HP Virtual Connect Manager Command Line Interface for c-Class BladeSystem Version 4.20 User Guide Abstract This document contains user information for the HP Virtual Connect Manager version 4.20 CLI. This document is for the person who installs, administers, and troubleshoots servers and storage systems. HP assumes you are qualified in the servicing of computer equipment and trained in recognizing hazards in products with hazardous energy levels.
© Copyright 2014 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice. The only warranties for HP products and services are set forth in the express warranty statements accompanying such products and services. Nothing herein should be construed as constituting an additional warranty. HP shall not be liable for technical or editorial errors or omissions contained herein. Confidential computer software.
Contents Introduction .................................................................................................................................. 6 What's new .............................................................................................................................................. 6 Changes from VC 4.10 to VC 4.20 ................................................................................................... 7 Unassigning multiple profiles .....................................
link-dist-interval .............................................................................................................................. 62 lldp.............................................................................................................................................. 63 local-users .................................................................................................................................... 63 log-target ......................................................
user ........................................................................................................................................... 138 vcm ........................................................................................................................................... 140 version ....................................................................................................................................... 141 User roles ........................................................
Introduction What's new The command line interface user guide contains the following changes for VC 4.20: • • Added the following managed elements: o cli (on page 23) o sflow (on page 108) o sflow-module (on page 108) o sflow-ports (on page 110) o sflow-receiver (on page 112) Updated the Ethernet uplink port speed selection to include 40Gb in the following commands: o port-monitor (on page 83) o uplinkport (on page 132) • VC 4.20 supports the HP VC FlexFabric-20/40 F8 Module.
Changes from VC 4.10 to VC 4.20 Command Changes Virtual Connect 4.10 Virtual Connect 4.20 set cli help cli The new managed element modifies command execution behavior in script mode and auto-deployment. The new managed element configures the existing VC Ethernet network used to send datagrams to the receiver. The new managed element configures the network settings for the network interface created for sflow. The new managed element configures the ports to be sampled or polled for a receiver.
Command Changes add port-monitor remove port-monitor set port-monitor add port-monitor Modified the commands to include [AnalyzerPort=] QSFP+ uplink ports in [Speed=] [Duplex=] [MonitorPort=] [Direction=] where the format of the network analyzer is :: add set add set port-monitor port-monitor uplinkport uplinkport show config
Unassigning multiple profiles The unassign profile command includes the ability to unassign multiple profiles from device bays with a single command. The following example illustrates four server profiles being unassigned from device bays with a single CLI command. If an operation fails on one of the device bays, an error message appears for that server or device bay, but the remaining operations continue.
# Add uplink ports to the networks add uplinkport enc0:1:1 network=MyNetwork add uplinkport enc0:1:2 network=Network2 # Create a Shared Uplink Port Set add uplinkset SharedSet1 # Add a new FCoE SAN fabric connection to a profile add fcoe-connection MyNewProfile Fabric=SAN_5 # Reset the active QoS configuration type to the factory default settings but does not change the saved configuration types reset qos -active # Set the domain default LACP timer to the short setting (one second) set lacp-timer default=Sh
• VC-Enet modules o HP VC Flex-10 10Gb Ethernet Module for BladeSystem c-Class o HP VC FlexFabric 10Gb/24-port Module for BladeSystem c-Class, which provides the capability to configure Ethernet and FC/FCoE or iSCSI connections o HP VC FlexFabric-20/40 F8 Module for BladeSystem c-Class, which provides the capability to configure Ethernet and FC/FCoE or iSCSI connections o HP VC Flex-10/10D Module for BladeSystem c-Class NOTE: Using a Flex-10 capable NIC with an HP VC Flex-10 or FlexFabric module pro
server blade with the requisite LAN or SAN devices can access any LAN or SAN connected to a VC module, and a server blade of a given processor type (Integrity or X86) can be used as a spare for any server blade of the same processor type within the same enclosure, as long as the server has the requisite number and type of connections.
Press the Tab key to auto complete subcommands and managed-elements. You can also type characters and then press the Tab key to see a narrowed-down list of command options. You can quit the shell by using the exit command. See the example of logging in to the interactive management shell below. In the example, the primary VCM is located at IP address 192.168.0.120. >ssh 192.168.0.
Command output filtering The CLI provides output filtering capabilities that enable you to display only properties of interest. This feature is useful for filtering large amounts of output data for specific information. One or more properties can be specified in the output filtering rules.
In the example, add is the subcommand, user is the managed element, mark is a required parameter for the operation, password is a required property, and fullname and enabled are optional properties. Depending on the specific command being executed, certain parameters or properties might be required. For example, when adding a new user, both a parameter representing the user name, as well as a password (in the form of a property) must be specified.
The CLI enables you to enter multiple CLI commands in a single command-line invocation. This capability is useful when batching several commands together and executing them in a particular sequence, within the context of the same SSH session. This method improves the overall performance of lengthy script processing.
Command line Subcommands Command Description add Add a new object to the domain or to another object assign Assign a server profile to a device bay delete Delete the domain configuration exit Exit the Virtual Connect Manager command-line shell copy help Copy a configuration from one server profile to another server profile Display context-sensitive help for a command or object import Import an enclosure into the domain poweroff Power off one or more servers reboot Reboot one or more serve
Managed element domain (on page 27) Description Manage general VC domain settings and information enclosure (on page 30) Manage general enclosure settings and information enet-vlan (on page 35) Manage Ethernet VLAN settings configuration external-manager (on page 37) Manage external manager settings and information fabric (on page 39) Manage Fibre Channel SAN fabrics enet-connection (on page 32) Manage Ethernet network connections fc-connection (on page 42) Manage Fibre Channel SAN fabric conne
Managed element Description radius (on page 98) Manage RADIUS authentication settings role (on page 99) Manage user authentication order by access role (privilege) radius-group (on page 97) server (on page 104) Manage RADIUS group configuration settings Manage physical HP BladeSystem server blades serverid (on page 106) Manage virtual server ID configuration settings server-port (on page 103) Display all physical server ports server-port-map-range (on page 100) Manage ranges of shared server do
activity Display activity events being performed by VCM and the step-wise progress of those events. Supported actions: help, show Item Description show activity Display activity events being performed by VCM and the step-wise progress of those events. The activity event display includes the following columns: • • • • • • Time User Reason Activity Progress Detail To close the activity display, press q.
Item Description set auto-deployment This command enables customization of options related to auto-deployment, such as choosing to use DHCP to discover a TFTP server location or to manually specify TFTP settings to use for the configuration script location used for deployment. set auto-deployment TftpMode= [TftpServer= TftpFile= Syntax Examples ->set auto-deployment TftpMode=Manual TftpServer=192.168.1.1 TftpFile=myconfig.
Item Examples Description ->stop auto-deployment Stops an in-progress deployment operation banner Manage the login screen banner configuration. Supported actions: add, help, remove, show Item Description add banner Add banner text to the login screen. You can access VCM through ssh or the OA. After banner text is added, the banner is displayed before the user credential prompt when VCM is accessed.
cli This command modifies command execution behavior in script mode and auto-deployment. Script mode is the same as non-interactive mode. IMPORTANT: The show config output contains the set cli command with the default property and value, which is commented out. To modify command execution behavior while passing a script to CLI over SSH, uncomment and change the value of the ExitOnFailure property. If this command is specified in an auto-deployment command script, the expected value should be 'true'.
Item Description ->show config Displays the configuration script for the running domain ->show config -includePoolInfo Displays the configuration script for the running domain, including the pool ID or user-defined range configbackup Manage the domain configuration file. Supported actions: help, restore, save CAUTION: Do not restore a configuration backup file by using a file from another domain and including the property to ignore the enclosure serial number.
Item Description Restores a configuration backup file from a remote TFTP server ->restore configbackup address=ftp://user:password@192.168.10.12/new-vc-config-b ackup ->restore configbackup address=ftp://user:password@[2001::50]/new-vc-config-back up Restores a configuration backup file from a remote FTP server ->restore configbackup address=ftp://user:password@192.168.10.
Item Description address= [encryptionkey=] Option maskEncryptKey (optional) Properties Address (required) EncryptionKey (optional) Examples Enables you to interactively specify the encryption key as a masked string at the command prompt A valid IP address of a TFTP or FTP server with user name and password (where needed) and the name of the configuration backup file.
Supported actions: help, show Item Description show connection-map Display server-to-target connectivity information for servers with assigned profiles containing DirectAttach fabrics. show connection-map Syntax Parameter ModuleID (required) Example The ID of the module for which to display the connection map information. The module must be a FlexFabric module. The ID is in the format of :.
Item Description delete domain Delete the existing VC domain configuration. Deleting the domain removes the entire VC domain configuration and resets it to the original defaults. After the domain is deleted, you are logged out and the VCM resets. delete domain [-quiet] Syntax Option quiet Examples Suppresses user confirmation prompts. This option is useful when scripting delete domain operations.
