HP Virtual Connect Manager Command Line Interface for c-Class BladeSystem Version 3.30 User Guide Abstract This document contains user information for the HP Virtual Connect Manager version 3.30 CLI. This document is for the person who installs, administers, and troubleshoots servers and storage systems. HP assumes you are qualified in the servicing of computer equipment and trained in recognizing hazards in products with hazardous energy levels.
© Copyright 2011 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice. The only warranties for HP products and services are set forth in the express warranty statements accompanying such products and services. Nothing herein should be construed as constituting an additional warranty. HP shall not be liable for technical or editorial errors or omissions contained herein. Confidential computer software.
Contents Introduction .................................................................................................................................. 6 What's new ................................................................................................................................................. 6 Changes from VC 3.15 to 3.30........................................................................................................... 7 Virtual Connect overview ...................................
loop-protect ..................................................................................................................................... 57 mac-cache ....................................................................................................................................... 58 nag-network..................................................................................................................................... 58 network .........................................................
Common management operations.............................................................................................................. 151 Port status conditions ................................................................................................................................ 152 Resetting the Virtual Connect Manager ....................................................................................................... 153 Technical support ................................................
Introduction What's new The command line interface user guide contains the following changes for VC 3.
o loop-protect (on page 57) o nag-network (on page 58) o network-access-group (on page 64) o network-range (on page 65) o radius (on page 74) o radius-group (on page 75) o role (on page 76) o server-port-map-range (on page 83) o statistics-throughput (on page 92) o storage-management (on page 93) o tacacs (on page 96) Changes from VC 3.15 to 3.30 Command Changes Virtual Connect 3.15 Virtual Connect 3.
Command Changes Virtual Connect 3.15 Virtual Connect 3.30 interconnect The "add" and "set" subcommands were added to this command, enabling you to add an interconnect to an enclosure and set the interconnect host name, respectively. The new object "interconnect-mactable" is supported in VC 3.30, enabling you to view interconnect module MAC table information for a specified module. The new object "lldp" is supported in VC 3.30, enabling you to view LLDP information received on a specified port.
Command Changes Virtual Connect 3.15 Virtual Connect 3.30 show network The output for this command was modified. Configured values for the ConnectionMode, VLanTunnel, NativeVLAN, UplinkSet, and VLanID appeared for all networks. Configured values for ConnectionMode and VLanTunnel appear for UNSHARED networks only. Configured values for NativeVLAN, UplinkSet, and VLanID appear for SHARED networks only.
Command Changes Virtual Connect 3.15 Virtual Connect 3.30 help role show role set role The new object "role" is supported in VC 3.30, enabling you to manage the preferred authentication order for each VC user access role (privilege). The new object "server-port-map" is supported in VC 3.30, enabling you to manage ranges of shared server downlink port mapping configurations. The new object "statistics-throughput" is supported in VC 3.30, enabling you to manage the port throughput statistics.
Command Changes load load save load load save For these commands, New syntax not where one of the supported parameters is a URL, a new syntax is supported that contains the IP address, port number, and filename as a single string. The old syntax for these commands, where filename is a separate property, is still supported. ldap-certificate profile profile ssh ssl-certificate ssl-csr Virtual Connect 3.15 Virtual Connect 3.30 The old and new syntax are both supported.
BladeSystem c7000 enclosures and G6 or newer server blades with Virtual Connect firmware v3.15 and later. VC-Enet modules enable connectivity to all brands of data center Ethernet switches. VC-Enet modules can also be directly connected to other types of devices, such as printers, laptops, rack servers, and network storage devices. The VC-FC and FlexFabric modules enable connectivity of the enclosure to Brocade, Cisco, McDATA, or QLogic data center FC switches.
Command line overview The VCM Command Line Interface can be used as an alternative method for administering the VCM. Using the CLI can be useful in the following scenarios: • You can develop tools that utilize VCM functions for data collection and for executing provisioning and configuration tasks. • When no browser is available or you prefer to use a command line interface, you can access management data and perform configuration tasks. • You can batch commands using script files.
Options Options enable users to control certain behavior characteristics available during the command execution. Some examples of options include controlling output format and specifying a quiet mode to suppress interactive prompts. Distinguish options from other command line elements by using a preceding hyphen (-). Option arguments are required or optional, depending on the option being specified.
add profile Profile1;add network Network1;add uplinkset UplinkSet1 Supporting comments and blank lines in CLI scripts The CLI supports command scripts that contain blank lines and comments. Support for comments and blank lines enables you to maintain descriptive notes within the configuration script. The following sample script illustrates a CLI script that contains this type of formatting. All comment lines must begin with "#".
# Done!!! Unassigning multiple profiles The unassign profile command includes the ability to unassign multiple profiles from device bays with a single command. The following example illustrates four server profiles being unassigned from device bays with a single CLI command. If an operation fails on one of the device bays, an error message appears for that server or device bay, but the remaining operations continue.
IMPORTANT: To suppress prompting for a password during login, you must first setup the SSH encryption keys using the VCM Web GUI, and configure your SSH client properly with the keys. For additional information on configuring the SSH keys, see the HP Virtual Connect for c-Class BladeSystem User Guide. Remote access to the Virtual Connect Manager To access the VCM CLI remotely through any SSH session: 1. Using any SSH client application, start an SSH session to the Virtual Connect Manager. 2.
Command line Subcommands Command Description add Add a new object to the domain or to another object assign Assign a server profile to a device bay copy Copy a configuration from one server profile to another server profile delete Delete the domain configuration exit Exit the Virtual Connect Manager command-line shell help Display context-sensitive help for a command or object load Transfer a file from a remote location to the domain import Import an enclosure into the domain poweroff Pow
Managed element fc-connection (on page 36) fcoe-connection (on page 39) firmware (on page 42) igmp (on page 42) Description Manage Fibre Channel SAN fabric connections Manage FCoE SAN fabric connections Manage interconnect module firmware Manage Ethernet IGMP Snooping settings igmp-group (on page 42) Display interconnect module IGMP Group table information interconnect-mac-table (on page 45) Display interconnect module MAC table information interconnect (on page 43) Manage I/O interconnect modules
Managed element Description supportinfo (on page 95) Manage Virtual Connect support information tacacs (on page 96) Manage TACACS+ authentication settings systemlog (on page 95) Display Virtual Connect Manager system event log uplinkport (on page 97) Manage interconnect module uplink ports user (on page 101) Manage local Virtual Connect user configurations uplinkset (on page 99) Manage shared uplink port sets user-security (on page 103) Manage user security settings version (on page 20) Dis
Supported actions: add, help, remove, show Item Description add banner Add banner text to the login screen. After banner text is added, the login banner appears and all users are prompted for a yes or no response. If the response is “yes”, users can continue with login. If the response is "no", the VCM CLI exits. add banner text=[””|’’] Syntax Properties text (required) Examples The text to display on the login in screen.
Any user- or VC-defined MAC addresses, WWNs, and logical serial numbers will not appear in the output to avoid duplicating these values. Supported actions: help, show Item Description show config Generate a configuration script from the running domain. Syntax show config Example ->show config Displays the configuration script for the running domain configbackup Manage the domain configuration file.
