Page 2
Copyright 2002 Peppercon AG All rights reserved Scheringerstr. 1 08056 Zwickau Germany This publication contains proprietary information, which is protected by copyright. No part of this publication can be reproduced, transcribed, stored in a retrieval system, translated into any language or computer language, or transmitted in any form whatsoever without the prior written consent of the publisher, Peppercon AG.
Page 3
The LARA (LARA Advanced Remote Administration) provides server management capabilities. You can use LARA to manage and monitor components in your servers through a modem, an ISDN line or LAN, even if your network is down (Modem/ISDN). LARA offers a comprehensive hardware solution to server management.
Page 5
....... 10 3.3. Connecting LARA to the host system ......11 3.3.1.
Page 6
........19 5.2. Login into LARA and logout .
Page 7
5.6.2. The LARA SNMP MIB ......60 5.7. Access via Telnet .
ISDN Indicates that the ISDN subsystem is available and active GRAB Indicates that a remote user is logged onto LARA and the video engine is outputting data Using the connectors for video and keyboard/mouse a local console might be connected simultane- ously.
5. Connect the power supply as well as Ethernet and/or modem,ISDN, depending how you want to access LARA In case you want to connect a local console to the host system besides LARA, you can attach monitor, keyboard and mouse to the according LARA connectors on its front.
Page 15
The gateway value must be set to 0.0.0.0 (for no gateway) or any other value. LARA may be accessed using a standard Web browser. You may use the HTTP protocol or a secure encrypted connection via HTTPS. Just enter the configured IP address of LARA into your Web browser.
The Remote Console is the redirected screen, keyboard and mouse of the remote host system to which LARA is attached. The Web browser which is used for accessing LARA has to supply a Java Runtime Environment version 1.1 or higher. The Remote Console will behave exactly the same way as if you were sitting directly in front of the screen of your remote system.
LARA defines a new class of remote KVM access devices (see Figure 2.1). LARA combines digital remote KVM access via IP networks with comprehensive and integrated system management. LARA offers convenient, remote KVM access and control via LAN, Internet, or ISDN. It captures, digitizes, and compresses video and transmits it with keyboard and mouse signals to and from a remote computer.
Page 18
LARA is a fully configured stand-alone product consuming one quart of a 1U 19” rack mount chassis space. Up to four LARA devices can be mounted in 1 U chassis using the 19” rack mount kit (Item No: 8400200) Each LARA (Item No: 8400000) is shipped with: 1.
2.2) consists of a PC bracket with a Sub-D 9 jack on the outside and 4x2 pin connector in the inner side. The Sub-D 9 jack is connected to the LARA Serial Port 2. The internal 4x2 pin con- nector allows to connect the reset and power on/off...
Page 20
Obviously, fixing hardware defects is not possible using a remote management device. Nevertheless LARA gives the administrator valuable information about the type of a hardware failure. Serious hardware failures can be categorized into five different categories with different chances to...
Combining one or several LARAs with a KVM switched matrix allows to access multiple servers on a single remote console. LARA is multi user capable, i.e. up to 64 concurrent users may use LARA to administrate a remote site. Figure shows a configuration with concurrent users on a number of servers connected by...
GRAB Indicates that a remote user is logged onto LARA and the video engine is outputting data In case you want to connect a local console to the host system besides LARA, you can attach monitor, keyboard and mouse to the according LARA connectors on its front.
5. Connect the power supply as well as Ethernet and/or modem,ISDN, depending how you want to access LARA In case you want to connect a local console to the host system besides LARA you may attach monitor, keyboard and mouse to the connectors on the front side. Figure...
2002 supports IPMI 1.5. By the date of printing this manual only the Intel SDS2 server main board has a proper support of IPMI Verson 1.5. Connect the IPMI option serial cable to the RS232 port 1 on the rear side of LARA and to the serial port of the controlled system.
8. Check the cabling: finally, there are four cables connected to the jumper connector on the bracket. Now, connect the bracket to the LARA serial port 2 using the supplied SUB-D 9 to SUB-D 9 connector. Please refer to the manual of the Peppercon external power switch option or a third party external power option to connect those external devices either to the Peppercon Reset/Power Connector or to the serial interface on the rear side of LARA.
Page 26
The UTP wire pairs and configuration for 100BASE-TX cable are identical to those for 10BASE-T cable when used with Category 5 UTP cable. The rear side of LARA contains two RJ-45 connectors. The upper connector, marked as ’ISDN’ is used to connect LARA to an ISDN network, using a standard ISDN cable.
