199

accessing graphic console, 51 virtual front panel (VFP), 61 virtual media

access right, 20 CD/DVD, 97

disk image files, 100

SM CLP command verbs, 142 vKVM, 88

web GUI active users, 83

DNS settings, configure, 118 firmware upgrade, 109 group accounts, 112

help, 122 interacting with, 49 LAN access settings, 113 LDAP parameters, 116 licensing, 110

local accounts, 111 login options, 115 network settings, 117 Onboard Administrator, 121 power & reset, 103

power meter readings, 105 power regulator, 107 remote console IRC, 88 remote serial console, 93

serial port parameters, setting, 114 server status general, 84

server status identification, 85 SNMP settings, 119

system event log, 86 system status, 82 virtual media, 95

WHO command, 81

X command, 63

XD command, 82

Page 199

Image 199

HP Integrity iLO 2 MP 5991-6005 manual 199

Contents

HP Integrity iLO 2 MP Operations Guide Copyright 2008, Hewlett-Packard Development Company, L.P Table of Contents Setting Up and Connecting the Console System Status Status Summary General 103 100101 102 Target map1/sshsvc1 137 SSH Examples 138 Target map1 131 Map1 Example 132 Resetting the iLO 2 MP130 Target SYSTEM1 130 147 195 187Page Licensing Power & ResetLogin Options Local Image File Dialog Box Logon Hours Screen Admin User Gaining Admin Role Right, ExampleUser and Role Access Restrictions Restricting the Reset Role Swid# Properties Swinstallsvc1 PropertiesLicensing Page Description LAN Page Description Cddr1 Properties Enetport1 PropertiesIpendpt1 Properties Gateway1 Properties Rx7640 Rx8640 Superdome sx2000 Intended AudienceNew and Changed Information in This Edition Publishing History 5991-5992 HP-UX 11i BL860c Document OrganizationPublishing History Details 5991-6005 HP-UX 11i BL870c Related Information Typographic Conventions Windows Operating System Information Warranty Information HP Encourages Your Comments Standard Features FeaturesFeatures Virtual Front Panel Multiple Access MethodsUser Access Control Always-on Capability Dhcp and DNS Support Firmware UpgradesIpmi over LAN Internal Subsystem Information Advanced Features Ldap Lite Power Meter ReadingsHP Insight Power Manager Advanced Pack License Supported Systems and Required Components Matrix Supported Systems and Required Components and CablesILO 2 MP Supported Browsers and Client Operating Systems Obtaining and Activating iLO 2 MP Advanced Pack Licensing Security Password- and key-based for secure shell SSHAuthorization Login Protecting Snmp Traffic Lights-Out Advanced/KVM Card HP Integrity Server Blade Components Onboard AdministratorHP Integrity Server Blade Components Onboard Administrator Active LED Onboard Administrator Bay 2 redundant if usedPorts and LEDs Console Serial Port UID Button/LED RS-232 HP Integrity rx2660 Server ComponentsHP Integrity rx3600 and rx6600 Server Components USB Ports ILO 2 MP Status LEDs Standby Power Solid green ILO 2 MP Self TestILO 2 MP Status LEDs Console Serial Port and Auxiliary Serial Port ILO 2 MP Reset ButtonConsole Serial Port Pinouts 5lists the iLO 2 MP LAN link speed LEDs and states ILO 2 MP LAN PortILO 2 MP LAN LEDs 4lists the iLO 2 MP LAN link status LEDs and states Setting Up and Connecting the Console Use the checklist in -1to help set up iLO 2 MP Setup ChecklistSetup Checklist Setup Flowchart Setup Flowchart LAN Configuration Methods Preparing to Set Up iLO 2 MPDetermining the Physical iLO 2 MP Access Method Determining the iLO 2 MP LAN Configuration Method Configuring the iLO 2 MP LAN Using ARP Ping Configuring the iLO 2 MP LAN Using Dhcp and DNSConfiguring the iLO 2 MP LAN Using Dhcp and DNS Appropriate IP address ARP Ping Commands Configuring the iLO 2 MP LAN Using the Console Serial Port Configuring the iLO 2 MP LAN Using the Console Serial Port Logging In to the iLO 2 MP Physically Connecting the Server Blade to the iLO 2 MPFollowing is the MP Main Menu ILO Web GUI Connection Auto-LoginPhysically Connecting the Server Blade to the iLO 2 MP SSH/telnet connection with iLO 2 MP