IBM Remote Supervisor Adapter II manual

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132

Ir a la página of

Buen manual de instrucciones

Las leyes obligan al vendedor a entregarle al comprador, junto con el producto, el manual de instrucciones IBM Remote Supervisor Adapter II. La falta del manual o facilitar información incorrecta al consumidor constituyen una base de reclamación por no estar de acuerdo el producto con el contrato. Según la ley, está permitido adjuntar un manual de otra forma que no sea en papel, lo cual últimamente es bastante común y los fabricantes nos facilitan un manual gráfico, su versión electrónica IBM Remote Supervisor Adapter II o vídeos de instrucciones para usuarios. La condición es que tenga una forma legible y entendible.

¿Qué es un manual de instrucciones?

El nombre proviene de la palabra latina “instructio”, es decir, ordenar. Por lo tanto, en un manual IBM Remote Supervisor Adapter II se puede encontrar la descripción de las etapas de actuación. El propósito de un manual es enseñar, facilitar el encendido o el uso de un dispositivo o la realización de acciones concretas. Un manual de instrucciones también es una fuente de información acerca de un objeto o un servicio, es una pista.

Desafortunadamente pocos usuarios destinan su tiempo a leer manuales IBM Remote Supervisor Adapter II, sin embargo, un buen manual nos permite, no solo conocer una cantidad de funcionalidades adicionales del dispositivo comprado, sino también evitar la mayoría de fallos.

Entonces, ¿qué debe contener el manual de instrucciones perfecto?

Sobre todo, un manual de instrucciones IBM Remote Supervisor Adapter II debe contener:
- información acerca de las especificaciones técnicas del dispositivo IBM Remote Supervisor Adapter II
- nombre de fabricante y año de fabricación del dispositivo IBM Remote Supervisor Adapter II
- condiciones de uso, configuración y mantenimiento del dispositivo IBM Remote Supervisor Adapter II
- marcas de seguridad y certificados que confirmen su concordancia con determinadas normativas

¿Por qué no leemos los manuales de instrucciones?

Normalmente es por la falta de tiempo y seguridad acerca de las funcionalidades determinadas de los dispositivos comprados. Desafortunadamente la conexión y el encendido de IBM Remote Supervisor Adapter II no es suficiente. El manual de instrucciones siempre contiene una serie de indicaciones acerca de determinadas funcionalidades, normas de seguridad, consejos de mantenimiento (incluso qué productos usar), fallos eventuales de IBM Remote Supervisor Adapter II y maneras de solucionar los problemas que puedan ocurrir durante su uso. Al final, en un manual se pueden encontrar los detalles de servicio técnico IBM en caso de que las soluciones propuestas no hayan funcionado. Actualmente gozan de éxito manuales de instrucciones en forma de animaciones interesantes o vídeo manuales que llegan al usuario mucho mejor que en forma de un folleto. Este tipo de manual ayuda a que el usuario vea el vídeo entero sin saltarse las especificaciones y las descripciones técnicas complicadas de IBM Remote Supervisor Adapter II, como se suele hacer teniendo una versión en papel.

¿Por qué vale la pena leer los manuales de instrucciones?

Sobre todo es en ellos donde encontraremos las respuestas acerca de la construcción, las posibilidades del dispositivo IBM Remote Supervisor Adapter II, el uso de determinados accesorios y una serie de informaciones que permiten aprovechar completamente sus funciones y comodidades.

Tras una compra exitosa de un equipo o un dispositivo, vale la pena dedicar un momento para familiarizarse con cada parte del manual IBM Remote Supervisor Adapter II. Actualmente se preparan y traducen con dedicación, para que no solo sean comprensibles para los usuarios, sino que también cumplan su función básica de información y ayuda.

Índice de manuales de instrucciones

  • Página 1

    Rem ot e Su p e rvis o r Ad a p t e r II SlimLin e an d Re mo t e S u pe rvis o r Ad a p t e r II Us er ’ s Gu i d e [...]

  • Página 2

    [...]

  • Página 3

    Rem ot e Su p e rvis o r Ad a p t e r II SlimLin e an d Re mo t e S u pe rvis o r Ad a p t e r II Us er ’ s Gu i d e [...]

  • Página 4

    Note: Before using this information and the product it supports, read the general information in Appendix B, “Notices,” on page 1 15. Seventh Edition (April 2007) © Copyright International Business Machines Corporation 2003, 2007. All rights reserved. US Government Users Restricted Rights – Use, duplication or disclosure restricted by GSA AD[...]

  • Página 5

    Contents Chapter 1. Introduction . . . . . . . . . . . . . . . . . . . . . .1 Remote Supervisor Adapter II features . . . . . . . . . . . . . . . .1 Web browser and operating-system requirements . . . . . . . . . . . .3 Notices used in this book . . . . . . . . . . . . . . . . . . . . .3 Chapter 2. Opening and using the Web interface . . . . . . . [...]

  • Página 6

    Using the configuration file . . . . . . . . . . . . . . . . . . . .6 4 Backing up your current configuration . . . . . . . . . . . . . . .6 4 Restoring and modifying your ASM configuration . . . . . . . . . . .6 5 Restoring ASM defaults . . . . . . . . . . . . . . . . . . . . . .6 6 Restarting ASM . . . . . . . . . . . . . . . . . . . . . . . . .6[...]

