HP 449298-001 manual Network setup, Configuring Ldap authentication support for users

Page 43

It is possible to create a user with no privileges. This user can only view status and settings.

NOTE: The vcmuser_ account is an internal Onboard Administrator account created and used by Virtual Connect Manager to communicate with the Onboard Administrator. This account can show up in the Onboard Administrator system log. This account cannot be changed or deleted.

Configuring LDAP authentication support for users

•Set LDAP properties

>set ldap ipaddress=192.168.0.110 enabled=true

•Add/Remove LDAP directory groups

>add ldap-group MyNewGroup description="This is my test group" privileges=domain,server,network

•Enable/Disable local users

>set ldap localusers=disabled

•Display LDAP settings and directory groups

>show ldap >show ldap-group

Network setup

To establish external Ethernet network connectivity for the HP BladeSystem c-Class enclosure, do the following:

1.Identify the MAC addresses to be used on the server blades deployed within this Virtual Connect domain.

2.Setup connections from the HP BladeSystem c-Class enclosure to the external Ethernet networks.

These connections can be uplinks dedicated to a specific Ethernet network or shared uplinks that carry multiple Ethernet networks with the use of VLAN tags.

Configuring MAC Address ranges

•Use VC-Defined MAC addresses

>set domain MacType=VC-Defined MacPool=10

•Use factory-default MAC addresses

>set domain MacType=Factory-Default

•Set user-defined MAC addresses

>set domain MacType=User-Defined MacStart=00-17-A4-77-00-00 MacEnd=00- 17-A4-77-00-FF

IMPORTANT: Configuring Virtual Connect to assign server blade MAC addresses requires careful planning to ensure that the configured range of MAC addresses is used once within the environment. Duplicate MAC addresses on an Ethernet network can result in a server network outage.

Each server blade Ethernet NIC ships with a factory default MAC address. The MAC address is a 48-bit number that uniquely identifies the Ethernet interface to other devices on the network. While the hardware ships with default MAC addresses, Virtual Connect has the ability to assign MAC addresses that will

Configuring the Virtual Connect domain using the CLI 43

Image 43

Contents HP Virtual Connect Manager Command Line Interface User Guide Audience assumptions Contents Technical support Introduction Command line overviewVirtual Connect overview Options Command line syntaxSubcommand managed element parameters options properties ParametersProperties CLI command execution modesRemote access to the Virtual Connect Manager Subcommands Command lineManaged elements Domain DevicebaySupported actions delete, help, set, show Enclosure Supported actions add, help, remove, set Enet-connectionEthernetMAC Network=SomeNetwork2 PXE=enabledAddressType=Factory-Default AddressTypeExternal-manager Fabric Fc-connection Firmware Support actions help, show, updateInterconnect IgmpLdap Supported actions add, help, remove, set, show Ldap-groupMac-cache Network Profile Assign profile Add profile MyNewProfile2 -NoDefaultEnetConnAdd profile MyNewProfile2 -NoDefaultFcConn Add profile MyNewProfileServer Supported actions help, poweroff, poweron, reboot, showPoweroff server enc02 -ForceOnTimeout Poweroff server enc02Poweroff server enc02 -Force Poweroff server enc0Stackinglink Systemlog StatusUplinkport Set uplinkport enc012 Network=MyNetwork Speed=1Gb Set uplinkportSet uplinkport PortID Network=NetworkName Speed=Auto10Mb100Mb1GbDisabledUplinkset User Remove user steve Set user steve Password=fgY87hHlSet user steve Password Set user bill Password=HGtwf7272562Vcm Help subsystemVersion Command line Interactive user output format Output formatBrad Domain Brad Mills Brad.mills@hp.com True Server Scriptable output format Command line Ssh 192.168.0.120 login as Administrator Configuring the Virtual Connect domain using the CLIBasic configuration Ssh 192.168.0.120 login as Administrator passwordImporting an enclosure Domain setupSetting the domain name Configuring local usersRemove user Add user bob password=fhkjdhfk privileges=domain,networkSet user bob fullname=Bob J Smith enabled=false Remove user bobConfiguring Ldap authentication support for users Network setupConfiguring MAC Address ranges Assigned MAC addresses Adding uplink ports to an enet-network Creating an enet-networkCreating a shared uplink port set Creating a network that uses a shared uplink port set Fibre Channel setupConfiguring WWN address ranges Adding uplink ports to a shared uplink port setSet fabric name=MyNewName portspeed=4Gb Server Profile setupModifying FC fabric properties Displaying FC fabricsConfiguring the Virtual Connect domain using the CLI Adding FC fabric connections to a server profile Configuring Igmp settingsCreating server profiles Adding enet-network connections to a profileLogging out of the CLI Configuring MAC cache failover settingsSet mac-cache enabled=true refresh=10 Common management operationsReset vcm Reset vcm -failover Resetting the Virtual Connect ManagerVirtual Connect Manager not found at this IP address Before you contact HP Technical supportHP contact information Igmp Acronyms and abbreviationsPXE Index Index