Manuel D’UtilisationTable des matièresWhat's New in the CC-SG Administrators Guide17Introduction19Prerequisites19Terminology/Acronyms20Client Browser Requirements22Accessing CC-SG23Browser-Based Access via the CC-SG Admin Client23JRE Incompatibility24Thick Client Access24Install the Thick Client24Use the Thick Client25CC-SG Admin Client26Getting Started28Licensing - Getting Started - New and Existing Customers28Licensing - Basic License Information29Available Licenses29Find Your Physical Appliance Host ID and Check Number of Nodes In Database30Licensing - New Customers - Physical Appliance32Licensing - Clusters - New Customers34Licensing - Virtual Appliance with License Server35Virtual Appliance Installation Requirements35Download Installation Files36Install License Server Software on a Linux or Windows Server36Linux Server36Windows Server37Get Your License37Copy the License File to the License Server39Linux Server39Windows Server39Start the License Server39Linux Server39Windows Server39Install CommandCenter Secure Gateway on VMware ESX Server 4.040Log in to Diagnostic Console to Set CC-SG IP Address40Default CC-SG Settings41Log in to CC-SG41Install and Check Out Your License41License Server Communication42Access to Licenses42License Server Outages42Restart License Servers After an Outage43Command Line Utilities for Managing License Server43Install or Upgrade VMware Tools45Configure Backups and Snapshots of Virtual Appliance and Storage Servers45Virtual Appliances with Remote Storage Servers45Licensing - Limited Operation Before License Install46Licensing - Existing Customers47Licensing - Rehosting47Add a License48Confirming IP Address48Setting CC-SG Server Time48Checking the Compatibility Matrix49Checking and Upgrading Application Versions50Configuring CC-SG with Guided Setup51Before You Use Guided Setup51Associations in Guided Setup52Create Categories and Elements52Device Setup52Discover and Add Devices53Creating Groups54Add Device Groups and Node Groups54User Management56Add User Groups and Users57Associations, Categories, and Elements59About Associations59Association Terminology59Associations - Defining Categories and Elements59How to Create Associations60Adding, Editing, and Deleting Categories and Elements60Add a Category60Delete a Category61Add an Element61Adding Categories and Elements with CSV File Import61Categories and Elements CSV File Requirements62Sample Categories and Elements CSV File63Import Categories and Elements63Export Categories and Elements64Devices, Device Groups, and Ports65Viewing Devices66The Devices Tab66Device and Port Icons66Port Sorting Options67Device Profile Screen68Topology View69Right Click Options in the Devices Tab70Searching for Devices70Wildcards for Search70Wildcard Examples70Discovering Devices71Adding a Device72Add a KVM or Serial Device72Add a PowerStrip Device74Add a Dominion PX Device74Editing a Device75Change the HTTP and HTTPS Ports for a KX2 Device75Editing a PowerStrip Device or a Dominion PX Device75Adding Notes to a Device Profile76Adding Location and Contacts to a Device Profile77Deleting a Device77Configuring Ports78Configure a Serial Port78Configure a KVM Port78Nodes Created by Configuring Ports79Editing a Port79Deleting a Port80Configuring a Blade Chassis Device Connected to KX281Blade Chassis Overview81Blade Chassis with an Integrated KVM Switch81Blade Chassis without an Integrated KVM Switch81Add a Blade Chassis Device82Configuring Slots on a Blade Chassis Device83Changing the Blade Server Status84Deleting Slots on a Blade Chassis Device84Edit a Blade Chassis Device85Delete a Blade Chassis Device85Move a Blade Chassis Device to a Different Port86Restore Blade Servers Ports to Normal KX2 Ports86Bulk Copying for Device Associations, Location and Contacts87Configuring Analog KVM Switches Connected to KX2 2.3 or Higher88Add a KVM Switch Connected to KX288Configuring Ports on an Analog KVM