Item Description Values include "Enabled" and "Disabled." Ipv6 Address (optional) Ipv6Gateway (Required if an IPv6 address is specified) MacType (optional) A valid IPv6 address to use for the domain IPv6 address configuration. The IPv6 address must be specified with a prefix, for example, 2001::3/64. A valid IPv6 gateway for the domain IPv6 address configuration, for example, 2001::10. The type of MAC address source to use for assignment.
Item Description ->set domain MacType=VC-Defined MacPool=10 Sets the MAC address source to VC-Defined with a pre-defined range ->set domain MacType=Factory-Default Sets the MAC address source to use factory default MAC addresses ->set domain MacType=User-Defined MacStart=00-17-A4-77-00-00 MacEnd=00-17-A4-77-00-FF Sets the MAC address source to a custom, user-defined address range ->set domain WwnType=VC-Defined WwnPool=5 Sets the WWN address source to VC-Defined with a pre-defined range ->set domain WwnTyp
Item Description quiet This option suppresses user confirmation prompt while importing a remote enclosure, and is typically used in automated scripting scenarios. Properties UserName (Required for A valid user name with access to the Onboard Administrator for the enclosure to enclosures that are import. The user must have full administrative rights to all enclosure elements, not imported) such as device bays, I/O bays, and OAs). Password (Required) A valid OA user password for importing the enclosure.
Item Examples Description ->show Displays ->show Displays ->show Displays enclosure a summary of all enclosures enclosure * detailed information for all enclosures enclosure enc0 detailed information for a specific enclosure enet-connection Manage Ethernet network connections. Supported actions: add, help, remove, set, show Item Description add enet-connection Add a new Ethernet network connection to an existing server profile.
Item Description pool. Deleting the domain is the only way to return "User-Defined" addresses to the pool. To use the "Pool-Specified" option, the domain MAC pool must be defined as VC-defined or user-defined and the listed addresses must be available in the current pool. The user-defined Ethernet MAC address to use for the connection. This EthernetMAC (required if AddressType is User-Defined property is required if the AddressType specified is "User-Defined" or or Pool-Specified) "Pool-Specified".
Item Description "Preferred" ->add enet-connection MyProfile Network=MyNetwork SpeedType=Custom Speed=2000 Adds a new Ethernet network connection and sets the speed to 2Gb ->add enet-connection MyNewProfile Network=SomeNetwork McastFilter=MyFilter Adds a new Ethernet network connection with an associated McastFilter ->add enet-connection MyNewProfile Network=SomeNetwork McastFilterSet=MyFilterSet Adds a new Ethernet network connection with an associated McastFilter Set Item Description remove enet-conne
Item Description preferred speed of the network to which the connection is associated. If no preferred speed is configured for a network, it defaults to "Auto". If the speed type is "Custom", you can configure a speed from 100Mb to MAX configured speed for the network in 100Mb increments. If the speed type is "Disabled", bandwidth is not allocated and the server port status is "Administratively Disabled". The user-defined speed for the server port.
Item Description [MaxSpeedType=] [MaxSpeed=] [VlanCapacity=] Option quiet Properties SharedServerVLanId (optional) PrefSpeedType (optional) This option suppresses the user confirmation prompt and is typically used in automated scripting scenarios. Enables or disables the option to force server ports connected to multiple VC Ethernet networks to use the same VLAN mappings as those used by corresponding shared uplink sets. Valid values are "true" and "false".
Item Description ->show enet-vlan Displays Ethernet VLAN configuration settings external-manager Manage external manager settings and information. Supported actions: help, remove, set, show Item Description remove external-manager Remove an existing external manager (VCEM) and regain local management profile control of the domain. When releasing the profile control, you must specify values for each MacType, WwnType, and ServerIdType.
Item Description The ending serial number in a user-defined range. This property is only valid for ServerIdEnd (required if Type is user-defined serial number types.
fabric Manage Fibre Channel SAN fabrics. Supported actions: add, help, remove, set, show Item Description add fabric Syntax Add a new fabric to the domain. If the QoS type for the domain is set to "CustomNoFcoe", then the fabric cannot include FCoE ports. If it does, the message "cannot add fabric when QoS configuration type is CustomNoFCoE" appears. For more information about setting the QoS type, see "qos (on page 95).
Item Description PrefSpeed (required if PrefSpeedType is "Custom") MaxSpeedType (optional) The preferred connection speed for any FCoE connection attached to this fabric. Values range from 100Mb to 8Gb in 100Mb increments. This property can be configured only if the fabric has uplink ports from the FlexFabric interconnect module. MaxSpeed (required if MaxSpeedType is "Custom") Examples The maximum connection speed for any FCoE connection attached to this fabric. Values are "Unrestricted" and "Custom".
Item Description LoadBalance Performs load balancing on a fabric configured for manual login re-distribution. This option is not supported for DirectAttach fabrics. Properties Name (optional) The new name of the fabric Speed (optional) The port speed for the uplink ports in the fabric. Values include "Auto", "2Gb", "4Gb", and "8Gb". The default port speed is "Auto".
Item Description ->set fabric MyFabric5 -loadBalance Performs load balancing on a fabric with manual login re-distribution ->set fabric MyFabric4 PrefSpeedType=Custom PrefSpeed=4000 MaxSpeedType=Custom MaxSpeed=8000 Modifies the fabric to preferred connection speed of 4Gb and maximum connection speed of 8Gb Item Description show fabric Display all fabric information. show fabric [|*] Syntax Parameter Name (optional) Examples Name of an existing fabric.
Item Description also be specified. Values include "Factory-Default", "User-Defined", or "Pool-Specified". IMPORTANT: "User-Defined" addresses within the domain address pool range are permanently depleted from the pool and can only be re-used as "User-Defined". Deleting the profile does not return the address to the pool. Deleting the domain is the only way to return "User-Defined" addresses to the pool.
Item Description Syntax set fc-connection [Fabric=] [Speed=] [BootPriority=] [BootPort=] [BootLun=] Parameters ProfileName (required) The name of the server profile containing the connection to modify Port (required) Properties Fabric (optional) The port number of the connection being modified The name of the FC SAN fabric associated with the connection.
Item Description ConnectionID (optional) The ID of an existing FC SAN connection. The ID format is . Use to display all FC SAN connections of a profile. Use "*" to display all FC SAN connections in the domain.
Item Description if SpeedType is Custom) 20Gb, or 100Mb to 8Gb for FCoE connections in a SAN fabric, configured in 100Mb increments. The 20Gb maximum speed is dependent on 20Gb NICs and the HP VC FlexFabric-20/40 F8 Module being present in the domain. WWNAddressType (optional) The source of WWN address assignments to be used during the creation of the new connection. If not specified, the default is the domain default. If "User-Defined" is specified, both a Port WWN and Node WWN must also be specified.
Item Description ->add fcoe-connection MyNewProfile WWNAddressType=Pool-Specified PortWWN=50:06:0B:00:00:C2:62:00 NodeWWN=50:06:0B:00:00:C2:62:01 Adds a new FCoE connection and provides WWN addresses from the VC-defined or user-defined pool ->add fcoe-connection MyNewProfile MACAddressType=Factory-Default Adds a new FCoE connection and uses factory-default MAC addresses ->add fcoe-connection MyNewProfile MACAddressType=User-Defined EthernetMAC=00-17-A4-77-00-00 Adds a new FCoE connection and provides a use
Item Description SpeedType (optional) The requested operational speed for the server. Valid values include "1Gb","2Gb", "4Gb", "8Gb", "Auto", "Custom", "Preferred", and "Disabled". "Auto" does not apply to fabric and "1Gb" to "8Gb" do not apply to FCoE networks. If the SpeedType is "Custom", you can configure a speed from 100Mb to MAX configured speed for the network in 100Mb increments.
Item Description Syntax show fcoe-connection [] Parameter ConnectionID (optional) Examples The ID of an existing FCoE connection. The ID format is . Use to display all FCoE connections of a profile. Use "*" to display all FCoE connections in the domain.
IMPORTANT: Users with server role permissions cannot modify IGMP settings when the VC domain is under VCEM control. Manage Ethernet IGMP Snooping settings. Supported actions: help, set, show Item Description set igmp Modify Ethernet IGMP Snooping settings. set igmp [Enabled=] [Timeout=] [NoFlood=] Syntax Properties Enabled (optional) Timeout (optional) NoFlood (optional) Examples Enables or disables IGMP Snooping. Valid values are "true" and "false".
Item Description ->show interconnect-mac-table enc0:1 Displays the module MAC table for the module in bay 1 of enclosure enc0 ->show interconnect-mac-table enc0:1 Port=d6 Displays the module MAC table for the module in bay 1 of enclosure enc0 filtered to show only addresses on port d6 ->show interconnect-mac-table enc0:1 "MAC Address"=00:26:55:58:89:9d Displays the module MAC table for the module in bay 1 of enclosure enc0 filtered on a single MAC address interconnect Manage I/O interconnect modules.