Page 27
DHCP server. It is recommended to configure a fixed IP assignment to the MAC address of LARA. You can find the MAC address of your LARA on the outside of the shipping box and labeled on LARA’s bottom side. If the DHCP connection fails on boot up, LARA will boot with the last known IP configuration.
Page 28
The input may be left empty and you can quit with to accept the pre-assigned value. In order to contact LARA from outside of your LAN you need to configure a gateway. If you want to remove an already configured gateway, enter 0.0.0.0.
Page 29
LARA recognizes a limited number of common video modes. When running X-Window on the host system, please don’t use any custom modelines with special video modes. If done so, LARA may not be able to detect these. You are on the safe side with all standard VESA video modes. Please...
Page 31
3. Telnet: A standard Telnet client can be used to access an arbitrary device connected to one of LARA’s serial ports via a terminal mode. Since the primary interface of LARA is the HTTP interface this chapter is mainly evolving around this topic. The other two interfaces are explained in the according subtopics section 5.5.4...
Figure 5.1.: Internet Explorer showing the encryption key length Start your Web browser and direct it to the address of your LARA that has been configured during installation. The address used might be a plain IP address or a host and domain name, in case you have given your LARA a symbolic name in the DNS.
The upper left frame contains a home link that brings you instantly back to the home page after you stepped down to one of the administration menu points. The logout link logs you out of LARA. That means the current session will be terminated and you have to type username and password again to login.
This link logs out the current user and presents a new login screen. Please note that an automatic logout will be performed in case there was no activity for half an hour. The Remote Console is the redirected screen, keyboard and mouse of the remote host system LARA controls.
The Remote Console window is a Java Applet that tries to establish its own TCP connection to LARA. The protocol that is run over this connection is not HTTP or HTTPS but a protocol called RFB (Remote Frame Buffer Protocol). Currently RFB tries to establish a connection to port number 443.
Page 36
This option will be available only with a Java Virtual Machine version number of 1.3 or higher. Options Opens up the LARA Chat Frame. See Section 5.3.2 on the facing Chat Window...
Page 37
Monitor Mode is switched on and of green color otherwise. The LARA Remote Console features a Chat Frame that allows you to communicate with other parties logged into the same device. Figure on the following page shows an example of the Chat Frame.
Remote Console. Messages that possibly have been sent among other users will be lost for a user who opens up his Remote Console afterwards. LARA features an on-screen display (OSD) to setup the video options. The OSD is controlled via the OSD panel (see Figure on the next page), available in the Remote Console options menu.
the host system via the Remote Console. The panel also provides an option to start the automatic adjustment for the current video mode. Figure 5.6.: OSD panel The OSD is divided into separate submenus (see Figure 5.7), an explanation for each of them follows.
Figure 5.11.: OSD configuration menu A common problem with KVM devices is the synchronization between the local and remote mouse cursors. LARA addresses this situation with an intelligent synchronization algorithm. Whenever...
Page 41
the mouse doesn’t move correctly, there are two ways for re-synchronizing local and remote mouse: Fast Sync The fast synchronization is used to correct a temporary, but fixed skew. Choose the option using the Remote Console options menu (see Table on page 23) or press the mouse synchronization hotkey sequence in case you defined one (refer to Section 5.3.5).
Page 42
Multiple key codes can be concate- nated with a plus sign and will be sent one by one sequentially. For a list of key codes and aliases LARA recognizes refer to Ap- pendix on page 69.
Page 43
5.13 on page 33) to open a connec- tion to LARA. Its main use is the passthrough option for the serial port 1 (see also Section 5.5.5 on page 46). The Telnet access has to be enabled in the security settings as well (see Section 5.5.10...
Table on page explains the different effects. Note: The prerequisite for the remote power/reset button to work is a correct installation of LARA. The additional cabling as described in Section 3.3.3 on page must be properly connected.
Figure 5.13.: Telnet Console Figure 5.14.: Internal Power Control If no assignment exists, the option is disabled. The lower half offers controls for switching each port of the external power control directly. Select the appropriate port and decide whether to power it off or on. Figure 5.16 on the next page shows the Power Control Settings, which influence the commands for...
Additionally ATX distinguishes between two different durations. The shorter duration is meant for initiating a controlled operating system shutdown. The longer duration is an unconditional power off. These settings only apply to the internal LARA power option. Figure 5.16.: Power Control settings...
