Cisco 1.2 - Manual

Cisco UCS Central does not reduce or change any local management capabilities of Cisco UCS Manager,such as its API. This allows you to continue usingCisco UCS Manager the same way as when you did nothave Cisco UCS Central, and also allows all existing third party integrations to continue to operate ...

Description Feature Cisco UCS Central provides you the flexibility search for andimport a perfect policy/policy component or a resource from oneregistered UCS domain into CCisco UCS Central. You can thendeploy this policy or the resource to other managed domains. Policy/policy component and resource...

Management Exclusion Multi-version support also provides you the ability to exclude some features from global management. Youcan log into a registered UCS domain and turn off a specific feature from Cisco UCS Manager CLI. You candisable the following global management capabilities: • Global service ...

Supported Cisco UCS Manager Versions SupportedCisco UCSCentralVersions Cisco UCS CentralFeatures 3.0(1x) 2.2(2x)/2.2(3x) 2.2(1x) 2.1(2a)/2.1(3x) Yes Yes Onlysupportedfrom2.2(3x) Note No No 1.2(1a) Estimate Impact onReconnect Yes Yes Yes No Precision Boot OrderControl Note • Searching for policy/poli...

• Network — Provides access to the global network policies, common VLANs, IP pools and MAC pools configured in Cisco UCS Central. • Storage — Provides access to the global storage policies, fabric specific VSANs, global IQN pools and WWN pools configured in Cisco UCS Central. • Operations Management...

Procedure Step 1 In your web browser, type the Cisco UCS Central GUI web link or select the bookmark in your browser. Step 2 On the launch page, do the following: a) Enter your username and password.b) Click Log In . Logging out of the Cisco UCS Central GUI Procedure In the Cisco UCS Central GUI, cl...

C H A P T E R 2 License Management This chapter includes the following sections: • Managing Licenses in Cisco UCS Central, page 9 • Obtaining a License, page 10 • Downloading a License from a Local File System, page 11 • Downloading a License from a Remote File System, page 12 • Installing a License...

• Initial License : Initial license includes the initial activation license for Cisco UCS Central and five domain licenses. After installing the initial license, you cannot delete it from the system. You can stilldelete the download task for the initial license, that does not have any impact on the ...

GUID is unique to each Cisco UCS Central instance for obtaining licenses. Step 5 Click Cisco SWIFT to open the License Administration Portal. Step 6 Login to the License Administration Portal, and click Continue to Product License Registration . Step 7 On the Quickstart page, enter the PAK in the En...

Downloading a License from a Remote File System Before You Begin To download a license from a remote location to Cisco UCS Central, make sure you have the following: • Obtained the license from Cisco and saved it to the remote location from where you want to download.If that is a FTP, SCP or SFTP se...

Installing a License Make sure the license is downloaded in Cisco UCS Central. Procedure Step 1 On the menu bar, click Operations Management . Step 2 In the Navigation pane, click License Management . Step 3 In the Work pane, click the Licenses tab. You can view lists of all downloaded licenses here...

C H A P T E R 3 Managing Administrative Settings This chapter includes the following sections: • Administrative Settings for Cisco UCS Central, page 15 • Administrative Settings for Cisco UCS Domains, page 27 Administrative Settings for Cisco UCS Central Cisco UCS Central, supports configuring polic...

Creating Locally Authenticated Users Procedure Step 1 On the menu bar, click Administration . Step 2 In the Navigation pane, click Users and Authentication . Step 3 In the Work pane, click Local Users . Step 4 In the Actions area, click Create Locally Authenticated Users and complete all the fields....

Creating User Roles Procedure Step 1 On the menu bar, click Administration . Step 2 In the Navigation pane, click Users and Authentication . Step 3 In the Work pane, click Roles . Step 4 In the Actions area, click Create Role and complete all the fields. Step 5 Click OK . Step 6 Click Save . Creatin...

Procedure Step 1 On the menu bar, click Administration . Step 2 In the Navigation pane, click Users and Authentication . Step 3 In the Work pane, click Authentication Domains . Step 4 In the Actions area, click Create Authentication Domain and complete all the fields. Step 5 Click OK . Step 6 Click ...

Creating an LDAP Group Map Procedure Step 1 On the menu bar, click Administration . Step 2 In the Navigation pane, click Users and Authentication . Step 3 In the Work pane, click LDAP . Step 4 Click Group Maps . Step 5 In the Actions area, click Create LDAP Group Map and complete all the fields. Ste...

Procedure Step 1 On the menu bar, click Administration . Step 2 In the Navigation pane, click Users and Authentication . Step 3 In the Work pane, click LDAP . Step 4 Click Provider Groups . Step 5 In the Actions area, right-click the provider group you wish to remove and click Delete LDAP Provider G...

Creating an SNMP Trap Procedure Step 1 On the menu bar, click Administration . Step 2 In the Navigation pane, click General . Step 3 In the Work pane, click SNMP . Step 4 In the Properties area, select the enabled radio button. By default the Admin State is disabled. You need to manually change it t...

Configuring an NTP Server Cisco UCS Central supports global date and time policies based on international time zones and a definedNTP server. Before You Begin To configure an NTP server for Cisco UCS Central, you must first create a date and time policy. Procedure Step 1 On the menu bar, click Admin...

Configuring Fault Policy Procedure Step 1 On the menu bar, click Administration . Step 2 In the Navigation pane, click General . Step 3 In the Work pane, click Fault Policy . Step 4 In the Actions area, complete all the fields. Step 5 Click Save . What to Do Next Configuring Export Policy Procedure ...

By default the General tab would display tabs in the work pane Step 3 Under the Management Interface tab, in the Node A area, click the IPv6 tab, and complete all the required fields. Step 4 Click Save . Configuring IPv6 in HA mode Procedure Step 1 On the menu bar, click Administration Step 2 In the...

The Downloading Certificate pop-up window opens. Step 6 Select the checkbox Trust this CA to identify Websites . Step 7 Click OK . Microsoft Internet Explorer Procedure Step 1 In the Menu bar, click Tools > Internet Options Content > Certificates . Step 2 Click Trusted Root Certification Autho...

Configuring HTTP Configuring an HTTP Remote Access Policy Before You Begin Before configuring an HTTP remote access policy under a domain group, this policy must first be created.Policies under the Domain Groups root were already created by the system and ready to configure. Procedure Step 1 On the ...

Procedure Step 1 On the menu bar, click Operations Management . Step 2 In the Navigation pane, expand Domain Groups > Domain Group root . Step 3 Expand the node for a domain group containing the policy to delete. Step 4 In the Navigation pane, click Operational Policies . Step 5 In the Work pane,...

• Web Session Limits • CIM XML • Interfaces Monitoring Policy • SSH Configuration Deleting a Telnet Remote Access Policy A Telnet remote access policy is deleted from a domain group under the domain group root. Telnet remoteaccess policies under the domain groups root cannot be deleted. Procedure St...

Configuring CIM XML Configuring a CIM XML Remote Access Policy Before You Begin Before configuring a CIM XML remote access policy under a domain group, this policy must first be created.Policies under the Domain Groups root were already created by the system and ready to configure. Procedure Step 1 ...

Procedure Step 1 On the menu bar, click Operations Management . Step 2 In the Navigation pane, expand Domain Groups > Domain Group root . Step 3 Expand the node for a domain group containing the policy to delete. Step 4 In the Navigation pane, click Operational Policies . Step 5 In the Work pane,...

• HTTP • Telnet • Web Session Limits • CIM XML Deleting an Interfaces Monitoring Remote Access Policy A interfaces monitoring remote access policy is deleted from a domain group under the domain group root.Interfaces monitoring remote access policies under the domain groups root cannot be deleted. P...

User Roles in Remote Authentication Services If you create user accounts in the remote authentication server, you must ensure that the accounts include theroles those users require for working in Cisco UCS Central and that the names of those roles match the namesused in Cisco UCS Central. Depending ...

distinguishedName: CN=CiscoAVPair,CN=Schema,CN=Configuration,CN=XinstanceType: 0x4uSNCreated: 26318654attributeID: 1.3.6.1.4.1.9.287247.1attributeSyntax: 2.5.5.12isSingleValued: TRUEshowInAdvancedViewOnly: TRUEadminDisplayName: CiscoAVPairadminDescription: UCS User Authorization FieldoMSyntax: 64lDA...

• If you want to use secure communications, create a trusted point containing the certificate of the rootcertificate authority (CA) of the LDAP server in Cisco UCS Central. Procedure Step 1 On the menu bar, click Operations Management . Step 2 In the Navigation pane, expand Domain Groups > Domain...

Deleting an LDAP Provider Procedure Step 1 On the menu bar, click Operations Management . Step 2 In the Navigation pane, expand Domain Groups > Domain Group root . Step 3 Under the Domain Groups root node, click Operational Policies . Step 4 In the Work pane, click Security . Step 5 In the Work p...

from the LDAP group map. If the role and locale criteria match the information in the policy, Cisco UCSCentral provides access to the user. Role and locale definitions are configured locally in Cisco UCS Central and do not update automatically basedon changes to an LDAP directory. If you delete or r...