Item Description UplinkSet=up1 LAG=18'. Option fip_snooping Examples Display FIP snooping information for the specified interconnect module.
Item Description [TargetPort=] [TargetIP2=] [TargetPort2=] [Authentication=] [Username=] [Secret=] [MutualUsername=] [MutualSecret=] [iSCSIBootParamDHCP=] [NetworkParamDHCP=] [DHCPVendorID=] Parameter ConnectionID (required) Options maskSecret (optional) maskMutualSecret (optional) The ID of an existing iSCSI connecti
Item Description TargetPort2 (required if TargetIP2 is specified) The TCP port associated with the alternate target IP address. The default value is 3260. Authentication (optional) The initiator and target must agree on an authentication method, or the iSCSI initiator cannot log in to the target. Supported values include "None", "CHAP", and "CHAPM". The default value is "None". Username (required if The user name for authentication.
Item Description ->set iscsi-boot-param MyProfile1:1 -maskSecret -maskMutualSecret Authentication=CHAPM Username=SomeUserName MutualUsername=SomeMutualUsername ISCSIBootParamDHCP=Enabled NetworkParamDHCP=Enabled DHCPVendorID=SomeVendorIDValue Configures CHAP secret and CHAPM secret values as a masked string Item Description show iscsi-boot-param Display the basic iSCSI boot parameters configured on the specified iSCSI connection.
Item Description Deleting the domain is the only way to return "User-Defined" addresses to the pool. To use the "Pool-Specified" option, the domain MAC pool must be defined as VC-defined or user-defined, and the listed addresses must be available in the current pool. iScsiMAC (required if AddressType is User-Defined or Pool-Specified) SpeedType (optional) The user-defined iSCSI MAC address to use for the connection The requested operational speed for the server port.
Item Description Parameter ProfileName (required) The name of an existing profile from which the connection is being removed Example ->remove iscsi-connection MyProfile Removes the last added iSCSI connection from the profile Item Description set iscsi-connection Syntax Modify the properties of a specified iSCSI connection.
Item Description Syntax show iscsi-connection [] Parameter ConnectionID (optional) Examples The ID of an existing iSCSI connection. The ID format is . Use to display all iSCSI connections of a profile. Use "*" to display all iSCSI connections in the domain.
Item Description Address= -orload ldap-certificate Address= Filename= Properties Address (required) Filename (required) Examples A valid IP address or host name of the FTP server, including user name, password, and name of the certificate file on the server. Place brackets around the IPv6 address in the FTP URL.. The name of the LDAP certificate file on the server. The filename can also be given separately.
Item Description ->show Displays ->show Displays ->show Displays ldap-certificate a summary of all LDAP certificates ldap-certificate * detailed information for all LDAP certificates ldap-certificate B4:02:C0:29:B5:E5:B4:81 detailed information for a specific LDAP certificate ldap-group Manage Virtual Connect directory groups. Supported actions: add, help, remove, set, show Item Description add ldap-group Add a new directory group to the directory services configuration.
Item Description Parameter GroupName (required) The name of an existing group to modify Properties Description (optional) Roles (optional) Example A user-friendly description for the group A set of one or more privileges for the group. Valid values are any combination of "domain", "server", "network", and "storage". Separate multiple values with commas.
Item Description authentication first might result in not being able to log on. Enabling and disabling local user authentication requires you to be logged in as an LDAP user. This property cannot be modified if you are logged in as a local user. NtAccountMapping (optional) Enables or disables Microsoft Windows NT account mapping. This capability enables you to enter "domain\username". Values include "Enabled" and "Disabled".
Item Description Interval (required) FC login re-distribution interval for uplinks (in seconds). Valid values include positive integers in the range 1 to 1800. The default is 30 seconds. Example ->set link-dist-interval interval=10 Sets the FC login re-distribution interval to 10 seconds Item Description show link-dist-interval Display the FC login re-distribution interval for uplinks that are part of a fabric configured for Automatic login redistribution.
Item Properties Enabled (optional) Description Enables or disables local user authentication for the VC domain. Valid values are "true" and "false". The default value is "true". Disabling or enabling local user authentication requires you to be logged in as an LDAP, RADIUS or TACACS user with domain privileges. This property cannot be modified if you are logged in as a local user. Disabling local user authentication without specifying the PrimaryRemoteAuthenticationMethod is not allowed.
Item Description Format (optional) The timestamp format for the log messages. Values include "RFC3164" (Nov 26 13:15:55) and "ISO8601" (1997-07-16T19:20:30+01:00). The default value is "RFC3164". State (optional) Enables or disables the remote log destination. Values include "Enabled" and "Disabled". The default value is "Disabled". Example ->add log-target Destination=192.168.2.1 Port=600 Format=ISO8601 State=Enabled Adds log-target 192.168.2.
Item Examples Description ->set log-target 1 Severity=Error Transport=TCP Security=STunnel Modifies log-target index number 1 ->set log-target 1 Destination=192.168.3.1 Modifies log-target at index 1 to use a new IP address ->set log-target 1 Destination=2001:0db8:85a3:0000:0000:8a2e:0370:7334 Modifies log-target at index 1 to use a new IPv6 address Item Description show log-target Display the remote log destination settings.
Item Description Option quiet (optional) Suppresses user confirmation prompts Properties Enabled (required) Example Enables or disables network loop detection and protection. Valid values include "true" and "false". ->set loop-protect Enabled=true Enables loop protection Item Description show loop-protect Display the loop protection configuration and all Ethernet ports currently disabled due to protection enforcement.
Supported actions: add, help, remove Item Description add mcast-filter-rule Create a new Multicast Filter rule for a Multicast filter. add mcast-filter-rule McastFilter= Networks=/[,/] Syntax Properties McastFilter (required) The name of an existing Multicast Filter to which the Multicast Filter rules belong Network (required) Multicast IP Addresses in the form of IP Address/Netmask Bits.
Item Description Labels (optional) Labels assigned to this Multicast Filterset. Labels are used in the GUI to help manage large numbers of filters. Labels can be assigned in the CLI, but are only used in the GUI. A maximum of 16 labels can be assigned. Color (optional) Color assigned to this Multicast Filterset. Color is used in the GUI to help manage large numbers of filters. A color can be assigned in the CLI, but is only used in the GUI. Allowed colors are red, green, blue, purple, or orange.
Item Description ->set mcast-filter-set Filterset1 Labels="label1, label2" Adds labels to a Multicast Filterset ->set mcast-filter-set Filterset1 Labels= Removes all labels from a filter ->set mcast-filter-set Filterset1 Color=red Sets the Network color to red Item Description show mcast-filter-set Display Multicast Filterset information. Syntax show mcast-filter-set [McastFilterSetName> | *] Parameter McastFilterSetName (required) The name of an existing Multicast Filterset in the domain.
Item Description ->add mcast-filter Filter1 Color=red Creates a new Multicast Filter with color red Item Description remove mcast-filter Remove a Multicast Filter. Syntax remove mcast-filter | * Parameter McastFilterName (required) The name of an existing Multicast Filter in the domain. A Multicast Filter named '*' removes all the filters.
Item Examples Description ->show mcast-filter Display a summary listing of all Multicast Filters ->show mcast-filter * Show detailed information for all Multicast Filters ->show mcast-filter Filter1 Show detailed information for a specific Multicast Filter mfs-filter Manage Multicast Filters in Multicast Filtersets. Supported actions: help, add, remove Item Description add mfs-filter Add a Multicast Filter to a Multicast Filterset.
Item Description add nag-network Add one or more networks to a network access group. Any network access groups previously configured for the network remain. add nag-network Nag= Network=[,,...
Item Examples Description ->show nag-network Displays a summary of all network to network access group associations in the domain ->show nag-network * Displays detailed information for all network to network access group associations in the domain ->show nag-network DatabaseNetGroup:Net1 Displays detailed information about the association between a specified network access group and a specified network name-server Display a snapshot of all hosts and direct attached storage devices for the specified FlexFa
Item Description Syntax remove network-access-group Parameter Name (required) Examples The name of an existing network access group in the domain. Use "*" to remove all removable network access groups. ->remove network-access-group DatabaseNetGroup Removes a specified network access group ->remove network-access-group * Removes all removable network access groups Item Description set networkaccess-group Modify an existing network access group.
Item Description [PrefSpeedType=] [PrefSpeed=<100Mb-20Gb in 100Mb steps>] [MaxSpeedType=] [MaxSpeed=<100Mb-20Gb in 100Mb steps>] [Nags=[,...] [SmartLink=] [Labels=[,...] [Color=] Options quiet This option suppresses user confirmation prompts. This option is useful when scripting operations.
