Lindy manual Placing the MC5-IP alongside the firewall, Ensuring sufficient security, Ports

Page 43

Placing the MC5-IP alongside the firewall

MC5-IP is built from the ground-up to be secure. It employs a sophisticated 128bit public/private key system that has been rigorously analysed and found to be highly secure (a security white paper is available upon request). Therefore, you can position the MC5-IP alongside the firewall and control hosts that are also IP connected within the local network.

IMPORTANT: If you make the MC5-IP accessible from the public Internet or from a modem, care should be taken to ensure that the maximum security available is activated. You are strongly advised to enable encryption and use a strong password. Security may be further improved by restricting client IP addresses, using a non-standard port number for access or limiting remote access to dial up connections only.

Ensuring sufficient security

The security capabilities offered by the MC5-IP are only truly effective when they are correctly used. An open or weak password or unencrypted link can cause security loopholes and opportunities for potential intruders. For network links in general and direct Internet connections in particular, you should carefully consider and implement the following:

Ensure that encryption is enabled.

By standard configuration menu or by configuration page via viewer.

Ensure that you have selected secure passwords with at least 8 characters and a mixture of upper and lower case and numeric characters.

By configuration page via viewer.

Reserve the admin password for administration use only and use a non- admin user profile for day-to-day access.

Use the latest Secure VNC viewer (this has more in-built security than is available with the Java viewer). To download the viewer.

Use non-standard port numbers.

Restrict the range of IP addresses that are allowed to access the MC5-IP to only those that you will need to use. To restrict IP access.

Do NOT Force VNC protocol 3.3. Configuration page via viewer.

Add a further level of inherent security by restricting access only via modem or ISDN dialup.

Ensure that the computer accessing the MC5-IP is clean of viruses and spyware and has up-to-date firewall and anti-virus software loaded that is appropriately configured.

Avoid accessing the MC5-IP from public computers.

Security can be further improved by using the following suggestions:

Place the MC5-IP behind a firewall and use the port numbers to route the VNC network traffic to an internal IP address.

Review the activity log from time to time to check for unauthorised use.

Lock your server consoles after they have been used.

A security white paper that gives further details is available upon request.

Ports

In this configuration there should be no constraints on the port numbers because the MC5-IP will probably be the only device at that IP address. Therefore, maintain the HTTP port as 80 and the VNC port as 5900.

Addressing

When the MC5-IP is situated alongside the firewall, it will require a public static IP address (i.e. one provided by your Internet service provider).

More addressing information:

Discover DHCP-allocated addresses

DNS addressing

   