Switch Device Connected to KX288Device Group Manager89Device Groups Overview90Add a Device Group90Describe Method versus Select Method94Edit a Device Group94Delete a Device Group94Adding Devices with CSV File Import95Devices CSV File Requirements95Sample Devices CSV File99Import Devices99Export Devices100Upgrading a Device100Backing Up a Device Configuration101Restoring Device Configurations102Restore a Device Configuration (KX, KSX, KX101, SX, IP-Reach)102Restore All Configuration Data Except Network Settings to a KX2, KSX2, or KX2-101 Device103Restore Only Device Settings or User and User Group Data to a KX2, KSX2, or KX2-101 Device103Restore All Configuration Data to a KX2, KSX2, or KX2-101 Device104Save, Upload, and Delete Device Backup Files104Copying Device Configuration105Restarting a Device106Pinging the Device106Pausing CC-SG's Management of a Device106Resuming Management of a Device107Pause and Resume Management of Devices Using a Scheduled Task107Device Power Manager108Launching a Device's Administrative Page108Disconnecting Users109Special Access to Paragon II System Devices109Paragon II System Controller (P2-SC)109IP-Reach and UST-IP Administration110Managed Powerstrips111Configuring Powerstrips that are Managed by Another Device in CC-SG112Configuring PowerStrips Connected to KX, KX2, KX2-101, KSX2, and P2SC113Add a PowerStrip Device Connected to a KX, KX2, KX2-101, KSX2, or P2SC Device113Move a KX, KX2, KX2-101, KSX2, or P2SC's PowerStrip to a Different Port113Delete a PowerStrip Connected to a KX, KX2, KX2-101, KSX2, or P2SC Device114Configuring PowerStrips Connected to SX 3.0 and KSX114Add a PowerStrip Connected to an SX 3.0 or KSX device114Delete a PowerStrip Connected to an SX 3.0 or KSX Device115Change a PowerStrip's Device or Port Association (SX 3.0, KSX)115Configuring Powerstrips Connected to SX 3.1116Add a Powerstrip Connected to an SX 3.1 Device116If the PowerStrip is connected to the SX 3.1 device and the device has not yet been added to CC-SG:116If the SX 3.1 device has already been added to CC-SG and the PowerStrip is connected to the device later:116Move an SX 3.1's Powerstrip to a Different Port117Delete a Powerstrip Connected to an SX 3.1 Device117Configuring Outlets on a Powerstrip117Nodes, Node Groups, and Interfaces119Nodes and Interfaces Overview119About Nodes119Node Names120About Interfaces120Viewing Nodes120Nodes Tab120Node Profile121Node and Interface Icons123Service Accounts124Service Accounts Overview124Add, Edit, and Delete Service Accounts125Change the Password for a Service Account125Assign Service Accounts to Interfaces126Adding, Editing, and Deleting Nodes127Add a Node127Nodes Created by Configuring Ports128Edit a Node128Delete a Node128Adding Location and Contacts to a Node Profile129Adding Notes to a Node Profile129Configuring the Virtual Infrastructure in CC-SG130Terminology for Virtual Infrastructure130Virtual Nodes Overview131Add a Control System with Virtual Hosts and Virtual Machines131Add a Virtual Host with Virtual Machines134Edit Control Systems, Virtual Hosts, and Virtual Machines136Delete Control Systems and Virtual Hosts138Delete a Virtual Machine Node138Delete a Virtual Infrastructure138vSphere 4 Users Must Install New Plug-In139Synchronizing the Virtual Infrastructure with CC-SG139Synchronize the Virtual Infrastructure140Enable or Disable Daily Synchronization of the Virtual Infrastructure140Reboot or Force Reboot a Virtual Host Node141Accessing the Virtual Topology View141Connecting to a Node142Firefox Users of the Access Client Must Download JNLP File142Pinging a Node142Adding, Editing, and Deleting Interfaces143Add an Interface143Interfaces for In-Band Connections145DRAC 5 Connection Details145Microsoft RDP Connection Details146Java RDP Connection Details146Interfaces for Out-of-Band KVM, Out-of-Band Serial Connections146Interfaces for DRAC Power Control Connections147Interfaces for ILO