Item Description ->add network-range UplinkSet=Alpha NamePrefix=Network NameSuffix=_A VLANIDs=1-100 Creates 100 networks in an existing uplink set ->add network-range UplinkSet=Alpha NamePrefix=Network NameSuffix=_A VLANIDs=101-110,115-119,130,4094,700-703 Creates non-contiguous networks in an existing uplink set Item Description remove network-range Remove multiple networks from a shared uplink set.
Item Description The connection speed for any Ethernet connection attached to these PrefSpeed (required if PrefSpeedType is "Custom") networks. Valid values range from 100Mb to the MAX configured speed for the network in 100Mb increments. MaxSpeedType (Optional) The maximum connection speed for any Ethernet connection attached to these networks. Valid values include "Unrestricted" and "Custom". "Custom" enables you to configure the preferred speed. The default value is "Unrestricted".
Item Description [Labels=[,…] [Color=] Parameter NetworkName (required) The unique name of the new network to create. Valid characters include alphanumeric, "_", and ".". The maximum length of the name is 64 characters. Options Quiet Suppresses user confirmation prompts during network creation and modification. This option is used mainly in automated scripting scenarios. fcoe Specifies an FCoE network. 32 FCoE networks can be added per uplink set.
Item Description value is "Short". Labels (optional) Labels assigned to this network. Labels are used in the GUI to help manage large numbers of networks. Labels can be assigned in the CLI, but are only used in the GUI. A maximum of 16 labels can be assigned. Color (optional) Examples Color assigned to this network. Color is used in the GUI to help manage large numbers of networks. A color can be assigned in the CLI, but is only used in the GUI. Red, green, blue, purple, or orange are allowed.
Item Description set network Modify an existing Ethernet or FCoE network. set network [-quiet] [State=] [SmartLink=][NativeVLAN=] [Private=] [Nags=[,,...
Item Description the preferred speed. The default value is "Unrestricted". MaxSpeed (required if MaxSpeedType is "Custom") LacpTimer (optional) Nags (optional) The maximum connection speed for any Ethernet connection attached to this network. Valid values range from 100Mb to the MAX configured speed for the network in 100Mb increments. Specifies the network LACP timer. Valid values are "Domain-Default", "Short", and "Long".
Item Description ->set network Network1 Color=red Sets the network color to red Item Description show network Display all Ethernet networks in the domain. Configured values for ConnectionMode and VLanTunnel display for UNSHARED networks only. Configured values for NativeVLAN, UplinkSet, and VLanID display for SHARED networks only. show network [|*] Syntax Parameter NetworkName (optional) Examples The name of an existing network (Ethernet or FCoE) in the VC domain.
Item Description MonitorPort (optional) The server port to be monitored. The format of the monitored port is ::. If the enclosure ID is not specified, the default enclosure is the local enclosure. The ID for the monitor port can be referenced from the ID column in the output of the show server-port command. Direction (optional) The direction of network traffic on the port being monitored. Valid values include "ToServer", "FromServer", and "Both".
Item Description properly before port monitoring can be enabled. AnalyzerPort (optional) The uplink port used for monitoring network traffic. The format of the network analyzer port is ::. For QSFP+ ports, the format is Q.. If the enclosure ID is not specified, the default enclosure is the local enclosure. Speed (optional) The port speed for the network analyzer port.
Supported actions: help, reset, set, show Item Description reset port-protect Reset and restart all ports that are currently disabled due to the protection action.
Item Syntax Description added. The server profile can be assigned to a device bay using the "assign" subcommand. Profiles are created without FCoE connections if the QoS type is set to "CustomNoFcoe". For more information about setting the QoS type, see "qos (on page 95).
Item Description -NoDefaultFcConn -NoDefaultFcoeConn Creates a new profile without adding default Ethernet, FC, and FCoE connections ->add profile MyNewProfile2 Nag=DatabaseNetGroup Creates a new profile and associates it with the DatabaseNetGroup network access group ->add profile MyNewProfile2 HideUnusedFlexNICs=true Does not enumerate FlexNICs not assigned to a profile as network interfaces in the operating system ->add profile MyNewProfile SNType=User-Defined SerialNumber=VCX0113121 Creates a new profi
Item Description Copies the configuration from profile_server1 to profile_server_new Item Description load profile Syntax Load a saved EFI data object from a remote ftp server on the network. The EFI data object is loaded into an existing server profile. The server profile must not be assigned to a server bay and it must not have an EFI data object present.
Item Description save profile Save an EFI data object from an existing server profile. The server profile must not be assigned to a server bay.
Item Description to restore network connectivity. Changing this option requires you to power off the server. Nag (optional) Examples The new network access group for the server profile. If not specified, the profile’s network access group is not changed.
Item Description [Name=NewClassName][Enabled=] [RealTime=] [Share=<1-99>] [MaxShare=<1-100>] [EgressDOT1P=<1,2,3,4,5,6,7>] Parameter ClassName (required) The name of an existing traffic class Properties Name (optional) The new name of the class. The name can be 1-64 characters in length, with alphanumeric and "_", ".", "-". The names of the system classes, Best_Effort, and FCoE_Lossless cannot be modified. Enabled (optional) Enables or disables the class.
Item Description FilterBy (optional) Filters the output of the show command by the specified attribute in the format =. Examples ->show Displays ->show Displays ->show Displays ->show Displays qos-class RealTimeClass a specific QoS class qos-class a summary of all QoS classes qos-class * detailed information for all QoS classes qos-class "Real Time"=True all Real Time classes using the FilterBy parameter qos-classifier Manage the traffic classifier for the active QoS configuration.
Item Description and "Downlinks". If the port type is not specified, then classifiers for all port types are displayed. Examples ->show Displays ->show Displays ->show Displays qos-classifier the classifier settings qos-classifier the classifier settings qos-classifier the classifier settings for both uplink and downlink ports Uplinks for uplink ports Downlinks for downlink ports qos-map Manage the traffic classification maps of the active QoS configuration.
Item Description Syntax show qos-map [ | *] Parameter Type (optional) Examples Type of map. Valid values are "DOT1P" and "DSCP". If the type is not specified, all maps are displayed. ->show Displays ->show Displays ->show Displays qos-map DSCP DSCP mapping qos-map DOT1P DOT1P mapping qos-map all classification mappings qos Manage the quality of service configurations.
Item Description Syntax configuration: qos-class, qos-map, and qos-classifier. set qos Parameter Type (required) Examples The QoS configuration type. Valid values are "Passthrough", "CustomWithFCoE", and "CustomNoFCoE". The default value is "Passthrough". If the Type is "Passthrough", then QoS is not enabled. The DOT1P priority, DSCP, and other markings are passed through VC, but not used for traffic classification or bandwidth management for the Ethernet traffic.
radius-group Manage Virtual Connect RADIUS groups. Supported actions: add, help, remove, set, show Item Description add radius-group Add a RADIUS group. Syntax add radius-group [Description=] [Roles=] Parameters GroupName (required) The name of the RADIUS group being added. The name can consist of alphanumeric characters, hyphens (-), underscores (_) and periods (.). The maximum length of the name is 255 characters.
Item (optional) Roles (optional) Example Description A set of one or more privileges for the group. Valid values are any combination of "domain", "server", "network", and "storage". Separate multiple values with commas. ->set radius-group MyGroup Description="Test Group" Roles=domain,server,network Modifies a RADIUS group description and privileges Item Description show radius-group Display the existing RADIUS groups.
Item Description server. RADIUS authentication will not work if the server key is blank or null. Timeout (optional) The time in seconds that VCM should wait before timing out the request. If the primary server times out and a secondary server is configured, VCM attempts the request on the secondary server. If the secondary server times out, the request fails. The valid range of values is from 1 to 600 seconds. The default timeout is 10 seconds.
Item Description authentication methods separated by a comma. The format is . Valid values are "ldap", "radius", "tacacs", and "local". Operations (optional) The operation permissions to be set for a given role, specified as one or more role operations separated by a comma. Valid values are "FirmwareUpdate", "SaveConfig", "RestoreConfig", "SupportFiles", "PortMonitoring", "Default" (Factory Default), "*"(All), '' (None).
Item Description Syntax add server-port-map-range UplinkSet= VLANIDs= [MatchUplinkSet=] Parameters ConnectionId (required) The ID of an existing Ethernet connection associated with a profile and a server port. The format of the ConnectionID is . Properties Uplinkset (required) The name of the shared uplink set to use with the server port mapping VLANIDs (required) The VLAN IDs to use for the mapping.
Item Description add server-port-map Add a new server port network mapping, and allow server ports to be shared among multiple VC Ethernet networks. add server-port-map [Uplinkset=] [VLanID=] [Untagged=] Syntax Parameters ConnectionID (required) Network (required) The ID of an existing Ethernet connection associated with a profile and a server port. The format of the ConnectionID is .
Item Description ->remove server-port-map * Removes all server port mappings in the domain Item Description set server-port-map Modify an existing server port network mapping. This command cannot be used if the network is associated with a shared uplink set.
