Manuals / HP / Computer Equipment / All in One Printer

HP Integrity iLO 2 MP 5991-6005 manual Logon Hours Screen, New IP/Mask Dialog Box

Models: Integrity iLO 2 MP 5991-6005

1 199

Page 12

7-11	Logon Hours Screen	161
7-12 New IP/Mask Dialog Box		161
7-13 Lights Out Management Tab		162
7-14 Roles and Devices Example		163
7-15 Select Object Subtype Dialog Box		164
7-16	Setting Role Rights	165
7-17 Role Managed Devices Subtab		166
7-18	Members Tab (eDirectory)	167
7-19 Role Restrictions Subtab (eDirectory)		167
7-20 Add New Restriction Dialog Box		168
7-21Lights-Out Management Device Rights Tab		169
7-22 Admin User Gaining Admin Role Right, Example 1		175
7-23 Admin User Gaining Admin Role Right, Example 2		175
7-24 User and Role Access Restrictions		177
7-25	User Time Restrictions	178
7-26	Restricting General Use	179
7-27 Restricting the Reset Role		179

12 List of Figures

Page 12

Image 12

HP Integrity iLO 2 MP 5991-6005 manual Logon Hours Screen, New IP/Mask Dialog Box, Lights Out Management Tab

Contents

HP Integrity iLO 2 MP Operations Guide Copyright 2008, Hewlett-Packard Development Company, L.P Table of Contents Setting Up and Connecting the Console System Status Status Summary General 100 101102 103Target map1 131 Map1 Example 132 Resetting the iLO 2 MP 130Target SYSTEM1 130 Target map1/sshsvc1 137 SSH Examples 138147 187 195Page Power & Reset Login OptionsLocal Image File Dialog Box LicensingAdmin User Gaining Admin Role Right, Example User and Role Access RestrictionsRestricting the Reset Role Logon Hours ScreenSwinstallsvc1 Properties Licensing Page DescriptionLAN Page Description Swid# PropertiesEnetport1 Properties Ipendpt1 PropertiesGateway1 Properties Cddr1 PropertiesIntended Audience New and Changed Information in This EditionPublishing History Rx7640 Rx8640 Superdome sx2000Document Organization Publishing History Details5991-6005 HP-UX 11i BL870c 5991-5992 HP-UX 11i BL860cTypographic Conventions Related InformationWarranty Information HP Encourages Your Comments Windows Operating System InformationFeatures Standard FeaturesFeatures Multiple Access Methods User Access ControlAlways-on Capability Virtual Front PanelFirmware Upgrades Ipmi over LANInternal Subsystem Information Dhcp and DNS SupportAdvanced Features Power Meter Readings HP Insight Power ManagerAdvanced Pack License Ldap LiteSupported Systems and Required Components and Cables ILO 2 MP Supported Browsers and Client Operating SystemsObtaining and Activating iLO 2 MP Advanced Pack Licensing Supported Systems and Required Components MatrixPassword- and key-based for secure shell SSH AuthorizationLogin SecurityLights-Out Advanced/KVM Card Protecting Snmp TrafficOnboard Administrator HP Integrity Server Blade ComponentsHP Integrity Server Blade Components Onboard Administrator Bay 2 redundant if used Onboard Administrator Active LEDPorts and LEDs HP Integrity rx2660 Server Components HP Integrity rx3600 and rx6600 Server ComponentsUSB Ports Console Serial Port UID Button/LED RS-232Standby Power Solid green ILO 2 MP Self Test ILO 2 MP Status LEDsILO 2 MP Status LEDs ILO 2 MP Reset Button Console Serial Port and Auxiliary Serial PortConsole Serial Port Pinouts ILO 2 MP LAN Port ILO 2 MP LAN LEDs4lists the iLO 2 MP LAN link status LEDs and states 5lists the iLO 2 MP LAN link speed LEDs and statesSetting Up and Connecting the Console Setup Checklist Use the checklist in -1to help set up iLO 2 MPSetup Checklist Setup Flowchart Setup FlowchartPreparing to Set Up iLO 2 MP Determining the Physical iLO 2 MP Access MethodDetermining the iLO 2 MP LAN Configuration Method LAN Configuration MethodsConfiguring the iLO 2 MP LAN Using Dhcp and DNS Configuring the iLO 2 MP LAN Using ARP PingConfiguring the iLO 2 MP LAN Using Dhcp and DNS ARP Ping Commands Appropriate IP addressConfiguring the iLO 2 MP LAN Using the Console Serial Port Configuring the iLO 2 MP LAN Using the Console Serial PortPhysically Connecting the Server Blade to the iLO 2 MP Logging In to the iLO 2 MPFollowing is the MP Main