HP Virtual Connect Firmware manuals

326 pages11.54 Mb

1HP Virtual Connect for c-ClassBladeSystem Version 4.30/4.31
User Guide
3Contents
- 4Virtual Connect networks
- Virtual Connect fabrics
- 5Advanced Profile Settings
- Define Server Profile screen
- Server Profiles screen
- Edit Server Profile screen
- SAN fabric
- General requirements for adding FC or FCoE connections
- Virtual Connect modules
- Removing an enclosure
- Causes for INCOMPATIBLE status
- Ethernet Bay Summary (General Information) screen
- Ethernet Bay Summary (MAC Address Table) screen
- Ethernet Bay Summary (IGMP Multicast Groups) screen
- Ethernet Bay Summary (Name Server) screen
- Ethernet Port Detailed Statistics screen
- FC Port Detailed Statistics screen
- Interconnect Bay Overall Status icon definitions
- Interconnect Bay VC Status icon definitions
- Integrity blade devices
- Server Bay Overall Status icon definitions
- Server Bay VC Status icon definitions
- Server Bay OA Communication Status icon definitions
- Server Bay Status screen - multi-bladeservers
- Removing or replacing Virtual Connect modules
- Upgrading to an HP Virtual Connect 8Gb 24-PortFC Module
- Upgrading to an HP Virtual Connect 8Gb 20-PortFC Module
- Flex-10/10Dmodule
- Upgrading to an HP Virtual Connect FlexFabric module from a VC-FCmodule
- Replacing an Onboard Administrator module
- 6Status icon definitions
- Recovering remote enclosures
- Appendix A: Using Virtual Connect with nPartitions
- Appendix B: Auto-deploymentprocess
- TFTP server
- The deployment status
- The deployment log
- The deployment configuration file
- Configuration file output
- Waiting for DHCP
- Waiting for TFTP
- Failed to configure domain
- Triggering a restart of the deployment process
- Link Local Address
- DHCPv6 address
- EBIPAv6 address
- Domain static addressing
- New installation
- 7Appendix D: Virtual Connect Security
- Documentation feedback
8Introduction
- What's new
- 9Virtual Connect documentation
- 10Virtual Connect overview
12HP Virtual Connect Manager
- Configuring browser support
- 13Accessing HP Virtual Connect Manager
- 14Command Line Interface overview
- 15Logging on to the HP Virtual Connect Manager GUI
- 16VCM wizards
- 17HP Virtual Connect Home
- 18About HP Virtual Connect Manager
- Navigating the HP Virtual Connect Manager GUI
- 19Menu items
  - Menu item
  - Links to
20Virtual Connect domains
- Understanding Virtual Connect domains
- 21Managing domains
- 22Domain Settings (Configuration) screen
  - Task
  - 23Deleting a domain
  - Auto-deployment
- 24Domain Settings (IP Address) screen
- 25Domain Settings (Enclosures) screen
- 28Domain Settings (Backup/Restore) screen
- 29Domain Settings (Storage Management Credentials) screen
  - 30Adding or editing a credential
- 31Managing SNMP
- 32SNMP overview
  - 33SNMP Configuration (VC-Enet)
    - 34The following table describes the fields within the SNMP Configuration screen
    - Field name
    - *SNMPv3 defines three levels of security:
    - •Lowest—Withoutauthentication and without privacy (noAuthNoPriv)
    - •Middle—Withauthentication but without privacy (authNoPriv)
    - •Highest—Withauthentication and with privacy (authPriv)
  - 35SNMP Configuration (VC-FC)
    - 36SMI-Soverview
  - 37SNMP Configuration (Users)
  - 38Adding SNMP access
  - 39Adding an SNMP trap destination
    - 40SNMP traps
    - 42Trap categories and required user role permissions
    - Trap severities
    - 43VC Module MIB traps
    - 44VC Domain MIB traps
    - 45vcDomainManagedStatusChanged
    - The following is an example of a domain Cause string:
    - 2 of 7 profiles contain unmapped connections in the domain
    - The following is an example of a domain RootCause string:
    - The domain managed status ReasonCodes are provided in the following table
    - Domain reason code
    - vcEnclosureManagedStatusChanged
    - The following is an example of an enclosure Cause string:
    - 2 of 6 Ethernet modules are abnormal in enclosure enc0
    - Module in bay enc0:iobay3 has been removed
    - The enclosure managed status ReasonCodes are provided in the following table
    - Enclosure reason code
