Table of Contents About This Document.......................15 Intended Audience..........................15 New and Changed Information in This Edition...................15 Publishing History..........................15 Document Organization........................17 Typographic Conventions........................18 Related Information..........................18 HP Contact Information........................19 Documentation Feedback........................19 1 Introduction to iLO 2....................21 Features..............................21 Standard Features..........................22 Always-On Capability........................22 Virtual Front Panel........................22 Multiple Access Methods......................22 Security............................22 User Access Control........................22...
Page 4
Onboard Administrator........................31 HP Integrity rx2660 Server Components....................33 HP Integrity rx3600 and rx6600 Server Components................33 iLO 2 MP Status LEDs...........................34 iLO 2 MP Reset Button..........................35 Resetting Local User Accounts and Passwords to Default Values..........35 Console Serial Port and Auxiliary Serial Port..................35 MP LAN Port............................36 MP LAN LEDs..........................36 3 Getting Connected to iLO 2..................37...
Page 5
Upgrading the Lights-Out Advanced KVM Card Firmware............67 6 Accessing the Host (Operating System) Console.............69 Accessing a Text Host Console through iLO 2 Virtual Serial Console..........69 Accessing Online Help........................70 Accessing a Text Host Console Using the TUI..................70 Help System.............................70 Accessing a Graphic Host Console Using the Integrated Remote Console.........71 Accessing a Text Host Console Using SMASH SM CLP..............71 7 Configuring DHCP, DNS, LDAP, and Schema-Free LDAP........73 Configuring DHCP..........................73...
Page 6
IT: Inactivity timeout settings....................98 LC: LAN configuration usage.....................98 LDAP: LDAP directory settings....................99 LDAP: LDAP group administration..................100 LDAP: Schema-Free LDAP....................101 LM: License management......................101 LOC: Locator UID LED configuration..................101 LS: LAN status.........................101 PC: Power control access......................101 PM: Power regulator mode......................102 PR: Power restore policy configuration..................103 PS: Power status........................103 RB: Reset BMC..........................103 RS: Reset system through the RST signal.................103...
Page 7
Power Regulator........................135 Administration..........................137 Firmware Upgrade........................137 Licensing...........................138 User Administration > Local Accounts..................139 Group Accounts........................140 Access Settings..........................141 LAN............................142 Serial Page..........................143 Login Options Page........................143 Current LDAP Parameters.......................144 Network Settings........................146 Network Settings > Standard....................146 Domain Name Server.......................147 SNMP Settings..........................148 BL c-Class............................149 Help...............................150 SMASH Server Management Command Line Protocol..............152 SM CLP Features and Functionality Overview................152 SM CLP Session........................152 Accessing the SM CLP Interface....................152...
Page 9
Example: Creating and Configuring Directory Objects for Use with iLO 2 in Active Directory...186 Directory Services Objects......................189 Active Directory Snap-Ins......................190 Managing HP Devices In a Role..................190 Managing Users In a Role....................190 Setting Login Restrictions......................191 Setting Time Restrictions....................192 Defining Client IP Address or DNS Name Access.............192 Setting User or Group Role Rights....................193 Directory Services for eDirectory......................194 Installing and Initializing Snap-In for eDirectory.................194...
Page 11
List of Figures OA/iLO Network Port and Components..................31 Onboard Administrator LEDs and Buttons..................32 HP Integrity rx2660 Server Rear View..................33 HP Integrity rx3600 and rx6600 Server Rear Ports and LEDs............34 Console Serial Port (RS-232) Connector..................35 MP LAN Port..........................36 Setup Flowchart..........................39 SUV Cable............................47 Connecting the SUV Cable To the Server Blade................48 PCI-X or PCI-X/PCIe Card Cage (Common to all supported servers)..........62 dvc.CAB Error..........................64...
Page 12
HP Devices Tab..........................190 Members Tab..........................191 9-10 Role Restrictions Tab........................191 9-11 Logon Hours Screen........................192 9-12 New IP/Mask Dialog Box......................193 9-13 Lights-Out Management Tab.......................194 9-14 Roles and Devices Example......................195 9-15 Select Object Subtype Dialog Box....................196 9-16 Setting Role Rights........................197 9-17 Role Managed Devices Subtab....................198 9-18 Members Tab (eDirectory)......................199 9-19...
Page 13
List of Tables Publishing History Details......................15 Supported Systems and Required Components Matrix...............27 iLO 2 MP Status LEDs........................34 Console Serial Port Pinouts......................35 MP LAN Port Pinouts........................36 MP LAN Link Status LEDs......................36 MP LAN Link Speed LEDs......................36 Setup Checklist..........................38 Physical Connection Matrix......................40 LAN Configuration Methods......................41 ARP Ping Commands........................43 TCP Ports............................56...
About This Document This document provides information and instructions on how to use the HP Integrated Lights-Out 2 (iLO 2) for Integrity for BL870c, BL860c, rx2660, rx3600, and rx6600 servers. The document date and part number indicate the document’s current edition. The date changes when a new edition is published.
Page 16
Table 1 Publishing History Details (continued) Document Operating Systems Supported Supported Servers Publication Date Manufacturing Part Number 5991-5983 HP-UX 11i v2 BL860c June 2007 OpenVMS 8.3 rx2660 Microsoft Windows Server 2003 rx3600 Red Hat Linux and SuSE rx6600 5991-5992 HP-UX 11i v2 BL860c November 2007 OpenVMS 8.3 1H1...
Table 1 Publishing History Details (continued) Document Operating Systems Supported Supported Servers Publication Date Manufacturing Part Number 5991-8053_ed9 HP-UX 11i v3 BL870c August 2009 OpenVMS 8.3 1H1 BL860c Microsoft Windows Server 2008 rx2660 Red Hat Linux and SuSE rx3600 rx6600 rx7640* rx8640* Superdome sx2000*...
Chapter 9 Installing and Configuring Directory Services Use this chapter to learn about installing and configuring directory services functions. Glossary Use the glossary to learn iLO 2 terms and definitions. Typographic Conventions This document uses the following typographical conventions: %, $, or # A percent sign represents the C shell system prompt.
http://www.hp.com/go/Blades-docs for HP Integrity server blades Windows Operating System Information Find information about administration of the Microsoft Windows operating system on the following website: http://www.microsoft.com/technet/ Diagnostics and Event Monitoring: Hardware Support Tools Complete information about HP hardware support tools, including online and offline diagnostics and event monitoring tools, is on the HP website at: http://www.docs.hp.com/HP-UX/diag/ Website for HP Technical Support...
1 Introduction to iLO 2 The Integrated Lights-Out Management Processor (iLO MP) for Integrity servers is an autonomous management subsystem embedded directly on the server. It is the foundation of the server’s High Availability (HA) embedded server and fault management. It also provides system administrators secure remote management capabilities regardless of server status or location.
NOTE: The following ProLiant iLO 2 features are not available on Integrity iLO 2: • Virtual Folder • Shared LAN • Graphics Console Replay Integrity iLO 2 offers the following standard and advanced features. Standard Features Integrity iLO 2 standard features provide the following basic system board management functions, diagnostics, and essential Lights-Out functionality on iLO 2-supported HP servers.
MP Configuration Access Right to configure all iLO 2 MP settings and some system settings, such as the power restore policy. Virtual Media Access Enables Advanced Pack license users the right to use the virtual media applet. Multiple Users Multiple users can interact with iLO 2. However, iLO 2 command mode and console mode are mirrored, allowing only one user at a time to have write access to the shared console.
Firmware Upgrades Firmware upgrades enhance the functionality of iLO 2. The MP firmware is packaged along with system, BMC, and FPGA/PSOC firmware. You can download and upgrade the firmware package from the HP website at http://www.hp.com/go/ bizsupport. Select Download drivers and software, select your server, and follow the instructions provided. TIP: Before performing certain iLO 2 functions, verify that you have the supported firmware version required to carry out the task.
SM CLP The SM CLP specification defines a user friendly command-line protocol that provides command line interface (CLI) standards for interoperability. Mirrored Console The system console output stream is reflected to all connected console users, and any user can provide input. Remote Power Control Integrity iLO 2 enables remote power cycle, power on and power off, and TOC.
Virtual Media depends on a reliable network with good bandwidth. This is especially important when you are performing tasks such as large file transfers or OS installs. NOTE: iLO vMedia is automatically disconnected if the iLO management processor is reset. HP does not recommend use of iLO vMedia with firmware update tools such as HPOFM which reset the management processor mid-way through the update process.