Menu Auto-Login Physically Connecting the Server Blade to the iLO 2 MPSSH/telnet connection with iLO 2 MP ILO Web GUI ConnectionUser management, and resetting default settings It allows access to all but configuration changes and userRequired to periodically change configuration settings OperatorsThere is already a user registered with the same login name User LoginDisabled Local database with user administration rightConnecting the SUV Cable to the Server Blade SUV Cable Additional Setup Modifying User Accounts and Default PasswordsSetting Up Security Setting Security AccessAdditional Setup Page Interacting with the iLO 2 MP Using the Web GUI Interacting with the iLO 2 MP Using the Web GUIAccessing the Host Console Using the TUI Accessing Online HelpAccessing the Host Console Help SystemAccessing the Host Console Using Smash SM CLP Accessing iLO 2 MP Using Onboard AdministratorAccessing the Graphic Console Using VGA Accessing the Host Console Configuring Dhcp Display current LAN settingsModify the MP Dhcp status Modify the MP IP addressConfiguring DNS Configuring Ldap Extended Schema Configuring Ldap Extended SchemaConfiguring Ldap Lite Default Schema Login Process Using Directory Services with Extended LdapSetting up Directory Security Groups Set up directory security groupsEnter G. The current group configuration appears Configuring Ldap Lite Default SchemaConfiguring DHCP, DNS, LDAP, and Ldap Lite MP Command Interfaces 1lists and describes the available MP command interfacesMP Command Interfaces Text User InterfaceMP Main Menu Commands MP Main Menu CommandsMP Main Menu command descriptions are listed as follows MP Main MenuCO Console Leave the Main Menu and enter console mode CM Command Mode Enter command modeVFP Virtual Front Panel Simulate the display panel CL Console Log View the history of the console outputEvents 4defines alert severity levelsAlert Levels Command Menu Command Menu CommandsExit Exit the iLO 2 MP Command Line Interface Scripting Expect Script Example # User#Run SL command to dump logs BP Reset BMC passwords Blade Display Blade parametersCA Configure asynchronous local serial port Normal operation, any issues have been acknowledgedDegraded 4800, 9600, 19200, 38400, 115200 bit/secCommand access level Login access Date Display dateDF Display FRU information Server blade usageDNS DNS settings FW Upgrade the MP firmwareCommand access level MP configuration access DI Disconnect LAN, WEB, SSH or ConsoleID System information settings IT Inactivity timeout settingsBlocking other ports when inactive LC LAN configuration usage Ldap Ldap directory settingsFor example cn=MP Server,ou=Management Devices,o=hp LOC Locator UID LED configuration See also LOGIN, USLM License management LS LAN statusPC Power control access PM Power regulator modePR Power restore policy configuration PS Power statusRB Reset BMC RS Reset system through the RST signal SA Set access LAN/WEB/SSH/IPMI over LAN portsSnmp Configure Snmp parameters See also TCSO Security option help SS System StatusSee also ID TC System reset through Init or TOC signal Sysrev Firmware revisionsTE Send a message to other mirroring terminals See also PSUC User Configuration users, passwords, and so on Not bypass host authentication requirements, if anyCommand CO Access rightXD iLO 2 MP Diagnostics or reset WHO Display a list of iLO 2 MP connected usersSee also DI, TE System Status tab enables you to access the following pages Web GUISystem Status Status Summary GeneralStatus Summary Active Users 6lists the fields and descriptionsStatus Summary General Page Description Server Status General 7lists the fields and descriptionsActive Users Page Description System Power Server Status Identification8lists the fields and descriptions Server Status General Page DescriptionSystem Event Log 9lists the fields and descriptionsServer Status Identification Page Description 10lists the fields, buttons, and descriptions 10 System Event Log Page DescriptionIntegrated Remote Console vKVM IRC Requirements and