It is possible to select the number of ports the connected KVM uses. Each port may get a name assigned. In order to provide KVM port switching through LARA, key combinations have to be defined for the ports.
If an external power option is enabled it is additionally possible to assign a port of this control for power switching to each KVM port (see Section 5.4.1 on page 32). The user and group management of LARA is based on configurable users and groups. Each user or group may have different permissions.
Upon delivery, each LARA is pre-configured with a supervisor user called ‘super’ having the pass- word ‘lara’. Make sure to change the super user password immediately after you have installed and firstly accessed your LARA. Figure 5.19 shows the User/Group Management panel of the LARA front-end. Its use will be described in Table and in the following text.
Page 50
In order to create a new group, enter a new and unused group name. The user management of LARA allows many different users. The following sections will describe how to add, change and delete users. Fill out the fields ‘New user name’, ‘Full user name’, ‘Password’ and ‘Confirm password’ as shown in Figure 5.19...
A set of permissions is assigned to each user or group. Those rights are used to authorize access to certain LARA functionality for a particular user. By default the user ’super’ has all permissions. His permissions cannot be shrunk. A newly created user or group has no permissions. A user will inherit the permissions of all groups he belongs to.
Page 52
Next, clicking the ‘Update’ button will show the permission list of that user. Every right in the list has a permission value, which is explained in Table 5.8. Table 5.8.: LARA user and group permissions +view The user can view the entry.
IP settings. Attention: Changing the network settings of LARA might result in losing connection to it. In case you change the settings remotely make sure all the values are correct and you still have an option to access the LARA.
Page 54
The administrator may contact this server as well and pick up the same IP address belonging to his card. The administrator has to register a LARA that is supposed to take part in the service with the Dynamic DNS Server. He will get an approved nickname and password in return to the registration process.
3. Enable Dynamic DNS and change the settings according to your needs (see Table 5.10 on the next page). Note: LARA has its own independent real time clock. Make sure the time setting of LARA is correct. This can be achieved by configuring a timeserver (see Figure 5.21 on page 41) Note: LARA registers itself to the Dynamic DNS server slightly different from the time configured.
Page 56
Dynamic DNS Server. Spaces are not allowed in the Nickname! Check time LARA card registers itself in the Dynamic DNS server at this time. Check interval This is the interval for reporting again to the Dynamic DNS server by LARA.
This is the SNMP community, which allows you to retrieve in- formation via SNMP. Write Community This community allows you to set options and to reset LARA or the host via SNMP, i.e. all that effects the host or LARA. System Location Enter a description of the physical location of the host.
This is necessary so that your management client can identify the SNMP traps. The LARA Serial Settings (Figure 5.25) allow you to specify, what devices are connected to the two serial ports and how to use them. Figure 5.25.: Serial Settings This port may be used for different purposes.
Page 59
SPC and have the privileges to switch power for each port. LARA offers remote access using a telephone line in addition to the standard access over the built-in Ethernet adapter. The modem needs to be connected to LARA’s serial interface (refer to Figure on page 10).
In addition to the standard interfaces, LARA offers remote access using an ISDN connection . Logically, connecting to LARA using an ISDN line means nothing else than building up a dedicated point to point connection from your console computer to LARA. With other words, LARA acts as an Internet Service Provider (ISP) to which you can dial in.
Page 61
Table 5.14 – continued from previous page Enable hang-up timer If you want LARA to hang up an incoming connection, you have for incoming calls to check this box. The time out value is configured using the next option. Hang-up timeout The hang-up time out measured in seconds.
Figure 5.26.: LARA ISDN settings panel Make sure you have callback enabled and ”Force callback” is switched off. Now configure an entry for every number that should be called back. Don’t forget to mark the entries as callback entries! The list should contain callback entries only.
Updating the firmware is a three-stage process: Firstly the new firmware file is uploaded onto LARA. In order to do that you need to se- lect the file on your local system using the browse button of the Upload Firmware panel (see Figure 5.27).
If your host system supports IPMI, you can access it by one of the following ways: IPMI over Serial (IPMI V1.5 is required) IPMI over LAN (IPMI V1.5 is required) Figure 5.29 shows the LARA IPMI settings panel. Its options will be explained in Table 5.15. Figure 5.29.: IPMI settings panel...
Page 65
1 or 2 minutes. When all entries have been read, LARA displays the entries with their time, sensor and description in accordance with the filter settings. You have the choice between several pre-settings (i.e. last...
