HP Virtual Connect Manager Command Line Interface for c-Class BladeSystem Version 3.70/3.75 User Guide Abstract This document contains user information for the HP Virtual Connect Manager version 3.70/3.75 CLI. This document is for the person who installs, administers, and troubleshoots servers and storage systems. HP assumes you are qualified in the servicing of computer equipment and trained in recognizing hazards in products with hazardous energy levels.
© Copyright 2012, 2013 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice. The only warranties for HP products and services are set forth in the express warranty statements accompanying such products and services. Nothing herein should be construed as constituting an additional warranty. HP shall not be liable for technical or editorial errors or omissions contained herein. Confidential computer software.
Contents Introduction .................................................................................................................................. 6 What's new .............................................................................................................................................. 6 Changes from VC 3.60 to VC 3.70/3.75 .......................................................................................... 7 Virtual Connect overview...............................................
lldp.............................................................................................................................................. 55 local-users .................................................................................................................................... 55 log-target ...................................................................................................................................... 56 loop-protect ....................................................
Server VLAN Tagging Support ...................................................................................................... 145 Fibre Channel setup ..................................................................................................................... 145 Serial number settings .................................................................................................................. 146 Server profile setup ........................................................................
Introduction What's new The command line interface user guide contains the following changes for VC 3.70/3.75: • The VC CLI displays the real WWN and MAC addresses in the following commands when the server profile is assigned: o o o o o o o show all show enet-connection show fc-connection show fcoe-connection show iscsi-connection show profile show server-port This depends on whether the server-port corresponds to a Flex-10 adapter.
• Modified the set statistics-throughput command to enable configuration of sample rate settings • Modified the show statistics-throughput command to display the current throughput statistics settings, including statistics for subports • Modified the default value of the Password property for the add user and set user commands to 8 characters • Modified the default value of the MinPasswordLength property for the set user-security command to 8 characters • New managed elements: o activity (on page
Command Changes Virtual Connect 3.60 Virtual Connect 3.70/3.75 help connection-map show connection-map The new object "connection-map" is supported in VC 3.70, enabling you to display server-to-target connectivity information for servers with assigned profiles containing DirectAttach fabrics. The "Type" property was added to this command, enabling you to specify the fabric type, either FabricAttach or DirectAttach, for FlexFabric modules.
Command Changes Virtual Connect 3.60 Virtual Connect 3.70/3.75 save ssl-csr This command includes new data fields for additional certificate information. If the private key size is 1024 bits, then this command also upgrades the size to 2048 bits and restarts the VC Web Server.
Command Changes Virtual Connect 3.60 Virtual Connect 3.70/3.75 set user-security The default password for this command was updated from 3 characters to 8 characters. The default value for the MinPassword Length property is 3 characters. The default value for the MinPassword Length property is 8 characters.
Enclosure for a total of 8 servers (or up to 16 servers if the double-dense option is enabled). For more information on the double-dense option, see "Double-dense server bay option"in the user guide.
Command line syntax CLI input is case-insensitive, except when otherwise noted.
In the example, -output is the option, and script1 is an option argument. Properties Properties are specific configuration attributes of a managed element. Properties are commonly used during set operations or add operations where a managed element is being modified or created. In some limited circumstances, properties might also be used as a part of a show or other command.
#-----------------------------------------------------------------------# Add Users add user SomeNetworkUser password=pass1 privileges=network add user SomeStorageUser password=pass2 privileges=storage add user SomeDomainUser password=pass6 privileges=domain add user SomeAdminUser password=pass3 privileges=* add user DomainNetworkUser password=764dhh privileges=domain,network # Add Profiles with Default VC-Enet and VC-FC Connections add profile MyProfile add profile AnotherProfile add profile Profile45 # Ad
SUCCESS: RedProfile unassigned from device bay enc0:4 CLI command execution modes The Virtual Connect Manager CLI provides two different methods for executing commands: interactive shell mode and non-interactive mode. Interactive Shell Mode This mode is used to invoke CLI command operations with the dedicated management shell. The shell is provided after you log in with valid credentials, and only accepts known VCM CLI commands as input. You can quit the shell by using the exit command.
3. Enter a valid user name. 4. Enter a valid password. The CLI command prompt appears. 5. Enter commands for the Virtual Connect Manager. 6. To terminate the remote access SSH session, close the communication software or enter exit at the CLI command prompt. To access the VCM CLI remotely through the Onboard Administrator CLI, run the connect interconnect command from the Onboard Administrator CLI.
Command line Subcommands Command Description add Add a new object to the domain or to another object assign Assign a server profile to a device bay delete Delete the domain configuration exit Exit the Virtual Connect Manager command-line shell copy help Copy a configuration from one server profile to another server profile Display context-sensitive help for a command or object import Import an enclosure into the domain poweroff Power off one or more servers reboot Reboot one or more serve
Managed element enet-connection (on page 28) enet-vlan (on page 31) external-manager (on page 32) fabric (on page 34) Description Manage Ethernet network connections Manage Ethernet VLAN connections Manage external manager settings and information Manage Fibre Channel SAN fabrics fc-connection (on page 37) Manage Fibre Channel SAN fabric connections firmware (on page 42) Manage interconnect module firmware fcoe-connection (on page 39) Manage FCoE SAN fabric connections igmp (on page 43) Manage Eth
Managed element Description Manage SSL configuration and Information ssl (on page 91) ssl-certificate (on page 91) Manage SSL certificate information ssl-csr (on page 92) Manage an SSL certificate signing request statistics (on page 94) Display or reset statistics on a designated interconnect module port statistics-throughput (on page 96) Manage the port throughput statistics stackinglink (on page 94) status (on page 98) Display stacking link information and status Display overall Virtual Conn
Item Description show version Display CLI version information. show version Syntax ->show version Displays CLI version and copyright information Example activity Display activity events being performed by VCM and the step-wise progress of those events. Supported actions: help, show Item Description show activity Display activity events being performed by VCM and the step-wise progress of those events.
Item Description ->add banner text="This is a private system." ->add banner text="" ->add banner text="Unauthorized access is prohibited." ->add banner text="" ->add banner text="Communications are monitored." Adds banner text with multiple commands (A blank line is displayed in between each line of text in this example.) Item Description remove banner Remove configured banner text.
Item Description restore configbackup Transfer a configuration file from a remote TFTP or FTP server and restore the configuration. Be sure that the domain state is IMPORTED before attempting to restore the configuration.
Item Description ->restore configbackup -quiet address=ftp://192.168.10.12/ Restores a configuration backup file without user confirmation prompts Item Description save configbackup Generate and transfer a Virtual Connect configuration backup file to a remote TFTP or FTP server.
Item Description ModuleID (required) The ID of the module for which to display the connection map information. The module must be a FlexFabric module. The ID is in the format of :. Example ->show connection-map enc0:1 Displays the connection map information for the module in bay 1 of enclosure enc0 devicebay Manage general enclosure device bay settings and information.
Item Option quiet Examples Description Suppresses user confirmation prompts. This option is useful when scripting delete domain operations.
Item Description "VC-Defined", "User-Defined", and "Factory-Default". WwnPool(optional) The pre-defined WWN pool to use for address assignment. Valid values include integers from 1 to 64. This property is valid only if the WwnType is set to "VC-Defined". If not specified, the default pool ID is 1. WwnStart (Required if WwnType is User-Defined) WwnEnd (Required if WwnType is User-Defined) SingleDense (optional) The starting WWN address in a custom user-defined range.
