HP Ilo 3 User Guide
Have a look at the manual HP Ilo 3 User Guide online for free. It’s possible to download the document as PDF or print. UserManuals.tech offer 1114 HP manuals and user’s guides for free. Share the user manual or guide on Facebook, Twitter or Google+.
Configuringpowercappingsettings ThePowerCappingSettingssectionenablesyoutoviewmeasuredpowervalues,setapower cap,anddisablepowercapping. •TheMeasuredPowerValuessectionliststhefollowing: MaximumAvailablePower—Thepowersupplycapacityforanonbladeserver,orthe initialpower-onrequestvalueforabladeserver ◦ ◦PeakObservedPower—Themaximumobservedpowerfortheserver ◦MinimumObservedPower—Theminimumobservedpowerfortheserver DuringPOST,theROMrunstwopowerteststhatdeterminethepeakandminimumobserved powervalues. •PowercapsettingsaredisabledwhentheserverispartofanEnclosureDynamicPowerCap. ThesevaluesaresetandmodifiedbyusingOnboardAdministratororInsightPowerManager. •UsethePowerCapThresholdsasguidelinesforconfiguringapowercap. MaximumPowerCap—Themaximumpoweravailablefortheserver.Theservermustnot exceedthisvalue. ◦ ◦MinimumHigh-PerformanceCap—Themaximumpowerthattheserverusesinthecurrent configuration.Apowercapsettothisvaluedoesnotaffectserverperformance. ◦MinimumPowerCap—Theminimumpowerthattheserverusers.Apowercapsettothis valuereducestheserverpowerusagetotheminimum,whichresultsinserverperformance degradation. •Whenapowercapisset,theaveragepowerreadingoftheservermustbeatorbelowthe powercapvalue. •YoucannotusetheiLOwebinterfacetoconfigurethepowercappingsettingsforSLservers. UseoneofthefollowingtoolstoconfigurethepowercappingsettingsforSLservers: ◦PowerInterfaceControlUtility—Thisutilityisavailableatthefollowingwebsite:http:// h20000.www2.hp.com/bizsupport/TechSupport/SoftwareDescription.jsp? prodTypeId=15351&prodSeriesId=4324034& swItem=MTX-cb0c48d305d24a4dbe80e5eecc&prodNameId=5037746. ◦HPProLiantSLAdvancedPowerManager—Formoreinformation,seetheHPProLiantSL AdvancedPowerManagerUserGuide. Toconfigureapowercap: 1.NavigatetothePowerManagement→PowerSettingspage,asshowninFigure81(page150). 2.SelecttheEnablepowercappingcheckbox. 3.EnterthePowerCapValueinwatts,BTU/hr,orasapercentage. Thepercentageisthedifferencebetweenthemaximumandminimumpowervalues.The powercapvaluecannotbesetbelowtheserverminimumpowervalue. Whenvaluesaredisplayedinwatts,clickShowvaluesinBTU/hrtochangethedisplayto BTU/hr.WhenvaluesaredisplayedinBTU/hr,clickShowvaluesinWattstochangethe displaytowatts. 4.ClickApply. ConfiguringSNMPalertsettings TheSNMPAlertonBreachofPowerThresholdsectionenablesthesendingofanSNMPalertwhen powerconsumptionexceedsadefinedthreshold. ToconfiguretheSNMPalertsettings: UsingiLOPowerManagement151
1.NavigatetothePowerManagement→PowerSettingspage,asshowninFigure81(page150). 2.SelectavalueintheWarningTriggerlist. Thewarningtriggerdetermineswhetherwarningsarebasedonpeakpowerconsumption, averagepowerconsumption,oriftheyaredisabled. 3.EnteravalueintheWarningThresholdbox. Thisvaluesetsthepowerconsumptionthreshold,inwatts.Ifpowerconsumptionexceedsthis valueforthespecifiedtimeduration,anSNMPalertistriggered. 4.EnteravalueintheDurationbox. Thisvaluesetsthelengthoftime,inminutes,thatpowerconsumptionmustremainabovethe warningthresholdbeforeanSNMPalertistriggered.Themaximumdurationis240minutes, andthedurationmustbeamultipleof5. 