Cyclades AlterPath BladeManager инструкция обслуживания

AlterPath BladeManager User Manual Product V ersion 1.3.0 Revision No. 7 This document contains propr ie tary inform ation of Cyclades an d is not to be disclosed or used except in accordance with applicable contracts or agre ements. © Cyclades Co rporatio n, 2005[...]

W e believe the information in this manual is accurate and reliable. However , we assume no responsibility , finan cial or otherwise, for any co n sequences of the use of t his product or man ual. This manual is published by Cy clades Corporation, which reserves the right to m ake improvements or changes in the products described in t his manual as[...]

Table of Contents AlterPath Blade Manager Manual Before You Begin Audience i Document Organization i Typographical Conventions ii Naming Conventions ii Chapter 1: Introduction Connectivity and Capacity 1-2 Key Features 1-2 Single Point Security Gateway 1-3 Centralized Auth entication 1-3 Consolidated Views and Blade Access 1-3 Simple and Easy Web U[...]

Table of Contents II AlterPath BladeManager Manual Installation Safety Guidelin es 2-12 System Reliability Guidelines 2-12 Static-Sensitive Devices 2-12 Installation Procedures 2-13 Installing DIMMs 2-13 Installing a Hard Disk Drive 2-15 Installing a Simple-Swap Serial ATA Hard Disk Drive 2-15 Installing a SCSI Hard Drive 2-16 Installing an Adapter[...]

Table of Cont ents AlterPath BladeManager Manual III Blades 3-11 Viewing the Blade List 3-11 Connecting to a Blade Console 3-13 Multiple Users and Read/Write Access 3-13 Viewing a Blade or Switch 3-14 Consoles Detail Form 3-14 Consoles Access Form 3-16 Consoles Notify Form 3-16 Consoles Groups Form 3-17 Logs 3-18 Viewing the Logs 3-19 Access Logs 3[...]

Table of Contents IV AlterPath BladeManager Manual Connecting to the Web Interface 4-9 BladeManager Web Interface: Admin Mode 4-10 Forms Summary 4-10 Logging Into the BladeMan ager Web Interface 4-14 Parts of the Web Interface 4-14 Sorting, Filtering, and Saving a List Form 4-16 Using the Form Input Fields 4-17 Verifying Error Messages 4-17 Chassis[...]

Table of Cont ents AlterPath BladeManager Manual V Viewing the Alarm Trigger List 4-40 Creating an Alarm Trigger 4-41 Deleting an Alarm Trigger 4-43 Using the Logical AND in the Alarm Trigger Expression 4-43 Blades / Switches 4-43 Consoles List Form 4-44 Viewing the Console List 4-45 Adding a Serial Console 4-46 Adding a Switch Console 4-49 Selecti[...]

Table of Contents VI AlterPath BladeManager Manual Assigning a Security Prof ile to a User Group 4-64 Security Profiles 4-65 Security Profile List 4-66 Adding or Editing a Se curity Profile 4-67 Security Profiles: Source IP 4-68 Security Profiles: LAN ITF 4-70 Security Profile: Date/Time 4-72 Configuring Authorization 4-73 Deleting a Security Profi[...]

Table of Cont ents AlterPath BladeManager Manual VII Firmware 5-16 Upgrading the APBM Firmware 5-16 Backing Up User Data 5-17 Managing Log Files 5-18 Changing the Database Configuration 5-19 Installing SSL Certificates 5-20 Appendix A: Hardware Specificat ions A-1 Glossary[...]

Table of Contents VIII AlterPath BladeManager Manual[...]

W elcome to the AlterPath BladeManager Manual! This manual is designed to help you install, co nfigure, and operat e the BladeManager , as well as to guide you in your daily operations of the produ ct. Note: For convenience, this document r efe rs to the AlterPath Blad eManager as simply BladeManager or , as in the case of the command line interfac[...]

Before You Begin ii AlterPath Blad eManager Manual T ypographical Conventions Form/W indow Labels W ords that appear on forms, windows, or any part of the user interface are typed in boldface . Examples : The Alarm T rigger List form; the Password field. Hypertext Links W ith the exception of headings and the T able of Contents (whi ch are alrea dy[...]