Item Description ->show Displays ->show Displays domain domain information domain addressPool the VC-defined address pools for the domain enclosure Manage general enclosure settings and information. Supported actions: help, import, remove, show Item Description import enclosure Import local and remote enclosures into the Virtual Connect domain. Virtual Connect supports up to four c7000 enclosures in a single domain.
Item Description remove enclosure Remove a remote enclosure that has been imported into the domain. The local enclosure cannot be removed from the domain using the remove enclosure command. remove enclosure Syntax Parameter EnclosureID (required) Examples The enclosure ID of the remote enclosure to be removed from the domain. Use "*" to remove all remote enclosures in the domain. The enclosure IDs can be identified for a particular enclosure by using the show enclosure command.
Item Description network name is not specified, or is set to "unassigned", the network remains unassigned and can be assigned later. PXE (optional) Enables or disables PXE on the network connection. Valid values are "enabled", "disabled", and "UseBios". If not specified, the default is "UseBios". Only one connection can have PXE enabled per profile. AddressType (optional) The source of MAC address assignments to be used during the creation of the new connection.
Item Description Adds a new Ethernet network connection and provides user-defined MAC addresses ->add enet-connection MyProfile Network=MyNetwork SpeedType=Preferred Adds a new Ethernet network connection and sets the speed to "Preferred" ->add enet-connection MyProfile Network=MyNetwork SpeedType=Custom Speed=2000 Adds a new Ethernet network connection and sets the speed to 2Gb Item Description remove enet-connection Syntax Remove the last Ethernet network connection from an existing server profile.
Item Description SpeedType is Custom) MAX configured speed for the network in 100Mb increments.
Item Description Setting the value to "true" restricts the server network connections to be selected from a single shared uplink, and the VLAN ID cannot be modified. Setting the value to "false" enables you to select any VC Ethernet network for the server Ethernet connections, and VLAN ID mappings can be modified to ensure uniqueness. PrefSpeedType (optional) The default connection speed for any Ethernet connection using multiple networks. Valid values include "Auto" and "Custom".
Item Syntax Option quiet Properties UserName (optional) MacType (optional) Description IMPORTANT: You must set the external manager enabled to "false" using the set external-manager command before using the remove external-manager command.
Item Description Removes only the external management control of the VC Manager ->remove external-manager macType=Factory-Default wwnType=Factory-Default serverIdType=Factory-Default Releases only the profile control ->remove external-manager username=A1010345 macType=Factory-Default wwnType=Factory-Default serverIdType=Factory-Default Removes the external manager and releases the profile control Item Description set external-manager Enable or disable the control of an existing external manager over the
Item Description Ports (required) A list of one or more logical FC ports to be added to the fabric. Each port is specified in the format ",,...", where port is the interconnect module port number to be added to the fabric, for example "1, 2, 3, 4" (affects all modules within a bay group). For HP VC FlexFabric 10Gb/24-port Modules, port numbers 1, 2, 3, and 4 correspond to ports X1, X2, X3, and X4, respectively. Type (optional) The fabric type. "FabricAttach" is for a SAN fabric.
Item Description Syntax balancing of a fabric if login re-distribution is configured. set fabric [-LoadBalance] [Name=] [Ports=] [Speed=] [LinkDist=] Parameter Name (required) A unique name for the fabric Option LoadBalance Properties Name (optional) Speed (optional) Performs load balancing on a fabric configured for manual login re-distribution. This option is not supported for DirectAttach fabrics.
Item Description Displays ->show Displays ->show Displays a summary of all FC SAN fabrics fabric * detailed information for all FC SAN fabrics fabric SAN_5 detailed information for a specific FC SAN fabric fc-connection Manage Fibre Channel SAN connections. Supported actions: add, help, remove, set, show Item Description add fc-connection Add a new FC SAN connection to an existing server profile. For more information, see "General requirements for adding FC or FCoE connections (on page 155).
Item Description Adds a new FC SAN connection and uses the next available fabric ->add fc-connection MyNewProfile AddressType=Factory-Default Adds a new FC SAN connection and uses factory-default addresses ->add fc-connection MyNewProfile AddressType=User-Defined PortWWN=50:06:0B:00:00:C2:62:00 NodeWWN=50:06:0B:00:00:c2:62:01 Adds a new FC SAN connection and provides user-defined WWN addresses Item Description remove fc-connection Remove the last FC connection from an existing server profile.
Item Description either Primary or Secondary optional) Examples ->set fc-connection MyProfile 1 Fabric=SAN_5 Changes the fabric of an FC SAN fabric connection ->set fc-connection RedProfile 2 Fabric="" Sets an FC SAN fabric connection to "Unassigned" ->set fc-connection BlueProfile 1 Fabric=SAN_7 Changes the FC SAN fabric of an FC SAN connection ->set fc-connection BlueProfile 1 Speed=4Gb Changes the port speed of an FC SAN connection ->set fc-connection BlueProfile 1 BootPriority=Primary BootPort=50:06:0
Item Description [EthernetMac=] Parameter ProfileName (required) The name of an existing profile to which the new connection is added Properties Fabric (optional) SpeedType (optional) The name of an existing fabric created on an FCoE module to associate with the connection. If the fabric name is not specified, the connection is marked as “Unassigned” and associated with a specific bay. The requested operation speed for the server port.
Item Description ->add fcoe-connection MyNewProfile MACAddressType=User-Defined EthernetMAC=00-17-A4-77-00-00 Adds a new FCoE connection and provides a user-defined MAC address Item Description remove fcoe-connection Remove the last FCoE connection from an existing server profile.
Item Description ->set fcoe-connection MyProfile:1 Fabric=SAN_5 Changes the fabric of an FCoE SAN fabric connection ->set fcoe-connection RedProfile:2 Fabric="" Sets a FCoE SAN fabric connection to "Unassigned" ->set fcoe-connection MyProfile:1 SpeedType=Custom CustomSpeed=5000 Modifies the FCoE connection and sets a custom speed of 5Gb ->set fcoe-connection BlueProfile:1 BootPriority=Primary BootPort=50:06:0B:00:00:C2:62:00 BootLun=5 Changes the SAN boot priority and sets additional boot parameters Item
igmp Manage Ethernet IGMP Snooping settings. Supported actions: help, set, show Item Description set igmp Modify Ethernet IGMP Snooping settings. set igmp [Enabled=] [Timeout=] [NoFlood=] Syntax Properties Enabled (optional) Timeout (optional) NoFlood (optional) Examples Enables or disables IGMP Snooping. Valid values include "true" and "false". The idle timeout interval (in seconds) for IGMP Snooping. Valid values include integers from 1-3600.
interconnect Manage I/O interconnect modules. Supported actions: help, set, show Item Description set interconnect Modify the interconnect module host name setting. set interconnect [-quiet] [:] [] Syntax Option quiet Properties EnclosureID BayNumber Hostname Examples Suppresses user confirmation prompts. This option is useful when scripting operations.
interconnect-mac-table Display interconnect module MAC table information. Supported actions: help, show Item Description show interconnectmac-table Display interconnect module MAC table information for the specified module. Syntax Parameter ModuleID (required) Option FilterBy (optional) Examples show interconnect-mac-table [FilterBy] The ID of the module for which to display the MAC table. The ID is in the format of :.