Processor, Integrity ILO2 , and RSA Power Control Connections147RSA Interface Details148RSA Compatibility with JRE148Interfaces for Managed Powerstrip Connections148Interfaces for IPMI Power Control Connections149IBM IMM Module Connection Details149Interfaces for Power IQ Proxy Power Control Connections150Web Browser Interface151Tips for Adding a Web Browser Interface152Example: Adding a Web Browser Interface to a PX Node152Results of Adding an Interface153Edit an Interface153Delete an Interface153Bookmarking an Interface154Configuring Direct Port Access to a Node155Bulk Copying for Node Associations, Location and Contacts155Using Chat156Adding Nodes with CSV File Import156Nodes CSV File Requirements157Sample Nodes CSV File166Import Nodes166Export Nodes167Editing IP Addresses with CSV File Import167Adding, Editing, and Deleting Node Groups168Node Groups Overview168Add a Node Group169Describe Method versus Select Method169Select Nodes169Describe Nodes170Edit a Node Group172Delete a Node Group172Users and User Groups174The Users Tab175Default User Groups176CC Super-User Group176System Administrators Group176CC Users Group176Adding, Editing, and Deleting User Groups177Add a User Group177Edit a User Group178Delete a User Group179Limit the Number of KVM Sessions per User180Configuring Access Auditing for User Groups180Adding, Editing, and Deleting Users181Add a User181Edit a User182Delete a User183Assigning a User to a Group183Deleting a User From a Group184Adding Users with CSV File Import184Users CSV File Requirements185Sample Users CSV File188Import Users189Export Users189Your User Profile190Change your password190Change your name190Change your default search preference190Change the CC-SG default font size191Change your email address191Change the CC-SG Super User's Username191Logging Users Out191Bulk Copying Users192Policies for Access Control193Adding a Policy194Editing a Policy195Deleting a Policy196Support for Virtual Media197Assigning Policies To User Groups197Custom Views for Devices and Nodes198Types of Custom Views198View by Category198Filter by Node Group198Filter by Device Group198Using Custom Views in the Admin Client199Custom Views for Nodes199Add a Custom View for Nodes199Apply a Custom View for Nodes199Change a Custom View for Nodes200Delete a Custom View for Nodes200Assign a Default Custom View for Nodes201Assign a Default Custom View of Nodes for All Users201Custom Views for Devices201Add a Custom View for Devices201Apply a Custom View for Devices202Change a Custom View for Devices202Delete a Custom View for Devices203Assign a Default Custom View for Devices204Assign a Default Custom View of Devices for All Users204Remote Authentication205Authentication and Authorization (AA) Overview205Flow for Authentication205User Accounts206Distinguished Names for LDAP and AD206Specify a Distinguished Name for AD206Specify a Distinguished Name for LDAP207Specify a Username for AD207Specify a Base DN207Specifying Modules for Authentication and Authorization207Establishing Order of External AA Servers208AD and CC-SG Overview208Adding an AD Module to CC-SG208AD General Settings209AD Advanced Settings210AD Group Settings211AD Trust Settings212Editing an AD Module213Importing AD User Groups213Synchronizing AD with CC-SG215Synchronize All User Groups with AD216Synchronize All AD Modules217Enable or Disable Daily Synchronization of All AD Modules217Change the Daily AD Synchronization Time218Renaming and Moving AD Groups219About LDAP and CC-SG219Add an LDAP (Netscape) Module to CC-SG219LDAP General Settings220LDAP Advanced Settings220Sun One LDAP (iPlanet) Configuration Settings221OpenLDAP (eDirectory) Configuration Settings222IBM LDAP Configuration Settings222About TACACS+ and CC-SG223Add a TACACS+ Module223TACACS+ General Settings223About RADIUS and CC-SG224Add a RADIUS Module224RADIUS General Settings224Two-Factor Authentication Using RADIUS225Reports226Using