Naming Conventions AlterPath BladeManager Ma nual iii Blades List > Blade Detail Naming Conventions Administrator Also referred to as the Admin User . The system administrator of the BladeManager who has the authority to configure and manage the Bla- deManager . BladeManager The short name for AlterPath BladeManager . Form The form is the larg e[...]

Before You Begin iv AlterPath Blad eManager Manual Command Line Synt ax While this manual is primarily desi gnd for using th e BladeM anager web interface, some special features show yo u h ow to config ure the BladeManager using the Command Line Interface (CL I). CLI configuration is discussed in Chapter 5 (Advanced Configuration) of the manual. T[...]

Command Line Syntax AlterPath BladeManag er Manual v dashes (-) to indicate range; there sh ould not be any spaces between the values. sXX.pmusers: The user acces s list. For example: jane:1,2;john:3,4. The format of this field is: [<usernam e>:<outl et list>][; <username> :<outlet list>...] Where <outlet list>'s [...]

Before You Begin vi AlterPath Blad eManager Manual[...]

The AtlerPath BladeMan ager is a co mprehensive in -band and out-of-band blade management tool designed to complement the IBM Director . It provides BladeCenter users the necessary security , authentication, ac cess control and administration capabilities to remotely manage blade servers and switch modules. The BladeManager provides a wide ra nge o[...]

1: Introduction 1-2 AlterPath Blad eManager Manual Connectivity and Cap acity The BladeM anager ha rdware platfo rm is based on the IBM eS erver xSerie s 306. It comes with a Blade W izard wh ich enables the admin user to create up to 14 blad es and 4 switches for each chassis. The BladeManager supports up to 6 chassis; altogether , the module su p[...]

Key Featur es AlterPath BladeManag er Manual 1-3 Single Point Security Gateway The BladeManager has been designed such that communication between users and the management network must pass through a single point of acce ss (the BladeManager) to optimize secur ity and enforce adherence to your corporate security policy . A single, secure access poin[...]

1: Introduction 1-4 AlterPath Blad eManager Manual One-Click Access to Blades and Switches Placing the mouse cursor over a chassis name from the Chassis List form allows the system administrator to ac cess the BladeManage r through the web or CLI. The default s ession type is configurable. T o access a blade, the regular user can choose and click o[...]

Key Featur es AlterPath BladeManag er Manual 1-5 triggers. A trigger is a text string pr e-defined by the admini strator which the system uses to detect a trigger text from messages. When the BladeManager detects a trigger text, based on how the trigger was configured by the administrator , it does the following: • Send an email to a user list ?[...]

1: Introduction 1-6 AlterPath Blad eManager Manual Exhaustive Reporting Because the BladeManager consolidates all its logs and maintains its own databases, it provides in-d epth reporting capabilities to suit the reporting needs of users an d managers. Multiport Ethernet Cards The BladeManager supports up to two mu ltiport PCI ethernet cards for se[...]

Deploying the Bla deManager AlterPath BladeManag er Manual 1-7 Deploying the BladeManager The diagram below shows how the BladeMan ager may be set up to connect to a management network and a public netw ork. Equipped with its own Ethern et switches, the two networks are physica lly separated. Any Bl adeManager user who needs to access a blade serve[...]

1: Introduction 1-8 AlterPath Blad eManager Manual[...]

This section discusses the procedures and requirements for installing the AlterPath BladeManager , and is organized as follows: • Product Installation Checklist • Rack Mounting Guidelines • Major Components of the BladeManager • Installing a DIMM • Installing a Hard Disk Drive • Installing a Simple-Swap Serial A T A Hard Disk Drive • [...]

2: BladeManager Installatio n 2-2 AlterPath Blad eManager Manual Rack Mounting Guidelines When rack-m ounting the BladeM anager , consider th e following : • Ensure the room temperature is below 35 o C (95 o F). • If you install the BladeManager in a closed or multi-rack assembly , the operating ambien t temperatu re of th e rack environment ma[...]

Rack Mounting Guide lines AlterPath BladeManag er Manual 2-3 T o install the BladeManager in a rack cabinet, you need the following items: • 2 slide rail s • 6 cable straps • 6 M6 screws (for shipping and for securing vibration-prone areas) a. Press on the rail-adjustment bracket (1) on the rear of the slide rail to prevent the bracket from m[...]

