HP 5991-6005 - Manuals

List of Tables 1 Publishing History Details............................................................................................................16 1-1 Supported Systems and Required Components Matrix...............................................................24 1-2 iLO 2 MP Supported Brows...

Table 1 Publishing History Details Publication Date Supported Servers Operating Systems Supported Document Manufacturing Part Number January 2008 BL870c BL860c rx2660 rx3600 rx6600 rx7640 1 rx8640 1 Superdome sx2000 1 HP-UX 11i v2 OpenVMS 8.3 1H1 Microsoft Windows Server 2003 Red Hat Linux and SuSE ...

Chapter 5 Configuring DHCP, DNS, LDAP, and LDAP Lite Use this chapter to configureDHCP, DNS, LDAP extended schema, and LDAP Lite default schema. Chapter 6 Using the iLO 2 MP This chapter provides information on the different interfacesyou can use to interact with the iLO 2 MP such as text user inter...

Windows Operating System Information Find information about administration of the Microsoft Windows operating system at thefollowing websites • http://www.docs.hp.com/windows_nt/ • http://www.microsoft.com/technet/ Diagnostics and Event Monitoring: Hardware Support Tools Complete information about H...

1 Introduction to iLO 2 MP The Integrated Lights-Out Management Processor (iLO MP) for entry class Integrity servers isan autonomous management subsystem embedded directly on the server. It is the foundationof the server ’s High Availability (HA) embedded server and fault management. It also provide...

SNMP The SNMP is part of the TCP/IP protocol suit developed to manage servers on an IP network.SNMP enables you to manage network performance, find and solve network problems, and planfor network growth. SMASH Server Management Architecture for Server Hardware (SMASH) is an initiative by the Distrib...

logging in to the iLO 2 MP and authorization is given each time an iLO 2 MP command runs.This provides a centralized database (LDAP server) of all user accounts and avoids the overheadof creating users in each iLO 2 MP. Directory authentication occurs by enabling Extended Schema or Default Schema. W...

IMPORTANT: On HP Integrity server blades, the Advanced Pack license is standard. Remember to save the Advanced Pack license key information that was provided by HP. If you ever needto replace your server blade under warranty, you will need to transfer the key by typing the codeon the replacement ser...

Table 1-2 iLO 2 MP Supported Browsers and Client Operating Systems Client Operating System Browsers OpenVMS Linux Windows HP-UX Java Plug-in 1.5.0_08 8.3 SuSE Red Hat Enterprise XP WS 2003 Enterprise 11i 23/11.31 X X X X X Firefox 2.0.0.4 X X Internet Explorer 6.0 X HP Secure Web Browser 1.7.13 Rela...

Because iLO 2 MP devices are completely autonomous and can be used to control the server,treat them the same as other servers. For example, include the iLO 2 MP devices in the securityand network audits. IMPORTANT: Ensure that physical access to the server is limited. Anyone can clear passwords by p...

2 Ports and LEDs All iLO 2 MP functions are available through the server iLO 2 MP LAN port and the local andremote serial ports. On HP Integrity server blades, all iLO 2 MP functions are available on theOnboard Administrator. This chapter describes the available iLO 2 MP ports, connectors, andLEDs o...

HP Integrity rx2660 Server Components Figure 2-3 shows the rear view of the HP Integrity rx2660 server. The system LAN functionality is integrated into the system board. Figure 2-3 HP Integrity rx2660 Server Rear View 10 iLO 2 MP LAN Port 6 Auxiliary Serial Port 1 Power Supply 1 and LED 2 Power Supp...

NOTE: This figure is oriented vertically to match the orientation of the core I/O board. Figure 2-4 HP Integrity rx3600 and rx6600 Server Rear Ports and LEDs 5 3 USB 2.0 Ports (any USBdevice) 1 iLO 2 MP Serial ConsolePort (RS-232) (DB-9F to VGA Port (No iLO 2 MPaccess; EFI only) DB-9F cable) Connect...

Table 2-1 iLO 2 MP Status LEDs (continued) LED State iLO 2 MP Status LED Flashing green. iLO 2 MP Heartbeat Flashing green. BMC Heartbeat iLO 2 MP Reset Button The iLO 2 MP Reset button enables you to reset the iLO 2 MP and reset the user-specific valuesto factory default values. A momentary press c...

Table 2-2 Console Serial Port Pinouts (continued) Signal Description Pin Number Requests to send 7 Clears to send 8 Not used 9 iLO 2 MP LAN Port Figure 2-6 shows the iLO 2 MP LAN port connector pins and LEDs. Figure 2-6 iLO 2 MP LAN Port Amber Green 8 1 Table 2-3 maps the iLO 2 MP LAN port connector...

3 Setting Up and Connecting the Console To set up the console, follow these steps:1. Determine the physical access method to connect cables. There are two physical connectionsto the Integrity iLO 2 MP:• Console serial port (RS-232) • iLO 2 MP LAN port 2. Configure the Integrity iLO 2 MP and assign a...