  • Página 7

    srcfg command . . . . . . . . . . . . . . . . . . . . . . . 104 ssl command . . . . . . . . . . . . . . . . . . . . . . . . 105 tcpcmdmode command . . . . . . . . . . . . . . . . . . . . 106 timeouts command . . . . . . . . . . . . . . . . . . . . . . 107 users command . . . . . . . . . . . . . . . . . . . . . . . 108 ASM control commands . . . . .[...]

  • Página 8

    vi Remote Supervisor Adapter II SlimLine and Remote Supervisor Adapter II: User ’s Guide[...]

  • Página 9

    Chapter 1. Introduction This document explains how to use the functions of the IBM ® Remote Supervisor Adapter II SlimLine and the IBM Remote Supervisor Adapter II when they are installed in an IBM server . The Remote Supervisor Adapter II SlimLine and the Remote Supervisor Adapter II provide the following functions: v Around-the-clock remote acce[...]

  • Página 10

    v Alphanumeric or numeric pager alerts (not supported with the Remote Supervisor Adapter II SlimLine) v Automatic notification and alerts v Automated Server Restart (ASR) v Continuous health monitoring and control v Domain Name System (DNS) server support v Dynamic Host Configuration Protocol (DHCP) support v E-mail alerts v Enhanced user authority[...]

  • Página 11

    We b browser and operating-system requirements The Remote Supervisor Adapter II Web interface requires the Java ™ Plug-in 1.4 or later and one of the following Web browsers: v Microsoft ® Internet Explorer version 5.5 or later with the latest Service Pack v Netscape Navigator version 7.0 or later v Mozilla version 1.3 or later (Remote Control fe[...]

  • Página 12

    4 Remote Supervisor Adapter II SlimLine and Remote Supervisor Adapter II: User ’s Guide[...]

  • Página 13

    Chapter 2. Opening and using the We b interface To access the Remote Supervisor Adapter II remotely using the Remote Supervisor Adapter II Web interface, you must log in to the adapter . This chapter describes the login procedures and describes the actions you can perform from the Remote Supervisor Adapter II Web interface. Logging in to the Remote[...]

  • Página 14

    3. Depending on how your system administrator has configured the user ID, the following window might open. 4. The Welcome window opens. Select a timeout value from the drop-down list in the field that is provided. If your browser is inactive for that number of minutes, the Remote Supervisor Adapter II logs you off the Remote Supervisor Adapter II W[...]

  • Página 15

    5. Click Continue to start the session. The browser opens the System Status page, which gives you a quick view of the server status and the server health summary . For descriptions of the actions that you can perform from the links in the left navigation pane of the Remote Supervisor Adapter II Web interface, see “Remote Supervisor Adapter II act[...]

  • Página 16

    Remote Supervisor Adapter II action descriptions T able 1 lists the actions that are available when you are logged in to the Remote Supervisor Adapter II. T able 1. Remote Supervisor Adapter II actions Link Action Description System Status View system health for a server , view the operating-system-failure screen capture, and view the users who are[...]

  • Página 17

    T able 1. Remote Supervisor Adapter II actions (continued) Link Action Description Access Remote ASM 2 Access other service processors on the ASM interconnect network From the Access Remote ASM page, you can view a list of service processors that are present on the ASM interconnect network and establish a connection to any of those systems. Note: S[...]

  • Página 18

    T able 1. Remote Supervisor Adapter II actions (continued) Link Action Description Security Configure the Secure Sockets Layer (SSL) Yo u can enable or disable SSL and manage the SSL certificates that are used. Yo u can also enable or disable whether an SSL connection is used to connect to an LDAP server . Configuration File Back up and restore the[...]

  • Página 19

    Chapter 3. Configuring the Remote Supervisor Adapter II Use the links under ASM Control in the navigation pane to configure the Remote Supervisor Adapter II. v From the System Settings page, you can: – Set system information – Select the operating system to support (Microsoft Windows or Linux) Important: For the Remote Supervisor Adapter II to [...]

  • Página 20

    – TCP command mode protocol – Service location protocol v From the Security page, you can install and configure the Secure Sockets Layer (SSL) settings. v From the Configuration File page, you can back up, modify , and restore the configuration of the Remote Supervisor Adapter II. v From the Restore Defaults page, you can reset the Remote Super[...]

  • Página 21

    field can contain up to 63 characters. To minimize confusion, set the ASM Name field to the nonqualified portion of the IP host name. The nonqualified IP host name consists of up to the first period of a fully qualified IP host name. For example, for the fully qualified IP host name asmcard1.us.company .com, the nonqualified IP host name is asmcard[...]

  • Página 22

    v Nonmaskable interrupt 3. Enable the server timeouts that correspond to the events that you want the Remote Supervisor Adapter II to respond to automatically . POST watchdog Use the POST watchdog field to specify the number of minutes that the Remote Supervisor Adapter II will wait for the server to complete a power-on self-test (POST). If the ser[...]

  • Página 23

    POST and the starting of the operating system. If this interval is exceeded, the Remote Supervisor Adapter II generates a loader timeout alert and automatically restarts the server . After the server is restarted, the loader timeout is automatically disabled until the operating system is shut down and the server is power cycled (or until the operat[...]

  • Página 24

    To disable the automatic server restart after a nonmaskable interrupt, select Disabled . 4. Scroll to the bottom of the page and click Save . Setting the date and time The Remote Supervisor Adapter II contains its own real-time clock to time stamp all events that are logged in the event log. Alerts that are sent by e-mail, LAN, and SNMP use the rea[...]