    - 46vcModuleManagedStatusChanged
    - The following is an example of a module Cause string:
    - Port enc0:iobay5:d3:v1 loop detected and automatically disabled
    - The following is an example of a module RootCause string:
    - The module managed status ReasonCodes are provided in the following table
    - Module reason code
    - vcPhysicalServerManagedStatusChanged
    - The following is an example of a physical server Cause string:
    - Server enc0:dev1 unable to communicate with enclosure enc0
    - Server enc0:dev2 profile pending
    - Physical server reason code
    - vcFcFabricManagedStatusChanged
    - 47The following is an example of a FC fabric Cause string:
    - 1 of 2 uplink ports are abnormal on BackupSAN fabric
    - The following is an example of a FC fabric RootCause string:
    - The FC fabric managed status ReasonCodes are provided in the following table
    - FC fabric reason code
    - vcEnetNetworkManagedStatusChanged
    - The following is an example of an Ethernet network Cause string:
    - Network BLUE has failed
    - The following is an example of an Ethernet network RootCause string:
    - Port enc0:iobay5:X3 is unlinked; Port enc0:iobay5:X4 is incompatible
    - Ethernet network reason code
    - vcProfileManagedStatusChanged
    - The following is an example of a profile Cause string:
    - 3 TCServer profile connections for server in bay enc0:devbay3 are not mapped
    - The following is an example of a profile RootCause string:
    - The TelecomServer profile is assigned to an abnormal server in bay enc0:devbay1
    - The profile managed status ReasonCodes are provided in the following table
    - Profile reason code
- 48Viewing the system log
- 49System Log entry format
- 51System Log (Configuration) screen
  - Use this screen to view or set remote log destination settings
  - To define a new remote log destination, click Define Target
  - To send a test message to all enabled remote log destinations, click Test
- 52Managing SSL configuration
- 55SSL Certificate Administration (Certificate Signing Request) screen
  - 56Field
  - Possible values
- 57SSL Certificate Administration (Certificate Upload) screen
- 58SSH Key Administration screen
- 59Web SSL Configuration screen
61HP BladeSystem c-Classenclosures
- Enclosure serial numbers
- Using multiple enclosures
  - For example, if bays 1 and 2 of the Primary Enclosure contain HP VC
  - modules
  - A total of 16 Ethernet and
  - type modules can be installed in a
  - multi-enclosure
  - domain
  - Each FlexFabric module counts as one Ethernet and one
  - module. Combinations of FlexFabric
  - modules are allowed as long as the
  - 16-module
  - limit for each module type (Ethernet and FC) is not exceeded in the domain
  - The
  - and FlexFabric
  - FC-configured
  - uplink port configuration must be identical across all enclosures
  - All enclosures must have the same HP VC
  - module configuration
  - A single domain supports up to four c7000 enclosures
  - All enclosures must have the same FC and FlexFabric module configuration
  - For example, if bays 1 and 2 of the Primary Enclosure contain
  - F8 modules
  - Wizard. There are
  - half-height
  - full-height
  - server bays in a c7000 enclosure. A combination of
  - Multi-enclosure
  - double-dense
  - domains require similar and compatible
  - configuration contains incompatible
  - modules in the remote enclosures might be designated INCOMPATIBLE after import
  - domains using Direct Attach Storage, a server profile migration of a
  - SAN-booted
  - server between enclosures is not supported
- 62Multiple enclosure requirements
  - Observe the following requirements when connecting multiple enclosures:
- 63Enclosures View screen
- 64Enclosures view (multiple enclosures)
65Virtual Connect users and roles
- Understanding VC administrative roles
- 66Managing users
- 67Local Users screen
  - The following tasks can be performed on this screen:
  - TIP:
  - o Upper-casecharacter o Lower-casecharacter
  - 69Adding a new user
- 70Minimum requirements
- LDAP Server Settings (LDAP Server) screen