UsageVKVM-Supported Resolutions and Browser Configurations Before running the IRC, note the followingLimitations of the vKVM Mouse and Keyboard Browsers and Client Operating Systems that Support vKVMAccessing the IRC Select None for mouse pointer schemeIRC page refreshes every 10 seconds 11lists the fields, buttons, and actions 11 IRC Page DescriptionIRC displays the host server’s graphics console Figure Fullscreen Resizes the IRC12 IRC Window Description Integrated Remote Console FullscreenThumb Tack AwayRemote Serial Console Remote Serial ConsoleUsing this feature you can do the following 10 Remote Serial Console WindowVirtual Media Virtual Serial PortUsing iLO 2 MP Virtual Media Devices 11 Virtual MediaVirtual CD/DVD Select Local Media Drive 13 Virtual Media Dialog Box after connection Open VMSCreating the iLO 2 MP Disk Image Files 14 Local Image File Dialog Box15 Create Media Image Dialog Box Virtual Floppy/USB KeyVirtual Media Applet Timeout Supported Operating Systems and USB Support for vMediaPower Management Power & ResetJava Plug-in Version Client Operating System and Browser Support for vMedia15 Power & Reset Page Description Current power state of the system15lists the fields, buttons, and descriptions System Power Restore SettingsWhen ac was removed or lost Control is required to power on the system16 Power Meter Readings Page Description Power Regulator Maximum PowerMinimum Power 17lists the fields, buttons, and descriptionsAdministration 17 Power Regulator Page DescriptionFirmware Upgrade LicensingPack features. Fields are case sensitive 18 Licensing Page DescriptionLicensing Key Status Is an Evaluation licenseUser Administration Local Accounts 21 Local AccountsGroup Accounts 19 Local Accounts Page Description20lists the fields, buttons, and descriptions Access Settings Serial Login Options20 Group Accounts Page Description 21lists the fields, buttons, and descriptionsSerial 21 LAN Page DescriptionLogin Options 23 Login Options Page Description22lists the fields, buttons, and descriptions 22 Serial Page DescriptionCurrent Ldap Parameters 24lists the fields and descriptionsNetwork Settings Network Settings Standard24 Current Ldap Parameters Page Description Domain Name Server 25lists the fields, buttons, and descriptions25 Standard Page Description Is automatically suppliedSnmp Settings 26lists the fields, buttons, and descriptions26 DNS Page Description Ilo.hp.com. You can enter a new DNS name27 Snmp Settings Page Description 27lists the fields and descriptionsClick OK and reset the iLO 2 MP 28 Onboard Administrator Page DescriptionBL c-Class 28lists the fields and descriptionsHelp Enclosure NameSmash Server Management Command Line Protocol SM CLP Features and Functionality OverviewSmash Server Management Command Line Protocol Accessing the SM CLP Interface Changing the iLO 2 Default Interface to SM CLPSM CLP Session Exiting the SM CLP InterfaceUsing the SM CLP Interface MpcmsaCommand Line Terms Command VerbsSupported Command Verbs SM CLP SyntaxCommand Targets Command Target PropertiesUsing the target’s relative path form map1 target Using implicit current target’s with the verb showCommand Options 30shows the available command options 30 Command OptionsCharacter Set, Delimiters, Special, and Reserved Characters 31 SM CLP Reserved Characters and Character SequencesSystem Reset Power Status and Power Control Resetting the SystemSystem1 Target Target SYSTEM1Displaying Power Status Powering Off the SystemPowering On the System Map1 iLO 2 TargetText Console Services Resetting the iLO 2 MPMap1 Example Opening the MP Main Menu from SM CLPSwitching Between the System Console and the SM CLP Opening the System Console Interface from SM CLP34 /map1/textredirectsap1 Properties Target system1/consoles1/textredirectsap1Firmware Revision Display and Upgrade SM CLP Firmware TargetsDisplaying Firmware Revisions This example displays only the iLO 2 MP firmware revisionRemote Access Configuration Telnet SM CLP TargetsThis example displays all the firmware