HP Integrity BL870c Operation Manual
HP Integrity BL870c Operation Manual

HP Integrity BL870c Operation Manual

Hp integrity ilo 2 operations guide, eleventh edition
Hide thumbs Also See for Integrity BL870c:
Table of Contents

Advertisement

HP Integrity iLO 2 Operations Guide
HP Part Number: 5991-8053_ed1 1
Published: April 2010
Edition: 1 1

Advertisement

Table of Contents
loading

Summary of Contents for HP Integrity BL870c

  • Page 1 HP Integrity iLO 2 Operations Guide HP Part Number: 5991-8053_ed1 1 Published: April 2010 Edition: 1 1...
  • Page 2 © Copyright 2006, 2010 Hewlett-Packard Development Company, L.P. Legal Notices The information contained herein is subject to change without notice. The only warranties for HP products and services are set forth in the express warranty statements accompanying such products and services. Nothing herein should be construed as constituting an additional warranty. HP shall not be liable for technical or editorial errors or omissions contained herein.
  • Page 3: Table Of Contents

    Table of Contents About This Document.......................15 Intended Audience..........................15 New and Changed Information in This Edition...................15 Publishing History..........................15 Document Organization........................17 Typographic Conventions........................18 Related Information..........................18 HP Contact Information........................19 Documentation Feedback........................19 1 Introduction to iLO 2....................21 Features..............................21 Standard Features..........................22 Always-On Capability........................22 Virtual Front Panel........................22 Multiple Access Methods......................22 Security............................22 User Access Control........................22...
  • Page 4 Onboard Administrator........................31 HP Integrity rx2660 Server Components....................33 HP Integrity rx3600 and rx6600 Server Components................33 iLO 2 MP Status LEDs...........................34 iLO 2 MP Reset Button..........................35 Resetting Local User Accounts and Passwords to Default Values..........35 Console Serial Port and Auxiliary Serial Port..................35 MP LAN Port............................36 MP LAN LEDs..........................36 3 Getting Connected to iLO 2..................37...
  • Page 5 Upgrading the Lights-Out Advanced KVM Card Firmware............67 6 Accessing the Host (Operating System) Console.............69 Accessing a Text Host Console through iLO 2 Virtual Serial Console..........69 Accessing Online Help........................70 Accessing a Text Host Console Using the TUI..................70 Help System.............................70 Accessing a Graphic Host Console Using the Integrated Remote Console.........71 Accessing a Text Host Console Using SMASH SM CLP..............71 7 Configuring DHCP, DNS, LDAP, and Schema-Free LDAP........73 Configuring DHCP..........................73...
  • Page 6 IT: Inactivity timeout settings....................98 LC: LAN configuration usage.....................98 LDAP: LDAP directory settings....................99 LDAP: LDAP group administration..................100 LDAP: Schema-Free LDAP....................101 LM: License management......................101 LOC: Locator UID LED configuration..................101 LS: LAN status.........................101 PC: Power control access......................101 PM: Power regulator mode......................102 PR: Power restore policy configuration..................103 PS: Power status........................103 RB: Reset BMC..........................103 RS: Reset system through the RST signal.................103...
  • Page 7 Power Regulator........................135 Administration..........................137 Firmware Upgrade........................137 Licensing...........................138 User Administration > Local Accounts..................139 Group Accounts........................140 Access Settings..........................141 LAN............................142 Serial Page..........................143 Login Options Page........................143 Current LDAP Parameters.......................144 Network Settings........................146 Network Settings > Standard....................146 Domain Name Server.......................147 SNMP Settings..........................148 BL c-Class............................149 Help...............................150 SMASH Server Management Command Line Protocol..............152 SM CLP Features and Functionality Overview................152 SM CLP Session........................152 Accessing the SM CLP Interface....................152...
  • Page 8 Firmware Revision Display and Upgrade..................163 SM CLP Firmware Targets......................163 Target: map1/swinstallsvc1....................163 Target: map1/swinventory1....................163 Target: map1/swinventory1/swid#..................163 Displaying Firmware Revisions....................164 Firmware Upgrade........................165 Remote Access Configuration.......................165 Telnet SM CLP Targets......................165 Target: map1/telnetsvc1......................165 Telnet Examples........................166 SSH............................166 Target: map1/sshsvc1........................166 SSH Examples...........................166 Network Configuration.........................166 SM CLP Network Targets, Properties, and Verbs..............166 Target: map1/enetport1.......................166 Target: map1/enetport1/lanendpt1..................167 Target: map1/enetport1/lanendpt1/ipendpt1..............167...
  • Page 9 Example: Creating and Configuring Directory Objects for Use with iLO 2 in Active Directory...186 Directory Services Objects......................189 Active Directory Snap-Ins......................190 Managing HP Devices In a Role..................190 Managing Users In a Role....................190 Setting Login Restrictions......................191 Setting Time Restrictions....................192 Defining Client IP Address or DNS Name Access.............192 Setting User or Group Role Rights....................193 Directory Services for eDirectory......................194 Installing and Initializing Snap-In for eDirectory.................194...
  • Page 10 Core Attribute Definitions......................212 hpqPolicyDN........................213 hpqRoleMembership......................213 hpqTargetMembership......................213 hpqRoleIPRestrictionDefault....................213 hpqRoleIPRestrictions......................213 hpqRoleTimeRestriction.....................214 iLO 2-Specific LDAP OID Classes and Attributes.................214 iLO 2 Classes..........................214 iLO 2 Attributes........................214 iLO 2 Class Definitions......................215 hpqLOMv100........................215 iLO 2 Attribute Definitions.......................215 hpqLOMRightLogin......................215 hpqLOMRightRemoteConsole....................215 hpqLOMRightRemoteConsole....................216 hpqLOMRightServerReset....................216 hpqLOMRightLocalUserAdmin..................216 hpqLOMRightConfigureSettings..................216 Glossary.........................217 Index..........................225 Table of Contents...
  • Page 11 List of Figures OA/iLO Network Port and Components..................31 Onboard Administrator LEDs and Buttons..................32 HP Integrity rx2660 Server Rear View..................33 HP Integrity rx3600 and rx6600 Server Rear Ports and LEDs............34 Console Serial Port (RS-232) Connector..................35 MP LAN Port..........................36 Setup Flowchart..........................39 SUV Cable............................47 Connecting the SUV Cable To the Server Blade................48 PCI-X or PCI-X/PCIe Card Cage (Common to all supported servers)..........62 dvc.CAB Error..........................64...
  • Page 12 HP Devices Tab..........................190 Members Tab..........................191 9-10 Role Restrictions Tab........................191 9-11 Logon Hours Screen........................192 9-12 New IP/Mask Dialog Box......................193 9-13 Lights-Out Management Tab.......................194 9-14 Roles and Devices Example......................195 9-15 Select Object Subtype Dialog Box....................196 9-16 Setting Role Rights........................197 9-17 Role Managed Devices Subtab....................198 9-18 Members Tab (eDirectory)......................199 9-19...
  • Page 13 List of Tables Publishing History Details......................15 Supported Systems and Required Components Matrix...............27 iLO 2 MP Status LEDs........................34 Console Serial Port Pinouts......................35 MP LAN Port Pinouts........................36 MP LAN Link Status LEDs......................36 MP LAN Link Speed LEDs......................36 Setup Checklist..........................38 Physical Connection Matrix......................40 LAN Configuration Methods......................41 ARP Ping Commands........................43 TCP Ports............................56...
  • Page 14 8-32 Onboard Administrator Page Description..................150 8-33 Supported Command Verbs......................155 8-34 Command Options........................157 8-35 SM CLP Reserved Characters and Character Sequences............158 8-36 system1 Properties........................159 8-37 map1 Properties...........................160 8-38 /map1/textredirectsap1 Properties....................161 8-39 /system1/consoles1/textredirectsap1 Properties................162 8-40 swinstallsvc1 Properties......................163 8-41 swinventory1 Properties......................163 8-42 swid# Properties..........................164 8-43 telnetsvc1 Properties........................165 8-44...
  • Page 15: About This Document

    About This Document This document provides information and instructions on how to use the HP Integrated Lights-Out 2 (iLO 2) for Integrity for BL870c, BL860c, rx2660, rx3600, and rx6600 servers. The document date and part number indicate the document’s current edition. The date changes when a new edition is published.
  • Page 16 Table 1 Publishing History Details (continued) Document Operating Systems Supported Supported Servers Publication Date Manufacturing Part Number 5991-5983 HP-UX 11i v2 BL860c June 2007 OpenVMS 8.3 rx2660 Microsoft Windows Server 2003 rx3600 Red Hat Linux and SuSE rx6600 5991-5992 HP-UX 11i v2 BL860c November 2007 OpenVMS 8.3 1H1...
  • Page 17: Document Organization

    Table 1 Publishing History Details (continued) Document Operating Systems Supported Supported Servers Publication Date Manufacturing Part Number 5991-8053_ed9 HP-UX 11i v3 BL870c August 2009 OpenVMS 8.3 1H1 BL860c Microsoft Windows Server 2008 rx2660 Red Hat Linux and SuSE rx3600 rx6600 rx7640* rx8640* Superdome sx2000*...
  • Page 18: Typographic Conventions

    Chapter 9 Installing and Configuring Directory Services Use this chapter to learn about installing and configuring directory services functions. Glossary Use the glossary to learn iLO 2 terms and definitions. Typographic Conventions This document uses the following typographical conventions: %, $, or # A percent sign represents the C shell system prompt.
  • Page 19: Hp Contact Information

    http://www.hp.com/go/Blades-docs for HP Integrity server blades Windows Operating System Information Find information about administration of the Microsoft Windows operating system on the following website: http://www.microsoft.com/technet/ Diagnostics and Event Monitoring: Hardware Support Tools Complete information about HP hardware support tools, including online and offline diagnostics and event monitoring tools, is on the HP website at: http://www.docs.hp.com/HP-UX/diag/ Website for HP Technical Support...
  • Page 21: Introduction To Ilo 2

    1 Introduction to iLO 2 The Integrated Lights-Out Management Processor (iLO MP) for Integrity servers is an autonomous management subsystem embedded directly on the server. It is the foundation of the server’s High Availability (HA) embedded server and fault management. It also provides system administrators secure remote management capabilities regardless of server status or location.
  • Page 22: Standard Features

