HP Virtual Connect Manager Command Line Interface for c-Class BladeSystem Version 4.01 User Guide Abstract This document contains user information for the HP Virtual Connect Manager version 4.01 CLI. This document is for the person who installs, administers, and troubleshoots servers and storage systems. HP assumes you are qualified in the servicing of computer equipment and trained in recognizing hazards in products with hazardous energy levels.
© Copyright 2013 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice. The only warranties for HP products and services are set forth in the express warranty statements accompanying such products and services. Nothing herein should be construed as constituting an additional warranty. HP shall not be liable for technical or editorial errors or omissions contained herein. Confidential computer software.
Contents Introduction .................................................................................................................................. 6 What's new ................................................................................................................................................. 6 Changes from VC 3.70 to VC 4.01 ..................................................................................................... 7 Virtual Connect overview .....................................
local-users ....................................................................................................................................... 59 log-target ......................................................................................................................................... 60 loop-protect ..................................................................................................................................... 62 mac-cache .................................................
Scriptable output format .................................................................................................................. 136 Statistics descriptions ................................................................................................................................ 138 Ethernet modules ............................................................................................................................ 138 Fibre Channel modules ...........................................
Introduction What's new The command line interface user guide contains the following changes for VC 4.01: • Modified the network command to include the LacpTimer property. • Modified the uplinkset command to include the LacpTimer property. • Modified the enet-connection command to include the McastFilter and McastFilterSet properties. • The VCMCLI now displays the LLDP system name instead of the MAC address when displaying uplink port information in the show uplinkport command.
o o o o o o o o o o o set role show role add user set user show user add radius-group set radius-group show radius-group add ldap-group show ldap-group set ldap-group • VCMCLI now supports auto-completion using the Tab key.
Command Changes add enet-connection set enet-connection Modified this command >add enet-connection to include the McastFilter and [Network= McastFilterSet ] properties. add mcast-filter remove mcast-filter set mcast-filter show mcast-filter The new managed element monitors and manages multicast group membership for hosts subscribing to IGMP multicast traffic. The new managed element manages Multicast Filter rules for a Multicast Filter.
Command Changes Virtual Connect 3.70 Virtual Connect 4.01 set qos-map show qos-map The new managed element manages the traffic classification maps of the active QoS configuration. The new managed element manages the session timeout value. Modified these commands to include the preferred and maximum speed settings Not supported All of these commands are supported. Not supported All of these commands are supported.
Command Changes Virtual Connect 3.70 Virtual Connect 4.
• • o HP Virtual Connect Flex-10 10Gb Ethernet Module for BladeSystem c-Class o HP Virtual Connect FlexFabric 10Gb/24-port Module for BladeSystem c-Class, which provides the capability to configure Ethernet and FC/FCoE or iSCSI connections o HP Virtual Connect Flex-10/10D Module for BladeSystem c-Class VC-FC modules o HP 4Gb Virtual Connect Fibre Channel Module for c-Class BladeSystem (VC v4.01 is the last release that will support this module.
Each version of VC is tested and supported with one or more SPPs. For a list of supported SPPs that must be installed, see the VC release notes. Using multiple enclosures Multiple enclosure support enables up to four c7000 enclosures to be managed within a single Virtual Connect domain for a total of 128 servers, if double-dense support is enabled while using the Domain Setup Wizard. There are 16 half-height or 8 full-height server bays in a c7000 enclosure.
Item Description options Attributes used to customize or control command execution behavior such as output format, quiet-mode, and others properties One or more name and value pairs that are accessories to the command operation, mainly for set and add operations Example: ->add user mark password=asdf89g fullname="Mark Smith" enabled=true In the example, add is the subcommand, user is the managed element, mark is a required parameter for the operation, password is a required property, and fullname and
Example 2: Sample commands using command batching add profile Profile1;add network Network1;add uplinkset UplinkSet1 Supporting comments and blank lines in CLI scripts The CLI supports command scripts that contain blank lines and comments. Support for comments and blank lines enables you to maintain descriptive notes within the configuration script. The following sample script illustrates a CLI script that contains this type of formatting. All comment lines must begin with "#".
add fcoe-connection MyNewProfile Fabric=SAN_5 # Reset the active QoS configuration type to the factory default settings but does not change the saved configuration types reset qos -active # Set the domain default LACP timer to the short setting (one second) set lacp-timer default=Short # Add a Multicast Filter "filter1" to Filterset "mfs1" add mfs-filter FilterSet=mfs1 McastFilter =filter1 # Set the global option to enable the loop protection and pause flood protection set port-protect networkLoop=Enabled P
CLI command execution modes The Virtual Connect Manager CLI provides two different methods for executing commands: interactive shell mode and non-interactive mode. Interactive Shell Mode This mode is used to invoke CLI command operations with the dedicated management shell. The shell is provided after you log in with valid credentials, and only accepts known VCM CLI commands as input. Press the Tab key to auto complete subcommands and managed-elements.
3. Enter a valid user name. 4. Enter a valid password. The CLI command prompt appears. 5. Enter commands for the Virtual Connect Manager. 6. To terminate the remote access SSH session, close the communication software or enter exit at the CLI command prompt. To access the VCM CLI remotely through the Onboard Administrator CLI, run the connect interconnect command from the Onboard Administrator CLI.
Command line Subcommands Command Description add Add a new object to the domain or to another object assign Assign a server profile to a device bay copy Copy a configuration from one server profile to another server profile delete Delete the domain configuration exit Exit the Virtual Connect Manager command-line shell help Display context-sensitive help for a command or object load Transfer a file from a remote location to the domain import Import an enclosure into the domain poweroff Pow
Managed element Description enet-connection (on page 30) Manage Ethernet network connections enet-vlan (on page 33) Manage Ethernet VLAN connections external-manager (on page 34) Manage external manager settings and information fabric (on page 36) Manage Fibre Channel SAN fabrics fcoe-connection (on page 42) Manage FCoE SAN fabric connections fc-connection (on page 40) Manage Fibre Channel SAN fabric connections firmware (on page 46) Manage interconnect module firmware igmp-group (on page 47
Managed element Description role (on page 94) Manage user authentication order by access role (privilege) serverid (on page 98) Manage virtual server ID configuration settings server-port-map (on page 99) Manage shared server downlink port mapping configuration server (on page 95) Manage physical HP BladeSystem server blades server-port (on page 98) Display all physical server ports server-port-map-range (on page 101) Manage ranges of shared server downlink port mapping configurations session
Item Description Syntax show all [*] Examples ->show all Displays all configuration objects (summary view) ->show all * Displays all configuration objects (detailed view) version Display CLI version information. Supported actions: help, show Item Description show version Display CLI version information. show version Syntax ->show version Displays CLI version and copyright information Example activity Display activity events being performed by VCM and the step-wise progress of those events.
Item Description add banner Add banner text to the login screen. You can access VCM through ssh or the OA. After banner text is added, the banner is displayed before the user credential prompt when VCM is accessed. add banner text=[””|’’] Syntax Properties text (required) Examples The text to display on the login in screen. Multi-line banner text can be entered through multiple add banner commands. New lines are appended to existing text. The banner text limit is 1500 bytes.
Item Description show config Generate a configuration script from the running domain. Syntax show config Example ->show config Displays the configuration script for the running domain configbackup Manage the domain configuration file. Supported actions: help, restore, save CAUTION: Do not restore a configuration backup file by using a file from another domain and including the property to ignore the enclosure serial number.
Item Description Restores a configuration backup file from a remote TFTP server ->restore configbackup address=ftp://user:password@192.168.10.12/ Restores a configuration backup file from a remote FTP server ->restore configbackup address=ftp://user:password@192.168.10.12/ ignoreenclosureid=true Restores a configuration backup file from a remote FTP server and ignores the serial number1 ->restore configbackup address=ftp://user:password@192.168.10.
Item Description ->save configbackup address=ftp://user:password@192.168.10.12/ encryptionkey=secret Saves a configuration backup file to a remote FTP server with an encryption key ->save configbackup -maskEncryptKey address=ftp://user:password@192.168.10.12/ Saves a configuration backup file to a remote FTP server with a masked encryption key connection-map Display server-to-target connectivity information for servers with assigned profiles containing DirectAttach fabrics.
Item Description ->show devicebay enc0:2 Displays detailed information for device bay 2 of the local enclosure ->show devicebay enc1:4 Displays detailed information for device bay 4 of a remote enclosure ->show devicebay enc0:5 Displays detailed information for a multi-blade server in device bays 5-8 of the primary enclosure. domain Manage general Virtual Connect domain settings and information.