• Configure the distinguished name for the LDAP group in the LDAP server. • Create locales in Cisco UCS Central (optional). • Create custom roles in Cisco UCS Central (optional). Procedure Step 1 On the menu bar, click Operations Management . Step 2 In the Navigation pane, expand Domain Groups > ...

RADIUS native authentication is not supported for this release, and cannot be used to create policies inCisco UCS Central under the Domain Group root and domain groups. RADIUS may be used to createglobal policies for Cisco UCS domains. Note Procedure Step 1 On the menu bar, click Operations Manageme...

Procedure Step 1 On the menu bar, click Operations Management . Step 2 In the Navigation pane, expand Domain Groups > Domain Group root . Step 3 Under the Domain Groups root node, click Operational Policies . Step 4 In the Work pane, click Security . Step 5 In the Work pane, expand RADIUS and cli...

Configuring TACACS+ Providers Configuring Properties for TACACS+ Providers The properties that you configure in this task are the default settings for all provider connections of this typedefined in Cisco UCS Central. If an individual provider includes a setting for any of these properties, CiscoUCS...

authentication failures for other Cisco devices that use the same authorization profile. Use a space asthe delimiter to separate multiple values. • For a cluster configuration, add the management port IP addresses for both fabric interconnects. Thisconfiguration ensures that remote users can continu...

Configuring Multiple Authentication Systems Multiple Authentication Systems You can configure Cisco UCS to use multiple authentication systems by configuring the following features: • Provider groups • Authentication domains Once provider groups and authentication domains have been configured in Cis...

Description Name The TACACS+ providers that are included in the TACACS+ group. Cisco UCS searches the providers in the order that they appear in thetable. To change the provider priority, select a provider and use thearrow buttons above the list to move the provider to the desiredposition. Assigned ...

Effective with this release, authentication domains for LDAP are supported for Cisco UCS Central.However, the authentication domains are supported for managed Cisco UCS domains from the Cisco UCSCentral Domain Group root. Note Creating an Authentication Domain Procedure Step 1 On the menu bar, click...

a) In the Properties (Native Authentication) dialog box, complete all Default Authentication fields on the General tab. b) In the Properties (Native Authentication) dialog box, complete all Console Authentication fields on the General tab. c) In the Properties (Native Authentication) dialog box, com...

Does not restrict user access to Cisco UCS Central based on user roles. Read-only access is granted toall users unless other user roles have been defined in Cisco UCS Central. This is the default behavior. • no-login Restricts user access to Cisco UCS Central based on user roles. If user roles have ...

Procedure Step 1 On the menu bar, click Operations Management . Step 2 In the Navigation pane, expand Domain Groups > Domain Group root . Step 3 Under the Domain Groups root node, click Operational Policies . Step 4 In the Navigation pane, click Operational Policies . Step 5 In the Work pane, cli...

a) In the Add DNS Server dialog box, complete all fields. b) Click OK . Step 6 Click Save . Deleting a DNS Server from a DNS Policy Procedure Step 1 On the menu bar, click Operations Management . Step 2 In the Navigation pane, expand Domain Groups > Domain Group root . Step 3 Under the Domain Gro...

Procedure Step 1 On the menu bar, click Operations Management . Step 2 In the Navigation pane, expand Domain Groups > Domain Group root . Step 3 Under the Domain Groups root node, click Operational Policies . Step 4 In the Navigation pane, click Operational Policies . Step 5 In the Work pane, cli...

Procedure Step 1 On the menu bar, click Operations Management . Step 2 In the Navigation pane, expand Domain Groups > Domain Group root . Step 3 Under the Domain Groups root node, click Operational Policies . Step 4 In the Navigation pane, click Operational Policies . Step 5 In the Work pane, cli...

Configuring a Date and Time Policy Before You Begin Before configuring a date and time policy under a domain group, this policy must first be created. Policiesunder the Domain Groups root were already created by the system and ready to configure. Procedure Step 1 On the menu bar, click Operations Ma...

Configuring an NTP Server for a Date and Time Policy Before You Begin To configure an NTP server for a domain group under the domain group root, a date and time policy mustfirst have been created. Procedure Step 1 On the menu bar, click Operations Management . Step 2 In the Navigation pane, expand D...

b) Click OK . Step 7 Click Save . Deleting an NTP Server from a Date and Time Policy Procedure Step 1 On the menu bar, click Operations Management . Step 2 In the Navigation pane, expand Domain Groups > Domain Group root . Step 3 Under the Domain Groups root node, click Operational Policies . Ste...

What Happens Encryption Authentication Level Model Providesauthentication basedon the Hash-BasedMessageAuthentication Code(HMAC) MessageDigest 5 (MD5)algorithm or theHMAC Secure HashAlgorithm (SHA). No HMAC-MD5 orHMAC-SHA authNoPriv v3 Providesauthentication basedon the HMAC-MD5or HMAC-SHAalgorithms...

• dskTable • systemStats • fileTable • SNMP MIB-2 Interfaces • ifTable • IP-MIB • SNMP-FRAMEWORK-MIB • snmpEngine • IF-MIB • DISMAN-EVENT-MIB • SNMP MIB-2 snmp Cisco UCS Central does not provide support for IPV6 andCisco UCS Central MIBs. Note Authentication Protocols for SNMPv3 Users Cisco UCS Cent...

b) Click md5 or sha to chose the authorization type. c) Check the AES-128 checkbox. If checked, this user uses AES-128 encryption. d) Enter the user password in the Password field. e) Re-enter the user password in the Confirm Password field. f) Enter the privacy password for this user in the Privacy...

Step 6 Click Save . Deleting an SNMP User Procedure Step 1 On the menu bar, click Operations Management . Step 2 In the Navigation pane, expand Domain Groups > Domain Group root . Step 3 In the Navigation pane, click Operational Policies . Step 4 In the Work pane, click SNMP . Step 5 In the SNMP ...

Procedure Step 1 On the menu bar, click Operations Management . Step 2 In the Navigation pane, expand Domain Groups > Domain Group root . Step 3 Under the Domain Groups root node, click Operational Policies . Step 4 In the Navigation pane, click Operational Policies . Step 5 In the Work pane, cli...

C H A P T E R 4 User Management This chapter includes the following sections: • Cisco UCS Central User Accounts, page 69 • Role-Based Access Control, page 82 • User Locales, page 88 • User Organizations, page 92 Cisco UCS Central User Accounts User accounts are used to access the system. Up to 128 u...

Remotely Authenticated User Accounts A remotely authenticated user account is any Cisco UCS Central user account that is authenticated throughLDAP. Cisco UCS domainssupport LDAP, RADIUS and TACACS+. If a user maintains a local user account and a remote user account simultaneously, the roles defined ...

Cisco recommends that each user have a strong password. If you enable the password strength check forlocally authenticated users, Cisco UCS Central rejects any password that does not meet the followingrequirements: • Must contain a minimum of 8 characters and a maximum of 80 characters. • Must conta...

c) In the Change Count field, enter the maximum number of times a locally authenticated user can change his or her password during the Change Interval.This value can be anywhere from 0 to 10. Step 5 Click Save . Configuring a No Change Interval for Passwords You must have admin or aaa privileges to ...

Step 5 Click Save . Creating a Locally Authenticated User Account At a minimum, we recommend that you create the following users: • Server administrator account • Network administrator account • Storage administrator Before You Begin Perform the following tasks, if the system includes any of the fol...

Description Name A list of the user roles defined in Cisco UCS Central. If the associated check box is checked, the selected user has beenassigned that user role. Assigned Roles list box A list of the locales defined in Cisco UCS Central. If the associated check box is checked, the selected user has...

• uucp • operator • games • gopher • nobody • nscd • mailnull • mail • rpcuser • rpc • mtsuser • ftpuser • ftp • man • sys • samdme • debug Deleting a Locally Authenticated User Account Procedure Step 1 On the menu bar, click Administration . Step 2 In the Navigation pane, click the Access Control t...

Procedure Step 1 On the menu bar, click Administration . Step 2 In the Navigation pane, click the Access Control tab. Step 3 On the Access Control tab, expand Locally Authenticated Users . Step 4 Click the user account that you want to modify. Step 5 In the Work pane, click the General tab. Step 6 I...

Procedure Step 1 On the menu bar, click Administration . Step 2 In the Navigation pane, click the Access Control tab. Step 3 On the Access Control tab, expand Locally Authenticated Users . Step 4 Click the user account that you want to modify. Step 5 In the Work pane, click the General tab. Step 6 I...

Procedure Step 1 On the menu bar, click Administration . Step 2 In the Navigation pane, click the Access Control tab. Step 3 On the Access Control tab, click Locally Authenticated Users . Step 4 In the Password Profile area, enter 0 for the number of unique passwords that a locally authenticated use...

Description Name The IP address from which the user logged in. Host column The date and time at which the user logged in. Login Time column The type of terminal from which the user logged in. Terminal Type column Whether the session is currently active. Current Session column Role-Based Access Contr...