    NOTE: The following ProLiant iLO 2 features are not available on Integrity iLO 2: • Virtual Folder • Shared LAN • Graphics Console Replay Integrity iLO 2 offers the following standard and advanced features. Standard Features Integrity iLO 2 standard features provide the following basic system board management functions, diagnostics, and essential Lights-Out functionality on iLO 2-supported HP servers.
  • Page 23: Multiple Users

    MP Configuration Access Right to configure all iLO 2 MP settings and some system settings, such as the power restore policy. Virtual Media Access Enables Advanced Pack license users the right to use the virtual media applet. Multiple Users Multiple users can interact with iLO 2. However, iLO 2 command mode and console mode are mirrored, allowing only one user at a time to have write access to the shared console.
  • Page 24: Firmware Upgrades

    Firmware Upgrades Firmware upgrades enhance the functionality of iLO 2. The MP firmware is packaged along with system, BMC, and FPGA/PSOC firmware. You can download and upgrade the firmware package from the HP website at http://www.hp.com/go/ bizsupport. Select Download drivers and software, select your server, and follow the instructions provided. TIP: Before performing certain iLO 2 functions, verify that you have the supported firmware version required to carry out the task.
  • Page 25: Sm Clp

    SM CLP The SM CLP specification defines a user friendly command-line protocol that provides command line interface (CLI) standards for interoperability. Mirrored Console The system console output stream is reflected to all connected console users, and any user can provide input. Remote Power Control Integrity iLO 2 enables remote power cycle, power on and power off, and TOC.
  • Page 26: Integrated Remote Console

    Virtual Media depends on a reliable network with good bandwidth. This is especially important when you are performing tasks such as large file transfers or OS installs. NOTE: iLO vMedia is automatically disconnected if the iLO management processor is reset. HP does not recommend use of iLO vMedia with firmware update tools such as HPOFM which reset the management processor mid-way through the update process.
  • Page 27: Obtaining And Activating Ilo 2 Advanced Pack Licensing

    Information on HP IPM is available on the HP website at http://www.hp.com/go/ipm. Obtaining and Activating iLO 2 Advanced Pack Licensing For Integrity entry class systems, an Integrity iLO 2 Advanced Pack license key can be purchased from your HP sales rep. To find the part number for the option for your system, see the HP website at http:/www.hp.com/go/integrityilO.
  • Page 28: Integrity Ilo 2 Supported Browsers And Client Operating Systems

    Table 1-1 Supported Systems and Required Components Matrix (continued) Supported Required Components Required Cables Systems rx3600, rx6600 Core I/O board without VGA; factory installed LAN and serial cables Core I/O board with VGA (optional) LAN, serial, and VGA cables (This is only supported on Windows Server OS.) rx7640, rx8640, iLO 2 hardware is integrated in the main...
  • Page 29: Protecting Snmp Traffic

    Privacy Integrity iLO 2 uses SSL for web connections, RSL-RC4 encryption for IRC and remote serial console, and SSH-DES3/DES128 2.0 recommended encryption algorithms for SSH-based connections. You can enable or disable Telnet, IPMI over LAN, web, and SSH connectivity. Login After initial failed login attempts (default three), a delay of approximately one second is imposed on the serial connection and the login banner warnings are repeated.
  • Page 31: Ports And Leds

    2 Ports and LEDs All iLO 2 functions are available through the server MP LAN port and the local and remote serial ports. On HP Integrity server blades, all iLO 2 functions are available on the Onboard Administrator (OA). This chapter describes the available iLO 2 ports, connectors, and LEDs on the HP Integrity server blades, and the rx2660, rx3600, and rx6600 servers.
  • Page 32: Onboard Administrator Leds And Buttons

    OA/iLO Network Port Enclosure Link-Up Port OA Bay 1 Enclosure Link-Down Port OA Bay 2 (redundant if used) Figure 2-2 shows the OA LEDs and buttons. Figure 2-2 Onboard Administrator LEDs and Buttons OA UID LED OA Health LED Enclosure UID LED OA Reset Button OA Active LED Ports and LEDs...
  • Page 33: Hp Integrity Rx2660 Server Components

    HP Integrity rx2660 Server Components Figure 2-3 shows the rear view of the HP Integrity rx2660 server. The system LAN functionality is integrated into the system board. Figure 2-3 HP Integrity rx2660 Server Rear View Power Supply 1 and LED Auxiliary Serial Port MP LAN Port Power Supply 2 and LED...
  • Page 34: Ilo 2 Mp Status Leds

    NOTE: This figure is oriented vertically to match the orientation of the core I/O board. Figure 2-4 HP Integrity rx3600 and rx6600 Server Rear Ports and LEDs iLO 2 MP Serial Console USB 2.0 Ports (any USB VGA Port (No iLO 2 access; Port (RS-232) (DB-9F to device) EFI only)
  • Page 35: Ilo 2 Mp Reset Button

    Table 2-1 iLO 2 MP Status LEDs (continued) iLO 2 MP Status LED LED State iLO 2 MP Heartbeat Flashing green. BMC Heartbeat Flashing green. iLO 2 MP Reset Button The iLO 2 MP Reset button enables you to reset iLO 2 and reset the user-specific values to factory default values.
  • Page 36: Mp Lan Port

    Table 2-2 Console Serial Port Pinouts (continued) Pin Number Signal Description Requests to send Clears to send Not used MP LAN Port Figure 2-6 shows the MP LAN port connector pins and LEDs. Figure 2-6 MP LAN Port Table 2-3 maps the MP LAN port connector pin numbers to their signal descriptions.
  • Page 37: Getting Connected To Ilo 2

    3 Getting Connected to iLO 2 This chapter provides information on getting connected to iLO 2 through a rackmount server or a server blade.
  • Page 38: Setup Checklist

    Setup Checklist Use the checklist in Table 3-1 to help set up iLO 2. Table 3-1 Setup Checklist Step Action Standard For rackmount servers, perform steps 1 and 2. For server blades, see “Server Blade Connection” (page 45) and continue with steps 3-8. Prepare 1.
  • Page 39: Setup Flowchart

    Setup Flowchart Use this console setup flowchart as a guide to help set up the Integrity iLO 2. Figure 3-1 Setup Flowchart There are differences in how you connect to iLO 2 depending on if you have a rackmount server or a server blade.
  • Page 40: Rackmount Server Connection

    Rackmount Server Connection For a rackmount server, you can connect directly through the serial console or you can connect using the MP LAN. To set up the console, follow these steps: Determine the physical access method to connect cables. There are two physical connections to iLO 2 : •...
  • Page 41: Determining The Ilo 2 Mp Lan Configuration Method

    Determining the iLO 2 MP LAN Configuration Method To access iLO 2 through the MP LAN, iLO 2 must acquire an IP address. The way iLO 2 acquires an IP address is dependent upon whether DHCP is enabled or disabled on the server, and if DHCP and DNS services are available to the server (see Table 3-3).
  • Page 42: Configuring The Ilo 2 Mp Lan Using Arp Ping

    Obtain the factory-set DNS name from the iLO Network Information Tag on the server. The DNS name is 14 characters long. It consists of the letters MP followed by the 12 characters of the MAC address. For example: mp0014c29c064f This address is assigned to the iLO 2 MP system board. The system board has a unique MAC address that identifies the hardware on the network.
  • Page 43: Configuring The Ilo 2 Mp Lan Using The Console Serial Port

    Table 3-4 ARP Ping Commands ARP Command Description Assigns the IP address to the iLO 2 MP MAC address. This ARP table entry maps the MAC arp -s address of the iLO 2 MP LAN interface to the static IP address designated for that interface. Tests network connections and verifies that the MP LAN port is configured with the appropriate ping IP address.
  • Page 44 IMPORTANT: Do not configure duplicate IP addresses on different servers within the same network. The duplicate server IP addresses conflict and the servers cannot connect to the network. The LC command enables you to configure a static IP address, host name, subnet mask, and gateway address.
  • Page 45: Server Blade Connection

    NOTE: HP ProLiant servers allow you to assign a static IP address at boot time to iLO 2 using a VGA monitor, keyboard, and mouse and HP ProLiant BIOS commands. This feature is not available on HP Integrity servers. Server Blade Connection For a server blade, you can connect directly through the SUV cable to the serial console or you can connect using the MP LAN internal connection in the blade enclosure.
  • Page 46: Connecting The Suv Cable To The Server Blade

    NOTE: On the HP Integrity server blades, you have access to two serial ports through the RS-232 connector. The default setting is for the iLO 2 interface, the other is for an AUX UART directly connected to the host operating system and can be used for any serial device (terminal, debug port, and so on).
  • Page 47: Suv Cable

    Figure 3-2 SUV Cable Server Blade Connector 2-Port USB VGA (no access to iLO 2) 9-Pin Console Serial Port (RS-232) USB Label USB-1 USB-0 Server Blade Connection...
  • Page 48: Connecting The Server Blade To Ilo 2 Using The Onboard Administrator

    Figure 3-3 Connecting the SUV Cable To the Server Blade Connecting the Server Blade To iLO 2 Using the Onboard Administrator If the OA/iLO network port on the enclosure is connected to the local network that has a DHCP server, your iLO 2 MP IP address is automatically generated by the DHCP server. The server blade is factory set with DHCP enabled.
  • Page 49: Auto Login

    NOTE: For the HP Integrity server blades, you can use the OA to set the IP addresses for all iLO 2s. You can also find the iLO 2 MP address so you can log in. IMPORTANT: Integrity iLO 2 must have a reachable IP address as the default gateway address. Since the OA is always reachable, HP recommends using the OA IP address as the gateway address for Integrity iLO 2.
  • Page 50: Initiating An Auto Login Session

    access to all aspects of the OA including configuration, firmware updates, user management, and resetting default settings. Operators Provided access to the host system IRC, serial console, and vMedia. This level equates to an iLO 2 user with Remote Console Access, Virtual Power and Reset, Virtual Media, and Configure iLO settings.
  • Page 51: Additional Setup