Setup Checklist Use the checklist in Table 3-1 to help set up iLO 2 MP. Table 3-1 Setup Checklist X Action Step Standard 1. Determine the access method to select and connect cables. 2. Determine the LAN configuration method and assign an IP address if necessary. Prepare 1 Choose a method to configur...

Setup Flowchart Use this console setup flowchart as a guide to help set up the Integrity iLO 2 MP. Figure 3-1 Setup Flowchart Setup Flowchart 35

Preparing to Set Up iLO 2 MP Perform the following tasks before you configure the iLO 2 MP LAN:• Determine the physical access method to select and connect cables. • Determine the iLO 2 MP LAN configuration method and assign an IP address if necessary. Determining the Physical iLO 2 MP Access Method...

Configuring the iLO 2 MP LAN Using DHCP and DNS DHCP automatically configures all DHCP-enabled servers with IP addresses, subnet masks, andgateway addresses. All HP Integrity entry class servers with the iLO 2 MP are shipped from thefactory with DHCP enabled. HP recommends using the DHCP and DNS met...

ARP Ping has the following operational issues:• The PC and the server must be on the same physical subnet. • When a new server is first booted, DHCP is automatically available (factory-set default),but ARP Ping does not start until three minutes after the iLO 2 MP is booted. This appliesto every sub...

ping 192.0.2.1 7. Use this IP address to connect to the iLO 2 MP LAN. 8. Use web or telnet access to connect to the iLO 2 MP from a host on the local subnet andconfigure the rest of the LAN parameters (gateway, subnet). Configuring the iLO 2 MP LAN Using the Console Serial Port The terminal emulatio...

9. Use the LC command to enter information for the IP address, host, subnet mask, gateway parameters, and so on. 10. Enter XD -R -NC to reset the iLO 2 MP. 11. After the iLO 2 MP resets, log in to the iLO 2 MP again and enter CM at the MP> prompt. 12. To confirm that DHCP is disabled and display ...

NOTE: On the HP Integrity server blades, you have access to two serial ports through the RS-232 connector. The default setting is for the iLO 2 MP interface, the other is for an AUX UARTdirectly connected to the host operating system and can be used for any serial device (terminal,debug port, and so...

Figure 3-3 Connecting the SUV Cable to the Server Blade Additional Setup This section provides additional information to set up the iLO 2 MP. Modifying User Accounts and Default Passwords The iLO 2 MP comes preconfigured with default factory settings, including a default user accountand password. Th...

Setting Up Security For greater security and reliability, HP recommends that iLO 2 MP management traffic be on aseparate dedicated management network and that only administrators be granted access to thatnetwork. This not only improves performance by reducing traffic load across the main network,it ...

4 Accessing the Host Console This chapter describes several ways to access the host console of an HP Integrity server. This chapter addresses the following topics:• “Interacting with the iLO 2 MP Using the Web GUI” (page 49) • “Accessing the Host Console Using the TUI” (page 50) • “Accessing the Hos...

Figure 4-2 Status Summary Page 4. Select the web interface functions by clicking the Primary tabs at the top of the page. Each function lists options in the Navigation Control on the left side of the page. 5. To display data in the content area; select an option and click Refresh to update the displ...

<COMMAND> : Enter the command name for help on individual command TOPics : Show all MP Help topics and commands HElp : Display this screen Q : Quit help ====MP:HE To display the Main Menu Command List, enter LI at the MP HE: prompt. To return to the MP Main Menu, enter Q . To access help from ...

5 Configuring DHCP, DNS, LDAP, and LDAP Lite This chapter provides information on how to configure DHCP, DNS, LDAP extended schema,and LDAP Lite default schema. This chapter addresses the following topics:• “Configuring DHCP” (page 53) • “Configuring DNS” (page 54) • “Configuring LDAP Extended Schem...

• Modify the MP subnet mask. MP:CM> LC -s 192.0.2.1 • Modify the MP gateway address. MP:CM> LC -g 192.0.2.1 • Set the link state to autonegotiate. MP:CM> LC –link auto • Set the link state to 10 BaseT. MP:CM> LC –link t • Set the remote console serial port address. MP:CM> LC –web 2023...

Configuring LDAP Extended Schema The following procedure shows how to configure the iLO 2 MP to use a directory server toauthenticate a user login using the iLO 2 MP TUI. NOTE: The LDAP connection times out after 30 minutes of inactivity in Active Directory. For Novell directory, there is no inactiv...

Login Process Using Directory Services with Extended LDAP You can choose to enable directory services to authenticate users and authorize user privilegesfor groups of iLO 2 MPs. The iLO 2 MP directory services feature uses the industry-standardLDAP. HP layers LDAP on top of SSL to transmit the direc...

• Easy implementation without schema extensions. The iLO 2 MP schema-free integration is configured from any iLO 2 MP user interface(browser, command line, or script). • Minimal administration and maintenance.— After initial setup, only groups and permissions require maintenance support on the iLO 2...

6 Using iLO 2 MP This chapter provides information and instructions on how to use the iLO 2 MP. This chapter addresses the following topics: • “Text User Interface” (page 59) • “Web GUI” (page 82) • “Integrated Remote Console (vKVM)” (page 88) • “Virtual Media” (page 95) • “Power Management” (page 1...