Item Description if DomainIP is enabled) must be in the format xxx.xxx.xxx.xxx, where x is a number between 0 and 9, for example, 192.168.0.10. SubnetMask (Required A valid subnet mask for the domain IP address configuration. The subnet mask must if IP address be in the format xxx.xxx.xxx.xxx, where x is a number between 0 and 9, for specified) example, 255.255.255.0. Gateway (Required if A valid gateway address for the domain IP address configuration.
Item Description ->set domain MacType=User-Defined MacStart=00-17-A4-77-00-00 MacEnd=00-17-A4-77-00-FF Sets the MAC address source to a custom, user-defined address range ->set domain WwnType=VC-Defined WwnPool=5 Sets the WWN address source to VC-Defined with a pre-defined range ->set domain WwnType=Factory-Default Sets the WWN address source to use factory default WWN addresses ->set domain WwnType=User-Defined WwnStart=50:06:0B:00:00:C2:62:00 WwnEnd=50:06:0B:00:00:C2:62:FF Sets the WWN address source to
Item Description enclosures that are not imported) import. The user must have full administrative rights to all enclosure elements, such as device bays, I/O bays, and OAs). Password (Required) A valid OA user password for importing the enclosure. If no password is specified, the system interactively prompts you for a password during the import operation.
Item Description Displays detailed information for all enclosures ->show enclosure enc0 Displays detailed information for a specific enclosure enet-connection Manage Ethernet network connections. Supported actions: add, help, remove, set, show Item Description add enet-connection Add a new Ethernet network connection to an existing server profile. The maximum number of Ethernet connections that can be added to a server profile is 128.
Item User-Defined) iScsiMAC (required if AddressType is User-Defined) SpeedType (optional) Speed (required if the SpeedType is Custom) Examples Description The user-defined iSCSI MAC address to use for the connection. This property is required if the AddressType specified is "User-Defined". The requested operational speed for the server port. Valid values include "Auto", "Preferred", "Custom", and "Disabled". The default value is "Preferred".
Item Description remove enet-connection Syntax Remove the last Ethernet network connection from an existing server profile. remove enet-connection Parameter ProfileName (required) The name of the profile from which the Ethernet connection is removed Example ->remove enet-connection MyProfile Removes an Ethernet network connection from a profile Item Description set enet-connection Modify an Ethernet connection of a server profile.
Item Description ->set enet-connection RedProfile 1 Network="" Sets a network connection to "Unassigned" ->set enet-connection GreenProfile 3 PXE=disabled Disables PXE on an Ethernet connection ->set enet-connection MyProfile 1 SpeedType=Preferred Modifies the Ethernet network connection to set the speed to "Preferred" ->set enet-connection MyProfile 1 SpeedType=Custom Speed=2000 Modifies the Ethernet network connection to set the speed to 2Gb ->set enet-connection RedProfile 1 McastFilter="MyFilter" Sets
Item Description server Ethernet connections, and VLAN ID mappings can be modified to ensure uniqueness. PrefSpeedType (optional) The default connection speed for any Ethernet connection using multiple networks. Valid values are "Auto" and "Custom". "Custom" enables you to configure the preferred speed. The default value is "Auto". PrefSpeed (required if The default connection speed for any Ethernet connection using multiple PrefSpeedType is networks.
Item Syntax Option quiet Properties UserName (optional) MacType (optional) MacStart (required if the MacType is User-Defined) MacEnd (required if the MacType is User-Defined) WwnType (optional) WwnStart (required if the WwnType is User-Defined) WwnEnd (required if the WwnType is User-Defined) ServerIdType (optional) Description command.
Item Description Releases only the profile control ->remove external-manager username=A1010345 macType=Factory-Default wwnType=Factory-Default serverIdType=Factory-Default Removes the external manager and releases the profile control Item Description set external-manager Enable or disable the control of an existing external manager over the Virtual Connect domain.
Item Description Properties Bay (required) The specific interconnect bay number with which the fabric is associated Ports (required) A list of one or more logical FC ports to be added to the fabric. Each port is specified in the format ",,...", where "port" is the interconnect module port number to be added to the fabric, for example "1, 2, 3, 4" (affects all modules within a bay group).
Item Description ->add fabric MyFabric4 Bay=3 Ports=1,2 Adds a new fabric with two logical ports ->add fabric MyFabric4 Bay=3 Ports=1,2 PrefSpeedType=Custom PrefSpeed=4000 MaxSpeedType=Custom MaxSpeed=8000 Adds a new fabric with a preferred connection speed of 4Gb and maximum connection speed of 8Gb Item remove fabric Description Remove an existing fabric from the domain. Syntax remove fabric Parameter Name (required) The name of a specific fabric. Use "*" to remove all existing fabrics.
Item Description Ports (optional) A list of one or more logical FC ports to be added to the fabric. Each port is specified in the format ",,...", where port is the interconnect module port to be modified in the fabric (affects all modules within a bay group). For HP VC FlexFabric 10Gb/24-port Modules, port numbers 1, 2, 3, and 4 correspond to ports X1, X2, X3, and X4, respectively. PrefSpeedType (optional) Preferred connection speed for any FCoE connection attached to this fabric.
fc-connection Manage Fibre Channel SAN connections. Supported actions: add, help, remove, set, show Item Description add fc-connection Add a new FC SAN connection to an existing server profile. For more information, see "General requirements for adding FC or FCoE connections (on page 174).
Item Description remove fc-connection Remove the last FC connection from an existing server profile. Syntax remove fc-connection Parameter ProfileName (required) The name of an existing profile from which the last FC connection is being removed Example ->remove fc-connection MyProfile Removes an FC connection from a profile Item Description set fc-connection Modify an existing FC SAN connection.
Item Description ->set fc-connection BlueProfile 1 Fabric=SAN_7 Changes the FC SAN fabric of an FC SAN connection ->set fc-connection BlueProfile 1 Speed=4Gb Changes the port speed of an FC SAN connection ->set fc-connection BlueProfile 1 BootPriority=Primary BootPort=50:06:0B:00:00:C2:62:00 BootLun=5 Changes the SAN boot priority and sets additional boot parameters Item Description show fc-connection Display the FC SAN connections associated with the server profiles.
Item Description “Unassigned” and associated with a specific bay. FcoeNetwork (optional) The name of an existing FCoE network to associate with the connection. You cannot specify both Fabric and FcoeNetwork properties. If neither property is specified, then the connection is marked as "Unassigned", but is associated with a specific bay. SpeedType (optional) The requested operation speed for the server port. Valid values are "1Gb", "2Gb", "4Gb", "8Gb", "Auto", "Custom", "Preferred", and "Disabled".
Item Description NodeWWN=50:06:0B:00:00:C2:62:01 Adds a new FCoE connection and provides user-defined WWN addresses ->add fcoe-connection MyNewProfile MACAddressType=Factory-Default Adds a new FCoE connection and uses factory-default MAC addresses ->add fcoe-connection MyNewProfile MACAddressType=User-Defined EthernetMAC=00-17-A4-77-00-00 Adds a new FCoE connection and provides a user-defined MAC address ->add fcoe-connection MyProfile Fabric=MyFabric SpeedType=Preferred Adds a new FCoE connection and sets
Item Description CustomSpeed (required if the SpeedType is "Custom") The user-defined speed for the server port. Valid values include 100Mb to 10Gb configured in 100Mb increments. BootPriority (optional) Controls whether the FCoE HBA port is enabled for SAN boot and affects the BIOS boot order. Valid values include "BIOS", "Primary", "Secondary", and "Disabled".
Item Description ->show fcoe-connection Profile1:1 Displays a specific FCoE connection of a profile named Profile1 firmware Display the Virtual Connect interconnect module firmware version. Support actions: help, show show firmware Syntax Examples Display the firmware information for all interconnect modules in the domain.
Item Description show igmp Display Ethernet IGMP Snooping settings. show igmp Syntax Example ->show igmp Displays IGMP Snooping settings igmp-group Display interconnect module IGMP Group table information. Supported actions: help, show Item Description show igmp-group Syntax Display interconnect module IGMP Group table information for the specified module. show igmp-group Parameter ModuleID (required) The ID of the module for which to display the IGMP Group table.