Item Description Syntax exists, the cause is displayed. For more information about possible causes, see "Port status conditions (on page 195)." show server-port [] Parameter PortID (Optional) Examples The reference of a port mapping ID. The PortID format is . The PortID can be referenced from the ID column in the summary. The detailed display shows all FlexNICs that could be associated with a server port.
Item Description Powers off all servers in the local enclosure ->poweroff server enc0:2 -ForceOnTimeout Attempts a graceful shutdown, but forces a shutdown at the end of the timeout period ->poweroff server * -Timeout=180 Powers off all servers and specifies a custom timeout of 3 minutes ->poweroff server enc0:1 Powers off the multi-blade server in bays 1-4 of the local enclosure Item Description poweron server Power on one or more physical servers.
Item Description server). The default timeout is 120 seconds.
Item Description Syntax set serverid Type=Factory-Default set serverid Type=VC-Defined [PoolID=<1-64>] set serverid Type=User-Defined Start=VCX01nnnnn End=VCX01nnnnn Properties Type (required) The type of the virtual serial number source. When server profiles are created, the UUID values are not allocated from the pool, the virtual serial number is allocated from the pool; and the virtual UUID is randomly generated. Valid values include "Factory-Defined" (default), "VC-Defined", and "User-Defined".
Item Description ->set session Timeout=0 Disables session timeout (user sessions never expire) Item Description show session Syntax Display the session properties show session timeout Option Timeout (required) Displays the session timeout value Example ->show session timeout Displays the current session timeout value sflow Configures an existing VC Ethernet network with sFlow.
Item Parameter ModuleID (required) Examples Description Specifies the interconnect module whose network interface is being reset. The format is :. The module network configuration cannot be reset if the module ports are being sampled or polled by any of the receivers.
Item Description ->show sflow-module enc0:1 Displays the specified sflow module sflow-ports Configure the ports to be sampled or polled for a receiver. Supported actions: add, help, remove, set, show Item Description add sflow-ports Add a port to be sampled or polled for a receiver.
Item Description list|*>][PollPorts=]] Parameter ReceiverName (required) Properties SamplePorts (optional) PollPorts (optional) Examples The name of an existing sflow receiver in the domain Specifies a list of sample ports to be removed from a receiver. "*" removes all sample ports from the receiver. The ports are specified as a comma separated list where each port is in the format: :[:].
Item PollingIntervals (optional) Description :[:]. The ID for the poll port can be referenced from the output of the show sflow-ports command. Specifies the polling interval which is the maximum number of seconds between successive samples of the counters associated with these ports. Each value in the list of polling interval has a corresponding port in the PollPorts list. The valid polling interval range is from 1 to 65535 seconds.
Item Description MaxHeaderSize (optional) Specifies the maximum number of bytes that are copied from a sampled packet to create a flow sample. Valid values are "128","256","512", and "1024". The default value is "128". MaxDatagramSize (optional) Specifies the maximum number of data bytes that are sent in a single datagram. The valid range is from 256 to 1500. The default value is "1400".
Item Description show sflow-receiver Display the receiver name. Syntax show sflow-receiver [] Parameter ReceiverName (optional) The name of an existing sflow receiver in the domain. A receiver name of "*" displays all the receivers. Examples ->show sflow-receiver Displays the sflow receiver snmp-access Manage SNMP access.
snmp-trap Manage SNMP trap information. Supported actions: add, help, remove, set, show, test Item Description add snmp-trap Syntax Adds a new SNMP trap destination. You can configure up to five VC-Enet and five VC-FC SNMP trap destinations. Avoid using duplicate trap destinations. Setting duplicate trap destinations can result in duplicate traps being sent to the same destination, or only one of the trap destinations being configured.
Item Description ->add snmp-trap MyTrap Address=192.112.42.5 Severity=All FcCategories=All DomainCategories=All Adds a trap with all severity and category properties set. Severities are allowed even though FC categories are set, but the severities are applied to the domain categories. Item Description remove snmp-trap Syntax Removes a previously configured SNMP trap destination. remove snmp-trap Parameter Name (required) The name of the trap destination to be removed.
Item Description Sets the trap community ->set snmp-trap MyTrap1 Severity=All FcCategories=None EnetCategories=None Sets all trap severities and sets the Fibre Channel and Ethernet categories to none ->set snmp-trap MyTrap Address=fe80:0000:0000:0000:0202:b3ff:fe1e:8329 Sets a trap using an IPv6 address Item Description ->show snmp-trap Displays the SNMP traps that have been configured.
Item Description SystemContact (optional) SNMP system contact information. Enabled (optional) Enables or disables the SNMP agent. The default value is "true". Valid values include "true" or "false". SmisEnabled (optional) Enables or disables SMIS. This property is valid only for VC-FC modules. The default value is "false". Valid values include "true" or "false". Examples ->set snmp enet ReadCommunity=mydatacenter1 SystemContact=admin@datacenter1.
Item Description file containing the SSH keys to transfer. Place brackets around the IPv6 address in the FTP URL. Filename (required) Examples The name of the remote file containing the SSH keys to transfer. The filename can also be mentioned separately. The file path given will be treated as relative to the login directory for the user on the FTP server. The user should ensure that the permissions are appropriate for the transfer to succeed. ->load ssh Address=ftp://user:password@192.168.10.
Item Description -orload ssl-certificate Address= Filename= Properties Address (required) Filename (required) Examples A valid IP address of the FTP server, with user name, password, and name of the SSL certificate file to transfer. Place brackets around the IPv6 address in the FTP URL. The name of the SSL certificate file to transfer. The filename can also be mentioned separately.
Item Description size to 2048 bits and restarts the VC web server. Syntax Options quiet Properties Address (required) save ssl-csr [-quiet] address= CN=server.domain.
Item Description Contact (optional) The person responsible for the VC module. The value can be 0 to 60 characters in length. AlternativeName (optional) One or more alternate names or addresses for the VC domain, separated by commas. The value can be 0 to 500 characters in length. The default value is the existing data from the certificate plus any IP addresses (and associated DNS names), in the form of DNS:host.domain.com,IP:x.x.x.
Item Description ->save ssl-csr address=ftp://user:password@192.168.10.12/new-ssl.csr CN=server.domain.com O="Hewlett-Packard" C=US ST=CA L=Cupertino email=vc-admin@domain.com ->save ssl-csr address=ftp://user:password@[2001:1::1]/new-ssl.csr CN=server.domain.com O="Hewlett-Packard" C=US ST=CA L=Cupertino email=vc-admin@domain.com Generates and transfers an SSL certificate signing request and saves with a new filename ssl Allow or disallow SSL encryption (browser/SOAP).
Item Description show stackinglink Display stacking links and their status. show stackinglink Syntax ->show stackinglink Displays a summary listing of all stacking links and status Example statistics Manage statistics for interconnect module ports. Supported actions: help, reset, show Item Description reset statistics Reset per-port statistics for the specified port ID and its associated subports.
Item Description LAGID (optional) The LAG ID on which to display statistics information. The LAG ID is in the format ::. LagLabel must be in the format lagNN, where NN is the LAG number. PortID (optional) The ID of the port on which to display statistics information. The port ID is in the format ::.
• Priority-based Flow Control (PFC) • Application Protocol (AP) The following table lists the type of DCBX statistics displayed. Item Description DCBX Application Protocol State DCBX Overall Status DCBX Pending Status DCBX Priority Flow Control State DCBX Priority Group State DCBX Application Protocol State The following table defines each statistic.
Item Property LAGID (optional) Examples Description The LAG ID on which to display throughput information. The LAG ID is in the format ::. LagLabel is in the format lagNN, where NN is the LAG number. A listing of the possible uplink port IDs can be obtained by using the show uplinkport command. ->show statistics-throughput enc0:1:X1 Displays the port throughput statistics for port X1 of the module in bay1 of enclosure enc0 ->show statistics-throughput enc0:1:Q1.
Supported actions: help, show Item Description show status Display the status of the domain and all components in the domain. show status Syntax ->show status Displays domain status information Example storage-management Manage iSCSI storage management information for P4000 devices. Supported actions: add, help, remove, set, show NOTE: The P4000 storage does not support IPv6. Item Description add storage-management Add iSCSI storage management credentials.
Item Description Removes all storage management records in the domain Item Description set storage-management Modify the specified iSCSI storage management credential.
Item Property address (required) Description A valid IP address of a TFTP or FTP server, with user name, password (where required), and name of the file to which the generated support info will be stored on the FTP server. If not specified, the default file name is "vc-support-info". Examples ->save supportinfo address=tftp://192.168.10.12 ->save supportinfo address=tftp://[2001::50] Saves a support information file to a remote TFTP server ->save supportinfo address=ftp://user:password@192.168.10.