Figure 6-1 MP Command Interfaces MP Main Menu After logging in to the iLO 2 MP, the MP Main Menu appears. The MP Main Menu runs as a private session. Other iLO 2 MP users do not see the actions you perform in the private session. The iLO 2 MP can support multiple sessions to perform independent task...

CO (Console): Leave the Main Menu and enter console mode CO switches the console terminal from the MP Main Menu to mirrored/redirected console mode. All console output is mirrored to all users in console mode. Only one of the mirrored users at atime has write access to the console. To get console wr...

Events are data items that communicate system information from the source of the event to otherparts of the system, then to you. Events are produced by intelligent hardware modules, theoperating system, and system firmware. Events funnel into BMC from different sources throughoutthe server. The iLO ...

HE (Help): Display help for the menu or command in the MP Main Menu HE displays the MP hardware and firmware version identity, and the date and time of firmware generation. If executed from the MP Main Menu , HE displays general information about the iLO 2 MP, and those commands available in the MP ...

Table 6-5 Command Menu Commands (continued) Description Command Sets access options SA Configures SNMP parameters SNMP Configures security options SO Displays system processor status SS Displays all firmware revisions SYSREV Resets through transfer of control (TOC) TC “Tell” (sends a message to othe...

NOTE: This guide is not meant as a substitute for instruction on various scripting tools that are available for automating command-line interfaces. The iLO 2 MP TUI (when used withcommand-line arguments) and the SMASH command-line interface were created with thesetypes of scripting tools in mind to ...

send_user "Password: "expect_user -re "(.*)\n"set mp_password $expect_out(1,string)stty echo # Other Constantsset timeout 20 ########################################################################## BEGIN##spawn $env(SHELL)match_max 100000 #foreach mp_name {puma_mp lion_mp cougar_mp...

commands that require a password can have that password entered on the command line( FW , UC ). If -nc is specified on a command with no other parameters or with only a specific multilevel selector, the command displays all or just the specific multilevel parameters. The absenceof a specific multile...

OK Normal operation, any issues have been acknowledged. Degraded Typically loss of redundancy or partial failure of a component. Critical Failure with loss or imminent loss of system function. Command line usage and scripting: BLADE [ -nc ] blade -? Example of the BLADE Command With Output [gstlhpg1...

NOTE: Both short and long reset button presses return the port default connection to the MP. The iLO 2 MP mirrors the system console to the iLO 2 MP local and LAN ports. One consoleoutput stream is reflected to all connected console users. If several different terminal types areused simultaneously, ...

DF displays FRU information for FRU devices located behind the BMC. Information provided includes serial number, part number, model designation, name and version number, andmanufacturer. Command line usage and scripting: DF [ -specific[ <fruid> ] | -all ] [ -view <text|hex> ] [ -nc ] -? ...

HE displays the MP hardware and firmware version identity, and the date and time of firmware generation. • If executed from the MP Main Menu , HE displays general information about the iLO 2 MP and those commands available in the MP Main Menu . • If executed in command mode, HE displays the MP Help:...

| -nc ] -? See also: LOGIN, US LDAP : LDAP group administration LDAP enters one or more directory groups by specifying the distinguished name of the group and privileges to be granted to users who are members of that group. You must configure group administration information when the directory is en...

Command line usage and scripting: LS [ -nc ] -? See also: DNS, LC, SA PC : Power control access Command access level: Power control access PC enables control of the power management module. It provides the following options for remote control of system power: ON Turns the system power on. This comma...

Example [gstl0074] MP:CM> pm PM [ -dynamic | -low | -high | -os ] [ -nc ] PM -?[gstl0074] MP:CM> pm PM Current System Power Mode : Dynamic Mode Power Regulator Menu: D - Dynamic Power Savings Mode L - Static Low Power Mode H - Static High Performance Mode O - OS Control Mode Enter menu item or...

RB [ -nc ] -? See also: PC, SS RS : Reset system through the RST signal Command access level: Power control access IMPORTANT: During normal system operation, shut down the OS before issuing the RS command. RS resets the system (except iLO 2 MP) through the RST signal. Running this command irrecovera...

5. Enter E to enable or D to disable all SNMP alerts. The screen displays the new SNMP configuration settings. NOTE: Currently, the SNMP alert feature is supported on HP Integrity server blades only. 6. To configure a destination IP address for SNMP alerts, enter 1 2 3 4 . The default is blank (unus...

SS displays the status of the system processors and which processor is the monarch. The iLO 2 MP learns the system configuration through the events it receives from the system.There is usually a delay between any processor configuration change and what is displayed bythis command. For the most up-to...

[ -enable <e|d> \ [ -password [ <value> ] [ -delete <login> ] | [ -list <login> ] ] [ -nc ] -? Example: [gstlhpg1] MP:CM> uc -delete Oper -nc UC -delete Oper -nc Current User Parameters: User Login ID : Oper User Password : ************ User Name : Default Operator User Wo...

XD performs simple checks to confirm the iLO 2 MP health and its connectivity status. The following tests are available: • iLO 2 MP Parameter Checksum in NVRAM • Verify I2C connection (get BMC device ID) • LAN connectivity test using the ping command • History of firmware updates and other activitie...

