HP Integrity iLO 2 MP Operations Guide
 Copyright 2008, Hewlett-Packard Development Company, L.P
 Table of Contents
 Setting Up and Connecting the Console
 System Status Status Summary General
 103
100
101
102
 Target map1/sshsvc1 137 SSH Examples 138
Target map1 131 Map1 Example 132 Resetting the iLO 2 MP
130
Target SYSTEM1 130
 147
 195
187
Page
 Licensing
Power & Reset
Login Options
Local Image File Dialog Box
 Logon Hours Screen
Admin User Gaining Admin Role Right, Example
User and Role Access Restrictions
Restricting the Reset Role
 Swid# Properties
Swinstallsvc1 Properties
Licensing Page Description
LAN Page Description
 Cddr1 Properties
Enetport1 Properties
Ipendpt1 Properties
Gateway1 Properties
 Rx7640 Rx8640 Superdome sx2000
Intended Audience
New and Changed Information in This Edition
Publishing History
 5991-5992 HP-UX 11i BL860c
Document Organization
Publishing History Details
5991-6005 HP-UX 11i BL870c
 Related Information
Typographic Conventions
 Windows Operating System Information
Warranty Information HP Encourages Your Comments
 Features
Standard Features
Features
 Virtual Front Panel
Multiple Access Methods
User Access Control
Always-on Capability
 Dhcp and DNS Support
Firmware Upgrades
Ipmi over LAN
Internal Subsystem Information
 Advanced Features
 Ldap Lite
Power Meter Readings
HP Insight Power Manager
Advanced Pack License
 Supported Systems and Required Components Matrix
Supported Systems and Required Components and Cables
ILO 2 MP Supported Browsers and Client Operating Systems
Obtaining and Activating iLO 2 MP Advanced Pack Licensing
 Security
Password- and key-based for secure shell SSH
Authorization
Login
 Protecting Snmp Traffic
Lights-Out Advanced/KVM Card
 Onboard Administrator
HP Integrity Server Blade Components
HP Integrity Server Blade Components
 Onboard Administrator Bay 2 redundant if used
Onboard Administrator Active LED
Ports and LEDs
 Console Serial Port UID Button/LED RS-232
HP Integrity rx2660 Server Components
HP Integrity rx3600 and rx6600 Server Components
USB Ports
 Standby Power Solid green ILO 2 MP Self Test
ILO 2 MP Status LEDs
ILO 2 MP Status LEDs
 ILO 2 MP Reset Button
Console Serial Port and Auxiliary Serial Port
Console Serial Port Pinouts
 5lists the iLO 2 MP LAN link speed LEDs and states
ILO 2 MP LAN Port
ILO 2 MP LAN LEDs
4lists the iLO 2 MP LAN link status LEDs and states
 Setting Up and Connecting the Console
 Setup Checklist
Use the checklist in -1to help set up iLO 2 MP
Setup Checklist
 Setup Flowchart
Setup Flowchart
 LAN Configuration Methods
Preparing to Set Up iLO 2 MP
Determining the Physical iLO 2 MP Access Method
Determining the iLO 2 MP LAN Configuration Method
 Configuring the iLO 2 MP LAN Using Dhcp and DNS
Configuring the iLO 2 MP LAN Using ARP Ping
Configuring the iLO 2 MP LAN Using Dhcp and DNS
 Appropriate IP address
ARP Ping Commands
 Configuring the iLO 2 MP LAN Using the Console Serial Port
Configuring the iLO 2 MP LAN Using the Console Serial Port
 Physically Connecting the Server Blade to the iLO 2 MP
Logging In to the iLO 2 MP
Following is the MP Main Menu
 ILO Web GUI Connection
Auto-Login
Physically Connecting the Server Blade to the iLO 2 MP
SSH/telnet connection with iLO 2 MP
 Operators
User management, and resetting default settings
It allows access to all but configuration changes and user
Required to periodically change configuration settings
 Local database with user administration right
There is already a user registered with the same login name
User Login
Disabled
 Connecting the SUV Cable to the Server Blade
 SUV Cable
 Modifying User Accounts and Default Passwords
Additional Setup
 Setting Up Security
Setting Security Access
Additional Setup
Page
 Interacting with the iLO 2 MP Using the Web GUI
Interacting with the iLO 2 MP Using the Web GUI
 Help System
Accessing the Host Console Using the TUI
Accessing Online Help