Item Description [Gateway=] [VlanID=] [TargetName=] [TargetIP=] [TargetPort=] [TargetIP2=] [TargetPort2=] [Authentication=] [Username=] [Secret=] [MutualUsername=] [MutualSecret=] [iSCSIBootParamDHCP=] [NetworkParamDHCP=] [DHCPVendorID=] Parameter ConnectionID (required
Item Description TargetIP2 (optional) The alternate target IPv4 address to use if the primary target IP is unavailable. TargetPort2 (required if TargetIP2 is specified) The TCP port associated with the alternate target IP address. The default value is 3260. Authentication (optional) The initiator and target must agree on an authentication method, or the iSCSI initiator cannot log in to the target. Supported values include "None", "CHAP", and "CHAPM". The default value is "None".
Item Description ->set iscsi-boot-param MyProfile1:1 BootOrder=Primary ISCSIBootParamDHCP=Enabled NetworkParamDHCP=Enabled DHCPVendorID=SomeVendorIDValue Configures iSCSI Boot attributes to be retrieved from DHCP ->set iscsi-boot-param MyProfile1:1 -maskSecret -maskMutualSecret Authentication=CHAPM Username=SomeUserName MutualUsername=SomeMutualUsername ISCSIBootParamDHCP=Enabled NetworkParamDHCP=Enabled DHCPVendorID=SomeVendorIDValue Configures CHAP secret and CHAPM secret values as a masked string Item
Item Description AddressType (optional) The source of MAC address assignments to be used during the creation of the new connection. If not specified, the default is the domain default. If "User-Defined" is specified, the iSCSI MAC address must be specified. Valid values include "Factory-Default" and "User-Defined". iScsiMAC (required if AddressType is User-Defined) The user-defined iSCSI MAC address to use for the connection. SpeedType (optional) The requested operational speed for the server port.
Item Description Removes the last added iSCSI connection from the profile Item Description set iscsi-connection Syntax Modify the properties of a specified iSCSI connection. set iscsi-connection [Network=] [SpeedType=] [Speed=] Parameters ConnectionID (required) The ID of an existing iSCSI connection. The ID format is . Properties Network (optional) The name of an existing network to associate with the connection.
Item Description display all iSCSI connections in the domain. Examples ->show Displays ->show Displays ->show Displays iscsi-connection all iSCSI connections in the domain iscsi-connection Profile1:* all iSCSI connections of a profile named Profile1 iscsi-connection Profile1:1 a specific iSCSI connection of a profile named Profile1 ldap Manage Virtual Connect directory server authentication settings.
Item Description ->set ldap Enabled=true ServerAddress=192.168.0.124 SslPort=636 SearchContext1=”ou=users,dc=company,dc=com” Enables directory services authentication for users Item Description show ldap Display the Virtual Connect LDAP authentication settings. show ldap Syntax Example ->show ldap Displays LDAP information ldap-certificate View and upload LDAP certificates from a remote FTP server.
Item Examples Item Description ->remove ldap-certificate B4:02:C0:29:B5:E5:B4:81 Removes an existing LDAP certificate by serial number ->remove ldap-certificate * Removes all LDAP certificates Description show ldap-certificate Display LDAP certificate information. show ldap-certificate [ | *] Syntax Parameter SerialNumber (optional) Examples The serial number of an existing LDAP certificate in a colon format.
Item Description remove ldap-group Remove an existing directory group. Syntax remove ldap-group Parameter GroupName (required) Examples The name of an existing directory group to be removed. Use "*" to remove all LDAP groups. ->remove ldap-group MyGroup Removes a specified directory group ->remove ldap-group * Removes all directory groups Item Description set ldap-group Syntax Modify the properties of an existing directory group.
Supported actions: help, set, show Item Description set link-dist-interval Set the FC login re-distribution interval for uplinks that are part of a fabric configured for Automatic login re-distribution. set link-dist-interval Interval=<1-1800> Syntax Property Interval (required) FC login re-distribution interval for uplinks (in seconds). Valid values include positive integers in the range 1 to 1800. The default is 30 seconds.
Item Description set local-users Modify the local user authentication settings for the VC domain. set local-users [Enabled=] [PrimaryRemoteAuthenticationMethod=] Syntax Properties Enabled (optional) Enables or disables local user authentication for the VC domain. Valid values are "true" and "false". The default value is "true". Disabling or enabling local user authentication requires you to be logged in as an LDAP, RADIUS or TACACS user with domain privileges.
Item Description include 1 to 65536. The default value is 514. Security (optional) Secure transmission of the log messages. Valid values include "None" and "STunnel". The default value is "None", and no encryption is used during transmission. The "STunnel" option can be used only if the transport protocol is set to "TCP". Format (optional) The timestamp format for the log messages. Valid values include "RFC3164" (Nov 26 13:15:55) and "ISO8601" (1997-07-16T19:20:30+01:00).
Item Description default value is "RFC3164". State (optional) Examples Enables or disables the remote log destination. Valid values include "Enabled" and "Disabled". The default value is "Disabled". ->set log-target 1 Severity=Error Transport=TCP Security=STunnel Modifies log-target index number 1 ->set log-target 1 Destination=192.168.3.1 Modifies log-target at index 1 to use a new IP address Item Description show log-target Display the remote log destination settings.
Item Description quiet (optional) Suppresses user confirmation prompts Properties Enabled (required) Example Enables or disables network loop detection and protection. Valid values include "true" and "false". ->set loop-protect Enabled=true Enables loop protection Item Description show loop-protect Display the loop protection configuration and all Ethernet ports currently disabled due to protection enforcement.
Supported actions: add, help, remove, show Item Description add nag-network Add one or more networks to a network access group. Any network access groups previously configured for the network remain. add nag-network Nag= Network=[,,...
Item Description network to network access group associations appears.
Item Description "_", and ".". The maximum length of the name is 64 characters. Option Quiet Properties Nags (optional) UplinkSet (optional) Suppresses user confirmation prompts during network creation and modification. This option is used mainly in automated scripting scenarios. The names of the existing network access groups of which this network is a member, separated by commas. Do not use spaces unless they are enclosed in quotation marks.
Item Description ->add network Network1 UplinkSet=Uplinkset1 VLANID=100 NativeVLAN=Enabled Creates a new network with a shared uplinkset and tags it as Native VLAN ->add network Network1 ConnectionMode=Failover Creates a new network and sets the connection mode as failover ->add network Network1 VLanTunnel=Enabled Creates a new network and enables VLAN tunneling ->add network Network1 PrefSpeedType=Custom PrefSpeed=4000 MaxSpeedType=Custom MaxSpeed=6000 Creates a new network with a preferred connection spe
Item Description (optional) and "Disabled". The default value is "Disabled". Nags (optional) Modifies the network access groups of which this network is a member. The specified network access groups replace the original network access groups. If no network access groups are specified, the network access groups are not changed. VLanID (optional) Modifies the VLAN ID of the network if it belongs to a shared uplink set that has not been configured.
Item Description show network Syntax Display all Ethernet networks in the domain. Configured values for ConnectionMode and VLanTunnel display for UNSHARED networks only. Configured values for NativeVLAN, UplinkSet, and VLanID display for SHARED networks only. show network [|*] Parameter NetworkName (optional) The name of an existing network in the VC domain. Use "*" to display a detailed view of all the networks. If not specified, a summary view of the networks appears.