Information on HP IPM is available on the HP website at http://www.hp.com/go/ipm. Obtaining and Activating iLO 2 Advanced Pack Licensing For Integrity entry class systems, an Integrity iLO 2 Advanced Pack license key can be purchased from your HP sales rep. To find the part number for the option for your system, see the HP website at http:/www.hp.com/go/integrityilO.
Table 1-1 Supported Systems and Required Components Matrix (continued) Supported Required Components Required Cables Systems rx3600, rx6600 Core I/O board without VGA; factory installed LAN and serial cables Core I/O board with VGA (optional) LAN, serial, and VGA cables (This is only supported on Windows Server OS.) rx7640, rx8640, iLO 2 hardware is integrated in the main...
Privacy Integrity iLO 2 uses SSL for web connections, RSL-RC4 encryption for IRC and remote serial console, and SSH-DES3/DES128 2.0 recommended encryption algorithms for SSH-based connections. You can enable or disable Telnet, IPMI over LAN, web, and SSH connectivity. Login After initial failed login attempts (default three), a delay of approximately one second is imposed on the serial connection and the login banner warnings are repeated.
2 Ports and LEDs All iLO 2 functions are available through the server MP LAN port and the local and remote serial ports. On HP Integrity server blades, all iLO 2 functions are available on the Onboard Administrator (OA). This chapter describes the available iLO 2 ports, connectors, and LEDs on the HP Integrity server blades, and the rx2660, rx3600, and rx6600 servers.
OA/iLO Network Port Enclosure Link-Up Port OA Bay 1 Enclosure Link-Down Port OA Bay 2 (redundant if used) Figure 2-2 shows the OA LEDs and buttons. Figure 2-2 Onboard Administrator LEDs and Buttons OA UID LED OA Health LED Enclosure UID LED OA Reset Button OA Active LED Ports and LEDs...
HP Integrity rx2660 Server Components Figure 2-3 shows the rear view of the HP Integrity rx2660 server. The system LAN functionality is integrated into the system board. Figure 2-3 HP Integrity rx2660 Server Rear View Power Supply 1 and LED Auxiliary Serial Port MP LAN Port Power Supply 2 and LED...
NOTE: This figure is oriented vertically to match the orientation of the core I/O board. Figure 2-4 HP Integrity rx3600 and rx6600 Server Rear Ports and LEDs iLO 2 MP Serial Console USB 2.0 Ports (any USB VGA Port (No iLO 2 access; Port (RS-232) (DB-9F to device) EFI only)
Table 2-1 iLO 2 MP Status LEDs (continued) iLO 2 MP Status LED LED State iLO 2 MP Heartbeat Flashing green. BMC Heartbeat Flashing green. iLO 2 MP Reset Button The iLO 2 MP Reset button enables you to reset iLO 2 and reset the user-specific values to factory default values.
Table 2-2 Console Serial Port Pinouts (continued) Pin Number Signal Description Requests to send Clears to send Not used MP LAN Port Figure 2-6 shows the MP LAN port connector pins and LEDs. Figure 2-6 MP LAN Port Table 2-3 maps the MP LAN port connector pin numbers to their signal descriptions.
Setup Checklist Use the checklist in Table 3-1 to help set up iLO 2. Table 3-1 Setup Checklist Step Action Standard For rackmount servers, perform steps 1 and 2. For server blades, see “Server Blade Connection” (page 45) and continue with steps 3-8. Prepare 1.
Setup Flowchart Use this console setup flowchart as a guide to help set up the Integrity iLO 2. Figure 3-1 Setup Flowchart There are differences in how you connect to iLO 2 depending on if you have a rackmount server or a server blade.
Rackmount Server Connection For a rackmount server, you can connect directly through the serial console or you can connect using the MP LAN. To set up the console, follow these steps: Determine the physical access method to connect cables. There are two physical connections to iLO 2 : •...
Determining the iLO 2 MP LAN Configuration Method To access iLO 2 through the MP LAN, iLO 2 must acquire an IP address. The way iLO 2 acquires an IP address is dependent upon whether DHCP is enabled or disabled on the server, and if DHCP and DNS services are available to the server (see Table 3-3).
Obtain the factory-set DNS name from the iLO Network Information Tag on the server. The DNS name is 14 characters long. It consists of the letters MP followed by the 12 characters of the MAC address. For example: mp0014c29c064f This address is assigned to the iLO 2 MP system board. The system board has a unique MAC address that identifies the hardware on the network.
Table 3-4 ARP Ping Commands ARP Command Description Assigns the IP address to the iLO 2 MP MAC address. This ARP table entry maps the MAC arp -s address of the iLO 2 MP LAN interface to the static IP address designated for that interface. Tests network connections and verifies that the MP LAN port is configured with the appropriate ping IP address.
Page 44
IMPORTANT: Do not configure duplicate IP addresses on different servers within the same network. The duplicate server IP addresses conflict and the servers cannot connect to the network. The LC command enables you to configure a static IP address, host name, subnet mask, and gateway address.
NOTE: HP ProLiant servers allow you to assign a static IP address at boot time to iLO 2 using a VGA monitor, keyboard, and mouse and HP ProLiant BIOS commands. This feature is not available on HP Integrity servers. Server Blade Connection For a server blade, you can connect directly through the SUV cable to the serial console or you can connect using the MP LAN internal connection in the blade enclosure.
NOTE: On the HP Integrity server blades, you have access to two serial ports through the RS-232 connector. The default setting is for the iLO 2 interface, the other is for an AUX UART directly connected to the host operating system and can be used for any serial device (terminal, debug port, and so on).
Figure 3-2 SUV Cable Server Blade Connector 2-Port USB VGA (no access to iLO 2) 9-Pin Console Serial Port (RS-232) USB Label USB-1 USB-0 Server Blade Connection...
Figure 3-3 Connecting the SUV Cable To the Server Blade Connecting the Server Blade To iLO 2 Using the Onboard Administrator If the OA/iLO network port on the enclosure is connected to the local network that has a DHCP server, your iLO 2 MP IP address is automatically generated by the DHCP server. The server blade is factory set with DHCP enabled.
NOTE: For the HP Integrity server blades, you can use the OA to set the IP addresses for all iLO 2s. You can also find the iLO 2 MP address so you can log in. IMPORTANT: Integrity iLO 2 must have a reachable IP address as the default gateway address. Since the OA is always reachable, HP recommends using the OA IP address as the gateway address for Integrity iLO 2.
access to all aspects of the OA including configuration, firmware updates, user management, and resetting default settings. Operators Provided access to the host system IRC, serial console, and vMedia. This level equates to an iLO 2 user with Remote Console Access, Virtual Power and Reset, Virtual Media, and Configure iLO settings.
User Creation When the OA sends a request to iLO 2 to create a new user, iLO 2 attempts to create a user in the local iLO 2 user database. Creation of an OA user could fail for a number of reasons: •...
Access the MP Main Menu. Enter CM at the MP> prompt. Enter UC at the MP:CM> prompt and follow the prompts to modify default passwords. To set up user accounts, follow these steps: Access the MP Main Menu. Enter CM at the MP> prompt. Enter UC at the MP:CM>...
Page 53
Run ilosetup.efi from EFI. fs0:\EFI\TOOLS> ilosetup get Current LAN parameters: IP Address : 127.0.0.1 Subnet : 255.255.255.0 Gateway : 127.0.0.1 fs0:\EFI\TOOLS> fs0:\EFI\TOOLS> ilosetup set -l -i 15.255.96.44 -g 15.255.96.1 -s 255.255.248.0 Attemping to set iLO LAN parameters... LAN parameters have been set. The iLO2 resets after you have successfully configured the LAN parameters.
4 Logging In to iLO 2 This chapter provides instructions on how to log in to iLO 2. Integrity iLO 2 standard features provide basic system board management functions, diagnostics, and essential Lights-Out functionality on iLO 2-supported HP servers. For a list of the standard features, see “Standard Features”...
Table 4-1 TCP Ports Port Identifier Port Type Port Functionality Port 22 SSH port This is the default port used by clients connecting to iLO 2 using SSH protocol. Port 23 Telnet port This is the default port used by clients connecting to iLO 2 using Telnet protocol.
5 Adding Advanced Features Integrity iLO 2 advanced features are enabled on Integrity servers in one of two ways. • For Integrity entry class and server blades, the advanced features are enabled with a license key. • For Integrity cell-based servers, the advanced features are enabled with a PCI-X accessory card instead of a key.