Operators User management, and resetting default settingsIt allows access to all but configuration changes and user Required to periodically change configuration settings Local database with user administration right There is already a user registered with the same login nameUser Login Disabled Connecting the SUV Cable to the Server Blade SUV Cable Modifying User Accounts and Default Passwords Additional Setup Setting Security Access Setting Up SecurityAdditional Setup Page Interacting with the iLO 2 MP Using the Web GUI Interacting with the iLO 2 MP Using the Web GUI Help System Accessing the Host Console Using the TUIAccessing Online Help Accessing the Host Console Accessing iLO 2 MP Using Onboard Administrator Accessing the Host Console Using Smash SM CLPAccessing the Graphic Console Using VGA Accessing the Host Console Modify the MP IP address Configuring DhcpDisplay current LAN settings Modify the MP Dhcp status Configuring DNS Configuring Ldap Extended Schema Configuring Ldap Extended Schema Login Process Using Directory Services with Extended Ldap Configuring Ldap Lite Default Schema Configuring Ldap Lite Default Schema Setting up Directory Security GroupsSet up directory security groups Enter G. The current group configuration appears Configuring DHCP, DNS, LDAP, and Ldap Lite Text User Interface MP Command Interfaces1lists and describes the available MP command interfaces MP Command Interfaces MP Main Menu MP Main Menu CommandsMP Main Menu Commands MP Main Menu command descriptions are listed as follows CL Console Log View the history of the console output CO Console Leave the Main Menu and enter console modeCM Command Mode Enter command mode VFP Virtual Front Panel Simulate the display panel 4defines alert severity levels EventsAlert Levels Command Menu Commands Command MenuExit Exit the iLO 2 MP Command Line Interface Scripting # User Expect Script Example #Run SL command to dump logs Blade Display Blade parameters BP Reset BMC passwords 4800, 9600, 19200, 38400, 115200 bit/sec CA Configure asynchronous local serial portNormal operation, any issues have been acknowledged Degraded Server blade usage Command access level Login accessDate Display date DF Display FRU information DI Disconnect LAN, WEB, SSH or Console DNS DNS settingsFW Upgrade the MP firmware Command access level MP configuration access IT Inactivity timeout settings ID System information settingsBlocking other ports when inactive Ldap Ldap directory settings LC LAN configuration usage For example cn=MP Server,ou=Management Devices,o=hp LS LAN status LOC Locator UID LED configurationSee also LOGIN, US LM License management PM Power regulator mode PC Power control access PS Power status PR Power restore policy configurationRB Reset BMC See also TC RS Reset system through the RST signalSA Set access LAN/WEB/SSH/IPMI over LAN ports Snmp Configure Snmp parameters SS System Status SO Security option helpSee also ID See also PS TC System reset through Init or TOC signalSysrev Firmware revisions TE Send a message to other mirroring terminals Access right UC User Configuration users, passwords, and so onNot bypass host authentication requirements, if any Command CO WHO Display a list of iLO 2 MP connected users XD iLO 2 MP Diagnostics or resetSee also DI, TE Status Summary General System Status tab enables you to access the following pagesWeb GUI System Status 6lists the fields and descriptions Status Summary Active UsersStatus Summary General Page Description 7lists the fields and descriptions Server Status GeneralActive Users Page Description Server Status General Page Description System PowerServer Status Identification 8lists the fields and descriptions 9lists the fields and descriptions System Event LogServer Status Identification Page Description 10 System Event Log Page Description 10lists the fields, buttons, and descriptions IRC Requirements and Usage Integrated Remote Console vKVM Browsers and Client Operating Systems that Support vKVM VKVM-Supported Resolutions and