  - 71Test LDAP authentication
- 72LDAP Server Settings (LDAP Groups) screen
  - 73Add LDAP Group
- 74LDAP Server Settings (LDAP Certificate) screen
- 75RADIUS Settings (RADIUS Server) screen
  - 76Required RADIUS server settings
  - Setting up a RADIUS server
  - 77Test RADIUS authentication
- 78RADIUS Settings (RADIUS Groups) screen
  - Add or Edit RADIUS Group
- 79TACACS+ Settings screen
  - 81Required TACACS+ server settings
  - Setting up an IPv4-onlyTACACS+ server
  - 82Setting up an IPv4 and IPv6 capable TACACS+ server
  - 83Test TACACS+ authentication
- 84Role Management (Role Authentication Order) screen
- 85Role Management (Role Operations) screen
86Virtual Connect networks
- Understanding networks and shared uplink sets
- 87Smart Link
  - An uplink port is required to support Smart Link
  - HP recommends using Smart Link in the following domain configurations:
  - •When the domain is configured with active/active uplinks
  - When Smart Link is triggered for Flex-NICs,observe the following information:
  - •If DCC exchanges are successful, the logical port is disabled
  - •If DCC exchanges fail, the logical port is not disabled
- Private Networks
  - VC limits the number of Private Networks to
- VLAN Tunneling Support
- 88Managing networks
- 90Network Access Groups screen
- 91Define Network Access Group screen
  - 92Edit Network Access Group screen
- 93Ethernet Settings (Port Monitoring) screen
  - 95Select Monitored Ports screen
- 97Server VLAN tagging support
- 98VLAN Capacity
- Multiple Networks Link Speed Settings
- 99MAC Cache Failover
- 100Network loop protection
- 101Pause flood protection
- 102Configuring Throughput Statistics
- LACP timer configuration
  - Networks (Advanced Settings)
- 103Quality of Service
  - IP-TV
  - 104Quality of Service screen
    - 105Custom (with FCoE Lossless)
    - 106Traffic Classes
    - Item
    - The following table lists the available actions from this screen:
    - 107Ingress Traffic Classifiers
    - 108Custom (without FCoE Lossless)
- 111sFlow Settings (General) screen
- 113sFlow Settings (Ports) screen
- 114IGMP Settings (IGMP Configuration) screen
- 120Define Ethernet Network screen
- 126Ethernet Networks (External Connections) screen
- 128Ethernet Networks (Server Connections) screen
- 129Managing shared uplink sets
- 130Shared Uplink Sets (External Connections) screen
  - 131Copy Shared Uplink Set screen
- 133Shared Uplink Sets (Associated Networks) screen
- 134Define Shared Uplink Set screen
  - Observe the following information:
  - 137Defining a shared uplink set
    - 1387.Create the Associated Networks that will use this shared uplink:
    - a.Click Add above the table. -or
    - b.To add a single associated network:
    - i.Select the a single Associated Network radio button
    - ii.Enter the name of the network
    - v.Skip to step d
    - c.To add multiple associated networks:
    - 3,9,15-20
  - 139Defining an FCoE network
  - 140Edit Shared Uplink Set screen
145Virtual Connect fabrics
- Understanding FC fabrics
- 148DirectAttach VC SAN fabrics
  - The DirectAttach fabric is only supported with the HP VC FlexFabric
  - o HP Tape and Virtual Tape Libraries o Any third-partystorage solution
  - To perform a server profile migration of a
- 150Mixed FabricAttach and DirectAttach VC SAN fabrics
- 151Managing fabrics
- 152Define SAN Fabric screen
  - 153•Single enclosure domain
  - •Multi-enclosuredomain
  - 155Login re-distribution
  - 157Edit SAN Fabric screen
    - 158Use this screen to edit a SAN fabric configuration
    - The following table describes the fields within the Edit SAN Fabric screen
- 159SAN Fabrics (External Connections) screen
  - To access this screen, click SAN Fabrics in the left navigation tree
- 161SAN Fabrics (Server Connections) screen
- 162Fibre Channel Settings (Misc.) screen
163Virtual Connect server profiles
- Understanding server profiles
  - 164•Before creating the first server profile, do the following:
  - •When assigning a VC-assignedserial number, the server must be powered off
  - If the VC domain is configured for
- 165Multi-bladeservers
- 166Flex-10overview