Item Description ->restore configbackup address=ftp://user:password@192.168.10.12/ ignoreenclosureid=true Restores a configuration backup file from a remote FTP server and ignores the serial number ->restore configbackup address=ftp://user:password@192.168.10.12/ ignorefwversion=true Restores a configuration backup file from a remote FTP server and ignores the firmware version ->restore configbackup address=ftp://user:password@192.168.10.
Item Description ->save configbackup -maskEncryptKey address=ftp://user:password@192.168.10.12/ Saves a configuration backup file to a remote FTP server with a masked encryption key devicebay Manage general enclosure device bay settings and information. Supported actions: help, show Item Description show devicebay Display device bays of all enclosures that exist in the Virtual Connect domain.
Item Examples Description ->delete domain Deletes the Virtual Connect domain configuration and prompts for user confirmation ->delete domain -quiet Deletes the Virtual Connect domain quietly without prompting for user confirmation (primarily used in automated scripting scenarios) Item Description set domain Modify general Virtual Connect domain configuration properties, such as the domain name, domain IP address, and MAC and WWN address pool settings.
Item Description WwnStart (Required if WwnType is User-Defined) WwnEnd (Required if WwnType is User-Defined) SingleDense (optional) The starting WWN address in a custom user-defined range. This property is valid only if the WwnType is set to "User-Defined". Examples The ending WWN address in a custom user-defined range. This property is valid only if the WwnType is set to "User-Defined".
enclosure Manage general enclosure settings and information. Supported actions: help, import, remove, show Item Description import enclosure Import local and remote enclosures into the Virtual Connect domain. Virtual Connect supports up to four c7000 enclosures in a single domain. import enclosure [] [UserName=] [Password=] [DoubleDense=] For enclosures that are not imported, the password field is optional.
Item Description EnclosureID (required) The enclosure ID of the remote enclosure to be removed from the domain. Use "*" to remove all remote enclosures in the domain. The enclosure IDs can be identified for a particular enclosure by using the show enclosure command. The local enclosure cannot be removed from the domain with this command.
Item Description AddressType (optional) The source of MAC address assignments to be used during the creation of the new connection. If not specified, the default is the domain default. If "User-Defined" is specified, both an Ethernet MAC Address and iSCSI MAC Address must also be specified. Valid values include "Factory-Default" and "User-Defined".
Item Description Parameter ProfileName (required) The name of the profile from which the Ethernet connection is removed Example ->remove enet-connection MyProfile Removes an Ethernet network connection from a profile Item Description set enet-connection Modify an Ethernet connection of a server profile.
Item Description Syntax show enet-connection [] Parameter ConnectionID (optional) The ID of an existing Ethernet connection. The ID format is . Use to display all profile Ethernet connections. Use "*" to display all connections in the domain.
Item Description (optional) 'Legacy' mode allows up to 320 VLANs per module and 28 VLANs per server connection. All VC-Enet modules are supported. This is the default setting. 'Expanded' mode allows up to 1000 VLANs per domain and 162 VLANs per physical server port. 1/10Gb Ethernet modules are NOT supported. UplinkResources (optional) The number of VLAN translations allocated to the uplinks. This attribute can be set only when VlanCapacity is "Extended".
Item Description MacType (optional) The type of MAC address source to use for assignment. Valid values include "Factory-Default" and "User-Defined". MacStart (required if the MacType is User-Defined) MacEnd (required if the MacType is User-Defined) WwnType (optional) The starting MAC address in a custom user-defined range. This property is valid only if the MacType is set to "User-Defined".
Item Description Examples ->set external-manager UserName=A17005068 Enabled=false Disables the external manager ->set external-manager UserName=A17005068 Enabled=true Enables the external manager Item Description show external-manager Display the information of an existing external manager. show external-manager Syntax Example ->show external-manager Displays the information of an existing external manager fabric Manage Fibre Channel SAN fabrics.
Item Description ->add Adds a ->add Adds a ->add Adds a ->add Adds a Item remove fabric fabric MyFabric1 Bay=3 Ports=1,2 new fabric, using default values fabric MyFabric2 Bay=3 Ports=1 Speed=2Gb new fabric with speed set to 2Gb fabric MyFabric3 Bay=3 Ports=1,2,3,4 LinkDist=Auto new fabric with automatic login re-distribution fabric MyFabric4 Bay=3 Ports=1,2 new fabric with two logical ports Description Remove an existing fabric from the domain.
Item Description For HP VC FlexFabric 10Gb/24-port Modules, port numbers 1, 2, 3, and 4 correspond to ports X1, X2, X3, and X4, respectively.
Item Description supported speed values include "Auto","1Gb","2Gb", "4Gb", and "Disabled". If the value is set to 8Gb, the speed is auto-negotiated by Virtual Connect. AddressType (optional) The source of WWN address assignments to be used during the creation of the new connection. If not specified, the default is the domain default. If "User-Defined" is specified, then both a Port WWN and Node WWN must also be specified. Valid values include "Factory-Default" and "User-Defined".
Item Properties Fabric (optional) Description The name of the FC SAN fabric to associate with the connection. The fabric being specified should be associated with the same bay as the FC connection. A blank string makes the FC connection unassigned. Speed (optional) The port speed of the FC SAN connection. Valid values include "Auto", "8Gb", "4Gb", "2Gb", "1Gb", and "Disabled".
Item Description ->show Displays ->show Displays fc-connection Profile1:* all FC SAN connections of a profile named Profile1 fc-connection Profile1:1 a specific FC SAN connection of a profile named Profile1 fcoe-connection Manage FCoE connections. Supported actions: add, help, remove, set, show Item Description add fcoe-connection Add a new FCoE connection to an existing server profile. For more information, see "General requirements for adding FC or FCoE connections (on page 149).
Item Description ->add fcoe-connection MyNewProfile Fabric=SAN_5 Adds a new FCoE connection to a profile ->add fcoe-connection MyNewProfile Fabric=SomeFabric SpeedType=4Gb Adds a new FCoE connection and configures the port speed ->add fcoe-connection MyNewProfile Adds a new FCoE connection and leaves it unassigned ->add fc-connection MyNewProfile Fabric=MyFabric SpeedType=Custom CustomSpeed=5000 Adds a new FCoE connection and sets a custom speed of 5Gb ->add fcoe-connection MyNewProfile WWNAddressType=Fact
Item Description increments. CustomSpeed (required if the SpeedType is Custom) The user-defined speed for the server port. Valid values include 100Mb to 10Gb configured in 100Mb increments. BootPriority (optional) Controls whether the FCoE HBA port is enabled for SAN boot and affects the BIOS boot order. Valid values include "BIOS", "Primary", "Secondary", and "Disabled".
firmware Display the Virtual Connect interconnect module firmware version. Support actions: help, show show firmware Syntax Examples Display the firmware information for all interconnect modules in the domain. show firmware ->show Displays ->show Displays firmware a summary listing of all firmware firmware * a detailed listing of all firmware To update firmware, use the HP BladeSystem c-Class Virtual Connect Support Utility.