Accessing the Host Console
 Accessing the Host Console Using Smash SM CLP
Accessing iLO 2 MP Using Onboard Administrator
Accessing the Graphic Console Using VGA
 Accessing the Host Console
 Modify the MP IP address
Configuring Dhcp
Display current LAN settings
Modify the MP Dhcp status
 Configuring DNS
 Configuring Ldap Extended Schema
Configuring Ldap Extended Schema
 Login Process Using Directory Services with Extended Ldap
Configuring Ldap Lite Default Schema
 Configuring Ldap Lite Default Schema
Setting up Directory Security Groups
Set up directory security groups
Enter G. The current group configuration appears
 Configuring DHCP, DNS, LDAP, and Ldap Lite
 Text User Interface
MP Command Interfaces
1lists and describes the available MP command interfaces
MP Command Interfaces
 MP Main Menu
MP Main Menu Commands
MP Main Menu Commands
MP Main Menu command descriptions are listed as follows
 CL Console Log View the history of the console output
CO Console Leave the Main Menu and enter console mode
CM Command Mode Enter command mode
VFP Virtual Front Panel Simulate the display panel
 Events
4defines alert severity levels
Alert Levels
 Command Menu
Command Menu Commands
Exit Exit the iLO 2 MP
 Command Line Interface Scripting
 # User
Expect Script Example
 #Run SL command to dump logs
 Blade Display Blade parameters
BP Reset BMC passwords
 4800, 9600, 19200, 38400, 115200 bit/sec
CA Configure asynchronous local serial port
Normal operation, any issues have been acknowledged
Degraded
 Server blade usage
Command access level Login access
Date Display date
DF Display FRU information
 DI Disconnect LAN, WEB, SSH or Console
DNS DNS settings
FW Upgrade the MP firmware
Command access level MP configuration access
 ID System information settings
IT Inactivity timeout settings
Blocking other ports when inactive
 Ldap Ldap directory settings
LC LAN configuration usage
 For example cn=MP Server,ou=Management Devices,o=hp
 LS LAN status
LOC Locator UID LED configuration
See also LOGIN, US
LM License management
 PM Power regulator mode
PC Power control access
 PR Power restore policy configuration
PS Power status
RB Reset BMC
 See also TC
RS Reset system through the RST signal
SA Set access LAN/WEB/SSH/IPMI over LAN ports
Snmp Configure Snmp parameters
 SO Security option help
SS System Status
See also ID
 See also PS
TC System reset through Init or TOC signal
Sysrev Firmware revisions
TE Send a message to other mirroring terminals
 Access right
UC User Configuration users, passwords, and so on
Not bypass host authentication requirements, if any
Command CO
 XD iLO 2 MP Diagnostics or reset
WHO Display a list of iLO 2 MP connected users
See also DI, TE
 Status Summary General
System Status tab enables you to access the following pages
Web GUI
System Status
 Status Summary Active Users
6lists the fields and descriptions
Status Summary General Page Description
 Server Status General
7lists the fields and descriptions
Active Users Page Description
 Server Status General Page Description
System Power
Server Status Identification
8lists the fields and descriptions
 System Event Log
9lists the fields and descriptions
Server Status Identification Page Description
 10 System Event Log Page Description
10lists the fields, buttons, and descriptions
 IRC Requirements and Usage
Integrated Remote Console vKVM
 Browsers and Client Operating Systems that Support vKVM
VKVM-Supported Resolutions and Browser Configurations
Before running the IRC, note the following
Limitations of the vKVM Mouse and Keyboard
 Accessing the IRC
Select None for mouse pointer scheme
IRC page refreshes every 10 seconds
 Fullscreen Resizes the IRC
11lists the fields, buttons, and actions
11 IRC Page Description
IRC displays the host server’s graphics console Figure
 Away
12 IRC Window Description
Integrated Remote Console Fullscreen
Thumb Tack
 Remote Serial Console
