Logon Hours Screen | HP Integrity iLO 2 MP 5991-6005 specification

7-11	Logon Hours Screen	161
7-12 New IP/Mask Dialog Box		161
7-13 Lights Out Management Tab		162
7-14 Roles and Devices Example		163
7-15 Select Object Subtype Dialog Box		164
7-16	Setting Role Rights	165
7-17 Role Managed Devices Subtab		166
7-18	Members Tab (eDirectory)	167
7-19 Role Restrictions Subtab (eDirectory)		167
7-20 Add New Restriction Dialog Box		168
7-21Lights-Out Management Device Rights Tab		169
7-22 Admin User Gaining Admin Role Right, Example 1		175
7-23 Admin User Gaining Admin Role Right, Example 2		175
7-24 User and Role Access Restrictions		177
7-25	User Time Restrictions	178
7-26	Restricting General Use	179
7-27 Restricting the Reset Role		179

12 List of Figures

Page 12

Image 12

HP Integrity iLO 2 MP 5991-6005 manual Logon Hours Screen, New IP/Mask Dialog Box, Lights Out Management Tab

Contents

HP Integrity iLO 2 MP Operations Guide Copyright 2008, Hewlett-Packard Development Company, L.P Table of Contents Setting Up and Connecting the Console System Status Status Summary General 100 101102 103 Target map1 131 Map1 Example 132 Resetting the iLO 2 MP 130Target SYSTEM1 130 Target map1/sshsvc1 137 SSH Examples 138 147 187 195Page Power & Reset Login OptionsLocal Image File Dialog Box Licensing Admin User Gaining Admin Role Right, Example User and Role Access RestrictionsRestricting the Reset Role Logon Hours Screen Swinstallsvc1 Properties Licensing Page DescriptionLAN Page Description Swid# Properties Enetport1 Properties Ipendpt1 PropertiesGateway1 Properties Cddr1 Properties Intended Audience New and Changed Information in This EditionPublishing History Rx7640 Rx8640 Superdome sx2000 Document Organization Publishing History Details5991-6005 HP-UX 11i BL870c 5991-5992 HP-UX 11i BL860c Typographic Conventions Related Information Warranty Information HP Encourages Your Comments Windows Operating System Information Features Standard FeaturesFeatures Multiple Access Methods User Access ControlAlways-on Capability Virtual Front Panel Firmware Upgrades Ipmi over LANInternal Subsystem Information Dhcp and DNS Support Advanced Features Power Meter Readings HP Insight Power ManagerAdvanced Pack License Ldap Lite Supported Systems and Required Components and Cables ILO 2 MP Supported Browsers and Client Operating SystemsObtaining and Activating iLO 2 MP Advanced Pack Licensing Supported Systems and Required Components Matrix Password- and key-based for secure shell SSH AuthorizationLogin Security Lights-Out Advanced/KVM Card Protecting Snmp Traffic Onboard Administrator HP Integrity Server Blade ComponentsHP Integrity Server Blade Components Onboard Administrator Bay 2 redundant if used Onboard Administrator Active LEDPorts and LEDs HP Integrity rx2660 Server Components HP Integrity rx3600 and rx6600 Server ComponentsUSB Ports Console Serial Port UID Button/LED RS-232 Standby Power Solid green ILO 2 MP Self Test ILO 2 MP Status LEDsILO 2 MP Status LEDs ILO 2 MP Reset Button Console Serial Port and Auxiliary Serial PortConsole Serial Port Pinouts ILO 2 MP LAN Port ILO 2 MP LAN LEDs4lists the iLO 2 MP LAN link status LEDs and states 5lists the iLO 2 MP LAN link speed LEDs and states Setting Up and Connecting the Console Setup Checklist Use the checklist in -1to help set up iLO 2 MPSetup Checklist Setup Flowchart Setup Flowchart Preparing to Set Up iLO 2 MP Determining the Physical iLO 2 MP Access MethodDetermining the iLO 2 MP LAN Configuration Method LAN Configuration Methods Configuring the iLO 2 MP LAN Using Dhcp and DNS Configuring the iLO 2 MP LAN Using ARP PingConfiguring the iLO 2 MP LAN Using Dhcp and DNS ARP Ping Commands Appropriate IP address Configuring the iLO 2 MP LAN Using the Console Serial Port Configuring the iLO 2 MP LAN Using the Console Serial Port Physically Connecting the Server Blade to the iLO 2 MP Logging In to the iLO 2 MPFollowing is the MP Main Menu Auto-Login Physically Connecting the Server Blade to the iLO 2 MPSSH/telnet connection with iLO 