    User Creation When the OA sends a request to iLO 2 to create a new user, iLO 2 attempts to create a user in the local iLO 2 user database. Creation of an OA user could fail for a number of reasons: •...
  • Page 52: Setting Up Security

    Access the MP Main Menu. Enter CM at the MP> prompt. Enter UC at the MP:CM> prompt and follow the prompts to modify default passwords. To set up user accounts, follow these steps: Access the MP Main Menu. Enter CM at the MP> prompt. Enter UC at the MP:CM>...
  • Page 53 Run ilosetup.efi from EFI. fs0:\EFI\TOOLS> ilosetup get Current LAN parameters: IP Address : 127.0.0.1 Subnet : 255.255.255.0 Gateway : 127.0.0.1 fs0:\EFI\TOOLS> fs0:\EFI\TOOLS> ilosetup set -l -i 15.255.96.44 -g 15.255.96.1 -s 255.255.248.0 Attemping to set iLO LAN parameters... LAN parameters have been set. The iLO2 resets after you have successfully configured the LAN parameters.
  • Page 55: Logging In To Ilo 2

    4 Logging In to iLO 2 This chapter provides instructions on how to log in to iLO 2. Integrity iLO 2 standard features provide basic system board management functions, diagnostics, and essential Lights-Out functionality on iLO 2-supported HP servers. For a list of the standard features, see “Standard Features”...
  • Page 56: Tcp Ports

    Table 4-1 TCP Ports Port Identifier Port Type Port Functionality Port 22 SSH port This is the default port used by clients connecting to iLO 2 using SSH protocol. Port 23 Telnet port This is the default port used by clients connecting to iLO 2 using Telnet protocol.
  • Page 57: Adding Advanced Features

    5 Adding Advanced Features Integrity iLO 2 advanced features are enabled on Integrity servers in one of two ways. • For Integrity entry class and server blades, the advanced features are enabled with a license key. • For Integrity cell-based servers, the advanced features are enabled with a PCI-X accessory card instead of a key.
  • Page 58: Lights-Out Advanced Kvm Card Requirements

    — vMedia enables remote attachment of a USB read-only CD or DVD storage device, or ISO file image, including support for bootable media. — Use vMedia to easily upgrade firmware on npars. — Create an ISO file of a vfat file system with the required files ◦...
  • Page 59: Configuring The Lights-Out Advanced Kvm Card

    Table 5-1 Supported System Configurations System Component Description nPartition operating system • Microsoft Windows Server 2003 • HP-UX 11i v2 or later • OpenVMS Version 8.3 or later • Windows 2008 Supported platforms • rx7640 • rx8640 • Superdome sx2000 You can install the Lights-Out Advanced KVM card on any sx2000-based Integrity server with updated management processor firmware that provides iLO 2 functionality and uses the web interface to access iLO 2.
  • Page 60: Lights-Out Advanced Kvm Card Irc Feature

    Advanced KVM card IP address. To manually set the Lights-Out Advanced KVM card IP address, follow these steps: • If you are using the web GUI, use the LAN Settings page on the Administration tab. • If you are using the MP CLI, use the LC command. —...
  • Page 61: Installing The Lights-Out Advanced Kvm Card In A Server

    mass storage driver. Once the USB mass storage driver is loaded, the server OS does not require additional HP drivers running on the server OS. Additionally, the host server EFI system firmware is extended to support USB virtual devices, making virtual media available end-to-end (in a pre-boot environment, through OS loading and while the OS is operational).
  • Page 62: Pci-X Or Pci-X/Pcie Card Cage (Common To All Supported Servers)

    IMPORTANT: The HP Integrity rx8640 and rx7640 midrange servers support only one Lights-Out Advanced KVM card per partition, and the card must be installed in an I/O chassis with a core I/O card installed. If you install multiple Lights-Out Advanced KVM cards on one partition, only the first card that is detected is fully enabled.
  • Page 63: Lights-Out Advanced Kvm Card Quick Setup Steps

    Position the card over the empty slot, ensuring that the edge connector keyways match on the PCI-X or PCI-X/PCIe backplane connector. Using slow, firm pressure, seat the card in the slot. Connect the management LAN cable to the LAN port on the card. NOTE: If you do not wish to use the on-card KVM features, ignore steps 6 and 7, and proceed to step 8.
  • Page 64: Using Lights-Out Advanced Kvm Features

    NOTE: The IRC is only supported on Windows systems. You can only open one IRC session at a time with one iLO 2 web GUI session. If not yet done, go to the EFI Shell: acpiconfig windows and reset. Start the IRC. If you get the following “dvc.cab unknown publisher” error: Figure 5-2 dvc.CAB Error Follow these steps: Close the IRC window.
  • Page 65: Mid Range Pci Backplane Power Behavior

    In the main iLO 2 web GUI, there are a number of new tools that are unique to the Integrity cell-based servers. Specifically, there are pull-down tabs that enable you to select individual partitions for power (on/off/reset) management, vMedia, and IRC / vKVM. The last two, vMedia and IRC, are enabled per partition with the Lights-Out Advanced KVM card.
  • Page 66: Core I/O Card Configurations

    Table 5-3 General Troubleshooting Problem Solutions Graphics error: Hardware problem: • Must have supported power enabled. Black screen. No text is displayed. • Must have a functional mode-1 PCI-X slot. Try selecting another mode-1 slot on same partition/backplane. • Must have the card firmly seated in PCI-X/PCI-Xe backplane slot.
  • Page 67: Supported Pci-X Slots

    Table 5-4 Unsupported Core I/O Configurations with Possible Solutions Server Configuration Result Solution rx7640 • One core I/O card installed in Operating system does not Move the Lights-Out I/O chassis 1. boot with this unsupported Advanced KVM card to I/O configuration.
  • Page 68 TIP: Before performing certain iLO 2 functions, verify that you have the supported firmware version required to carry out the task. Adding Advanced Features...
  • Page 69: Accessing The Host (Operating System) Console

    6 Accessing the Host (Operating System) Console This chapter describes several ways to access the host console of an HP Integrity server. Accessing a Text Host Console through iLO 2 Virtual Serial Console Web browser access is an embedded feature of iLO 2. Before starting this procedure, you must have the following information: •...
  • Page 70: Accessing Online Help

    Figure 6-2 Status Summary Page Select the web interface functions by clicking the Primary tabs at the top of the page. Each function lists options in the Navigation Control on the left side of the page. To display data in the content area; select an option and click Refresh to update the display. Click the Remote Console tab.
  • Page 71: Accessing A Graphic Host Console Using The Integrated Remote Console

    <COMMAND> : Enter the command name for help on individual command TOPics : Show all MP Help topics and commands HElp : Display this screen : Quit help ==== MP:HE To display the Main Menu Command List, enter LI at the MP HE: prompt. To return to the MP Main Menu, enter Q.
  • Page 73: Configuring Dhcp, Dns, Ldap, And Schema-Free Ldap

    7 Configuring DHCP, DNS, LDAP, and Schema-Free LDAP This chapter provides information on how to configure DHCP, DNS, LDAP extended schema, and schema-free LDAP. Configuring DHCP DHCP enables you to automatically assign reusable IP addresses to DHCP clients. This section provides information on how to configure DHCP options such as the Domain Name System (DNS).
  • Page 74: Configuring Dns

    • Set the link state to 10 BaseT. MP:CM> LC -link t • Set the remote console serial port address. MP:CM> LC -web 2023 • Set the SSH console port address. MP:CM> LC -ssh 22 Configuring DNS To use the DNS command to display and modify the DNS configuration, follow these steps: From the MP Main Menu, enter command mode.
  • Page 75: Login Process Using Directory Services With Extended Ldap

    NOTE: The LDAP feature is only available if you have the iLO 2 Advanced Pack license. To configure LDAP extended schema, follow these steps: From the MP Main Menu, enter command mode. At the MP:CM> prompt, enter LDAP. To select Directory Settings, enter D. The current LDAP directory settings appear. To select all parameters enter A.
  • Page 76: Configuring Schema-Free Ldap

    It assists with installing the schema and snap-ins needed for Active Directory to work with iLO 2 products including Integrity iLO 2. This is for set up and management. It will not do automatic migration for you. For Integrity iLO 2, you must manually add iLO 2 objects to the directory server and set up user accounts and privileges.
  • Page 77: Setting Up Directory Security Groups

    Follow the procedure for “Configuring LDAP Extended Schema” (page 74), but omit Step 8. It is not necessary to enter a new port number. Set up directory security groups. Setting Up Directory Security Groups The following procedure describes how to set up directory security groups in schema-free LDAP using the iLO 2 MP TUI.
  • Page 78: Ldap And Mp Login For Integrity Cell-Based Servers

    LDAP and MP Login for Integrity Cell-Based Servers This section provides information on LDAP and MP login access rights and partition configuration in iLO 2 for Integrity cell-based servers. System administrators can use this information to create and assign access rights. This section explains the following: •...
  • Page 79: Access Rights

    Composite Commands These commands have sub commands within them that require different rights to execute. For example the SO command has User Parameters, MP-wide parameters within it. Each sub command needs rights as follows: • MP:CM> so — MP wide parameters [U] —...
  • Page 80: Access Rights For Cell-Based Servers

    Table 7-2 Access Rights for Cell-Based Servers Single Letter Access Right Representation Description Login Access This right is required to perform any operation on iLO 2. A user must have this right for each partition to which access is granted. With this right, a user can run Status or Read-only commands.
  • Page 81 Table 7-3 Commands and Associated Access Right (continued) Command Location Access Right LDAP MP Configuration Access Login Access Login Access PARPERM MP Configuration Access User Administration Access All for all supported partitions Login Access PWRGRD Server Power Access All for all supported partitions RU (KMIX only) All for all supported partitions MP Configuration Access...
  • Page 82: Partition User Support Options

    Table 7-3 Commands and Associated Access Right (continued) Command Location Access Right Console Access Login Access 1. View SEL, FPL, LIVE - Login rights for all partitions to which the user has access 2. View iLO 2 event log - Login rights for all partitions to which the user has access 3.
  • Page 83: Using Ilo 2

    8 Using iLO 2 This chapter provides information on the different interfaces you can use to interact with iLO 2 such as text user interface, web GUI, and SMASH SM CLP. Text User Interface This section provides information on the text user interface commands you can run in iLO 2. NOTE: HP Integrity server blades do not have fans or power supplies.
  • Page 84: Mp Main Menu