Item Description show interconnect Display all interconnect modules in the domain. show interconnect [|*] Syntax Parameter ModuleID (optional) Examples The ID of the interconnect module. Use “*” to display a detailed view of all modules in the VC domain. If not specified, a summary output of all modules appears.
iscsi-boot-param Manage iSCSI boot parameters within a domain. Supported actions: help, remove, set, show Item Description remove iscsi-boot-param Remove all iSCSI boot parameters configured on the specified iSCSI connection. remove iscsi-boot-param Syntax Parameter ConnectionID (required) Example The ID of an existing iSCSI connection. The ID format is . To retrieve the port number of the iSCSI connection, use the show profile command.
Item Description InitiatorName (required if ISCSIBootParamDHCP is "Disabled") The name used for the iSCSI initiator on the booting system. The initiator name length can be a maximum of 223 characters. If the initiator name string contains non-alphanumeric characters, it must be enclosed in quotation marks. The IPv4 address used by the iSCSI initiator. This value is in dotted decimal format.
Item Description ISCSIBootParamDHCP (optional) Enables the iSCSI option ROM to retrieve the iSCSI boot parameters from DHCP or through static configuration. Valid values are "Enabled' and "Disabled". The default value is "Disabled", which enables static configuration. NetworkParamDHCP (optional) Enables the iSCSI option ROM to retrieve the TCP/IP parameters from DHCP or through static configuration. Valid values are "Enabled" and "Disabled'.
iscsi-connection Manage iSCSI connections. Supported actions: add, help, remove, set, show Item Description add iscsi-connection Add a new iSCSI connection to an existing server VC profile. This command can be executed only if the current VC domain is managing one or more Flex-10 modules.
Item Description ->add iscsi-connection MyNewProfile AddressType=User-Defined iScsiMAC=00-17-A4-77-00-00 Adds a new iSCSI network connection and provides a user-defined MAC address ->add iscsi-connection MyProfile Network=MyNetwork SpeedType=Preferred Adds a new iSCSI network connection and sets the speed to Preferred ->add iscsi-connection MyProfile Network=MyNetwork SpeedType=Custom Speed=2000 Adds a new iSCSI network connection and sets the speed to 2Gb Item Description remove iscsi-connection Remov
Item Description ->set iscsi-connection MyNewProfile:1 Network=SomeNetwork Changes the network to a different one ->set iscsi-connection MyNewProfile:1 Network="" Unassigns the network from the connection ->set iscsi-connection MyProfile:1 Network=MyNetwork SpeedType=Preferred Modifies the speed to Preferred ->set iscsi-connection MyProfile:1 SpeedType=Custom Speed=2000 Modifies the iSCSI connection and sets the speed to 2Gb Item Description show iscsi-connection Display the iSCSI connections associate
Item Description show lacp-timer Display the domain default LACP timer setting. show lacp-timer Syntax Example ->show lacp-timer Displays the current domain default LACP timer ldap Manage Virtual Connect directory server authentication settings. Supported actions: help, set, show Item Description set ldap Modify and test the Virtual Connect LDAP directory server authentication settings.
Item Description Enables directory services authentication for users Item Description show ldap Display the Virtual Connect LDAP authentication settings. show ldap Syntax Example ->show ldap Displays LDAP information ldap-certificate View and upload LDAP certificates from a remote FTP server. Supported actions: help, load, remove, show Item Description load ldap-certificate Download an LDAP certificate from a remote FTP server and apply it to the VC domain.
Item Description ->remove ldap-certificate B4:02:C0:29:B5:E5:B4:81 Removes an existing LDAP certificate by serial number ->remove ldap-certificate * Removes all LDAP certificates Item Description show ldap-certificate Display LDAP certificate information. show ldap-certificate [ | *] Syntax Parameter SerialNumber (optional) Examples The serial number of an existing LDAP certificate in a colon format. Use "*" to display detailed output of all the LDAP certificates in the VC domain.
Item Description Syntax remove ldap-group Parameter GroupName (required) Examples The name of an existing directory group to be removed. Use "*" to remove all LDAP groups. ->remove ldap-group MyGroup Removes a specified directory group ->remove ldap-group * Removes all directory groups Item Description set ldap-group Syntax Modify the properties of an existing directory group.
Item Description set link-dist-interval Set the FC login re-distribution interval for uplinks that are part of a fabric configured for Automatic login re-distribution. set link-dist-interval Interval=<1-1800> Syntax Property Interval (required) FC login re-distribution interval for uplinks (in seconds). Valid values include positive integers in the range 1 to 1800. The default is 30 seconds.
Item Description Syntax set local-users [Enabled=] [PrimaryRemoteAuthenticationMethod=] Properties Enabled (optional) Enables or disables local user authentication for the VC domain. Valid values are "true" and "false". The default value is "true". Disabling or enabling local user authentication requires you to be logged in as an LDAP, RADIUS or TACACS user with domain privileges. This property cannot be modified if you are logged in as a local user.
Item Description Security (optional) Secure transmission of the log messages. Valid values include "None" and "STunnel". The default value is "None", and no encryption is used during transmission. The "STunnel" option can be used only if the transport protocol is set to "TCP". Format (optional) The timestamp format for the log messages. Valid values include "RFC3164" (Nov 26 13:15:55) and "ISO8601" (1997-07-16T19:20:30+01:00). The default value is "RFC3164".
Item Description State (optional) Enables or disables the remote log destination. Valid values include "Enabled" and "Disabled". The default value is "Disabled". Examples ->set log-target 1 Severity=Error Transport=TCP Security=STunnel Modifies log-target index number 1 ->set log-target 1 Destination=192.168.3.1 Modifies log-target at index 1 to use a new IP address Item Description show log-target Display the remote log destination settings.
Item Description Option quiet (optional) Suppresses user confirmation prompts Properties Enabled (required) Example Enables or disables network loop detection and protection. Valid values include "true" and "false". ->set loop-protect Enabled=true Enables loop protection Item Description show loop-protect Display the loop protection configuration and all Ethernet ports currently disabled due to protection enforcement.
Supported actions: help, add, remove Item Description add mfs-filter Add a Multicast Filter to a Multicast Filterset. add mfs-filter FilterSet=< McastFilterSetName > McastFilter= [,,...] Syntax Properties FilterSet (required) McastFilter (required) Examples The name of an existing Multicast Filterset in the domain The Multicast Filter(s) to be added to the specified Multicast Filterset. This property is a list of existing Multicast Filter names separated by commas.
Item Description manage large numbers of filters. A color can be assigned in the CLI, but is only used in the GUI. Allowed colors are red, green, blue, purple, or orange.
Item Description show mcast-filter Display information about the Multicast Filter. Syntax show mcast-filter | * Parameter McastFilterName (optional) Examples Name of a Multicast Filter existing in the VC domain. "*" displays a detailed view of all the Multicast filters. The default behavior displays a summary output of all Multicast filters.
Item Description Network=224.0.0.1/32 Removes a Multicast Filter rule from an existing filter ->remove mcast-filter-rule McastFilter=MyFilter Network=* Removes all Multicast Filter rules from a Multicast Filter mcast-filter-set Manage Multicast Filtersets. Supported actions: add, help, remove, set, show Item Description add mcast-filter-set Syntax Create a Mulitcast Filterset. add mcast-filter-set [Labels=[,...
Item Description set mcast-filter-set Syntax Modify the Multicast Filterset. set mcast-filter-set [Name=] [Labels=[,...] [Color=] Parameter McastFilterSetName (required) The unique name of the Multicast Filterset to modify Properties Name (optional) The new name of the Multicast Filterset Labels (optional) Labels assigned to this Multicast Filterset. Labels are used in the GUI to help manage large numbers of filter sets.
Item Description add nag-network Add one or more networks to a network access group. Any network access groups previously configured for the network remain. add nag-network Nag= Network=[,,...
Item Examples Description ->show nag-network Displays a summary of all network to network access group associations in the domain ->show nag-network * Displays detailed information for all network to network access group associations in the domain ->show nag-network DatabaseNetGroup:Net1 Displays detailed information about the association between a specified network access group and a specified network name-server Display a snapshot of all hosts and direct attached storage devices for the specified FlexFa
Item Description [LacpTimer=] [Labels=[,…] [Color=] Parameter NetworkName (required) The unique name of the new network to create. Valid characters include alphanumeric, "_", and ".". The maximum length of the name is 64 characters. Options Quiet Suppresses user confirmation prompts during network creation and modification. This option is used mainly in automated scripting scenarios. fcoe Specifies an FCoE network.