Item Description ->show systemlog -last=20 -pause=6 Displays the last twenty records from the system log, six records at a time To add a remote target, see "add log-target (on page 64)." tacacs Manage TACACS+ authentication settings. Supported actions: help, set, show Item Description set tacacs Modify and test the Virtual Connect TACACS+ authentication settings.
Item Description Tests the TACACS+ configuration changes without applying them ->set tacacs Enabled=true ServerAddress=192.168.0.124 ServerKey=test123 SecondaryServerAddress=tacserver.hp.com SecondaryServerKey=test456 ->set tacacs Enabled=true ServerAddress=2001::70 ServerKey=test123 SecondaryServerAddress=tacserver.hp.
Item Description not allowed.
Item Description Removes a specific uplink port (Bay 2, Port 3) from a shared uplink set ->remove uplinkport 1:X1 UplinkSet=MyUplinkSet Removes a specific uplink port (Bay 1, Port 1) from a shared uplink set that contains an FCoE network (affects all modules within a bay group) ->remove uplinkport enc0:1:Q1.1 Network=MyNetwork Removes a specific QSFP+ uplink port (Bay 1, Port Q1.
Item Description ->set uplinkport enc0:1:Q1.1 Uplinkset=MyUplinkSet Speed=40Gb Changes the port speed of a QSFP+ uplink port that belongs to a shared uplink set to "40Gb" Item Description show uplinkport Display all Ethernet module uplink ports known to the domain. If the port is a member of a network or a shared uplink set, it appears. If the port is unlinked and no connectivity exists, the cause is displayed. For more information about possible causes, see "Port status conditions (on page 195).
Item Description (required) Properties ConnectionMode (optional) Specifies the connection type that is formed when multiple ports are added to the shared uplink set. Valid values include "Auto" and "Failover". The default value is "Auto". LacpTimer (optional) Specifies the domain default LACP timer. Valid values are "Domain-Default", "Short", and "Long". This property can be specified only if the ConnectionMode is "Auto".
Item Description ->remove uplinkset * Removes all shared uplink sets from the domain Item Description set uplinkset Syntax Modify an existing shared uplink port set.
Item Description set user-security Modify domain user security settings and enforce additional security requirements for user passwords. set user-security [StrongPasswords=] [MinPasswordLength=<3-40>] Syntax Properties StrongPasswords (optional) MinPasswordLength (optional) Examples Enables or disables strong password enforcement. If enabled, then new, local users that are created are validated against the password characteristics specified.
Item Description ContactInfo (optional) Enabled (optional) Contact information for the user Roles (optional) The allowed roles for the user. Valid values are any combination of "domain", "server", "network", or "storage" separated by commas. If no roles are specified, the user can view domain information only. Use "*" to specify all roles. Enables or disables the user. Valid values are "true" and "false". If not specified, the default is "true".
Item Description the user can view domain information only. Use "*" to specify all roles. Examples ->set user steve Password=fgY87hHl Modifies an existing user password ->set user steve Password Modifies an existing user password, masked at the prompt ->set user bill Password=HGtwf7272562 Roles="domain,network" FullName="Bill Johnson" ContactInfo=billj@company.
version Display CLI version information. Supported actions: help, show Item Description show version Display CLI version information. show version Syntax ->show version Displays CLI version and copyright information Example User roles The following table lists required user roles for CLI commands.
Command Element Domain Network Server Storage All access uplinkport — X — — — uplinkset — X — — — user X — — — — assign profile — — X — — — — X — — delete domain X — — — — X X X X X help — X X X X X X — — — — load ldap-certificate X — — — — profile — — X — — ssh X — — — — ssl-certificate X — — — — poweroff server — — X — — — — X — — reboot server — — X — — copy profile exit — import enclosure poweron
Command reset save set Element Domain Network Server Storage All access network-access-group — X — — — port-monitor — X X — — profile — — X — — server-port-map — — X — — snmp-access X X — — — snmp-trap X X — — — ssh X — — — — uplinkport — X — — — uplinkset — X — — — user X — — — — loop-protect — X — — — port-protect — X — — — qos — X — — — sflow-module X X X — — statistics — X — — — vcm X — — — — configba
Command Element Domain Network Server Storage All access ldap X — — — — ldap-group X — — — — local-users X* — — — — radius X — — — — radius-group X — — — — tacacs X — — — — role X — — — — link-dist-interval — — — X — log-target X — — — — loop-protect — X — — — mac-cache — X — — — mcast-filter — — X — — mcast-filter-set — — X — — network — X — — — network-access-group — X — — — port-monitor — X X — — port-pro
Command show Element Domain Network Server Storage All access user X — — — — user-security X — — — — all X X X X X activity X X X X X banner X X X X X configuration X — — — — connection-map X X X X X devicebay X X X X X domain X X X X X enclosure X X X X X enet-connection X X X X X enet-vlan X X X X X external-manager X X X X X fabric X X X X X fc-connection X X X X X fcoe-connection X X X X X firmware X
Command Element Domain Network Server Storage All access qos-class X X X X X qos-classifier X X X X X qos-map X X X X X radius X X X X X radius-group X X X X X sflow X X X X X sflow-receiver X X X X X sflow-module X X X X X sflow-ports X X X X X tacacs X X X X X role X X X X X link-dist-interval X X X X X lldp X X X X X log-target X X X X X loop-protect X X X X X mac-cache X X X X X nag-network X X X X
Command Element Domain Network Server Storage All access statistics X X X X X statistics-throughput X X X X X status X X X X X systemlog X — — — — uplinkport X X X X X uplinkset X X X X X user X — — — — user-security X X X X X version X X X X X start auto-deployment X — — — — X — — — — test log-target X X X X X snmp-trap X X X X X unassign profile — — X — — stop auto-deployment *To disable or enable local user authe
Supported Subcommands: help show ----------------------------------------------------------------------->show devicebay -help Description: This command displays all device bays in the domain Syntax: show devicebay [ | *] Parameters: DeviceBayName : The reference name of a device bay in the domain.
Interactive user output format The interactive user output format provides a user friendly view of information at the command line. When providing an overview, or listing, of several instances of data, a tabular text format is displayed. If an individual instance of data is being displayed, then the stanza format is used.
FullName ContactInfo Enabled : -- -: -- -: true UserName : steve Roles : domain,server,network,storage Role Operations : FirmwareUpdate,PortMonitoring,RestoreConfig,SaveConfig,SupportFiles FullName : Steve Johnson ContactInfo : steve.johnson@hp.com Enabled : true Scriptable output format Scriptable output format allows scripts to invoke CLI commands and receive command responses that can be easily parsed by the scripts.
Asset Tag=OA ASSET 453 Example 2: Scriptable output format displaying user "Administrator" information ->show user Administrator -output=script1 User Name=Administrator Roles=domain,server,network,storage Role Operations=FirmwareUpdate,PortMonitoring,RestoreConfig,SaveConfig,Suppor tFiles Full Name=-- -Contact Info=-- -Enabled=true Example 3: Scriptable output format displaying all users (with table header) ->show user -output=script2 UserName;Roles;Role Operations;FullName;Contact Info;Enabled Administrato
Statistics descriptions Ethernet modules Ethernet uplink and downlink ports Name RFC Description rfc1213_IfInDiscards 1213 The number of inbound packets discarded to prevent delivery to a higher-layer protocol even though no errors were detected. These packets can be discarded to make buffer space available.
Name RFC Description rfc1213_IpInHdrErrors 1213 The number of input datagrams discarded due to errors in the IP header. Possible errors include bad checksums, version number mismatches, format errors, time-to-live exceeded, errors discovered while processing IP options, and so on.
Name RFC Description rfc1757_StatsFragments 1757 The total number of packets received that were less than 64 octets in length (excluding framing bits, but including FCS octets) and had either a bad FCS with an integral number of octets (FCS Error) or a bad FCS with a non-integral number of octets (Alignment Error). It is entirely normal for etherStatsFragments to increment, because it counts both runts (which are normal occurrences due to collisions) and noise hits.
Name RFC Description rfc1757_StatsPkts65to 127Octets 1757 The total number of packets (including bad packets) received that were between 65 and 127 octets in length inclusive (excluding framing bits, but including FCS octets) rfc1757_StatsTXNoErrors 1757 All packets transmitted without error, not including oversized packets rfc1757_StatsUndersize Pkts 1757 The number of packets received during the sampling interval that were less than 64 octets long (excluding framing bits, but including FCS octe
Name RFC Description rfc2233_IfHCOutUcastPkts 2233 The total number of packets that higher-level protocols requested to be transmitted but were not addressed to a multicast or broadcast address at this sublayer, including those packets that were discarded or not sent. This object is a 64-bit version of ifOutUcastPkts. Discontinuities in the value of this counter can occur at reinitialization of the management system and at other times as indicated by the value of ifCounterDiscontinuityTime.