    Figure 8-1 MP Command Interfaces MP Main Menu After logging in to the iLO 2 MP, the MP Main Menu appears. The MP Main Menu runs as a private session. Other iLO 2 users do not see the actions you perform in the private session. Integrity iLO 2 can support multiple sessions to perform independent tasks: •...
  • Page 85: Co (Console): Leave The Mp Main Menu And Enter Console Mode

    CO (Console): Leave the MP Main Menu and enter console mode CO switches the console terminal from the MP Main Menu to mirrored/redirected console mode. All console output is mirrored to all users in console mode. Only one of the mirrored users at a time has write access to the console.
  • Page 86: Events

    Events communicate system information from the source of the event to other parts of the system, then to you. Events are produced by intelligent hardware modules, the operating system, and system firmware. Events funnel into the BMC from different sources throughout the server. iLO 2 polls the BMC for new events and stores them in nonvolatile memory.
  • Page 87: Ilo 2 Event Log Filter Options

    Table 8-4 iLO 2 Event Log Filter Options Filtering Option Filter Criteria N: User Login Filter by user Login ID P: Port Name Filter by port name (Serial, Telnet, SSH, WEB) I: IP Address Filter by user IP Address (dotted decimal format) M: Date Filter by date stamp of the records entries (MM/DD/YYYY) If you select more than one filtering option, it acts as an additional filter.
  • Page 88: Events And Actions

    Table 8-6 Events and Actions Event Action Functions Forward Progress Log - New events overwrite old FPL events once the FPL is full. Stores all events of level 0 or greater System Error Log - New events are not logged to the SEL when the SEL is full. Thus, it is Stores all events of level necessary for a user or an application to periodically clear the SEL.
  • Page 89: He (Help): Display Help For The Menu Or Command In The Mp Main Menu

    Table 8-7 Navigation Commands (continued) Navigation Command Action Display help Ctrl-B Exit viewer NOTE: The MPEL log history display provides the same navigation commands as the FPL and the SEL except for the D command. MPEL log navigation provides the following filtering options: Table 8-8 MPEL Log Navigation Filter MPEL Log Navigation Filter Action...
  • Page 90 Table 8-9 Command Menu Commands (continued) Command Description Disconnects the LAN console Sets the DNS configuration This command is only available to authorized HP service personnel Displays help for the menu or command Displays or modifies system information Modifies the iLO 2 inactivity timeouts Displays the LAN configuration Displays the LDAP configuration LDAP...
  • Page 91: Command Line Interface Scripting

    Command Line Interface Scripting A command line interface is provided for all commands to assist you in scripting. This section provides syntax examples used in the iLO 2 MP command-line or scripted interface. Typically, tools like Expect (see “Expect Script Example” (page 91)) and (http://expect.nist.gov/) are used to string together several commands to accomplish a task.
  • Page 92 # transfer. If this causes a problem, delete these patterns or replace # them with wildcards. An alternative is to use the -p flag (for # "prompt") which makes Expect only look for the last line of output # (i.e., the prompt). The -P flag allows you to define a character to # toggle this mode off and on.
  • Page 93: Command Menu Commands And Standard Command Line Scripting Syntax

    send "x\r" expect eof Command Menu Commands and Standard Command Line Scripting Syntax The following list of commands is provided to help you learn about the Command menu commands. Command-line interface scripting syntax for each command is provided to help you accomplish a scripting task.
  • Page 94: Blade: Display Blade Parameters

    BLADE: Display BLADE parameters NOTE: This command is available only on a server blade. Command access level: Login access BLADE facilitates the cabling and initial installation of HP Integrity server blades. It also provides a quick view of the enclosure status. You must have configuration access right to turn the enclosure locator UID LED on or off.
  • Page 95: Date: Display Date

    CA sets the parameters for the local and the remote serial console. Input and output data rates are the same. The value returned by the stty command on HP-UX is the local serial port console speed. Set up the local serial port parameters as follows: BAUD RATES Input and output data rates are the same.
  • Page 96: Df: Display Fru Information

    DC sets all iLO 2 parameters back to their default values. To restore specific configurations to their default values, use the following commands: MP IP configuration : LC -all DEFAULT Remote Access Configuration : SA -all DEFAULT Command Interface configuration : IT -all DEFAULT MP Security configuration : SO -opt DEFAULT...
  • Page 97: Fw: Upgrade The Mp Firmware

    If an IP address was obtained through DHCP, an add name request is sent to the DDNS server if it is enabled and registered. Command line usage and scripting: DNS [ [ -server <e|d> ] [ -domain <text> ] [ -name <e|d> ] [ -register <y|n>...
  • Page 98: It: Inactivity Timeout Settings

    | { -server [ -location <text> ] [ -rackid <text> ] [ -position <text> ] } ] [ -tag <text> } ] [ -nc ] IT: Inactivity timeout settings Command access level: MP configuration access IT prevents sessions on the system from being inadvertently left open. When you initiate an iLO 2 MP command, other users are prohibited from running any commands until the first command has been completed or until it times out.
  • Page 99: Ldap: Ldap Directory Settings

    — When you change the DHCP status from enabled to disabled, the DNS parameters for DHCP are set to disabled, and the Register with DDNS parameter is set to No. — When you change the DHCP status from disabled to enabled, the DNS parameters for DHCP are set to enabled, and the Register with DDNS parameter is set to Yes.
  • Page 100: Ldap: Ldap Group Administration

    NOTE: Locally stored user accounts can be active while directory support is enabled. This enables both local- and directory-based user access. If both directory authentication and local user accounts are enabled, login is attempted using the directory first, then using local accounts.
  • Page 101: Ldap: Schema-Free Ldap

    LDAP: Schema-Free LDAP Schema-Free LDAP enables you to use directory authentication for logging in to iLO 2 without having to do any schema extension on the directory server or snap-in installation on the client. For information on schema-free LDAP, see “Configuring Schema-Free LDAP”...
  • Page 102: Pm: Power Regulator Mode

    Turns the system power off, then on. The delay between off and on CYCLE is 30 seconds. The BMC sends a signal to the OS to shut down prior to turning off Graceful Shutdown the system power. Command line usage and scripting: PC [ -on | -off | -graceful | -cycle ] [ -nc ] Example: [gstlhpg1] MP:CM>...
  • Page 103: Pr: Power Restore Policy Configuration

    Power mode will be set to OS Control. Confirm? (Y/[N]): y Please wait .. -> Power mode has been successfully changed See also: PC, PR PR: Power restore policy configuration Command access level: MP configuration access PR configures the power restore policy. The power restore policy determines how the system behaves when ac power returns after an ac power loss.
  • Page 104: Sa: Set Access Lan/Web/Ssh/Ipmi Over Lan Ports

    Command line usage and scripting: RS [ -nc ] See also: TC SA: Set access LAN/WEB/SSH/IPMI over LAN ports Command access level: MP configuration access SA sets access permissions for users logging in to iLO 2 over the LAN. You can set iLO 2 to allow Telnet access, web access, SSH, IPMI over LAN, or all four.
  • Page 105: So: Security Option Help

    To configure the community string to secure the access to the MIB objects, enter C. The default is public. Command line usage and scripting SNMP [ -status <e|d> ] [ -community [ <text> ] ] [ -nc ] Command line usage and scripting for server blades: SA [ -status <e|d>...
  • Page 106: Sysrev: Firmware Revisions

    SS [ -nc ] See also: PS SYSREV: Firmware revisions Command access level: Login access SYSREV displays the current firmware revisions in the system. Command line usage and scripting: SYSREV [ -nc ] Example: MP:CM> SYSREV Current firmware revisions : F.01.57 BMC FW : 75.12 EFI FW...
  • Page 107 UC adds, modifies, re-enables, or deletes any of the following user parameters: • Login ID • Password • User Name • User Workgroup • User Access Rights • User Operating Mode • User Enabled There are two default users, Admin and Oper. The Admin user has all rights (C, P, M, U, and V).
  • Page 108: Who: Display A List Of Ilo 2 Connected Users

    [gstlhpg1] MP:CM> uc -delete Oper -nc UC -delete Oper -nc Current User Parameters: User Login ID : Oper User Password : ************ User Name : Default Operator User Workgroup User Access Rights : Console access, Virtual Media User Operating Mode : Multiple User Enabled/Disabled : Enabled ->...
  • Page 109 You can use the XD command plus its R command option to reset iLO 2. You can safely perform an iLO 2 reset without affecting the operation of the server. You can also reset iLO 2 through the web interface or by pressing the MP reset button. Command line usage and scripting: XD [ -parameter | -i2c |-lan <ipaddr>...
  • Page 110: Web Gui

    Web GUI This section describes the functions and features of the web graphical user interface (GUI). Some of the functionality in the web GUI only display if you have the iLO 2 Advanced Pack license. For more information on the iLO 2 Advanced Pack license, see “Obtaining and Activating iLO 2 Advanced Pack Licensing”...
  • Page 111: Status Summary > Active Users

    Table 8-10 Status Summary General Page Description Field Description System Power The current power state (ON/OFF/STANDBY) of the system and the corresponding power LED state. Latest SEL Entry The most recent entry in the SEL. Firmware Revisions Displays the current firmware revisions for iLO MP, BMC, EFI, system firmware, PDH, UCIO, PRS, and PMPIC for entry class server blades.
  • Page 112: Status Summary > Fw Revisions

    Table 8-1 1 Active Users Page Description Field Description Access Type Multiple access methods are available: Serial, Telnet, SSH, SSL web or IPMI over LAN. IPMI, vMedia, and IRC/vKVM users are not listed in web GUI sessions. User Login The user currently logged in through a particular access type. IP Address The IP address of the active user.
  • Page 113: Server Status > General

    Table 8-12 FW Revisions Page Descriptions (continued) Field Description System Firmware System platform firmware version Platform Dependent programmable Hardware version UCIO Universal Core I/O firmware version Power Reset Sequencer PMPIC Power Management Programmable Interrupt Controller for entry class server blades Server Status >...
  • Page 114: Server Status > Identification