Item Description with a Shared Uplink Set, or the ConnectionMode property value is "Auto". The default value is "Short". Labels (optional) Labels assigned to this network. Labels are used in the GUI to help manage large numbers of networks. Labels can be assigned in the CLI, but are only used in the GUI. A maximum of 16 labels can be assigned. Color (optional) Examples Color assigned to this network. Color is used in the GUI to help manage large numbers of networks.
Item Description ->remove network * Removes all networks Item Description set network Modify an existing Ethernet or FCoE network. set network [-quiet] [State=] [SmartLink=][NativeVLAN=] [Private=] [Nags=[,,...
Item Description (Required if PrefSpeedType is "Custom") MaxSpeedType (Optional) values range from 100Mb to 10Gb in 100Mb increments. MaxSpeed (required if MaxSpeedType is "Custom") LacpTimer (optional) The maximum connection speed for any Ethernet connection attached to this network. Valid values range from 100Mb to 10Gb in 100Mb increments. Nags (optional) The Network Access Group(s) the network belongs to.
Item Description ->set network Network1 Labels="label1, label2" Adds labels to a network ->set network Network1 Labels= Removes all labels from a network ->set network Network1 Color=red Sets the network color to red Item Description show network Display all Ethernet networks in the domain. Configured values for ConnectionMode and VLanTunnel display for UNSHARED networks only. Configured values for NativeVLAN, UplinkSet, and VLanID display for SHARED networks only.
Item Parameter Name (required) Examples Description The name of an existing network access group in the domain. Use "*" to remove all removable network access groups. ->remove network-access-group DatabaseNetGroup Removes a specified network access group ->remove network-access-group * Removes all removable network access groups Item Description set networkaccess-group Modify an existing network access group.
Item Description in 100Mb steps>] [MaxSpeedType=] [MaxSpeed=<100Mb-10Gb in 100Mb steps>] [Nags=[,...] [SmartLink=] [Labels=[,...] [Color=] Options quiet This option suppresses user confirmation prompts. This option is useful when scripting operations.
Item Description ->add network-range UplinkSet=Alpha NamePrefix=Network NameSuffix=_A VLANIDs=1-100 Creates 100 networks in an existing uplink set ->add network-range UplinkSet=Alpha NamePrefix=Network NameSuffix=_A VLANIDs=101-110,115-119,130,4094,700-703 Creates non-contiguous networks in an existing uplink set Item Description remove network-range Remove multiple networks from a shared uplink set.
Item Description The connection speed for any Ethernet connection attached to these PrefSpeed (required if PrefSpeedType is "Custom") networks. Valid values range from 100Mb to 10Gb in 100Mb increments. MaxSpeedType (Optional) The maximum connection speed for any Ethernet connection attached to these networks. Valid values include "Unrestricted" and "Custom". "Custom" enables you to configure the preferred speed. The default value is "Unrestricted".
Item Description can be configured as the port speed. Speed restrictions apply. Duplex (optional) The duplex mode of the network analyzer port. Valid values include "Auto", "Half", and "Full". The default value is "Auto". MonitorPort (optional) The server port to be monitored. The format of the monitored port is ::. If the enclosure ID is not specified, the default enclosure is the local enclosure.
Item Description Speed (optional) The port speed for the network analyzer port. Valid values include "Auto", "10Mb", "100Mb", "1Gb", "10Gb", and "Disabled". The default value is "Auto". If there is no connector present on the analyzer port, only "Auto" and "Disabled" can be configured as the port speed. Speed restrictions apply. Duplex (optional) The port duplex mode of the network analyzer port. Valid values include "Auto", "Half", and "Full". The default value is "Auto".
Item Description set port-protect Modify the domain wide configuration for port protection against the following denial of service conditions: • • Syntax Option quiet (optional) Network loop protection for server downlink ports Pause flood protection for downlink physical ports set port-protect [-quiet] [networkLoop=] [pauseFlood=] Suppresses user confirmation prompts. This option is useful when scripting operations.
Item Description NoDefaultFcoeConn Do not add default FCoE SAN connections when creating the server profile. Properties Nag (optional) The network access group for the profile. The default is the domain Default network access group. SNType (optional) The source of the serial number assignment to be used during the profile creation. If not specified, the serial number is assigned according to the Virtual Connect default domain settings. Valid values include "Factory-Default" and "User-Defined".
Item Description defaults to the local enclosure. To assign a profile to a multi-blade server, must be the monarch bay. Option PowerOn Examples Powers on the server after the profile is assigned ->assign profile MyProfile1 enc0:1 Assigns a profile to device bay 1 of the primary enclosure ->assign profile MyProfile1 enc0:5 Assigns a profile to a multi-blade server in bays 5-8 of the primary enclosure Item Description copy profile Copy an existing profile configuration to another profile.
Item Description remove profile Syntax Remove one or more server profiles from the domain. remove profile Parameter ProfileName (required) The name of an existing profile in the VC domain. Use "*" to remove all existing profiles. Examples ->remove profile MyProfile Removes a server profile by name ->remove profile * Removes all server profiles Item Description save profile Save an EFI data object from an existing server profile.
Item Description network access group is not changed. Examples ->set profile MyProfile Name=MyNewProfileName Changes the name of a server profile ->set profile Profile1 EFIState=absent Removes EFI partition block information from a profile ->set profile Profile1 Nag=NetGroup1 Changes the profile's network access group to NetGroup1 Item Description show profile Syntax Display all server profiles that exist in the domain and a summary of the associated Ethernet, iSCSI, FC, and FCoE connections.
Item Options Active quiet Examples Description Resets the classes, maps, and classifiers of the active QoS configuration. The active QoS configuration is the configuration selected using the set qos command. This option cannot be used in conjunction with the Type parameter.
Item Description show qos Displays the quality of service configurations. show qos [ | * | -active] Syntax Parameter Type (optional) Option Active (optional) Examples The QoS configuration type. Valid values are "Passthrough", "CustomWithFCoE", and "CustomNoFCoE". If no Parameter is specified, a summary listing of all configuration types is displayed.
Item MaxShare (optional) EgressDOT1P (optional) Examples Description enabled classes, excluding the FCoE_Lossless class, is 100. When the share of an enabled class is modified, the share of the Best_Effort class is adjusted to maintain 100% among all enabled classes. An error is returned if the share modification causes the Best_Effort class to have no share. The Share and MaxShare properties of the real time class are set to the same value.
Item Description set qos-classifier Modify traffic classifier(s) for the active QoS configuration. The classifier is configured on uplink or downlink ports and is used for prioritizing the ingress traffic. The classification is supported for Ethernet and iSCSI traffic. There is no traffic classification for FCoE traffic.
Item Description DOT1P value range list> Parameter Type (required) Properties Class (required) Values (required) Examples The classifier type for the map. Valid values are "DOT1P" and "DSCP". The destination traffic class name. Values are mapped to the pre-defined classes. A map is active if the map is currently in use for traffic classification. All traffic classes in an active map must be enabled. A value in a map can be mapped to one class only.
Item Description set radius Modify and test the Virtual Connect RADIUS authentication settings.
radius-group Manage Virtual Connect RADIUS groups. Supported actions: add, help, remove, set, show Item Description add radius-group Add a RADIUS group. Syntax add radius-group [Description=] [Roles=] Parameters GroupName (required) The name of the RADIUS group being added. The name can consist of alphanumeric characters, hyphens (-), underscores (_) and periods (.). The maximum length of the name is 255 characters.
Item Description Roles (optional) A set of one or more privileges for the group. Valid values are any combination of "domain", "server", "network", and "storage". Separate multiple values with commas. Example ->set radius-group MyGroup Description="Test Group" Roles=domain,server,network Modifies a RADIUS group description and privileges Item Description show radius-group Display the existing RADIUS groups.
Item Description Sets the order for the network privilege to be TACACS+, followed by RADIUS ->set role server Order=ldap,radius,tacacs Sets the order for the server privilege to be LDAP, followed by RADIUS, followed by TACACS+ ->set role network operations=SupportFiles,PortMonitoring Sets the network role operation permissions to "SupportFiles" and "PortMonitoring" ->set role server operations=* Sets the server role operation permissions to all operations enabled ->set role server operations= Sets the stor
Item Description ForceOnTimeout Attempts a graceful shutdown, but if the server does not shut down within the timeout period (60 seconds by default), the server is forced to power off. Timeout Specifies the timeout period (in seconds) to wait for the operation to complete (per server). The default timeout is 60 seconds.