— vMedia enables remote attachment of a USB read-only CD or DVD storage device, or ISO file image, including support for bootable media. — Use vMedia to easily upgrade firmware on npars. — Create an ISO file of a vfat file system with the required files ◦...
Table 5-1 Supported System Configurations System Component Description nPartition operating system • Microsoft Windows Server 2003 • HP-UX 11i v2 or later • OpenVMS Version 8.3 or later • Windows 2008 Supported platforms • rx7640 • rx8640 • Superdome sx2000 You can install the Lights-Out Advanced KVM card on any sx2000-based Integrity server with updated management processor firmware that provides iLO 2 functionality and uses the web interface to access iLO 2.
Advanced KVM card IP address. To manually set the Lights-Out Advanced KVM card IP address, follow these steps: • If you are using the web GUI, use the LAN Settings page on the Administration tab. • If you are using the MP CLI, use the LC command. —...
mass storage driver. Once the USB mass storage driver is loaded, the server OS does not require additional HP drivers running on the server OS. Additionally, the host server EFI system firmware is extended to support USB virtual devices, making virtual media available end-to-end (in a pre-boot environment, through OS loading and while the OS is operational).
IMPORTANT: The HP Integrity rx8640 and rx7640 midrange servers support only one Lights-Out Advanced KVM card per partition, and the card must be installed in an I/O chassis with a core I/O card installed. If you install multiple Lights-Out Advanced KVM cards on one partition, only the first card that is detected is fully enabled.
Position the card over the empty slot, ensuring that the edge connector keyways match on the PCI-X or PCI-X/PCIe backplane connector. Using slow, firm pressure, seat the card in the slot. Connect the management LAN cable to the LAN port on the card. NOTE: If you do not wish to use the on-card KVM features, ignore steps 6 and 7, and proceed to step 8.
NOTE: The IRC is only supported on Windows systems. You can only open one IRC session at a time with one iLO 2 web GUI session. If not yet done, go to the EFI Shell: acpiconfig windows and reset. Start the IRC. If you get the following “dvc.cab unknown publisher” error: Figure 5-2 dvc.CAB Error Follow these steps: Close the IRC window.
In the main iLO 2 web GUI, there are a number of new tools that are unique to the Integrity cell-based servers. Specifically, there are pull-down tabs that enable you to select individual partitions for power (on/off/reset) management, vMedia, and IRC / vKVM. The last two, vMedia and IRC, are enabled per partition with the Lights-Out Advanced KVM card.
Table 5-3 General Troubleshooting Problem Solutions Graphics error: Hardware problem: • Must have supported power enabled. Black screen. No text is displayed. • Must have a functional mode-1 PCI-X slot. Try selecting another mode-1 slot on same partition/backplane. • Must have the card firmly seated in PCI-X/PCI-Xe backplane slot.
Table 5-4 Unsupported Core I/O Configurations with Possible Solutions Server Configuration Result Solution rx7640 • One core I/O card installed in Operating system does not Move the Lights-Out I/O chassis 1. boot with this unsupported Advanced KVM card to I/O configuration.
Page 68
TIP: Before performing certain iLO 2 functions, verify that you have the supported firmware version required to carry out the task. Adding Advanced Features...
6 Accessing the Host (Operating System) Console This chapter describes several ways to access the host console of an HP Integrity server. Accessing a Text Host Console through iLO 2 Virtual Serial Console Web browser access is an embedded feature of iLO 2. Before starting this procedure, you must have the following information: •...
Figure 6-2 Status Summary Page Select the web interface functions by clicking the Primary tabs at the top of the page. Each function lists options in the Navigation Control on the left side of the page. To display data in the content area; select an option and click Refresh to update the display. Click the Remote Console tab.
<COMMAND> : Enter the command name for help on individual command TOPics : Show all MP Help topics and commands HElp : Display this screen : Quit help ==== MP:HE To display the Main Menu Command List, enter LI at the MP HE: prompt. To return to the MP Main Menu, enter Q.
7 Configuring DHCP, DNS, LDAP, and Schema-Free LDAP This chapter provides information on how to configure DHCP, DNS, LDAP extended schema, and schema-free LDAP. Configuring DHCP DHCP enables you to automatically assign reusable IP addresses to DHCP clients. This section provides information on how to configure DHCP options such as the Domain Name System (DNS).
• Set the link state to 10 BaseT. MP:CM> LC -link t • Set the remote console serial port address. MP:CM> LC -web 2023 • Set the SSH console port address. MP:CM> LC -ssh 22 Configuring DNS To use the DNS command to display and modify the DNS configuration, follow these steps: From the MP Main Menu, enter command mode.
NOTE: The LDAP feature is only available if you have the iLO 2 Advanced Pack license. To configure LDAP extended schema, follow these steps: From the MP Main Menu, enter command mode. At the MP:CM> prompt, enter LDAP. To select Directory Settings, enter D. The current LDAP directory settings appear. To select all parameters enter A.
It assists with installing the schema and snap-ins needed for Active Directory to work with iLO 2 products including Integrity iLO 2. This is for set up and management. It will not do automatic migration for you. For Integrity iLO 2, you must manually add iLO 2 objects to the directory server and set up user accounts and privileges.
Follow the procedure for “Configuring LDAP Extended Schema” (page 74), but omit Step 8. It is not necessary to enter a new port number. Set up directory security groups. Setting Up Directory Security Groups The following procedure describes how to set up directory security groups in schema-free LDAP using the iLO 2 MP TUI.
LDAP and MP Login for Integrity Cell-Based Servers This section provides information on LDAP and MP login access rights and partition configuration in iLO 2 for Integrity cell-based servers. System administrators can use this information to create and assign access rights. This section explains the following: •...
Composite Commands These commands have sub commands within them that require different rights to execute. For example the SO command has User Parameters, MP-wide parameters within it. Each sub command needs rights as follows: • MP:CM> so — MP wide parameters [U] —...
Table 7-2 Access Rights for Cell-Based Servers Single Letter Access Right Representation Description Login Access This right is required to perform any operation on iLO 2. A user must have this right for each partition to which access is granted. With this right, a user can run Status or Read-only commands.
Page 81
Table 7-3 Commands and Associated Access Right (continued) Command Location Access Right LDAP MP Configuration Access Login Access Login Access PARPERM MP Configuration Access User Administration Access All for all supported partitions Login Access PWRGRD Server Power Access All for all supported partitions RU (KMIX only) All for all supported partitions MP Configuration Access...
Table 7-3 Commands and Associated Access Right (continued) Command Location Access Right Console Access Login Access 1. View SEL, FPL, LIVE - Login rights for all partitions to which the user has access 2. View iLO 2 event log - Login rights for all partitions to which the user has access 3.
8 Using iLO 2 This chapter provides information on the different interfaces you can use to interact with iLO 2 such as text user interface, web GUI, and SMASH SM CLP. Text User Interface This section provides information on the text user interface commands you can run in iLO 2. NOTE: HP Integrity server blades do not have fans or power supplies.
Figure 8-1 MP Command Interfaces MP Main Menu After logging in to the iLO 2 MP, the MP Main Menu appears. The MP Main Menu runs as a private session. Other iLO 2 users do not see the actions you perform in the private session. Integrity iLO 2 can support multiple sessions to perform independent tasks: •...
CO (Console): Leave the MP Main Menu and enter console mode CO switches the console terminal from the MP Main Menu to mirrored/redirected console mode. All console output is mirrored to all users in console mode. Only one of the mirrored users at a time has write access to the console.
Events communicate system information from the source of the event to other parts of the system, then to you. Events are produced by intelligent hardware modules, the operating system, and system firmware. Events funnel into the BMC from different sources throughout the server. iLO 2 polls the BMC for new events and stores them in nonvolatile memory.
Table 8-4 iLO 2 Event Log Filter Options Filtering Option Filter Criteria N: User Login Filter by user Login ID P: Port Name Filter by port name (Serial, Telnet, SSH, WEB) I: IP Address Filter by user IP Address (dotted decimal format) M: Date Filter by date stamp of the records entries (MM/DD/YYYY) If you select more than one filtering option, it acts as an additional filter.
Table 8-6 Events and Actions Event Action Functions Forward Progress Log - New events overwrite old FPL events once the FPL is full. Stores all events of level 0 or greater System Error Log - New events are not logged to the SEL when the SEL is full. Thus, it is Stores all events of level necessary for a user or an application to periodically clear the SEL.