    Table 8-13 Server Status General Page Description (continued) Field Description Fans Lists the fans and fan status. System Processors Displays the status of the processor. NOTE: For BL c-Class servers, you can obtain information on power supplies and fans through the OA. See “BL c-Class”...
  • Page 115: System Event Log

    NOTE: Many of the fields are published by the iLO 2's SNMP for visibility to management applications on the network. System Event Log The System Event Log (SEL) page (Figure 8-7) enables you to view the contents of the event logs that have been stored in nonvolatile memory.
  • Page 116: Events

    NOTE: You can view only the most pertinent fields for each event on the web. For a more complete decoding of the events, use the TUI available by logging in to iLO 2 through Telnet or SSH. Events Events can be a result of a failure or an error (such as fan failure, Machine-Check Abort, and so on).
  • Page 117: Remote Serial Console Page

    NOTE: Depending on your server, this page might look slightly different. Figure 8-8 Remote Serial Console Page NOTE: The BL c-Class tab is available only on HP Integrity server blades. The remote serial console is a Java applet that requires Java Plug-in 1.4.2-10 to be installed on the client system.
  • Page 118: Remote Serial Console Window

    Table 8-16 Supported Terminal Types HP-UX Windows Linux hpterm Vt100 Vt100+ Vt-utf8 IMPORTANT: Do not mix hpterm and vt100 terminal types at the same time. If there are two users collaborating and viewing console output with different emulation modes set, their clients will see garbled results if the output from the system is terminal specific.
  • Page 119: Virtual Serial Port

    The remote serial console option relies on the virtual serial port. Virtual Serial Port Integrity iLO 2 contains a virtual serial port that enables it to actually be the console hardware device for the OS. This port is a serial interface between the host system and iLO 2. iLO 2 converts the serial data stream to be available remotely through the remote serial console (a VT320 Java applet).
  • Page 120: Limitations Of The Irc Mouse And Keyboard

    You can view the list of supported operating systems and browsers on the HP website at http:// www.hp.com/go/integrityilo. Only one user has access to the IRC at a time. You must have console access right to use this feature. If you do not have console access right, see the User Administration page under the Administration tab to add this access right.
  • Page 121: Browsers And Client Operating Systems That Support The Irc

    NOTE: If you run system discovery utilities such as MAPPER or IOSCAN, the output might display an extra keyboard and mouse that are not physically connected. This is a consequence of the IRC feature. Browsers and Client Operating Systems that Support the IRC You can view the list of supported browsers and client operating systems for IRC and vKVM on the HP website at http://www.hp.com/go/integrityilo.
  • Page 122: Accessing The Irc

    In all cases, the EFI console is available on the remote serial console as well as the IRC. But, the OS console for HP-UX appears according to the device settings in EFI. If an HP-UX operating system is configured to use VGA as the console, the HP-UX console is available only through the IRC and VGA.
  • Page 123: Integrated Remote Console Page

    IMPORTANT: The operating system server console output does not display on the console device screen until the server boots to the EFI Shell. To view console output prior to booting to the EFI Shell, either start a console session using the console serial port (RS-232), or access iLO 2 virtual serial port, or IRC.
  • Page 124: Integrated Remote Console Fullscreen

    Figure 8-1 1 Integrated Remote Console Window Table 8-18 lists the menu bar, buttons, and actions you can perform in the IRC window. Table 8-18 IRC Window Description Menu Bar Buttons Action Thumb Tack Enables you to keep the menu open, or retracts it when the mouse is moved away.
  • Page 125: Virtual Media

    Virtual Media Virtual Media (vMedia) provides you with virtual devices that mimic physical hardware devices such as a virtual floppy disk drive and a CD/DVD drive that connects through the network to the managed server just as if it was physically connected. The vMedia device can be a physical CD/DVD drive on the management workstation, or it can be an image file stored on a local disk drive or network drive.
  • Page 126: Virtual Cd/Dvd

    Select Virtual Media. The Virtual Media page appears (Figure 8-12) NOTE: Depending on your server, this page might look slightly different. Figure 8-12 Virtual Media Page Click Launch to load the vMedia applet. The vMedia applet loads in support of the vMedia device.
  • Page 127: Virtual Media Dialog Box (Before Connection)

    The iLO 2 vMedia CD/DVD appears to your operating system just like any other CD/DVD. When using the iLO 2 for the first time, the host operating system might prompt you to complete a New Hardware Found wizard. NOTE: This feature requires that the Java Plug-in 1.4.2 or 1.5 is installed. This feature requires the vMedia right and the Advance Pack License.
  • Page 128: Creating The Ilo 2 Disk Image Files

    Click Connect. The connected drive icon and LED changes states to reflect the current status of the virtual CD/DVD. Figure 8-14 Virtual Media Dialog Box (after connection) After you are connected, virtual devices are available to the host server until you close the vMedia applet or sign out from a web session.
  • Page 129: Local Image File Dialog Box

    performance of the iLO 2 vMedia is faster when image files are used. The utility to create the iLO 2 CD/DVD disk image files is integrated into the vMedia applet. Store image files on your client computer or on a network drive that can be accessed from the client using a fast network segment.
  • Page 130: Virtual Floppy/Usb Key

    To insert the next CD during an OS installation or any application installation with multiple image files, follow these steps: To select the next image file or to replace the CD/DVD with the next CD/DVD, click Browse To continue the installation, click OK on the host server. IMPORTANT: Do not click Disconnect to select the next CD/DVD image file.
  • Page 131: Virtual Media Applet Timeout

    Figure 8-17 Virtual Floppy/USB Key To use an image file, follow these steps: Select Local Image File within the virtual floppy/USB key section of the vMedia applet. Enter the path or file name of the image in the text-box, or click Browse to locate the image file using the Choose Disk Image File dialog.
  • Page 132: Java Plug-In Version

    Java Plug-in Version The vMedia feature requires prior installation of Java Plug-in 1.4.2_10 or higher. Client Operating System and Browser Support for vMedia You can view the list of supported client operating systems on the HP website at http:// www.hp.com/go/integrityilo. Power Management For entry class and server blades, the iLO 2 power management feature enables you to view and control the power state of the server, monitor power usage, monitor the processor, and modify...
  • Page 133: Power Meter Readings

    Table 8-19 Power & Reset Page Description Fields and Buttons Description System Power The current power state of the system. System Power Control A user with power control access can issue the following options for remote control of the system power: •...
  • Page 134: Power Meter Readings Page

    Power meter readings is a licensed feature and requires the Advanced Pack license to see the Power Regulator graphs from the iLO 2 web GUI. The license key also enables iLO 2 to share information with Insight Power Manager. NOTE: You can obtain an instant power reading without a license key through the CLI using the PS command.
  • Page 135: Power Regulator

    Table 8-20 Power Meter Readings Page Description (continued) Fields and Buttons Description Minimum Displays the minimum power reading from the server over the last 24-hour period. 24-hour Power History The 24-hour History section displays the average, maximum, and minimum power Section averages.
  • Page 136: Power Regulator Page

    NOTE: Depending on your server, this page might look slightly different. Figure 8-20 Power Regulator Page NOTE: The BL c-Class tab is available only on HP Integrity server blades. Table 8-21 lists the fields, buttons, and descriptions. Table 8-21 Power Regulator Page Description Fields and Buttons Description Power Regulator Mode...
  • Page 137: Administration

    Table 8-21 Power Regulator Page Description (continued) Fields and Buttons Description Submit Submits the selected function. Cancel Cancels the action. The power regulation functionality is achieved through two different interfaces: • Power Regulation through HP SIM (using the HP IPM plug in) HP Insight Power Manager (HP IPM), a plug-in to HP Systems Insight Manager (HP SIM), is an integrated power monitoring and management application that provides centralized control of server power consumption and thermal output.
  • Page 138: Licensing

    IMPORTANT: When performing a firmware upgrade that contains system programmable hardware (FPGA, EFI, PSOC, BMC), you must properly shut down any OS that is running before starting the firmware upgrade process. Select Download drivers and software, select your server, and follow the directions provided. After the upgrade, reconnect and log in as user Admin and password Admin (case sensitive).
  • Page 139: User Administration > Local Accounts

    NOTE: The BL c-Class tab is available only on HP Integrity server blades. IMPORTANT: On HP Integrity server blades, an Advanced Pack license is standard. Remember to save the Advanced Pack license key information that was provided by HP. If you ever need to replace your server blade under warranty, you will need to transfer the key by entering the code on the replacement server blade.
  • Page 140: Group Accounts

    NOTE: Depending on your server, this page might look slightly different. Figure 8-22 Local Accounts Page NOTE: The BL c-Class tab is available only on HP Integrity server blades. There are two default users: Admin: The Admin user has all five rights (console access, power control, MP configuration, user administration, virtual media).
  • Page 141: Access Settings

    When a user attempts to login into iLO 2, iLO 2 reads that user’s directory name in the directory to determine the groups the user is a member of. iLO 2 compares this information with a list of groups configured by the user. The rights of all the matched groups are combined and assigned to that user.
  • Page 142: Lan

    The LAN page (Figure 8-24) enables you to modify LAN settings. You must have iLO configuration access right to use this feature. NOTE: Depending on your server, this page might look slightly different. Figure 8-24 LAN Page NOTE: The BL c-Class tab is available only on HP Integrity server blades. Table 8-25 lists the fields, buttons, and descriptions.
  • Page 143: Serial Page

    Table 8-25 LAN Page Description (continued) Fields and Buttons Description Submit Submits the information. Cancel Cancels the action. Serial Page The Serial page (Figure 8-25) enables you to set the serial port parameters. You must have iLO configuration access right to use this feature. NOTE: Depending on your server, this page might look slightly different.
  • Page 144: Current Ldap Parameters

    NOTE: Depending on your server, this page might look slightly different. Figure 8-26 Login Options Page NOTE: The BL c-Class tab is available only on HP Integrity server blades. Table 8-27 lists the fields, buttons, and descriptions. Table 8-27 Login Options Page Description Fields and Buttons Description Login Timeout in Minutes...
  • Page 145: Current Ldap Parameters Page