2: BladeManager Installatio n 2-4 AlterPath Blad eManager Manual a. Lift the release tab (1) and fully extend the rail-adjustment bracket from the rear of the slide rail until it snaps into place, if you need to adjust the slide rail length. b. Align the pins on the rear rail-lo cking carrier with the holes on the rear mounting flange. c. Press the[...]

Rack Mounting Guide lines AlterPath BladeManag er Manual 2-5 a. Align the p ins (1) on the fr ont rail-locking carrier to the front mounting flange. b. If you adjusted the rail length, pu sh the rail-locking carrier back toward the rear of the slide rail to align the slide rail with the mounting flange. c. Press the tab (2) to secure the fro nt of [...]

2: BladeManager Installatio n 2-6 AlterPath Blad eManager Manual a. If you plan to transport the rack cabinet to another location with the server installed, remove one screw and loosen the other screws as indicated. b. Fully extend the rail and re-insert the screw and tighten all screws to secure the rail. c. If you do not plan to transp ort the ra[...]

Rack Mounting Guide lines AlterPath BladeManag er Manual 2-7 a. Align the server on the sl ide rails and push the server fully into the rack cabinet. Secure the server to the front mounting flanges with the captive thumbscrews (1). Note: Y o u must leave the shipping brackets (2) attached to the slide rails unless the shipping brackets impede the s[...]

2: BladeManager Installatio n 2-8 AlterPath Blad eManager Manual a. Press on the release tab (1) as indicated on the shipping bracket, and remove the shipping from the slide rail. b. Repeat previous step for the other shipping bracket. c. S tore the shipping bracket for future use. Note: Y ou just re-install the sh ipping bra ckets on the slide rai[...]

Rack Mounting Guide lines AlterPath BladeManag er Manual 2-9 a. Attach cables to the rear of the BladeManager (such as keyboard, mouse, monitor cables, as needed). b. Route the cables to the left corner of the BladeManager (as viewed from the rear) and use the cable straps to secure the cables to the slide rails.[...]

2: BladeManager Installatio n 2-10 AlterPat h BladeManag er Manual a. Before you transport the rack cab inet to another location with the BladeManager installed, you must secure the server to the rack. If necessary , disconnect the cables from the rear of the server; then, slide the server out of the rack 150 mm (6 in.) and insert the M6 screws in [...]

Major Components of th e BladeManager AlterPath BladeManag er Manual 2-11 Major Component s of the BladeManager The BladeManager hardware platform is based on the IBM eServer 306. It’ s basic co mponents are as fo llows: • Blue on a component indicates touc h points where you ca n hold the componen t such as when yo u remov e it from or install[...]

2: BladeManager Installatio n 2-12 AlterPat h BladeManag er Manual Inst allation Safety Guidelines System Reliability Guidelines T o help ensure proper cooling and system reliability , make sure that: • Each of the drive bays has a drive tray installed in it. • If the server has redundant power , ea ch of the power-supply bays has a power suppl[...]

Installation Procedures AlterPath BladeManag er Manual 2-13 it back into its package; do not place the dev ice on your server or on a metal surface. • T ake extra c are when hand ling devic es during cold weather as heating reduces indoor humidity a nd increases static electricity . Inst allation Procedures This section provides th e following pr[...]

2: BladeManager Installatio n 2-14 AlterPat h BladeManag er Manual with error correcting code (ECC) DIMMs. These DIMMs must be compatible with the latest PC27 00 and PC3200 SDRAM un buffered DIMM specification. • When you restart your server , the sy stem displays a message indicating that the memory config uration has changed. T o install a DIMM[...]

Installation Procedures AlterPath BladeManag er Manual 2-15 6. T urn the DIMM so that the keys align with the slot. 7. Insert the DIMM into the connector by aligning the DIMM edges with the slots at each end of the DIMM connector . Firmly press the DIMM straight down into the connector by applying pressure on both ends of the DIMM simultaneously . [...]