Table 8-7 Navigation Commands (continued) Navigation Command Action Display help Ctrl-B Exit viewer NOTE: The MPEL log history display provides the same navigation commands as the FPL and the SEL except for the D command. MPEL log navigation provides the following filtering options: Table 8-8 MPEL Log Navigation Filter MPEL Log Navigation Filter Action...
Page 90
Table 8-9 Command Menu Commands (continued) Command Description Disconnects the LAN console Sets the DNS configuration This command is only available to authorized HP service personnel Displays help for the menu or command Displays or modifies system information Modifies the iLO 2 inactivity timeouts Displays the LAN configuration Displays the LDAP configuration LDAP...
Command Line Interface Scripting A command line interface is provided for all commands to assist you in scripting. This section provides syntax examples used in the iLO 2 MP command-line or scripted interface. Typically, tools like Expect (see “Expect Script Example” (page 91)) and (http://expect.nist.gov/) are used to string together several commands to accomplish a task.
Page 92
# transfer. If this causes a problem, delete these patterns or replace # them with wildcards. An alternative is to use the -p flag (for # "prompt") which makes Expect only look for the last line of output # (i.e., the prompt). The -P flag allows you to define a character to # toggle this mode off and on.
send "x\r" expect eof Command Menu Commands and Standard Command Line Scripting Syntax The following list of commands is provided to help you learn about the Command menu commands. Command-line interface scripting syntax for each command is provided to help you accomplish a scripting task.
BLADE: Display BLADE parameters NOTE: This command is available only on a server blade. Command access level: Login access BLADE facilitates the cabling and initial installation of HP Integrity server blades. It also provides a quick view of the enclosure status. You must have configuration access right to turn the enclosure locator UID LED on or off.
CA sets the parameters for the local and the remote serial console. Input and output data rates are the same. The value returned by the stty command on HP-UX is the local serial port console speed. Set up the local serial port parameters as follows: BAUD RATES Input and output data rates are the same.
DC sets all iLO 2 parameters back to their default values. To restore specific configurations to their default values, use the following commands: MP IP configuration : LC -all DEFAULT Remote Access Configuration : SA -all DEFAULT Command Interface configuration : IT -all DEFAULT MP Security configuration : SO -opt DEFAULT...
If an IP address was obtained through DHCP, an add name request is sent to the DDNS server if it is enabled and registered. Command line usage and scripting: DNS [ [ -server <e|d> ] [ -domain <text> ] [ -name <e|d> ] [ -register <y|n>...
| { -server [ -location <text> ] [ -rackid <text> ] [ -position <text> ] } ] [ -tag <text> } ] [ -nc ] IT: Inactivity timeout settings Command access level: MP configuration access IT prevents sessions on the system from being inadvertently left open. When you initiate an iLO 2 MP command, other users are prohibited from running any commands until the first command has been completed or until it times out.
— When you change the DHCP status from enabled to disabled, the DNS parameters for DHCP are set to disabled, and the Register with DDNS parameter is set to No. — When you change the DHCP status from disabled to enabled, the DNS parameters for DHCP are set to enabled, and the Register with DDNS parameter is set to Yes.
NOTE: Locally stored user accounts can be active while directory support is enabled. This enables both local- and directory-based user access. If both directory authentication and local user accounts are enabled, login is attempted using the directory first, then using local accounts.
LDAP: Schema-Free LDAP Schema-Free LDAP enables you to use directory authentication for logging in to iLO 2 without having to do any schema extension on the directory server or snap-in installation on the client. For information on schema-free LDAP, see “Configuring Schema-Free LDAP”...
Turns the system power off, then on. The delay between off and on CYCLE is 30 seconds. The BMC sends a signal to the OS to shut down prior to turning off Graceful Shutdown the system power. Command line usage and scripting: PC [ -on | -off | -graceful | -cycle ] [ -nc ] Example: [gstlhpg1] MP:CM>...
Power mode will be set to OS Control. Confirm? (Y/[N]): y Please wait .. -> Power mode has been successfully changed See also: PC, PR PR: Power restore policy configuration Command access level: MP configuration access PR configures the power restore policy. The power restore policy determines how the system behaves when ac power returns after an ac power loss.
Command line usage and scripting: RS [ -nc ] See also: TC SA: Set access LAN/WEB/SSH/IPMI over LAN ports Command access level: MP configuration access SA sets access permissions for users logging in to iLO 2 over the LAN. You can set iLO 2 to allow Telnet access, web access, SSH, IPMI over LAN, or all four.
To configure the community string to secure the access to the MIB objects, enter C. The default is public. Command line usage and scripting SNMP [ -status <e|d> ] [ -community [ <text> ] ] [ -nc ] Command line usage and scripting for server blades: SA [ -status <e|d>...
SS [ -nc ] See also: PS SYSREV: Firmware revisions Command access level: Login access SYSREV displays the current firmware revisions in the system. Command line usage and scripting: SYSREV [ -nc ] Example: MP:CM> SYSREV Current firmware revisions : F.01.57 BMC FW : 75.12 EFI FW...
Page 107
UC adds, modifies, re-enables, or deletes any of the following user parameters: • Login ID • Password • User Name • User Workgroup • User Access Rights • User Operating Mode • User Enabled There are two default users, Admin and Oper. The Admin user has all rights (C, P, M, U, and V).
[gstlhpg1] MP:CM> uc -delete Oper -nc UC -delete Oper -nc Current User Parameters: User Login ID : Oper User Password : ************ User Name : Default Operator User Workgroup User Access Rights : Console access, Virtual Media User Operating Mode : Multiple User Enabled/Disabled : Enabled ->...
Page 109
You can use the XD command plus its R command option to reset iLO 2. You can safely perform an iLO 2 reset without affecting the operation of the server. You can also reset iLO 2 through the web interface or by pressing the MP reset button. Command line usage and scripting: XD [ -parameter | -i2c |-lan <ipaddr>...
Web GUI This section describes the functions and features of the web graphical user interface (GUI). Some of the functionality in the web GUI only display if you have the iLO 2 Advanced Pack license. For more information on the iLO 2 Advanced Pack license, see “Obtaining and Activating iLO 2 Advanced Pack Licensing”...
Table 8-10 Status Summary General Page Description Field Description System Power The current power state (ON/OFF/STANDBY) of the system and the corresponding power LED state. Latest SEL Entry The most recent entry in the SEL. Firmware Revisions Displays the current firmware revisions for iLO MP, BMC, EFI, system firmware, PDH, UCIO, PRS, and PMPIC for entry class server blades.
Table 8-1 1 Active Users Page Description Field Description Access Type Multiple access methods are available: Serial, Telnet, SSH, SSL web or IPMI over LAN. IPMI, vMedia, and IRC/vKVM users are not listed in web GUI sessions. User Login The user currently logged in through a particular access type. IP Address The IP address of the active user.
Table 8-12 FW Revisions Page Descriptions (continued) Field Description System Firmware System platform firmware version Platform Dependent programmable Hardware version UCIO Universal Core I/O firmware version Power Reset Sequencer PMPIC Power Management Programmable Interrupt Controller for entry class server blades Server Status >...
Table 8-13 Server Status General Page Description (continued) Field Description Fans Lists the fans and fan status. System Processors Displays the status of the processor. NOTE: For BL c-Class servers, you can obtain information on power supplies and fans through the OA. See “BL c-Class”...
NOTE: Many of the fields are published by the iLO 2's SNMP for visibility to management applications on the network. System Event Log The System Event Log (SEL) page (Figure 8-7) enables you to view the contents of the event logs that have been stored in nonvolatile memory.
NOTE: You can view only the most pertinent fields for each event on the web. For a more complete decoding of the events, use the TUI available by logging in to iLO 2 through Telnet or SSH. Events Events can be a result of a failure or an error (such as fan failure, Machine-Check Abort, and so on).
NOTE: Depending on your server, this page might look slightly different. Figure 8-8 Remote Serial Console Page NOTE: The BL c-Class tab is available only on HP Integrity server blades. The remote serial console is a Java applet that requires Java Plug-in 1.4.2-10 to be installed on the client system.
Table 8-16 Supported Terminal Types HP-UX Windows Linux hpterm Vt100 Vt100+ Vt-utf8 IMPORTANT: Do not mix hpterm and vt100 terminal types at the same time. If there are two users collaborating and viewing console output with different emulation modes set, their clients will see garbled results if the output from the system is terminal specific.