    NOTE: Depending on your server, this page might look slightly different. Figure 8-27 Current LDAP Parameters Page NOTE: The BL c-Class tab is available only on HP Integrity server blades. Table 8-28 lists the fields and descriptions. Table 8-28 Current LDAP Parameters Page Description Field Description Directory Authentication...
  • Page 146: Network Settings

    Table 8-28 Current LDAP Parameters Page Description (continued) Field Description Submit Submits the information. Cancel Cancels the action. Network Settings The Network Settings tab enables you to access the following pages: • Standard • Domain Name Server IMPORTANT: If you are connected through a network and you make any changes to DHCP status, IP address, subnet mask, or gateway IP address, iLO 2 automatically resets once you confirm the change.
  • Page 147: Domain Name Server

    NOTE: The BL c-Class tab is available only on HP Integrity server blades. Table 8-29 lists the fields, buttons, and descriptions. Table 8-29 Standard Page Description Fields and Buttons Description MAC Address The 12 digit (hexadecimal) MAC address. DHCP Status Enable or Disable.
  • Page 148: Snmp Settings

    NOTE: The BL c-Class tab is available only on HP Integrity server blades. Table 8-30 lists the fields, buttons, and descriptions. Table 8-30 DNS Page Description Fields and Buttons Description Use DHCP supplied Use the DHCP server-supplied domain name. domain name Domain name This represents the factory-default DNS name of the subsystem, for example, “hp.com”...
  • Page 149: Bl C-Class

    Table 8-31 SNMP Settings Page Description Field Description SNMP Choosing Enable or Disable, activates or deactivates the SNMP feature support on this iLO 2. SNMP Alerts NOTE: Currently, the SNMP alert feature is only supported on HP Integrity server blades. Enter E to enable or D to disable all SNMP alerts.
  • Page 150: Help

    NOTE: The BL c-Class tab is available only on HP Integrity server blades. Table 8-32 lists the fields and descriptions. Table 8-32 Onboard Administrator Page Description Field Description OA IP Address The IP address of the OA. IMPORTANT: Integrity iLO 2 must have a reachable IP address as the default gateway address.
  • Page 151: Help Page

    NOTE: Depending on your server, this page might look slightly different. Figure 8-32 Help Page NOTE: The BL c-Class tab is available only on HP Integrity server blades. You can also click the ? at the top right corner of each page to display help about the page you are on.
  • Page 152: Smash Server Management Command Line Protocol

    SMASH Server Management Command Line Protocol The Systems Management Architecture for Server Hardware (SMASH) initiative is an effort within the Distributed Management Task Force (DMTF) to standardize commands for servers. The Server Management Command Line Protocol (SM CLP) specifies common command line syntax and message protocol semantics for server management.
  • Page 153: Exiting The Sm Clp Interface

    Type "help" to display all supported commands. Type "show" to display information about the current target. Type "start /map1/textredirectsap1" to switch to iLO Main Menu interface. === SMCLP v1.0.0 Hewlett-Packard Company === </> hpiLO-> Exiting the SM CLP Interface To terminate an SM CLP session and disconnect from iLO 2, use the exit command. To switch from SM CLP to the MP Main Menu interface, use the start /map1/textredirectsap1 command.
  • Page 154: Using The Sm Clp Interface

    Enter new value, or Q to Quit: s -> Default Command Mode Configuration will be updated New Set Access Configuration (* modified values): R - Remote : OS SESSION T - Telnet : Enabled H - SSH : Disabled W - Web SSL : Enabled I - IPMI over LAN : Enabled * C - Command Mode...
  • Page 155: Command Verbs

    <options> Selections that affect the action, behavior, or output of the verb. <target> The implicitly or explicitly-identified managed element the command is directed to. <properties> Attributes of the target relative to the command execution. Command Verbs Command verbs select a management action for target. The command verbs listed in Table 8-33 consist of several reserved words in the following...
  • Page 156: Command Targets

    • version • exit Command Targets The command target address identifies the specific managed element or association to be affected by the command verb. All SM CLP commands have a command target, whether explicitly or implicitly identified. For instance, the target /map1/telnetsvc1/ can be identified in any of the following ways: Using the target’s absolute path: </>...
  • Page 157: Display Option

    Show information about system1 and all contained MEs: </>hpiLO-> show -l all system1 Display Option The display option filters the information returned in command results. The following examples show command display option syntax: Display targets under /map1 target: </map1> hpiLO-> show -d targets Display properties of /map1 target: </map1>...
  • Page 158: System1 Target

    Table 8-35 SM CLP Reserved Characters and Character Sequences Character or Name Description and Uses Sequence “ “ Space Command line term separator. ‘ Escape character Escape character (the backquote character). Use in front of reserved characters to instruct the command parser to use the reserved character without special meaning.
  • Page 159: System Reset Power Status And Power Control

    Table 8-36 system1 Properties Property Name Description Access and Values EnabledState Provides information about the system Read-only power state. Values: • Enabled: System power is off. • Disabled: System power is on. Verbs show Displays information about managed elements (targets, their supported properties and verbs).
  • Page 160: Map1 (Ilo 2) Target

    </>hpiLO-> start system1 status=0 status_tag=COMMAND COMPLETED system1 has been powered on Map1 (iLO 2) Target Target: map1 The map1 target (management access point) represents the root of the iLO 2 namespace. Functions and information related to iLO 2 are located under the map1 target. Table 8-37 shows map1 target properties.
  • Page 161: Resetting Ilo 2

    Resetting iLO 2 To reset iLO 2, run the reset command to the MAP1 target as in the following example: </>hpiLO-> reset map1 status=0 status_tab=COMMAND COMPLETED iLO was issued a reset Text Console Services This section describes targets, their properties, and supported verbs necessary to implement the console services in SM CLP.
  • Page 162: Switching Between The System Console And The Sm Clp

    Table 8-39 /system1/consoles1/textredirectsap1 Properties Property Name Description Access and Values EnabledState Shows if the test redirection is Read-only enabled. Set to Enabled. SessionTerminateSequence A string sequence used for Read-only terminating text redirection session Set to Esc. and returning to SM CLP. Enter Esc at the system console to return to the SM CLP interface.
  • Page 163: Firmware Revision Display And Upgrade

    Firmware Revision Display and Upgrade This section describes how to view firmware revisions in the system. Each installed firmware in the system known to MP (MP FW, BMC FW, EFI FW, System FW, and so on) is represented by a swid target. •...
  • Page 164: Displaying Firmware Revisions

    Table 8-42 swid# Properties Property Name Description Access and Values TargetType Identifies what type of firmware this swid target represents Read-only VersionString Represents firmware revision string; for example, F.01.40. Read-only Verbs Changes the current default target. help Displays context-sensitive help. show Displays information.
  • Page 165: Firmware Upgrade

    /map1/swcollection1/swid7 TargetType=PRS FW VersionString=00.05 UpSeqRev: 09, DownSeqRev: 07 </>hpiLO-> show -level all swid* Firmware Upgrade Firmware upgrades enhance the functionality of iLO 2. The MP firmware is packaged along with system, BMC, and FPGA/PSOC firmware. You can download and upgrade the firmware package from the HP website at http://www.hp.com/go/ bizsupport.
  • Page 166: Telnet Examples

    Telnet Examples The following examples show specific Telnet commands. Enable Telnet Service </>-> start /map1/telnetsvc1 Disable Telnet Service </>-> stop /map1/telnetsvc1 This section describes targets, their properties, and supported verbs necessary to enable or disable SSH access to iLO 2. Target: map1/sshsvc1 The sshsvc1 target represents the SSH service provided by map1.
  • Page 167: Target: Map1/Enetport1/Lanendpt1

    Table 8-45 enetport1 Properties Property Name Description Access and Values AutoSense Specified if the iLO 2 AutoSense feature is Read/write enabled. If it is disabled, iLO 2 network Boolean values accepted. speed is set to 10 mb/s. PermanentAddress Represents iLO 2 MP MAC address. Read-only The iLO 2 MP MAC address is formatted as twelve hexadecimal digits...
  • Page 168: Target: Map1/Dhcpendpt1

    Table 8-47 ipendpt1 Properties Property Name Description Access and Values IPv4Address iLO 2 MP IP address. Read/write The value of the property must be expressed in dotted decimal notation. SubnetMask iLO 2 MP subnet mask. Read/write The value of the property must be expressed in dotted decimal notation.
  • Page 169: Target: Map1/Enetport1/Lanendpt1/Ipendpt1/Gateway1

    Table 8-49 dnsendpt1 Properties Property Name Description Access and Values EnabledState Represents the state of iLO 2 DNS. Read only The following are valid values: Enabled: The iLO 2 DNS client is enabled. Disabled: The iLO 2 DNS client is disabled. Hostname Represents the host name currently Read-only...
  • Page 170: Sm Clp Network Command Examples

    Table 8-52 shows dnssettings1 target properties. Table 8-52 dnssettings1 Properties Property Name Description Access and Values DNSServerAddress Contains the IP addresses of the Read/write primary, secondary, and tertiary This is an array property. DNS servers. The value of each element of this property must be expressed in dotted decimal notation.
  • Page 171: Vmedia

    </>hpiLO-> set /map1/enetport1/lanendpt1/ipendpt1/gateway1 AccessInfo=192.0.2.1 Determine Link State (Autosense) </>hpiLO-> show -d properties=autosense /map1/enetport1 Set Link (Autosense) </>hpiLO-> set /map1/enetport1 autosense=true AccessInfo=192.0.2.1 Enable/Disable DHCP </>hpiLO-> stop /map1/dhcpendpt1 </>hpiLO-> start /map1/dhcpendpt1 Determine all DNS settings </>hpiLO-> show /map1/settings1/dnssettings1 Determine IP Address of the DNS Servers (primary, secondary, and tertiary) </>hpiLO->...
  • Page 172: Vmedia Functionality On Server Blades And Rack-Mounted Servers

    Verify that IIS can access the MIME type for the files you are serving. For example, if you name your diskette images with the extension .img, you must add a MIME type for that extension. Use the IIS Manager to access the Properties dialog of your website. On the HTTP Headers tab, click MIME Types to add additional MIME types.
  • Page 173: Cddr1 Properties