User profiles on AAA servers (RADIUS or TACACS+) should be modified to add the roles correspondingto the privileges granted to that user. The attribute is used to store the role information. The AAA serversreturn this attribute with the request and parse it to get the roles. LDAP servers return the ...

Privileges Privileges give users assigned to user roles access to specific system resources and permission to performspecific tasks. The following table lists each privilege and the user role given that privilege by default. Table 3: User Privileges Default Role Assignment Description Privilege AAA ...

Creating a User Role Procedure Step 1 On the menu bar, click Operations Management . Step 2 In the Navigation pane select a domain group for the user role. a) Expand the Domain Groups node. b) Expand the Domain Groups root node. Step 3 Under the Domain Groups node, do one of the following choices: •...

Deleting a User Role Procedure Step 1 On the menu bar, click Operations Management . Step 2 In the Navigation pane select a domain group for the user role. a) Expand the Domain Groups node. b) Expand the Domain Groups root node. Step 3 Under the Domain Groups node, do one of the following choices: •...

c) Expand the Roles node. Step 5 Choose the role to which you want to add privileges. Step 6 Click Properties . You can also right-click a Role to access that option. Step 7 In the Properties dialog box, check the boxes for the privileges you want to add to the role. Step 8 Click Save Changes . Remo...

A Cisco UCS domain can contain up to 48 user locales. Each domain group in Cisco UCS Central can contain48 user locales, including the user locales that are inherited from the parent domain group. When user localesare pushed to Cisco UCS Manager from Cisco UCS Central, only the first 48 locales will...

b) In the Description field, enter a description for the locale. Step 7 Click Filter . Step 8 In the Table Filter dialog box enter requested information. a) Choose the Assigned Organization filter. b) Enter the Assigned Organization filter value. Step 9 Click OK . Step 10 Click Assign Organization ....

Assigning an Organization to a User Locale Procedure Step 1 On the menu bar, click Operations Management . Step 2 In the Navigation pane select a domain group for the locale. a) Expand the Domain Groups node. b) Expand the Domain Groups root node. Step 3 Under the Domain Groups node, do one of the f...

b) Expand the User Services node. c) Expand the Locales node. Step 5 Click the locale with an assigned organization you want to delete. Step 6 Click Properties . Step 7 In the Work pane, click the Organization you want to delete. Step 8 Click Delete . You can also right-click an Organization you wan...

Creating a User Organization Procedure Step 1 On the menu bar, click Servers . Step 2 In the Navigation pane create an organization. a) Expand the Pools node. b) Click root . c) In the Work pane, click Create Organization . Step 3 In the Create Organization dialog box enter requested information. a)...

Creating a User Sub-Organization Procedure Step 1 On the menu bar, click Servers . Step 2 In the Navigation pane create a sub-organization. a) Expand the Pools node. b) Expand the root node. c) Click Sub-Organizations . Step 3 In the Sub-Organizations pane, click applicable assigned organization nam...

C H A P T E R 5 Firmware Management This chapter includes the following sections: • Firmware Download from Cisco, page 95 • Firmware Upgrades for Cisco UCS Domains, page 99 • Firmware Upgrade Schedules, page 103 • Capability Catalog, page 105 • Configuring a Capability Catalog Update for a Cisco UCS...

• Deleting the firmware image — You can delete any downloaded image in the firmware library using the delete option. • Purging the firmware image metadata — You can delete the image metadata using the purge option. Even after you delete the firmware image from the library, the metadata will still ex...

Procedure Step 1 On the menu bar, click Operations Management . Step 2 In the Navigation pane, expand Images . Step 3 Click Library . Step 4 In the Work pane, click Packages tab. The image metadata downloaded from Cisco will have the Source as Cisco and State as not-downloaded . Step 5 Right click o...

Procedure Step 1 On the menu bar, click Operations Management . Step 2 In the Navigation pane, expand Images . Step 3 Click Library . Step 4 In the Work pane, click Downloads tab. Step 5 In the Downloads tab, click Download Firmware . Step 6 In the Download Firmware dialog box, Location of the Image...

Procedure Step 1 On the menu bar, click Operations Management . Step 2 In the Navigation pane, expand Images . Step 3 Click Library . Step 4 The Work pane click the Packages tab. The available packages are displayed. You can select a package and click Properties to view details on specific packages....

Scheduling Infrastructure Firmware Updates for Cisco UCS Domains You can schedule an infrastructure firmware upgrade or downgrade for either a classic or mini Cisco UCSDomain from Infrastructure Firmware panel. For more information on managing firmware in Cisco UCS domains, see Cisco UCS Manager Fir...

Procedure Step 1 On the menu bar, click Operations Management . Step 2 In the Navigation pane, expand Domain Groups > Domain Groups Root > Firmware Management . Step 3 In the Work pane, click Pending Activities tab. Step 4 Choose the pending activity from the displayed list, right click and cl...

What to Do Next The host firmware policy you create in Cisco UCS Central will be available for association to a service profilein a Cisco UCS Domain registered to a domain group. Deploying a Host Firmware Upgrade You can update all host firmware policies defined in Cisco UCS Central to specific B an...

Firmware Upgrade Schedules To upgrade firmware by domain groups in registered Cisco UCS domains, you can schedule upgrades fromCisco UCS Central in the following ways: • As a one time occurrence • As a recurring occurrence that recurs at designated intervals If you configure the schedules for user a...

What to Do Next Associate the maintenance policy to a service profile in Cisco UCS Manager. Creating a One Time Occurrence Schedule Procedure Step 1 On the menu bar, click Operations Management . Step 2 In the Navigation pane, expand Domain Groups > Domain Groups Root > Schedules . Step 3 In t...

Deleting a Firmware Upgrade Schedule Procedure Step 1 On the menu bar, click Operations Management . Step 2 In the Navigation pane, expand Domain Groups > Domain Groups Root > Schedules . Step 3 The Work pane displays a list of all scheduled firmware events. Step 4 Click and choose the schedul...

User Display Strings • Part numbers, such as the CPN, PID/VID • Component descriptions • Physical layout/dimensions • OEM information Updates to the Capability Catalog Capability Catalog updates are included in each Cisco UCS Infrastructure Software Bundle. Unless otherwiseinstructed by Cisco TAC, y...

C H A P T E R 6 Domain Management This chapter includes the following sections: • Registering Cisco UCS Domains, page 109 • Domain Group and Registration Policies, page 112 • Call Home Policies, page 116 • Port Configuration, page 127 Registering Cisco UCS Domains To manage Cisco UCS Manager through...

Note • After you register a Cisco UCS domain in Cisco UCS Central, you cannot change or swap the IPused by the Cisco UCS Manager. If you need to change or swap the IP address, make sure to unregisterthe domain from Cisco UCS Central, change the IP address and then re-register in Cisco UCS Central. •...

domains, enabling local policy resolution will protect the Cisco UCS domain from accidentally overwritingpolicies. Creating a Domain Group You can create a domain group under the domain group root from the Equipment tab or from the Operations Management tab. You can create up to five hierarchical le...

Procedure Step 1 On the menu bar, click Equipment . Step 2 On the Equipment tab, expand UCS Domains . Step 3 In the Navigation pane, expand Ungrouped Domains . Step 4 Right click on the domain name and click Change Group Assignment . Step 5 In the Change Group Assignment dialog box, choose the domai...

Creating a Registration Policy Procedure Step 1 On the menu bar, click Equipment . Step 2 In the Navigation Pane, on the Equipment tab, expand UCS Domains > Policies . Step 3 Right-click Registration Policies and choose Create Registration Policy . Step 4 In the Create Registration Policy dialog ...

Creating an Address Qualifier Procedure Step 1 On the menu bar, click Equipment . Step 2 In the Navigation Pane, on the Equipment tab, expand UCS Domains > Policies . Step 3 Expand Registration Policies . Step 4 Right-click the registration policy that you want to update, and choose Create Addres...

Deleting an Owner Qualifier Procedure Step 1 On the menu bar, click Equipment . Step 2 In the Navigation Pane, on the Equipment tab, expand UCS Domains > Policies . Step 3 Expand Registration Policies . Step 4 In the Work pane, expand Owners . Step 5 Right-click the owner that you want to delete,...

Creating an ID Range Qualification Policy Procedure Step 1 On the menu bar, click Equipment . Step 2 In the Navigation Pane, on the Equipment tab, expand UCS Domains > Policies . Step 3 Right-click ID Range Qualification Policies and choose Create ID Range Qualification Policy . Step 4 In the Cre...

globally within that client's policy resolution control will defer all call home policies to its registration withCisco UCS Central. Configuring a Call Home Policy A call home policy is created from a domain group under the domain group root. Call home policies underthe Domain Groups root were alrea...

Deleting a Call Home Policy A call home policy is deleted from a domain group under the domain group root. Call home policies underthe domain groups root cannot be deleted. Deleting a call home policy will remove all profiles, policies and system inventory settings within that policy. Procedure Step...

Adding Email Recipients to a Call Home Profile Before You Begin Before adding email recipients to a profile for a call home policy, this profile must first be created. Procedure Step 1 On the menu bar, click Operations Management . Step 2 In the Navigation pane, expand Domain Groups > Domain Grou...