  - 167SR-IOV
- 168Flex-10configuration
  - Network administrator
  - Server administrator
  - 4.Disabled. VC determines the bandwidth speed
  - For more information, see "Bandwidth assignment (on page 175)
- 169FlexFabric overview
- 170PXE settings
  - 171Disable—VC
  - Use
  - PXE enabled
  - PXE disabled
  - Server blade configuration
- 172iSCSI offload and boot
- 173iSCSI and FCoE port assignments
- 175Bandwidth assignment
  - are all 2Gb, then each FlexNIC can be assigned 2Gb of bandwidth
  - Requested
  - Allocated
  - has been defined are treated as a connection set to "auto
- 176Managing MAC, WWN, and server virtual ID settings
- 177Ethernet Settings (MAC Addresses) screen
  - 178MAC address settings
- 179Fibre Channel Settings (WWN Settings) screen
  - Use this screen to select World Wide Name ranges for server profiles
  - •Click WWN Settings under Fibre Channel Settings in the left navigation tree
- 180Serial Number Settings screen
- 181WWN settings
- 182Managing server profiles
- 188To define a server profile:
- 1.Enter the server profile name
- Click the
- d.Change the port speed setting:
- i.Click the pull-downarrow in the Port Speed Type Column
- To override the current PXE settings on the server, click the
- 189To select a multicast filter or filter set, click the
- If the server will use more than two network connections
- 6.Set up iSCSI HBA connections. See "Creating iSCSI connections (on page 192)
- a.Click the down arrow under FC SAN Name to select an available SAN
- 9.Set up FCoE HBA connections:
- 190Creating FCoE HBA connections for a BL890c
- Limited Ethernet connections when using HP Virtual Connect Flex-10/10Dmodules
- 192Creating iSCSI connections
- 193iSCSI HBA connections screen
  - 196iSCSI Boot Assistant
  - 197DHCP option
  - 198oTarget IP address: 192.168.0.2 o Target TCP port:
  - o Target boot LUN: 0x0E
  - o Target iqn name: iqn.2009-04.com:1234567890
  - oHeader Digest: Enabled
  - oData digest: Not specified. Assume disabled
  - oAuthentication Type: One-wayCHAP
  - oTarget IP address:
  - oTarget TCP port: Use default from RFC 3720 (3260) o Target boot LUN: 0x0E
  - oData digest: Data Digest disabled o Authentication Type: Mutual CHAP
- 199Define Server Profile screen (multiple enclosures)
- Multiple network connections for a server port
- 200Defining server VLAN mappings
  - 201No Forced VLAN Mappings
- 203Fibre Channel boot parameters
- 204Server Profiles screen
  - 205Print Server Profile list
- 207The following table describes the fields within the Edit Server Profile screen
- 211Only
- 2184.Power up the HP ProLiant BL680c G7 Server Blade:
- 224General requirements for adding FC or FCoE connections
- 227Virtual Connect and Insight Control Server Deployment
229Virtual Connect modules
- Firmware updates
- 231Stacking Links screen
- 233Throughput Statistics screen
  - 234•Received Non-UnicastPackets (pkts/s)
  - •Transmitted Packets (pkts/s)
  - •Transmitted Non-UnicastPackets (pkts/s)
- 235Enclosure Information screen
- 236Ethernet Bay Summary (Server Port Information) screen
- 237Enclosure Status screen
- 238Interconnect Bays Status and Summary screen
- 239Causes for INCOMPATIBLE status
  - •Module adjacency
  - •Module replacement
  - o The module is the primary or standby module
  - o The fabric is being used by a profile connection
  - •Firmware version
  - •FIPS mode
- 240Ethernet Bay Summary (General Information) screen
- 241Ethernet Bay Summary (Uplink Port Information) screen
- 244Interconnect Bay Summary (Details) Enet
- Ethernet Bay Summary (MAC Address Table) screen
- 245Ethernet Bay Summary (IGMP Multicast Groups) screen
- 246Ethernet Bay Summary (Name Server) screen
  - The following table describes the columns within the Name Server table
- 247Interconnect Bay Summary (FIP Snooping) Enet
  - The following table describes the columns within the Uplink Port(s) table
  - 248To refresh FIP snooping data, click Refresh
- 249Ethernet Port Detailed Statistics screen
  - 250DCBX Information
  - Port Statistic
  - 256Remote Device Information
  - Pluggable Module Information
- 257FC Port Detailed Statistics screen