The remote serial console option relies on the virtual serial port. Virtual Serial Port Integrity iLO 2 contains a virtual serial port that enables it to actually be the console hardware device for the OS. This port is a serial interface between the host system and iLO 2. iLO 2 converts the serial data stream to be available remotely through the remote serial console (a VT320 Java applet).
You can view the list of supported operating systems and browsers on the HP website at http:// www.hp.com/go/integrityilo. Only one user has access to the IRC at a time. You must have console access right to use this feature. If you do not have console access right, see the User Administration page under the Administration tab to add this access right.
NOTE: If you run system discovery utilities such as MAPPER or IOSCAN, the output might display an extra keyboard and mouse that are not physically connected. This is a consequence of the IRC feature. Browsers and Client Operating Systems that Support the IRC You can view the list of supported browsers and client operating systems for IRC and vKVM on the HP website at http://www.hp.com/go/integrityilo.
In all cases, the EFI console is available on the remote serial console as well as the IRC. But, the OS console for HP-UX appears according to the device settings in EFI. If an HP-UX operating system is configured to use VGA as the console, the HP-UX console is available only through the IRC and VGA.
IMPORTANT: The operating system server console output does not display on the console device screen until the server boots to the EFI Shell. To view console output prior to booting to the EFI Shell, either start a console session using the console serial port (RS-232), or access iLO 2 virtual serial port, or IRC.
Figure 8-1 1 Integrated Remote Console Window Table 8-18 lists the menu bar, buttons, and actions you can perform in the IRC window. Table 8-18 IRC Window Description Menu Bar Buttons Action Thumb Tack Enables you to keep the menu open, or retracts it when the mouse is moved away.
Virtual Media Virtual Media (vMedia) provides you with virtual devices that mimic physical hardware devices such as a virtual floppy disk drive and a CD/DVD drive that connects through the network to the managed server just as if it was physically connected. The vMedia device can be a physical CD/DVD drive on the management workstation, or it can be an image file stored on a local disk drive or network drive.
Select Virtual Media. The Virtual Media page appears (Figure 8-12) NOTE: Depending on your server, this page might look slightly different. Figure 8-12 Virtual Media Page Click Launch to load the vMedia applet. The vMedia applet loads in support of the vMedia device.
The iLO 2 vMedia CD/DVD appears to your operating system just like any other CD/DVD. When using the iLO 2 for the first time, the host operating system might prompt you to complete a New Hardware Found wizard. NOTE: This feature requires that the Java Plug-in 1.4.2 or 1.5 is installed. This feature requires the vMedia right and the Advance Pack License.
Click Connect. The connected drive icon and LED changes states to reflect the current status of the virtual CD/DVD. Figure 8-14 Virtual Media Dialog Box (after connection) After you are connected, virtual devices are available to the host server until you close the vMedia applet or sign out from a web session.
performance of the iLO 2 vMedia is faster when image files are used. The utility to create the iLO 2 CD/DVD disk image files is integrated into the vMedia applet. Store image files on your client computer or on a network drive that can be accessed from the client using a fast network segment.
To insert the next CD during an OS installation or any application installation with multiple image files, follow these steps: To select the next image file or to replace the CD/DVD with the next CD/DVD, click Browse To continue the installation, click OK on the host server. IMPORTANT: Do not click Disconnect to select the next CD/DVD image file.
Figure 8-17 Virtual Floppy/USB Key To use an image file, follow these steps: Select Local Image File within the virtual floppy/USB key section of the vMedia applet. Enter the path or file name of the image in the text-box, or click Browse to locate the image file using the Choose Disk Image File dialog.
Java Plug-in Version The vMedia feature requires prior installation of Java Plug-in 1.4.2_10 or higher. Client Operating System and Browser Support for vMedia You can view the list of supported client operating systems on the HP website at http:// www.hp.com/go/integrityilo. Power Management For entry class and server blades, the iLO 2 power management feature enables you to view and control the power state of the server, monitor power usage, monitor the processor, and modify...
Table 8-19 Power & Reset Page Description Fields and Buttons Description System Power The current power state of the system. System Power Control A user with power control access can issue the following options for remote control of the system power: •...
Power meter readings is a licensed feature and requires the Advanced Pack license to see the Power Regulator graphs from the iLO 2 web GUI. The license key also enables iLO 2 to share information with Insight Power Manager. NOTE: You can obtain an instant power reading without a license key through the CLI using the PS command.
Table 8-20 Power Meter Readings Page Description (continued) Fields and Buttons Description Minimum Displays the minimum power reading from the server over the last 24-hour period. 24-hour Power History The 24-hour History section displays the average, maximum, and minimum power Section averages.
NOTE: Depending on your server, this page might look slightly different. Figure 8-20 Power Regulator Page NOTE: The BL c-Class tab is available only on HP Integrity server blades. Table 8-21 lists the fields, buttons, and descriptions. Table 8-21 Power Regulator Page Description Fields and Buttons Description Power Regulator Mode...
Table 8-21 Power Regulator Page Description (continued) Fields and Buttons Description Submit Submits the selected function. Cancel Cancels the action. The power regulation functionality is achieved through two different interfaces: • Power Regulation through HP SIM (using the HP IPM plug in) HP Insight Power Manager (HP IPM), a plug-in to HP Systems Insight Manager (HP SIM), is an integrated power monitoring and management application that provides centralized control of server power consumption and thermal output.
IMPORTANT: When performing a firmware upgrade that contains system programmable hardware (FPGA, EFI, PSOC, BMC), you must properly shut down any OS that is running before starting the firmware upgrade process. Select Download drivers and software, select your server, and follow the directions provided. After the upgrade, reconnect and log in as user Admin and password Admin (case sensitive).
NOTE: The BL c-Class tab is available only on HP Integrity server blades. IMPORTANT: On HP Integrity server blades, an Advanced Pack license is standard. Remember to save the Advanced Pack license key information that was provided by HP. If you ever need to replace your server blade under warranty, you will need to transfer the key by entering the code on the replacement server blade.
NOTE: Depending on your server, this page might look slightly different. Figure 8-22 Local Accounts Page NOTE: The BL c-Class tab is available only on HP Integrity server blades. There are two default users: Admin: The Admin user has all five rights (console access, power control, MP configuration, user administration, virtual media).
When a user attempts to login into iLO 2, iLO 2 reads that user’s directory name in the directory to determine the groups the user is a member of. iLO 2 compares this information with a list of groups configured by the user. The rights of all the matched groups are combined and assigned to that user.
The LAN page (Figure 8-24) enables you to modify LAN settings. You must have iLO configuration access right to use this feature. NOTE: Depending on your server, this page might look slightly different. Figure 8-24 LAN Page NOTE: The BL c-Class tab is available only on HP Integrity server blades. Table 8-25 lists the fields, buttons, and descriptions.
Table 8-25 LAN Page Description (continued) Fields and Buttons Description Submit Submits the information. Cancel Cancels the action. Serial Page The Serial page (Figure 8-25) enables you to set the serial port parameters. You must have iLO configuration access right to use this feature. NOTE: Depending on your server, this page might look slightly different.
NOTE: Depending on your server, this page might look slightly different. Figure 8-26 Login Options Page NOTE: The BL c-Class tab is available only on HP Integrity server blades. Table 8-27 lists the fields, buttons, and descriptions. Table 8-27 Login Options Page Description Fields and Buttons Description Login Timeout in Minutes...
NOTE: Depending on your server, this page might look slightly different. Figure 8-27 Current LDAP Parameters Page NOTE: The BL c-Class tab is available only on HP Integrity server blades. Table 8-28 lists the fields and descriptions. Table 8-28 Current LDAP Parameters Page Description Field Description Directory Authentication...
Table 8-28 Current LDAP Parameters Page Description (continued) Field Description Submit Submits the information. Cancel Cancels the action. Network Settings The Network Settings tab enables you to access the following pages: • Standard • Domain Name Server IMPORTANT: If you are connected through a network and you make any changes to DHCP status, IP address, subnet mask, or gateway IP address, iLO 2 automatically resets once you confirm the change.
NOTE: The BL c-Class tab is available only on HP Integrity server blades. Table 8-29 lists the fields, buttons, and descriptions. Table 8-29 Standard Page Description Fields and Buttons Description MAC Address The 12 digit (hexadecimal) MAC address. DHCP Status Enable or Disable.