Configuring a Policy for a Call Home Policy Before You Begin Before configuring a policy for a call home policy under a domain group, this policy must first be created.Policies for call home policies under the Domain Groups root were already created by the system and readyto configure. Procedure Ste...

Deleting a Policy for a Call Home Policy Procedure Step 1 On the menu bar, click Operations Management . Step 2 In the Navigation pane, expand Domain Groups > Domain Group root . Step 3 Under the Domain Groups root node, click Operational Policies . Step 4 In the Navigation pane, click Operationa...

Configuring Ethernet Port You can configure the Ethernet port either as a Server Port or as an Uplink Port . When you configure the port, the port is automatically enabled. You can also Disable or UnConfigure a port. Procedure Step 1 From Domains tab, click Equipment > UCS Domains . Step 2 In the...

• Turn on/off Locator LED for chassis, blade and rack-mount servers, Fabric Interconnects (FI) and FEXes. • Create and download Tech Support Files from the registered UCS domains. If the servers are associated to a local or global service profile, you can do the following remote managementactions on...

If you select Decommission , after the decommissioning is complete, the server is moved to Decommissioned tab. Decommissioning may take sometime. Wait until the decommissioning status disappears to find the server in the Decommissioned tab. Note Step 7 Click OK . System displays a confirmation messa...

Procedure Step 1 From Domains tab, click Equipment > UCS Domains . Step 2 In the navigation pane, expand Domain Groups or Ungrouped Domains as applicable to find the UCS domain name where the server is associated. Step 3 In the Navigation pane, expand the UCS domain name and expand Chassis > S...

Recovering a Server You can recover a server from the Servers node for both blade and rack-mounts, where the Work pane lists all of the servers or at the specific server level from the list of servers in the Navigation pane. This procedure describes the process to recover a server at the specific se...

A pop-up dialog box displays a confirmation message after the chassis is acknowledged. Decommissioning a Chassis Procedure Step 1 From Domains tab, click Equipment > UCS Domains . Step 2 In the navigation pane, expand Domain Groups or Ungrouped Domains as applicable to find the UCS domain where t...

Recommissioning Servers or Chassis When you decommission a chassis, blade server or a rack-mount server, the decommissioned objects aremoved to the Decommissioned tab in the respective nodes such as Chassis , Chassis > Servers or Rack-Mounts > Servers . Procedure Step 1 From Domains tab, click...

Performing Rack Mount Server Maintenance from Cisco UCSCentral You can perform any one of the following maintenance actions on the rack server Server Maintenance : • Remove • Decommission • Re-acknowledge This procedure describes the process to perform this task from Domains > Equipments > UCS...

Procedure Step 1 From Domains tab, click Equipment > UCS Domains . Step 2 In the navigation pane, expand Domain Groups or Ungrouped Domains as applicable to find the UCS domain name where the fabric extender is associated. Step 3 In the Navigation pane, expand the UCS domain name and expand Fex ....

Recommissioning a Fabric Extender Procedure Step 1 From Domains tab, click Equipment > UCS Domains . Step 2 In the navigation pane, expand Domain Groups or Ungrouped Domains as applicable to find the UCS domain name where the fabric extender is associated. Step 3 In the Navigation pane, expand th...

Procedure Step 1 From Domains tab, click Equipment > UCS Domains . Step 2 In the navigation pane, expand Domain Groups or Ungrouped Domains as applicable to find the UCS domain name where the fabric extender is associated. Step 3 In the Navigation pane, expand the UCS domain name and expand Fex ....

What to Do Next If you want to review the information in the tech support file, download the file to your local system. See Downloading a Domain Tech Support File, on page 140 Downloading a Domain Tech Support File Procedure Step 1 From Domains > Equipment tab, expand UCS Domains . Step 2 In the ...

The table displays a list of available tech support files that you have created for this domain with details suchas Name , Overall Status , Size , and URI . Step 4 Click on the tech support file you want to delete.This enables the Delete , Download and Properties options on the menu bar. Step 5 Clic...

Procedure Step 1 From Domains tab, click Equipment > UCS Domains . Step 2 In the navigation pane, expand Domain Groups or Ungrouped Domains as applicable to find the UCS domain name where the server is associated. Step 3 In the Navigation pane, expand the UCS domain name and expand Chassis > S...

C H A P T E R 8 Service Profiles and Templates This chapter includes the following sections: • Global Service Profiles, page 145 • Global Service Profile Template, page 153 • Scheduling Service Profile Updates, page 156 Global Service Profiles Global service profile centralizes the logical configura...

• Zero or one outband IPv4 address, through which traffic traverses the fabric interconnect through themanagement port. • Zero or one inband (IPv4 or IPv6) address, through which traffic traverses the fabric interconnect throughthe fabric uplink port. You can configure either a pooled or a static ma...

Creating a Global Service Profile When you create a global service profile in Cisco UCS Central, you can specify a name for the new serviceprofile and then use the default values from the system for all other information. Procedure Step 1 On the menu bar, click Servers . Step 2 In the Navigation Pan...

What to Do Next Deploy the Global Service profile in UCS Domains. Renaming a Global Service Profile If a global service profile is in deferred deployment state, you cannot rename the service profile. Procedure Step 1 On the menu bar, click Servers . Step 2 In the Navigation Pane, expand Servers >...

Step 4 Click Create a Clone . Step 5 In Create a Clone dialog box, enter the New Name and select the Org in which you want place this cloned service profile.When you select an org, the Org Instance displays a link to the selected organization. Step 6 Click OK . Creating Global Service Profiles from ...

server. The service profile definition that is sent to the Cisco UCS domain includes the following information: • Service profile with reference policy names • vNICs and vHBAs along with their vLAN bindings • VCON assignment information for placement of VIFs in to appropriate VCON • The global VLAN ...

Unassigning a Server from a Global Service Profile When you disassociate a server from a service profile, Cisco UCS Central attempts to shutdown the operatingsystem on the server. If the operating system does not shutdown within a reasonable length of time, CiscoUCS Central forces the server to shut...

Step 3 Click the global service profile that you want to modify. Step 4 In the Work pane, from the Actions drop-down list, choose Rename Service Profile . Step 5 In the Rename Service Profile dialog box, enter the New Name . Step 6 Click OK . Changing the UUID in a Service Profile Procedure Step 1 O...

Resetting the Management IP for a Global Service Profile Resetting the management IP automatically assigns a new management IP from the selected IP pool. Before You Begin Consider the following points before resetting the management IP address: • You must not have modified the pool ’ s IP address bl...

Cloning a Global Service Profile Template Procedure Step 1 On the menu bar, click Servers . Step 2 In the Navigation Pane, expand Servers > Global Service Profile Templates > root . If you want to create or access a global service profile template in a sub-organization, expand Sub-Organization...

Procedure Step 1 On the menu bar, click Servers . Step 2 In the Navigation Pane, expand Servers > Global Service Profiles > root . If you want to create or access a global service profile in a sub-organization, expand Sub-Organizations > Organization_Name . Step 3 Click the global service p...

that is included in a service profile, or to an updating service profile template. For example, you can defer theupgrade and activation of firmware through host firmware packages and management firmware packages,such as server BIOS, RAID controller, host HBA, and network adapters. However, you canno...

Deferred Deployment Schedules A schedule contains a set of occurrences. These occurrences can be one time only or can recur at a specifiedtime and day each week. The options defined in the occurrence, such as the duration of the occurrence or themaximum number of tasks to be run, determine whether a...

A maintenance policy only prevents an immediate server reboot when a configuration change is made toan associated service profile. However, a maintenance policy does not prevent the following actions fromtaking place right away: Note • Deleting an associated service profile from the system • Disasso...

Step 6 Click OK . What to Do Next Add a one time or recurring occurrence to the schedule. Creating a One Time Occurrence Schedule Procedure Step 1 On the menu bar, click Operations Management . Step 2 In the Navigation pane, expand Domain Groups . Step 3 Expand the node for the domain group where yo...

Pending Activities If you configure deferred deployment in a Cisco UCS domain, Cisco UCS Central enables you to view allpending activities. You can see activities that are waiting for user acknowledgment and those that have beenscheduled. If a Cisco UCS domain has pending activities, Cisco UCS Centr...

Viewing Pending Activities Procedure Step 1 On the menu bar, click Operations Management . Step 2 In the Navigation pane, click Domain Groups . Step 3 In the Work pane, click the Pending Activities tab. Cisco UCS Central Software User Manual, Release 1.2 162 Service Profiles and Templates Pending Ac...

C H A P T E R 9 Global Pools This chapter includes the following sections: • Server Pools, page 163 • IP Pools, page 165 • IQN Pools, page 166 • UUID Suffix Pools, page 168 • MAC Pools, page 169 • WWN Pools, page 171 Server Pools A server pool contains a set of servers. These servers typically share...

• Server pool policy How to create a server pool, a server pool policy qualification, and a server pool policy, is discussed below: Procedure Step 1 On the menu bar, click Servers . Step 2 In the Navigation pane, expand Server > Pools > Root . Step 3 Right click the Server Pools , and select C...