5.ClickApplytosavetheconfiguration. Configuringthepersistentmouseandkeyboard TheOtherSettingssectiononthePowerSettingspageallowsyoutoenableordisablethepersistent keyboardandmousefeature. Whenthisfeatureisenabled,theiLOvirtualkeyboardandmousearealwaysconnectedtothe iLOUHCIUSBcontroller.Whenthisfeatureisdisabled,theiLOvirtualkeyboardandmouseare connecteddynamicallytotheiLOUHCIcontrolleronlywhenaRemoteConsoleapplicationis openandconnectedtoiLO.DisablingthefeatureallowssomeHPserverstoincreasepowersavings by15wattswhentheserveroperatingsystemisidleandnovirtualUSBkeyboardandmouseare connected. Forexample,thepowersavingsfora24–hourperiodmightbe15wattsx24hours,or360watt hours(.36kilowatt-hours). Thepersistentmouseandkeyboardfeatureisenabledbydefaultbecausesomeoperatingsystems cannotenumeratetheUSBkeyboardcorrectlyduringinstallation. Tochangethepersistentmouseandkeyboardsetting: 1.NavigatetothePowerManagement→PowerSettingspage,asshowninFigure81(page150). 2.SelectorcleartheEnablepersistentmouseandkeyboardcheckbox. 3.ClickApplytosavetheconfiguration. UsingiLOwithOnboardAdministrator OAistheenclosuremanagementprocessor,subsystem,andfirmwarebasethatsupportstheHP BladeSystemandallmanageddevicesintheenclosure. UsingtheActiveOnboardAdministrator TheBLc-Class→ActiveOnboardAdministratorpageprovidesgeneralinformationabouttheprimary OAintheenclosureinwhichtheiLOprocessorislocated.Thispageisdisplayedonlywhenthere isanenclosure.Figure82(page153)showsanexampleofthepage. 152UsingiLO
Figure82ActiveOnboardAdministratorpage Thispagedisplaysthefollowinginformationandoptions: •MACAddress—TheMACaddressoftheactiveOA. •SystemHealth—ThehealthoftheactiveOA,asreportedbytheOA. AvalueofunknownmeansthattheOAhealthhasnotbeenreportedtoiLO. •BladeLocation—Thelocation(enclosurebay)ofthebladethatishostingthecurrentiLOsession. •EnclosureName—TheenclosurethattheactiveOAismanaging.Youcanchangethisvalue throughtheOA. •RackName—TherackthatcontainstheenclosuremanagedbytheactiveOA.Youcanchange thisvaluethroughtheOA. StartingtheOnboardAdministratorGUI 1.NavigatetotheBLc-Class→ActiveOnboardAdministratorpage. 2.IftheOAsupportsmultipleaddresses,selecttheaddresstousefromtheoptionsintheOnboard AdministratorAddressSelectiontable. Dependingontheconfiguration,thefollowingoptionsmightbeavailable: •IPv4 •IPv6SLAAC •IPv6Static •IPv6DHCP 3.ClickLaunch. TheOAGUIopensinanewbrowserwindow. TogglingtheenclosureUIDlight TochangethestateoftheenclosureUIDwhereiLOislocated,clicktheToggleUIDbutton. TheUIDstatusonthispagerepresentstheEnclosureUIDstatuswhentheiLOpageloaded.To updatethestatus,refreshthepage. UsingiLOwithOnboardAdministrator153
EnclosurebayIPaddressing TheFirstTimeSetupWizardpromptsyoutosetupyourenclosurebayIPaddressing.Formore informationaboutthewizard,seetheHPBladeSystemOnboardAdministratorUserGuide. DynamicPowerCappingforserverblades DynamicPowerCappingisaniLOfeatureavailableforc-Classserverblades,andisaccessed throughOA.DynamicPowerCappingisavailableonlyifyoursystemhardwareplatform,BIOS (ROM),andpowermicrocontrollerfirmwareversionsupportthisfeature.Ifyoursystemsupports DynamicPowerCapping,iLOautomaticallyrunsinDynamicPowerCappingmode. Forinformationaboutthepowersettingoptionsforc-Classserverblades,seetheHPBladeSystem OnboardAdministratorUserGuide. iLOvirtualfan Inc-Classbladeservers,OAcontrolstheenclosurefans(alsocalledvirtualfans).TheiLOfirmware cannotdetecttheseenclosurefans.Instead,theiLOfirmwaremonitorsanambienttemperature sensorlocatedonthebladeserver.ThisinformationisdisplayedontheiLOwebinterface,andis retrievedbyOAperiodically.OAusesthesensorinformationcollectedfromalliLOprocessorsin theenclosuretodetermineenclosurefanspeeds. iLOoption TheiLO-DeviceBaypageinOA(Figure83)providesthefollowinglinks: •WebAdministration—StartstheiLOwebinterface •IntegratedRemoteConsole—Startsthe.NETIRC •RemoteConsole—StartstheJavaIRC ClickingalinkonthispageopenstherequestediLOsessioninanewwindowthatusesSSO, whichdoesnotrequireaniLOusernameorpassword.Ifyourbrowsersettingspreventnew windowsfromopening,theselinksdonotworkcorrectly. 154UsingiLO