NOTE: The BL c-Class tab is available only on HP Integrity server blades. Table 8-30 lists the fields, buttons, and descriptions. Table 8-30 DNS Page Description Fields and Buttons Description Use DHCP supplied Use the DHCP server-supplied domain name. domain name Domain name This represents the factory-default DNS name of the subsystem, for example, “hp.com”...
Table 8-31 SNMP Settings Page Description Field Description SNMP Choosing Enable or Disable, activates or deactivates the SNMP feature support on this iLO 2. SNMP Alerts NOTE: Currently, the SNMP alert feature is only supported on HP Integrity server blades. Enter E to enable or D to disable all SNMP alerts.
NOTE: The BL c-Class tab is available only on HP Integrity server blades. Table 8-32 lists the fields and descriptions. Table 8-32 Onboard Administrator Page Description Field Description OA IP Address The IP address of the OA. IMPORTANT: Integrity iLO 2 must have a reachable IP address as the default gateway address.
NOTE: Depending on your server, this page might look slightly different. Figure 8-32 Help Page NOTE: The BL c-Class tab is available only on HP Integrity server blades. You can also click the ? at the top right corner of each page to display help about the page you are on.
SMASH Server Management Command Line Protocol The Systems Management Architecture for Server Hardware (SMASH) initiative is an effort within the Distributed Management Task Force (DMTF) to standardize commands for servers. The Server Management Command Line Protocol (SM CLP) specifies common command line syntax and message protocol semantics for server management.
Type "help" to display all supported commands. Type "show" to display information about the current target. Type "start /map1/textredirectsap1" to switch to iLO Main Menu interface. === SMCLP v1.0.0 Hewlett-Packard Company === </> hpiLO-> Exiting the SM CLP Interface To terminate an SM CLP session and disconnect from iLO 2, use the exit command. To switch from SM CLP to the MP Main Menu interface, use the start /map1/textredirectsap1 command.
Enter new value, or Q to Quit: s -> Default Command Mode Configuration will be updated New Set Access Configuration (* modified values): R - Remote : OS SESSION T - Telnet : Enabled H - SSH : Disabled W - Web SSL : Enabled I - IPMI over LAN : Enabled * C - Command Mode...
<options> Selections that affect the action, behavior, or output of the verb. <target> The implicitly or explicitly-identified managed element the command is directed to. <properties> Attributes of the target relative to the command execution. Command Verbs Command verbs select a management action for target. The command verbs listed in Table 8-33 consist of several reserved words in the following...
• version • exit Command Targets The command target address identifies the specific managed element or association to be affected by the command verb. All SM CLP commands have a command target, whether explicitly or implicitly identified. For instance, the target /map1/telnetsvc1/ can be identified in any of the following ways: Using the target’s absolute path: </>...
Show information about system1 and all contained MEs: </>hpiLO-> show -l all system1 Display Option The display option filters the information returned in command results. The following examples show command display option syntax: Display targets under /map1 target: </map1> hpiLO-> show -d targets Display properties of /map1 target: </map1>...
Table 8-35 SM CLP Reserved Characters and Character Sequences Character or Name Description and Uses Sequence “ “ Space Command line term separator. ‘ Escape character Escape character (the backquote character). Use in front of reserved characters to instruct the command parser to use the reserved character without special meaning.
Table 8-36 system1 Properties Property Name Description Access and Values EnabledState Provides information about the system Read-only power state. Values: • Enabled: System power is off. • Disabled: System power is on. Verbs show Displays information about managed elements (targets, their supported properties and verbs).
</>hpiLO-> start system1 status=0 status_tag=COMMAND COMPLETED system1 has been powered on Map1 (iLO 2) Target Target: map1 The map1 target (management access point) represents the root of the iLO 2 namespace. Functions and information related to iLO 2 are located under the map1 target. Table 8-37 shows map1 target properties.
Resetting iLO 2 To reset iLO 2, run the reset command to the MAP1 target as in the following example: </>hpiLO-> reset map1 status=0 status_tab=COMMAND COMPLETED iLO was issued a reset Text Console Services This section describes targets, their properties, and supported verbs necessary to implement the console services in SM CLP.
Table 8-39 /system1/consoles1/textredirectsap1 Properties Property Name Description Access and Values EnabledState Shows if the test redirection is Read-only enabled. Set to Enabled. SessionTerminateSequence A string sequence used for Read-only terminating text redirection session Set to Esc. and returning to SM CLP. Enter Esc at the system console to return to the SM CLP interface.
Firmware Revision Display and Upgrade This section describes how to view firmware revisions in the system. Each installed firmware in the system known to MP (MP FW, BMC FW, EFI FW, System FW, and so on) is represented by a swid target. •...
Table 8-42 swid# Properties Property Name Description Access and Values TargetType Identifies what type of firmware this swid target represents Read-only VersionString Represents firmware revision string; for example, F.01.40. Read-only Verbs Changes the current default target. help Displays context-sensitive help. show Displays information.
/map1/swcollection1/swid7 TargetType=PRS FW VersionString=00.05 UpSeqRev: 09, DownSeqRev: 07 </>hpiLO-> show -level all swid* Firmware Upgrade Firmware upgrades enhance the functionality of iLO 2. The MP firmware is packaged along with system, BMC, and FPGA/PSOC firmware. You can download and upgrade the firmware package from the HP website at http://www.hp.com/go/ bizsupport.
Telnet Examples The following examples show specific Telnet commands. Enable Telnet Service </>-> start /map1/telnetsvc1 Disable Telnet Service </>-> stop /map1/telnetsvc1 This section describes targets, their properties, and supported verbs necessary to enable or disable SSH access to iLO 2. Target: map1/sshsvc1 The sshsvc1 target represents the SSH service provided by map1.
Table 8-45 enetport1 Properties Property Name Description Access and Values AutoSense Specified if the iLO 2 AutoSense feature is Read/write enabled. If it is disabled, iLO 2 network Boolean values accepted. speed is set to 10 mb/s. PermanentAddress Represents iLO 2 MP MAC address. Read-only The iLO 2 MP MAC address is formatted as twelve hexadecimal digits...
Table 8-47 ipendpt1 Properties Property Name Description Access and Values IPv4Address iLO 2 MP IP address. Read/write The value of the property must be expressed in dotted decimal notation. SubnetMask iLO 2 MP subnet mask. Read/write The value of the property must be expressed in dotted decimal notation.
Table 8-49 dnsendpt1 Properties Property Name Description Access and Values EnabledState Represents the state of iLO 2 DNS. Read only The following are valid values: Enabled: The iLO 2 DNS client is enabled. Disabled: The iLO 2 DNS client is disabled. Hostname Represents the host name currently Read-only...
Table 8-52 shows dnssettings1 target properties. Table 8-52 dnssettings1 Properties Property Name Description Access and Values DNSServerAddress Contains the IP addresses of the Read/write primary, secondary, and tertiary This is an array property. DNS servers. The value of each element of this property must be expressed in dotted decimal notation.
</>hpiLO-> set /map1/enetport1/lanendpt1/ipendpt1/gateway1 AccessInfo=192.0.2.1 Determine Link State (Autosense) </>hpiLO-> show -d properties=autosense /map1/enetport1 Set Link (Autosense) </>hpiLO-> set /map1/enetport1 autosense=true AccessInfo=192.0.2.1 Enable/Disable DHCP </>hpiLO-> stop /map1/dhcpendpt1 </>hpiLO-> start /map1/dhcpendpt1 Determine all DNS settings </>hpiLO-> show /map1/settings1/dnssettings1 Determine IP Address of the DNS Servers (primary, secondary, and tertiary) </>hpiLO->...
Verify that IIS can access the MIME type for the files you are serving. For example, if you name your diskette images with the extension .img, you must add a MIME type for that extension. Use the IIS Manager to access the Properties dialog of your website. On the HTTP Headers tab, click MIME Types to add additional MIME types.
Table 8-53 cddr1 Properties Property Name Description Access and Values oemhp_image The image path and name for vMedia Read/write access. The value is a URL with a maximum length of 80 characters. oemhp_connect Used to connect or disconnect a vMedia Read/write device and display the connection status.
Page 174
images) on the client side appear as local drives (USB CD read-only) on the managed server. With the help of vMedia, the server can boot from the DVD/CD (or image) on the client, perform OS and applications installation on the server from the client’s drives or data transfer, and so The OA has two types of CD/DVD interfaces to access scriptable vMedia: Built-in DVD Interface The c3000 Enclosure has a built-in DVD drive you can use to connect...