2 MP ILO Web GUI Connection User management, and resetting default settings It allows access to all but configuration changes and userRequired to periodically change configuration settings Operators There is already a user registered with the same login name User LoginDisabled Local database with user administration right Connecting the SUV Cable to the Server Blade SUV Cable Additional Setup Modifying User Accounts and Default Passwords Setting Up Security Setting Security AccessAdditional Setup Page Interacting with the iLO 2 MP Using the Web GUI Interacting with the iLO 2 MP Using the Web GUI Accessing the Host Console Using the TUI Accessing Online HelpAccessing the Host Console Help System Accessing the Host Console Using Smash SM CLP Accessing iLO 2 MP Using Onboard AdministratorAccessing the Graphic Console Using VGA Accessing the Host Console Configuring Dhcp Display current LAN settingsModify the MP Dhcp status Modify the MP IP address Configuring DNS Configuring Ldap Extended Schema Configuring Ldap Extended Schema Configuring Ldap Lite Default Schema Login Process Using Directory Services with Extended Ldap Setting up Directory Security Groups Set up directory security groupsEnter G. The current group configuration appears Configuring Ldap Lite Default Schema Configuring DHCP, DNS, LDAP, and Ldap Lite MP Command Interfaces 1lists and describes the available MP command interfacesMP Command Interfaces Text User Interface MP Main Menu Commands MP Main Menu CommandsMP Main Menu command descriptions are listed as follows MP Main Menu CO Console Leave the Main Menu and enter console mode CM Command Mode Enter command modeVFP Virtual Front Panel Simulate the display panel CL Console Log View the history of the console output Events 4defines alert severity levelsAlert Levels Command Menu Command Menu CommandsExit Exit the iLO 2 MP Command Line Interface Scripting Expect Script Example # User #Run SL command to dump logs BP Reset BMC passwords Blade Display Blade parameters CA Configure asynchronous local serial port Normal operation, any issues have been acknowledgedDegraded 4800, 9600, 19200, 38400, 115200 bit/sec Command access level Login access Date Display dateDF Display FRU information Server blade usage DNS DNS settings FW Upgrade the MP firmwareCommand access level MP configuration access DI Disconnect LAN, WEB, SSH or Console ID System information settings IT Inactivity timeout settingsBlocking other ports when inactive LC LAN configuration usage Ldap Ldap directory settings For example cn=MP Server,ou=Management Devices,o=hp LOC Locator UID LED configuration See also LOGIN, USLM License management LS LAN status PC Power control access PM Power regulator mode PR Power restore policy configuration PS Power statusRB Reset BMC RS Reset system through the RST signal SA Set access LAN/WEB/SSH/IPMI over LAN portsSnmp Configure Snmp parameters See also TC SO Security option help SS System StatusSee also ID TC System reset through Init or TOC signal Sysrev Firmware revisionsTE Send a message to other mirroring terminals See also PS UC User Configuration users, passwords, and so on Not bypass host authentication requirements, if anyCommand CO Access right XD iLO 2 MP Diagnostics or reset WHO Display a list of iLO 2 MP connected usersSee also DI, TE System Status tab enables you to access the following pages Web GUISystem Status Status Summary General Status Summary Active Users 6lists the fields and descriptionsStatus Summary General Page Description Server Status General 7lists the fields and descriptionsActive Users Page Description System Power Server Status Identification8lists the fields and descriptions Server Status General Page Description System Event Log 9lists the fields and descriptionsServer Status Identification Page Description 10lists the fields, buttons, and descriptions 10 System Event Log Page Description Integrated Remote Console vKVM IRC Requirements and Usage VKVM-Supported Resolutions and Browser Configurations Before running