Figure 6-2 Status Summary General Page NOTE: The BL c-Class tab is available only on HP Integrity server blades. Table 6-6 lists the fields and descriptions. Table 6-6 Status Summary General Page Description Description Field The current power state ( ON/OFF/STANDBY ) of the system and the correspon...

Figure 6-3 Status Summary Active Users Page NOTE: The BL c-Class tab is available only on HP Integrity server blades. Table 6-7 lists the fields and descriptions. Table 6-7 Active Users Page Description Description Field Multiple access methods are available: Serial, telnet, SSH, SSL web or IPMI ove...

Figure 6-4 Server Status General Page NOTE: The BL c-Class tab is available only on HP Integrity server blades. Table 6-8 lists the fields and descriptions. Table 6-8 Server Status General Page Description Description Field Displays the current power state of the system and the corresponding power L...

Figure 6-5 Server Status Identification Page Table 6-9 lists the fields and descriptions. Table 6-9 Server Status Identification Page Description Description Field Displays the server host name. Server Host Name Displays the rack unique identifier: a known unique identifier for the rack. Rack UID Di...

Figure 6-6 System Event Log Page NOTE: The BL c-Class tab is available only on HP Integrity server blades. Table 6-10 lists the fields, buttons, and descriptions. Table 6-10 System Event Log Page Description Description Fields and Buttons High attention events and errors. Reading the SEL off the att...

from the source of the event to other parts of the system, and ultimately to the systemadministrator. The log viewer contains an event decoder to help you interpret events. The following event severity (or alert) levels are defined: 0: Minor forward progress 1: Major forward progress 2: Informationa...

Server Display Properties • Set the background to plain (no wallpaper pattern) on the host server. • Set the client screen resolution higher than the host server for best remote consoleperformance. • Set the display resolution to 800 x 600 pixels, or the maximum supported resolution of 1024x 768 pix...

Figure 6-7 Integrated Remote Console Page NOTE: The BL c-Class tab is available only on HP Integrity server blades. Table 6-11 lists the fields, buttons, and actions. Table 6-11 IRC Page Description Action Fields and Buttons Resizes the IRC page.For fullscreen with multi-head client, launch the brow...

Figure 6-8 Integrated Remote Console Window Table 6-12 lists the menu bar, buttons, and actions you can perform in the IRC window. Table 6-12 IRC Window Description Action Menu Bar Buttons Enables you to keep the menu open, or retracts it when the mouse is movedaway. Thumb Tack Enables you to simula...

however, some monitors have trouble with the highest screen refresh rates supported by thevideo adapter. If this occurs, follow these steps: 1. To check our desktop properties, right-click the desktop and select Properties > Settings > Advanced > Monitor . 2. Select a lower screen refresh r...

types are used simultaneously by the users, some users may see unexpected results. Only oneof the mirrored users at a time has write access to the console. Write access is retained untilanother user requests console write access. To get console write access, enter Ctrl-Ecf . To ensure proper operati...

• View and interact with the boot sequence of your server. • Perform maintenance activities in text mode. • Manage non-graphical mode operating systems. The console window remains open until you sign out of the iLO 2 MP interface using the providedlink in the banner, leave the iLO 2 MP site, or refr...

Using iLO 2 MP Virtual Media Devices Connect client-based vMedia to a host HP Integrity server through a graphical interface usinga signed Java applet. Refusing to accept the applet certificate prevents browser-based vMediafrom functioning (a red X appears). It also prevents the remote console apple...

NOTE: When you disconnect the iLO 2 MP vMedia, you might receive a warning message from the host operating system regarding unsafe removal of a device. This warning can beavoided by using the operating system's-stop-device function before disconnecting it from thevMedia. Virtual CD/DVD The iLO 2 MP ...

2. Click Launch to load the applet and connect to USB CD/DVD devices and disk image files available on the client as virtual devices on the server. The vMedia applet appears( Figure 6-12 ). NOTE: Only one user and one device can be connected at a time. Figure 6-12 Virtual Media Dialog Box (Before Co...

5. Click Connect . The connected drive icon and LED changes states to reflect the current status of the virtual CD/DVD. Figure 6-13 Virtual Media Dialog Box (after connection) After you are connected, virtual devices are available to the host server until you close the vMediaapplet or sign out from ...

Creating the iLO 2 MP Disk Image Files The iLO 2 MP vMedia feature enables you to create CD and DVD image files within the sameapplet. The image files created are ISO-9660 file system images and El Torito bootable CD images.The performance of the iLO 2 MP vMedia is faster when image files are used. ...

Figure 6-15 Create Media Image Dialog Box 4. Click Create Disk Image . The vMedia applet begins the process of creating the image file. The process is complete when the progress bar reaches 100%. This creates a file that emulatesa CD/DVD on the local system. To cancel the creation of an image file, ...

If the host server operating system supports USB mass storage devices, the iLO 2 virtualfloppy/USB key is also available after the host server operating system loads. You can use theiLO 2 virtual floppy/USB key when the host server operating system is running to upgrade devicedrivers, create an emer...