Item Description show igmp-group Syntax Display interconnect module IGMP Group table information for the specified module. show igmp-group Parameter ModuleID (required) The ID of the module for which to display the IGMP Group table. The ID is in the format of :. Example ->show igmp-group enc0:1 Displays the IGMP Group information for the module in bay 1 of enclosure enc0 interconnect Manage I/O interconnect modules.
Item Examples Description ->remove interconnect enc0:2 Removes the interconnect module in bay 2 from the domain ->remove interconnect * Removes all interconnect modules from the domain that are not present physically in any enclosure ->remove interconnect enc0:* Removes all interconnect modules that are not physically present in a specific enclosure ->remove interconnect *:2 Removes all interconnect modules in a specific bay from the domain that are not physically present in any enclosure Item Descriptio
Item Description interconnect bay number 5 ->show interconnect enc0:* Displays interconnect modules in all bays of a specific enclosure ->show interconnect enc0:3 Displays detailed information on a specific interconnect module in interconnect bay 3 of the primary enclosure interconnect-mac-table Display interconnect module MAC table information. Supported actions: help, show Item Description show interconnectmac-table Display interconnect module MAC table information for the specified module.
Item Description [TargetName=] [TargetIP=] [TargetPort=] [TargetIP2=] [TargetPort2=] [Authentication=] [Username=] [Secret=] [MutualUsername=] [MutualSecret=] [iSCSIBootParamDHCP=] [NetworkParamDHCP=] [DHCPVendorID=] Parameter ConnectionID (required) Options maskSecret (optional) maskMut
Item Description TargetPort2 (required if TargetIP2 is specified) The TCP port associated with the alternate target IP address. The default value is 3260. Authentication (optional) The initiator and target must agree on an authentication method, or the iSCSI initiator cannot log in to the target. Supported values include "None", "CHAP", and "CHAPM". The default value is "None". Username (required if The user name for authentication.
Item Description ->set iscsi-boot-param MyProfile1:1 -maskSecret -maskMutualSecret Authentication=CHAPM Username=SomeUserName MutualUsername=SomeMutualUsername ISCSIBootParamDHCP=Enabled NetworkParamDHCP=Enabled DHCPVendorID=SomeVendorIDValue Configures CHAP secret and CHAPM secret values as a masked string Item Description show iscsi-boot-param Display the basic iSCSI boot parameters configured on the specified iSCSI connection.
Item Description SpeedType (optional) The requested operational speed for the server port. Valid values include "Auto", "Preferred", and "Custom". The default value is "Preferred". If the speed type is "Auto", the maximum port speed is allocated but is constrained by the maximum configured speed for the network. If the speed type is "Preferred", the speed of the network is the same as the preferred speed of the network to which the connection is associated.
Item Properties Network (optional) Description The name of an existing network to associate with the connection. If the network name is not specified or is unassigned, it can be assigned later. SpeedType (optional) The requested operational speed for the server port. Valid values include "Auto", "Preferred", and "Custom". The default value is "Preferred". If the speed type is "Auto", the maximum port speed is allocated, constrained by the maximum configured speed for the network.
Supported actions: help, set, show Item Description set ldap Modify and test the Virtual Connect LDAP directory server authentication settings. Syntax set ldap [-test] [Enabled=] [LocalUsers=] [NtAccountMapping=] [ServerAddress=] [SslPort=] [SearchContext1=] [SearchContext2=] [SearchContext2=] Option Test (optional) Tests the LDAP configuration without applying changes.
ldap-certificate View and upload LDAP certificates from a remote FTP server. Supported actions: help, load, remove, show Item Description load ldap-certificate Download an LDAP certificate from a remote FTP server and apply it to the VC domain.
Item Examples Description ->show Displays ->show Displays ->show Displays ldap-certificate a summary of all LDAP certificates ldap-certificate * detailed information for all LDAP certificates ldap-certificate B4:02:C0:29:B5:E5:B4:81 detailed information for a specific LDAP certificate ldap-group Manage Virtual Connect directory groups. Supported actions: add, help, remove, set, show Item Description add ldap-group Add a new directory group to the directory services configuration.
Item Description Syntax set ldap-group [Description=] [Privileges=] Parameter GroupName (required) The name of an existing group to modify Properties A user-friendly description for the group Description (optional) Privileges (optional) A set of one or more privileges for the group. Valid values include any combination of "domain", "server", "network", and "storage". Separate multiple values with commas.
Item Description show link-dist-interval Display the FC login re-distribution interval for uplinks that are part of a fabric configured for Automatic login redistribution. show link-dist-interval Syntax Example ->show link-dist-interval Displays the FC login re-distribution interval lldp Display LLDP information received on a specified port. Supported actions: help, show Item Description show lldp Display LLDP information received on the specified port.
Item Description Port (optional) The port to be used on the destination to send the log messages. Valid values include 1 to 65536. The default value is 514. Security (optional) Secure transmission of the log messages. Valid values include "None" and "STunnel". The default value is "None", and no encryption is used during transmission. The "STunnel" option can be used only if the transport protocol is set to "TCP". Format (optional) The timestamp format for the log messages.
Item Description (Nov 26 13:15:55) and "ISO8601" (1997-07-16T19:20:30+01:00). The default value is "RFC3164". State (optional) Examples Enables or disables the remote log destination. Valid values include "Enabled" and "Disabled". The default value is "Disabled". ->set log-target 1 Severity=Error Transport=TCP Security=STunnel Modifies log-target index number 1 ->set log-target 1 Destination=192.168.3.
Item Description quiet (optional) Suppresses user confirmation prompts Properties Enabled (required) Example Enables or disables network loop detection and protection. Valid values include "true" and "false". ->set loop-protect Enabled=true Enables loop protection Item Description show loop-protect Display the loop protection configuration and all Ethernet ports currently disabled due to protection enforcement.
Supported actions: add, help, remove, show Item Description add nag-network Add one or more networks to a network access group. Any network access groups previously configured for the network remain. add nag-network Nag= Network=[,,...
Item Description network to network access group associations appears.
Item Description the network is a shared network. Private (optional) Enables or disables the network to act as a private network. Valid values are "Enabled" and "Disabled". The default value is "Disabled". ConnectionMode (optional) Specifies the connection type that is formed when multiple ports are added to the network. Valid values include "Auto" and "Failover". The default value is "Auto". VLanTunnel (optional) Enables or disables VLAN tag tunneling.
Item Examples Description ->remove network MyNetwork Removes a specified network ->remove network * Removes all networks Item Description set network Modify an existing Ethernet network. set network [-quiet] [State=] [SmartLink=][NativeVLAN=] [Private=] [Nags=[,,...