Name RFC Description rfc2665_Dot3Stats ExcessiveCollisions 2665 The number of frames for which transmission on a particular interface fails due to excessive collisions. This counter does not increment when the interface is operating in full-duplex mode. Discontinuities in the value of this counter can occur at reinitialization of the management system and at other times as indicated by the value of ifCounterDiscontinuityTime.
Name RFC Description rfc2665_Dot3StatsLate Collisions 2665 The number of times that a collision is detected on a particular interface later than one slotTime into the transmission of a packet. A late collision included in a count represented by an instance of this object is also considered a generic collision for purposes of other collision-related statistics. This counter does not increment when the interface is operating in full-duplex mode.
Name RFC Description fcBBCreditFrameFailures N/A The number of times that more frames were lost during a credit recovery period than the recovery process could resolve. This causes a Link Reset to recover the credits. fcBBCreditRRDYFailures N/A The number of Buffer-to-Buffer Credit Recovery (BBCR) Receiver Ready (R_RDY) failures. This is the number of times more R_RDYs were lost during a credit recovery period than the recovery process could resolve. This causes a Link Reset to recover the credits.
Name RFC Description fcNumberOffline Sequences FCMGMT The number of Offline Primitive sequence received at this port. This -MIB statistic is for Fibre Channel only. The object type is connUnitPortStatCountNumberOfflineSequences. fcPrimitiveSeqProtocol Errors 4044 The number of primitive sequence protocol errors detected at this port. This count is part of FC-PH's LESB. The object type is fcmPortPrimSeqProtocolErrors.
Name RFC Description numEncodingDisparity Errors FCMGMT The number of disparity errors received at this port. The object type is -MIB connUnitPortStatCountEncodingDisparityErrors. numFBSYFrames FCMGMT The number of times that FBSY was returned to this port as a result of a -MIB frame that could not be delivered to the other end of the link. This occurs on SOFc1 frames (the frames that establish a connection) if either the fabric or the destination port is temporarily busy.
Name RFC Description numRxClass1Frames FCMGMT The number Class 1 frames received at this port. This statistic is for Fibre -MIB Channel only. The object type is connUnitPortStatCountClass1RxFrames. numRxClass2Frames FCMGMT The number of Class 2 frames received at this port. The object type is -MIB connUnitPortStatCountClass2RxFrames. numRxClass3Frames FCMGMT The number of Class 3 frames received at this port. The object type is -MIB connUnitPortStatCountClass3RxFrames.
::= { connUnitPortStatEntry 7 } BYTESTRANSMITTED Object type connUnitPortStatCountTxElements Description The number of octets or bytes transmitted by this port in 1-second periodic polling of the port. This value is saved and compared with the next polled value to compute the net throughput. For Fibre Channel, ordered sets are not included in the count.
FRAMESTOOLONG Object type connUnitPortStatCountFramesTooLong Description The number of frames received at this port where the frame length was greater than what was agreed to in FLOGI/PLOGI. This could be caused by losing the end of frame delimiter. ::= { connUnitPortStatEntry 46 } FRAMESTRANSMITTED Object type connUnitPortStatCountTxObjects Description The number of frames, packets, IOs, and so on that have been transmitted by this port. A Fibre Channel frame starts with SOF and ends with EOF.
Description The number of LRs received ::= { connUnitPortStatEntry 33 } LINKRESETTRANSMITTED Object type connUnitPortStatCountTxLinkResets Description The number of LRs transmitted ::= { connUnitPortStatEntry 34 } LOSSOFSIGNALCOUNTER Object type connUnitPortStatCountLossofSignal Description The number of instances of signal loss detected at this port. This count is part of FC-PH's LESB.
Object type connUnitPortStatCountPRJTFrames Description The number of times that FRJT was returned to this port as a result of a frame being rejected at the destination N_Port. This is the total for all classes.
Configuring the Virtual Connect domain using the CLI Basic configuration A Virtual Connect domain consists of an enclosure and a set of associated modules and server blades that are managed together by a single instance of the VCM. The Virtual Connect domain contains specified networks, server profiles, and user accounts that simplify the setup and administration of server connections.
login as: • password: TACACS+ Authentication >ssh 192.168.0.120 login as: • password: Mechanism-based Authentication >ssh 192.168.0.120 login as: : password: Valid values for auth-mechanism are local, ldap, radius, and tacacs. • For example: >ssh 192.168.0.120 login as: tacacs: password: Role-based Authentication >ssh 192.168.0.
Importing an enclosure To import an enclosure, use the import enclosure command.
IMPORTANT: The RADIUS or TACACS+ server must be set up on a host machine on the management network and configured with users and VC attributes. For more information, see the HP Virtual Connect for c-Class BladeSystem User Guide on the HP website (http://www.hp.com/go/vc/manuals). Configuring TACACS+ authentication support for users To set TACACS+ properties: >set tacacs serveraddress=192.168.0.
To remove all local users except for the Administrator account: >remove user * To display local user information: • • • Summary of all users >show user Details for all users >show user * Details for a single user >show user steve Up to 32 local user accounts can be created. Each user account can be set up to have a combination of up to four access roles. For a list of commands that each role can execute, see "User roles (on page 141).
o Set up the connections to the external FC Fabrics o Configure FC SNMP settings Additional operation permissions can be assigned to network, server, or storage roles such as configuring port monitoring or upgrading VC firmware. It is possible to create a user with no roles. This user can only view status and settings. Configuring the LACP Timer To set the LACP Timer: >set lacp-timer default=Long To display the LACP Timer settings: ->show lacp-timer Obtaining and using a new signed certificate 1.
Network setup To establish external Ethernet network connectivity for the HP BladeSystem c-Class enclosure: 1. Identify the MAC addresses to be used on the server blades deployed within this Virtual Connect domain. 2. Set up connections from the HP BladeSystem c-Class enclosure to the external Ethernet networks. These connections can be uplinks dedicated to a specific Ethernet network or shared uplinks that carry multiple Ethernet networks with the use of VLAN tags.
• When iSCSI connections are used, Virtual Connect assigns a MAC address to each iSCSI connection in the profile. Assigned MAC addresses The MAC address range used by the Virtual Connect domain must be unique within the environment. HP provides a set of pre-defined ranges that are for use by VCM and do not conflict with server factory default MAC addresses. When using the HP-defined MAC address ranges, be sure that each range is used only once within the environment.
Default network access group behaves similarly to earlier versions of VC firmware, because all profiles can reach all networks. If you create a new network access group, NetGroup1, and move existing networks from the Default network access group to NetGroup1, then a profile that uses NetGroup1 cannot use networks included in the Default network access group.
Displaying Ethernet networks To display Ethernet network properties, use the show network command: • • • Summary of all networks >show network Details for all networks >show network * Details for a single network >show network MyNetwork Adding Ethernet networks to a network access group To add existing network access groups to an existing network, use the add nag-network command: >add nag-network Nag=DatabaseNetGroup Network=Net1,Net2 The networks become members of the specified network access group in a
Virtual Connect places no special restrictions on which VLAN identifiers can be used, so the VLAN IDs already used for the networks in the data center can be used on these shared uplinks. To configure a shared uplink set for VLAN tagging, obtain a list of the network names and their VLAN IDs. A shared uplink set enables multiple ports to be included to support port aggregation and link failover with a consistent set of VLAN tags.
forced to use the same VLAN mappings as the shared uplink sets.
• >set domain WwnType=VC-Defined WwnPool=5 Factory default >set domain WwnType=Factory-Default Creating FC fabrics To create a FabricAttach FC SAN fabric and add it to the domain, use the add fabric command: >add fabric MyFabric2 Bay=3 Ports=1 Speed=2Gb To create a DirectAttach fabric for a FlexFabric module and add it to the domain, use the add fabric command: >add fabric MyFabric5 Bay=3 Ports=1,2 Type=DirectAttach For more information about Virtual Connect fabrics, see the HP Virtual Connect for c-Class
• • VC-defined >set serverid Type=VC-Defined PoolId=5 Factory default >set serverid Type=Factory-Default When using the HP-defined serial number ranges, be sure that each range is used only once within the environment. Server profile setup The I/O connection profile, or server profile, provides a link between the server and the networks and fabrics defined in VC. The server profile can include MAC and WWN addresses, as well as boot parameters for the various connection protocols supported by VC.
• The server blade firmware and option card firmware must be at a revision that supports Virtual Connect profile assignment. See the HP website (http://www.hp.com/go/bladesystemupdates). • Before creating the first server profile, do the following: o Select whether to use assigned serial numbers or factory default serial numbers. o Select whether to use movable, administered MAC addresses and WWNs, or the local server blade factory default MAC addresses and WWNs.
Server profiles are associated with a specific enclosure device bay. After a profile is assigned, the Virtual Connect Manager configures the server blade in that device bay with the appropriate MAC, PXE, WWN, and SAN boot settings and connects the appropriate networks and fabrics. Server blades that have been assigned a profile and remain in the same device bay do not require further Virtual Connect Manager configuration during a server or enclosure power cycle.
operating system software as the hardware addresses. To use administered MAC/WWN addresses, select a range of HP pre-defined or user-specified MAC addresses. Review the following list of guidelines before creating and deploying server profiles: IMPORTANT: Before assigning a profile, unassigning a profile, or modifying a profile, be sure to review the "Server blade power on and power off guidelines (on page 189).