Figure83OnboardAdministratorpage IPMIservermanagement ServermanagementthroughIPMIisastandardmethodforcontrollingandmonitoringtheserver. TheiLOfirmwareprovidesservermanagementbasedontheIPMIversion2.0specification,which definesthefollowing: •Monitoringofsysteminformationsuchasfans,temperatures,andpowersupplies •Recoverycapabilitiessuchassystemresetsandpoweron/offoperations •Loggingcapabilitiesforabnormaleventssuchasover-temperaturereadingsorfanfailures •Inventorycapabilitiessuchasidentificationoffailedhardwarecomponents IPMIcommunicationsdependontheBMCandtheSMS.TheBMCmanagestheinterfacebetween theSMSandtheplatformmanagementhardware.TheiLOfirmwareemulatestheBMCfunctionality, andtheSMSfunctionalitycanbeprovidedbyvariousindustry-standardtools.Formoreinformation, seetheIPMIspecificationontheIntelwebsiteathttp://www.intel.com/design/servers/ipmi/ tools.htm. TheiLOfirmwareprovidestheKCSinterface,oropeninterface,forSMScommunications.The KCSinterfaceprovidesasetofI/Omappedcommunicationsregisters.Thedefaultsystembase addressfortheI/O-mappedSMSinterfaceis0xCA2,anditisbytealignedatthissystemaddress. IPMIservermanagement155
TheKCSinterfaceisaccessibletotheSMSsoftwarerunningonthelocalsystem.Examplesof compatibleSMSsoftwareapplicationsfollow: •IPMIversion2.0CommandTestTool—Alow-levelMS-DOScommand-linetoolthatenables hex-formattedIPMIcommandstobesenttoanIPMIBMCthatimplementstheKCSinterface. YoucandownloadthistoolfromtheIntelwebsiteathttp://www.intel.com/design/servers/ ipmi/tools.htm. •IPMItool—AutilityformanagingandconfiguringdevicesthatsupporttheIPMIversion1.5 andversion2.0specifications.IPMItoolcanbeusedinaLinuxenvironment.Youcandownload thistoolfromtheIPMItoolwebsiteathttp://ipmitool.sourceforge.net/index.html. WhenemulatingaBMCfortheIPMIinterface,iLOsupportsallmandatorycommandslistedinthe IPMIversion2.0specification.TheSMSshouldusethemethodsdescribedinthespecificationfor determiningwhichIPMIfeaturesareenabledordisabledintheBMC(forexample,usingtheGet Device IDcommand). Iftheserveroperatingsystemisrunning,andtheiLOhealthdriverisenabled,anyIPMItraffic throughtheKCSinterfacecanaffecthealthdriverperformanceandoverallsystemhealth.Donot issueanyIPMIcommandsthroughtheKCSinterfacethatmighthaveanegativeeffectonhealth drivermonitoring.ThisrestrictionincludesanycommandthatsetsorchangesIPMIparameters, suchasSet Watchdog TimerandSet BMC Global Enabled.AnyIPMIcommandthat simplyreturnsdataissafetouse,suchasGet Device IDandGet Sensor Reading. UsingiLOwithHPInsightControlserverdeployment HPInsightControlserverdeploymentisintegratedwithiLOtoenablethemanagementofremote serversandtheperformanceofRemoteConsoleoperations,regardlessofthestateoftheoperating systemorhardware. ThedeploymentserverenablesyoutousethepowermanagementfeaturesofiLOtopoweron, poweroff,orcyclepoweronthetargetserver.Eachtimeaserverconnectstothedeployment server,thedeploymentserverpollsthetargetservertoverifythataniLOdeviceisinstalled.If installed,theservergathersinformation,includingtheDNSname,IPaddress,anduserloginname. Securityismaintainedbyrequiringtheusertoenterthecorrectpasswordforthatusername. FormoreinformationaboutHPInsightControlserverdeployment,seethedocumentationonthe HPInsightControlwebsiteathttp://www.hp.com/go/insightcontrol. 156UsingiLO