Item Description ServerID (required) The ID of a server in the domain. The format of the server ID is . If the EnclosureID is not specified, the local enclosure is used by default. Use "*" to reboot all servers in the domain. For a multi-blade server, the ServerID must be that of the monarch bay. This is the ID displayed by the show server command. Options Force Forces a reboot operation without waiting for the operating system to shut down gracefully.
serverid Manage virtual server ID configuration settings. Supported actions: help, set, show Item Description set serverid Modify virtual server ID domain settings. The serial number attributes can be changed only in one of the following scenarios: • • Syntax The virtual server ID source type is "Factory-Default". The virtual server ID source type is "VC-Defined" or "User-Defined", but no profiles are using server IDs from this source.
Supported actions: help, show Item Description show server-port Display physical server port information. If the port is unlinked and no connectivity exists, the cause is displayed. For more information about possible causes, see "Port status conditions (on page 178)." show server-port [] Syntax Parameter PortID (Optional) Examples The reference of a port mapping ID. The PortID format is . The PortID can be referenced from the ID column in the summary.
Item Description packets. Examples ->add server-port-map MyProfile:1 Network1 VLanID=100 Adds a new server port to dedicated network mapping ->add server-port-map MyProfile:2 RedNetwork Uplinkset=MyUplinkSet1 Adds a new server port to shared network mapping ->add server-port-map MyProfile:3 GreenNetwork Uplinkset=MyUplinkset1 UnTagged=true Adds a new server port to shared network mapping and enables untagged packet handling Item Description remove server-port-map Remove a server port network mapping.
Item Description Modifies the VLAN ID of an existing server port network mapping ->set server-port-map MyProfile:1 Network1 Untagged=true Modifies the existing server port network mapping to handle untagged packets Item Description show server-port-map Display a server port network mapping. Syntax show server-port-map [ | *] Parameter ConnectionID (optional) The ID of an existing Ethernet connection associated with a profile and a server port.
Item Description Adds multiple networks to a server-port-map ->add server-port-map-range MyProfile:2 UplinkSet=MyUplinkSet2 VLanIds=1-20 MatchUplinkSet=true Adds multiple networks to a server-port-map and locks VLANs to an uplink set Item Description remove server-portmap-range Remove one or more server port network mappings.
snmp View and modify the SNMP configuration for VC-Enet and VC-FC modules, and add, modify, and remove SNMP trap configurations related to trap destinations. Supported actions: set, show, help Item Description set snmp Modify the VC SNMP configuration. set snmp [ReadCommunity=] [SystemContact=] [Enabled=] [SmisEnabled=] Syntax Parameter Type (required) Indicates which SNMP configuration to modify. Valid values include "Enet" and "FC".
snmp-access Manage SNMP access. Supported actions: add, help, remove, show Item Description add snmp-access Add new ranges of IP addresses that will be permitted to access VC Ethernet modules through the SNMP interface. add snmp-access Network= Syntax Parameter Network (required) Example The network IP address in the format IP Address/Netmask Bits. The IP address must be unique and the starting address of an IP subnet range. ->add snmp-access Network=192.168.0.
Item Description string>][Format=][Severity=][DomainCategories=][EnetCategories=][FcCategories=] Parameter Name (required) A unique name for the new trap being added Properties Address (required) IPv4 address or DNS name for the trap destination Format Format of the new trap. Valid values are "SNMPv1" and "SNMPv2". If not specified, the default is "SNMPv1".
Item Description ->remove snmp-trap * Removes all configured SNMP trap destinations Item Description set snmp-trap Modifies an existing SNMP trap destination.
Item Description Displays the SNMP trap configuration for a single trap ->show snmp-trap * Displays all configured SNMP traps Item Description ->test snmp-trap Generates an SNMP test trap and sends it to all configured destinations.
Item Description Syntax remove ssh Example ->remove ssh Removes SSH keys Item Description show ssh Display the SSH key configuration. Syntax show ssh Example ->show ssh Displays the SSH key configuration ssl Allow or disallow SSL encryption (browser/SOAP). Supported actions: set, show, help Item Description set ssl Allow modifications to be made to the SSL configuration, and enable or disable string encryption for SSL communication with the web server.
Supported actions: help, load, show Item Description load ssl-certificate Transfer an SSL certificate from a remote FTP server and apply it to the Virtual Connect Manager web server. After a new SSL certificate is applied, the web server resets. When renewing certificates, the upload removes any previous Signed Certificate from VCM. You must add a new certificate or update with a renewed certificate in your browser. See browser Help for information on installing or renewing certificates.
Item Description size to 2048 bits and restarts the VC web server. Syntax Options quiet Properties Address (required) save ssl-csr [-quiet] address= CN=server.domain.
Item Description Contact (optional) The person responsible for the VC module. The value can be 0 to 60 characters in length. AlternativeName (optional) One or more alternate names or addresses for the VC domain, separated by commas. The value can be 0 to 500 characters in length. The default value is the existing data from the certificate plus any IP addresses (and associated DNS names), in the form of DNS:host.domain.com,IP:x.x.x.
Item Description Syntax show stackinglink ->show stackinglink Displays a summary listing of all stacking links and status Example statistics Manage statistics for interconnect module ports. Supported actions: help, reset, show Item Description reset statistics Reset per-port statistics for the specified port ID and its associated subports. reset statistics Syntax Parameter PortID (required) The port ID on which to reset statistics.
Item Description ->show statistics enc0:3:X1 Displays statistics for uplink port X1 on interconnect module 3 of the primary enclosure ->show statistics enc0:1:d3 Displays statistics for downlink port d3 on Ethernet interconnect module 1 of the primary enclosure ->show statistics enc0:1:d1:v1 Displays statistics for subport v1 of downlink port d1 on Ethernet interconnect module 1 of the primary enclosure ->show statistics PortID=enc0:1:X1 Displays statistics for uplink port X1 on interconnect module 1 of th
Item Description DCBX Priority Flow Control State DCBX Priority Group State DCBX Application Protocol State The following table defines each statistic. Item Description disabled The feature is operationally disabled. ok The feature is configured properly or DCBX negotiation is in progress. incompatible cnfg A FlexFabric network adapter has an incompatible configuration and is not accepting changes.
Item Description enc0 ->show statistics-throughput enc0:1:d1:v1 Displays the subport throughput statistics for subport v1 of port d1 from the module in bay1 of enclosure enc0 ->show statistics-throughput config Displays the current configuration of the throughput statistics ->show statistics-throughput LAGID=enc0:1:lag25 Displays the aggregated throughput statistics based on the LAGID 25 for the module in bay1 of enclosure enc0 Item Description set statisticsthroughput Enable or disable the port throug
storage-management Manage iSCSI storage management information for LeftHand network P4000 devices. Supported actions: add, help, remove, set, show Item Description add storage-management Add iSCSI storage management credentials.
Item Description username (optional) An administrator for the storage management password (optional) Examples The user password. The password can be entered as clear text in the command. If you specify the password property without a value, you are prompted to enter the password as a masked string at the prompt.
systemlog View the Virtual Connect Manager system event log. Supported actions: help, show Item Description show systemlog Display the Virtual Connect Manager system log. show systemlog [-Last=] [-First=] [-Pause=] Syntax Options Last Displays the last n records. If this option is specified and no value is provided, the last 10 records are displayed. First Displays the first n records. If this option is specified and no value is provided, the first 10 records are displayed.
Item Description Port (optional) The server TCP port number. Valid values include a valid port number between 1 and 65535. The default port number is 49. ServerKey (optional) The plain-text string used to encrypt user details exchanged with the primary TACACS server. It must match the server key configured for this VC on the primary server. TACACS authentication will not work if the server key is blank or null.
Item Description Parameter PortID (required) The ID of an uplink port to add. The ID is a combination of the enclosure name, interconnect bay, and port number in a single descriptor. The port ID for a network or an uplinkset that does not contain an FCoE network is in the format ::X. If the uplinkset contains an FCoE network, then the port is configured for all enclosures. The port name is in the format :X.