  • Página 25

    Synchronizing clocks in a network The Network T ime Protocol (NTP) provides a way to synchronize clocks throughout a computer network, enabling any NTP client to obtain the correct time from an NTP server . The Remote Supervisor Adapter II NTP feature provides a way to synchronize the Remote Supervisor Adapter II real-time clock with the time that [...]

  • Página 26

    Disabling the USB device driver interface If you want to prevent any application that is running on the server from requesting the Remote Supervisor Adapter II to perform tasks, you must disable the USB device driver interface. To disable the USB device driver interface, complete the following steps. 1. Log in to the Remote Supervisor Adapter II on[...]

  • Página 27

    Note: By default, the Remote Supervisor Adapter II is configured with one login profile that enables remote access using a login user ID of USERID and a password of PASSW0RD (the 0 is a zero, not the letter O). To avoid a potential security exposure, change this default login profile during the initial setup of the Remote Supervisor Adapter II. 3. [...]

  • Página 28

    Note: This login ID is used to grant remote access to the Remote Supervisor Adapter II. 5. In the Password field, assign a password to the login ID. A password must contain at least five characters, one of which must be a nonalphabetic character . Null or empty passwords are accepted. Note: This password is used with the login ID to grant remote ac[...]

  • Página 29

    1. Log in to the Remote Supervisor Adapter II for which you want to set the global login settings. For more information, see Chapter 2, “Opening and using the Web interface,” on page 5. 2. In the navigation pane, click Login Profiles . 3. Scroll down to the Global Login Settings area. A page similar to the one in the following illustration is d[...]

  • Página 30

    Yo u can view and change the account security management configuration on the Custom Security Settings page. When you change the User login password required setting, you must also have a password, to be consistent with the requirement. User login password required Use this field to indicate whether a login ID with no password is allowed. Number of[...]

  • Página 31

    2. Yo u cannot distinguish between the alerts that are sent to remote alert recipients. All configured recipients receive each alert that you select. Configuring remote alert recipients Notes: 1. For the Remote Supervisor Adapter II SlimLine, the configuring remote alert recipients feature is available only when using LAN-based alert functionality [...]

  • Página 32

    4. To have only critical alerts sent to the recipient, select the Receives critical alerts only check box. 5. In the Status field, click Enabled to activate the remote alert recipient. 6. In the Name field, type the name of the recipient or other identifier . The name that you type appears as the link for the recipient on the Alerts page. 7. In the[...]

  • Página 33

    For example, to log in to the IBM Global Network ® , the PPP login ID is in the following format: secureip. y. z where y is your account name and z is your user ID. 11 . In the PPP password field, type the password that is used to log in to the ISP . This field is required only for E-mail over PPP and SNMP over PPP notification methods. 12. Click [...]

  • Página 34

    To verify whether the selected Remote Supervisor Adapter II is the gateway to the interconnect network, complete the following steps: 1. Log in to the Remote Supervisor Adapter II for which you want to see the alert forwarding status. For more information, see Chapter 2, “Opening and using the Web interface,” on page 5. 2. In the navigation pan[...]

  • Página 35

    Remote alert retry limit Use the Remote alert retry limit field to specify the number of additional times that the Remote Supervisor Adapter II will attempt to send an alert to a recipient. Delay between entries Use the Delay between entries field to specify the time interval (in minutes) that the Remote Supervisor Adapter II will wait before sendi[...]

  • Página 36

    T able 2. Critical remote alerts Alphanumeric pager code Alphanumeric recovery code Event Action 00 50 T emperature irregularity Generates an alert if any of the monitored temperatures are outside critical threshold values. To view the threshold values, click the temperature readings on the System Health page. If a critical temperature condition is[...]

  • Página 37

    System alerts System alerts are generated for events that occur as a result of system errors. If the Select all system alerts check box is selected, an alert can be sent for any system alert. Notes: a. The Select all system alerts check box is not available on all servers. b. Hard disk drive Predictive Failure Analysis (PF A) alerts are not monitor[...]

  • Página 38

    1. Log in to the Remote Supervisor Adapter II where you want to set local events. For more information, see Chapter 2, “Opening and using the Web interface,” on page 5. 2. In the navigation pane, click Alerts and scroll down to the Monitored Local Events area. 3. Select the events that you want to store in the event log. The Remote Supervisor A[...]

  • Página 39

    2. In the navigation pane, click Serial Port . A page similar to the one in the following illustration is displayed. 3. In the Port function field, select the function for which this serial port will be used. If the Remote Supervisor Adapter II supports point-to-point protocol (PPP) over a serial port, select PPP as the port function to enable the [...]

  • Página 40

    Set these values only if the alert forwarding functions are not working properly . Each string that is marked with an asterisk (*) must have a carriage return (^M) manually entered at the end of the field value. The following table describes the initialization strings for this modem. T able 6. Port 1 settings Field What you type Initialization stri[...]

  • Página 41

    T able 6. Port 1 settings (continued) Field What you type Escape guard (0 - 250) T ype the length of idle time that is used before and after the escape string is issued to the modem, so that the modem will recognize the escape string. This value is measured in 10-millisecond intervals. The default value is 1 second. 9. Click Save . If you need to p[...]

  • Página 42

    v Yo u update the Remote Supervisor Adapter II firmware. For information about obtaining Remote Supervisor Adapter II firmware and software, see the Installation Guide . v Y our operating system has serial support for text management in the operating system. The following operating systems have serial support: – Microsoft Windows Server 2003 Ente[...]

  • Página 43

    b. Configure the Baud rate , Parity , and Stop bits fields to match the serial port settings on the server . Notes: 1) Serial redirection does not support hardware-based flow control. Disable the terminal flow control. 2) To prevent buffer overrun and character loss, configure both serial ports with the same baud rate. The Remote Supervisor Adapter[...]