5IntegratingHPSystemsInsightManager TheiLOfirmwareisintegratedwithHPSIMinkeyoperatingenvironments,providingasingle managementconsolefromastandardwebbrowser.Whiletheoperatingsystemisrunning,you canestablishaconnectiontoiLObyusingHPSIM. IntegrationwithHPSIMprovidesthefollowing: •SupportforSNMPtrapdeliverytoanHPSIMconsole—TheHPSIMconsolecanbeconfigured toforwardSNMPtrapstoapageroremailaddress. •Supportformanagementprocessors—AlliLOdevicesinstalledinserversonthenetworkare discoveredinHPSIMasmanagementprocessors. •GroupingofiLOmanagementprocessors—AlliLOdevicescanbegroupedlogicallyand displayedononepage. •HPManagementAgents—iLO,combinedwiththeHPManagementAgents,providesremote accesstosystemmanagementinformationthroughtheiLOwebinterface. •SupportforSNMPmanagement—HPSIMcanaccessInsightManagementAgentinformation throughiLO. HPSIMfeatures HPSIMenablesyoutodothefollowing: •IdentifyiLOprocessors. •CreateanassociationbetweenaniLOprocessoranditsserver. •CreatelinksbetweenaniLOprocessoranditsserver. •ViewiLOandserverinformationandstatus. •ControltheamountofinformationdisplayedforiLO. Thefollowingsectionssummarizethesefeatures.Fordetailedinformation,seetheHPSystems InsightManagerUserGuide. EstablishingSSOwithHPSIM 1.ConfigureiLOforHPSIMSSOandaddHPSIMtrustedservers. Forinstructions,see“ConfiguringiLOforHPSSO”(page61). 2.LogintotheHPSIMserverthatyouspecifiedinStep1,anddiscovertheiLOprocessor. Afteryoucompletethediscoveryprocess,SSOisenabledforiLO. FormoreinformationaboutHPSIMdiscoverytasks,seetheHPSystemsInsightManagerUser Guide. iLOidentificationandassociation HPSIMcanidentifyaniLOprocessorandcreateanassociationbetweeniLOandaserver.You canconfigureiLOtorespondtoHPSIMidentificationrequestsbysettingtheLevelofDataReturned valueontheAdministration→Managementpage.Formoreinformation,see“ConfiguringInsight Managementintegration”(page86). ViewingiLOstatusinHPSIM HPSIMidentifiesiLOasamanagementprocessor.HPSIMdisplaysthemanagementprocessor statusontheAllSystemspage. HPSIMfeatures157
TheiLOmanagementprocessorisdisplayedasanicononthesamerowasitshostserver.The coloroftheiconrepresentsthestatusofthemanagementprocessor. Foralistofdevicestatuses,seetheHPSystemsInsightManagerUserGuide. iLOlinksinHPSIM Foreaseofmanagement,HPSIMcreateslinkstothefollowing: •iLOandthehostserverfromanySystem(s)list •TheserverfromtheSystempageforiLO •iLOfromtheSystempagefortheserver TheSystem(s)listpagesdisplayiLO,theserver,andtherelationshipbetweeniLOandtheserver. •ClickastatusicontodisplaytheiLOwebinterface. •ClicktheiLOorservernametodisplaytheSystempageofthedevice. ViewingiLOinHPSIMSystem(s)lists iLOmanagementprocessorscanbeviewedinHPSIM.Auserwhohasfullconfigurationrights cancreateandusecustomizedsystemcollectionstogroupmanagementprocessors.Formore information,seetheHPSystemsInsightManagerUserGuide. ReceivingSNMPalertsinHPSIM YoucanconfigureiLOtoforwardalertsfromthemanagementagentsofthehostoperatingsystem andtosendiLOalertstoHPSIM. HPSIMsupportsfullSNMPmanagement.iLOsupportsSNMPtrapdeliverytoHPSIM.Youcan viewtheeventlog,selecttheevent,andviewadditionalinformationaboutthealert. ConfiguringthereceiptofSNMPalertsinHPSIM: 1.ToenableiLOtosendSNMPtraps,navigatetotheAdministration→Managementpageand configurethesettingsforSNMP,SNMPalerting,andInsightManagementIntegration.Enter theIPaddressoftheHPSIMcomputerintheSNMPAlertDestination(s)box. Formoreinformation,see“ConfiguringiLOManagementsettings”(page84). 