Adder Technology Placing AdderView CATxIP 5000 behind a router or firewall, Port settings

Page 27

Placing AdderView CATxIP 5000 behind a router or firewall

A possible point of contention between the AdderView CATxIP 5000 and a firewall can occasionally arise over the use of IP ports. Every port through the firewall represents a potential point of attack from outside and so it is advisable to minimise the number of open ports. The AdderView CATxIP 5000 usually uses two separate port numbers, however, these are easily changeable and can even be combined into a single port.

IMPORTANT: The correct configuration of routers and firewalls requires advanced networking skills and intimate knowledge of the particular network. Adder Technology cannot provide specific advice on how to configure your network devices and strongly recommend that such tasks are carried out by a qualified professional.

Port settings

As standard, the AdderView CATxIP 5000 uses two ports to support its two types of viewer:

Port 80 for users making contact with a web browser, and

Port 5900 for those using the VNC viewer.

When these port numbers are used, VNC viewers and web browsers will locate the AdderView CATxIP 5000 correctly using only its network address. The firewall/router must be informed to transfer any traffic requesting these port numbers through to the AdderView CATxIP 5000.

When a web server is also on the local network

If you need to change the VNC port number

If you change the VNC port to anything other than 5900, then each VNC viewer user will need to specify the port address as well as the IP address. For instance, if you set the VNC port to ‘11590’ and the IP address is ‘192.168.47.10’ then VNC viewer users will need to enter:

192.168.47.10::11590

(Note the double colons that separate the IP address and port number).

The firewall/router would also need to be informed to transfer all traffic to the new port number through to the AdderView CATxIP 5000.

Addressing

When the AdderView CATxIP 5000 is situated within the local network, you will need to give it an appropriate local IP address, IP network mask and default gateway. This is achieved most easily using the DHCP server option which

will apply these details automatically. If a DHCP server is not available on the network, then these details need to be applied manually in accordance with the network administrator.

The firewall/router must then be informed to route incoming requests to port 5900 or port 80 (if available) through to the local address being used by the AdderView CATxIP 5000.

  

Port 80 is the standard port used by web (HTTP) servers. If the AdderView CATxIP 5000 is situated within a local network that also includes a web server or any other device serving port 80 then, if you want to use the web browser interface from outside the local network environment, the HTTP port number of the AdderView CATxIP 5000 may need to be changed.

When you change the HTTP port to anything other than 80, then each remote browser user will need to specify the port address as well as the IP address. For instance, if you set the HTTP port to ‘8000’ and the IP address is ‘192.168.47.10’ then browser users will need to enter:

http://192.168.47.10:8000

(Note the single colon that separates the IP address and the port number).

The firewall/router would also need to be informed to transfer all traffic to the new port number through to the AdderView CATxIP 5000.

AdderView CATxIP 5000 has a local address and net mask, i.e.

IP address: 192.168.0.3

Net mask: 255.255.255.0

Remote user with VNC viewer accesses IP address: 129.7.1.10

Internet and automatically uses port

5900.

Firewall/router address: 129.7.1.10

The firewall routes the request from the VNC viewer on port 5900 through to the AdderView CATxIP 5000 at local address 192.168.0.3

 