Item Description set networkaccess-group Modify an existing network access group.
Item Description networks VLANIds (required) A comma separated list of VLAN ranges. The VLAN IDs must not overlap or already be used in the uplink port set. The VLAN IDS are combined with the NamePrefix and NameSuffix properties (if any) to create the name for the networks. NamePrefix (optional) The string to prefix before the VLAN ID when naming the new networks. If omitted, no string is used to prefix the VLAN ID.
Item Description UplinkSet= VLANIds= Options quiet Properties UplinkSet (required) VLANIds (required) Example Suppresses user confirmation prompts during network range removal. This option is used mainly in automated scripting scenarios. The name of the shared uplink set from which the networks are being removed The list of VLAN IDs (comma separated list of VLAN ID ranges) to be deleted from the shared uplink set.
Item Description Nags (optional) The network access groups to which the networks belong, separated by commas. Do not use spaces unless they are enclosed in quotation marks. If nags is not specified, the network access groups are not changed. SmartLink (optional) Enables or disables the SmartLink capability for the networks. Valid values include "Enabled" and "Disabled". Labels (optional) Labels assigned to these networks.
Item Description Direction (optional) The direction of network traffic on the port being monitored. Valid values include "ToServer", "FromServer", and "Both". Example ->add port-monitor AnalyzerPort=enc0:1:4 Speed=1Gb Duplex=full MonitorPort=enc0:5:4 Direction=FromServer Adds a new network analyzer port and a server port to be monitored Item Description remove port-monitor Remove ports from a port monitor configuration. Removing the network analyzer port automatically disables port monitoring.
Item Description Direction (optional) The direction of network traffic on the port being monitored. Valid values include "ToServer", "FromServer", and "Both".
Item Description User-Defined) virtual serial number. The user-defined serial number must start with the pattern VCX01. UUID (optional) A unique 128-bit identifier for the virtual server ID. The format is xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx, where x is any alphanumeric character. If no UUID is specified, one is auto-generated. The UUID can be specified only if the SNType is "User-Defined".
Item Description copy profile Copy an existing profile configuration to another profile. The copied profile (destination profile) will be left unassigned.
Item Description ->remove profile * Removes all server profiles Item Description save profile Save an EFI data object from an existing server profile. The server profile must not be assigned to a server bay.
Item Description show profile Syntax Display all server profiles that exist in the domain and a summary of the associated Ethernet, iSCSI, FC, and FCoE connections. To view detailed information for the connections, use the show enet-connection, show iscsi-connection, show fc-connection, and show fcoe-connection commands. show profile [|*] Parameter ProfileName (optional) The name of an existing profile in the VC domain. Use "*" to display all existing profiles.
Item Description RADIUS server. It must match the server key configured for this VC on the primary server. RADIUS authentication will not work if the server key is blank or null. Timeout (optional) The time in seconds that VCM should wait before timing out the request. If the primary server times out and a secondary server is configured, VCM attempts the request on the secondary server. If the secondary server times out, the request fails. The valid range of values is from 1 to 600 seconds.
Item Description Description (optional) An informational description for the new group being added. The description can consist of 0 to 20 alphanumeric characters, dash (–), underscore (_), or period (.), backslash (\) and single-quote ('). Privileges (optional) A set of one or more privileges for the group. Valid values include any combination of "domain", "server", "network", and "storage". Separate multiple values with commas.
Item Description detailed information for all RADIUS groups. If no value is specified, a summary of all groups appears. Examples ->show Displays ->show Displays ->show Displays radius-group a summary of all RADIUS groups radius-group MyGroup detailed information for a specific RADIUS group radius-group * detailed information for all RADIUS groups role Manage role-based user authentication. Supported actions: help, set, show Item Description set role Configure the authentication order for a VC role.
Item Description ->show role * Displays the authentication order for all user roles server Manage server blades. Supported actions: help, poweroff, poweron, reboot, show Item Description poweroff server Power off one or more physical servers. poweroff server [-Force|-ForceOnTimeout] [-timeout=] Syntax Parameter ServerID (required) Options Force The ID of a physical server in the domain. The format of the server ID is .
Item Description enclosure is used by default. Use "*" to power on all servers in the domain. For a multi-blade server, the ServerID must be that of the monarch bay. This is the ID displayed by the show server command. Option Timeout Examples The timeout period (in seconds) to wait for the operation to complete. The default timeout is 60 seconds.
Item Description show server Display all servers in the domain. show server Syntax Parameter ServerID (optional) Examples The ID of a server in the domain. The format of the server ID is . If the EnclosureID is not specified, the local enclosure is used by default. For a multi-blade server, the ServerID must be that of the monarch bay. This is the ID shown in the summary listing.
Item Description with the pattern VCX01. Examples ->set serverid Type=Factory-Default Modifies virtual server ID settings to use factory default serial numbers ->set serverid Type=VC-Defined PoolId=5 Modifies virtual server ID settings to use VC-defined serial numbers ->set serverid Type=User-Defined Start=VCX0000001 End=VCX0100010 Modifies virtual server ID settings to use a custom, user-defined serial number range Item Description show serverid Display virtual server ID configuration properties.
Item Description add server-port-map Add a new server port network mapping, and allow server ports to be shared among multiple VC Ethernet networks. add server-port-map [Uplinkset=] [VLanID=] [Untagged=] Syntax Parameters ConnectionID (required) Network (required) The ID of an existing Ethernet connection associated with a profile and a server port. The format of the ConnectionID is .
Item Description set server-port-map Modify an existing server port network mapping. This command cannot be used if the network is associated with a shared uplink set. set server-port-map [VLanID=] [UnTagged=] Syntax Parameters ConnectionID (required) Network (required) Properties VLanID (optional) Untagged (optional) Examples Item The ID of an existing Ethernet connection associated with a profile and a server port.
Item Description Parameters ConnectionId (required) The ID of an existing Ethernet connection associated with a profile and a server port. The format of the ConnectionID is . Properties Uplinkset (required) The name of the shared uplink set to use with the server port mapping VLANIDs (required) The VLAN IDs to use for the mapping.
Item Description Syntax set snmp [ReadCommunity=] [SystemContact=] [Enabled=] [SmisEnabled=] Parameter Type (required) Indicates which SNMP configuration to modify. Valid values include "Enet" and "FC". Properties ReadCommunity (optional) Read-Only Community String for the SNMP configuration. The default value is "public". If the type is "Enet", the maximum length of the read community string is 39 characters.
Item Description Syntax add snmp-access Network= Parameter Network (required) Example The network IP address in the format IP Address/Netmask Bits. The IP address must be unique and the starting address of an IP subnet range. ->add snmp-access Network=192.168.0.0/24 Adds a new range(s) of IP addresses Item Description remove snmp-access Syntax Remove already configured range(s) of IP addresses that were permitted to access VC Ethernet modules through the SNMP interface.
Item Description Properties Address (required) IPv4 address or DNS name for the trap destination Format Format of the new trap. Valid values are "SNMPv1" and "SNMPv2". If not specified, the default is "SNMPv1". Severities Trap severities to send to the destination. Valid values are "Normal", "Unknown", "Info", "Warning", "Minor", "Major", "Critical", "All", and "None". Multiple severities can be specified, separated by commas. The default severity is "None".