  • Página 44

    Note: All traf fic from COM2 is now routed to the T elnet session. All traffic from the T elnet session is routed to COM2. ESC ( Note: In the default mode (EMS compatible), press Esc then the open parenthesis symbol [ ( ] to return to the command-line interface. SN# J1RAE32S000> exit (Press Enter.) Configuring the command-line interface settings[...]

  • Página 45

    sequences are defined by the Microsoft Windows Server 2003 Emergency Management Services specification. The key sequences that are supported are described in the following table. T able 7. Supported Emergency Management Services key sequences T ask Key sequence Enter the Remote Supervisor Adapter II command-line interface Press Esc ( The Remote Sup[...]

  • Página 46

    EMS reset key sequence is not available, and the Remote Supervisor Adapter II will not issue the EMS acknowledgment when the enter key sequence is accepted. 5. At the bottom of the page, click Save . 6. To begin using the new settings, in the left navigation pane, click Restart ASM . To set up the hardware connections, see the Installation Guide . [...]

  • Página 47

    SSH This is the port for the SSH. The default is 22. SNMP Agent This is the port number for the SNMP agent that runs on the Remote Supervisor Adapter II. The default value is 161. Other valid values are in the range 1 through 65535. SNMP T raps This is the port number that is used for SNMP traps. The default value is 162. Other valid values are in [...]

  • Página 48

    3. If you want to use an Ethernet connection, select Enabled in the Interface field. Ethernet is enabled by default. 4. If you want to use a Dynamic Host Configuration Protocol (DHCP) server connection, enable it by clicking either of the following choices in the DHCP field: v Enabled v Tr y DHCP server . If it fails, use static IP config. The defa[...]

  • Página 49

    qualified IP host name. For example, for the fully qualified IP host name asmcard1.us.company .com, the nonqualified IP host name is asmcard1. For information about your host name, see “Setting system information” on page 12. 6. In the IP address field, type the IP address of the Remote Supervisor Adapter II. The IP address must contain four in[...]

  • Página 50

    T able 9. Advanced Ethernet setup (continued) Field Function Burned-in MAC address The burned-in MAC address is a unique physical address that is assigned to this Remote Supervisor Adapter II by the manufacturer . The address is also a read-only field. Locally administered MAC address Enter a physical address for this Remote Supervisor Adapter II i[...]

  • Página 51

    3. In the Interface field, select Enabled . 4. In the Local IP address field, type the local IP address for the PPP interface on this Remote Supervisor Adapter II. The field defaults to 192.96.1.1. The IP address must contain four integers from 0 through 255 separated by periods and no spaces. 5. In the Remote IP address field, type the remote IP a[...]

  • Página 52

    Note: If you plan to configure Simple Network Management Protocol (SNMP) traps on the Remote Supervisor Adapter II, you must install and compile the management information base (MIB) on your SNMP manager . The MIB supports SNMP traps. The MIB is included in the Remote Supervisor Adapter II firmware update package that you downloaded from the IBM Su[...]

  • Página 53

    6. Set up a community to define the administrative relationship between SNMP agents and SNMP managers. Yo u must define at least one community . Each community definition consists of the following parameters: v Name v IP address v Access T ype (Refresh 2 or later firmware only) If any of these parameters is not correct, SNMP management access is no[...]

  • Página 54

    1. Log in to the Remote Supervisor Adapter II where you want to configure SMTP . For more information, see Chapter 2, “Opening and using the Web interface,” on page 5. 2. In the navigation pane, click Network Protocols and scroll down to the SMTP area. 3. In the SMTP Server Host Name or IP Address field, type the host name of the SMTP server . [...]

  • Página 55

    The Remote Supervisor Adapter II contains a V ersion 2.0 LDAP client that you can configure to provide user authentication through one or more LDAP servers. The LDAP server that is to be used for authentication can be discovered dynamically or manually preconfigured. 3. Choose one of the following methods to configure the LDAP client: v To dynamica[...]

  • Página 56

    Service Name The DNS SRV request that is sent to the DNS server must also specify a service name. The configured value is used. If this field is left blank, the default value is ldap. The DNS SRV request must also specify a protocol name. The default is tcp and is not configurable. v To use a preconfigured LDAP server , select Use Pre-Configured LD[...]

  • Página 57

    Binding Method Before the LDAP server can be searched or queried, a bind request must be sent. This parameter controls how this initial bind to the LDAP server is performed. Choose from the following three options: – Anonymously . Bind without a DN or password. This option is strongly discouraged because most servers are configured to not allow s[...]

  • Página 58

    3. To configure the search attributes, use the following information. UID Search Attribute When the selected binding method is Anonymously or w/ Configured Credentials , the initial bind to the LDAP server is followed by a search request that is directed at retrieving specific information about the user , including the distinguished name, login per[...]

  • Página 59

    The IBMRBSPermission= keyword is used to allow it to be placed anywhere in the attribute field. This enables the LDAP administrator to reuse an existing attribute, therefore preventing an extension to the LDAP schema. This also enables the attribute to be used for its original purpose. Yo u can add the keyword string anywhere in the attribute field[...]

  • Página 60

    Priority is given to login permissions that are retrieved directly from the user record. If the login permission attribute is not in the user ’s record, an attempt is made to retrieve the permissions from the groups to which the user belongs. This is done as part of the group authentication phase. The user is assigned the inclusive OR of all the [...]