Item Description MaxSpeedType (Optional) The maximum connection speed for any Ethernet connection attached to this network. Valid values include "Unrestricted" and "Custom". "Custom" enables you to configure the preferred speed. The default value is "Unrestricted". MaxSpeed (required if MaxSpeedType is "Custom) The maximum connection speed for any Ethernet connection attached to this network. Valid values range from 100Mb to 10Gb in 100Mb increments.
network-access-group Manage network access groups. Supported actions: add, help, remove, set, show Item Description add networkaccess-group Create a new network access group. After the network access group is created, it can be added to a network. The maximum supported number of network access groups is 128. add network-access-group Syntax Parameter Name (required) Example The unique name of the new network access group to create. Valid characters include alphanumeric, "_", "-", and ".".
Item Description Name (optional) The name of an existing network access group in the VC domain. Use "*" to display a detailed view of all the network access groups. If not specified, a summary view of all network access groups appears.
Item Description MaxSpeedType (Optional) The maximum connection speed for any Ethernet connection attached to these networks. Valid values include "Unrestricted" and "Custom". "Custom" enables you to configure the preferred speed. The default value is "Unrestricted". MaxSpeed (required if MaxSpeedType is "Custom") The maximum connection speed for any Ethernet connection attached to these networks. Valid values range from 100Mb to 10Gb in 100Mb increments.
Item Description set network-range Change the configuration of multiple networks in a shared uplink set. set network-range [-quiet] UplinkSet= VLANIds= [State=] [PrefSpeedType=] [PrefSpeed=<100Mb-10Gb in 100Mb steps>] [MaxSpeedType=] [MaxSpeed=<100Mb-10Gb in 100Mb steps>] [Nags=[,...] [SmartLink=] [Labels=[,...
port-monitor Manage port monitor configuration. Supported actions: help, add, remove, set, show Item Description add port monitor Add a new network analyzer port and other ports to be monitored. add port-monitor [AnalyzerPort=] [Speed=] [Duplex=] [MonitorPort=] [Direction=] Syntax Properties AnalyzerPort (optional) The uplink port that is used for monitoring network traffic.
Item Description Removes the network analyzer from the configuration ->remove port-monitor AnalyzerPort=* Removes all network analyzer ports from the configuration ->remove port-monitor monitorPort=enc0:1:1 Removes a specific server port from the monitored port list ->remove port-monitor monitorPort=* Removes all monitored ports Item Description set port-monitor Modify an existing port monitor configuration.
profile Manage server profiles. Supported actions: add, assign, copy, help, load, remove, save, set, show, unassign Item Description add profile Create a new server profile. After the profile is created, the profile can be configured using the "set" subcommand, and additional network, fabric, and FCoE connections can also be added. The server profile can also be assigned to a device bay using the assign subcommand.
Item Description access group ->add profile MyNewProfile SNType=User-Defined SerialNumber=VCX0113121 Creates a new profile and specifies a custom virtual serial number ->add profile MyNewProfile SNType=Factory-Default Creates a new profile and uses the factory assigned serial number ->add profile MyNewProfile SNType=User-Defined SerialNumber=VCX0113121 UUID=15713c60-fcf2-11dc-a656-0002a5d5c51b Creates a new profile and specifies a custom virtual serial number and UUID Item Description assign profile As
Item Description Parameter ProfileName (required) An existing and unassigned profile with no EFI data Properties address (required) filename (required) Examples A valid IPv4 address or host name of the FTP server, including user name and password The name of the file on the FTP server from where EFI data has to be loaded. The filename can also be mentioned separately. The file path given will be treated as relative to the login directory for the user on the FTP server.
Item Examples Description ->save profile Profile_1 address=ftp://user:password@192.168.10.12/new-profile-data Transfer a profile EFI data object file to a remote server ->save profile Profile_1 address=ftp://user:password@192.168.10.12 filename=/new-profile-data Transfer a profile EFI data object file to a remote server Item Description set profile Syntax Modify properties of an existing server profile.
Item Description ProfileName (required) The name of a server profile that is currently assigned to a device bay Example ->unassign profile MyProfile1 Unassigns a server profile from a device bay radius Manage RADIUS authentication settings. Supported actions: help, set, show Item Description set radius Modify and test the Virtual Connect RADIUS authentication settings.
Item Description ServerKey=test123 SecondaryServerAddress=radserver.hp.com SecondaryServerKey=test456 Enables RADIUS authentication for users Item Description show radius Display the Virtual Connect RADIUS authentication settings. show radius Syntax Example ->show radius Displays RADIUS information radius-group Manage Virtual Connect RADIUS groups. Supported actions: add, help, remove, set, show Item Description add radius-group Add a RADIUS group.
Item Description ->remove radius-group MyGroup Removes a specified RADIUS group ->remove radius-group * Removes all RADIUS groups Item Description set radius-group Syntax Modify the properties of an existing RADIUS group.
Item Description RoleName (required) The VC privilege/role for which the existing authentication order is to be set. Valid values are "domain", "network", "server", and "storage". Property Order (required) Examples The order of authentication to be set for a given role, specified as one or more authentication methods separated by a comma. The format is . Valid values are "ldap", "radius", "tacacs", and "local".
Item Description ForceOnTimeout Attempts a graceful shutdown, but if the server does not shut down within the timeout period (60 seconds by default), the server is forced to power off. Timeout Specifies the timeout period (in seconds) to wait for the operation to complete (per server). The default timeout is 60 seconds. loss on the server.
Item Parameter ServerID (required) Options Force Description The ID of a server in the domain. The format of the server ID is . If the EnclosureID is not specified, the local enclosure is used by default. Use "*" to reboot all servers in the domain. For a multi-blade server, the ServerID must be that of the monarch bay. This is the ID displayed by the show server command. Forces a reboot operation without waiting for the operating system to shut down gracefully.
serverid Manage virtual server ID configuration settings. Supported actions: help, set, show Item Description set serverid Modify virtual server ID domain settings. The serial number attributes can be changed only in one of the following scenarios: • • Syntax The virtual server ID source type is "Factory-Default". The virtual server ID source type is "VC-Defined" or "User-Defined", but no profiles are using server IDs from this source.
Supported actions: help, show Item Description show server-port Display physical server port information. If the port is unlinked and no connectivity exists, the cause is displayed. For more information about possible causes, see "Port status conditions (on page 152)." show server-port [] Syntax Parameter PortID (Optional) Examples The reference of a port mapping ID. The PortID format is . The PortID can be referenced from the ID column in the summary.
Item Description Examples ->add server-port-map MyProfile:1 Network1 VLanID=100 Adds a new server port to dedicated network mapping ->add server-port-map MyProfile:2 RedNetwork Uplinkset=MyUplinkSet1 Adds a new server port to shared network mapping ->add server-port-map MyProfile:3 GreenNetwork Uplinkset=MyUplinkset1 UnTagged=true Adds a new server port to shared network mapping and enables untagged packet handling Item Description remove server-port-map Remove a server port network mapping.
Item Description ->set server-port-map MyProfile:1 Network1 Untagged=true Modifies the existing server port network mapping to handle untagged packets Item Description show server-port-map Display a server port network mapping. Syntax show server-port-map [ | *] Parameter ConnectionID (optional) The ID of an existing Ethernet connection associated with a profile and a server port. The format of the ConnectionID is .