    Table 8-53 cddr1 Properties Property Name Description Access and Values oemhp_image The image path and name for vMedia Read/write access. The value is a URL with a maximum length of 80 characters. oemhp_connect Used to connect or disconnect a vMedia Read/write device and display the connection status.
  • Page 174 images) on the client side appear as local drives (USB CD read-only) on the managed server. With the help of vMedia, the server can boot from the DVD/CD (or image) on the client, perform OS and applications installation on the server from the client’s drives or data transfer, and so The OA has two types of CD/DVD interfaces to access scriptable vMedia: Built-in DVD Interface The c3000 Enclosure has a built-in DVD drive you can use to connect...
  • Page 175 Using the Telnet/SSH connection to the OA. NOTE: While in the OA, you will not be entering the SM CLP vMedia commands directly in MP. Instead, you will issue the commands from the Telnet/SSH connection of the OA to connect or disconnect vMedia. •...
  • Page 176: User Accounts Configuration

    • The vMedia feature is supported using the USB 1.1 protocol (since MP FW uses Philips 1181 USB device). As a result, USB 2.0 is not currently supported. • DVD appears as the large CD. • Currently there is no support on fully compliant DVD. Typical Scriptable vMedia Usage Using the scriptable vMedia feature, you can perform the following: Deploying Operating Systems...
  • Page 177: User Account Examples

    Table 8-55 account# Properties (continued) Property Name Description Access and Values Name User name of this account. Read/write. Specified in ASCII characters up to 24 characters long. oemhp_privileges Privileges of this user account. Read/write. The following are valid values: <console,power,mp,user,virtual), <all>...
  • Page 178: Ldap Configuration Examples

    Table 8-56 oemhp_ldapsettings1 Properties Property Name Description Access and Values oemhp_dirauth Represents the iLO 2 directory access setting. Read write. Valid values are: DefaultSchema: enable directory authentication using default schema. ExtendedSchema: enable directory authentication using extended HP schema. Disabled: disable directory authentication oemhp_localacct Represents iLO 2 local user accounts access Read write.
  • Page 179: Installing And Configuring Directory Services

    9 Installing and Configuring Directory Services This chapter provides information on how to install and configure iLO 2 directory services. You can install and configure iLO 2 directory services to leverage the benefits of a single point of administration for iLO 2 user accounts. Directory Services The following are benefits of directory integration: Scalability...
  • Page 180: Directory Services Installation Prerequisites

    Directory Services Installation Prerequisites Before installing directory services, you must do the following: • Obtain an iLO 2 Advanced Pack license. • Configure LDAP. TIP: Before performing certain iLO 2 functions, verify that you have the supported firmware version required to carry out the task. To make sure you have the latest supported firmware version, see the HP website at http://www.hp.com/go/bizsupport.
  • Page 181: Directory Services Support

    Directory Services Support Integrity iLO 2 supports the following directory services: • Microsoft Active Directory • Microsoft Windows Server 2003 Active Directory • Novell eDirectory 8.6.2 • Novell eDirectory 8.7 The iLO 2 software is designed to run within the Microsoft Active Directory Users and Computers, and Novell ConsoleOne management tools.
  • Page 182: Schema Installer

    Schema Installer One or more .xmlfiles are bundled with the schema installer. These files contain the schema that is added to the directory. Typically, one of these files contains core schema that is common to all the supported directory services. Additional files contain only product-specific schema. The schema installer requires the use of the .NET Framework.
  • Page 183: Results Screen

    Figure 9-2 Schema Setup Screen The Directory Server section of the Setup screen enables you to select whether to use Active Directory or eDirectory, and to set the computer name and the port to be used for LDAP communications. IMPORTANT: To extend the schema on Active Directory you must be an authenticated schema administrator, the schema must not be write protected, and the directory must be the flexible single master operation (FSMO) role owner in the tree.
  • Page 184: Management Snap-In Installer

    Figure 9-3 Schema Results Screen Management Snap-In Installer The management snap-in installer installs the snap-ins required to manage iLO 2 objects in a Microsoft Active Directory Users and Computers directory or in a Novell ConsoleOne directory. To create an iLO 2 directory using iLO 2 snap-ins, perform the following tasks: Create and manage iLO 2 objects and role objects.
  • Page 185: Preparing Directory Services For Active Directory

    IMPORTANT: To install directory services for iLO 2, an Active Directory schema administrator must extend the schema. • Extending the schema in the Microsoft Windows 2000 Server Resource Kit, available at: http://www.microsoft.com • Installing Active Directory in the Microsoft Windows 2000 Server Resource Kit, available http://www.microsoft.com •...
  • Page 186: Installing And Initializing Snap-Ins For Active Directory

    The Active Directory schema folder may need to be expanded for the checkbox to be available. Create a certificate or install Certificate Services. This step is necessary because iLO 2 uses SSL to communicate with Active Directory. To specify that a certificate be issued to the server running Active Directory, do the following: Launch MMC on the server and add the default domain policy snap-in (Group policy and browse to default domain policy object).
  • Page 187: Directory Example

    Figure 9-4 Directory Example Create an organizational unit to contain the iLO 2 devices managed by the domain. In this example, two organizational units are created, Roles and MPs. Use the Active Directory Users and Computers snap-ins provided by HP to create iLO 2 objects for several iLO 2 devices in the MP organizational unit.
  • Page 188: Select Users Dialog Box

    In the Name field of the dialog box, enter an appropriate name In this example, the DNS host name of the iLO 2 device, lpmp, is used as the name of the iLO 2 object, and the surname is iLO 2. Enter and confirm a password in the Device LDAP Password and Confirm fields (this is optional).
  • Page 189: Directory Services Objects

    Figure 9-7 Lights-Out Management Tab Click OK. Using the same procedure in step 4, edit the properties of the remoteMonitors role, add the lpmp device to the Managed Devices list on the HP Devices tab, and use the Members tab to add users to the remoteMonitors role.
  • Page 190: Active Directory Snap-Ins

    NOTE: After you install the snap-ins, restart ConsoleOne and MMC to display the new entries. After the snap-in is installed, you can create iLO 2 objects and roles in the directory. Using the Users and Computers tool, you can: • Create iLO 2 objects and role objects.
  • Page 191: Setting Login Restrictions

    Figure 9-9 Members Tab Setting Login Restrictions The Role Restrictions tab (Figure 9-10) enables you to set login restrictions for a role. These restrictions include: • Time Restrictions • IP Network Address Restrictions — IP/Mask — IP Range — DNS Name Figure 9-10 Role Restrictions Tab Directory Services for Active Directory...
  • Page 192: Setting Time Restrictions

    Setting Time Restrictions • To manage the hours available for login by members of the role, click the Effective Hours button. The Logon Hours screen appears (Figure 9-11). • To select the times available for login each day of the week in half-hour increments, use the Logon Hours screen.
  • Page 193: Setting User Or Group Role Rights

    From the Role Restrictions tab, select IP/MASK and click Add. The New IP/Mask Restriction dialog box appears (Figure 9-12). Figure 9-12 New IP/Mask Dialog Box In the New IP/Mask Restriction dialog box, enter the information and click OK. To restrict access based on a DNS, select DNS Name and click Add. The New DNS Name Restriction dialog box appears.
  • Page 194: Directory Services For Edirectory

    Figure 9-13 Lights-Out Management Tab Table 9-1 lists the available Lights-Out Management rights. Table 9-1 Lights-Out Management Rights MP Rights Description Login This option controls whether users can log in to the associated devices and execute Status or Read-only commands (view event logs and console logs, check system status, power status, and so on) but not execute any commands that would alter the state of iLO 2 or the system.
  • Page 195: Example: Creating And Configuring Directory Objects For Use With Ilo 2 Devices In Edirectory

    NOTE: After you install snap-ins, restart ConsoleOne and MMC to show the new entries. Example: Creating and Configuring Directory Objects for Use with iLO 2 Devices in eDirectory The following example demonstrates how to set up roles and HP devices in a company called samplecorp, which consists of two regions: region1 and region2.
  • Page 196: Creating Roles

    From in the region1 organizational unit, right-click the HP devices organizational unit. Select New, and select Object. Select hpqTarget from the list of classes, and click OK. Enter an appropriate name and surname in the New hpqTarget dialog box. In this example, the DNS host name of the iLO 2 device, rib-email-server, is used as the name of the iLO 2 object, and the surname is RILOEII (iLO 2).
  • Page 197: Setting Role Rights

    Right-click the remoteAdmins role in the roles organizational unit in the region1 organizational unit, and select Properties. Select the Role Managed Devices subtab of the HP Management tab, and click Add. Using the Select Objects dialog box, browse to the HP devices organizational unit in the region1 organizational unit.
  • Page 198: Directory Services Objects For Edirectory

    devices,ou=region1,o=samplecorp Directory User Context 1 = ou=users,o=samplecorp For example, user CSmith (located in the users organizational unit within the samplecorp organization, who is also a member of one of the remoteAdmins or remoteMonitors roles) would be allowed to log in to iLO 2. He would type csmith (case insensitive) in the Login Name field of the iLO 2 login, and use his eDirectory password in the Password field to gain access.
  • Page 199: Setting Role Restrictions

    Figure 9-18 Members Tab (eDirectory) To browse to the specific user you want to add, click Add. To remove a user from the list of valid members, highlight the user name and click Delete. Setting Role Restrictions The Role Restrictions subtab (Figure 9-19) enables you to set login restrictions for a role.
  • Page 200: Setting Time Restrictions

    Setting Time Restrictions You can manage the hours available for login by members of a role using the time grid displayed in the Role Restrictions subtab (Figure 9-19). You can select the times available for login for each day of the week in half-hour increments. You can change a single square by clicking it or change a section of squares by clicking and holding the mouse button, dragging the cursor across the squares to be changed, and releasing the mouse button.
  • Page 201: Installing Snap-Ins And Extending Schema For Edirectory On A Linux Platform

    Figure 9-21 Lights-Out Management Device Rights Tab Table 9-2 lists the available management device rights. Table 9-2 Management Device Rights Option Description Login This option controls whether users can log in to the associated devices and execute status or read-only commands (view event logs and console logs, check system status, power status, and so on) but not execute any commands that would alter the state of iLO 2 or the system.
  • Page 202: Installing Snap-Ins