  • Página 61

    3. Yo u can configure the following parameters: Address type This is the address type that the MM SLP server listens on. If Broadcast is selected, the SLP server listens on the broadcast address of 255.255.255.255. If Multicast is selected, the SLP server listens on the IP address that is specified in the Multicast address field. The default for th[...]

  • Página 62

    between the Remote Supervisor Adapter II and an LDAP server . If you are not familiar with the use of SSL certificates, read the information in “SSL certificate overview.” Use the following general tasks list to configure the security for the Remote Supervisor Adapter II: 1. Configure the Secure We b server: a. Disable the SSL server . Use the [...]

  • Página 63

    The function of the certificate authority is to verify the identity of the Remote Supervisor Adapter II. A certificate contains digital signatures for the certificate authority and the Remote Supervisor Adapter II. If a well-known certificate authority issues the certificate or if the certificate of the certificate authority has already been import[...]

  • Página 64

    b. Before you can enable SSL, a valid SSL certificate must be in place. c. To use SSL, you must configure a client We b browser to use SSL3 or TLS. Older export-grade browsers with only SSL2 support cannot be used. 3. In the SSL Server Certificate Management area, select Generate a New Key and a Self-signed Certificate . A page similar to the one i[...]

  • Página 65

    4. T ype the information in the required fields and any optional fields that apply to your configuration. The fields are the same as for the self-signed certificate, with some additional fields. Read the information in the following sections for a description of each of the common fields. Required certificate data The following user-input fields ar[...]

  • Página 66

    Web address to the name that appears in the certificate. To prevent certificate warnings from the browser , the value that is used in this field must match the host name that is used by the browser to connect to the Remote Supervisor Adapter II. For example, if the address in the Web address bar is http://mm1 1.xyz.com/private/ main.ssi, the value [...]

  • Página 67

    name that is assigned to the Remote Supervisor Adapter II. This field can contain a maximum of 60 characters. 5. After completing the information, click Generate CSR . The new encryption keys and certificate are generated. This process might take several minutes. A page similar to the one in the following illustration is displayed when the process [...]

  • Página 68

    10. Click Browse . 11 . Click the certificate file that you want and then click Open . The file name (including the full path) is displayed in the field next to the Browse button. 12. Click Import Server Certificate to begin the process. A progress indicator is displayed as the file is transferred to storage on the Remote Supervisor Adapter II. Con[...]

  • Página 69

    SSL client trusted certificate management The secure SSL client (LDAP client) uses trusted certificates to positively identify the LDAP server . A trusted certificate can be the certificate of the certificate authority that signed the certificate of the LDAP server , or it can be the actual certificate of the LDAP server . At least one certificate [...]

  • Página 70

    The Remove button is now available for the T rusted CA Certificate 1 option. If you want to remove a trusted certificate, click the corresponding Remove button. Yo u can import other trusted certificates using the T rusted CA Certificate 2 and the T rusted CA Certificate 3 Import buttons. Enabling SSL for the LDAP client Use the SSL Client Configur[...]

  • Página 71

    Secure Shell users are authenticated by exchanging user ID and password. The password and user ID are sent after the encryption channel is established. The user ID and password pair can be one of the 12 locally stored user IDs and passwords, or they can be stored on an LDAP server . Public key authentication is not supported. Generating a Secure Sh[...]

  • Página 72

    3. Click Enabled in the SSH Server field. 4. In the navigation pane, click Restart ASM to restart the Remote Supervisor Adapter II. Using the Secure Shell server If you are using the Secure Shell client that is included in Red Hat Linux version 7.3, to start a Secure Shell session to a Remote Supervisor Adapter II with network address 192.168.70.13[...]

  • Página 73

    1. Log in to the Remote Supervisor Adapter II where you want to back up your current configuration. For more information, see Chapter 2, “Opening and using the Web interface,” on page 5. 2. In the navigation pane, click Configuration File . 3. In the Backup ASM Configuration area, click view the current configuration summary . 4. V erify the se[...]

  • Página 74

    Note: The security settings on the Security page are not restored by the restore operation. To modify security settings, see “Secure Web server and secure LDAP” on page 53. 7. After receiving a confirmation that the restore process is complete, in the navigation pane, click Restart ASM ; then, click Restart . 8. Click OK to confirm that you wan[...]

  • Página 75

    2. If you are running Internet Explorer or Netscape Navigator , click Ye s in the confirmation window . The current browser window closes to maintain security . Yo u must manually close other open browser windows, if any , to prevent a cached version of your user ID and password from remaining available. Chapter 3. Configuring the Remote Supervisor[...]

  • Página 76

    68 Remote Supervisor Adapter II SlimLine and Remote Supervisor Adapter II: User ’s Guide[...]

  • Página 77

    Chapter 4. Monitoring remote server status Use the links under the Monitors heading of the navigation pane to view the status of the server that you are accessing. From the System Status pages, you can: v Monitor the power status of the server and view the state of the operating system v View the server temperature readings, voltage thresholds, and[...]

  • Página 78

    v Either a red circle that contains an X or a yellow triangle that contains an exclamation point and the phrase One or more monitored parameters are abnormal If the monitored parameters are operating outside normal ranges, a list of the specific abnormal parameters is displayed on the System Health Summary page. 3. Scroll down to the T emperatures [...]

  • Página 79

    Note: The hard shutdown alert is sent only if a soft shutdown alert has not yet been sent. If the system is monitored by a baseboard management controller (BMC) instead of the Remote Supervisor Adapter II, the IPMI thresholds that are supported by the BMC are displayed on the T emperature Thresholds page. The Remote Supervisor Adapter II generates [...]