Page 175
Using the Telnet/SSH connection to the OA. NOTE: While in the OA, you will not be entering the SM CLP vMedia commands directly in MP. Instead, you will issue the commands from the Telnet/SSH connection of the OA to connect or disconnect vMedia. •...
• The vMedia feature is supported using the USB 1.1 protocol (since MP FW uses Philips 1181 USB device). As a result, USB 2.0 is not currently supported. • DVD appears as the large CD. • Currently there is no support on fully compliant DVD. Typical Scriptable vMedia Usage Using the scriptable vMedia feature, you can perform the following: Deploying Operating Systems...
Table 8-55 account# Properties (continued) Property Name Description Access and Values Name User name of this account. Read/write. Specified in ASCII characters up to 24 characters long. oemhp_privileges Privileges of this user account. Read/write. The following are valid values: <console,power,mp,user,virtual), <all>...
9 Installing and Configuring Directory Services This chapter provides information on how to install and configure iLO 2 directory services. You can install and configure iLO 2 directory services to leverage the benefits of a single point of administration for iLO 2 user accounts. Directory Services The following are benefits of directory integration: Scalability...
Directory Services Installation Prerequisites Before installing directory services, you must do the following: • Obtain an iLO 2 Advanced Pack license. • Configure LDAP. TIP: Before performing certain iLO 2 functions, verify that you have the supported firmware version required to carry out the task. To make sure you have the latest supported firmware version, see the HP website at http://www.hp.com/go/bizsupport.
Directory Services Support Integrity iLO 2 supports the following directory services: • Microsoft Active Directory • Microsoft Windows Server 2003 Active Directory • Novell eDirectory 8.6.2 • Novell eDirectory 8.7 The iLO 2 software is designed to run within the Microsoft Active Directory Users and Computers, and Novell ConsoleOne management tools.
Schema Installer One or more .xmlfiles are bundled with the schema installer. These files contain the schema that is added to the directory. Typically, one of these files contains core schema that is common to all the supported directory services. Additional files contain only product-specific schema. The schema installer requires the use of the .NET Framework.
Figure 9-2 Schema Setup Screen The Directory Server section of the Setup screen enables you to select whether to use Active Directory or eDirectory, and to set the computer name and the port to be used for LDAP communications. IMPORTANT: To extend the schema on Active Directory you must be an authenticated schema administrator, the schema must not be write protected, and the directory must be the flexible single master operation (FSMO) role owner in the tree.
Figure 9-3 Schema Results Screen Management Snap-In Installer The management snap-in installer installs the snap-ins required to manage iLO 2 objects in a Microsoft Active Directory Users and Computers directory or in a Novell ConsoleOne directory. To create an iLO 2 directory using iLO 2 snap-ins, perform the following tasks: Create and manage iLO 2 objects and role objects.
IMPORTANT: To install directory services for iLO 2, an Active Directory schema administrator must extend the schema. • Extending the schema in the Microsoft Windows 2000 Server Resource Kit, available at: http://www.microsoft.com • Installing Active Directory in the Microsoft Windows 2000 Server Resource Kit, available http://www.microsoft.com •...
The Active Directory schema folder may need to be expanded for the checkbox to be available. Create a certificate or install Certificate Services. This step is necessary because iLO 2 uses SSL to communicate with Active Directory. To specify that a certificate be issued to the server running Active Directory, do the following: Launch MMC on the server and add the default domain policy snap-in (Group policy and browse to default domain policy object).
Figure 9-4 Directory Example Create an organizational unit to contain the iLO 2 devices managed by the domain. In this example, two organizational units are created, Roles and MPs. Use the Active Directory Users and Computers snap-ins provided by HP to create iLO 2 objects for several iLO 2 devices in the MP organizational unit.
In the Name field of the dialog box, enter an appropriate name In this example, the DNS host name of the iLO 2 device, lpmp, is used as the name of the iLO 2 object, and the surname is iLO 2. Enter and confirm a password in the Device LDAP Password and Confirm fields (this is optional).
Figure 9-7 Lights-Out Management Tab Click OK. Using the same procedure in step 4, edit the properties of the remoteMonitors role, add the lpmp device to the Managed Devices list on the HP Devices tab, and use the Members tab to add users to the remoteMonitors role.
NOTE: After you install the snap-ins, restart ConsoleOne and MMC to display the new entries. After the snap-in is installed, you can create iLO 2 objects and roles in the directory. Using the Users and Computers tool, you can: • Create iLO 2 objects and role objects.
Figure 9-9 Members Tab Setting Login Restrictions The Role Restrictions tab (Figure 9-10) enables you to set login restrictions for a role. These restrictions include: • Time Restrictions • IP Network Address Restrictions — IP/Mask — IP Range — DNS Name Figure 9-10 Role Restrictions Tab Directory Services for Active Directory...
Setting Time Restrictions • To manage the hours available for login by members of the role, click the Effective Hours button. The Logon Hours screen appears (Figure 9-11). • To select the times available for login each day of the week in half-hour increments, use the Logon Hours screen.
From the Role Restrictions tab, select IP/MASK and click Add. The New IP/Mask Restriction dialog box appears (Figure 9-12). Figure 9-12 New IP/Mask Dialog Box In the New IP/Mask Restriction dialog box, enter the information and click OK. To restrict access based on a DNS, select DNS Name and click Add. The New DNS Name Restriction dialog box appears.
Figure 9-13 Lights-Out Management Tab Table 9-1 lists the available Lights-Out Management rights. Table 9-1 Lights-Out Management Rights MP Rights Description Login This option controls whether users can log in to the associated devices and execute Status or Read-only commands (view event logs and console logs, check system status, power status, and so on) but not execute any commands that would alter the state of iLO 2 or the system.
NOTE: After you install snap-ins, restart ConsoleOne and MMC to show the new entries. Example: Creating and Configuring Directory Objects for Use with iLO 2 Devices in eDirectory The following example demonstrates how to set up roles and HP devices in a company called samplecorp, which consists of two regions: region1 and region2.
From in the region1 organizational unit, right-click the HP devices organizational unit. Select New, and select Object. Select hpqTarget from the list of classes, and click OK. Enter an appropriate name and surname in the New hpqTarget dialog box. In this example, the DNS host name of the iLO 2 device, rib-email-server, is used as the name of the iLO 2 object, and the surname is RILOEII (iLO 2).
Right-click the remoteAdmins role in the roles organizational unit in the region1 organizational unit, and select Properties. Select the Role Managed Devices subtab of the HP Management tab, and click Add. Using the Select Objects dialog box, browse to the HP devices organizational unit in the region1 organizational unit.
devices,ou=region1,o=samplecorp Directory User Context 1 = ou=users,o=samplecorp For example, user CSmith (located in the users organizational unit within the samplecorp organization, who is also a member of one of the remoteAdmins or remoteMonitors roles) would be allowed to log in to iLO 2. He would type csmith (case insensitive) in the Login Name field of the iLO 2 login, and use his eDirectory password in the Password field to gain access.
Figure 9-18 Members Tab (eDirectory) To browse to the specific user you want to add, click Add. To remove a user from the list of valid members, highlight the user name and click Delete. Setting Role Restrictions The Role Restrictions subtab (Figure 9-19) enables you to set login restrictions for a role.
Setting Time Restrictions You can manage the hours available for login by members of a role using the time grid displayed in the Role Restrictions subtab (Figure 9-19). You can select the times available for login for each day of the week in half-hour increments. You can change a single square by clicking it or change a section of squares by clicking and holding the mouse button, dragging the cursor across the squares to be changed, and releasing the mouse button.
Figure 9-21 Lights-Out Management Device Rights Tab Table 9-2 lists the available management device rights. Table 9-2 Management Device Rights Option Description Login This option controls whether users can log in to the associated devices and execute status or read-only commands (view event logs and console logs, check system status, power status, and so on) but not execute any commands that would alter the state of iLO 2 or the system.
To ensure you have the correct version of JRE installed on your system, follow these steps: To determine the Java version, execute the following command: # java -version The Java version installed on your system is displayed. If Java is not installed on your system, execute the following command: # rpm iv j2re-1_4_2_04-linux-i586.rpm NOTE:...
Verifying Snap-In Installation and Schema Extension To verify the installation of snap-ins and schema extension, follow these steps: Run ConsoleOne and log on to the tree. Verify the new classes by opening the Schema Manager from the Tools list. All the classes related to the HP directory services must be present in the classes list. The classes are hpqRole, hpqTarget, hpqPolicy, and hpqLOMv100.