42

Image 43
Contents  MC5-IP KVM SwitchContents Further information Index CAM formats Local user One user can be connected directly to the MC5  Many computersFront panel buttons MC5 features front and rearIndicators Power control port Upgrade port Modem port IP models onlySwitc What’s in the box What you may additionally needRack brackets Mounting   ConnectionsTo connect the local user port Local userMC5 rear panel Cable lengths for remote user locations Remote user via User StationTo connect a remote user To connect the Global user IP network port Global user IP network portIP network link To connect a computer system Access ModuleCategory 5, 5e or Cable from CAM To connect a modem or Isdn adapter Modem/ISDN portMC5 rear panel Cable from modem Or Isdn adapter To connect the power supply Power in connectionOutput lead from Power adapter To connect and address the switch boxes Power control portSee also Cascading multiple unitsCascade tree How cascade connections operate 43 41 Addressing computers in a cascadeTips for successful cascading Connecting MC5 units in cascadeTo connect units in cascade Testing specific links to cascaded computers Using cascaded computersTo test a specific link Slave monitor Master monitor Multiple video head connectionsSlave MC5 Master MC5Overall initial configuration ConfigurationHotkeys Configuration menusTo access the configuration menu local and remote users To access the configuration menu global usersTo set an Admin password General security and configuration stepsConfiguration menus layout To enable general securityCross markers indicate which Access to all computers Press Access to no computers PressRegistering users edit user list To create/edit user accountsRegistering computers edit computer list Tips when creating/editing computer entriesTo create/edit computer entries Video compensation See Remote user skew adjustment for detailsCurrently selected cable length Computer video compensationTo apply computer video compensation Compensation will not be appliedIf the image controls cannot provide a crisp image Remote user video compensationTo display a suitable high contrast image To apply remote user video compensationCreating a skew test pattern Remote user skew adjustmentTo use skew adjustment Using the supplied skew patternConfiguration mode and permanently save all settings To define an autoscan list To select an autoscan modeAutoscanning To select an autoscan periodPreparations for configuration save/load Saving and restoring configuration settingsTo reset MC5 models What to do if the Admin password has been forgottenTo reset the MC5-IP models Recognising an IntelliMouse-style mouse Which restore setting do I use?To restore mouse operation when hot plugging Hot plugging and mouse restorationTo use the initial IP-configuration sequence Initial IP configurationTo configure IP-specific settings To configure IP details from a global user location IP configuration by global userMC5-IP encryption settings Encryption settingsViewer encryption settings Positioning the MC5-IP in the network Networking issues   Firewall/router address Port settingsPlacing the MC5-IP behind a router or firewall AddressingDNS addressing To discover a DHCP-allocated IP addressEnsuring sufficient security Placing the MC5-IP alongside the firewallPorts To control two or more ports simultaneously Power switching configurationPower control sequences To configure the power sequences for each host computerKvmadmin -setusers users.csv Kvmadmin utilityKvmadmin command ip address parameters Kvmadmin -getconfig kvm1.cfgTo use the KVM Firmware Uploader utility Performing upgradesItems required to use the upgrade utility Upgrading MC5 models and CAMsCommence the upgrade Select the items to be upgradedSelect the upgrade file to be used Where Vxxx is the upgrade file version numberUpgrading MC5-IP models To upgrade MC5-IP modelsMC5-IP models Accessing the MC5Front panel controls MC5 modelsSelecting a computer Local and remote user accessTo gain access as a local or remote user To select a computer using the front panel controlsKeep Pressed down until all other Numbers have been entered To select a computer using hotkeysStandard hotkeys Above or for even longer cascaded computersTo select a computer using mouse buttons To select a computer using the on-screen menuTo select a computer using mouse buttons Advanced method Selecting cascaded computers Logging in and outConfirmation box Routing status To change banner colours or disable the bannerTo use the Routing status feature Reminder bannerTo switch a computer on or off Power switching via configuration menuUser preferences and functions Global user access Enter the MC5 address here and click OK Global user access via VNC viewerTo access via the VNC viewer To download the VNC viewer 1 Open your Web browserTo access via your web browser Global user access via web browserWhen using the viewer window Using the viewer windowMenu bar Mouse pointers ConfigureTo select a host Re-synchronise mouse Access mode shared/privatePower switching via viewer Auto calibrateResync Mouse Single Mouse ModeControls Mouse ControlKeyboard Control Info KVM switch menuWhen entering codes Video SettingsSetting the Threshold manually Using automatic configurationsIncreased by 50% when a slow link is detected Detect such noise and adjust the threshold accordinglyTo enter a port number in a Web browser Access via dial up modem or Isdn linkIf you need to enter a port number To initiate a dial up linkLinux Viewer encryption settingsSupported web browsers WindowsGetting assistance TroubleshootingTo access the configuration menus Appendix 1 Configuration menusFunctions User Preferences Screen Saver Mouse SwitchingAutoscan Mode Global PreferencesMouse Type User TimeoutOSD Dwell Time RS232 Mouse TypeExclusive Use Setup OptionsKeypads Controls LanguageAutomatic Logout DDC Options DDC Source Settings AUTO, LOCAL, DefaultDDC Refresh Settings AT START, Disabled Advanced OptionsTime and Date Configure IP portUnit Configuration Unit NameNetwork Configuration Reset Configuration Modem ConfigurationWhat is IP access control? Clearing IP access controlTo clear IP access control To access the remote configuration pages Appendix 2 Configuration pages via viewerMain configuration Logged on users User accounts Firmware Version Unit configurationAdmin Password Hardware VersionAdvanced unit configuration Time & date configuration IP Network Mask Network configurationIP Access Control MAC addressTo edit/remove access control entries Setting IP access controlTo define a new IP access control entry To reorder access control entriesPower control port Serial port configurationModem port To create a new host entry Host configurationErase Host Configuration Add entry for unrecognised hostPort Direct Port/host addressing using Port DirectExamples For further details To get here Logging and statusTo copy and paste the log Syslog Server IP AddressPreferred encoding Click here to access the optionsColour/Encoding Auto selectCustomise Enable all inputsDisable all inputs view-only mode InputsMisc ScalingLoad / Save Defaults ReloadDefaults Save IdentitiesAppendix 4 VNC viewer window options Encoding and colour level Appendix 5 Browser viewer optionsSecurity IP addresses Appendix 6 Addresses, masks and portsNet masks Binary octet after Net masks the binary explanationInside a bit-wise and function Binary equivalentAddress ranges Calculating the mask for IP access controlSingle locations All locationsPorts Security issues with portsRouter/firewall address 9pin D-type Female Power switch to power switch daisy chain cableRS232 serial flash upgrade cable 6pin mini-DIN FemaleSLAVE2 end 9pin D-type male Multi-head synchronisation cablePermissible key presses Appendix 8 Hotkey sequence codesCreating macro sequences Appendix 9 Supported video modes General Public License Linux WarrantySafety information Safety considerations when using power switches with MC5End user licence agreement European EMC directive 89/336/EEC Radio Frequency EnergyFCC Compliance Statement United States Germany France Italia USAIndex 109 110