Browser ConfigurationsBefore running the IRC, note the following Limitations of the vKVM Mouse and Keyboard Select None for mouse pointer scheme Accessing the IRCIRC page refreshes every 10 seconds Fullscreen Resizes the IRC 11lists the fields, buttons, and actions11 IRC Page Description IRC displays the host server’s graphics console Figure Away 12 IRC Window DescriptionIntegrated Remote Console Fullscreen Thumb Tack Remote Serial Console Remote Serial Console 10 Remote Serial Console Window Using this feature you can do the following Virtual Serial Port Virtual Media 11 Virtual Media Using iLO 2 MP Virtual Media Devices Virtual CD/DVD Select Local Media Drive Open VMS 13 Virtual Media Dialog Box after connection 14 Local Image File Dialog Box Creating the iLO 2 MP Disk Image Files Virtual Floppy/USB Key 15 Create Media Image Dialog Box Supported Operating Systems and USB Support for vMedia Virtual Media Applet Timeout Client Operating System and Browser Support for vMedia Power ManagementPower & Reset Java Plug-in Version Current power state of the system 15 Power & Reset Page Description15lists the fields, buttons, and descriptions Control is required to power on the system System Power RestoreSettings When ac was removed or lost 16 Power Meter Readings Page Description 17lists the fields, buttons, and descriptions Power RegulatorMaximum Power Minimum Power 17 Power Regulator Page Description Administration Licensing Firmware Upgrade Is an Evaluation license Pack features. Fields are case sensitive18 Licensing Page Description Licensing Key Status 21 Local Accounts User Administration Local Accounts 19 Local Accounts Page Description Group Accounts20lists the fields, buttons, and descriptions 21lists the fields, buttons, and descriptions Access SettingsSerial Login Options 20 Group Accounts Page Description 21 LAN Page Description Serial 22 Serial Page Description Login Options23 Login Options Page Description 22lists the fields, buttons, and descriptions 24lists the fields and descriptions Current Ldap Parameters Network Settings Standard Network Settings24 Current Ldap Parameters Page Description Is automatically supplied Domain Name Server25lists the fields, buttons, and descriptions 25 Standard Page Description Ilo.hp.com. You can enter a new DNS name Snmp Settings26lists the fields, buttons, and descriptions 26 DNS Page Description 27lists the fields and descriptions 27 Snmp Settings Page Description 28lists the fields and descriptions Click OK and reset the iLO 2 MP28 Onboard Administrator Page Description BL c-Class Enclosure Name Help SM CLP Features and Functionality Overview Smash Server Management Command Line ProtocolSmash Server Management Command Line Protocol Exiting the SM CLP Interface Accessing the SM CLP InterfaceChanging the iLO 2 Default Interface to SM CLP SM CLP Session Mpcmsa Using the SM CLP Interface SM CLP Syntax Command Line TermsCommand Verbs Supported Command Verbs Using implicit current target’s with the verb show Command TargetsCommand Target Properties Using the target’s relative path form map1 target Command Options 31 SM CLP Reserved Characters and Character Sequences 30shows the available command options30 Command Options Character Set, Delimiters, Special, and Reserved Characters Target SYSTEM1 System Reset Power Status and Power ControlResetting the System System1 Target Map1 iLO 2 Target Displaying Power StatusPowering Off the System Powering On the System Opening the MP Main Menu from SM CLP Text Console ServicesResetting the iLO 2 MP Map1 Example Target system1/consoles1/textredirectsap1 Switching Between the System Console and the SM CLPOpening the System Console Interface from SM CLP 34 /map1/textredirectsap1 Properties SM CLP Firmware Targets Firmware Revision Display and Upgrade This example displays only the iLO 2 MP firmware revision Displaying Firmware Revisions Telnet SM CLP Targets Remote Access ConfigurationThis example displays all the firmware revisions Target map1/sshsvc1 Disable Telnet