Item Description ->add server-port-map-range MyProfile:2 UplinkSet=MyUplinkSet2 VLanIds=1-20 MatchUplinkSet=true Adds multiple networks to a server-port-map and locks VLANs to an uplink set Item Description remove server-portmap-range Remove one or more server port network mappings. Syntax Parameters ConnectionId (required) VLANIDs (required) remove server-port-map-range VLANIds= The ID of an existing Ethernet connection associated with a profile and a server port.
Item Description ->set snmp enet ReadCommunity=mydatacenter1 SystemContact=admin@datacenter1.com Enabled=true Enables the SNMP agent for VC-Enet modules and supplies a community string ->set snmp fc ReadCommunity=mydatacenter SystemContact=FcAdmin Enabled=true Enables the SNMP agent for VC-FC modules Item Description show snmp Display the SNMP configuration settings for the VC domain. show snmp [Type] Syntax Parameter Type (optional) Examples Indicates the type of SNMP configuration to display.
Item Description DomainCategories The Virtual Connect domain trap categories to send to the destination. Valid values are "Legacy", "DomainStatus", "NetworkStatus", "FabricStatus", "ProfileStatus", "ServerStatus", "EnetStatus", FcStatus", "All", and "None". Multiple categories can be specified, separated by commas. EnetCategories The Virtual Connect Ethernet trap categories to send to the destination. Valid values are "PortStatus", "PortThreshold", "Other", "All", and "None".
Item Description Community (optional) The SNMP community name string for the specified trap. For VC-Enet modules, the maximum string length is 39. For VC-FC modules, the maximum string length is 24. If not specified, the default community name is "public". Format Format of the new trap. Valid values are "SNMP1v" and "SNMPv2". The default is "SNMPv1". Severity Trap severities to send to the destination.
ssh Manage SSH configuration and information. Supported actions: help, load, remove, show Item Description load ssh Transfer the SSH key from a remote FTP server and apply it to the Virtual Connect domain. A customized SSH key enables additional security for SSH clients that are allowed to access the domain configuration. If a new custom SSH key is applied, the SSH clients must be configured correctly to have access. This command loads an SSH key for the current user only.
ssl Allow or disallow SSL encryption (browser/SOAP). Supported actions: set, show, help Item Description set ssl Allow modifications to be made to the SSL configuration, and enable or disable string encryption for SSL communication with the web server. set ssl Strength=[] Syntax Property Strength (required) Examples The strength of the encryption cipher. Valid values include "All" and "Strong". The default value is "Strong".
Item Description ->load ssl-certificate Address=ftp://user:password@192.168.10.12/ my-new-ssl.crt Transfers a new custom SSL certificate from the remote FTP server ->load ssl-certificate Address=ftp://user:password@192.168.10.12 Filename=my-new-ssl.crt Transfers a new custom SSL Certificate from the remote FTP server Item Description show ssl-certificate Display the Virtual Connect web server SSL certificate information. Use "*" to display detailed SSL certificate information.
Item Description ->save ssl-csr address=ftp://user:password@192.168.10.12 filename=new-ssl.csr Generates and transfers an SSL CSR and saves with a new filename stackinglink Display stacking link information and status. Supported actions: help, show Item Description show stackinglink Display stacking links and their status. show stackinglink Syntax Example ->show stackinglink Displays a summary listing of all stacking links and status statistics Manage statistics for interconnect module ports.
Item Description the local enclosure In addition to the standard statistics, Virtual Connect also provides additional information on DCBX. DCBX is the data center discovery and capability exchange protocol used by DCB devices to exchange configuration information with directly-connected peers. The protocol can also be used for misconfiguration detection and for configuration of the peer.
Item Description of ::. Port throughput collection must be enabled for the domain by issuing the set statistics-throughput command. A column that contains an "R" indicates that the statistics were reset by the user during that time period, therefore the throughput is not available.
Item Description username (required) An administrator for the storage management password (optional) Examples The user password. The password can be entered as clear text in the command. If you do not specify the password, you are prompted to enter the password as a masked string at the prompt. ->add storage-management SMName ip=16.89.125.10 username=user1 password=pass1 Adds iSCSI storage management records with password entered as clear text ->add storage-management SMName ip=16.89.125.
Item Description Syntax show storage-management [|*] Parameter name (optional) Example The name of the existing storage management information in the domain. Use "*" to display detailed information for all storage management records. If no value is specified, a summary of all storage management records appears.
Item Description Pause The number of records to be viewed before prompting for a key press. Valid values include numbers between 1 and 40.
Item Description SecondaryServerKey (optional) The plain-text string used to encrypt user details exchanged with the secondary TACACS server. It must match the server key configured for this VC on the secondary server. TACACS authentication will not work if the server key is blank or null. SecondaryTimeout (optional) The timeout value in seconds for TACACS communication with the secondary server LoggingEnabled (optional) Enables or disables command logging on the TACACS+ server.
Item Description Role (optional) The role played by the port if the connection mode of the network or shared uplink set is selected as "Failover". Valid values include "Primary" and "Secondary". The default is "Primary".
Item Description If no connector is present on the uplink port, only "Auto" and "Disabled" can be configured as the speed. Speed restrictions apply. Role (optional) Examples The role played by the port if the connection mode of the network or shared uplink set is selected as "Failover". Valid values are "Primary" and "Secondary". The default value is "Primary".
Item Description add uplinkset Syntax Create a new shared uplink set. add uplinkset [ConnectionMode=] Parameter UplinkSetName (required) The unique name of the new shared uplink set to create Property ConnectionMode (optional) Examples Specifies the connection type that is formed when multiple ports are added to the shared uplink set. Valid values include "Auto" and "Failover". The default value is "Auto".
Item Description set uplinkset Syntax Modify an existing shared uplink port set. set uplinkset [Name=] [ConnectionMode=] Parameter UplinkSetName (required) The name of an existing shared uplink set to modify Properties Name (optional) ConnectionMode (optional) The new name of the shared uplink set Specifies the connection type that is formed when multiple ports are added to the shared uplink set. Valid values include "Auto" and "Failover".
Item FullName (optional) Description The full name of the user ContactInfo (optional) Enabled (optional) Contact information for the user Privileges (optional) The allowed privileges for the user. The privileges can be any combination of "domain", "server", "network", or "storage" separated by commas. If no privileges are specified, the user can view domain information only. Use "*" to specify all privileges. Enables or disables the user. Valid values include "true" and "false".
Item Description privileges. Examples ->set user steve Password=fgY87hHl Modifies an existing user password ->set user steve Password Modifies an existing user password, masked at the prompt ->set user bill Password=HGtwf7272562 Privileges="domain,network" FullName="Bill Johnson" ContactInfo=billj@company.com Enabled=true Modifies several properties of an existing user ->set user tom privileges=* Gives a user all privileges Item Description show user Display user summary or user details.
Item Description Modifies the minimum password length Item Description show user-security Display general domain user security settings. Syntax show user-security Example ->show user-security Displays user security settings vcm Reset the Virtual Connect Manager. Supported actions: help, reset Item Description reset vcm Syntax Reset the Virtual Connect Manager. A failover to the backup VCM can also be specified (optional), if a backup VCM is available.