2: BladeManager Installatio n 2-16 AlterPat h BladeManag er Manual Installing a SCSI Hard Drive T o install a SCSI hard dri ve, complete the following procedure: NOTE: If you have o nly one hard disk d r ive, install it in the left drive bay . 1. Review the safety installation guidelin es at the beginning of this chapter . 2. Switch off the server [...]

Installation Procedures AlterPath BladeManag er Manual 2-17 9. If you have other op tions to install, do so now . 10. Re-install the bezel and replace the cove r . Go to Completing the Installat ion , this chapter . Installing an Adapter This section describes the types of adap ters that your server supports and other information to consider when i[...]

2: BladeManager Installatio n 2-18 AlterPat h BladeManag er Manual • The BladeManager uses a rotationa l interrupt technique to configure PCI- X adapters so that you can install PCI-X adapters that do not support sharing of PCI-X interrupts. • The BladeManager scans PCI-X slots to assign system resources. If you have not change d the default st[...]

Installation Procedures AlterPath BladeManag er Manual 2-19 T o install an adapter , comple te the following procedure: 1. Review the safety installation guidelin es at the beginnin g of this chapter . 2. Switch off the server and periphe ral devices; discon nect the power cord and all external cables. 3. Remove the cove r . 4. Follow the cabling i[...]

2: BladeManager Installatio n 2-20 AlterPat h BladeManag er Manual 7. Remove the expansion-slot cover . Import ant: PCI expansion-slot covers must be installed on all vacant slots. This maintains the electronic em issions characteristics of the server and ensures proper coo ling of server componen ts. 8. T ouch the static-protective pack age contai[...]

Installation Procedures AlterPath BladeManag er Manual 2-21 1 1. T ighten the captive screw on the rear of the server . 12. If yo u have other option s to install, do so now . 13. R eplace th e cover . Go to Completing the Installation , this chapter . Completing the Installation T o complete the inst allatio n, follow the steps below: 1. Re-instal[...]

2: BladeManager Installatio n 2-22 AlterPat h BladeManag er Manual Connecting the Cables The diagram s below sh ow th e locations of th e input an d output connecto rs on the front a nd rear o f the Blad eManag er . 1. Switch of f the server before co nnecting (or discon necting) cables from your server . 2. See the documentation that comes with yo[...]

Updating the Server Configuration AlterPath BladeManag er Manual 2-23 Up dating the Server Configuration When you start the BladeManager for the first time after you add or remove an internal option or external SCSI device, you might receive a message that the configuration has changed. The Configuration/S etup Utility program starts automatically [...]

2: BladeManager Installatio n 2-24 AlterPat h BladeManag er Manual Front LEDs/Buttons Function CD-eject button Press this button to release a CD from the CD-ROM. CD-ROM drive activity LED When lit, it indicates that the CD-ROM drive is in use. Diskette drive activity LED When lit, it indicates t hat the diskette drive is in use. Diskette-eject butt[...]

BladeManager Co ntrols, LEDs, and Power AlterPath BladeManag er Manual 2-25 Rear V iew The diagram below shows the LEDs on the re ar of the BladeManager . Power -co ntrol button Press this button to switch the server ON and OFF manually . Reset button Press this button to reset the server and run the power on self-t est (POST). Y ou might have to u[...]

2: BladeManager Installatio n 2-26 AlterPat h BladeManag er Manual BladeManager Power Features When the BladeManager is connected to an AC po wer source but is not switched on, the operating sy stem does not run, and all core login e xcept for the service processor is shut down. However , the server can respond to requests from the service processo[...]

BladeManager Power Features AlterPath BladeManag er Manual 2-27 • If your operating system supports the W ake on LAN featur e, the W ake on LAN feature can s witch on the BladeManager . Note: When 4 GB or more memory (physica l or logical) is inst alled, some memory is reserved for various system resources a nd is unavailable to the operating sys[...]

2: BladeManager Installatio n 2-28 AlterPat h BladeManag er Manual • If the W ake on LAN feature switched on the BladeManager , the W a ke on LAN can switch off the BladeManager . • Y ou can switch off the BladeManager through a request from the service processor . Pre-Configuration Requirement s Before configuring BladeManager , ensure that yo[...]