Remote Serial Console
 10 Remote Serial Console Window
Using this feature you can do the following
 Virtual Serial Port
Virtual Media
 11 Virtual Media
Using iLO 2 MP Virtual Media Devices
 Virtual CD/DVD
 Select Local Media Drive
 Open VMS
13 Virtual Media Dialog Box after connection
 14 Local Image File Dialog Box
Creating the iLO 2 MP Disk Image Files
 Virtual Floppy/USB Key
15 Create Media Image Dialog Box
 Supported Operating Systems and USB Support for vMedia
Virtual Media Applet Timeout
 Client Operating System and Browser Support for vMedia
Power Management
Power & Reset
Java Plug-in Version
 15 Power & Reset Page Description
Current power state of the system
15lists the fields, buttons, and descriptions
 Control is required to power on the system
System Power Restore
Settings
When ac was removed or lost
 16 Power Meter Readings Page Description
 17lists the fields, buttons, and descriptions
Power Regulator
Maximum Power
Minimum Power
 17 Power Regulator Page Description
Administration
 Licensing
Firmware Upgrade
 Is an Evaluation license
Pack features. Fields are case sensitive
18 Licensing Page Description
Licensing Key Status
 21 Local Accounts
User Administration Local Accounts
 Group Accounts
19 Local Accounts Page Description
20lists the fields, buttons, and descriptions
 21lists the fields, buttons, and descriptions
Access Settings
Serial Login Options
20 Group Accounts Page Description
 21 LAN Page Description
Serial
 22 Serial Page Description
Login Options
23 Login Options Page Description
22lists the fields, buttons, and descriptions
 24lists the fields and descriptions
Current Ldap Parameters
 Network Settings
Network Settings Standard
24 Current Ldap Parameters Page Description
 Is automatically supplied
Domain Name Server
25lists the fields, buttons, and descriptions
25 Standard Page Description
 Ilo.hp.com. You can enter a new DNS name
Snmp Settings
26lists the fields, buttons, and descriptions
26 DNS Page Description
 27lists the fields and descriptions
27 Snmp Settings Page Description
 28lists the fields and descriptions
Click OK and reset the iLO 2 MP
28 Onboard Administrator Page Description
BL c-Class
 Enclosure Name
Help
 Smash Server Management Command Line Protocol
SM CLP Features and Functionality Overview
Smash Server Management Command Line Protocol
 Exiting the SM CLP Interface
Accessing the SM CLP Interface
Changing the iLO 2 Default Interface to SM CLP
SM CLP Session
 Mpcmsa
Using the SM CLP Interface
 SM CLP Syntax
Command Line Terms
Command Verbs
Supported Command Verbs
 Using implicit current target’s with the verb show
Command Targets
Command Target Properties
Using the target’s relative path form map1 target
 Command Options
 31 SM CLP Reserved Characters and Character Sequences
30shows the available command options
30 Command Options
Character Set, Delimiters, Special, and Reserved Characters
 Target SYSTEM1
System Reset Power Status and Power Control
Resetting the System
System1 Target
 Map1 iLO 2 Target
Displaying Power Status
Powering Off the System
Powering On the System
 Opening the MP Main Menu from SM CLP
Text Console Services
Resetting the iLO 2 MP
Map1 Example
 Target system1/consoles1/textredirectsap1
Switching Between the System Console and the SM CLP
Opening the System Console Interface from SM CLP
34 /map1/textredirectsap1 Properties
 SM CLP Firmware Targets
Firmware Revision Display and Upgrade
 This example displays only the iLO 2 MP firmware revision
Displaying Firmware Revisions
 Remote Access Configuration
Telnet SM CLP Targets
This example displays all the firmware revisions
 Target map1/sshsvc1
Disable Telnet Service
 SM CLP Network Targets, Properties, and Verbs
Network Configuration
Disable SSH Service
SSH Examples
 44 dhcpendpt1 Properties
Target map1/enetport1/lanendpt1/ipendpt1
43 ipendpt1 Properties
Target map1/dhcpendpt1