Table 6-13 Operating System Support for vMedia Operating system run-time using Virtual USB CD* Operating system installation using Virtual USB CD Yes Yes Linux Red Hat ES/RHEL 4 U3 Yes Yes Linux SuSE SLEX 10 SP3 Yes Yes HP-UX 11.23 HWE 0606 Yes Yes OpenVMS 8.3–1H1 Yes Yes Windows Enterprise Edition ...

Table 6-15 Power & Reset Page Description (continued) Description Fields and Buttons This option enables you to configure the power restore policy. The power restore policydetermines how the system behaves when ac power returns after an ac power loss.You must have iLO configuration access right ...

Table 6-16 Power Meter Readings Page Description (continued) Description Fields and Buttons Displays the maximum power reading from the server over the last 24-hour period. Ifthe server has not been running for 24 hours, the value is the maximum of all thereadings since the server was booted. Maximu...

Table 6-17 Power Regulator Page Description Description Fields and Buttons Three are four modes in which the power regulator can operate. The power regulatormodes (Static Low, Static High and Dynamic) are independent of the operating systemand work for any operating system. The OS Control Mode requi...

• Local Accounts • Group Accounts • Settings • Access Settings: LAN, Serial, and Login Options • Directory Settings: LDAP Parameters • Network Settings: Standard and Domain Name Server • BL c-Class (Available only for server blade.) • SNMP Settings • Help Firmware Upgrade The Firmware Upgrade page f...

Table 6-18 Licensing Page Description (continued) Description Fields and Buttons Submits the key for activation. Submit Cancels the action. Cancel iLO provides a mechanism to install a license key which unlocks the advanced pack features.There are two types of licenses:1. iLO 2 MP Advanced Evaluatio...

Table 6-19 Local Accounts Page Description Description Field Select an existing user from the list of user names to edit or delete that account or select New User to add a new user. Select User Click this button after selecting the user account to modify or to add a new account.For an existing accou...

Table 6-20 Group Accounts Page Description Description Fields and Buttons Click Administrator and click Edit to open the Group Settings page and enter information. Administrator Click User and click Edit to open the Group Settings page and enter information. User Click Custom 1,2,3,4 and click Edit ...

Table 6-21 LAN Page Description Description Fields and Buttons You can enable or disable telnet access to the iLO 2 MP using the enable or disableoption. Telnet You can enable or disable SSH access to the iLO 2 MP using the enable or disable option. An industry-standard client-server connectivity pr...

NOTE: The BL c-Class tab is available only on HP Integrity server blades. Table 6-22 lists the fields, buttons, and descriptions. Table 6-22 Serial Page Description Description Fields and Buttons This option enables you to set the baud rate. Input and output data rates are the same. Bit Rate in Bits...

Table 6-23 Login Options Page Description (continued) Description Fields and Buttons Submits the information. Submit Cancels the action. Cancel Current LDAP Parameters The Current LDAP Parameters page ( Figure 6-26 ) enables you to edit LDAP parameters. You must have iLO configuration access right t...

Table 6-24 Current LDAP Parameters Page Description Description Field Choosing enable or disable, activates or deactivates directory support on iLO 2 MP:• Enable with Extended Schema: selects directory authentication and authorization using directory objects created with HP schema. Select this optio...

Figure 6-27 Standard Page NOTE: The BL c-Class tab is available only on HP Integrity server blades. Table 6-25 lists the fields, buttons, and descriptions. Table 6-25 Standard Page Description Description Fields and Buttons The 12 digit (hexadecimal) MAC address. MAC Address Enable or Disable. DHCP ...

NOTE: You can only configure the DNS server if DHCP is enabled. Figure 6-28 Domain Name Server Page NOTE: The BL c-Class tab is available only on HP Integrity server blades. Table 6-26 lists the fields, buttons, and descriptions. Table 6-26 DNS Page Description Description Fields and Buttons Use the...

NOTE: If SNMP was disabled earlier and then enabled, you will receive the following message: Reset MP (XD command option ‘R’) for configuration to take effect. Click OK and reset the iLO 2 MP. BL c-Class The Onboard Administrator page ( Figure 6-30 ) is used to facilitate the cabling and initial ins...

Table 6-28 Onboard Administrator Page Description (continued) Description Field This is used to logically group together the server blades installed in the same enclosure.The enclosure name is shared with the other servers in the enclosure. Enclosure Name This displays the health of the enclosure. E...

Figure 6-31 Help Page NOTE: The BL c-Class tab is available only on HP Integrity server blades. You can also click the ? at the top right corner of each page to display help about the page you are on. Select any of the topics listed in the left navigation bar to access that particular help screen. S...

• CLP sessions are independent from each other and nonmirrored. • Provides a subset of MP CLI commands. • Provides access to the MP Main Menu interface and system console interface. SM CLP Session Sessions between a client and an SM CLP service are established over a transport protocol. Oncethe sess...

3. Use the following example as you follow the prompts on the screen to change the defaultinterface from MP Main Menu to SM CLP. MP:CM>SA This command allows you to modify MP access configuration. Current Set Access Configuration: R - Remote : OS SESSION T - Telnet : Enabled H - SSH : Disabled W ...