Configuring the COM Port Conne ction and Logging In AlterPath BladeManag er Manual 2-29 Note: For a list of internet browsers an d Cyclades device firmware versions supported by the BladeManager , refe r to Appendix A: Hardware Specification s . Configuring the COM Port Connection and Logging In The console port is used for the initial configuratio[...]

2: BladeManager Installatio n 2-30 AlterPat h BladeManag er Manual[...]

The web interface provides two modes fo r using the Bla deManager based on the type of user: Access (for operation by regular users) and Admin (for configuration by sy stem administrators). This chapter explai ns the pro cedures for operating the BladeManager web interface in Access Mode. Addressed specifically to regular use rs, this chapter is or[...]

3: BladeManager Web Access 3-2 AlterPath Blad eManager Manual Using the W eb Interface as a Regular User T o op en the BladeMa nager w eb applicatio n, perform the fo llowing ste ps: 1. T ype in the following URL from your web bro wser: https://nnn.nnn.nnn.nnn Wher e : nnn.nnn.nnn.nnn is the IP address provided to you by your BladeManager administr[...]

User Interface Over view AlterPath BladeManag er Manual 3-3 2. When the Login screen appears, enter your user name and password as provided by yo ur system administrator . 3. Select the Login button. Upon successful login, the Alarms form appears. Note: The first time BladeManager launch es your application screens, the process will be slow . Once [...]

3: BladeManager Web Access 3-4 AlterPath Blad eManager Manual General Screen Features The diagram below sh ows the ge neral featu res of th e BladeM anager web interface. The sample form is for illustratio n only; it is not the first screen that you see when you log in as a regular user . The menu panel highlights the cu rrently selected menu optio[...]

Alarms AlterPath BladeManag er Manual 3-5 An underlined column name indicates that the list can be sorted by the column name. The Blade List form, for example, allows you to sort by Blade, T ype, Device, Location, or S tatus. T o sort by Location, simply click the column name, Location . The arrow adjacent to the heading indicate s that the list is[...]

3: BladeManager Web Access 3-6 AlterPath Blad eManager Manual Alarm Logs The BladeM anager not only st ores each alarm in a d atabase, b ut also maintains a log for each alarm. There are two ways in which you can view alarm logs: • From the Alarms List form • From the Logs form ( Logs > Data Buffer ) Responding to an alarm Since no two issue[...]

Alarms AlterPath BladeManag er Manual 3-7 T o re-assign the current ticket, change the ticket status, and add notes or comments, use the Alarm Detail (or T icket Info) form. T able 3-1: Form Fields and Elements Fieldname Definition T icket T icket number assigned to an alarm. The symbol above the ticket number indicates the severity level of the al[...]

3: BladeManager Web Access 3-8 AlterPath Blad eManager Manual Vi ewing the Alarm Det ail Form The Alarm Detail form contains deta iled information about the ticket as generated by an alarm. It allows you to re-assign the ticket, update the status, and enter notes regard in g the alarm or ticket. T o view the ticket information for an alarm, follow [...]

Alarms AlterPath BladeManag er Manual 3-9 The form brings up the Alarm Detail form. T able 3-2: Form Fields and Elements Fieldname / Button Definition Assigned Users Dropdown box that lists all the assigned users for the current alarm. Select a user to assign or re-assign ticket to another i ndividual user . Status Dropdown box to select the status[...]

3: BladeManager Web Access 3-10 AlterPat h BladeManag er Manual >> V iewing Alarm or Console Logs Y ou can view the console log for a particular alarm or ticket from the Alarm List form. T o view the consol e log, follow the step below: 1. From the A larm List form, under th e Console Log column heading, select the corresponding vie w link fo[...]

Blades AlterPath BladeManag er Manual 3-11 Blades Selecting Blades from the menu brings up the Consoles List form which allows you to: • V iew detailed i nformation about the bl ade consoles and switches assigned to you. • Open a command line console session for a selected blade or switch. • Launch the KVM V iewer and connect you to a KVM por[...]

3: BladeManager Web Access 3-12 AlterPat h BladeManag er Manual The Blade List form appears. T able 3-3: Form Fields and Elements Column or Button Name Definition Blade Blade or switch name. Place your mouse cursor over the Blade name to select connection type (CLI, KVM, VM, ON, OFF). T ype The type of blade as defined in the Blade Detail form. Con[...]