IP Pools IP pools are a collection of IP addresses. You can use IP pools in Cisco UCS Central in one of the followingways: • For external management of Cisco UCS Manager servers. • For iSCSI boot initiators. • For both external management and iSCSI boot initiators in Cisco UCS Manager. The IP pool m...

If you plan to create another pool, wait at least 5seconds. Note What to Do Next Include the IP pool in a service profile and/or template. Deleting an IP Pool If you delete a pool, Cisco UCS Central does not reallocate any addresses from that pool that have beenassigned to vNICs or vHBAs in Cisco UC...

Creating an IQN Pool In most cases, the maximum IQN size (prefix + suffix + additional characters) is 223 characters. Whenusing the Cisco UCS NIC M51KR-B adapter, you must limit the IQN size to 128 characters. Note Procedure Step 1 On the menu bar, click Storage . Step 2 In the Storage tab, expand S...

Step 3 Expand the IQN Pools node. Step 4 Right-click the pool you want to delete and select Delete . If you plan to delete another pool, wait at least 5seconds. Note Step 5 If Cisco UCS Central GUI displays a confirmation dialog box, click Yes . UUID Suffix Pools A UUID suffix pool is a collection o...

Deleting a UUID Suffix Pool If you delete a pool, Cisco UCS Central does not reallocate any addresses from that pool that have beenassigned to vNICs or vHBAs in Cisco UCS Manager. All assigned addresses from a deleted pool remain withthe vNIC or vHBA to which they are assigned until one of the follo...

Creating a MAC Pool Procedure Step 1 On the menu bar, click Network . Step 2 In the Network tab, expand Network > Pools > Root . If you want to create or access a pool in a sub-organization, expand Sub-Organizations > Organization_Name Step 3 Right-click MAC Pools and select Create MAC Pool...

WWN Pools A WWN pool is a collection of WWNs for use by the Fibre Channel vHBAs in a Cisco UCS domain. WWNpools created in Cisco UCS Central can be shared between Cisco UCS domains. You create separate poolsfor the following: • WW node names assigned to the server • WW port names assigned to the vHB...

Creating a WWN Pool Procedure Step 1 On the menu bar, click Storage . Step 2 In the Storage tab, expand Storage > Pools > Root . If you want to create or access a pool in a sub-organization, expand Sub-Organizations > Organization_Name Step 3 Right-click WWN Pools and select Create WWN Pool...

C H A P T E R 10 Global VLANs and VSANs This chapter includes the following sections: • Global VLAN , page 175 • Global VSAN, page 180 Global VLAN Cisco UCS Central enables you to define global VLANs in LAN cloud at the domain group root or at thedomain group level. You can create a single VLAN or m...

VLAN name resolution takes place within the hierarchy of each domain group. If a VLAN with the samename exists in multiple domain groups, the organization permissions are applied to all VLANs with the samename across the domain groups. You can create, modify or delete VLAN org permission. Make sure ...

Creating Multiple VLANs This procedure describes how to create multiple VLANs in the domain group root or in a specific domaingroup. Important VLAN names are case sensitive. Procedure Step 1 On the menu bar, click Network . Step 2 In the Navigation pane, do one of the following: • To add multiple VL...

• Before deleting the last global VLAN from a domain group, you should remove its organizationpermissions. • If you delete a global VLAN, it is also deleted from all registered Cisco UCS Manager instances thatare associated with the domain groups in which the VLAN resides. • Global service profiles ...

• To assign VLAN permissions in the domain group root, expand the Domain Group root and click Common VLANs . • To assign VLAN permissions in a specific domain, expand the node for that domain group and click Common VLANs . Step 3 Highlight the VLAN to which you want to assign organization permission...

• To modify organizations for a VLAN in a specific domain group, expand that node and click Common VLANs . Step 3 Highlight the VLAN you want to modify. Step 4 Right click the highlighted VLAN, and click Properties . Step 5 Click the Org Permissions tab in the Properties dialog box, then click the M...

localized in Cisco UCS Manager, in which case they act as local VSANs. Unless a global VSAN is localized,it cannot be deleted from Cisco UCS Manager. Creating VSANs You can create a VSAN with IDs from 1 to 4093, except for those in the following reserved ranges: • If you plan to use FC switch mode i...

• disabled — The upstream switch configures and controls the Fibre Channel zoning, or Fibre Channel zoning is not implemented on this VSAN. • enabled — Cisco UCS Manager will configure and control Fibre Channel zoning when the VSAN is deployed. Fibre Channel zoning is disabled bydefault. Note Step 8...

Deleting VSANs This procedure describes how to delete one or more VSANs from the domain group root or from a specificdomain group. Procedure Step 1 On the menu bar, click Storage . Step 2 In the Navigation pane, do one of the following: • To delete one or more VSANs from the domain group root, expan...

C H A P T E R 11 Working with Policies This chapter includes the following sections: • Global Policies, page 185 • Policy and Policy Component Import in Cisco UCS Central, page 194 • Local Policies, page 199 • Statistics Threshold Policy, page 199 Global Policies You can create and manage global pol...

Before You Begin You must be logged in as an admin or as a user with admin privileges to perform this task. Procedure Step 1 On the menu bar, click Servers. Step 2 Expand Policies and then root. If you want to create a global policy in a sub-organization, expand Sub-Organizations > Organization_N...

Converting a Local Policy to a Global Policy You can change the ownership of the local policies to global only if they are associated with a service profile. Before You Begin You must be logged in as an admin or as a user with admin privileges to perform this task. Procedure Step 1 Launch Cisco UCS ...

Description Name Determines whether the date and time is defined locally or comes fromCisco UCS Central. Time Zone Management Determines whether HTTP, CIM XML, Telnet, SNMP, web sessionlimits, and Management Interfaces Monitoring Policy settings aredefined locally or in Cisco UCS Central. Communicat...

Behavior in Cisco UCS Managerwhen Registration Changed Behavior in Cisco UCS Manager onRegistration with Cisco UCS Central Policy Source Policies andConfiguration Deregisteredfrom Cisco UCSCentral Unassigned fromDomain Group Domain GroupAssigned Domain GroupUnassigned Cisco UCSManager Cisco UCSCentr...

Domain Group Assignedafter Registration withCisco UCS Central Behavior in Cisco UCS Manager on Registration withCisco UCS Central Policy Domain Group Unassigned / Domain Group Assigned Service Profile Modified Service Profile notModified Local/Remote (if resolvedto "default" postregistration...

If the search results are more than 1000, the results truncates. Make sure to refine the search using filters. Note Depending on the policy or component you are importing, you can import them into either of the followingdestinations: • Domain group root or to a specific domain • Org root or a specif...

Policies and Policy Dependents The following tables lists the policies or dependents that you can import from Cisco UCS Manager: Cisco UCS Central Software User Manual, Release 1.2 196 Working with Policies Policies and Policy Dependents

Description Polices or Dependents • IP Pools • IQN Pool • MAC Pool • UUID Suffix Pool • WWN Pool Pools • Host Firmware Package • IPMI Access Profile • Schedule • Service Profile Template • iSCSI Authentication Profile • vHBA Template • vNIC Template • vLAN • vSAN Policy dependents Policies that Caus...

Procedure Step 1 Click Import tab. Step 2 Search for the policy you want to import. You can search for the policy in one of the following two ways: • Click Select Type drop down option to find the policy you want to import, and click Search . • If you know the policy name, type the name in Search po...

the policy to raise an alarm if the CPU temperature exceeds a certain value, or if a server is overutilized orunderutilized. These threshold policies do not control the hardware or device-level thresholds enforced by endpoints, suchas the CIMC. Those thresholds are burned in to the hardware componen...

Adding a Threshold Class to an Existing Threshold Policy Procedure Step 1 On the menu bar, click Network . Step 2 In the Navigation Pane, expand Network > Policies > root . If you want to create or access a policy in a sub-organization, expand Sub-Organizations > Organization_Name . Step 3 ...

Step 3 Expand Threshold Policies . Step 4 Select the policy for which you want to create a threshold definition. Step 5 In the Work pane, click the General tab. Step 6 In the Threshold Classes table, right-click the threshold class that you want to modify and choose Create Threshold Definition . Ste...

Deleting a Threshold Definition from a Threshold Class Procedure Step 1 On the menu bar, click Network . Step 2 In the Navigation Pane, expand Network > Policies > root . If you want to create or access a policy in a sub-organization, expand Sub-Organizations > Organization_Name . Step 3 Ex...

C H A P T E R 12 Network Policies This chapter includes the following sections: • vNIC Template, page 205 • Default vNIC Behavior Policy, page 206 • LAN and SAN Connectivity Policies, page 207 • Network Control Policy, page 211 • Dynamic vNIC Connection Policy, page 213 • Quality of Service Policy, ...

Creating a vNIC Template Procedure Step 1 On the menu bar, click Network . Step 2 In the Navigation Pane, expand Network > Policies > root . If you want to create or access a policy in a sub-organization, expand Sub-Organizations > Organization_Name . Step 3 Right-click vNIC Templates and c...