Item Description name string>][Format=][Severity=][DomainCategories=][EnetCategories=][FcCategories=] Parameter TrapName (required) The name of the trap to be modified Properties Name New name of the trap. Address (required) IPv4 address or DNS name for the trap destination. Format Format of the new trap. Valid values are "SNMP1v" and "SNMPv2".
Item Description Syntax attributes: DomainCategories=DomainStatus Severity=Info test snmp-trap Example ->test snmp-trap Generates an SNMP test trap and sends it to the configured destinations ssh Manage SSH configuration and information. Supported actions: help, load, remove, show Item Description load ssh Transfer the SSH key from a remote FTP server and apply it to the Virtual Connect domain.
Item Description show ssh Display the SSH key configuration. Syntax show ssh Example ->show ssh Displays the SSH key configuration ssl Allow or disallow SSL encryption (browser/SOAP). Supported actions: set, show, help Item Description set ssl Allow modifications to be made to the SSL configuration, and enable or disable string encryption for SSL communication with the web server.
Item Description Syntax load ssl-certificate Address= -orload ssl-certificate Address= Filename= Properties Address (required) Filename (required) Examples A valid IPv4 address of the FTP server, with user name, password, and name of the SSL certificate file to transfer. The name of the SSL certificate file to transfer. The filename can also be mentioned separately.
Item Description -orsave ssl-csr [–quiet] address= filename= CN=server.domain.com O="Hewlett-Packard" C=US ST=CA L=Cupertino [OU=] [Contact=] [AlternativeName=] [Email=] [Surname=] [GivenName=] [Initials=] [DNQualifier=] [ChallengePW= ConfirmPW=] [UnstructuredName=] Options quiet Properties Address (required) This option suppresses user confirmation prompts.
Item Description Surname (optional) The surname of the person responsible for the VC domain. The value can be 0 to 60 characters in length. GivenName (optional) The given name of the person responsible for the VC domain. The value can be 0 to 60 characters in length. Initials (optional) The initials of the person responsible for the VC domain. The value can be 0 to 20 characters in length. DNQualifier (optional) The distinguished name qualifier for the Virtual Connect Manager.
Item Description reset statistics Reset per-port statistics for the specified port ID and its associated subports. reset statistics Syntax Parameter PortID (required) The port ID on which to reset statistics. The port ID must be in the format ::. A listing of the possible uplink port IDs can be obtained by using the show uplinkport command.
Item Description ->show statistics -summary LAGID=enc0:1:lag25 Displays aggregated statistics with selected counters for a given LAG ID on interconnect module 1 of the primary enclosure ->show statistics LAGID=enc0:1:lag25 Displays aggregated statistics for a given LAG ID on interconnect module 1 of the primary enclosure In addition to the standard statistics, Virtual Connect also provides additional information on DCBX.
Item Description show statisticsthroughput Display throughput information for the specified physical port, FlexNIC, and the aggregated throughput information for the specified LAG. show statistics-throughput [LAGID=] Syntax Parameters PortID (optional) The port ID of the port/subport for which to display throughput information. PortID is composed of ::[:].
Item Description samples. Port throughput statistics are accessible using the show statistics-throughput command. Examples ->set statistics-throughput Enabled=true SampleRate=2m Enables the port throughput statistics with the sample rate set to 2 minutes ->set statistics-throughput Enabled=false Disables the port throughput statistics status View overall domain status information.
Item Description remove storage-management Delete iSCSI storage management credential records. Syntax Parameter name (required) Examples remove storage-management [|*] The name of the storage management information being removed. Use "*" to remove all storage management records.
supportinfo Generate and transfer a support information file to a remote FTP or TFTP server on the network. Supported actions: help, save Item Description save supportinfo Generate and transfer a Virtual Connect support information file to a remote TFTP or FTP server.
tacacs Manage TACACS+ authentication settings. Supported actions: help, set, show Item Description set tacacs Modify and test the Virtual Connect TACACS+ authentication settings.
Item Description show tacacs Display the Virtual Connect TACACS+ authentication settings. show tacacs Syntax Example ->show tacacs Displays TACACS+ information uplinkport Manage interconnect module uplink ports. Supported actions: add, help, remove, set, show Item Description add uplinkport Add a new uplink port to an existing network or a shared uplink port set.
Item Description Parameters PortID (required) The ID of the port to remove from a network. The port ID must be in the format ::. If EnclosureID is not specified, it defaults to the local enclosure.
Item Description Syntax connectivity exists, the cause is displayed. For more information about possible causes, see "Port status conditions (on page 158)." show uplinkport [FilterBy] Parameters PortID (optional) The ID of an uplink port. The PortID format is ::. Use "*" to display a detailed view of all uplink ports. FilterBy (optional) Examples Filters the output of the show command by the specified attribute.
Item Description copy uplinkset Copy a shared uplink port set. The copy uplinkset command does not allow copying of Private Networks within the shared uplink set.
Item Description ->set uplinkset Blue connectionMode=Failover Changes the connection mode of a shared uplink set named Blue to Failover Item Description show uplinkset Display shared uplink configurations. show uplinkset [ | *] Syntax Parameter UplinkSetName (optional) Examples Name of an existing shared uplink set. Use "*" to display a detailed view of all shared uplink sets. If not specified, a summary of all shared uplink sets is displayed.
Item Description Adds a new user by specifying the minimal amount of properties ->add user bill Password=HGtwf7272562 Privileges="domain,network" FullName="Bill Johnson" ContactInfo=billj@company.com Enabled=true Adds a new user and configures additional user properties ->add user Admin Password=hjkhfd Privileges=* Adds an Admin user with all privileges Item Description remove user Remove a user from the Virtual Connect Manager database.
Item Description ContactInfo=billj@company.com Enabled=true Modifies several properties of an existing user ->set user tom privileges=* Gives a user all privileges Item Description show user Display user summary or user details. Syntax Parameter UserName (optional) Examples show user [] Name of an existing user in the VC domain. If not specified, a summary of all users is displayed. Use "*" to display detailed information for all users.
Item Description Displays user security settings vcm Reset the Virtual Connect Manager. Supported actions: help, reset Item Description reset vcm Syntax Reset the Virtual Connect Manager. A failover to the backup VCM can also be specified (optional), if a backup VCM is available. IMPORTANT: Resetting the VCM causes a temporary loss in connectivity with the Virtual Connect Manager. If failover is specified and a backup VCM exists, users are logged off and must reconnect using the backup VCM IP address.