2.TodiscoveriLOinHPSIM,configureiLOasamanageddeviceforHPSIM. ThisenablestheNICinterfaceoniLOtofunctionasadedicatedmanagementport,isolating managementtrafficfromtheNICinterfacefortheremotehostserver.Forinstructions,seethe HPSystemsInsightManagerUserGuide. Formajoreventsthatarenotcleared,iLOtrapsappearinAllEvents.Toobtainmore informationabouttheevent,clickEventType. HPSIMportmatching HPSIMisconfiguredtostartanHTTPsessiontocheckforiLOatport80.Ifyouwanttochange theportnumber,youmustchangeitinbothiLOandHPSIM. •TochangetheportiniLO,navigatetotheAdministration→AccessSettingspage,andthen enterthenewportnumberintheWebServerNon-SSLPortbox. •TochangetheportnumberinHPSIM,addtheporttotheconfig\identification\ additionalWsDisc.propsfileintheHPSIMinstallationdirectory.IfiLOusesthedefault port(80),youdonotneedtoeditthisfile. Theportentrymustbeonasinglelinewiththeportnumberfirst,andwithallotheritems identicaltothefollowingexample(includingcapitalization).Thisexampleshowsthecorrect entryfordiscoveringiLOatport55000. 158IntegratingHPSystemsInsightManager
55000=iLO 3, ,true,false,com.hp.mx.core.tools.identification.mgmtproc.MgmtProcessorParser ReviewingiLOlicenseinformationinHPSIM HPSIMdisplaysthelicensestatusoftheiLOmanagementprocessors.Youcanusethisinformation todeterminehowmanyandwhichiLOdeviceshaveanoptionallicenseinstalled. Toviewlicenseinformation,selectDeploy→LicenseManager.Toensurethatthedisplayeddata iscurrent,runtheIdentifySystemstaskforyourmanagementprocessors.Formoreinformation, seetheHPSystemsInsightManagerUserGuide. ReviewingiLOlicenseinformationinHPSIM159
6Directoryservices ThischapterdescribeshowtoconfigureiLOtouseKerberoslogin,schema-freedirectory authentication,andHPextendedschemadirectoryauthentication. Directoryintegrationbenefits DirectoryintegrationwithiLOprovidesthefollowingbenefits: •Scalability—Thedirectorycanbeleveragedtosupportthousandsofusersonthousandsof iLOprocessors. •Security—Robustuser-passwordpoliciesareinheritedfromthedirectory.User-password complexity,rotationfrequency,andexpirationarepolicyexamples. •Useraccountability—Insomeenvironments,usersshareiLOaccounts,whichmakesitdifficult todeterminewhoperformedanoperation. •Role-basedadministration—Youcancreateroles(forexample,clerical,remotecontrolofthe host,completecontrol)andassociateusersorusergroupswiththoseroles.Achangetoa singleroleappliestoallusersandiLOdevicesassociatedwiththatrole. •Singlepointofadministration—YoucanusenativeadministrativetoolslikeMMCand ConsoleOnetoadministeriLOusers. •Immediacy—AsinglechangeinthedirectoryrollsoutimmediatelytoassociatediLOprocessors. Thiseliminatestheneedtoscriptthisprocess. •Simplercredentials—Youcanuseexistinguseraccountsandpasswordsinthedirectorywithout havingtorecordanewsetofcredentialsforiLO. •Flexibility—YoucancreateasingleroleforasingleuseronasingleiLOprocessor,asingle roleformultipleusersonmultipleiLOprocessors,oracombinationofrolesassuitedtoyour enterprise. •Compatibility—iLOdirectoryintegrationsupportsActiveDirectoryandeDirectory. •Standards—iLOdirectorysupportisbasedontheLDAP2.0standardforsecuredirectory access. ChoosingadirectoryconfigurationtousewithiLO SomedirectoryconfigurationpracticesworkbetterwithiLOthanothers.BeforeyouconfigureiLO fordirectories,youmustdecidewhethertousetheschema-freedirectoryintegrationmethodor theHPextendedschemadirectoryintegrationmethod.Answerthefollowingquestionstohelp evaluateyourdirectoryintegrationrequirements: 1.Canyouapplyschemaextensionstoyourdirectory? •No—YouareusingActiveDirectory,andyourcompanypolicyprohibitsapplying extensions. No—Directoryintegrationdoesnotfityourenvironment.Considerdeployinganevaluation servertoassessthebenefitsofdirectoryintegration. Usegroup-basedschema-freedirectoryintegration.Formoreinformation,see“Schema-free directoryintegration”(page166). •Yes—Proceedtoquestion2. 160Directoryservices