the IRC, note the followingLimitations of the vKVM Mouse and Keyboard Browsers and Client Operating Systems that Support vKVM Accessing the IRC Select None for mouse pointer schemeIRC page refreshes every 10 seconds 11lists the fields, buttons, and actions 11 IRC Page DescriptionIRC displays the host server’s graphics console Figure Fullscreen Resizes the IRC 12 IRC Window Description Integrated Remote Console FullscreenThumb Tack Away Remote Serial Console Remote Serial Console Using this feature you can do the following 10 Remote Serial Console Window Virtual Media Virtual Serial Port Using iLO 2 MP Virtual Media Devices 11 Virtual Media Virtual CD/DVD Select Local Media Drive 13 Virtual Media Dialog Box after connection Open VMS Creating the iLO 2 MP Disk Image Files 14 Local Image File Dialog Box 15 Create Media Image Dialog Box Virtual Floppy/USB Key Virtual Media Applet Timeout Supported Operating Systems and USB Support for vMedia Power Management Power & ResetJava Plug-in Version Client Operating System and Browser Support for vMedia 15 Power & Reset Page Description Current power state of the system15lists the fields, buttons, and descriptions System Power Restore SettingsWhen ac was removed or lost Control is required to power on the system 16 Power Meter Readings Page Description Power Regulator Maximum PowerMinimum Power 17lists the fields, buttons, and descriptions Administration 17 Power Regulator Page Description Firmware Upgrade Licensing Pack features. Fields are case sensitive 18 Licensing Page DescriptionLicensing Key Status Is an Evaluation license User Administration Local Accounts 21 Local Accounts Group Accounts 19 Local Accounts Page Description20lists the fields, buttons, and descriptions Access Settings Serial Login Options20 Group Accounts Page Description 21lists the fields, buttons, and descriptions Serial 21 LAN Page Description Login Options 23 Login Options Page Description22lists the fields, buttons, and descriptions 22 Serial Page Description Current Ldap Parameters 24lists the fields and descriptions Network Settings Network Settings Standard24 Current Ldap Parameters Page Description Domain Name Server 25lists the fields, buttons, and descriptions25 Standard Page Description Is automatically supplied Snmp Settings 26lists the fields, buttons, and descriptions26 DNS Page Description Ilo.hp.com. You can enter a new DNS name 27 Snmp Settings Page Description 27lists the fields and descriptions Click OK and reset the iLO 2 MP 28 Onboard Administrator Page DescriptionBL c-Class 28lists the fields and descriptions Help Enclosure Name Smash Server Management Command Line Protocol SM CLP Features and Functionality OverviewSmash Server Management Command Line Protocol Accessing the SM CLP Interface Changing the iLO 2 Default Interface to SM CLPSM CLP Session Exiting the SM CLP Interface Using the SM CLP Interface Mpcmsa Command Line Terms Command VerbsSupported Command Verbs SM CLP Syntax Command Targets Command Target PropertiesUsing the target’s relative path form map1 target Using implicit current target’s with the verb show Command Options 30shows the available command options 30 Command OptionsCharacter Set, Delimiters, Special, and Reserved Characters 31 SM CLP Reserved Characters and Character Sequences System Reset Power Status and Power Control Resetting the SystemSystem1 Target Target SYSTEM1 Displaying Power Status Powering Off the SystemPowering On the System Map1 iLO 2 Target Text Console Services Resetting the iLO 2 MPMap1 Example Opening the MP Main Menu from SM CLP Switching Between the System Console and the SM CLP Opening the System Console Interface from SM CLP34 /map1/textredirectsap1 Properties Target system1/consoles1/textredirectsap1 Firmware Revision Display and Upgrade SM CLP Firmware Targets Displaying Firmware Revisions This example displays only the iLO 2 MP firmware revision Remote Access Configuration Telnet SM CLP TargetsThis example displays all the firmware revisions Disable Telnet Service Target