MC5-IP specifications

The Lindy MC5-IP is an innovative and versatile presentation switcher designed for a variety of audiovisual settings, making it ideal for professional environments such as conferences, classrooms, and event spaces. Its primary objective is to provide seamless connectivity and efficient management of multiple video sources, enhancing the overall user experience in presentations and broadcasts.

One of the standout features of the MC5-IP is its capability to handle multiple input formats. It supports HDMI, DisplayPort, and VGA connections, allowing users to easily switch between various devices such as laptops, projectors, and media players. This flexibility promotes a smooth transition during presentations, minimizing downtime and interruptions.

The device is equipped with cutting-edge video processing technology, which ensures high-quality output at resolutions up to 4K. This high definition support is crucial in today’s digital landscape, as it provides crystal-clear images and vibrant colors, essential for impactful presentations. Furthermore, the MC5-IP employs advanced scaling technology that adjusts the output resolution to match the capabilities of the connected display, ensuring optimal visual quality.

Integration capabilities are another highlight of the MC5-IP. It can be easily integrated into existing AV systems and works seamlessly with popular control systems, such as Crestron and AMX. This compatibility allows for centralized control, making it easier for operators to manage video sources, adjust settings, and coordinate multiple displays without the need for complex setups.

In addition, the Lindy MC5-IP features an intuitive user interface that simplifies operation. The device can be controlled via a touch screen, remote control, or web-based application, providing users with convenient options to manage their presentations. The user-friendly design minimizes the learning curve, making it accessible for individuals who may not be tech-savvy.

The MC5-IP also prioritizes reliability and durability. It is built with high-quality components that ensure long-term performance, making it a dependable choice for frequently used environments. Finally, its compact form factor allows for easy transport and installation, catering to the dynamic needs of modern presentation scenarios.

In summary, the Lindy MC5-IP is a robust presentation switcher designed with professionalism in mind. Its versatility, high-resolution support, integration options, user-friendly interface, and durability make it an essential tool for anyone looking to enhance their AV presentations.