Figure 5.30.: IPMI Event Log Once you changed the filter settings, click on ‘Update’ in order to update the shown entries (see Fig- ure 5.30). If the checkbox ‘Get sensor names’ is checked all sensor IDs will be shown with their respective names.
Force HTTPS If this option is enabled access to the Web front-end is only possible using an HTTPS connection. LARA won’t listen on the HTTP port for incoming connections. In case you want to create your own SSL certificate that is used to identify this LARA refer to Section SSL Certificate Management.
Page 68
Table 5.16 – continued from previous page KVM encryption This option controls the encryption of the RFB protocol, the protocol used by the Remote Console to transmit the screen data to the administrator machine and keyboard and mouse data back to the host.
Page 69
Table 5.18.: IP access control parameters Enable IP Access Con- Enables access control based on IP source addresses. trol Default policy This option controls what to do with arriving IP packets that don’t match any of the configured rules. They can be accepted or dropped.
Page 70
However, it is possible to generate and install a new certificate that is unique for a particular card. In order to do that, LARA is able to generate a new cryptographic key and the associated so called Certificate Signing Request that needs to be certified by a so called certification authority (CA).
3. Upload the certificate to LARA using the ‘Upload’ panel as shown in Figure 5.34. Figure 5.34.: SSL Certificate Signing Request After completing these three steps, LARA has its own certificate that is used for identifying the card to its clients.
Important Note: If you destroy the CSR on LARA there is no way to get it back! In case you deleted it by mistake, you have to repeat the three steps. The reset panel (see Figure 5.35) allows you to reset LARA. This function is mainly needed to activate a newly updated firmware.
Page 73
Telnet interface is entirely controlled with the according functions of the Web interface. Once you have successfully logged in LARA will present you the command line where you can enter according management commands. In general, the Telnet interface supports two operation modes: the command line mode and the terminal mode.
Page 75
LARA). If not, check network hardware. Is LARA powered on? Check whether the IP address of LARA and all other IP related settings are correct! Also verify that all the IP infrastructure of your LAN, like routers etc., are correctly configured. Without a ping functioning, LARA can’t work either.
Page 77
ACPI A specification that enables the operating system to implement power management and system configuration. Advanced Technology Extended: A particular specification of a motherboard introduced by Intel in 1995. Board Management Controller: implements the IPMI based main board management functions. DHCP Dynamic Host Configuration Protocol: protocol for dynamically assigning IP configura- tions in local networks.
Page 79
Table lists the video modes LARA supports. Please don’t use other custom video settings besides of these. If done so, LARA may not be able to detect them. Table B.1.: LARA Video Modes 640x350 70, 85 640x400 56, 70, 85...
Table shows the key codes used to defines key strokes or hotkeys for several functions. Please note that these key codes do not represent necessarily key characters that are used on international keyboards. They name a key on a standard 104 key PC keyboard with an US English language mapping.
Page 83
Assignment Assignment Green GND sync Blue Not connected Not connected SDA, DCC, ... HSYNC GND red VSYNC GND green DATA CLOCK GND blue Assignment Assignment TX + Not connected TX - RX - RX + Not connected Not connected Not connected...
Page 84
Assignment Assignment Not connected RX - Not connected TX - TX + Not connected RX + Not connected Assignment Assignment Assignment Assignment DSR, Reset2 RTS, Power1 Pins 1 and 6 are bridged DTS, Power2 DTR, Reset1 Not connected...
Page 85
11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 Assignment Assignment VGA blue VGA green VGA red VGA hsync VGA vsync Not connected VGA SCL VGA SCL Not connected KBD data KBD clock RS232 2 TX MOUSE clock RS232 2 RX MOUSE data...
Page 87
Peppercon AG (”Peppercon”) manufactures its hardware products from parts and components that are new or equivalent to new in accordance with industry-standard practices. Peppercon warrants that the hardware products including the firmware will be free from defects in materials and work- manship under normal use.
Page 88
To the maximum extent permitted by applicable law, in no event shall Peppercon be liable for any damages whatsoever (including without limitation, special, incidental, consequential or indirect damages for personal injury, loss of business information, or any other pecuniary loss) arising out of the use of or inability to use this product, even if Peppercon has been advised of the possibility of such damages.
Page 89
Height: 44 mm 1 HU (Height Unit) Width: 105 mm 1 4 19 Length (Box): 223 mm Length (Box with connectors): Weigth: 700 g Operating 0 C to 40 C (32 F to 131 F) Storage -18 C to 70 C (-20 F to 158 F) Operating 10% to 90% (non-condensing) Storage...