Command Element Domain Network Server Storage All access port-monitor — X X — — profile — — X — — server-port-map — — X — — snmp-access X X — — — snmp-trap X X — — — uplinkport — X — — — uplinkset — X — — — user X — — — — assign profile — — X — — — — X — — delete domain X — — — — X X X X X help — X X X X X X — — — — load ldap-certificate copy profile exit — import enclosure X — — — — profile X — — — —
Command reset save set Element Domain Network Server Storage All access network-access-group — X — — — port-monitor — X X — — profile — — X — — server-port-map — — X — — snmp-access X X — — — snmp-trap X X — — — ssh X — — — — uplinkport — X — — — uplinkset — X — — — user X — — — — loop-protect — X — — — statistics — X — — — vcm X — — — — configbackup X — — — — profile — — X — — ssl-csr X — — — — supportin
Command show Element Domain Network Server Storage All access tacacs X — — — — role X — — — — link-dist-interval — — — X — log-target X — — — — loop-protect — X — — — mac-cache — X — — — network — X — — — network-access-group — X — — — port-monitor — X X — — profile — — X — — serverid — — X — — server-port-map — — X — — snmp X X — — — snmp-trap X X — — — ssl X — — — — statistics-throughput — X — — — uplinkp
Command Element Domain Network Server Storage All access igmp X X X X X igmp-group X X X X X interconnect X X X X X interconnect-mac-table X X X X X iscsi-boot-param X X X X X iscsi-connection X X X X X storage-management X X X X X ldap X X X X X ldap-certificate X X X X X ldap-group X X X X X local-users X X X X X name-server X X X X X radius X X X X X radius-group X X X X X tacacs X X X X X role X X X X X
Command Element Domain Network Server Storage All access ssl X X X X X ssl-certificate X X X X X stackinglink X X X X X statistics X X X X X statistics-throughput X X X X X status X X X X X systemlog X — — — — uplinkport X X X X X uplinkset X X X X X user X — — — — user-security X X X X X version X X X X X test log-target X X X X X snmp-trap X X X X X unassign profile — — X — — *To disable or enable local user a
General Enclosure Device Bay settings and information Supported Subcommands: help show ----------------------------------------------------------------------->show devicebay -help Description: This command displays all device bays in the domain Syntax: show devicebay [ | *] Parameters: DeviceBayName : The reference name of a device bay in the domain.
Interactive user output format The interactive user output format provides a user friendly view of information at the command line. When providing an overview, or listing, of several instances of data, a tabular text format is displayed. If an individual instance of data is being displayed, then the stanza format is used.
Example 3: Stanza output format for displaying all user details ->show user * UserName : Administrator Privileges : domain,server,network,storage FullName : Steve Johnson ContactInfo : steve.johnson@hp.com Enabled : true UserName Privileges FullName ContactInfo Enabled : : : : : Admin domain,server,network,storage Admin Admin true UserName Privileges FullName ContactInfo Enabled : : : : : steve domain,server,network,storage Steve Johnson steve.johnson@hp.
When scripting CLI commands, only a single scripting client should perform remote management operations to a remote VC Manager. If multiple scripting clients are used to perform a heavy load of CLI commands to a single VC Manager, some management commands might fail. In some cases, the primary module might need to be reset to recover properly. • Script1 Output Format The script1 output format can be used to format the output using a name-value pair format, using an equal sign as the delimiter.
Admin;domain,server,network,storage;Admin;Admin;true steve;domain,server,network,storage;Steve Johnson;steve.johnson@hp.com;true Example 5: Scriptable output format displaying a single user (with table header) ->show user steve -output=script2 UserName;Privileges;FullName;ContactInfo;Enabled steve;domain,server,network,storage;Steve Johnson;steve.johnson@hp.
Statistics descriptions Ethernet modules Ethernet uplink and downlink ports Name RFC Description rfc1213_IfInDiscards 1213 The number of inbound packets discarded to prevent delivery to a higher-layer protocol even though no errors were detected. These packets can be discarded to make buffer space available.
Name RFC Description rfc1213_IpInHdrErrors 1213 The number of input datagrams discarded due to errors in the IP header. Possible errors include bad checksums, version number mismatches, format errors, time-to-live exceeded, errors discovered while processing IP options, and so on.
Name RFC Description rfc1757_StatsFragments 1757 The total number of packets received that were less than 64 octets in length (excluding framing bits, but including FCS octets) and had either a bad FCS with an integral number of octets (FCS Error) or a bad FCS with a non-integral number of octets (Alignment Error). It is entirely normal for etherStatsFragments to increment, because it counts both runts (which are normal occurrences due to collisions) and noise hits.
Name RFC Description rfc1757_StatsPkts65to 127Octets 1757 The total number of packets (including bad packets) received that were between 65 and 127 octets in length inclusive (excluding framing bits, but including FCS octets) rfc1757_StatsTXNoErrors 1757 All packets transmitted without error, not including oversized packets rfc1757_StatsUndersize Pkts 1757 The number of packets received during the sampling interval that were less than 64 octets long (excluding framing bits, but including FCS octe
Name RFC Description rfc2233_IfHCOutUcastPkts 2233 The total number of packets that higher-level protocols requested to be transmitted but were not addressed to a multicast or broadcast address at this sublayer, including those packets that were discarded or not sent. This object is a 64-bit version of ifOutUcastPkts. Discontinuities in the value of this counter can occur at reinitialization of the management system and at other times as indicated by the value of ifCounterDiscontinuityTime.
Name RFC Description rfc2665_Dot3Stats ExcessiveCollisions 2665 The number of frames for which transmission on a particular interface fails due to excessive collisions. This counter does not increment when the interface is operating in full-duplex mode. Discontinuities in the value of this counter can occur at reinitialization of the management system and at other times as indicated by the value of ifCounterDiscontinuityTime.
Name RFC Description rfc2665_Dot3StatsLate Collisions 2665 The number of times that a collision is detected on a particular interface later than one slotTime into the transmission of a packet. A late collision included in a count represented by an instance of this object is also considered a generic collision for purposes of other collision-related statistics. This counter does not increment when the interface is operating in full-duplex mode.
Name RFC Description fcBBCreditFrameFailures N/A The number of times that more frames were lost during a credit recovery period than the recovery process could resolve. This causes a Link Reset to recover the credits. fcBBCreditRRDYFailures N/A The number of Buffer-to-Buffer Credit Recovery (BBCR) Receiver Ready (R_RDY) failures. This is the number of times more R_RDYs were lost during a credit recovery period than the recovery process could resolve. This causes a Link Reset to recover the credits.
Name RFC Description fcNumberOffline Sequences FCMGMT The number of Offline Primitive sequence received at this port. This -MIB statistic is for Fibre Channel only. The object type is connUnitPortStatCountNumberOfflineSequences. fcPrimitiveSeqProtocol Errors 4044 The number of primitive sequence protocol errors detected at this port. This count is part of FC-PH's LESB. The object type is fcmPortPrimSeqProtocolErrors.
Name RFC Description numEncodingDisparity Errors FCMGMT The number of disparity errors received at this port. The object type is -MIB connUnitPortStatCountEncodingDisparityErrors. numFBSYFrames FCMGMT The number of times that FBSY was returned to this port as a result of a -MIB frame that could not be delivered to the other end of the link. This occurs on SOFc1 frames (the frames that establish a connection) if either the fabric or the destination port is temporarily busy.
Name RFC Description numRxClass1Frames FCMGMT The number Class 1 frames received at this port. This statistic is for Fibre -MIB Channel only. The object type is connUnitPortStatCountClass1RxFrames. numRxClass2Frames FCMGMT The number of Class 2 frames received at this port. The object type is -MIB connUnitPortStatCountClass2RxFrames. numRxClass3Frames FCMGMT The number of Class 3 frames received at this port. The object type is -MIB connUnitPortStatCountClass3RxFrames.
::= { connUnitPortStatEntry 7 } BYTESTRANSMITTED Object type connUnitPortStatCountTxElements Description The number of octets or bytes transmitted by this port in 1-second periodic polling of the port. This value is saved and compared with the next polled value to compute the net throughput. For Fibre Channel, ordered sets are not included in the count.