revisions Disable Telnet Service Target map1/sshsvc1Network Configuration Disable SSH ServiceSSH Examples SM CLP Network Targets, Properties, and VerbsTarget map1/enetport1/lanendpt1/ipendpt1 43 ipendpt1 PropertiesTarget map1/dhcpendpt1 44 dhcpendpt1 PropertiesTarget map1/dnsendpt1 Dnsendpt1 PropertiesTarget map1/enetport1/lanendpt1/ipendpt1/gateway1 46 gateway1 PropertiesSM CLP Network Command Examples SetDetermine current IP Address Determine Subnet MaskVMedia User Accounts Configuration Target map1/group1Target map1/group1/account# Ldap Configuration Target map1/settings1/oemhpldapsettings1User Account Examples Ldap Configuration Examples 52 oemhpldapsettings1 PropertiesConfigure Ldap parameters This command 146 Directory Services Features Supported by Directory Integration Directory Services Installation PrerequisitesInstalling Directory Services Installing and Configuring Directory ServicesSchema Documentation Directory Services SupportEDirectory Installation Prerequisites Required Schema Software Schema InstallerSchema Preview Screen Setup ScreenSchema Setup Screen Results ScreenDirectory Services for Active Directory Management Snap-In InstallerActive Directory Installation Prerequisites Preparing Directory Services for Active Directory Directory Services for Active DirectoryClick OK Installing and Initializing Snap-Ins for Active Directory NewHPObject Create New HP Management Object Dialog Box Select Users Dialog Box Directory Services Objects Active Directory Snap-InsManaging HP Devices In a Role HP Devices Tab Managing Users In a Role Setting Login Restrictions 10 Role Restrictions Tab Setting Time Restrictions12 New IP/Mask Dialog Box Setting User or Group Role Rights 1lists the available Lights Out Management rightsLights Out Management Rights Directory Services for eDirectory Installing and Initializing Snap-In for eDirectoryDirectory Services for eDirectory Creating ObjectsCreating Roles 15 Select Object Subtype Dialog Box16 Setting Role Rights Add users to the remoteMonitors role using the Members tabDirectory Services Objects for eDirectory Adding Role Managed DevicesAdding Members Setting Role Restrictions 18 Members Tab eDirectorySetting Time Restrictions Setting Lights-Out Management Device RightsDefining Client IP Address or DNS Name Access Installing the Java Runtime Environment 2lists the available management device rightsManagement Device Rights Installing Snap-Ins Extending SchemaRun this file by executing the following command Verifying Snap-In Installation and Schema Extension User Login Using Directory Services Certificate Services Directory-Enabled Remote ManagementInstalling Certificate Services Verifying Directory ServicesUsing Existing Groups Using Multiple RolesDirectory-Enabled Remote Management Creating Roles that Follow Organizational StructureRestricting Roles Role Time RestrictionsHow Directory Login Restrictions Are Enforced IP Address Range RestrictionsIP Address and Subnet Mask Restrictions DNS-Based Restrictions24shows the user and role access restrictions How User Time Restrictions Are EnforcedUser Address Restrictions Creating Multiple Restrictions and RolesDirectory Services Schema Ldap Directory Services Schema LdapCore Classes Core AttributesCore Class Definitions Core Attribute Definitions 8through -13define the HP management core class attributesHpqRoleIPRestrictionDefault 11 hpqRoleIPRestrictionDefault HpqRoleTimeRestriction 13 hpqRoleTimeRestrictionHpqTargetMembership 10 hpqTargetMembership HpqRoleIPRestrictions 12 hpqRoleIPRestrictionsILO 2 MP-Specific Ldap OID Classes and Attributes ILO 2 MP ClassesILO 2 MP Attributes ILO 2 MP Class DefinitionsILO 2 MP Attribute Definitions 17through -22define the iLO 2 MP core class attributesHpqLOMRightLocalUserAdmin 21 hpqLOMRightLocalUserAdmin HpqLOMRightConfigureSettings 22 hpqLOMRightConfigureSettings186 Glossary 187To the client GlossaryDomain 189Ipmi MAP address 191Snmp User 193194 Directory objects, configuring for Active Directory 195Index LAN 197SMASH, 123 Snmp 199