Command Element Domain Network Server Storage All access ldap-group X — — — — radius-group X — — — — log-target X — — — — nag-network — X — — — network — X — — — network-access-group — X — — — port-monitor — X X — — profile — — X — — server-port-map — — X — — snmp-trap X X — — — uplinkport — X — — — uplinkset — X — — — user X — — — — assign profile — — X — — — — X — — delete domain X — — — — X X X X X
Command reset save set Element Domain Network Server Storage All access ldap-certificate X — — — — ldap-group X — — — — radius-group X — — — — log-target X — — — — nag-network — X — — — network — X — — — network-access-group — X — — — port-monitor — X X — — profile — — X — — server-port-map — — X — — snmp-trap X X — — — ssh X — — — — uplinkport — X — — — uplinkset — X — — — user X — — — — loop-protect — X —
Command show Element Domain Network Server Storage All access ldap X — — — — ldap-group X — — — — radius X — — — — radius-group X — — — — tacacs X — — — — role X — — — — link-dist-interval — — — X — log-target X — — — — loop-protect — X — — — mac-cache — X — — — network — X — — — network-access-group — X — — — port-monitor — X X — — profile — — X — — serverid — — X — —— server-port-map — — X snmp X X — —
Command Element Domain Network Server Storage All access fcoe-connection X X X X X firmware X X X X X igmp X X X X X igmp-group X X X X X interconnect X X X X X interconnect-mac-table X X X X X iscsi-boot-param X X X X X iscsi-connection X X X X X storage-management X X X X X ldap X X X X X ldap-certificate X X X X X ldap-group X X X X X radius X X X X X radius-group X X X X X tacacs X X X X X role X X X X X
Command Element Domain Network Server Storage All access ssl-certificate X X X X X stackinglink X X X X X statistics X X X X X statistics-throughput X X X X X status X X X X X systemlog X — — — — uplinkport X X X X X uplinkset X X X X X user X — — — — user-security X X X X X version X X X X X test log-target X X X X X snmp-trap X X X X X unassign profile — — X — — Help subsystem The help subsystem consists of three op
Supported Subcommands: help show ----------------------------------------------------------------------->show devicebay -help Description: This command displays all device bays in the domain Syntax: show devicebay [ | *] Parameters: DeviceBayName : The reference name of a device bay in the domain.
Interactive user output format The interactive user output format provides a user friendly view of information at the command line. When providing an overview, or listing, of several instances of data, a tabular text format is displayed. If an individual instance of data is being displayed, then the stanza format is used.
->show user UserName Privileges FullName ContactInfo Enabled * : : : : : Administrator domain,server,network,storage Steve Johnson steve.johnson@hp.com true UserName Privileges FullName ContactInfo Enabled : : : : : Admin domain,server,network,storage Admin Admin true UserName Privileges FullName ContactInfo Enabled : : : : : steve domain,server,network,storage Steve Johnson steve.johnson@hp.com true UserName Privileges FullName ContactInfo Enabled : : : : : brad domain,server Brad Mills brad.
When scripting CLI commands, only a single scripting client should perform remote management operations to a remote VC Manager. If multiple scripting clients are used to perform a heavy load of CLI commands to a single VC Manager, some management commands might fail. In some cases, the primary module might need to be reset to recover properly. • Script1 Output Format The script1 output format can be used to format the output using a name-value pair format, using an equal sign as the delimiter.
Admin;domain,server,network,storage;Admin;Admin;true steve;domain,server,network,storage;Steve Johnson;steve.johnson@hp.com;true Example 5: Scriptable output format displaying a single user (with table header) ->show user steve -output=script2 UserName;Privileges;FullName;ContactInfo;Enabled steve;domain,server,network,storage;Steve Johnson;steve.johnson@hp.
Statistics descriptions Ethernet modules Ethernet uplink and downlink ports Name RFC Description rfc1213_IfInDiscards 1213 The number of inbound packets discarded to prevent delivery to a higher-layer protocol even though no errors were detected. These packets can be discarded to make buffer space available.
Name RFC Description rfc1213_IpInHdrErrors 1213 The number of input datagrams discarded due to errors in the IP header. Possible errors include bad checksums, version number mismatches, format errors, time-to-live exceeded, errors discovered while processing IP options, and so on.
Name RFC Description rfc1757_StatsFragments 1757 The total number of packets received that were less than 64 octets in length (excluding framing bits, but including FCS octets) and had either a bad FCS with an integral number of octets (FCS Error) or a bad FCS with a non-integral number of octets (Alignment Error). It is entirely normal for etherStatsFragments to increment, because it counts both runts (which are normal occurrences due to collisions) and noise hits.
Name RFC Description rfc1757_StatsPkts65to 127Octets 1757 The total number of packets (including bad packets) received that were between 65 and 127 octets in length inclusive (excluding framing bits, but including FCS octets) rfc1757_StatsTXNoErrors 1757 All packets transmitted without error, not including oversized packets rfc1757_StatsUndersize Pkts 1757 The number of packets received during the sampling interval that were less than 64 octets long (excluding framing bits, but including FCS octe
Name RFC Description rfc2233_IfHCOutUcastPkts 2233 The total number of packets that higher-level protocols requested to be transmitted but were not addressed to a multicast or broadcast address at this sublayer, including those packets that were discarded or not sent. This object is a 64-bit version of ifOutUcastPkts. Discontinuities in the value of this counter can occur at reinitialization of the management system and at other times as indicated by the value of ifCounterDiscontinuityTime.
Name RFC Description rfc2665_Dot3Stats ExcessiveCollisions 2665 The number of frames for which transmission on a particular interface fails due to excessive collisions. This counter does not increment when the interface is operating in full-duplex mode. Discontinuities in the value of this counter can occur at reinitialization of the management system and at other times as indicated by the value of ifCounterDiscontinuityTime.
Name RFC Description rfc2665_Dot3StatsLate Collisions 2665 The number of times that a collision is detected on a particular interface later than one slotTime into the transmission of a packet. A late collision included in a count represented by an instance of this object is also considered a generic collision for purposes of other collision-related statistics. This counter does not increment when the interface is operating in full-duplex mode.
Name RFC Description fcBBCreditFrameFailures N/A The number of times that more frames were lost during a credit recovery period than the recovery process could resolve. This causes a Link Reset to recover the credits. fcBBCreditRRDYFailures N/A The number of Buffer-to-Buffer Credit Recovery (BBCR) Receiver Ready (R_RDY) failures. This is the number of times more R_RDYs were lost during a credit recovery period than the recovery process could resolve. This causes a Link Reset to recover the credits.
Name RFC Description fcNumberOffline Sequences FCMGMT The number of Offline Primitive sequence received at this port. This -MIB statistic is for Fibre Channel only. The object type is connUnitPortStatCountNumberOfflineSequences. fcPrimitiveSeqProtocol Errors 4044 The number of primitive sequence protocol errors detected at this port. This count is part of FC-PH's LESB. The object type is fcmPortPrimSeqProtocolErrors.