  • Página 80

    Soft Shutdown When the voltage drops below or exceeds a specified voltage range, a voltage alert is sent to configured remote alert recipients, and the server begins the shutdown process with an orderly operating-system shutdown. The server then turns itself off. Yo u must select the V oltage check box on the Alerts page for the alert to be sent. H[...]

  • Página 81

    operating-system loader screen. Only error conditions are captured and maintained. The Remote Supervisor Adapter II stores only the most recent error event information, overwriting older information when a new error event occurs. To remotely access a server operating-system-failure screen image, complete the following steps: a. Log in to the Remote[...]

  • Página 82

    The event log has a limited capacity . When that limit is reached, the older events are deleted in a first-in, first-out order . Yo u can sort and filter entries in the event log. To access and view the event log, complete the following steps: 1. Log in to the Remote Supervisor Adapter II. For more information, see Chapter 2, “Opening and using t[...]

  • Página 83

    V iewing vital product data When the server starts, the Remote Supervisor Adapter II collects system, basic input/output (BIOS) information, and server component vital product data (VPD) and stores it in nonvolatile memory . Yo u can access this information at any time from almost any computer . The Vital Product Data page contains key information [...]

  • Página 84

    T able 13. Component activity log Field Function FRU number Identifies the field replaceable unit (FRU) number (a seven-digit alphanumeric identifier) of the component. Serial number Identifies the serial number of the component. Manufacturer ID Identifies the manufacturer of the component. Slot Identifies the slot number where the component is loc[...]

  • Página 85

    T able 16. ASM vital product data (continued) Field Function Build ID Identifies the build IDs of the application firmware and the startup ROM firmware. File name Identifies the file names of the application firmware and the startup ROM firmware. Release date Identifies the release dates of the application firmware and the startup ROM firmware. Rev[...]

  • Página 86

    78 Remote Supervisor Adapter II SlimLine and Remote Supervisor Adapter II: User ’s Guide[...]

  • Página 87

    Chapter 5. Performing Remote Supervisor Adapter II tasks Use the functions under the T asks heading in the navigation pane to directly control the actions of the Remote Supervisor Adapter II and your server . The tasks that you can perform depend on the server in which the Remote Supervisor Adapter II is installed. Yo u can perform the following ta[...]

  • Página 88

    v OS booted v CPUs held in reset Restart count The Restart count field shows the number of times that the server has been restarted. Note: The counter is reset to zero each time the ASM subsystem is cleared to factory defaults. Power-on hours The Power-on hours field shows the total number of hours that the server has been turned on. Remotely contr[...]

  • Página 89

    Power on server at specified time To turn on the server at a specified time and start the operating system, click Power on Server at Specified Time and set the time to turn on the server . Power off server immediately To turn off the server without shutting down the operating system, click Power Off Server Immediately . Shut down OS and then power [...]

  • Página 90

    3. Click the Cache tab. 4. Choose one of the following options: v Clear the Enable Caching check box. If you choose this option, Java caching is always disabled. v Click Clear Caching . If you choose this option, you must click Clear Caching after each Remote Supervisor Adapter II firmware update. Remote console A remote console is an interactive g[...]

  • Página 91

    console and the login session. After a short delay , you can log in to the adapter again with a new session, start the remote console again, and exit the server Configuration/Setup Utility program. Remote console keyboard support The operating system on the client system that you are using will trap certain key combinations, such as Ctrl+Alt+Del in[...]

  • Página 92

    v SUSE Linux version 8.0 v Novell NetWare 6.5 2. The client system requires Microsoft Windows 2000 or later and the Java 1.4 Plug-in or later . 3. The client system must have an Intel ® Pentium ® III microprocessor or greater , operating at 700 MHz or faster , or equivalent. 4. If the optical drive that is being used on the client system cannot b[...]

  • Página 93

    maximum of one drive or image can be stored on the Remote Supervisor Adapter II. The size of the drive or image contents must be 1.44 MB or smaller . Important: Yo u will lose the disk image when the Remote Supervisor Adapter II is restarted or the Remote Supervisor Adapter II firmware is updated. If the Encrypt disk and KVM data during transmissio[...]

  • Página 94

    1) In the Microsoft Windows Control Panel, click Add/Remove Hardware ; then, click Next . 2) Select Uninstall/Unplug a device ; then, click Next . 3) Click Unplug/Eject a device ; then, click Next . b. Select USB Mass Storage Device and click Stop . c. Click Close . d. In the Remote Control window , click Unmount Drive . Setting up PXE network boot[...]

  • Página 95

    3. Use the following information to complete the quick setup information: Serial pass-thru The serial data of the server is directed to COM1 and then passes through to COM2. The pass-thru data can be accessed through COM2. The Remote Supervisor Adapter II command line interface (CLI) is also accessible through COM2. The following hardware setup is [...]

  • Página 96

    Updating firmware Use the Firmware Update option on the navigation pane to update the firmware of the Remote Supervisor Adapter II. Notes: 1. To remotely update the firmware or operating system on the server , see “Remote disk” on page 83. 2. If you plan to use the Remote Control feature after you update the firmware, see “Important informati[...]

  • Página 97

    12. Click OK to close the current browser window . 13. Repeat step 2 on page 88 through step 12 for each packet that you must update. 14. After the Remote Supervisor Adapter II firmware is updated, log in to the Remote Supervisor Adapter II again to access the Web interface. Accessing remote adapters through an ASM interconnect network Note: This f[...]

