refer to the appendix, section “KVM Settings > Video Settings > Adjust the Video Screen Resolution” for more details.

Mouse

SA

The target OS mouse acceleration has to be switched off, failing which the mouse may not synchronize with the client mouse pointer. Refer “Mouse Settings > Verify Mouse Acceleration” section in the appendix for verifying and learn how to switch off mouse acceleration.

NOTE: The ‘Fail safe mouse synchronization’ feature on the console only works for Microsoft® Windows 2000.

Verify the USB drivers installed on the Target OS, VPM gateway supports USB Enhanced 2.0 drivers to communicate with the target device.

For information on VPM Hard Controller Configuration, please refer to the VPMG Setup Cookbook.

NetEnrich VPM Gateway™ A3000 Installation Guide Copyright © 2006, NetEnrich, Inc. All Rights Reserved.

Page 22 of 47 February 2006

6.3 Cabling the NetEnrich VPM Hard Controller

PL

E

Step1 - Connect the Controller cable (60 pin end) to the NetEnrich VPM Hard Controller.

Figure 6- Controller Installation Step1

SA

M

Step2 - Connect the Ethernet cable to the NetEnrich VPM Hard Controller.

Connect the other end of the Ethernet cable to the internal network (management network).

Figure 7- Controller Installation Step2

Step3 - Turn ON the power to the VPM Hard Controller by connecting the DC Supply to the Controller (or ignore this step if already powered via Power-overEthernet in Step 2 above) Step4a. - Connect the other end of the Controller cables to the KVM on Window server.

NetEnrich VPM Gateway™ A3000 Installation Guide Copyright Š 2006, NetEnrich, Inc. All Rights Reserved.

Page 24 of 47 February 2006

E PL Figure 8- Controller Installation Step4

SA

M

Connecting to the target device can be either through PS/2 keyboard and mouse, which is very common, or optionally, through the USB interface. If you want to use the USB cable for keyboard and mouse, additional configuration will be required to setup the VPM Hard Controller. Please to refer to “Supported OS for USB CDROM” and “Verify USB Drivers” sections in the Appendix of this document for the configuration information for this scenario. or Step4b. - Connect the NetEnrich VPM Hard Controller to Serial Console of Target Network Switch. Please refer to the Serial Console pin mappings section in the appendix.

If there are multiple VPM Hard Controllers, end user has to repeat the above steps until all the VPM Hard Controllers are deployed against all the target machines.

Please refer to the VPMG setup Cookbook for Configuring the Controller’s Video, Serial and USB Setting.

NetEnrich VPM Gateway™ A3000 Installation Guide Copyright © 2006, NetEnrich, Inc. All Rights Reserved.

Page 25 of 47 February 2006

8. Troubleshooting This section lists errors that you may encounter while installing and configuring the NetEnrich VPM Gateway on your network, and their possible resolution.

Keyboard, Video, Monitors (KVM)

E

8.1 Console related issues

SA

M

PL

Keyboard is not responding Resolution: The video console is in View-only mode.

Check for the PS/2 keyboard cable status or USB Keyboard status on the ‘controller configuration page’.

Blank Video console (Grey Console), the Input video resolution on ‘Controller configuration’ page would reflect ‘Invalid Resolution’ Resolution: This could be due to several reasons: • The Target device is switched off.

• The NetEnrich cable is not properly terminated on the target device video connector or not properly terminated on the controller.

• The target device has redirected the video console to some other device or is disabled.

• The Target device controller cable may be faulty, try changing the cable.

Mouse is not responding Resolution: • The video console is in view only mode • Check for the PS/2 mouse cable status or USB mouse status on the ‘controller configuration page’.

NetEnrich VPM Gateway™ A3000 Installation Guide Copyright © 2006, NetEnrich, Inc. All Rights Reserved.

Page 32 of 47 February 2006

9. Appendix 9.1 KVM Settings Video Settings

SA

M

PL

E

1. Adjust the Video screen resolution Note: For best results, set the Display type on the target device to ‘Generic LCD Display’ with the desired Screen Resolution and Vertical refresh rate settings. The settings for ‘Generic LCD Display’ are shown in the screenshots below.

Figure 14- adjusting Video screen resolution

Operating System: Windows XP Home/Professional To adjust the video resolution on all windows flavors, • Right click on the desktop -> properties (Display Properties) -> Settings.