User Search Context 1: Current -> o=mp Enter new value, or Q to Quit: <CR> -> Current User Search Context 1 has been retained User Search Context 2: Current -> o=demo Enter new value, or Q to Quit: <CR> -> Current User Search Context 2 has been retained User Search Context 3: Current ->...
Certificate Services The following sections provide instructions for installing Certificate Services, verifying directory services, and configuring automatic certificate requests. Installing Certificate Services To install Certificate Services, follow these steps: Select Start>Settings>Control Panel. Double-click Add/Remove Programs. Click Add/Remove Windows Components to start the Windows Components wizard. Select Certificate Services and click Next.
In general, you can use the HP provided snap-ins to create objects. It is useful to give the iLO 2 device objects meaningful names, such as the device's network address, DNS name, host server name, or serial number. Directory-enabled remote management enables you to: •...
Figure 9-22 shows one way that an administrative user gains admin role right. The admin user’s initial login right is granted through the regular user role. After the initial login, more advanced rights are assigned to the admin user through the admin role such as server reset and remote console.
Role-based time restrictions can only be enforced if the time is set on the iLO 2 device. The time is normally set when the host is booted and is maintained by running the agents in the host operating system, which enables iLO 2 device to compensate for leap years and minimize clock drift with respect to the host.
Figure 9-24 User and Role Access Restrictions Enforcing User Time Restrictions You can place a time restriction on directory user accounts. Time restrictions limit the ability of the user to log in (authenticate) to the directory. Typically, time restrictions are enforced using the time on the directory server, but if the directory server is located in a different time zones or a replica in a different time zone is accessed, time zone information from the managed object can be used to adjust for relative time.
User Address Restrictions You can place network address restrictions on a directory user account, and the directory server enforces these restrictions. See the directory service documentation for information about the enforcement of address restrictions on LDAP clients, such as a user logging in to an iLO 2 device. Network address restrictions placed on the user in the directory may not be enforced in the expected manner if the directory user logs in through a proxy server.
Figure 9-27 Restricting the Reset Role Directory Services Schema (LDAP) A directory schema specifies the types of objects that a directory can have and the mandatory and optional attributes of each object type. The following sections describe both the HP management core, and the LDAP object identifier classes and attributes that are specific to iLO HP Management Core LDAP Object Identifier Classes and Attributes Object identifiers (OIDs) are unique numbers that are used by LDAP to identify object class,...
Table 9-4 Core Attributes (continued) Attribute Name Assigned OID hpqRoleIPRestrictionDefault 1.3.6.1.4.1.232.1001.1.1.2.4 hpqRoleIPRestrictions 1.3.6.1.4.1.232.1001.1.1.2.5 hpqRoleTimeRestriction 1.3.6.1.4.1.232.1001.1.1.2.6 Core Class Definitions Table 9-5, Table 9-6, and Table 9-7 define the HP management core classes. hpqTarget Table 9-5 hpqTarget 1.3.6.1.4.1.232.1001.1.1.1.1 Description This class defines target objects, providing the basis for HP products using directory-enabled management.
hpqPolicyDN Table 9-8 hpqPolicyDN 1.3.6.1.4.1.232.1001.1.1.2.1 Description This attribute provides the Distinguished Name of the policy that controls the general configuration of this target. Syntax Distinguished Name—1.3.6.1.4.1.1466.115.121.1.12 Options Single Valued Remarks None hpqRoleMembership Table 9-9 hpqRoleMembership 1.3.6.1.4.1.232.1001.1.1.2.2 Description This attribute provides a list of hpqTarget objects to which this object belongs. Syntax Distinguished Name—1.3.6.1.4.1.1466.115.121.1.12 Options...
Table 9-12 hpqRoleIPRestrictions (continued) 1.3.6.1.4.1.232.1001.1.1.2.5 Options Multi Valued Remarks This attribute is only used on role objects. The IP restrictions are satisfied when the address matches and general access is denied, and unsatisfied when the address matches and general access is allowed. Values are an identifier byte followed by a type-specific number of bytes specifying a network address.
Table 9-15 iLO 2 Attributes (continued) Class Name Assigned OID hpqLOMRightLocalUserAdmin 1.3.6.1.4.1.232.1001.1.8.2.5 hpqLOMRightConfigureSettings 1.3.6.1.4.1.232.1001.1.8.2.6 iLO 2 Class Definitions hpqLOMv100 Table 9-16 hpqLOMv100 1.3.6.1.4.1.232.1001.1.8.1.1 Description This class defines the rights and settings used with HP iLO 2 products. Class Type Auxiliary SuperClasses None Attributes...
hpqLOMRightRemoteConsole Table 9-19 hpqLOMRightRemoteConsole 1.3.6.1.4.1.232.1001.1.8.2.3 Description Virtual media right for HP iLO 2 products. Syntax Boolean-1.3.6.1.4.1.1466.115.121.1.7 Options Single valued Remarks This attribute is only used on role objects. If this attribute is TRUE, members of the role are granted the right. hpqLOMRightServerReset Table 9-20 hpqLOMRightServerReset 1.3.6.1.4.1.232.1001.1.8.2.4...
Glossary Address In networking, a unique code that identifies a node in the network. Names such as host1.hp.com are translated to dott-quad addresses such as 168.124.3.4 by the Domain Name Service (DNS). Address Path An address path is one in which each term has the appropriate intervening addressing association.
Page 218
The CLP consists of a set of command verbs that manipulate command targets representing Managed Elements (ME) that are within the scope of access by a MAP. Each CLP interaction consists of a command line transmitted to the CLP service and a subsequent response transmitted back to the client.
Page 219
Domain A grouping of hosts that is identified by a name. The hosts usually belong to the same Internet Protocol (IP) network address. Domain Name The unique name assigned to a system or group of systems on the Internet. The host names of all the systems in the group have the same domain name suffix.
Page 220
In-band System A server management capability that is enabled only when the operating system is initialized Management and the server is functioning properly. Integrated The iLO functionality offers remote server management through an independent management Lights-Out (iLO) processor (MP). iLO was introduced into most HP Integrity entry class servers in late 2004. Prior to that, embedded remote server management was referred to as MP functionality.
Management The component that provides a LAN interface to the system console and system management. Processor (MP) Prior to iLO 2, embedded remote server management was referred to as MP functionality. All legacy MP functionality has been carried forward and combined with new features, all under the heading of "iLO 2".
Page 222
Proxy A mechanism whereby one system acts on behalf of another system in responding to protocol requests. Rackmount Electronic equipment and devices designed to fit industry-standard-sized computer racks and cabinets (19" wide). Rackmount devices are also standard 1.75 inch units. Remote System A system other than the one on which the user is working.
Page 223
Target Address This entity is responsible for discovering and enumerating the managed elements within the Scheme local domain, for maintaining the addressing and naming structure of the local domain, and Resolution coordinating this information with the operation invocation engine. Service Telnet A telecommunications protocol providing specifications for emulating a remote computer terminal so that one can access a distant computer and function online using an interface that...
Index DC, 96 DF, 96 access options, 104 DI, 96 access rights DNS, 96 console access, 22 FW, 97 local user administration access, 22 HE, 97 MP configuration access, 23 ID, 97 power control access, 22 IT, 98 virtual media access, 23 LC, 98 accounts LDAP, 99, 203...
Page 226
configuring the LAN, 41 DMTF, 152, 222 configuring using the command menu, 99 DNS, 74 configuring with the LC command, 73 command, 96 DHCP, security risk when enabled, 42 configuring using the command menu, 74, 96 DI command, 96 configuring using the web GUI, 147 diagnostics, 108 directory objects, configuring for Active Directory, 186 directory services...
Page 228
creating multiple restrictions, 210 creating to follow organizational structure, 207 OA IP address as default gateway address, 49, 150 DNS-based restrictions, 208 Object Identifiers (see HP management object identifiers) enforcing, 208 OIDs (see HP management object identifiers) IP address restrictions, 208 Onboard Administrator, 149 restricting, 207 accessing iLO 2, 45...
Page 229
using the ID command, 97 SO command, 105 web GUI specific object identifiers, 214–216 active users, 111 attribute definitions, 215–216 DNS settings, configuring, 147 attributes, 215 editing LDAP parameters, 144 classes, 214 group accounts, 140 SPU host name, 97 help, 150 SS command, 105 interacting with, 69 standard features, 22...
Need help?
Do you have a question about the Integrity BL870c and is the answer not in the manual?
Questions and answers