 46 gateway1 Properties
Target map1/dnsendpt1
Dnsendpt1 Properties
Target map1/enetport1/lanendpt1/ipendpt1/gateway1
 Determine Subnet Mask
SM CLP Network Command Examples
Set
Determine current IP Address
 VMedia
 User Accounts Configuration
Target map1/group1
Target map1/group1/account#
 Ldap Configuration
Target map1/settings1/oemhpldapsettings1
User Account Examples
 Ldap Configuration Examples
52 oemhpldapsettings1 Properties
Configure Ldap parameters This command
 146
 Directory Services
 Installing and Configuring Directory Services
Features Supported by Directory Integration
Directory Services Installation Prerequisites
Installing Directory Services
 Schema Documentation
Directory Services Support
EDirectory Installation Prerequisites
 Setup Screen
Required Schema Software
Schema Installer
Schema Preview Screen
 Results Screen
Schema Setup Screen
 Directory Services for Active Directory
Management Snap-In Installer
Active Directory Installation Prerequisites
 Preparing Directory Services for Active Directory
Directory Services for Active Directory
Click OK
 Installing and Initializing Snap-Ins for Active Directory
 NewHPObject
 Create New HP Management Object Dialog Box
 Select Users Dialog Box
 Directory Services Objects
Active Directory Snap-Ins
Managing HP Devices In a Role
 HP Devices Tab Managing Users In a Role
 10 Role Restrictions Tab Setting Time Restrictions
Setting Login Restrictions
 12 New IP/Mask Dialog Box
 Setting User or Group Role Rights
1lists the available Lights Out Management rights
Lights Out Management Rights
 Creating Objects
Directory Services for eDirectory
Installing and Initializing Snap-In for eDirectory
Directory Services for eDirectory
 15 Select Object Subtype Dialog Box
Creating Roles
 Add users to the remoteMonitors role using the Members tab
16 Setting Role Rights
 Directory Services Objects for eDirectory
Adding Role Managed Devices
Adding Members
 18 Members Tab eDirectory
Setting Role Restrictions
 Setting Time Restrictions
Setting Lights-Out Management Device Rights
Defining Client IP Address or DNS Name Access
 Installing the Java Runtime Environment
2lists the available management device rights
Management Device Rights
 Installing Snap-Ins
Extending Schema
Run this file by executing the following command
 Verifying Snap-In Installation and Schema Extension
 User Login Using Directory Services
 Verifying Directory Services
Certificate Services
Directory-Enabled Remote Management
Installing Certificate Services
 Using Multiple Roles
Using Existing Groups
 Role Time Restrictions
Directory-Enabled Remote Management
Creating Roles that Follow Organizational Structure
Restricting Roles
 DNS-Based Restrictions
How Directory Login Restrictions Are Enforced
IP Address Range Restrictions
IP Address and Subnet Mask Restrictions
 How User Time Restrictions Are Enforced
24shows the user and role access restrictions
 Creating Multiple Restrictions and Roles
User Address Restrictions
 Directory Services Schema Ldap
Directory Services Schema Ldap
 Core Classes
Core Attributes
Core Class Definitions
 8through -13define the HP management core class attributes
Core Attribute Definitions
 HpqRoleIPRestrictions 12 hpqRoleIPRestrictions
HpqRoleIPRestrictionDefault 11 hpqRoleIPRestrictionDefault
HpqRoleTimeRestriction 13 hpqRoleTimeRestriction
HpqTargetMembership 10 hpqTargetMembership
 ILO 2 MP Class Definitions
ILO 2 MP-Specific Ldap OID Classes and Attributes
ILO 2 MP Classes
ILO 2 MP Attributes
 17through -22define the iLO 2 MP core class attributes
ILO 2 MP Attribute Definitions
 HpqLOMRightConfigureSettings 22 hpqLOMRightConfigureSettings
HpqLOMRightLocalUserAdmin 21 hpqLOMRightLocalUserAdmin
 186
 187
Glossary
 Glossary
To the client
 189
Domain
 Ipmi
 191
MAP address
 Snmp
 193
User
 194
 195
Directory objects, configuring for Active Directory
 Index
 197
LAN
 SMASH, 123 Snmp
 199