Reports226Sort Report Data226Resize Report Column Width226View Report Details227Navigate Multiple Page Reports227Print a Report227Save a Report to a File227Purge a Report's Data From CC-SG228Hide or Show Report Filters228Audit Trail Report228Error Log Report229Access Report230Availability Report230Active Users Report231Locked Out Users Report231All Users Data Report231User Group Data Report232Device Asset Report232Device Group Data Report233Query Port Report233Node Asset Report234Active Nodes Report235Node Creation Report235Node Group Data Report236AD User Group Report236Scheduled Reports237Upgrade Device Firmware Report238System Maintenance239Maintenance Mode239Scheduled Tasks and Maintenance Mode239Entering Maintenance Mode240Exiting Maintenance Mode240Backing Up CC-SG240What is the difference between Full backup and Standard backup?242Saving and Deleting Backup Files242Save a Backup File242Delete a Backup File242Restoring CC-SG243Resetting CC-SG244Restarting CC-SG247Upgrading CC-SG247Clear the Browser's Cache249Clear the Java Cache249Upgrading a Cluster250Primary Node Upgrade Failure251Migrating a CC-SG Database251Requirements for Migration251Migrate a CC-SG Database251CC-SG Shutdown252Restarting CC-SG after Shutdown253Powering Down CC-SG253Ending CC-SG Session253Log Out of CC-SG253Exit CC-SG254Advanced Administration255Configuring a Message of the Day255Configuring Applications for Accessing Nodes256About Applications for Accessing Nodes256Checking and Upgrading Application Versions256Older Version of Application Opens After Upgrading257Add an Application257Delete an Application258Prerequisites for Using AKC258Configuring Default Applications258About Default Applications258View the Default Application Assignments259Set the Default Application for an Interface or Port Type259Managing Device Firmware259Upload Firmware259Delete Firmware260Configuring the CC-SG Network260About Network Setup260About CC-SG LAN Ports260What is IP Failover mode?261What is IP Isolation mode?264Recommended DHCP Configurations for CC-SG266Configuring Logging Activity266Purge CC-SG's Internal Log267Configuring the CC-SG Server Time and Date267Connection Modes: Direct and Proxy268About Connection Modes268Configure Direct Mode for All Client Connections269Configure Proxy Mode for All Client Connections269Configure a Combination of Direct Mode and Proxy Mode269Device Settings269Enabling the AKC Download Server Certificate Validation271Configuring Custom JRE Settings272Configuring SNMP273MIB Files274Configuring CC-SG Clusters274Requirements for CC-SG Clusters275Access a CC-SG Cluster275Create a Cluster275Configure Cluster Settings276Switch the Primary and Secondary Node Status277Recover a Cluster277Delete a Cluster278Upgrade a Cluster278Cluster Licenses279Configuring a Neighborhood280What is a Neighborhood?280Create a Neighborhood280Edit a Neighborhood281Add a Neighborhood Member282Manage the Neighborhood Configuration282Delete a Neighborhood Member283Refresh a Neighborhood284Delete a Neighborhood284Security Manager284Remote Authentication284AES Encryption284Check Your Browser for AES Encryption285Require AES Encryption between Client and CC-SG285Configure Browser Connection Protocol: HTTP or HTTPS/SSL286Set the Port Number for SSH Access to CC-SG286Login Settings286View login settings286Require strong passwords for all users287About CC-SG passwords287Lockout settings288Allow concurrent logins per username289Configure the Inactivity Timer289Portal289Certificates291Certificate Tasks291Access Control List294Notification Manager295Configure an External SMTP Server295Task Manager296Task Types296Schedule Sequential Tasks297Email Notifications for Tasks297Scheduled Reports297Find and View Tasks297Schedule a Task298Schedule a Device Firmware Upgrade300Change a Scheduled Task302Reschedule a Task302Schedule a Task that is Similar to Another Task302Delete a Task303SSH