HP Ilo 3 User Guide
Here you can view all the pages of manual HP Ilo 3 User Guide. The HP manuals for Server are available online for free. You can easily download all the documents as PDF.
Page 191
objectsmeaningfulnames,suchasthedevicenetworkaddress,DNSname,hostservername, orserialnumber. •ConfigureLights-Outmanagementdevices EveryLOMdevicethatusesthedirectoryservicetoauthenticateandauthorizeusersmustbe configuredwiththeappropriatedirectorysettings.Forinformationonthespecificdirectory settings,see“Configuringauthenticationanddirectoryserversettings”(page52).Ingeneral, youcanconfigureeachdevicewiththeappropriatedirectoryserveraddress,LOMobject...
Page 192
Figure103Adminuser TheAdminroleassignsallAdminrights:ServerReset,RemoteConsole,andLogin(Figure104). Figure104Adminrole Howdirectoryloginrestrictionsareenforced Twosetsofrestrictionscanlimitadirectoryuser'saccesstoLOMdevices(Figure105). •Useraccessrestrictionslimitauser'saccesstoauthenticatetothedirectory. •Roleaccessrestrictionslimitanauthenticateduser'sabilitytoreceiveLOMprivilegesbased onrightsspecifiedinoneormoreroles. Figure105Directoryloginrestrictions 192DirectoryservicesAdmin UserUser...
Page 193
Restrictingroles Restrictionsallowadministratorstolimitthescopeofarole.Arolegrantsrightsonlytouserswho satisfytherolerestrictions.Usingrestrictedrolesresultsinuserswhohavedynamicrightsthatcan changebasedonthetimeofdayornetworkaddressoftheclient. NOTE:Whendirectoriesareenabled,accesstoaparticulariLOisbasedonwhethertheuser hasreadaccesstoaroleobjectthatcontainsthecorrespondingiLOobject.Thisincludes,butis notlimitedto,thememberslistedintheroleobject.Iftheroleisconfiguredtoallowinheritable...
Page 194
rangecanbespecifiedtograntordenyaccesstoasingleaddress.Addressesthatfallwithinthe low-to-highIPaddressrangemeettheIPaddressrestriction. IPaddressandsubnetmaskrestrictions IPaddressandsubnetmaskrestrictionsenabletheadministratortospecifyarangeofaddresses thataregrantedordeniedaccess.ThisformathassimilarcapabilitiesasanIPaddressrange,but mightbemorenativetoyournetworkingenvironment.AnIPaddressandsubnetmaskrangeis typicallyspecifiedthroughasubnetaddressandaddressbitmaskthatidentifiesaddressesonthe...
Page 195
Creatingmultiplerestrictionsandroles Themostusefulapplicationofmultiplerolesisrestrictingoneormorerolessothatrightsdonot applyinallsituations.Otherrolesprovidedifferentrightsunderdifferentconstraints.Usingmultiple restrictionsandrolesenablestheadministratortocreatearbitrary,complexrightsrelationships withaminimumnumberofroles. Forexample,anorganizationmighthaveasecuritypolicyinwhichLOMadministratorsareallowed tousetheLOMdevicefromwithinthecorporatenetwork,butcanresettheserveronlyafterregular...
Page 196
Usingbulkimporttools AddingandconfiguringlargenumbersofLOMobjectsistimeconsuming.HPprovidesseveral utilitiestoassistwiththesetasks. •HPLights-OutMigrationutility TheHPLights-OutMigrationutilityimportsandconfiguresmultipleLOMdevices.Itincludes aGUIthatprovidesastep-by-stepapproachtoimplementingorupgradinglargenumbersof managementprocessors.HPrecommendsusingthisGUImethodwhenupgradingseveral managementprocessors.Formoreinformation,see“UsingHPDirectoriesSupportforProLiant ManagementProcessors”(page197)....
Page 197
•Windows7 •Windows2012 HPDirectoriesSupportforProLiantManagementProcessorspackage Themigrationsoftware,schemaextender,andmanagementsnap-insareincludedintheHP DirectoriesSupportforProLiantManagementProcessorspackage.Youcandownloadtheinstaller fromhttp://www.hp.com/support/ilo3.Tocompletethemigrationofyourmanagementprocessors, youmustextendtheschemaandinstallthemanagementsnap-insbeforerunningthemigration tool. Toinstallthemigrationutilities,starttheinstaller,andthenclickHPDirectoriesSupportforProLiant...
Page 198
•Rangescanalsobespecifiedusingahyphen.Forexample,192.168.0.2-10isavalid range.Ahyphenissupportedonlyintherightmostoctet. •AfteryouclickFind,theutilitybeginspingingandconnectingtoport443(thedefaultSSL port)todeterminewhetherthetargetnetworkaddressisamanagementprocessor.Ifthedevice doesnotrespondtothepingorconnectappropriatelyonport443,theutilitydeterminesthat itisnotamanagementprocessor. IfyouclickNext,clickBack,orexittheutilityduringdiscovery,operationsonthecurrentnetwork...
Page 199
4.EnteryouriLOloginnameandpassword,andthenclickFind. Whenthesearchiscomplete,themanagementprocessorsarelistedandtheFindbutton changestoVerify,asshowninFigure110(page199). Figure110FindManagementProcessorswindow YoucanalsoenteralistofmanagementprocessorsfromafilebyclickingImport.Thefileis asimpletextfilewithonemanagementprocessorlistedperline.Thecolumns,whichare delimitedwithsemicolons,areasfollows: •NetworkAddress •Product •F/WVersion •DNSName •UserName •Password •LDAPStatus •KerberosStatus...
Page 200
Upgradingfirmwareonmanagementprocessors TheUpgradeFirmwarepageenablesyoutoupdatethefirmwareonyouriLOmanagement processors.Italsoenablesyoutodesignatethelocationofthefirmwareimageforeachmanagement processorbyenteringthepathorclickingBrowse. NOTE:Binaryimagesofthefirmwareforthemanagementprocessorsmustbeaccessiblefrom thesystemthatisrunningthemigrationutility.Thesebinaryimagescanbedownloadedfrom http://www.hp.com/support/ilo3. Theupgradeprocessmighttakealongtime,dependingonthenumberofmanagementprocessors...