Refer to the screenshot above.

• Adjust the Display Screen resolution to the closest range desired from the VPM Controller Video output.

• Adjust the output resolution range from the VPM Controller on the Controller Configuration page on the VPM Gateway web interface.

Operating System: RedHat Fedora Core 4 NetEnrich VPM Gateway™ A3000 Installation Guide Copyright © 2006, NetEnrich, Inc. All Rights Reserved.

Page 36 of 47 February 2006

PL

E

When creating devices on the VPM web interface, you can set each device with the corresponding keyboard type as seen on the screenshot above.

You can find the Device Creation or Device edit page in the section, Setup -> devices or Setup -> Companies -> Devices.

Figure 17- Creating Device

SA

M

Operating System: Windows XP Home/Professional You can verify for the installed Keyboard drivers on most of the windows flavors by going to the Control Panel -> Keyboard.

Figure 18- Keyboard Properties

Operating System: RedHat Fedora Core 4 You can verify the Keyboard type installed by running the /usr/bin/systemconfig-keyboard tool. The screenshot below shows this tool on Redhat fedora core 4.

NetEnrich VPM Gateway™ A3000 Installation Guide Copyright Š 2006, NetEnrich, Inc. All Rights Reserved.

Page 39 of 47 February 2006

NetEnrich Controller Serial 2 cable (RJ-45) Pin-outs NetEnrich Serial-1 Cable (RJ-45) Pin-Out

UART Signal

Function

3

RD

Received Data

4

SG

Signal Ground

6

TD

Transmitted Data

E

DTE Adapter Wiring and Pin-Ins for target DTE devices (e.g. Computers, Terminals) that conform to the Yost Serial Device Wiring Standard Target DTE Device Pin-In Alternatives Function

DB9 Pin-In

DB25 Pin-In

RJ-45 Pin-In Pin

Color

PL

Signal

Clear To Send

8

5

1

Blue

DCD

Data Carrier Detect

1

8

2

Orange

RD

Received Data

2

3

3

Black

SG

Signal Ground

5

7

4

Red

SG

Signal Ground

5

7

5

Green

TD

Transmitted Data

3

2

6

Yellow

DTR

Data Terminal Ready

4

20

7

Brown

RTS

Request To Send

7

4

8

White

Data Set Ready

6

6

-

-

Ring Indicator

9

22

-

-

DSR

SA

RI

M

CTS

NetEnrich VPM Gateway™ A3000 Installation Guide Copyright © 2006, NetEnrich, Inc. All Rights Reserved.

Page 45 of 47 February 2006

DCE Adapter Wiring and Pin-Ins for target DCE devices (e.g. Modems, Printers) that conform to the Yost Serial Device Wiring Standard Target DTE Device Pin-In Alternatives Signal

Function

DB9 Pin-In

DB25 Pin-In

RJ-45 Pin-In Pin

Color

Clear To Send

8

5

8

White

DCD

Data Carrier Detect

1

8

7

Brown

RD

Received Data

2

3

6

Yellow

SG

Signal Ground

5

7

5

Green

SG

Signal Ground

5

7

4

Red

TD

Transmitted Data

3

2

3

Black

DTR

Data Terminal Ready

4

20

2

Orange

RTS

Request To Send

7

4

1

Blue

DSR

Data Set Ready

6

6

-

-

RI

Ring Indicator

9

22

-

-

SA

M

PL

E

CTS

NetEnrich VPM Gateway™ A3000 Installation Guide Copyright © 2006, NetEnrich, Inc. All Rights Reserved.

Page 46 of 47 February 2006

Contact Information

Contact Address

PL

E

For Technical support, General queries or purchase related issues: Email us at: support@netenrich.com

M

NetEnrich Inc. 2901 Tasman Drive, Suite 113 Santa Clara, CA 95054 Main: 408-486-9900 Fax: 408-486-9902 http://www.netenrich.com

SA

We sincerely appreciate your feedback on our product documentation. Feel free to mail us your inputs/comments to support@netenrich.com.

NetEnrich VPM Gateway™ A3000 Installation Guide Copyright Š 2006, NetEnrich, Inc. All Rights Reserved.

Page 47 of 47 February 2006