Using the Browser-Based Interface | IBM Partner Pavilion BMD00082

SmartConnect User’s Guide

Using the Browser-Based Interface

Use the management system to access the switch through a Web session. Choose menu I/O Module Tasks > Configuration from the navigation pane on the left. Select a bay number and click Advanced Configuration > Start Telnet/Web Session > Start Web Session. A Web browser window opens a connection to the VSE SmartConnect software interface on the switch.

The switch’s Browser-Based Interface (BBI) provides access to the common configuration, management and operation features through the Web browser.

Access via HTTP

BBI access is enabled by default. To access the switch via the BBI, open a Web browser win- dow and type in the URL using the IP interface address of the switch. For example:

http://192.168.70.127

Access via HTTPS

BBI access via HTTPS is disabled by default. Use the following CLI command to enable HTTPS access:

>>/cfg/sys/access/https/access ena

Before you can access the BBI via HTTPS, you must generate a certificate to be used during the key exchange. Use the CLI command below to generate the HTTPS certificate. A default certificate is created the first time you enable HTTPS, but you can create a new certificate defining the information you want to be used in the various fields.

>>/cfg/sys/access/https/generate

Country Name (2 letter code) [ ]: <country code>

State or Province Name (full name) []: <state>

Locality Name (eg, city) []: <city>

Organization Name (eg, company) []: <company>

Organizational Unit Name (eg, section) []: <organizational unit>

Common Name (eg, YOUR name) []: <name>

Email (eg, email address) []: <email address>

Confirm generating certificate? [y/n]: y

Generating certificate. Please wait (approx 30 seconds) restarting SSL agent

68 Chapter 6: Configuring Switch Access

BMD00082, February 2009

Image 70

IBM Partner Pavilion BMD00082 manual Using the Browser-Based Interface, Access via Https