You can configure the default vNIC behavior policy to define how vNICs are created. This can be one of thefollowing: • None — Cisco UCS Central does not create default vNICs for a service profile. All vNICs must be explicitly created. • HW Inherit — If a service profile requires vNICs and none have ...

Privileges Required for LAN and SAN Connectivity Policies Connectivity policies enable users without network or storage privileges to create and modify service profilesand service profile templates with network and storage connections. However, users must have the appropriatenetwork and storage priv...

Creating a vNIC for a LAN Connectivity Policy Procedure Step 1 On the menu bar, click Network . Step 2 In the Navigation Pane, expand Network > Policies > root . If you want to create or access a policy in a sub-organization, expand Sub-Organizations > Organization_Name . Step 3 Expand LAN ...

Step 3 Expand LAN Connectivity Policies . Step 4 Select the LAN connectivity policy for which you want to create an iSCSI vNIC. Step 5 In the Work pane, click the General tab. Step 6 In the iSCSI vNICs area, click Create iSCSI vNIC . Step 7 In the Create iSCSI vNIC dialog box, enter the name, choose...

Deleting an iSCSI vNIC from a LAN Connectivity Policy Procedure Step 1 On the menu bar, click Network . Step 2 In the Navigation Pane, expand Network > Policies > root . If you want to create or access a policy in a sub-organization, expand Sub-Organizations > Organization_Name . Step 3 Exp...

if your implementation includes those types of non-VM-FEX capable converged network adaptersmentioned in this section and the adapter is expected to handle both Ethernet and FCoE traffic, werecommend that you configure the Action on Uplink Fail property with a value of warning. Note that this config...

Deleting a Network Control Policy Procedure Step 1 On the menu bar, click Network . Step 2 In the Navigation Pane, expand Network > Policies > root . If you want to create or access a policy in a sub-organization, expand Sub-Organizations > Organization_Name . Step 3 Expand Network Control ...

Step 3 Right-click Dynamic vNIC Connection Policies and choose Create Dynamic vNIC Connection Policy . Step 4 In the Create Dynamic vNIC Connection Policy dialog box, enter the Name , optional description, Naming Prefix , and Number of Dynamic vNICs . Step 5 Choose the Adapter Policy from the drop-d...

Step 3 Right-click QoS Policies and choose Create QoS Policy . Step 4 In the Create QoS Policy dialog box, enter the Name and optional description. Step 5 In the Egress area, choose a Priority , enter the Burst(Bytes) and Rate(Kbps) , and choose the Host Control . Step 6 Click OK . What to Do Next I...

C H A P T E R 13 Server Policies This chapter includes the following sections: • Ethernet and Fibre Channel Adapter Policies, page 217 • Server BIOS Settings, page 219 • BIOS Policy, page 238 • IPMI Access Profile, page 240 • Boot Policy, page 242 • Local Disk Configuration Policy, page 253 • Power ...

For Fibre Channel adapter policies, the values displayed by Cisco UCS Central may not match thosedisplayed by applications such as QLogic SANsurfer. For example, the following values may result in anapparent mismatch between SANsurfer and Cisco UCS Central: Note • Max LUNs Per Target — SANsurfer has...

Step 3 Right-click Adapter Policies and choose Create Ethernet Adapter Policy . Step 4 In the Create Ethernet Adapter Policy dialog box, enter the Name and optional description. Step 5 In the Resources area, enter the Transmit Queues , Receive Queues , and Completion Queues , and the Ring Size for e...

Cisco UCS Central pushes BIOS configuration changes through a BIOS policy or default BIOS settingsto the Cisco Integrated Management Controller (CIMC) buffer. These changes remain in the buffer anddo not take effect until the server is rebooted. We recommend that you verify the support for BIOS sett...

Description Name What happens when the server encounters a critical error duringPOST. This can be one of the following: • disabled — The BIOS continues to attempt to boot the server. • enabled — The BIOS pauses the attempt to boot the server and opens the Error Manager when a critical error occursdu...

Description Name Sets the CPU performance profile for the server. This can beone of the following: • enterprise — For M3 servers, all prefetchers and data reuse are enabled. For M1 and M2 servers, data reuse and theDCU IP prefetcher are enabled, and all other prefetchersare disabled. • high-throughp...

Description Name Whether the processor supports Intel VT-d Pass-through DMA.This can be one of the following: • disabled — The processor does not support pass-through DMA. • enabled — The processor uses VT-d Pass-through DMA as required. • — The BIOS uses the value for this attribute contained in th...

Description Name Whether the system prioritizes low voltage or high frequencymemory operations. This can be one of the following: • power-saving-mode — The system prioritizes low voltage memory operations over high frequency memoryoperations. This mode may lower memory frequency inorder to keep the ...

PCI Configuration BIOS Settings The following table lists the PCI configuration BIOS settings that you can configure through a BIOS policyor the default BIOS settings: Description Name Whether the BIOS maximizes memory usage below 4GB foran operating system without PAE support, depending on thesyste...

Description Name Whether the BIOS retries NON-EFI based boot options withoutwaiting for user input. This can be one of the following: • disabled — Waits for user input before retrying NON-EFI based boot options. • enabled — Continually retries NON-EFI based boot options without waiting for user inpu...

BIOS Policy The BIOS policy is a policy that automates the configuration of BIOS settings for a server or group of servers.You can create global BIOS policies available to all servers in the root organization, or you can create BIOSpolicies in sub-organizations that are only available to that hierar...

Procedure Step 1 On the menu bar, click Servers . Step 2 In the Navigation Pane, expand Servers > Policies > root . If you want to create or access a policy in a sub-organization, expand Sub-Organizations > Organization_Name . Step 3 Right-click BIOS Policies and choose Create BIOS Policy ....

Deleting a BIOS Policy Procedure Step 1 On the menu bar, click Servers . Step 2 In the Navigation Pane, expand Servers > Policies > root . If you want to create or access a policy in a sub-organization, expand Sub-Organizations > Organization_Name . Step 3 Expand BIOS Policies . Step 4 Righ...

What to Do Next Include the IPMI profile in a service profile and/or template. Adding an IPMI User to an IPMI Access Profile Procedure Step 1 On the menu bar, click Servers . Step 2 In the Navigation Pane, expand Servers > Policies > root . If you want to create or access a policy in a sub-org...

Deleting an IPMI User from an IPMI Access Profile Procedure Step 1 On the menu bar, click Servers . Step 2 In the Navigation Pane, expand Servers > Policies > root . If you want to create or access a policy in a sub-organization, expand Sub-Organizations > Organization_Name . Step 3 Expand ...

• Standard boot order : Standard boot order is supported for all Cisco UCS servers, and enables top-level boot order choices. You can add a local device, such as local disk, CD-ROM, or floppy, or you can addSAN, LAN, or iSCSI boot. • Enhanced boot order : Enhanced boot order allows you greater contr...

• UEFI boot mode is only supported on Cisco UCS B-Series M3 and M4 Blade Servers and Cisco UCSC-Series M3 and M4 Rack Servers. • UEFI boot mode is not supported with the following combinations: ◦ Gen-3 Emulex & QLogic adapters on Cisco UCS blade & rack servers integrated with Cisco UCSdomain...

• Local device boot — Click Add CD/DVD ROM Boot , Add Local CD/DVD , or Add Local Disk , Add Floppy , or Add Remote Virtual Drive to add devices to the boot policy. • LAN Boot — Click Add LAN Boot to boot from a centralized provisioning server. • SAN Boot — Click Add SAN Boot to boot from an operati...

Step 3 Expand Boot Policies . Step 4 Right-click the policy that you want to delete and choose Delete . Step 5 If Cisco UCS Central GUI displays a confirmation dialog box, click Yes . LAN Boot You can configure a boot policy to boot one or more servers from a centralized provisioning server on theLA...

• The Cisco UCS domain must be able to communicate with the SAN storage device that hosts the operatingsystem image. • A boot target LUN on the device where the operating system image is located. SAN boot is not supported on Gen-3 Emulex adapters on Cisco UCS blade & rack servers. Note Configuri...

Step 3 Expand Boot Policies . Step 4 Click the boot policy for which you want add a SAN boot target. Step 5 In the Work pane, on the General tab, click Add SAN Boot Target . Step 6 In the Add SAN Boot Target dialog box, enter the Boot Target LUN and the Boot Target WWPN , and select primary or secon...

Previously, the host would see only one of the boot paths configured, depending on which path completedthe LUN discovery first, and would boot from that path. Now, when there are two iSCSI boot vNICsconfigured, the host will see both of the boot paths. So for multipath configurations, a single IQN n...

the Cisco UCS B-Series Servers Documentation Roadmap at http://www.cisco.com/go/ unifiedcomputing/b-series-doc . ◦ Set the MAC addresses on the iSCSI device. ◦ If you are using the DHCP Vendor ID (Option 43), configure the MAC address of an iSCSI devicein /etc/dhcpd.conf. ◦ HBA mode (also known as T...