    To ensure you have the correct version of JRE installed on your system, follow these steps: To determine the Java version, execute the following command: # java -version The Java version installed on your system is displayed. If Java is not installed on your system, execute the following command: # rpm iv j2re-1_4_2_04-linux-i586.rpm NOTE:...
  • Page 203: Verifying Snap-In Installation And Schema Extension

    Verifying Snap-In Installation and Schema Extension To verify the installation of snap-ins and schema extension, follow these steps: Run ConsoleOne and log on to the tree. Verify the new classes by opening the Schema Manager from the Tools list. All the classes related to the HP directory services must be present in the classes list. The classes are hpqRole, hpqTarget, hpqPolicy, and hpqLOMv100.
  • Page 204: User Login Using Directory Services

    User Search Context 1: Current -> o=mp Enter new value, or Q to Quit: <CR> -> Current User Search Context 1 has been retained User Search Context 2: Current -> o=demo Enter new value, or Q to Quit: <CR> -> Current User Search Context 2 has been retained User Search Context 3: Current ->...
  • Page 205: Certificate Services

    Certificate Services The following sections provide instructions for installing Certificate Services, verifying directory services, and configuring automatic certificate requests. Installing Certificate Services To install Certificate Services, follow these steps: Select Start>Settings>Control Panel. Double-click Add/Remove Programs. Click Add/Remove Windows Components to start the Windows Components wizard. Select Certificate Services and click Next.
  • Page 206: Using Existing Groups

    In general, you can use the HP provided snap-ins to create objects. It is useful to give the iLO 2 device objects meaningful names, such as the device's network address, DNS name, host server name, or serial number. Directory-enabled remote management enables you to: •...
  • Page 207: Creating Roles That Follow Organizational Structure

    Figure 9-22 shows one way that an administrative user gains admin role right. The admin user’s initial login right is granted through the regular user role. After the initial login, more advanced rights are assigned to the admin user through the admin role such as server reset and remote console.
  • Page 208: Ip Address Range Restrictions

    Role-based time restrictions can only be enforced if the time is set on the iLO 2 device. The time is normally set when the host is booted and is maintained by running the agents in the host operating system, which enables iLO 2 device to compensate for leap years and minimize clock drift with respect to the host.
  • Page 209: Enforcing User Time Restrictions

    Figure 9-24 User and Role Access Restrictions Enforcing User Time Restrictions You can place a time restriction on directory user accounts. Time restrictions limit the ability of the user to log in (authenticate) to the directory. Typically, time restrictions are enforced using the time on the directory server, but if the directory server is located in a different time zones or a replica in a different time zone is accessed, time zone information from the managed object can be used to adjust for relative time.
  • Page 210: User Address Restrictions

    User Address Restrictions You can place network address restrictions on a directory user account, and the directory server enforces these restrictions. See the directory service documentation for information about the enforcement of address restrictions on LDAP clients, such as a user logging in to an iLO 2 device. Network address restrictions placed on the user in the directory may not be enforced in the expected manner if the directory user logs in through a proxy server.
  • Page 211: Directory Services Schema (Ldap)

    Figure 9-27 Restricting the Reset Role Directory Services Schema (LDAP) A directory schema specifies the types of objects that a directory can have and the mandatory and optional attributes of each object type. The following sections describe both the HP management core, and the LDAP object identifier classes and attributes that are specific to iLO HP Management Core LDAP Object Identifier Classes and Attributes Object identifiers (OIDs) are unique numbers that are used by LDAP to identify object class,...
  • Page 212: Core Class Definitions

    Table 9-4 Core Attributes (continued) Attribute Name Assigned OID hpqRoleIPRestrictionDefault 1.3.6.1.4.1.232.1001.1.1.2.4 hpqRoleIPRestrictions 1.3.6.1.4.1.232.1001.1.1.2.5 hpqRoleTimeRestriction 1.3.6.1.4.1.232.1001.1.1.2.6 Core Class Definitions Table 9-5, Table 9-6, and Table 9-7 define the HP management core classes. hpqTarget Table 9-5 hpqTarget 1.3.6.1.4.1.232.1001.1.1.1.1 Description This class defines target objects, providing the basis for HP products using directory-enabled management.
  • Page 213: Hpqpolicydn

    hpqPolicyDN Table 9-8 hpqPolicyDN 1.3.6.1.4.1.232.1001.1.1.2.1 Description This attribute provides the Distinguished Name of the policy that controls the general configuration of this target. Syntax Distinguished Name—1.3.6.1.4.1.1466.115.121.1.12 Options Single Valued Remarks None hpqRoleMembership Table 9-9 hpqRoleMembership 1.3.6.1.4.1.232.1001.1.1.2.2 Description This attribute provides a list of hpqTarget objects to which this object belongs. Syntax Distinguished Name—1.3.6.1.4.1.1466.115.121.1.12 Options...
  • Page 214: Hpqroletimerestriction

    Table 9-12 hpqRoleIPRestrictions (continued) 1.3.6.1.4.1.232.1001.1.1.2.5 Options Multi Valued Remarks This attribute is only used on role objects. The IP restrictions are satisfied when the address matches and general access is denied, and unsatisfied when the address matches and general access is allowed. Values are an identifier byte followed by a type-specific number of bytes specifying a network address.
  • Page 215: Ilo 2 Class Definitions

    Table 9-15 iLO 2 Attributes (continued) Class Name Assigned OID hpqLOMRightLocalUserAdmin 1.3.6.1.4.1.232.1001.1.8.2.5 hpqLOMRightConfigureSettings 1.3.6.1.4.1.232.1001.1.8.2.6 iLO 2 Class Definitions hpqLOMv100 Table 9-16 hpqLOMv100 1.3.6.1.4.1.232.1001.1.8.1.1 Description This class defines the rights and settings used with HP iLO 2 products. Class Type Auxiliary SuperClasses None Attributes...
  • Page 216: Hpqlomrightremoteconsole

    hpqLOMRightRemoteConsole Table 9-19 hpqLOMRightRemoteConsole 1.3.6.1.4.1.232.1001.1.8.2.3 Description Virtual media right for HP iLO 2 products. Syntax Boolean-1.3.6.1.4.1.1466.115.121.1.7 Options Single valued Remarks This attribute is only used on role objects. If this attribute is TRUE, members of the role are granted the right. hpqLOMRightServerReset Table 9-20 hpqLOMRightServerReset 1.3.6.1.4.1.232.1001.1.8.2.4...
  • Page 217: Glossary

    Glossary Address In networking, a unique code that identifies a node in the network. Names such as host1.hp.com are translated to dott-quad addresses such as 168.124.3.4 by the Domain Name Service (DNS). Address Path An address path is one in which each term has the appropriate intervening addressing association.
  • Page 218 The CLP consists of a set of command verbs that manipulate command targets representing Managed Elements (ME) that are within the scope of access by a MAP. Each CLP interaction consists of a command line transmitted to the CLP service and a subsequent response transmitted back to the client.
  • Page 219 Domain A grouping of hosts that is identified by a name. The hosts usually belong to the same Internet Protocol (IP) network address. Domain Name The unique name assigned to a system or group of systems on the Internet. The host names of all the systems in the group have the same domain name suffix.
  • Page 220 In-band System A server management capability that is enabled only when the operating system is initialized Management and the server is functioning properly. Integrated The iLO functionality offers remote server management through an independent management Lights-Out (iLO) processor (MP). iLO was introduced into most HP Integrity entry class servers in late 2004. Prior to that, embedded remote server management was referred to as MP functionality.
  • Page 221: Onboard Administrator

    Management The component that provides a LAN interface to the system console and system management. Processor (MP) Prior to iLO 2, embedded remote server management was referred to as MP functionality. All legacy MP functionality has been carried forward and combined with new features, all under the heading of "iLO 2".
  • Page 222 Proxy A mechanism whereby one system acts on behalf of another system in responding to protocol requests. Rackmount Electronic equipment and devices designed to fit industry-standard-sized computer racks and cabinets (19" wide). Rackmount devices are also standard 1.75 inch units. Remote System A system other than the one on which the user is working.
  • Page 223 Target Address This entity is responsible for discovering and enumerating the managed elements within the Scheme local domain, for maintaining the addressing and naming structure of the local domain, and Resolution coordinating this information with the operation invocation engine. Service Telnet A telecommunications protocol providing specifications for emulating a remote computer terminal so that one can access a distant computer and function online using an interface that...
  • Page 225: Index

    Index DC, 96 DF, 96 access options, 104 DI, 96 access rights DNS, 96 console access, 22 FW, 97 local user administration access, 22 HE, 97 MP configuration access, 23 ID, 97 power control access, 22 IT, 98 virtual media access, 23 LC, 98 accounts LDAP, 99, 203...
  • Page 226 configuring the LAN, 41 DMTF, 152, 222 configuring using the command menu, 99 DNS, 74 configuring with the LC command, 73 command, 96 DHCP, security risk when enabled, 42 configuring using the command menu, 74, 96 DI command, 96 configuring using the web GUI, 147 diagnostics, 108 directory objects, configuring for Active Directory, 186 directory services...
  • Page 227 inactivity timeout configuration, 120 license, displaying the current status, 101 inactivity timers, modifying, 98 licensing, 27 installing Lights-Out Advanced KVM card, 27, 57 certificates, 205 cards supported per partition, 62 directory services, 180 core I/O card configurations, 66 Integrated Lights-Out Management Processor, 21 features, 57 integrated remote console (IRC) graphics functionality, 62...
  • Page 228 creating multiple restrictions, 210 creating to follow organizational structure, 207 OA IP address as default gateway address, 49, 150 DNS-based restrictions, 208 Object Identifiers (see HP management object identifiers) enforcing, 208 OIDs (see HP management object identifiers) IP address restrictions, 208 Onboard Administrator, 149 restricting, 207 accessing iLO 2, 45...
  • Page 229 using the ID command, 97 SO command, 105 web GUI specific object identifiers, 214–216 active users, 111 attribute definitions, 215–216 DNS settings, configuring, 147 attributes, 215 editing LDAP parameters, 144 classes, 214 group accounts, 140 SPU host name, 97 help, 150 SS command, 105 interacting with, 69 standard features, 22...

Table of Contents