Blades AlterPath BladeManag er Manual 3-13 >> Connecting to a Blade Console T o connect to a blade console: 1. From the Blade List form, select the blade you wish to connect to by selecting the blade name. Note: If a modem is connected to a remote site, you will experience a slight delay before connecting to a con sole. The system connects yo[...]

3: BladeManager Web Access 3-14 AlterPat h BladeManag er Manual The BladeM anager a llows you to view individual blades and switches from the Blade List form. T o view a blade or switch, place the mouse cursor over the blade/switch name to display the list of connect opti ons: CLI (command line interface), KVM , VM , On (i.e., to power on the bl ad[...]

Blades AlterPath BladeManag er Manual 3-15 T able 3-4: Form Fields and Elements Field Name Definiti on Details Button to display the Console Detail form. Access Button to view users who are authorized to access the current console. Notify Button to view users who can be notified of an alarm pertaining to the current console. Groups Button to view t[...]

3: BladeManager Web Access 3-16 AlterPat h BladeManag er Manual Consoles Access Form The Consoles Access tabbed form shows the users who are authorized to access the current blade. T o view the Blade Access form: 1. From the Blade Detail form, click on Access. The system dis plays the Blade Acces s form: Consoles Notify Form The Console Notify form[...]

Blades AlterPath BladeManag er Manual 3-17 The system displays the Console Notify form: In the selection box, a plus (+) sign in dicates a group, as opposed to a user . USER is the default list which contains all users. Consoles Group s Form The Console Groups form sh ows the group(s) to which the current blade belongs. T o view the Blade Group for[...]

3: BladeManager Web Access 3-18 AlterPat h BladeManag er Manual The sys tem disp lays the Blade Gro up form: Logs The Logs option of the menu allow s you to select and view three types of logs pertaining to the blade(s) assigned to you: All three logs are available for the specified blade. T o acc ess each log, se lect the appropriate log type from[...]

Logs AlterPath BladeManag er Manual 3-19 When you select Logs from the menu panel, the primary fo rm, shown below , will prompt you for a rang e of dates from which to retriev e your logs. >> V iewing the Logs T o view the logs available for a specifi ed blade (to which you have authorized access), perform the following steps: 1. Select Logs [...]

3: BladeManager Web Access 3-20 AlterPat h BladeManag er Manual The system brings up the main Blade Logs form. 2. From the Blade drop down list, selec t the blade from which you want to view the logs. Note: Y ou can only view or access the lo gs of blades to which you have authorized access. 3. Select a range of dates from which to base your logs b[...]

Logs AlterPath BladeManag er Manual 3-21 Event Logs Use the Event Logs browser to view all events that occurred (within a specified range of time) on your tar get blade server . T able 3-6: Access Logs - F ield Definition Field Name Definiti on Date Date in which the event occurred. T ime T ime of the event. User User who connected to the blade. Ac[...]

3: BladeManager Web Access 3-22 AlterPat h BladeManag er Manual Data Buf fer Use the Data Buffer browser to view the co ntents of the data buf fer generated by a targ et blade server . Note: Y ou can also access the Data Buffer log from the Alarms form . T able 3-7: Event Logs - Field Definition Field Name De finition Date Date of the event. T ime [...]

User’s Profile AlterPath BladeManag er Manual 3-23 User ’ s Profile The User ’ s Profile form allows you to view y our profile or co ntact information and modify a lim ited nu mber of fields. The system allows you to view only your own p rofile. The User ’ s Profile has four tabbed form s. See the Form Fields and Elements table for the func[...]

3: BladeManager Web Access 3-24 AlterPat h BladeManag er Manual Groups T ab/button to display the User Group form which shows all groups to which the current user belongs. Security T ab/button to displa y the Security form which shows the security profiles assigned to you. A security profile defines a user ’ s acce ss control to a device, a nd to[...]

User’s Profile AlterPath BladeManag er Manual 3-25 >> Changing Y our Password T o change your password, perform the following steps: 1. From the User ’ s Profile detail form, click on Set Password . 2. From the password dialo g box, enter the new p assword twice. 3. Click on Submit . >> V iewing the User Access Form The User Access [...]