Item Examples Description ->remove uplinkport enc0:1:2 Network=MyNetwork Removes a specific uplink port (Bay 1, Port 2) from a network named MyNetwork ->remove uplinkport * Network=BlueNetwork Removes all uplink ports from a network named BlueNetwork ->remove uplinkport enc0:2:3 UplinkSet=SharedUplinkSet1 Removes a specific uplink port (Bay 2, Port 3) from a shared uplink set -> remove uplinkport 1:X1 UplinkSet=MyUplinkSet Removes a specific uplink port (Bay 1, Port 1) from a shared uplink set that contain
Item Description show uplinkport Display all Ethernet module uplink ports known to the domain. If the port is a member of a network or a shared uplink set, it appears. If the port is unlinked and no connectivity exists, the cause is displayed. For more information about possible causes, see "Port status conditions (on page 178)." show uplinkport [FilterBy] Syntax Parameters PortID (optional) The ID of an uplink port. The PortID format is ::.
Item Description ->add uplinkset MyNewUplinkSet Creates a new shared uplink set and adds it to the domain ->add uplinkset MyNewUplinkSet ConnectionMode=Failover Creates a new shared uplink set and sets the connection mode to Failover ->add uplinkset MyNewUplinkSet ConnectionMode=Auto LacpTimer=Domain-Default Creates a new shared uplink set using the domain default LACP timer Item Description copy uplinkset Copy a shared uplink port set.
Item Description Properties Name (optional) The new name of the shared uplink set ConnectionMode (optional) Specifies the connection type that is formed when multiple ports are added to the shared uplink set. Valid values include "Auto" and "Failover". The default value is "Auto". If the uplink set has an FCoE network, then the ConnectionMode property is disallowed. LacpTimer (optional) Specifies the domain default LACP timer. Valid values are "Domain-Default", "Short", and "Long".
Item Description The maximum length is 31 characters. Properties Password (required) FullName (optional) The password for the new user. The new user password can be entered as clear text in the command or as a masked string at the prompt. When a domain is first created, the default minimum length of a password is 8 characters. Virtual Connect allows a password length between 3 and 40 characters. The password length can be adjusted using the set user-security command.
Item Description FullName (optional) The full name of the user the set user-security command. ContactInfo (optional) Enabled (optional) Contact information for the user Roles (optional) The allowed roles for the user. Valid values are any combination of "domain", "server", "network", or "storage" separated by commas. If no roles are specified, the user can view domain information only. Use "*" to specify all roles. Examples Enables or disables the user. Valid values are "true" and "false".
Item Description MinPasswordLength (optional) The minimum password length allowed for new passwords when adding a new user and when changing an existing password. The default value is 8.
Command Element Domain Network Server Storage All access fc-connection — — X — — fcoe-connection — — X — — isci-connection — — X — — storage-management — — — X — ldap-group X — — — — radius-group X — — — — log-target X — — — — mfs-filter — — X — — mcast-filter — — X — — mcast-filter-rule — — X — — mcast-filter-set — — X — — nag-network — X — — — network — X — — — network-access-group — X — — — port-monitor — X X —
Command reset save Element Domain Network Server Storage All access enet-connection — — X — — external-manager X — — — — fabric — — — X — fc-connection — — X — — fcoe-connection — — X — — iscsi-boot-param — — X — — iscsi-connection — — X — — storage-management — — — X — ldap-certificate X — — — — ldap-group X — — — — radius-group X — — — — log-target X — — — — mfs-filter — — X — — mcast-filter — — X — — mcast-filter-s
Command set Element Domain Network Server Storage All access supportinfo X X X X X configuration X — — — — domain X — — — — enet-connection — — X — — enet-vlan — X — — — external-manager X — — — — fabric — — — X — fc-connection — — X — — fcoe-connection — — X — — igmp — X — — — interconnect X — — — — iscsi-boot-param — — X — — iscsi-connection — — X — — storage-management — — — X — lacp-timer — X — — — ldap X —
Command show Element Domain Network Server Storage All access qos-classifier — X — — — qos-map — X — — — serverid — — X — — server-port-map — — X — — session X — — — — snmp X X — — — snmp-trap X X — — — ssl X — — — — statistics-throughput — X — — — uplinkport — X — — — uplinkset — X — — — user X — — — — user-security X — — — — all X X X X X activity X X X X X banner X X X X X configuration X — — — — c
Command Element Domain Network Server Storage All access lacp-timer — X — — — ldap X X X X X ldap-certificate X X X X X ldap-group X X X X X local-users X X X X X mcast-filter — — X — — mcast-filter-rule — — X — — mcast-filter-set — — X — — name-server X X X X X qos X X X X X qos-class X X X X X qos-classifier X X X X X qos-map X X X X X radius X X X X X radius-group X X X X X tacacs X X X X X role X X X
Command Element Domain Network Server Storage All access snmp-access X X X X X snmp-trap X X X X X ssh X X X X X ssl X X X X X ssl-certificate X X X X X stackinglink X X X X X statistics X X X X X statistics-throughput X X X X X status X X X X X systemlog X — — — — uplinkport X X X X X uplinkset X X X X X user X — — — — user-security X X X X X version X X X X X test log-target X X X X X snmp-trap X X X
• Management element help—provides a listing of objects that are supported with a specific subcommand and a brief description of the management element and what it represents in the management model: ->help devicebay General Enclosure Device Bay settings and information Supported Subcommands: help show ----------------------------------------------------------------------->show devicebay -help Description: This command displays all device bays in the domain Syntax: show devicebay [ | *] Para
The interactive user output format is the default. However, by using a command-line option, you can also specify a "parse-friendly" output format, which provides data in a format that can be easily interpreted by automated scripts invoking the CLI. The different output formats primarily impact the show subcommand in the CLI infrastructure, where a majority of the informational details are displayed.
->show user * UserName : Administrator Roles : domain,server,network,storage Role Operations : FirmwareUpdate,PortMonitoring,RestoreConfig,SaveConfig,SupportFiles FullName : -- -ContactInfo : -- -Enabled : true UserName : steve Roles : domain,server,network,storage Role Operations : FirmwareUpdate,PortMonitoring,RestoreConfig,SaveConfig,SupportFiles FullName : Steve Johnson ContactInfo : steve.johnson@hp.
Name=Enclosure1 Import Status=Imported Serial Number=USE0000BK2 Part Number=403321-021 Asset Tag=OA ASSET 453 Example 2: Scriptable output format displaying user "Administrator" information ->show user Administrator -output=script1 User Name=Administrator Roles=domain,server,network,storage Role Operations=FirmwareUpdate,PortMonitoring,RestoreConfig,SaveConfig,Suppor tFiles Full Name=-- -Contact Info=-- -Enabled=true Example 3: Scriptable output format displaying all users (with table header) ->show user -o
Statistics descriptions Ethernet modules Ethernet uplink and downlink ports Name RFC Description rfc1213_IfInDiscards 1213 The number of inbound packets discarded to prevent delivery to a higher-layer protocol even though no errors were detected. These packets can be discarded to make buffer space available.
Name RFC Description rfc1213_IpInHdrErrors 1213 The number of input datagrams discarded due to errors in the IP header. Possible errors include bad checksums, version number mismatches, format errors, time-to-live exceeded, errors discovered while processing IP options, and so on.
Name RFC Description rfc1757_StatsFragments 1757 The total number of packets received that were less than 64 octets in length (excluding framing bits, but including FCS octets) and had either a bad FCS with an integral number of octets (FCS Error) or a bad FCS with a non-integral number of octets (Alignment Error). It is entirely normal for etherStatsFragments to increment, because it counts both runts (which are normal occurrences due to collisions) and noise hits.
Name RFC Description rfc1757_StatsPkts65to 127Octets 1757 The total number of packets (including bad packets) received that were between 65 and 127 octets in length inclusive (excluding framing bits, but including FCS octets) rfc1757_StatsTXNoErrors 1757 All packets transmitted without error, not including oversized packets rfc1757_StatsUndersize Pkts 1757 The number of packets received during the sampling interval that were less than 64 octets long (excluding framing bits, but including FCS octe
Name RFC Description rfc2233_IfHCOutUcastPkts 2233 The total number of packets that higher-level protocols requested to be transmitted but were not addressed to a multicast or broadcast address at this sublayer, including those packets that were discarded or not sent. This object is a 64-bit version of ifOutUcastPkts. Discontinuities in the value of this counter can occur at reinitialization of the management system and at other times as indicated by the value of ifCounterDiscontinuityTime.
Name RFC Description rfc2665_Dot3Stats ExcessiveCollisions 2665 The number of frames for which transmission on a particular interface fails due to excessive collisions. This counter does not increment when the interface is operating in full-duplex mode. Discontinuities in the value of this counter can occur at reinitialization of the management system and at other times as indicated by the value of ifCounterDiscontinuityTime.