CAM

26

Image 27 Adder Technology manual Placing AdderView CATxIP 5000 behind a router or firewall, Port settings, Addressing
Contents AdderView CATxIP Contents Further information Index Many computers CAM formatsCreating larger installations Cascade installationsEnterprise installations AdderView CATxIP 5000 features front and rear What’s in the box What you may additionally need  Mounting Single unit rack bracketsDouble unit rack brackets    ConnectionsFrom video monitor From USB keyboard and mouse Local userTo connect the local user port AdderView CATxIP Rear panelGlobal users IP network port To connect the IP network port for global usersAdderView CATxIP Front panel To connect a computer system Computer system via CAMPower in connection To connect the power supplyOutput lead from Power adapter Power control port To connect and address the switch boxesSwitch Multiple video head connections Remote switching control Host computer port/channelCable from serial Control device Overall initial configuration ConfigurationInitial configuration Security Main menuMenu layout HotkeysRegistering users and host computers General security and configuration stepsTo enable general security To set an Admin passwordTo clear a password and restore factory default settings What to do if the Admin password has been forgottenClearing IP access control What is IP access control?To clear IP access control To configure the unit from a global user location Full configuration by global userEncryption settings AdderView CATxIP 5000 encryption settingsViewer encryption settings Positioning AdderView CATxIP 5000 in the network Networking issuesFirewall/router address Port settingsPlacing AdderView CATxIP 5000 behind a router or firewall AddressingDNS addressing To discover a DHCP-allocated IP addressPlacing AdderView CATxIP 5000 alongside the firewall Ensuring sufficient securityPorts To control two or more ports simultaneously Power switching configurationPower control sequences To configure the power sequences for each host computerUpgrading AdderView CATxIP 5000 models Recovering from a failed upgradeTo upgrade AdderView CATxIP 5000 models To invoke backup/recovery modeFront panel indicators Accessing the AdderView CATxIPSelecting a computer Local user accessSelect Host menu here you can select computers by name To select a computer using the Select Host menuWhen choosing Standard hotkeysLogging in and out Show All UsersTo enable/disable the confirmation box Confirmation status boxUser preferences and functions Orange dot indicators in the Select Host menu Global user access What will I see when I first login?How do multiple users coexist? Options button Global user access via VNC viewerTo access via the VNC viewer To download the VNC viewerTo access via your web browser Global user access via web browserUsing the viewer window When using the viewer windowMenu bar To select a host ConfigureMouse pointers Host selectionRe-synchronise mouse Access mode shared/privatePower switching Auto calibrateControls Keyboard Control Enable Sun TranslationWhen entering codes Video SettingsScreen contains only host system information Using automatic configurationsIncreased by 50% when a slow link is detected Setting the Threshold manuallyReduced Blanking Advanced Video SettingsShow All Users Custom Video ModesVNC hotkey selection Viewer encryption settings If you need to enter a port numberSupported web browsers US +1 888 275 TroubleshootingWhen logging on using VNC viewer, I cannot enter a username Getting assistanceTo access the local setup menus Appendix 1 Local setup menusFunctions Power ControlRestore Standard Mouse Restore IntellimouseScreen Saver Settings Blank, Moving LogoSettings Disabled, Enabled User PreferencesOSD Dwell Time Mouse SwitchingUser Timeout Global PreferencesSetup Options Logon SecurityAuto Logout IP address, net mask, VNC port, etc ConfigurationIP admin password, encryption settings, etc Completely resets the AdderView CATxIP 5000 unitUnit Configuration Network Configuration Options Port Serial ConfigurationSettings Power Control, Sync Units Settings 1200, 2400, 4800, 9600, 19200, 38400, 57600To reset the AdderView CATxIP 5000 configuration Reset ConfigurationAppendix 2 Configuration pages via viewer To access the remote configuration pagesMain configuration Logged on users User accounts Unit configuration Advanced unit configuration Time & date configuration IP Gateway Network configurationIP Access Control IP Network MaskTo edit/remove access control entries Setting IP access controlTo define a new IP access control entry To reorder access control entriesSerial port configuration Options Port UseBaud Rate Sort Host configurationErase Host Configuration Add entry for unrecognised hostFor further details To get here Logging and statusTo copy and paste the log Syslog Server IP AddressLdap configuration Preferred encoding Appendix 3 VNC viewer connection optionsColour/Encoding Auto selectCustomise Enable all inputsDisable all inputs view-only mode InputsMisc Custom Size ScalingNo Scaling Scale to Window SizeLoad / Save Defaults ReloadDefaults Save IdentitiesAppendix 4 VNC viewer window options Appendix 5 Browser viewer options Encoding and colour levelSecurity Appendix 6 Addresses, masks and ports IP addressesNet masks Binary octet after Net masks the binary explanationOperation with net mask Binary equivalentAddress ranges Calculating the mask for IP access controlSingle locations All locationsPorts Security issues with portsAppendix 7 Cascading multiple units See alsoCascade tree Connecting units in cascade Tips for successful cascadingTo connect units in cascade Addressing computers in a cascade Using cascaded computersMulti-head synchronisation cable Appendix 8 Cable and connector specificationsAdderView CATxIP 5000 to power switch cable Power switch to power switch daisy chain cableAppendix 9 Hotkey sequence codes Permissible key pressesCreating macro sequences Appendix 10 Supported video modes Warranty Safety informationGeneral Public License Linux End user licence agreement Canadian Department of Communications RFI statement Radio Frequency EnergyEuropean EMC directive 89/336/EEC FCC Compliance Statement United StatesHoe Huat Industrial Building Index Options port Upgrade failure Connection Baud rate