FRAMESTOOLONG Object type connUnitPortStatCountFramesTooLong Description The number of frames received at this port where the frame length was greater than what was agreed to in FLOGI/PLOGI. This could be caused by losing the end of frame delimiter. ::= { connUnitPortStatEntry 46 } FRAMESTRANSMITTED Object type connUnitPortStatCountTxObjects Description The number of frames, packets, IOs, and so on that have been transmitted by this port. A Fibre Channel frame starts with SOF and ends with EOF.
Description The number of LRs received ::= { connUnitPortStatEntry 33 } LINKRESETTRANSMITTED Object type connUnitPortStatCountTxLinkResets Description The number of LRs transmitted ::= { connUnitPortStatEntry 34 } LOSSOFSIGNALCOUNTER Object type connUnitPortStatCountLossofSignal Description The number of instances of signal loss detected at this port. This count is part of FC-PH's LESB.
Object type connUnitPortStatCountPRJTFrames Description The number of times that FRJT was returned to this port as a result of a frame being rejected at the destination N_Port. This is the total for all classes.
Configuring the Virtual Connect domain using the CLI Basic configuration A Virtual Connect domain consists of an enclosure and a set of associated modules and server blades that are managed together by a single instance of the VCM. The Virtual Connect domain contains specified networks, server profiles, and user accounts that simplify the setup and administration of server connections.
login as: • password: TACACS+ Authentication >ssh 192.168.0.120 login as: • password: Mechanism-based Authentication >ssh 192.168.0.120 login as: : password: Valid values for auth-mechanism are local, ldap, radius, and tacacs. • For example: >ssh 192.168.0.120 login as: tacacs: password: Role-based Authentication >ssh 192.168.0.
To enter OA credentials during import: >import enclosure username=Administrator password=myPassword To be prompted for a masked password: >import enclosure username=Administrator Password=***** Setting the domain name To set the domain name, use the set domain command: >set domain name=MyNewDomainName The Virtual Connect domain name must be unique within the data center, and can be up to 31 characters without spaces or special characters.
• • • o Configure role-based user authentication o Import enclosures o Name the VC domain o Set the domain IP address o Update firmware o Administer SSL certificates o Delete the VC domain o Save configuration to disk o Restore the configuration from a backup o Configure SNMP settings Network o Configure network default settings o Select the MAC address range to be used by the VC domain o Create, delete, and edit networks o Create, delete, and edit shared uplink sets o Create
To display LDAP settings and directory groups: >show ldap >show ldap-group Configuring RADIUS authentication support for users To set RADIUS properties: >set radius serveraddress=192.168.0.
>save ssl-csr address=ftp://user:password@192.168.10.12/new-ssl.csr CN=server.domain.com O=Hewlett-Packard C=US ST=CA L=Cupertino email=vc-admin@domain.com If the existing key is 1024 bits, a warning appears stating that a new key and certificate must be generated and the web server must be restarted. After you confirm this operation, a new key and certificate are generated and the web server restarts. The command pauses for 30 seconds to allow the web server to restart. 2.
IMPORTANT: Configuring Virtual Connect to assign server blade MAC addresses requires careful planning to ensure that the configured range of MAC addresses is used once within the environment. Duplicate MAC addresses on an Ethernet network can result in a server network outage. Each server blade Ethernet NIC ships with a factory default MAC address. The MAC address is a 48-bit number that uniquely identifies the Ethernet interface to other devices on the network.
1024 unique addresses might not be enough for a large configuration (multiple enclosures with many Flex-10 NICs). If you plan a domain of this type, determine the number of MAC addresses you are likely to use, and then select an option that provides the domain with sufficient MAC addresses. • User-defined MAC address range.
>add nag-network nag=NetGroup1 network=Net3,Net4,Net5 • To remove specified network members from the network access group, use the remove nag-network command: >remove nag-network nag=NetworkGroup1 network=Net4,Net5 Displaying network access groups To display network access groups, use the show network-access-group command: • • • Summary for all network access groups >show network-access-group Details for all network access groups >show network-access-group * Details for a network access group >show net
The specified network now belongs to the specified network access groups and is no longer the member of previously configured network access groups.
• Details for a single shared uplink set >show uplinkset MyUplinkSetName Adding uplink ports to a shared uplink set To add uplink ports to a shared uplink set, use the add uplinkport command: >add uplinkport enc0:1:2 uplinkset=MyUplinkSetName Creating a network that uses a shared uplink set To create a network that uses a shared uplink set, use the add network command: >add network MyNewNetworkName uplinkset=MyUplinkSetName vlanid=156 Creating multiple networks that use a shared uplink set To create mul
When assigning WWNs to FC HBA ports, Virtual Connect assigns both a port WWN and a node WWN. Because the port WWN is typically used for configuring fabric zoning, it is the WWN displayed throughout the Virtual Connect user interface. The assigned node WWN is always the same as the port WWN incremented by one. Virtual Connect assigns or migrates WWNs for server FC ports connected to HP Virtual Connect modules.
By configuring VCM to assign serial numbers, a profile can present a single serial number regardless of the physical server. With these configuration values added to server profiles, software that is licensed to a particular server, based on one or both of these values, can be migrated to new server hardware without re-licensing the software for the new server hardware. This feature prevents you from having to reinstall serial number sensitive software after a system recovery.
• For FCoE connections, VC provides the ability to assign VC-assigned WWN and MAC addresses and configure Fibre Channel boot settings and bandwidth. This protocol is only available on FlexFabric server connections. • For FC connections, VC provides the ability to assign VC-assigned WWN addresses and configure Fibre Channel boot settings. IMPORTANT: The term server blade also applies to HP Integrity multi-blade servers.
• iSCSI connections are not added to server profiles by default. You must add one or more iSCSI connections. The GUI enables the creation of iSCSI connections only if at least one Flex-10 or FlexFabric module exists in the domain. The CLI can be used to pre-provision this feature. iSCSI and FCoE connections cannot share the same physical Flex-10 port since they use the same physical function.
A server profile can be assigned and defined for each device bay so that the server blade can be powered on and connected to a deployment network. These profiles can then later be modified or replaced by another server profile. A server profile can also be assigned to an empty bay to enable deployment at a later date.
Adding a network access group to a profile To create a new profile and assign an existing network access group, use the add profile command: >add profile MyNewProfile2 Nag=DatabaseNetGroup To modify the network access group of an existing server profile, use the set profile command: >set profile Profile1 Nag=NetGroup1 Assigning a server profile to a device bay To assign a server profile to a specific device bay, use the assign profile command: >assign profile MyProfile enc0:1 When defining server profiles
Virtual Connect only transmits MAC Cache update frames on VLANs that have been configured in the VC domain. The update frames are VLAN tagged appropriately for networks defined on shared uplink sets. For dedicated networks, only untagged update frames are generated, regardless of whether or not VLAN Tunneling is enabled. In a VLAN tunnel, all customer VLAN tags pass through Virtual Connect transparently.
o Procurve Loop Protect frames When the network loop protection feature is enabled, any probe frame or other supported loop detection frame received on a downlink port is considered to be causing the network loop, and the port is disabled immediately until an administrative action is taken. The administrative action involves resolving the loop condition and clearing the loop protection error condition.