If you want to create or access a policy in a sub-organization, expand Sub-Organizations > Organization_Name . Step 3 Expand Boot Policies . Step 4 Click the boot policy for which you want to configure an iSCSI boot. Step 5 In the Work pane, on the General tab, click Add iSCSI Boot . Step 6 In th...

Creating an iSCSI Authentication Profile For iSCSI boot, you need to create both an initiator and a target authentication profile Procedure Step 1 On the menu bar, click Servers . Step 2 In the Navigation Pane, expand Servers > Policies > root . If you want to create or access a policy in a su...

• RAID 0 Striped — Data is striped across all disks in the array, providing fast throughput. There is no data redundancy, and all data is lost if any disk fails. • RAID 1 Mirrored — Data is written to two disks, providing complete data redundancy if one disk fails. The maximum array size is equal to...

Maximum of One RAID Volume and One RAID Controller in Blade Servers A blade server can have a maximum of one RAID volume irrespective of how many drives are present in theserver. All the local hard drives must be connected to only one RAID controller. For example, a B200 M3server has an LSI controll...

If you want to create or access a policy in a sub-organization, expand Sub-Organizations > Organization_Name . Step 3 Right-click Local Disk Config Policies and choose Create Local Disk Config Policy . Step 4 In the Create Local Disk Config Policy dialog box, enter the Name and other optional det...

Creating a Power Control Policy Procedure Step 1 On the menu bar, click Servers . Step 2 In the Navigation Pane, expand Servers > Policies > root . If you want to create or access a policy in a sub-organization, expand Sub-Organizations > Organization_Name . Step 3 Right-click Power Control...

Depending upon how you configure a scrub policy, the following can occur at those times: Disk scrub One of the following occurs to the data on any local drives on disassociation: • If enabled, destroys all data on any local drives. • If disabled, preserves all data on any local drives, including loc...

If you want to create or access a policy in a sub-organization, expand Sub-Organizations > Organization_Name . Step 3 Right-click Scrub Policies and choose Create Scrub Policy . Step 4 In the Create Scrub Policy dialog box, enter the Name and optional description, and choose whether to use Disk S...

Step 3 Right-click Serial over LAN Policies and choose Create Serial over LAN Policy . Step 4 In the Create Serial over LAN Policy dialog box, enter the Name and optional description, choose the Serial over LAN State , and choose a Speed from the drop-down list. Step 5 Click OK . Deleting a Serial o...

If you want to create or access a policy in a sub-organization, expand Sub-Organizations > Organization_Name . Step 3 Right-click Server Pool Policies and choose Create Policy . Step 4 In the Create Policy dialog box, enter the Name , choose a Target Pool and Qualification from the drop-down list...

Depending upon the implementation, you might need to configure several policies with server pool policyqualifications including the following: • Autoconfiguration policy • Chassis discovery policy • Server discovery policy • Server inheritance policy • Server pool policy Creating Server Pool Policy ...

Step 3 Expand Server Pool Policy Qualifications . Step 4 Click the policy qualification that you want to modify. Step 5 In the Work pane, on the General tab, click Create Domain Qualification . Step 6 In the Create Domain Qualification dialog box, enter the Name . Step 7 In the Actions area, configu...

If you want to create or access a policy in a sub-organization, expand Sub-Organizations > Organization_Name . Step 3 Expand Server Pool Policy Qualifications . Step 4 Click the policy qualification that you want to modify. Step 5 In the Work pane, on the General tab, click Create Memory Qualific...

Step 3 Expand Server Pool Policy Qualifications . Step 4 Click the policy qualification that you want to modify. Step 5 In the Work pane, on the General tab, click Create Storage Qualification . Step 6 In the Create Storage Qualification dialog box, choose the Diskless state, then enter values for N...

Step 3 Expand Server Pool Policy Qualifications . Step 4 Click the policy qualification that you want to modify. Step 5 In the Work pane, on the General tab, click Create Domain Qualification . Step 6 In the Create Domain Qualification dialog box, click Create Chassis/Server Qualification . Step 7 I...

Step 3 Expand Server Pool Policy Qualifications . Step 4 Click the policy qualification that you want to modify. Step 5 In the Work pane, on the General tab, click Create Domain Qualification . Step 6 In the Create Domain Qualification dialog box, click Create Address Qualification . Step 7 In the C...

Step 3 Expand Server Pool Policy Qualifications . Step 4 Click the policy qualification that you want to modify. Step 5 In the Work pane, on the General tab, click Create Domain Qualification . Step 6 In the Create Domain Qualification dialog box, click Create Rack Qualification . Step 7 In the Crea...

Deleting a Domain Qualification from a Policy Qualification Procedure Step 1 On the menu bar, click Servers . Step 2 In the Navigation Pane, expand Servers > Policies > root . If you want to create or access a policy in a sub-organization, expand Sub-Organizations > Organization_Name . Step...

Deleting a Server Qualification from a Chassis/Server Qualification Procedure Step 1 On the menu bar, click Servers . Step 2 In the Navigation Pane, expand Servers > Policies > root . If you want to create or access a policy in a sub-organization, expand Sub-Organizations > Organization_Nam...

Deleting an Owner Qualification from a Domain Qualification Procedure Step 1 On the menu bar, click Servers . Step 2 In the Navigation Pane, expand Servers > Policies > root . If you want to create or access a policy in a sub-organization, expand Sub-Organizations > Organization_Name . Step...

Deleting a Site Qualification from a Domain Qualification Procedure Step 1 On the menu bar, click Servers . Step 2 In the Navigation Pane, expand Servers > Policies > root . If you want to create or access a policy in a sub-organization, expand Sub-Organizations > Organization_Name . Step 3...

Deleting a Memory Qualification from a Policy Qualification Procedure Step 1 On the menu bar, click Servers . Step 2 In the Navigation Pane, expand Servers > Policies > root . If you want to create or access a policy in a sub-organization, expand Sub-Organizations > Organization_Name . Step...

Step 3 Expand Server Pool Policy Qualifications . Step 4 Click the policy qualification that you want to modify. Step 5 In the Work pane, click the General tab. Step 6 Right-click the qualification that you want to delete and choose Delete . Step 7 Click Save to save the policy qualification. Deleti...

• — All configured vNICs and vHBAs can be assigned to the vCon, whether they are explicitly assigned to it, unassigned, or dynamic. This is the default. • — vNICs and vHBAs must be explicitly assigned to the vCon. You can assign them explicitly through the service profile or the properties of the vN...

Step 3 Expand vNIC/vHBA Placement Policies . Step 4 Right-click the policy that you want to delete and choose Delete . Step 5 If Cisco UCS Central GUI displays a confirmation dialog box, click Yes . vCon to Adapter Placement Cisco UCS maps every vCon in a service profile to a physical adapter on the...

Table 4: vCon to Adapter Placement Using the Round - Robin Mapping Scheme vCon4 Assignment vCon3 Assignment vCon2 Assignment vCon1 Assignment Number of Adapters Adapter1 Adapter1 Adapter1 Adapter1 1 Adapter2 Adapter1 Adapter2 Adapter1 2 Adapter2 Adapter3 Adapter2 Adapter1 3 Adapter4 Adapter3 Adapter...

C H A P T E R 14 Storage Policies This chapter includes the following sections: • vHBA Template, page 281 • Default vHBA Behavior Policy, page 282 • Ethernet and Fibre Channel Adapter Policies, page 283 • LAN and SAN Connectivity Policies, page 285 vHBA Template This template is a policy that define...

Deleting a vHBA Template Procedure Step 1 On the menu bar, click Storage . Step 2 In the Navigation Pane, expand Storage > Policies > root . If you want to create or access a policy in a sub-organization, expand Sub-Organizations > Organization_Name . Step 3 Expand vHBA Templates . Step 4 R...

We recommend that you use the values in these policies for the applicable operating system. Do not modifyany of the values in the default policies unless directed to do so by Cisco Technical Support. However, if you are creating an Ethernet adapter policy for a Windows OS (instead of using the defau...

Creating a SAN Connectivity Policy Procedure Step 1 On the menu bar, click Storage . Step 2 In the Navigation Pane, expand Storage > Policies > root . If you want to create or access a policy in a sub-organization, expand Sub-Organizations > Organization_Name . Step 3 Right-click SAN Connec...

• Custom Reports : Option to create customized reports from any of the available report options. Based on your requirements, you can create either create individual reports in the Ungrouped Reports or create Report Group s and then create reports under the groups or sub-groups. You can create, edit ...

• After upgrading to the latest version of Cisco UCS Central using the ISO image Earlier versions of Cisco UCS Central did not have the capability for statistics collection. After theupgrade process is complete, you can use the Cisco UCS Central CLI to set up an external database forstatistics data ...

Data Stored in the Table Table Name Chassis PSU data. equipmentPsuStats Rack server fan speed data. equipmentRackUnitFanStats Rack server PSU data. equipmentRackUnitPsuStats Ethernet traffic receive data etherRxStats Ethernet traffic transmit data. etherTxStats FC traffic data. fcStats CPU environme...