</>hpiLO-> If an invalid target is specified, the response differs as follows: </> hpiLO-> show /badtarget1 status=3 status_tag=COMMAND PROCESSING FAILED error_tag=COMMAND SYNTAX ERROR ‘/badtarget1’ is an invalid target. </>hpiLO-> SM CLP Syntax The following sections prov...

Table 6-29 Supported Command Verbs (continued) Action Command Displays context-sensitive help. help displays general help and all supported commands. help <some verb> displays help for the specified verb. help <some target> displays help for the specified target. help <some property&g...

Command Options Command options control verb behavior. Command options can appear immediately after the verb and must be prefaced with a dash (-). Most command options have both a full name and a short form; for example: show –level all or show –l all Level Option The level option instructs the comm...

Table 6-31 SM CLP Reserved Characters and Character Sequences (continued) Description and Uses Name Character or Sequence When preceded by a space, the hyphen is the SM CLP option indicator. Hyphen - Separates the UFiT terms of a target address. Address term separator / Recognized as a special targe...

</>hpiLO-> reset system1status=0status_tag=COMMAND COMPLETEDsystem1 has been issued a reset Displaying Power Status To display the power state of the system, query the value of the enabledstate property of the system1 target. For example: </>hpiLO-> show -d properties=enabledstate ...

reset Resets the iLO 2 MP. Map1 Example The following example displays information about map1 : </> hpiLO-> show map1status=0status_tag=COMMAND COMPLETED /map1 Targets dhcpendpt1 dnsendpt1 dnsserver1 dnsserver2 dnsserver3 enetport1 gateway1 group1 settings1 sshsvc1 swinstallsvc1 swinventory...

Table 6-34 /map1/textredirectsap1 Properties Access and Values Description Property Name Read-onlyThe value is set to Enabled . Shows whether the text redirection isenabled. EnabledState Read-onlyThe value is set to SMCLP . Enter SMCLP at the MP Main Menu to return to the SM CLP interface. A string ...

Starting a System Console Session To start a system console session, enter the following command: </>hpiLO->start /system1/consoles1/textredirectsap1 Determining the Session Termination Character Sequence for the System Console To determine the session termination character sequence for the...

cd Changes the current default target. help Displays context-sensitive help. show Displays information. Target: map1/swinventory1 SoftwareInventory is a dedicated collection for all firmware in the system known to the iLO 2MP. Table 6-37 shows swinventory1 target properties. Table 6-37 swinventory1 ...

Properties VersionString=F.01.57 This example displays all the firmware revisions. </>hpiLO-> show /map1/swinventory1/swid* /map1/swinventory1/swid1 TargetType=MP FW VersionString=F.01.57 /map1/swcollection1/swid2 TargetType=BMC FW VersionString=01.60 /map1/swcollection1/swid3 TargetType=EF...

Target: map1/telnetsvc1 The telnetsvc1 target represents the telnetsvc service provided by map1 . Table 6-39 shows telnetsvc1 target properties. Table 6-39 telnetsvc1 Properties Access and Values Description Property Name Read-onlyThe following are valid values: Enabled, Disabled Shows whether telne...

SSH Examples The following examples show specific SSH commands. Enable SSH Service </>-> start /map1/sshsvc1 Disable SSH Service </>-> stop /map1/sshsvc1 Network Configuration Network commands enable you to display or modify network settings. SM CLP Network Targets, Properties, and...

Target: map1/dnsendpt1 The dnsendpt1 target represents the iLO 2 MP DNS client. Table 6-45 shows dnsendpt1 target properties. Table 6-45 dnsendpt1 Properties Access and Values Description Property Name Read onlyThe following are valid values: Enabled: The iLO 2 MP DNS client isenabled. Disabled: The...

set Sets a property to a specific value. Target: map1/settings1/dnssettings1 The dnssettings1 target contains iLO 2 MP DNS settings. Table 6-48 shows dnssettings1 target properties. Table 6-48 dnssettings1 Properties Access and Values Description Property Name Read/writeThis is an array property. Th...

Determine Gateway Address </>hpiLO-> show -d properties=accessinfo/map1/enetport1/lanendpt1/ipendpt1/gateway1 Set Gateway Address </>hpiLO-> set /map1/enetport1/lanendpt1/ipendpt1/gateway1AccessInfo=192.0.2.1 Determine Link State (Autosense) </>hpiLO-> show -d properties=a...

Verbs show Displays information. help Displays context-sensitive help. set Sets a property to a specific value. SM CLP vMedia Use Cases The following examples show actions you can perform using SM CLP for vMedia. Change the current context to the CD drive. –> cd / map1 / oemhp_vm1 / cddr1 Show th...

Table 6-51 account# Properties (continued) Access and Values Description Property Name Read/write.Specified in ASCII characters up to 24 characters long. User name of this account. Name Read/write.The following are valid values: <console,power,mp,user,virtual), <all> or <none>. Privil...