• Changing the Fabric connected to a Fibre Channel port • Changing the speed of a Fibre Channel port • Assigning or unassigning server profiles, if server factory defaults are used for MAC addresses and WWNs, BIOS Fibre Channel boot settings are used, and PXE is not being enabled or disabled (USE BIOS for all network connections) Exceptions for Flex-10 connection changes are specified in the following sections.
remain in the "profile recovered" state until the server is powered down or removed from the enclosure. This feature eliminates the power cycle requirement for a server to recover. General requirements for adding FC or FCoE connections Adding FC and FCoE connections is generally allowed during profile add and edit operations. It is not allowed in some specific cases.
4 Start with modules in Bays 3 and 4, create a profile (add 2 connections), install modules into Bays 5 and 6, then edit the profile. Port 1 2 3 4 Connected to — Bay 3 Bay 3 Bay 4 Bay 5 Bay 3 — Bay 4 — Bay 4 Bay 6 — Add connection is disallowed because the current FC module configurations do not match the existing connections in the profile. This profile is not useful after the hot-plug install. To resolve this issue, delete connections 3 and 4, save the profile, and then scenario 3 applies.
9 Start with FCoE-capable modules in Bays 1 and 2, then create a profile and add connections. Port 1 2 Connected to Bay 1 Bay 1 — Bay 2 — — Bay 2 — — — Port Connected to 1 Bay 1 2 Bay 2 3 Bay 1 4 Bay 2 5 Bay 1 6 Bay 2 7 Bay 1 8 Bay 2 Add connection, 6 times* 10 Port Start with 8 FCoE-capable 1 modules, then create a profile and add connections.
Operation Examples Display general domain settings >show domain Display predefined address pools >show domain addresspool Display interconnect modules • • • Display overall domain status Display stacking link configuration and status Summary display >show interconnect Detailed display >show interconnect * Single module display >show interconnect enc0:2 >show status >show stackinglink Display the system log >show systemlog Display a list of servers in the domain • • • Display server profiles
An FCoE-capable port that has an SFP-FC module connected that is not yet assigned to a fabric or network is designated for a network, and the status is "Incompatible." When a fabric is created on that port, the status changes to "Linked." • Unsupported—The port is populated with an SFP module that is not supported. For example: o An unsupported module is connected. o A 1Gb or 10Gb Ethernet module is connected to a port that does not support that particular speed.
The login should succeed after the Virtual Connect Manager restarts on the backup Virtual Connect Ethernet module. Allow up to 5 minutes, depending on the enclosure configuration. If the command line option -failover is not included in the reset vcm command or a backup Virtual Connect Ethernet module is not available, the command line displays the following message: SUCCESS: The Virtual Connect Manager is being reset. Please wait... You are logged out of the session after approximately 1 minute.
Appendix: Using Virtual Connect with nPartitions Understanding nPartitions The HP BL870c i4 or HP BL980c i4 servers can be partitioned into separate, smaller servers, called nPartitions, using iLO. Each nPartition is treated identically to a server of comparable size and type. The set of blades that are conjoined by a Blade Link is referred to as a Blade Link Domain. An nPartition must be wholly contained within a blade link domain. The configuration of nPars is explained below.
iLO controls the blade link to change the configuration of nPars in the blade link domain, and the information about the new configuration is communicated through the OA to VCM. During the process, VCM: • Removes profile connections from affected nPars • Updates its nPar configuration information • Applies profiles to the new or modified nPars Assigning a VC profile to an nPar When an i4 server is configured with multiple nPartitions, each nPartition must be assigned its own profile.
When the reconfiguration is done, the OA generates blade remove events for the first two blades, resulting in VCM treating the AA partition as having been removed. Then the OA generates a blade add event for the first blade that identifies it as a single-blade partition, and likewise for the second blade. No events (remove or add) occur for the third and fourth blades because the C and D partitions are not affected by the reconfiguration.
Support and other resources Before you contact HP Be sure to have the following information available before you call HP: • Active Health System log (HP ProLiant Gen8 or later products) Download and have available an Active Health System log for 3 days before the failure was detected. For more information, see the HP iLO 4 User Guide or HP Intelligent Provisioning User Guide on the HP website (http://www.hp.com/go/ilo/docs).
Acronyms and abbreviations BPDU Bridge Protocol Data Unit CHAP Challenge Handshake Authentication Protocol CHAPM Mutual Challenge Handshake Authentication Protocol CRC cyclic redundant checks DCBX Datacenter Bridging Capability Exchange protocol DCC device control channel DHCP Dynamic Host Configuration Protocol DNS domain name system EFI extensible firmware interface FC Fibre Channel FCoE Fibre Channel over Ethernet FCS Frame Check Sequence Acronyms and abbreviations 165
GMII Gigabit media independent interface HBA host bus adapter IGMP Internet Group Management Protocol iSCSI Internet Small Computer System Interface LDAP Lightweight Directory Access Protocol LESB Link Error Status Block LLC Logical Link Control LUN logical unit number MAC Media Access Control NPIV N_Port ID Virtualization OA Onboard Administrator PVST+ Per VLAN Spanning Tree (over standard 802.
RD receive data RMON remote monitoring SOAP Simple Object Access Protocol SSH Secure Shell SSL Secure Sockets Layer TACACS+ Terminal Access Controller Access Control System Plus TFTP Trivial File Transfer Protocol UDP User Datagram Protocol UUID universally unique identifier VC Virtual Connect VCEM Virtual Connect Enterprise Manager VCM Virtual Connect Manager VCSU Virtual Connect Support Utility VLAN virtual local-area network Acronyms and abbreviations 167
WWN World Wide Name WWPN worldwide port name Acronyms and abbreviations 168
Documentation feedback HP is committed to providing documentation that meets your needs. To help us improve the documentation, send any errors, suggestions, or comments to Documentation Feedback (mailto:docsfeedback@hp.com). Include the document title and part number, version number, or the URL when submitting your feedback.
Index A E activity command 20 adding FC connections 150, 155 adding FCoE connections 150, 155 all 19 assigned MAC addresses 141 authenticating users 137 authorized reseller 164 enclosure command 27 enet-connection command 28 enet-vlan 31 Ethernet module statistics descriptions 120 Ethernet network connections, adding to a profile 150 Ethernet network properties, modifying 143 Ethernet network, creating 143 Ethernet networks, displaying 143 Ethernet uplink and downlink ports 120 external-manager command 3
iscsi-connection command 48 P L parameters 12 port monitor 69 port status conditions 158 primary remote authentication method 137 private networks 61 profile command 71 properties 13 ldap command 51 ldap-certificate 52 ldap-group 53 link-dist-interval command 54 lldp command 55 local-users command 55 logging in 135 logging out 157 log-target 56 loop-protect command 58 M MAC address settings 140 MAC cache failover settings, configuring 151 mac-cache command 59 managed elements 17 mapping profile connect
stackinglink command 94 statistics 94 statistics descriptions 120 statistics-throughput command 96 status command 98 status, port 158 storage-management command 98 subcommands 17 support and other resources 164 Support-info 100 supporting comments and blank lines in CLI scripts 13 system log 100 systemlog command 100 T tacacs command 101 technical support 164 telephone numbers 164 U unassigning multiple profiles 14 understanding nPartitions 161 updated commands 7 uplink port properties, modifying 144 upli