  - To reset the statistics, click Reset Statistics
  - 258Port Statistics
- 259FC Bay Summary screen
- 262Interconnect Bay Overall Status icon definitions
  - Icon
  - Operational state
  - Meaning
  - Corrective action
- Interconnect Bay OA Reported Status icon definitions
- Interconnect Bay VC Status icon definitions
- 263Interconnect Bay OA Communication Status icon definitions
- 264Server Bays Summary screen
- 267Integrity blade devices
- Server Bay Overall Status icon definitions
- 268Server Bay OA Reported Status icon definitions
- Server Bay VC Status icon definitions
- 269Server Bay OA Communication Status icon definitions
- 270Server Bay Status screen
  - 271Server Blade Information
  - Server Ethernet Adapter Information
  - SAN Ports
- 272Server Bay Status screen - multi-bladeservers
- 274Port status conditions
- 275Interconnect module removal and replacement
- 276Upgrading to an HP Virtual Connect 8Gb 20-PortFC Module
  - 277For detailed migration information, see the
  - VC-managed
  - identifiers
  - 2.Delete the domain
  - 3.Remove all network uplinks from the modules to be removed
  - 4.Remove the existing modules from both horizontally adjacent bays
  - 5.Install the HP Virtual Connect Flex-10,FlexFabric, or Flex-10/10Dmodules
  - 2.Save the configuration
  - Possible errors
  - 1.Physically remove the module
  - 2.Insert the original module
  - 3.Ensure that all profiles have been unassigned
  - 4.Remove the module
  - 5.Verify that the module is removed from the GUI
  - 6.Insert the correct module type
- 279Upgrading to an HP Virtual Connect FlexFabric module from a VC-FCmodule
  - 1.If necessary, upgrade the VC domain firmware:
  - 6.Physically remove the existing modules from both horizontally adjacent bays
  - Install the HP VC FlexFabric Modules with the appropriate FC SFP+ transceivers
  - 10.Recreate the previously deleted FC SAN fabrics
  - 11.Add FCoE connections to the profiles
- Replacing an Onboard Administrator module
281Maintenance and troubleshooting
- Domain Status summary
- 282Domain Status screen
- 283Module status definitions and causes
- 284Export support information
- Error message resources
- 285Reset Virtual Connect Manager
- Server profile troubleshooting
- 286Server blade power on and power off guidelines
- 288Additional information
289Appendix A: Using Virtual Connect with nPartitions
- Understanding nPartitions
- 290Assigning a VC profile to an nPar
- Reconfiguring nPars
292Appendix B: Auto-deploymentprocess
- Overview of the auto deployment process
- 293CentOS DHCP setup
- 294CentOS TFTP setup
- VC configuration file
- 295Importing the enclosure into the domain
- 296Starting a deployment operation
- 297Viewing deployment information, status, and logs
- 298Normal deployment status values
- 299Typical failure deployment status values
- 300The deployment log
- The deployment configuration file
- 301Manual TFTP settings
- 302Stopping a deployment operation
- Subsequent deployments (redeployment scenarios)
- 303VC GUI auto-deploymentstatus and settings
- Deployment wait and retry states
- 304Configuring file restrictions
- 305TFTP logging and enablement
306Appendix C: Using IPv6 with Virtual Connect
- Minimum requirements to support IPv6
- IPv6 addresses in VC
- 307Switching between EBIPAv6 and DHCPv6
- 308Enabling IPv6 support
- 309Migrations
- 310Disabling IPv6 support
- Importing enclosures
- 311VC FW update considerations
- Multi-enclosureconsiderations
- Limitations
313Appendix D: Virtual Connect Security
- Insecure protocols and secure alternatives
- 314Access control
- Virtual Connect FIPS mode of operation
- 316Enabling FIPS mode
- FIPS mode indicators (domain)
- FIPS mode indicators (VC Ethernet modules)
317Acronyms and abbreviations
- BPDU
- CFG
- CHAP
- CMC
- DNS
- FCoE
- FCS
- FIPS
- GMII
- HBA
- 318IGMP
- IQN
- LACP
- LAG
- LAG ID
- LDAP
- LHN
- LLA
- LLDP
- LUN
- MAC
- NPIV
- 319PHY
- PLS
- POST
- QoS
- RADIUS
- RBSU
- RMON
- SIM
- SLAAC
- SMI-S
- SNIA
- SPOCK
- SR-IOV
- 320SSH
- SSL
- TACACS+
- TCN
- UDP
- VCDG
- VCEM
- VCM
- VCSU
- VLAN
- WWN
- WWPN
321Documentation feedback
322Index