Name RFC Description rfc2665_Dot3StatsLate Collisions 2665 The number of times that a collision is detected on a particular interface later than one slotTime into the transmission of a packet. A late collision included in a count represented by an instance of this object is also considered a generic collision for purposes of other collision-related statistics. This counter does not increment when the interface is operating in full-duplex mode.
Name RFC Description fcBBCreditFrameFailures N/A The number of times that more frames were lost during a credit recovery period than the recovery process could resolve. This causes a Link Reset to recover the credits. fcBBCreditRRDYFailures N/A The number of Buffer-to-Buffer Credit Recovery (BBCR) Receiver Ready (R_RDY) failures. This is the number of times more R_RDYs were lost during a credit recovery period than the recovery process could resolve. This causes a Link Reset to recover the credits.
Name RFC Description fcNumberOffline Sequences FCMGMT The number of Offline Primitive sequence received at this port. This -MIB statistic is for Fibre Channel only. The object type is connUnitPortStatCountNumberOfflineSequences. fcPrimitiveSeqProtocol Errors 4044 The number of primitive sequence protocol errors detected at this port. This count is part of FC-PH's LESB. The object type is fcmPortPrimSeqProtocolErrors.
Name RFC Description numEncodingDisparity Errors FCMGMT The number of disparity errors received at this port. The object type is -MIB connUnitPortStatCountEncodingDisparityErrors. numFBSYFrames FCMGMT The number of times that FBSY was returned to this port as a result of a -MIB frame that could not be delivered to the other end of the link. This occurs on SOFc1 frames (the frames that establish a connection) if either the fabric or the destination port is temporarily busy.
Name RFC Description numRxClass1Frames FCMGMT The number Class 1 frames received at this port. This statistic is for Fibre -MIB Channel only. The object type is connUnitPortStatCountClass1RxFrames. numRxClass2Frames FCMGMT The number of Class 2 frames received at this port. The object type is -MIB connUnitPortStatCountClass2RxFrames. numRxClass3Frames FCMGMT The number of Class 3 frames received at this port. The object type is -MIB connUnitPortStatCountClass3RxFrames.
::= { connUnitPortStatEntry 7 } BYTESTRANSMITTED Object type connUnitPortStatCountTxElements Description The number of octets or bytes transmitted by this port in 1-second periodic polling of the port. This value is saved and compared with the next polled value to compute the net throughput. For Fibre Channel, ordered sets are not included in the count.
FRAMESTOOLONG Object type connUnitPortStatCountFramesTooLong Description The number of frames received at this port where the frame length was greater than what was agreed to in FLOGI/PLOGI. This could be caused by losing the end of frame delimiter. ::= { connUnitPortStatEntry 46 } FRAMESTRANSMITTED Object type connUnitPortStatCountTxObjects Description The number of frames, packets, IOs, and so on that have been transmitted by this port. A Fibre Channel frame starts with SOF and ends with EOF.
Description The number of LRs received ::= { connUnitPortStatEntry 33 } LINKRESETTRANSMITTED Object type connUnitPortStatCountTxLinkResets Description The number of LRs transmitted ::= { connUnitPortStatEntry 34 } LOSSOFSIGNALCOUNTER Object type connUnitPortStatCountLossofSignal Description The number of instances of signal loss detected at this port. This count is part of FC-PH's LESB.
Object type connUnitPortStatCountPRJTFrames Description The number of times that FRJT was returned to this port as a result of a frame being rejected at the destination N_Port. This is the total for all classes.
Configuring the Virtual Connect domain using the CLI Basic configuration A Virtual Connect domain consists of an enclosure and a set of associated modules and server blades that are managed together by a single instance of the VCM. The Virtual Connect domain contains specified networks, server profiles, and user accounts that simplify the setup and administration of server connections.
login as: password: • TACACS+ Authentication >ssh 192.168.0.120 login as: password: • Mechanism-based Authentication >ssh 192.168.0.120 login as: : password: Valid values for auth-mechanism are local, ldap, radius, and tacacs. • For example: >ssh 192.168.0.120 login as: tacacs: password: Role-based Authentication >ssh 192.168.0.
Importing an enclosure To import an enclosure, use the import enclosure command.
Up to 32 local user accounts can be created.
To add LDAP directory groups: >add ldap-group MyNewGroup description="This is my test group" roles=domain,server,network To remove LDAP directory groups: >remove ldap-group MyGroup To enable or disable local users: >set ldap localusers=disabled To display LDAP settings and directory groups: >show ldap >show ldap-group Configuring RADIUS authentication support for users To set RADIUS properties: >set radius serveraddress=192.168.0.
>show role domain To customize role permissions: >set role network operations=SupportFiles,PortMonitoring Configuring the LACP Timer To set the LACP Timer: >set lacp-timer default=Long To display the LACP Timer settings: ->show lacp-timer Obtaining and using a new signed certificate 1. Generate and transfer an SSL certificate signing request (CSR) to a remote FTP server: >save ssl-csr address=ftp://user:password@192.168.10.12/new-ssl.csr CN=server.domain.
2. Set up connections from the HP BladeSystem c-Class enclosure to the external Ethernet networks. These connections can be uplinks dedicated to a specific Ethernet network or shared uplinks that carry multiple Ethernet networks with the use of VLAN tags. Configuring MAC address ranges To configure MAC address ranges, use the set domain command.
Assigned MAC addresses The MAC address range used by the Virtual Connect domain must be unique within the environment. HP provides a set of pre-defined ranges that are for use by VCM and do not conflict with server factory default MAC addresses. When using the HP-defined MAC address ranges, be sure that each range is used only once within the environment.
network access group. Similarly, if you create a new network and assign it to NetGroup1 but not to the Default network access group, then a profile that uses the Default network access group cannot use the new network. To create a network access group, use the add network-access-group command: >add network-access-group MyGroupName The network access group name must be unique within the data center, and can be up to 64 characters without spaces or special characters except for ".", "-", and "_".
• Summary of all networks >show network • Details for all networks >show network * • Details for a single network >show network MyNetwork Adding Ethernet networks to a network access group To add existing network access groups to an existing network, use the add nag-network command: >add nag-network Nag=DatabaseNetGroup Network=Net1,Net2 The networks become members of the specified network access group in addition to all the previously configured network access groups.
Virtual Connect places no special restrictions on which VLAN identifiers can be used, so the VLAN IDs already used for the networks in the data center can be used on these shared uplinks. To configure a shared uplink set for VLAN tagging, obtain a list of the network names and their VLAN IDs. A shared uplink set enables multiple ports to be included to support port aggregation and link failover with a consistent set of VLAN tags.
forced to use the same VLAN mappings as the shared uplink sets.
>set domain WwnType=VC-Defined WwnPool=5 • Factory default >set domain WwnType=Factory-Default Creating FC fabrics To create a FabricAttach FC SAN fabric and add it to the domain, use the add fabric command: >add fabric MyFabric2 Bay=3 Ports=1 Speed=2Gb To create a DirectAttach fabric for a FlexFabric module and add it to the domain, use the add fabric command: >add fabric MyFabric5 Bay=3 Ports=1,2 Type=DirectAttach For more information about Virtual Connect fabrics, see the HP Virtual Connect for c-Clas
• VC-defined >set serverid Type=VC-Defined PoolId=5 • Factory default >set serverid Type=Factory-Default When using the HP-defined serial number ranges, be sure that each range is used only once within the environment. Server profile setup The I/O connection profile, or server profile, provides a link between the server and the networks and fabrics defined in VC. The server profile can include MAC and WWN addresses, as well as boot parameters for the various connection protocols supported by VC.
• The server blade firmware and option card firmware must be at a revision that supports Virtual Connect profile assignment. See the HP website (http://www.hp.com/go/bladesystemupdates). • Before creating the first server profile: o Select whether to use assigned serial numbers or factory default serial numbers. o Select whether to use movable, administered MAC addresses and WWNs, or the local server blade factory default MAC addresses and WWNs.
Server profiles are associated with a specific enclosure device bay. After a profile is assigned, the Virtual Connect Manager configures the server blade in that device bay with the appropriate MAC, PXE, WWN, and SAN boot settings and connects the appropriate networks and fabrics. Server blades that have been assigned a profile and remain in the same device bay do not require further Virtual Connect Manager configuration during a server or enclosure power cycle.