3: BladeManager Web Access 3-26 AlterPat h BladeManag er Manual The system displays the User Group form: T able 3-9: User ’ s Profile, Groups Form - F ields and Elements Field Name De finition Groups T ab or button to select the current form. Select groups for the user List box from which to select a possible list of user groups assignable to the[...]

User’s Profile AlterPath BladeManag er Manual 3-27 >> V iewing the Security Form The Security form shows the current security profile assigned to you (for example, the blades you are allowed to access), including any other applicable profiles. T o view the Security form: 1. From the menu, select User ’ s Profile ; from the Details form, s[...]

3: BladeManager Web Access 3-28 AlterPat h BladeManag er Manual Delete Button to delete a selected security profile (right list box) and return it to the Select security profile list box. Selected security profiles The list bo x that shows the Security Profile assigned to the current user . Security profiles via user groups The list box that shows [...]

This chapter presents the procedur es for configuring the AlterPath BladeManager through the web interface. Addressed to the BladeManager administrator who must use the web inte rface in the Admin Mode, the chapter is or ganized as follows: • Operational Modes • Confi guration Process Flow • First T ime Configuration W i zard • Blad eManage[...]

4: BladeManager Web Administra tion 4-2 AlterPath Blad eManager Manual Operational Modes The BladeM anager pro vides two operating modes for c onfiguration: • First T ime Configuration (CLI or text-based) • Admin Mode (GUI-based) Before you can use the BladeManager web interface you must first run the First T ime Configuration wizard. The admin[...]

Configuration Process Flow AlterPath BladeManag er Manual 4-3 Configuration Process Flow The entire configuration process throu gh the web interface is as follows: Connect t o serial console Perform Firs t Time Configurati on Reboot successful? Reset system to default factory se ttings Logon to Blade Manager as Admin N Y Chassis Info / Reporting Gr[...]

4: BladeManager Web Administra tion 4-4 AlterPath Blad eManager Manual Y ou must perform the First T ime Conf iguration process (see Configuration Flow Diagram) using the co mmand line inte rface. Once complete d, you may perform the rest of the configuration process and all daily administration procedures through the BladeManager web interface. Fi[...]

First Time Configuratio n Wizard AlterPath BladeManag er Manual 4-5 • Enter Date (format MM/DD/YYYY) • Enter Primary Ethernet IP Address (S tatic/None). • Enter Secondary Ethernet IP Address (S ta tic/None) • Configure Ethernet Subinterfaces (Y es/No/List) • Configure Ethernet VLANs (Y es/No/List) • Enter Ethernet default gateway • En[...]

4: BladeManager Web Administra tion 4-6 AlterPath Blad eManager Manual Are you sure you wish to continue? (Y/N) y Restoring default configuration ... done. The new configuration will take effect after the next boot. [root@BladeManager root]# reboot Refer to the sample First T ime Config uration, next section, to view how the parameters are ente red[...]

First Time Configuratio n Wizard AlterPath BladeManag er Manual 4-7 You must now set a password f or 'root', the system adm inistrative account. WARNING: this is a very power ful account, and as such it's advisable that its password is chosen w ith care and kept within the reach of system administrators only. New password: Re-enter n[...]

4: BladeManager Web Administra tion 4-8 AlterPath Blad eManager Manual Setting the Authe ntication Method The sample First T ime Configuration shows local as the Authentication Method to use to authenticate a user . Depending on the t ype of authentication service that you select, the wizard will prompt for questions relating to th e authentication[...]

First Time Configuratio n Wizard AlterPath BladeManag er Manual 4-9 Any deviation from this standard m ay cause the web b rowser to disable APBM cookies and prevent the user from logging into the E2000 web application. >> Connecting to the W eb Interface Now that the installation is complete, you can begin the co nfigur ation using the web in[...]

4: BladeManager Web Administra tion 4-10 AlterPat h BladeManag er Manual BladeManager W eb Interface: Admin Mode Once you have completed the First T ime Configuration procedure, you may login to the BladeManager web interfa ce and use the system in Admin Mode. The Admin menu panel co ntains the following selections: Configuring the Bl adeManag er r[...]