Table 6-52 oemhp_ldapsettings1 Properties Access and Values Description Property Name Read write.Valid values are:DefaultSchema: enable directory authenticationusing default schema. ExtendedSchema: enable directoryauthentication using extended HP schema. Disabled: disable directory authentication Re...

7 Installing and Configuring Directory Services You can install and configure the iLO 2 MP directory services to leverage the benefits of a singlepoint of administration for the iLO 2 MP user accounts. This chapter provides information on how to install and configure iLO 2 MP directory services. Thi...

Features Supported by Directory Integration The iLO 2 MP directory services functionality enables you to do the following: • Authenticate users from a shared, consolidated, scalable user database. • Control user privileges (authorization) using the directory service. • Use roles in the directory ser...

Required Schema Software The iLO 2 MP requires specific software to extend the schema and provide snap-ins to managethe iLO 2 network. An HP Smart Component that contains the schema installer and themanagement snap-in installer is available for download from the HP website at: http://www.hp.com/serv...

Figure 7-2 Schema Setup Screen The Directory Server section of the Setup screen enables you to select whether to use Active Directory or eDirectory, and to set the computer name and the port to be used for LDAPcommunications. IMPORTANT: To extend the schema on Active Directory you must be an authent...

Figure 7-3 Schema Results Screen Management Snap-In Installer The management snap-in installer installs the snap-ins required to manage the iLO 2 MP objectsin a Microsoft Active Directory Users and Computers directory or in a Novell ConsoleOnedirectory. To create an iLO 2 MP directory using iLO 2 MP...

IMPORTANT: To install directory services for the iLO 2 MP, an Active Directory schema administrator must extend the schema. • Extending the schema in the Microsoft Windows 2000 Server Resource Kit, available at: http://www.microsoft.com • Installing Active Directory in the Microsoft Windows 2000 Ser...

The Active Directory schema folder may need to be expanded for the checkbox to be available. 4. Create a certificate or install Certificate Services. This step is necessary because the iLO 2MP uses SSL to communicate with Active Directory. 5. To specify that a certificate be issued to the server run...

NOTE: Roles, such as hpqTargets and so on, are for extended schema LDAP only. They are not used in LDAP Lite. Assume that a company has an enterprise directory including the domain mpiso.com, arrangedas shown in Figure 7-4 . Figure 7-4 Directory Example 1. Create an organizational unit to contain th...

10. Click Apply and OK . Members of the remoteMonitors role are able to authenticate and view the server status. User rights to any iLO 2 are calculated as the sum of all the rights assigned by all the roles inwhich the user is a member and the iLO 2 is a managed device. Following the preceding exam...

Figure 7-8 HP Devices Tab Managing Users In a Role After user objects are created, use the Members tab ( Figure 7-9 ) to manage the users within the role.• To add a user, browse to the specific user you want to add, and click Add . • To remove a user from the list of valid members, highlight an exis...

Setting Login Restrictions The Role Restrictions tab ( Figure 7-10 ) enables you to set login restrictions for a role. These restrictions include: • Time Restrictions • IP Network Address Restrictions— IP/Mask— IP Range— DNS Name Figure 7-10 Role Restrictions Tab Setting Time Restrictions • To manag...

on a single DNS name or a subdomain, entered in the form of host.company.com or*.domain.company.com. 4. Enter the information and click OK. 5. To save the changes, click OK . To remove any of the entries, highlight the entry in the display list and click Remove . Setting User or Group Role Rights Af...

Directory Services for eDirectory The following sections provide installation prerequisites, preparation, and a working exampleof directory services for eDirectory. NOTE: LDAP Lite is not supported with eDirectory. Installing and Initializing Snap-In for eDirectory For instructions on using the snap...

2. From in the region1 organizational unit, right-click the HP devices organizational unit. Select New , and select Object . a. Select hpqTarget from the list of classes, and click OK . b. Enter an appropriate name and surname in the New hpqTarget dialog box. In thisexample, the DNS host name of the...

a. Right-click the remoteAdmins role in the roles organizational unit in the region1 organizational unit, and select Properties . b. Select the Role Managed Devices subtab of the HP Management tab, and click Add . c. Using the Select Objects dialog box, browse to the HP devices organizational unit i...

devices,ou=region1,o=samplecorp Directory User Context 1 = ou=users,o=samplecorp For example, user CSmith (located in the users organizational unit within the samplecorporganization, who is also a member of one of the remoteAdmins or remoteMonitors roles) wouldbe allowed to log in to the iLO 2 MP. H...

Figure 7-18 Members Tab (eDirectory) To browse to the specific user you want to add, click Add . To remove a user from the list of valid members, highlight the user name and click Delete . Setting Role Restrictions The Role Restrictions subtab ( Figure 7-19 ) enables you to set login restrictions fo...

Setting Time Restrictions You can manage the hours available for login by members of a role using the time grid displayedin the Role Restrictions subtab ( Figure 7-19 ). You can select the times available for login for each day of the week in half-hour increments. You can change a single square by c...

Figure 7-21 Lights-Out Management Device Rights Tab Table 7-2 lists the available management device rights. Table 7-2 Management Device Rights Description Option This option controls whether users can log in to the associated devices and execute status or read-only commands (view event logs and cons...