>set iscsi-boot-param MyProfile1:1 BootOrder=Primary Lun=100 InitiatorName="iqn.2009-09.com.someorg.iSCSI-Initiator" InitiatorIp=192.128.3.1 Mask=255.255.0.0 TargetName="iqn.2009-09.com.someorg.iSCSI-Target" TargetIp=192.128.3.
The IGMP Snooping feature enables VC-Enet modules to monitor (snoop) the IGMP IP multicast membership activities and configure hardware Layer 2 switching behavior of multicast traffic to optimize network resource usage. IGMP v1, v2, and v3 snooping are supported. The IGMP Snooping idle timeout interval is set to 260 seconds by default. This value is the "Group Membership Interval" value as specified by IGMP v2 specification (RFC2236).
For more information about the port-protect command, see "port-protect (on page 81)." For more information about configuring the port-protect setting, see "Configuring pause flood protection settings (on page 172).
• Unassign all networks from the port in "loop detected" state. The SNMP agent supports trap generation when a loop condition is detected or cleared. Virtual Connect provides the ability to enable or disable network loop protection. The feature is enabled by default and applies to all VC-Enet modules in the domain. Network loops are detected and server ports can be disabled even prior to any enclosure being imported.
o Use the "reset port-protect" CLI command. The SNMP agent supports trap generation when a pause flood condition is detected or cleared. Virtual Connect provides the ability to enable or disable port pause flood protection. The feature is enabled by default and applies to all VC-Enet modules in the domain. Port pause floods are detected and server ports can be disabled even prior to any enclosure being imported.
• Adding a connection that is mapped to Flex-10 • Removing a connection that is mapped to Flex-10 • Assigning a profile to a server that maps Flex-10 connections • Unassigning a profile with Flex-10 connections Flex-10 connection changes that do not require power off It is not necessary to power off a server blade with Flex-10 connections in the following instances: • • Changing a connection's network: o From a single network to another single network o From a single network to multiple networ
• You can remove connections at any time (one at a time, from the bottom). • If the existing profile connections do not match the current FC/FCoE module configurations, the add operation is not allowed. • The current maximum number of per server profile FC/FCoE connections mapped to the same I/O bay is four, unless you are using the HP Integrity BL890c i4 Server Blade.
5 Start with modules in Bays 3–6, create a profile, install modules into Bays 7 and 8, then edit the profile and add connections. Port 1 2 3 4 Connected to — Bay 3 Bay 3 Bay 4 Bay 5 Bay 5 Bay 7 Bay 6 — Bay 4 Bay 6 Bay 8 Port Connected to 1 Bay 3 2 Bay 4 3 Bay 5 4 Bay 6 5 Bay 7 6 Bay 8 Add connection, 2 times 6 Start with modules in Bays 3–6, create a profile (add 4 connections), install modules into Bays 7 and 8, then edit the profile.
10 Start with 8 FCoE-capable Port modules, then create a 1 profile and add connections.
Operation Examples Display overall domain status >show interconnect enc0:2 >show status Display stacking link configuration and status >show stackinglink Display the system log >show systemlog Display a list of servers in the domain • • • Display server profiles • • • Delete the domain configuration Force a failover to the backup VC Manager Power off server blades Power on server blades Reset a server blade Unassign a server profile from a device bay Summary display >show server Detailed displ
o An FC module is connected to a port that is not FC-capable. • Administratively Disabled—The port has been disabled by an administrative action, such as setting the uplink port speed to ‘disabled.’ • Unpopulated—The port does not have an SFP module connected. • Unrecognized—The SFP module connected to the port cannot be identified. • Failed Validation—The SFP module connected to the port failed HPID validation. • Smart Link—The Smart Link feature is enabled.
You are logged out of the session after approximately 1 minute. If you attempt to log in to the module again, you might receive the following error message: Unable to communicate with the Virtual Connect Manager. Please retry again later. The login should succeed after the Virtual Connect Manager restarts. Allow up to 5 minutes, depending on the enclosure configuration.
Appendix: Using Virtual Connect with nPartitions Understanding nPartitions The HP BL870c i4 or HP BL980c i4 servers can be partitioned into separate, smaller servers, called nPartitions, using iLO. Each nPartition is treated identically to a server of comparable size and type. The set of blades that are conjoined by a Blade Link is referred to as a Blade Link Domain. An nPartition must be wholly contained within a blade link domain. The configuration of nPars is explained below.
iLO controls the blade link to change the configuration of nPars in the blade link domain, and the information about the new configuration is communicated through the OA to VCM. During the process, VCM: • Removes profile connections from affected nPars • Updates its nPar configuration information • Applies profiles to the new or modified nPars Assigning a VC profile to an nPar When an i4 server is configured with multiple nPartitions, each nPartition must be assigned its own profile.
When the reconfiguration is done, the OA generates blade remove events for the first two blades, resulting in VCM treating the AA partition as having been removed. Then the OA generates a blade add event for the first blade that identifies it as a single-blade partition, and likewise for the second blade. No events (remove or add) occur for the third and fourth blades because the C and D partitions are not affected by the reconfiguration.
Support and other resources Before you contact HP Be sure to have the following information available before you call HP: • Active Health System log (HP ProLiant Gen8 or later products) Download and have available an Active Health System log for 3 days before the failure was detected. For more information, see the HP iLO 4 User Guide or HP Intelligent Provisioning User Guide on the HP website (http://www.hp.com/go/ilo/docs).
Acronyms and abbreviations BPDU Bridge Protocol Data Unit CHAP Challenge Handshake Authentication Protocol CHAPM Mutual Challenge Handshake Authentication Protocol CRC cyclic redundant checks DCBX Datacenter Bridging Capability Exchange protocol DCC device control channel DHCP Dynamic Host Configuration Protocol DNS domain name system EFI extensible firmware interface FC Fibre Channel FCoE Fibre Channel over Ethernet FCS Frame Check Sequence Acronyms and abbreviations 185
GMII Gigabit media independent interface HBA host bus adapter IGMP Internet Group Management Protocol iSCSI Internet Small Computer System Interface LDAP Lightweight Directory Access Protocol LESB Link Error Status Block LLC Logical Link Control LUN logical unit number MAC Media Access Control NPIV N_Port ID Virtualization OA Onboard Administrator PVST+ Per VLAN Spanning Tree (over standard 802.
RD receive data RMON remote monitoring SOAP Simple Object Access Protocol SSH Secure Shell SSL Secure Sockets Layer TACACS+ Terminal Access Controller Access Control System Plus TFTP Trivial File Transfer Protocol UDP User Datagram Protocol UUID universally unique identifier VC Virtual Connect VCEM Virtual Connect Enterprise Manager VCM Virtual Connect Manager VCSU Virtual Connect Support Utility VLAN virtual local-area network Acronyms and abbreviations 187
WWN World Wide Name WWPN worldwide port name Acronyms and abbreviations 188
Documentation feedback HP is committed to providing documentation that meets your needs. To help us improve the documentation, send any errors, suggestions, or comments to Documentation Feedback (mailto:docsfeedback@hp.com). Include the document title and part number, version number, or the URL when submitting your feedback.
Index A E activity command 21 adding FC connections 169, 174 adding FCoE connections 169, 174 all 20 assigned MAC addresses 160 authenticating users 155 authorized reseller 184 enclosure command 28 enet-vlan 33 Ethernet module statistics descriptions 138 Ethernet network connections, adding to a profile 168 Ethernet network properties, modifying 161 Ethernet network, creating 161 Ethernet networks, displaying 161 Ethernet uplink and downlink ports 138 external-manager command 34 B banner command 21 basi
L P ldap command 55 ldap-certificate 56 ldap-group 57 link-dist-interval command 58 lldp command 59 local-users command 59 logging in 153 logging out 177 log-target 60 loop-protect command 62 pause flood protection 172 port monitor 79 port-protect command 81, 172 primary remote authentication method 155 private networks 70 profile command 82 properties 13 M MAC address settings 159 MAC cache failover settings, configuring 170 mac-cache command 63 managed elements 18 mapping profile connections 182 mcast
SSH key, adding 107 SSH key, administration 107 SSH keys, authorized 107 SSH keys, importing 107 SSL certificate administration 108, 158 SSL certificate signing request 109, 158 ssl command 108 ssl-csr command 109 stackinglink command 111 statistics 112 statistics descriptions 138 statistics-throughput command 114 status command 115 storage-management command 116 subcommands 18 support and other resources 184 Support-info 117 supporting comments and blank lines in CLI scripts 14 system log 118 systemlog com