  • Página 98

    the table, click the login link that corresponds to the remote system that you want to access. Then, follow the standard login procedure to gain access to that system. Direct LAN Connection Click the IP address link to bypass the ASM interconnect connection and to connect to a remote system directly through your Ethernet network. This connection of[...]

  • Página 99

    Chapter 6. Command-line interface Use the Remote Supervisor Adapter II command line interface (CLI) to access the Remote Supervisor Adapter II or Remote Supervisor Adapter II SlimLine without having to use the Web interface. It provides a subset of the management functions that are provided by the Web interface. Yo u can access the CLI through a T [...]

  • Página 100

    Features and limitations The CLI has the following features and limitations: v Multiple concurrent CLI sessions are allowed with different access methods (T elnet, SSH, or serial). – At most, two T elnet command-line sessions can be active at any time. (The number of T elnet sessions is configurable: valid values are 0,1, and 2, with 0 meaning th[...]

  • Página 101

    v All commands have the -h, -help , and ? options, which give syntax help. All of the following examples will give the same result: x345RSA> power -h x345RSA> power -help x345RSA> power ? v Some of the commands listed in the following sections might not be available. To see a list of the commands that are supported, use the help or ? optio[...]

  • Página 102

    Monitor commands The monitor commands are as follows: v clearlog v fans v readlog v syshealth v temps v volts clearlog command Description Use the clearlog command to clear the event log of the Remote Supervisor Adapter II or Remote Supervisor Adapter II SlimLine. Yo u must have the authority to clear event logs to use this command. fans command De[...]

  • Página 103

    8 I SERVPROC 12/18/03 10:09:25 Ethernet[0] Link Established at 100Mb, Full Duplex. 9 I SERVPROC 12/18/03 10:09:24 Ethernet[0] configured to do Auto Speed/Auto Duplex. 10 I SERVPROC 12/18/03 10:09:24 Ethernet[0] MAC Address currently being used: 0x00-09-6B-CA-0C-80 x345RSA> syshealth command Description Use the syshealth command to get a summary [...]

  • Página 104

    3.3v 3.35 2.80 2.95 3.05 3.10 3.50 3.65 3.70 3.85 12v 12.25 11.10 11.30 11.50 11.85 12.15 12.25 12.40 12.65 -5v -5.10 -5.85 -5.65 -5.40 -5.20 -4.85 -4.65 -4.40 -4.20 -3.3v -3.35 -4.10 -3.95 -3.65 -3.50 -3.10 -2.95 -2.80 -2.70 VRM1 3.45 VRM2 5.45 x345RSA> Note: The output has the following column headings: HSL: hard shutdown low SSL: soft shutdow[...]

  • Página 105

    power command Syntax power on power off [-s] power state power cycle [-s] Description Use the power command to control the server power . To issue the power commands, you must have power and restart access authority . power on turns on the server power . power off turns of f the server power . The -s option shuts down the operating system before th[...]

  • Página 106

    Description Use the console command to start a serial redirect console session to the designated serial port of the Remote Supervisor Adapter II or the Remote Supervisor Adapter II SlimLine. Configuration commands The configuration commands are as follows: v dhcpinfo v ifconfig v ldap v ntp v passwordcfg v portcfg v slp v srcfg v ssl v tcpcmdmode v[...]

  • Página 107

    Option Description -d Assigned domain name -dns1 Primary DNS server IP address -dns2 Secondary DNS IP address -dns3 T ertiary DNS server IP address ifconfig command Syntax ifconfig eth0 [ options ] ifconfig ppp [ options ] eth0 options: -state interface_state -c config_method -i static_ip_address -g gateway_address -s subnet_mask -n hostname -r dat[...]

  • Página 108

    Option Description V alues -m MTU Numeric between 60 and 1500 -l LAA MAC address format. Multicast addresses are not allowed (the first byte must be even). -ri Remote IP address V alid IP address format -a Authentication protocol pap, chap, cthenp Example x345RSA> ifconfig eth0 -state enabled -c dthens -i 192.168.70.125 -g 0.0.0.0 -s 255.255.255[...]

  • Página 109

    The following table shows the arguments for the options. Option Description V alues -a User authentication method Local only , LDAP only , local first then LDAP , LDAP first then local -b Binding method Anonymous, bind w/ClientDN and password, user principal bind (UPN) -c Client distinguished name String of up to 63 characters for client_dn -d Sear[...]

  • Página 110

    ntp command Syntax ntp [ options ] options: -en state -i hostname -f frequency -synch Description Use the ntp command to display and configure the Network T ime Protocol (NTP). The following table shows the arguments for the options. Option Description V alues -en Enables or disables the Network T ime Protocol Enabled, disabled -i Name or IP addres[...]

  • Página 111

    Option Description -exp Maximum password age [0 - 365] days. Set to 0 for no expiration. -cnt Number of previous passwords that cannot be reused [0 - 5] -nul Allows accounts with no password [yes | no] -h Displays the command usage and options Example x345RSA> passwordcfg Security Level: Legacy x345RSA> passwordcfg -exp 365 ok x345RSA> pas[...]

  • Página 112

    Option Description V alues -climode CLI mode none, cliems, cliuser v none: The command-line interface is disabled v cliems: The command-line interface is enabled with EMS-compatible keystroke sequences v cliuser: The command-line interface is enabled with user-defined keystroke sequences -cliauth CLI authentication enabled, disabled Example x345RSA[...]