To ensure you have the correct version of JRE installed on your system, follow these steps: 1. To determine the Java version, execute the following command: # java -version The Java version installed on your system is displayed. 2. If Java is not installed on your system, execute the following comma...

Verifying Snap-In Installation and Schema Extension To verify the installation of snap-ins and schema extension, follow these steps: 1. Run ConsoleOne and log on to the tree. 2. Verify the new classes by opening the Schema Manager from the Tools list. All the classes related to the HP directory serv...

-> Current Distinguished Name has been retained User Search Context 1: Current -> o=mp Enter new value, or Q to Quit: <CR> -> Current User Search Context 1 has been retained User Search Context 2: Current -> o=demo Enter new value, or Q to Quit: <CR> -> Current User Search...

Certificate Services The following sections provide instructions for installing Certificate Services, verifying directoryservices, and configuring automatic certificate requests. Installing Certificate Services To install Certificate Services, follow these steps: 1. Select Start>Settings>Contr...

In general, you can use the HP provided snap-ins to create objects. It is useful to give the iLO 2MP device objects meaningful names, such as the device's network address, DNS name, hostserver name, or serial number. Directory-enabled remote management enables you to: • Create iLO 2 MP objects: Each...

devices, but grant different rights. Sometimes, it is useful to assign generic rights to the lesserrole, and include the iLO 2 MP administrators in that role, and the administrative role. Figure 7-22 shows one way that an administrative user gains admin role right. The admin user ’s initial login ri...

The iLO 2 MP devices use local host time to enforce time restrictions. If the iLO 2 MP deviceclock is not set, the role time restriction fails (unless no time restrictions are specified on the role). Role-based time restrictions can only be enforced if the time is set on the iLO 2 MP device. Thetime...

Role access restrictions limit an authenticated user's ability to receive iLO 2 MP privileges basedon rights specified in one or more roles. Figure 7-24 shows the user and role access restrictions. Figure 7-24 User and Role Access Restrictions How User Time Restrictions Are Enforced You can place a ...

Figure 7-25 User Time Restrictions User Address Restrictions You can place network address restrictions on a directory user account, and the directory serverenforces these restrictions. See the directory service documentation for information about theenforcement of address restrictions on LDAP clien...

Changes made to the schema during the schema setup process include changes to the following: • Core classes • Core attributes NOTE: Roles such as hpqTargets, and so on, are for extended schema LDAP only. They are not used in LDAP Lite. Core Classes Table 7-3 lists the core LDAP OID classes. Table 7-...

hpqRole Table 7-6 hpqRole 1.3.6.1.4.1.232.1001.1.1.1.2 OID This class defines role objects, providing the basis for HP products using directory-enabledmanagement. Description Structural Class Type Group SuperClasses hpqRoleIPRestrictions—1.3.6.1.4.1.232.1001.1.1.2.5hpqRoleIPRestrictionDefault—1.3.6....

hpqTargetMembership Table 7-10 hpqTargetMembership 1.3.6.1.4.1.232.1001.1.1.2.3 OID This attribute provides a list of hpqTarget objects that belong to this object. Description Distinguished Name—1.3.6.1.4.1.1466.115.121.1.12 Syntax Multi Valued Options None Remarks hpqRoleIPRestrictionDefault Table ...

Table 7-13 hpqRoleTimeRestriction (continued) 1.3.6.1.4.1.232.1001.1.1.2.6 OID Single Valued Options This attribute is only used on role objects. Time restrictions are satisfied when the bitcorresponding to the current local side real time of the device is 1, and unsatisfied when thebit is 0. The le...

iLO 2 MP Attribute Definitions Table 7-17 through Table 7-22 define the iLO 2 MP core class attributes. hpqLOMRightLogin Table 7-17 hpqLOMRightLogin 1.3.6.1.4.1.232.1001.1.8.2.1 OID Login right for HP iLO 2 MP products. Description Boolean—1.3.6.1.4.1.1466.115.121.1.7 Syntax Single Valued Options Th...

hpqLOMRightLocalUserAdmin Table 7-21 hpqLOMRightLocalUserAdmin 1.3.6.1.4.1.232.1001.1.8.2.5 OID Local user database administration right for HP iLO 2 MP products. Description Boolean—1.3.6.1.4.1.1466.115.121.1.7 Syntax Single valued Options This attribute is only used on role objects. If this attrib...

Glossary A Address In networking, a unique code that identifies a node in the network. Names such as host1.hp.com are translated to dott-quad addresses such as 168.124.3.4 by the Domain Name Service (DNS). Address Path An address path is one in which each term has the appropriate intervening address...

I In-band SystemManagement A server management capability that is enabled only when the operating system is initializedand the server is functioning properly. Integrated LightsOut (iLO) The iLO functionality offers remote server management through an independent managementprocessor (MP). iLO was int...

Index A access options, 77access rights, configuring, 20alert levels, system status logs, 62ARP ping commands, 38using to configure a static IP address, 38using to configure iLO 2 MP LAN, 37 auto-login CLI SSH connection, 41features and usage, 41initiating a session, 42terminating a session, 43web G...