Contents

User’s Guide SmartConnect User’s Guide Contents Switch Virtualization Part 2 BBI Reference Boot Management Switch Statistics SmartConnect User’s Guide Preface Who Should Use This User’s Guide What You’ll Find in This User’s Guide Part 1 Basic Concepts and ConfigurationPart 2 BBI Reference Typographic Conventions How to Get HelpTypographic Conventions 10 „ Preface Part 1 Basic Concepts & Configuration 12 „ Part 1 Basic Concepts & Configuration VSE SmartConnect Software Operation VSE SmartConnect Software Overview 14 „ VSE SmartConnect Software Operation Configuring the Chassis Processor Blades Configuring the Chassis Management SystemConfiguring the Upstream Networking Device VSE SmartConnect Software Quick Start 16 „ VSE SmartConnect Software Operation Getting Started with the Browser- Based Interface Web Browser Set UpRequirements ASmartConnect Login Prompt Starting the BBI Bbbi Startup Screen Updating the Software Image Transferring the New Image to the SwitchLoading the New Software Image CBoot Management Window shown with Stacking enabled Uploading a Software Image from the Switch Selecting a Software Image to Run Selecting a Configuration Block Active, backup, or factory Resetting the Switch Switch Virtualization Port Groups Virtual Switch GroupsVirtual Machine Groups Link Aggregation Network Segmentation Port AccessVLANs Port-Based Vlan Tagging Defined VLANs Trunking External Trunks ATrunking External Ports Trunking Rules Statistical Load Distribution Built-In Fault ToleranceSwitch Failover Link Aggregation Control Protocol Setting the Number of Links to Trigger Failover Configuring Switch Failover Internal Trunks CTrunking Internal Ports Igmp Snooping Configuring a Backup Server Port ServerMobility General Configuration 1ServerMobility General Configuration Fields Configuration Port Configuration2ServerMobility Port Configuration Fields Dhcp Server Configuration SmartConnect User’s Guide 42 „ Switch Virtualization Stacking Stack Membership BackupStacking Requirements Master Master and Backup Selection Master and Backup Behavior Configuring a Stack Stack Member Numbers Configuring Each Switch Configure the Stack Trunk ports optional # cfg/stack/mif Locating the Master Switch Internal Management IP Interface Additional Master ConfigurationViewing Stack Connections CStack Switch Configuration Window Binding Members to the Stack Configuring an External IP Address for the Stack DStack IP Interfaces Configuration Window Managing a Stack EPort Status with Stacking Stacking Port Numbers Stacking Internal Port SettingsAdditional Internal Port Settings for Stacking Stacking VLANs Stacking Boot Management buttons Stacking Boot ManagementUpgrading Stack Software Info/stack/pushstat Command Reference CLI Menus Menu Summary „ Statistics Menu „ Boot Options Menu Viewing Pending Changes Viewing, Applying, and Saving ChangesApplying Pending Changes Saving the Configuration # save Configuring Switch Access Management Module Setup Configuring the Default Gateway Factory Default vs. MM Assigned IP AddressesSwitch IP Addresses, Based on Switch-Module Bay Numbers Configuring Management Module for Switch Access ASwitch Configuration in the Management Module Window Cfg/sys/access/https/access e Using Telnet Connect to the Switch via SSH Access via Http Using the Browser-Based InterfaceAccess via Https Https//192.168.70.127 Securing Access to the Switch Setting Allowable Source IP Address Ranges Configuring an IP Address Range for the Management Network User Access Levels Radius Authentication and AuthorizationConfiguring Radius User Accounts User Name/Access User-Service-Type Value 3SmartConnect-Proprietary Attributes for Radius Authorization TACACS+ AuthenticationTACACS+ Authentication Features Configuring TACACS+ Authentication End User Access Control Considerations for Configuring End User Accounts Configuring End-User Access Control Logging in to an End-User Account Protected Mode CSwitch Protected Mode Configuration Window Secure Shell and Secure Copy Configuring SSH/SCP Features Enabling or Disabling SCP Apply and Save Using SSH and SCP Client Commands Configuring the SCP Administrator PasswordTo Log In to the Switch To Download the Switch Configuration Using SCP To Upload the Configuration to the Switch Apply and Save the Configuration SSH and SCP Encryption of Management Messages Generating RSA Host and Server Keys for SSH Access Cfg/sys/sshd/skeygen Using SecurID with SSH SSH/SCP Integration with Radius AuthenticationSSH/SCP Integration with TACACS+ Authentication SecurID Support Using SecurID with SCP 86 „ Configuring Switch Access Part 2 BBI Reference 88 „ Part 2 BBI Reference Understanding the Browser-Based Interface SmartConnect BBI Screen AMain VSE SmartConnect Software Screen Port Status Area 1Port Status Colors Menu Area Bvse SmartConnect Software Menu Area Configuration Window Configuration Buttons 94 „ Understanding the Browser-Based Interface Virtual Switch Groups Port Groups Virtual Machine Groups Link Aggregation Assigning Ports to VSGs Virtual Switch Groups MembershipSwitch Management Ports Assigning Virtual Machines to VSGs Delete Virtual Switch Group Settings Virtual Switch Groups SettingsSwitch Failover Igmp Snooping Reset to DefaultLink Aggregation Control Protocol Bpdu Policy Virtual Switch Groups ACL QoS Add or remove ACLs or ACL sets for the specified VSG ports Switch Policies Internal Port Settings Internal Port Settings Fields External Port Settings 2External Port Settings Fields Management Port Settings Management Port Settings Fields Port Mirroring ACL Configuration Table Access Control ListsSearching for an Existing ACL Adding a New ACL „ or 4ACL Configuration Fields Access Control ListAdd or Edit ACLs Number, just as with sport above 6ACL Remarking Configuration Fields ACL Metering Settings5ACL Metering Configuration Fields ACL Remark Control Access Control List Sets 7ACL Sets Configuration Fields Quality of Service Ieee 8021p for MAC-Level QoS 8DSCP Configuration Fields DiffServ Code Point QoS 4FB2F3A86E3435548B0BD82DF2B7E949 ServerMobility General Configuration 9ServerMobility General Configuration Fields ServerMobility Port Configuration 10ServerMobility Port Configuration Fields System Settings 1SNMP Management Fields Management SettingsSystem Log 2Management Fields General Settings 3General Configuration Fields 4Built-In User Administration Fields Local User AdministrationBuilt-In Users User Configuration 5Local User Administration Fields Remote User Administration 6RADIUS Fields TACACS+ 7TACACS+ Fields NTP Settings Time Services SettingsGeneral Settings 8Time Services General Settings Fields Switch Protected Mode ErrDisable System Settings10ErrDisable Configuration Fields 11Management Network Configuration Fields Management Network SettingsBootstrap Protocol Settings 12BOOTP Configuration Fields Switch Telnet Settings SSH/Telnet SettingsSwitch SSH Settings 13SSH Configuration Fields Virtual Machine Group Settings 15VM Group Configuration Fields Syslog Settings Stack Switch Configuration Stacking ConfigurationStack Switch Configuration Fields „ Stack Switch Configuration on „ Managing a Stack on Stack IP Interfaces 132 „ System Settings Boot Management General Boot Settings Boot Management buttons Figuration block Boot Schedule 2Boot Schedule Fields 136 „ Boot Management Switch Information Access Control List Information Access Control List Sets Information ARP Cache Information Bootstrap Protocol Relay Information2BOOTP Relay Information Fields 1ARP Cache Information Fields Forwarding Database Information 3FDB Information Fields Virtual Switch Group Information 4Virtual Switch Group Information Fields Igmp Snooping Multicast Router Ports Igmp InformationIgmp Multicast Groups 5IGMP Multicast Groups information IP Information Default Gateways8Default Gateway information IP Interfaces Link Status Information 9Link Status information ServerMobility General Information 10ServerMobility General information ServerMobility Port Information Server Mobility Port information SNMPv3 Information 12SNMPv3 information SNMPv3 information VacmSecurityToGroup Table Syslog Messages SnmpTargetParams Table Transceiver information Port Transceiver StatusTrunk Groups Information Trunk Group information Virtual Machine Group Information User Access informationUser Information VM Group information 152 „ Switch Information Access Control List Statistics Switch Statistics1ACL Statistics Layer 3 Statistics Address Resolution Protocol StatisticsFDB Statistics 2FDB Statistics Icmp Statistics 4ICMP Statistics TCP Statistics 5TCP Statistics UDP Statistics 6UDP Statistics Igmp Group Snooping Statistics Summary 7IGMP Snooping Statistics IP Statistics 8IP Statistics MP-Specific Information Dont Fragment flag was set 9CPU Utilization CPU UtilizationMP Packet Statistics 10MP Packet Statistics Port Statistics Switch Ports Statistics SummaryNetwork Time Protocol Statistics NTP Statistics Symbols Index TACACS+