Name RFC Description numEncodingDisparity Errors FCMGMT The number of disparity errors received at this port. The object type is -MIB connUnitPortStatCountEncodingDisparityErrors. numFBSYFrames FCMGMT The number of times that FBSY was returned to this port as a result of a -MIB frame that could not be delivered to the other end of the link. This occurs on SOFc1 frames (the frames that establish a connection) if either the fabric or the destination port is temporarily busy.
Name RFC Description numRxClass1Frames FCMGMT The number Class 1 frames received at this port. This statistic is for Fibre -MIB Channel only. The object type is connUnitPortStatCountClass1RxFrames. numRxClass2Frames FCMGMT The number of Class 2 frames received at this port. The object type is -MIB connUnitPortStatCountClass2RxFrames. numRxClass3Frames FCMGMT The number of Class 3 frames received at this port. The object type is -MIB connUnitPortStatCountClass3RxFrames.
::= { connUnitPortStatEntry 7 } BYTESTRANSMITTED Object type connUnitPortStatCountTxElements Description The number of octets or bytes transmitted by this port in 1-second periodic polling of the port. This value is saved and compared with the next polled value to compute the net throughput. For Fibre Channel, ordered sets are not included in the count.
FRAMESTOOLONG Object type connUnitPortStatCountFramesTooLong Description The number of frames received at this port where the frame length was greater than what was agreed to in FLOGI/PLOGI. This could be caused by losing the end of frame delimiter. ::= { connUnitPortStatEntry 46 } FRAMESTRANSMITTED Object type connUnitPortStatCountTxObjects Description The number of frames, packets, IOs, and so on that have been transmitted by this port. A Fibre Channel frame starts with SOF and ends with EOF.
Description The number of LRs received ::= { connUnitPortStatEntry 33 } LINKRESETTRANSMITTED Object type connUnitPortStatCountTxLinkResets Description The number of LRs transmitted ::= { connUnitPortStatEntry 34 } LOSSOFSIGNALCOUNTER Object type connUnitPortStatCountLossofSignal Description The number of instances of signal loss detected at this port. This count is part of FC-PH's LESB.
Object type connUnitPortStatCountPRJTFrames Description The number of times that FRJT was returned to this port as a result of a frame being rejected at the destination N_Port. This is the total for all classes.
Configuring the Virtual Connect domain using the CLI Basic configuration A Virtual Connect domain consists of an enclosure and a set of associated modules and server blades that are managed together by a single instance of the VCM. The Virtual Connect domain contains specified networks, server profiles, and user accounts that simplify the setup and administration of server connections.
login as: password: • TACACS+ Authentication >ssh 192.168.0.120 login as: password: • Mechanism-based Authentication >ssh 192.168.0.120 login as: : password: Valid values for auth-mechanism are local, ldap, radius, and tacacs. • For example: >ssh 192.168.0.120 login as: tacacs: password: Role-based Authentication >ssh 192.168.0.
>import enclosure username=Administrator Password=***** Setting the domain name To set the domain name, use the set domain command: >set domain name=MyNewDomainName The Virtual Connect domain name must be unique within the data center, and can be up to 31 characters without spaces or special characters.
• • • Network o Configure network default settings o Select the MAC address range to be used by the VC domain o Create, delete, and edit networks o Create, delete, and edit shared uplink sets o Create, delete, and edit network access groups o Configure Ethernet SNMP settings Server o Create, delete, and edit server Virtual Connect profiles o Assign and unassign profiles to device bays o Select and use available networks o Select serial numbers and UUIDs to be used by server profiles o
>remove radius-group MyGroup To display RADIUS settings and groups: >show radius >show radius-group Configuring TACACS+ authentication support for users To set TACACS+ properties: >set tacacs serveraddress=192.168.0.
default MAC addresses while the server remains in that Virtual Connect enclosure. When configured to assign MAC addresses, Virtual Connect securely manages the MAC addresses by accessing the physical NICs through the enclosure Onboard Administrator and the iLO interfaces on the individual server blades. Always establish control processes to ensure that a unique MAC address range is used in each Virtual Connect domain in the environment.
IMPORTANT: If you plan to use Insight Control Server Deployment for RedHat Linux installation and also plan to use User- or HP-defined MAC addresses, you must import the enclosure and assign profiles before running Insight Control Server Deployment. NOTE: After any server profiles are deployed using a selected MAC address range, that range cannot be changed until all server profiles are deleted. Creating a network access group Before VC 3.30, any server profile could be assigned any set of networks.
• Summary for all network access groups >show network-access-group • Details for all network access groups >show network-access-group * • Details for a network access group >show network-access-group MyGroupName To display the members of network access groups, use the show nag-network command: >show nag-network * Creating an Ethernet network To create a new Ethernet network, use the add network command: >add network MyNetworkName The network name must be unique within the data center, and can be up t
>add network Network1 nags=DatabaseNetGroup,AccessNetGroup Adding uplink ports to an Ethernet network To add uplink ports to an existing Ethernet network, use the add uplinkport command: >add uplinkport enc0:1:1 network=MyNetwork Modifying uplink port properties To modify an uplink port that exists as a member of a network or shared uplink set, use the set uplinkport command: >set uplinkport network=Network1 speed=1Gb Creating a shared uplink set To create a shared uplink set, use the add uplinkset comma
>add uplinkport enc0:1:2 uplinkset=MyUplinkSetName Creating a network that uses a shared uplink set To create a network that uses a shared uplink set, use the add network command: >add network MyNewNetworkName uplinkset=MyUplinkSetName vlanid=156 Creating multiple networks that use a shared uplink set To create multiple networks that use a shared uplink set, use the add network-range command: >add network-range UplinkSet=SUS1 VLANIds= Server VLAN Tagging Support Each server port can be connected to multi
This mode allows up to 1000 VLANs per domain. The number of VLANs per shared uplink set is restricted to 1000. In addition, up to 162 VLANs are allowed per physical server port, with no restriction on how those VLANs are distributed among the server connections mapped to the same physical server port. There is also a limit of 162 VLANs per server connection. However, care must be taken not to exceed the limit per physical server port.
CAUTION: To avoid storage networking issues and potential loss of data associated with duplicate WWNs on a FC SAN fabric, plan carefully when allowing Virtual Connect to assign server blade WWNs so that the configured range of WWNs is used only once within the environment. The WWN range used by the Virtual Connect domain must be unique within the environment. HP provides a set of pre-defined ranges that are reserved for use by Virtual Connect and do not conflict with server factory default WWNs.
CAUTION: The use of Serial Number Settings might prevent the proper operation of software designed to track servers by serial number or UUID. Do not enable this feature until you consider and understand the impact to the entire software environment in which the servers operate. This impact includes, but is not limited to, warranty service, asset tracking, server deployment, and software licensing.
VCM can be configured so that server blades use server factory default MACs/WWNs or Virtual Connect-administered MACs/WWNs. These administered values override the default MAC addresses and WWNs when a server profile is assigned to a server, and appear to pre-boot environments and the host operating system software as the hardware addresses. To use administered MAC/WWN addresses, select a range of HP pre-defined or user-specified MAC addresses.