Service SM CLP Network Targets, Properties, and Verbs Network ConfigurationDisable SSH Service SSH Examples 44 dhcpendpt1 Properties Target map1/enetport1/lanendpt1/ipendpt143 ipendpt1 Properties Target map1/dhcpendpt1 46 gateway1 Properties Target map1/dnsendpt1Dnsendpt1 Properties Target map1/enetport1/lanendpt1/ipendpt1/gateway1 Determine Subnet Mask SM CLP Network Command ExamplesSet Determine current IP Address VMedia Target map1/group1 User Accounts ConfigurationTarget map1/group1/account# Target map1/settings1/oemhpldapsettings1 Ldap ConfigurationUser Account Examples 52 oemhpldapsettings1 Properties Ldap Configuration ExamplesConfigure Ldap parameters This command 146 Directory Services Installing and Configuring Directory Services Features Supported by Directory IntegrationDirectory Services Installation Prerequisites Installing Directory Services Directory Services Support Schema DocumentationEDirectory Installation Prerequisites Setup Screen Required Schema SoftwareSchema Installer Schema Preview Screen Results Screen Schema Setup Screen Management Snap-In Installer Directory Services for Active DirectoryActive Directory Installation Prerequisites Directory Services for Active Directory Preparing Directory Services for Active DirectoryClick OK Installing and Initializing Snap-Ins for Active Directory NewHPObject Create New HP Management Object Dialog Box Select Users Dialog Box Active Directory Snap-Ins Directory Services ObjectsManaging HP Devices In a Role HP Devices Tab Managing Users In a Role 10 Role Restrictions Tab Setting Time Restrictions Setting Login Restrictions 12 New IP/Mask Dialog Box 1lists the available Lights Out Management rights Setting User or Group Role RightsLights Out Management Rights Creating Objects Directory Services for eDirectoryInstalling and Initializing Snap-In for eDirectory Directory Services for eDirectory 15 Select Object Subtype Dialog Box Creating Roles Add users to the remoteMonitors role using the Members tab 16 Setting Role Rights Adding Role Managed Devices Directory Services Objects for eDirectoryAdding Members 18 Members Tab eDirectory Setting Role Restrictions Setting Lights-Out Management Device Rights Setting Time RestrictionsDefining Client IP Address or DNS Name Access 2lists the available management device rights Installing the Java Runtime EnvironmentManagement Device Rights Extending Schema Installing Snap-InsRun this file by executing the following command Verifying Snap-In Installation and Schema Extension User Login Using Directory Services Verifying Directory Services Certificate ServicesDirectory-Enabled Remote Management Installing Certificate Services Using Multiple Roles Using Existing Groups Role Time Restrictions Directory-Enabled Remote ManagementCreating Roles that Follow Organizational Structure Restricting Roles DNS-Based Restrictions How Directory Login Restrictions Are EnforcedIP Address Range Restrictions IP Address and Subnet Mask Restrictions How User Time Restrictions Are Enforced 24shows the user and role access restrictions Creating Multiple Restrictions and Roles User Address Restrictions Directory Services Schema Ldap Directory Services Schema Ldap Core Attributes Core ClassesCore Class Definitions 8through -13define the HP management core class attributes Core Attribute Definitions HpqRoleIPRestrictions 12 hpqRoleIPRestrictions HpqRoleIPRestrictionDefault 11 hpqRoleIPRestrictionDefaultHpqRoleTimeRestriction 13 hpqRoleTimeRestriction HpqTargetMembership 10 hpqTargetMembership ILO 2 MP Class Definitions ILO 2 MP-Specific Ldap OID Classes and AttributesILO 2 MP Classes ILO 2 MP Attributes 17through -22define the iLO 2 MP core class attributes ILO 2 MP Attribute Definitions HpqLOMRightConfigureSettings 22 hpqLOMRightConfigureSettings HpqLOMRightLocalUserAdmin 21 hpqLOMRightLocalUserAdmin 186 187 Glossary Glossary To the client 189 Domain Ipmi 191 MAP address Snmp 193 User 194 195 Directory objects, configuring for Active Directory Index 197 LAN SMASH, 123 Snmp 199