  • Página 113

    Description Use the srcfg command to configure the serial redirection. T ype srcfg to display the current configuration. To change the serial redirect configuration, type the options, followed by the values. To change the serial redirect configuration, you must have at least Adapter Networking and Security Configuration authority . The following ta[...]

  • Página 114

    Parameters The following parameters are presented in the option status display for the ssl command and are output only from the command-line interface: Server secure transport enable This status display is read-only and cannot be set directly . Server Web/CMD key status This status display is read-only and cannot be set directly . Possible command [...]

  • Página 115

    Configuration - Networking & Security or Adapter Configuration - Advanced (Firmware Update, Restart ASM, Restore Configuration) authority level. The following table shows the arguments for the options. Option Description V alues -t T imeout A timeout value in seconds, up to a maximum of 4 294 967 295. -status Status of TCP command mode on or of[...]

  • Página 116

    x345RSA> timeouts -p 5 -o 2.5 -l 3.5 -f 3 -n 1 users command Syntax users [ options ] options: - user number -n username -p password -a authority level Description Use the users command to access all user accounts and their authority levels, and to create new user accounts and modify existing accounts. Read the following guidelines about the use[...]

  • Página 117

    11. <not used> 12. <not used> x345RSA> users -7 -n sptest -p PASSW0RD -a custom:am|rca|cel|nsc|ac ok x345RSA> users 1. USERID Read/Write Password Expires: no expiration 2. test Read/Write Password Expires: no expiration 3. test2 Read/Write Password Expires: no expiration 4. <not used> 5. jacobyackenovic custom:cel|ac Passwor[...]

  • Página 118

    v For +10, the daylight saving time settings are as follows: off, ea (Eastern Australia), tas (T asmania), vlad (Vladivostok). v The year must be from 2000 to 2089, inclusive. v The month, date, hours, minutes, and seconds can all be single-digit values (for example, 9:50:25 instead of 09:50:25). v GMT offset can be in the format of +2:00, +2, or 2[...]

  • Página 119

    Example x345RSA> update -v -i 192.168.70.120 -l dev.pkt TFTP file upload successful 1253022. Starting flash packet preparation. Flash preparation - packet percent complete 24. Flash preparation - packet percent complete 48. Flash preparation - packet percent complete 72. Flash preparation - packet percent complete 96. Flash preparation - packet [...]

  • Página 120

    11 2 Remote Supervisor Adapter II SlimLine and Remote Supervisor Adapter II: User’s Guide[...]

  • Página 121

    Appendix A. Getting help and technical assistance If you need help, service, or technical assistance or just want more information about IBM products, you will find a wide variety of sources available from IBM to assist you. This section contains information about where to go for additional information about IBM and IBM products, what to do if you [...]

  • Página 122

    Getting help and information from the World W ide Web On the World Wide W eb, the IBM Web site has up-to-date information about IBM systems, optional devices, services, and support. The address for IBM System x ™ and xSeries ® information is http://www .ibm.com/systems/x/. The address for IBM BladeCenter information is http://www .ibm.com/system[...]

  • Página 123

    Appendix B. Notices This information was developed for products and services offered in the U.S.A. IBM may not offer the products, services, or features discussed in this document in other countries. Consult your local IBM representative for information on the products and services currently available in your area. Any reference to an IBM product, [...]

  • Página 124

    BladeCenter Predictive Failure Analysis XA-32 Chipkill ServeRAID XA-64 e-business logo ServerGuide X-Architecture Eserv er ServerProven XpandOnDemand FlashCopy System x xSeries i5/OS Intel, Intel Xeon, Itanium, and Pentium are trademarks or registered trademarks of Intel Corporation or its subsidiaries in the United States and other countries. Micr[...]

  • Página 125

    IBM makes no representation or warranties regarding non-IBM products and services that are ServerProven ® , including but not limited to the implied warranties of merchantability and fitness for a particular purpose. These products are offered and warranted solely by third parties. IBM makes no representations or warranties with respect to non-IBM[...]

  • Página 126

    11 8 Remote Supervisor Adapter II SlimLine and Remote Supervisor Adapter II: User’s Guide[...]

  • Página 127

    Index A alerts configuring recipients for 23 forwarding from ISMP 25 gateway (forwarding) 25 ISMP , gateway to network 25 selecting to send critical 27 system 29 warning 28 setting remote attempts 26 alphanumeric pager codes critical alerts 27 system alerts 29 warning alerts 28 ASM configuration backing up 64 modifying and restoring 65 ASM control [...]

  • Página 128

    H hardware service and support 11 4 help, getting 11 3 host server startup sequence, changing 8 I IBM Support Line 11 4 initialization-string guidelines for modem 33 IP address, default static 5 ISMP alert forwarding 25 ISMP vital product data, viewing 77 K keyboard support in remote console 83 L LDAP configuring client authentication 49 configurin[...]

  • Página 129

    Remote Supervisor Adapter II (continued) configuring 11 features 1 functions 1 logging in to Web interface 5 monitoring and configuring 36 SlimLine 1 requirements operating system 3 Web browser 3 restarting ASM 66 restoring ASM configuration 65 restoring ASM defaults 66 S Secure Shell server enabling 63 generating private key 63 overview 62 using 6[...]

  • Página 130

    web site (continued) support line, telephone numbers 11 4 122 Remote Supervisor Adapter II SlimLine and Remote Supervisor Adapter II: User ’s Guide[...]

  • Página 131

    [...]

  • Página 132

     Part Number: 43W7827 Printed in USA (1P) P/N: 43W7827[...]