Connecting to an External Oracle Database Before You Begin • Set up an external Oracle database. The supported version is Oracle Database 11g Enterprise EditionRelease 11.2.0.1.0 - 64-bit Production or higher. Note down the database server hostname, the databasename, the user name and the password t...

What to Do Next You can change the statistics collection interval from the default 15 minutes to 30 minutes. This is optional. Connecting to an External PostgreSQL Database Before You Begin • Set up an external PostgreSQL database. The supported version is PostgreSQL (9.2.3) or higher. Notedown the ...

Related Topics • Generating a Network Report, on page 297 Generating a Network Report Before You Begin You must be logged in as an administrative user or as a user with statistics privilege to modify the parametersof the standard reports. Other users can only run the currently available reports, and...

Procedure Step 1 On the menu bar, click Statistics . Step 2 In the navigation pane, expand Standard Reports > Cooling and click Peak Fan Speed . Step 3 If you want to run the report with existing options, click Run Report To Load Data . Step 4 If you want to modify existing configuration, click C...

Procedure Step 1 On the menu bar, click Statistics . Step 2 In the navigation pane, expand Standard Reports > Power and click Average Power . Step 3 If you want to run the report with existing options, click Run Report To Load Data . Step 4 If you want to modify existing configuration, click Conf...

Deleting a Report Group When you delete a report group from the Cisco UCS Central GUI, all reports you created within this groupare also deleted. Important Before You Begin • You must be logged in as an administrator user or as a user with statistics privileges to perform this task. • Evaluate the l...

Step 4 In the Create Report dialog box, specify the Name for the report. Step 5 (Optional) Specify a description for the report. Step 6 In the Properties area, specify the required information. Based on the report type you select, the required data in the Properties area changes. Make sure to specif...

C H A P T E R 16 Managing Backup and Restore This chapter includes the following sections: • Backup and Import in Cisco UCS Central, page 303 • Backing up and Restoring Cisco UCS Central, page 307 • Backing up and Restoring Cisco UCS Domains, page 310 • Import Configuration, page 311 Backup and Impo...

The maximum number does not impact the number of backup image files you can store on a remotelocation. Note You can view the list of backups for each Cisco UCS domain from the Cisco UCS Central GUI and you canalso delete saved or unused backup directories and configurations. Important • You must hav...

Backup Locations The backup location is the destination or folder on the network where you want Cisco UCS Central toexport the backup file. You can maintain only one backup operation for each location where you planto save a backup file. Potential to Overwrite Backup Files If you rerun a backup oper...

• config-system — System configuration back up is an XML file that includes statistics configuration and scheduler information. You can use the file generated from this backup to import these configurationsettings. You cannot use this file for a full state system restore during installation. System ...

Backing up and Restoring Cisco UCS Central You can back up Cisco UCS Central database or configuration using scheduled backup policies and on creatingon demand backup of the system. The following are two types of scheduled backup policies for Cisco UCSCentral from the Administration tab: • Full-Stat...

If you specify a remote location, make sure that location exists. You must have an absolute remote pathready when you select the remote location. Note Procedure Step 1 On the menu bar, click Administration tab. Step 2 In the Navigation pane, click General . Step 3 In the work pane, click Config-all ...

Creating a Backup Schedule for Cisco UCS Central You can create a backup schedule for both full state backup policy and config-all back up policy and save theimage file either in a network location or in a remote file system. The Backup State must be in Enable for Cisco UCS Central to trigger backup...

Backing up and Restoring Cisco UCS Domains You can create global backup policies for registered UCS domains in Cisco UCS Central at the domain grouproot or at the domain group levels. When you create a global backup policy, Cisco UCS domains that are part of the domain group inherit thepolicy creati...

You must have Cisco UCS Manager, release 2.2(2x) to use a remote location to save the backupimage file. Note c) In Schedule drop-down, select the frequency you want to schedule the backup for. d) In Max Files , specify the maximum number of files you want to save in this location for ths system. Ste...

The import function is available for all configuration, system configuration, and logical configuration files.You can perform an import while the system is up and running. An import operation modifies informationon the management plane only. Some modifications caused by an import operation, such as ...

Procedure Step 1 On the menu bar, click Operations Management . Step 2 In the Navigation pane, expand Backup and Import. Step 3 Click the UCS Central System node. Step 4 In the work pane, click the Import tab. Step 5 Click Create Import Operation. Step 6 In the Create Import Operation dialog box, co...

Running an Import Operation Choose the UCS Central System option to run an import operation for Cisco UCS Central. Use the UCS Central option to run an import operation for Cisco UCS Manager. Procedure Step 1 On the menu bar, click Operations Management . Step 2 In the Navigation pane, expand Backup...

C H A P T E R 17 Monitoring Inventory This chapter includes the following sections: • Inventory Management, page 315 • Overview to Global Logical Resources, page 316 • Configuring Inventory Data Collection Schedule, page 317 • Viewing Inventory Details, page 317 • Viewing Inventory Details of a Serv...

UCS domain is detected again, Cisco UCS Central start collecting current data and displays in the domainmanagement panel. The General tab in Domain Management panel, displays a list of registered Cisco UCS domains. You can click on the tabs to view details on each component. You can also launch the ...

Configuring Inventory Data Collection Schedule Procedure Step 1 On the menu bar, click Equipment . Step 2 In the Navigation Pane, click Domain Management . Step 3 In the Work pane, General tab, Summary > Polling Interval click the drop down option. Select the interval from the options. Step 4 Cli...

If you want to view inventory details of a rack servers, expand UCS Domains > Domain Groups > Domain Group root > UCS Domain > Rack-Mounts > Server . Step 3 Select the server that you want to view the inventory details. Step 4 In the Work pane, click Inventory tab. Step 5 Select the c...

Procedure Step 1 On the menu bar, click Servers . Step 2 In the Navigation pane, expand Servers > Service Profile > Root , and click the service profile name. Step 3 The Work pane displays the details of selected service profile. Viewing Service Profile Templates Procedure Step 1 On the menu b...

Creating an Organization Under Sub-Organizations Procedure Step 1 On the menu bar, click Servers . Step 2 In the Navigation pane, expand Server > Local Service Profiles > Root . Step 3 Click Sub-Organization tab. in the Work pane, click Create Organization tab. Step 4 In the Work pane, click S...

C H A P T E R 18 System Management This chapter includes the following sections: • Managing DNS Policies, page 321 • Managing Power Policies, page 323 • Managing Time Zones, page 325 • SNMP Policies, page 328 • About High Availability in Cisco UCS Central, page 340 • Logs and Faults, page 342 Managi...

• hrSWRunPerf • UCD-SNMP-MIB • Memory • dskTable • systemStats • fileTable • SNMP MIB-2 Interfaces • ifTable • IP-MIB • SNMP-FRAMEWORK-MIB • snmpEngine • IF-MIB • DISMAN-EVENT-MIB • SNMP MIB-2 snmp Cisco UCS Central does not provide support for IPV6 andCisco UCS Central MIBs. Note Authentication Pro...

authentication, restarts, the closing of a connection, loss of connection to a neighbor router, or other significantevents. Cisco UCS Central generates SNMP notifications as traps. Traps are less reliable because the SNMP managerdoes not send any acknowledgment when it receives a trap, and Cisco UCS...

Step 6 Click Save . Deleting an SNMP User Procedure Step 1 On the menu bar, click Operations Management . Step 2 In the Navigation pane, expand Domain Groups > Domain Group root . Step 3 In the Navigation pane, click Operational Policies . Step 4 In the Work pane, click SNMP . Step 5 In the SNMP ...

Core File Exporter Cisco UCS uses the Core File Exporter to export core files as soon as they occur to a specified location onthe network through TFTP. This functionality allows you to export the tar file with the contents of the corefile. Configuring a TFTP Core Export Policy Before You Begin Befor...

Procedure Step 1 On the menu bar, click Operations Management . Step 2 In the Navigation pane, expand Domain Groups > Domain Group root . Step 3 Under the Domain Groups root node, click Operational Policies . Step 4 In the Navigation pane, click Operational Policies . Step 5 In the Work pane, cli...

Configuring a Syslog Remote Destination Policy Before You Begin Before configuring a syslog remote destination debug policy under a domain group, this policy must first becreated. Policies under the Domain Groups root were already created by the system and ready to configure. Procedure Step 1 On the...

Step 9 Click Save . Configuring a Syslog LogFile Policy Before You Begin Before configuring a syslog logfile debug policy under a domain group, this policy must first be created.Policies under the Domain Groups root were already created by the system and ready to configure. Procedure Step 1 On the m...

High Availability Architecture You will deploy Cisco UCS Central in two VMs on separate hosts to enable high availability. High availability- • Requires at least one Cisco UCS Manager be registered with Cisco UCS Central for a cluster to supporthigh availability • Uses the same subnet for individual...

• For high availability Cisco UCS Central supports the most commonly used bus types, such as SAS ,Fiber Channel (FC), and iSCSI. SCSI compatibility with Persistent Reservations (PRs) is recommended.LUN masking or zoning should be used to isolate the storage volumes accessed by the cluster from other...