• To boot properly from SAN when using Linux and VMware ESX 3.0.1 and ESX 3.0.2, change the QLogic QMH2462 4Gb FC HBA connection option to 'point-to-point only' in the QLogic BIOS configuration utility. The Emulex LPe 1105-HP 4Gb FC HBA does not require using the 'point-to-point' connection option to boot properly from SAN.
If the domain setting for SharedServerVlanID is set to true, then the VlanID property cannot be modified. Instead, the name of the shared uplink set with which the network is associated is required.
Configuring IGMP settings To configure Ethernet IGMP snooping settings, use the set igmp command: >set igmp enabled=true timeout=30 The IGMP Snooping feature enables VC-Enet modules to monitor (snoop) the IGMP IP multicast membership activities and configure hardware Layer 2 switching behavior of multicast traffic to optimize network resource usage. IGMP v1, v2, and v3 snooping are supported. The IGMP Snooping idle timeout interval is set to 260 seconds by default.
individual network in the Virtual Connect environment, VC blocks certain stacking links to ensure that each network has a loop-free topology. The loop avoidance feature cannot be disabled or changed. However, the preferred uplink connection for a network can be identified when defining network uplinks. VCM loop avoidance does not extend to server downlink ports.
• Changing the Fabric connected to a Fibre Channel port • Changing the speed of a Fibre Channel port • Assigning or unassigning server profiles, if server factory defaults are used for MAC addresses and WWNs, BIOS Fibre Channel boot settings are used, and PXE is not being enabled or disabled (USE BIOS for all network connections) Exceptions for Flex-10 connection changes are specified in the following sections.
remain in the "profile recovered" state until the server is powered down or removed from the enclosure. This feature eliminates the power cycle requirement for a server to recover. General requirements for adding FC or FCoE connections Adding FC and FCoE connections is generally allowed during profile add and edit operations. It is not allowed in some specific cases.
4 Start with modules in Bays 3 and 4, create a profile (add 2 connections), hotplug modules into Bays 5 and 6, then edit the profile. Port 1 2 3 4 Connected to Bay 3 Bay 4 Bay 3 Bay 4 — Bay 3 Bay 5 — — Bay 4 Bay 6 — Add connection is disallowed because the current FC module configurations do not match the existing connections in the profile. This profile is not useful after the hotplug. To resolve this issue, delete connections 3 and 4, save the profile, and then scenario 3 applies.
9 Start with FCoE-capable Port modules in Bays 1 and 2, 1 then create a profile and 2 add connections. Connected to Bay 1 Bay 2 Bay 1 — — — Bay 2 — — — Port Connected to 1 Bay 1 2 Bay 2 3 Bay 1 4 Bay 2 5 Bay 1 6 Bay 2 7 Bay 1 8 Bay 2 Add connection, 6 times 10 Start with 8 FCoE-capable modules, then create a profile and add connections.
Operation Examples Display general domain settings >show domain Display predefined address pools >show domain addresspool Display interconnect modules • • • Display overall domain status Display stacking link configuration and status Summary display >show interconnect Detailed display >show interconnect * Single module display >show interconnect enc0:2 >show status >show stackinglink Display the system log >show systemlog Display a list of servers in the domain • • • Display server profiles
An FCoE-capable port that has an SFP-FC module connected that is not yet assigned to a fabric or network is designated for a network, and the status is "Incompatible." When a fabric is created on that port, the status changes to "Linked." • Unsupported—The port is populated with an SFP module that is not supported. For example: o An unsupported module is connected. o A 1Gb or 10Gb Ethernet module is connected to a port that does not support that particular speed.
The login should succeed after the Virtual Connect Manager restarts on the backup Virtual Connect Ethernet module. Allow up to 5 minutes, depending on the enclosure configuration. If the command line option -failover is not included in the reset vcm command or a backup Virtual Connect Ethernet module is not available, the command line displays the following message: SUCCESS: The Virtual Connect Manager is being reset. Please wait... You are logged out of the session after approximately 1 minute.
Technical support Before you contact HP Be sure to have the following information available before you call HP: • Technical support registration number (if applicable) • Product serial number • Product model name and number • Product identification number • Applicable error messages • Add-on boards or hardware • Third-party hardware or software • Operating system type and revision level HP contact information For United States and worldwide contact information, see the Contact HP website (h
Acronyms and abbreviations BPDU Bridge Protocol Data Unit CHAP Challenge Handshake Authentication Protocol CHAPM Mutual Challenge Handshake Authentication Protocol CRC cyclic redundant checks DCBX Datacenter Bridging Capability Exchange protocol DHCP Dynamic Host Configuration Protocol DNS domain name system EFI extensible firmware interface FC Fibre Channel FCoE Fibre Channel over Ethernet FCS Frame Check Sequence GMII Gigabit media independent interface Acronyms and abbreviations 156
HBA host bus adapter IGMP Internet Group Management Protocol iSCSI Internet Small Computer System Interface LDAP Lightweight Directory Access Protocol LESB Link Error Status Block LLC Logical Link Control LUN logical unit number MAC Media Access Control NPIV N_Port ID Virtualization OA Onboard Administrator PVST+ Per VLAN Spanning Tree (over standard 802.
RMON remote monitoring SAN storage area network SOAP Simple Object Access Protocol SSH Secure Shell SSL Secure Sockets Layer TACACS+ Terminal Access Controller Access Control System Plus TFTP Trivial File Transfer Protocol UDP User Datagram Protocol UUID universally unique identifier VC Virtual Connect VCEM Virtual Connect Enterprise Manager VCM Virtual Connect Manager VCSU Virtual Connect Support Utility VLAN virtual local-area network Acronyms and abbreviations 158
WWN World Wide Name WWPN worldwide port name Acronyms and abbreviations 159
Index A adding FC connections 145, 149 adding FCoE connections 145, 149 all 20 assigned MAC addresses 135 authorized reseller 155 B banner command 20 basic configuration 130 C CLI command execution modes 16 command batching 14 Command line 18 command line overview 13 command line syntax 13, 14, 15, 16 Command output filtering 17 common management operations 151 config command 21 configbackup command 22 configuring LDAP 133 configuring RADIUS 133 configuring role-based authentication 134 configuring serial
ldap-certificate 52 ldap-group 53 link-dist-interval command 54 lldp command 55 logging in 130 logging out 151 log-target 55 loop-protect command 57 M MAC address settings 134 MAC cache failover settings, configuring 146 mac-cache command 58 managed elements 18 N native VLAN 60 network access group settings 58, 64 network access groups, creating 136 network access groups, displaying 136 network command 60 network configuration commands 60 network settings 60 network setup 60, 134 network, creating 60, 139
uplinkset command 99 user command 101 user profile 103 using multiple enclosures 12 V vcm command 104 version command 20 Virtual Connect overview 11 VLAN tunneling, enable or disable 60 W what's new 6 WWN settings 140 Index 162