• If the VC domain is configured for double-dense server mode and a profile is assigned to an empty server bay, a hot-plug installation of a single-dense server into that server bay results in the profile not being activated. To recover the profile, unassign the profile, and then reassign it. • During a profile assignment, if the port number of an existing fabric has been changed to another physical port, the fabric and the domain go into a failed state until the reconfiguration is complete.
Adding iSCSI connections to a profile To add a new iSCSI connection to an existing server profile, use the add iscsi-connection command: >add iscsi-connection MyProfile network=MyNetwork speedType=custom speed=2000 To configure the boot parameters for the iSCSI connection, use the set iscsi-boot-param command as follows: >set iscsi-boot-param MyProfile1:1 BootOrder=Primary Lun=100 InitiatorName="iqn.2009-09.com.someorg.iSCSI-Initiator" InitiatorIp=192.128.3.1 Mask=255.255.0.0 TargetName="iqn.2009-09.com.
IMPORTANT: Users with server role permissions cannot modify IGMP settings when the VC domain is under VCEM control. To configure Ethernet IGMP snooping settings, use the set igmp command: >set igmp Enabled=true Timeout=30 The IGMP Snooping feature enables VC-Enet modules to monitor (snoop) the IGMP IP multicast membership activities and configure hardware Layer 2 switching behavior of multicast traffic to optimize network resource usage. IGMP v1, v2, and v3 snooping are supported.
To enable network loop protection, use the set port-protect command: >set port-protect networkLoop=Enabled To reset all ports disabled due to the port protection action, use the reset port-protect command: >reset port-protect For more information about the port-protect command, see "port-protect (on page 85)." For more information about configuring the port-protect setting, see "Configuring pause flood protection settings (on page 188).
immediately until an administrative action is taken. The administrative action involves resolving the loop condition and clearing the loop protection error condition. The "loop detected" status on a port can be cleared by one of the following administrative actions: • Restart loop detection by issuing "reset" loop protection from the CLI or GUI. • Unassign all networks from the port in "loop detected" state. The SNMP agent supports trap generation when a loop condition is detected or cleared.
c. Enter the command reset server x, where [x=bay number]. d. Confirm that you want to reset the server blade. 2. Re-enable the disabled ports on the VC interconnect modules using one of the following methods: o Click Re-enable Ports in the GUI. o Use the "reset port-protect" CLI command. The SNMP agent supports trap generation when a pause flood condition is detected or cleared. Virtual Connect provides the ability to enable or disable port pause flood protection.
• Assigning a profile to a server blade already installed in a device bay • Deleting a profile, moving a profile to a different device bay, or unassigning a profile from the existing bay • Making modifications to a profile that affect settings on the server blade; for example, PXE enable/disable, changing the number of connections, or changing Fibre Channel boot parameters • Assigning a VC-assigned serial number The following operations do not require the server blade to be powered off: • Changing
• Removing an FCoE connection from an assigned server profile • Assigning a profile containing FCoE connections to a server • Changing FCoE boot parameters Restart after OA credential recovery The state, "profile recovered," is applied to servers that are powered on when VC Manager restarts after an OA credential recovery.
2 Start with modules in Bays 3–6, create a profile, then edit the profile and add connections. Port 1 2 3 4 Connected to — Bay 3 Bay 3 Bay 4 Bay 5 Bay 5 — Bay 6 — Bay 4 Bay 6 — Port Connected to 1 Bay 3 2 Bay 4 3 Bay 5 4 Bay 6 5 Bay 3 6 Bay 4 7 Bay 5 8 Bay 6 Add connection, 4 times 3 Start with modules in Bays 3 Port 1 and 4, create a profile, install modules into Bays 5 2 and 6, then edit the profile and add connections.
8 Start with modules in Bays 5–8, create a profile, install modules into Bays 3 and 4, then edit the profile. Port 1 2 4 5 Connected to — Bay 5 Bay 3 Bay 6 Bay 5 Bay 7 Bay 7 Bay 8 — Bay 4 Bay 6 Bay 8 Add connection is disallowed because the current FC module configurations do not match the existing connections in the profile. To make this profile useful, remove the two connections, save the profile, and then begin adding connections.
Logging out of the CLI To log out of the CLI, use the exit command: >exit Common management operations The following table provides the syntax for the most commonly used management operations. For more information on a particular command, see "Managed elements (on page 17).
Port status conditions If a port status is unlinked and no connectivity exists, one of the following appears: • Not Linked/E-Key—The port is not linked because of an electronic keying error. For example, a mismatch in the type of technology exists between the server and module ports. • Not Logged In—The port is not logged in to the remote device.
Connect Ethernet module. This feature can be useful when troubleshooting the Virtual Connect Manager. The network and FC processing of the Virtual Connect subsystem is not disturbed during the restart or failover of the Virtual Connect Manager. If the command line option -failover is included in the reset vcm command and a backup Virtual Connect Ethernet module is available, the command line displays the following message: SUCCESS: The Virtual Connect Manager is being reset. Please wait...
Support and other resources Before you contact HP Be sure to have the following information available before you call HP: • Active Health System log (HP ProLiant Gen8 or later products) Download and have available an Active Health System log for 3 days before the failure was detected. For more information, see the HP iLO 4 User Guide or HP Intelligent Provisioning User Guide on the HP website (http://www.hp.com/go/ilo/docs).
Acronyms and abbreviations BPDU Bridge Protocol Data Unit CHAP Challenge Handshake Authentication Protocol CHAPM Mutual Challenge Handshake Authentication Protocol CRC cyclic redundant checks DCBX Datacenter Bridging Capability Exchange protocol DCC device control channel DHCP Dynamic Host Configuration Protocol DNS domain name system EFI extensible firmware interface FC Fibre Channel FCoE Fibre Channel over Ethernet FCS Frame Check Sequence Acronyms and abbreviations 198
GMII Gigabit media independent interface HBA host bus adapter IGMP Internet Group Management Protocol iSCSI Internet Small Computer System Interface LDAP Lightweight Directory Access Protocol LESB Link Error Status Block LLC Logical Link Control LLDP Link Layer Discovery Protocol LUN logical unit number MAC Media Access Control NPIV N_Port ID Virtualization OA Onboard Administrator PVST+ Per VLAN Spanning Tree (over standard 802.
RADIUS Remote Authentication Dial-In User Service RD receive data RMON remote monitoring SOAP Simple Object Access Protocol SSH Secure Shell SSL Secure Sockets Layer TACACS+ Terminal Access Controller Access Control System Plus TFTP Trivial File Transfer Protocol UDP User Datagram Protocol UUID universally unique identifier VC Virtual Connect VCEM Virtual Connect Enterprise Manager VCM Virtual Connect Manager VCSU Virtual Connect Support Utility Acronyms and abbreviations 200
VLAN virtual local-area network WWN World Wide Name WWPN worldwide port name Acronyms and abbreviations 201
Documentation feedback HP is committed to providing documentation that meets your needs. To help us improve the documentation, send any errors, suggestions, or comments to Documentation Feedback (mailto:docsfeedback@hp.com). Include the document title and part number, version number, or the URL when submitting your feedback.
Index A activity command 20 adding FC connections 185, 191 adding FCoE connections 185, 191 all 20 assigned MAC addresses 174 authenticating users 170 authorized reseller 197 auto-deployment 20 B banner command 22 basic configuration 167 C certificate administration 172 cli command 23 CLI command execution modes 12 command batching 15 Command line 17 command line overview 14 command line syntax 9, 15 Command output filtering 14 commands, updated 7 common management operations 194 config command 23 configb
O interconnect command 51 interconnect-mac-table command 50 iSCSI connections 185 iscsi-boot-param command 52 iscsi-connection command 55 options 15 output format 148 overview, command line interface 14 L P ldap command 61 ldap-certificate 58 ldap-group 60 link-dist-interval command 62 lldp command 63 local-users command 63 logging in 167 logging out 194 log-target 64 loop-protect command 66 pause flood protection 188 port monitor 83 port status conditions 195 port-protect command 85, 188 primary remo
SNMP (Simple Network Management Protocol) 117 SNMP access, adding 114 SNMP traps 115 SNMP traps, enabling 115 SSH administration 118 SSH key authorization 118 SSH key authorization, tool definition files 118 SSH key, adding 118 SSH key, administration 118 SSH keys, authorized 118 SSH keys, importing 118 SSL certificate administration 119, 172 SSL certificate signing request 120, 172 ssl command 123 ssl-csr command 120 stackinglink command 123 statistics 124 statistics descriptions 152 statistics-throughput