map1/sshsvc1 Network Configuration Disable SSH ServiceSSH Examples SM CLP Network Targets, Properties, and Verbs Target map1/enetport1/lanendpt1/ipendpt1 43 ipendpt1 PropertiesTarget map1/dhcpendpt1 44 dhcpendpt1 Properties Target map1/dnsendpt1 Dnsendpt1 PropertiesTarget map1/enetport1/lanendpt1/ipendpt1/gateway1 46 gateway1 Properties SM CLP Network Command Examples SetDetermine current IP Address Determine Subnet Mask VMedia User Accounts Configuration Target map1/group1Target map1/group1/account# Ldap Configuration Target map1/settings1/oemhpldapsettings1User Account Examples Ldap Configuration Examples 52 oemhpldapsettings1 PropertiesConfigure Ldap parameters This command 146 Directory Services Features Supported by Directory Integration Directory Services Installation PrerequisitesInstalling Directory Services Installing and Configuring Directory Services Schema Documentation Directory Services SupportEDirectory Installation Prerequisites Required Schema Software Schema InstallerSchema Preview Screen Setup Screen Schema Setup Screen Results Screen Directory Services for Active Directory Management Snap-In InstallerActive Directory Installation Prerequisites Preparing Directory Services for Active Directory Directory Services for Active DirectoryClick OK Installing and Initializing Snap-Ins for Active Directory NewHPObject Create New HP Management Object Dialog Box Select Users Dialog Box Directory Services Objects Active Directory Snap-InsManaging HP Devices In a Role HP Devices Tab Managing Users In a Role Setting Login Restrictions 10 Role Restrictions Tab Setting Time Restrictions 12 New IP/Mask Dialog Box Setting User or Group Role Rights 1lists the available Lights Out Management rightsLights Out Management Rights Directory Services for eDirectory Installing and Initializing Snap-In for eDirectoryDirectory Services for eDirectory Creating Objects Creating Roles 15 Select Object Subtype Dialog Box 16 Setting Role Rights Add users to the remoteMonitors role using the Members tab Directory Services Objects for eDirectory Adding Role Managed DevicesAdding Members Setting Role Restrictions 18 Members Tab eDirectory Setting Time Restrictions Setting Lights-Out Management Device RightsDefining Client IP Address or DNS Name Access Installing the Java Runtime Environment 2lists the available management device rightsManagement Device Rights Installing Snap-Ins Extending SchemaRun this file by executing the following command Verifying Snap-In Installation and Schema Extension User Login Using Directory Services Certificate Services Directory-Enabled Remote ManagementInstalling Certificate Services Verifying Directory Services Using Existing Groups Using Multiple Roles Directory-Enabled Remote Management Creating Roles that Follow Organizational StructureRestricting Roles Role Time Restrictions How Directory Login Restrictions Are Enforced IP Address Range RestrictionsIP Address and Subnet Mask Restrictions DNS-Based Restrictions 24shows the user and role access restrictions How User Time Restrictions Are Enforced User Address Restrictions Creating Multiple Restrictions and Roles Directory Services Schema Ldap Directory Services Schema Ldap Core Classes Core AttributesCore Class Definitions Core Attribute Definitions 8through -13define the HP management core class attributes HpqRoleIPRestrictionDefault 11 hpqRoleIPRestrictionDefault HpqRoleTimeRestriction 13 hpqRoleTimeRestrictionHpqTargetMembership 10 hpqTargetMembership HpqRoleIPRestrictions 12 hpqRoleIPRestrictions ILO 2 MP-Specific Ldap OID Classes and Attributes ILO 2 MP ClassesILO 2 MP Attributes ILO 2 MP Class Definitions ILO 2 MP Attribute Definitions 17through -22define the iLO 2 MP core class attributes HpqLOMRightLocalUserAdmin 21 hpqLOMRightLocalUserAdmin HpqLOMRightConfigureSettings 22 hpqLOMRightConfigureSettings 186 Glossary 187 To the client Glossary Domain 189 Ipmi MAP address 191 Snmp User 193 194 Directory objects, configuring for Active Directory 195 Index LAN 197 SMASH, 123 Snmp 199