Access to CC-SG303Get Help for SSH Commands304SSH Commands and Parameters305Command Tips307Create an SSH Connection to a Serial-Enabled Device308Use SSH to Connect to a Node via a Serial Out-of-Band Interface309End SSH Connections310Serial Admin Port311About Terminal Emulation Programs311Finding Your CC-SG Serial Number312Web Services API312CC-NOC313Diagnostic Console314Accessing Diagnostic Console314Access Diagnostic Console via VGA/Keyboard/Mouse Port314Access Diagnostic Console via SSH314Status Console315About Status Console315Access Status Console315Access Status Console via VGA/Keyboard/Mouse Port or SSH315Access Status Console via Web Browser315Status Console Information316Status Console via VGA/Keyboard/Mouse Port or SSH316CC-SG Title, Date and Time317Message of the Day317System, Server and Network Status317Navigation Keys Reminder319Status Console via Web Browser320Administrator Console321About Administrator Console321Access Administrator Console321Administrator Console Screen322Navigate Administrator Console323Edit Diagnostic Console Configuration324Edit Network Interfaces Configuration (Network Interfaces)325Ping an IP Address326Use Traceroute327Edit Static Routes328View Log Files in Diagnostic Console330Restart CC-SG with Diagnostic Console333Reboot CC-SG with Diagnostic Console334Power Off CC-SG System from Diagnostic Console335Reset CC Super-User Password with Diagnostic Console336Reset CC-SG Factory Configuration337Diagnostic Console Password Settings339Diagnostic Console Account Configuration341Configure Remote System Monitoring343Display Historical Data Trending Reports344Display RAID Status and Disk Utilization345Perform Disk or RAID Tests346Schedule Disk Tests348Repair or Rebuild RAID Disks349View Top Display with Diagnostic Console351Display NTP Status351Take a System Snapshot353Change the Video Resolution for Diagnostic Console354Power IQ Integration355Power Control of Power IQ IT Devices355Configuring Power IQ Services356Troubleshoot Connections to Power IQ357Configuring Power Control of Power IQ IT Devices357Configuring Synchronization of Power IQ and CC-SG358Synchronize Power IQ and CC-SG359Power IQ Synchronization Policies360Importing and Exporting Dominion PX Data from Power IQ360Import Power Strips from Power IQ361Export Dominion PX Data to Use in Power IQ362Specifications for V1 and E1364V1 Model364V1 General Specifications364V1 Environmental Requirements364E1 Model365E1 General Specifications365E1 Environmental Requirements365CC-SG and Network Configuration367Required Open Ports for CC-SG Networks: Executive Summary367CC-SG Communication Channels368CC-SG and Raritan Devices369CC-SG Clustering369Access to Infrastructure Services370PC Clients to CC-SG370PC Clients to Nodes371CC-SG and Client for IPMI, iLO/RILOE, DRAC, RSA372CC-SG and SNMP372CC-SG Internal Ports373CC-SG Access via NAT-enabled Firewall373RDP Access to Nodes373VNC Access to Nodes374SSH Access to Nodes374Remote System Monitoring Port374User Group Privileges375SNMP Traps384CSV File Imports386Common CSV File Requirements387Audit Trail Entries for Importing388Troubleshoot CSV File Problems389Troubleshooting390Diagnostic Utilities392Memory Diagnostic392Debug Mode393CC-SG Disk Monitoring394Two-Factor Authentication397Supported Environments for Two-Factor Authentication397Two-Factor Authentication Setup Requirements397Two-Factor Authentication Known Issues397FAQs398General FAQs398Authentication FAQs400Security FAQs401Accounting FAQs402Performance FAQs402Grouping FAQs403Interoperability FAQs404Authorization FAQs404User Experience FAQs404Licensing FAQs405Keyboard Shortcuts406Naming Conventions407User Information407Node Information407Location Information408Contact Information408Service Accounts408Device Information408Port Information409Associations409Administration409Diagnostic Console Bootup Messages410Index411Taille: 3,8 MoPages: 420Language: EnglishOuvrir le manuel