BladeManager Web Interface: Admi n Mode AlterPath BladeManag er Manual 4-11 and switches, you can define users and assign them to acce ss the target blades (menu option: U sers ), and define the triggers th at will create alarms and send email notifications (menu option: Alarm T riggers ) to users. T able 4-1: Summary of W eb Forms in Admin Mode Me[...]

4: BladeManager Web Administra tion 4-12 AlterPat h BladeManag er Manual Users User List - V iew list of users; add, edit or delete users. Details - V iew or configure a selec ted user . Access - Select blades and switches to which the current user can acce ss. Groups - Select one or m ore groups to which a u ser can belong. Security - Select one o[...]

BladeManager Web Interface: Admi n Mode AlterPath BladeManag er Manual 4-13 Security Profile Security Profile List - V iew list of security profiles; add, edit or delete a security profile. General - Enable or disable the current security profile. Source IP - Define the source IP addresses allowed or not allowed. VLAN/Subnet - Define the VLANs/s ub[...]

4: BladeManager Web Administra tion 4-14 AlterPat h BladeManag er Manual >> Logging Into the BladeManager W eb Interface 1. T ype in yo ur username and passwor d in the corresponding fields o f the Login screen: 2. Select the Login button. Upon successful login, the User List form appears. Note: When the BladeManager launches your application[...]

BladeManager Web Interface: Admi n Mode AlterPath BladeManag er Manual 4-15 BladeManager web interface in Admin Mode. The form example show s the Users List form, the first form to appear in the web interface. The first form to appear when you sel ect an option from the menu panel is called the primary form. The Users List form, for example, is the[...]

4: BladeManager Web Administra tion 4-16 AlterPat h BladeManag er Manual Sorting, Filtering, and Saving a List Form An underscored column heading on any of the list forms indicates that the list may be sorted based on that column h eading. For example, you can sort the previously shown User List form by Username, Department, Location or S tatus by [...]

Chassis Ma nagement AlterPath BladeManag er Manual 4-17 Using the Form Input Fields When typing in data into any of the input fields, note the following convention s: • In the web form (as it appears on the screen), all required fields are shown in RED. • W ith some exceptions, fields can not contain special or res erved characters. If you ente[...]

4: BladeManager Web Administra tion 4-18 AlterPat h BladeManag er Manual Note: Form names ar e shown in boldface. Some form names, such as the List form, do not ap pear on the actual f orm. Most menu options use a List form and a Detail form . Delete chassis. Chassis List form (Delete button). Search, sort, and save list of devices. Chassis List fo[...]

Chassis Ma nagement AlterPath BladeManag er Manual 4-19 Chassis > Devices List Form The Devices List form, the primary form of Chassis , allows you to view a list of devices that are configured in the BladeManager . From this form, you can add a new device, o r select the device to mo dify or delete. . T able 4-3: Chassis (Devices) List - Fieldn[...]

4: BladeManager Web Administra tion 4-20 AlterPat h BladeManag er Manual Adding or Editing a Chassis 1. From the menu panel select Chas sis . The sys tem disp lays the De vice List form. 2. If you are adding a Chassis, from the Device List form, click on Add located at the bo ttom of the form. Log Device log buffer . Click on Log to view the log fo[...]

Chassis Ma nagement AlterPath BladeManag er Manual 4-21 The system displays the Sel ect Device T ype form: 3. From the Select Device T ype form, (since the field box already says IBM BladeCenter) click the Select button. Proceed to S tep 5. 4. If you are editing an existing chassis, from the Device list form, select the chassis you want to edit, an[...]

4: BladeManager Web Administra tion 4-22 AlterPat h BladeManag er Manual The sys tem disp lays the Device s Detail form: 5. Complete or modify the Detail form as defined b y the following table: Devices Details Form - Fields and Elements Fieldname Definition Details (tab) Currently selected tabbed form. Device Name The symbolic na me linked to the [...]

Chassis Ma nagement AlterPath BladeManag er Manual 4-23 6. Click on the Save button. Admin Name The admin username (superu ser) of the device. Admin Password Button to invoke a dialog box used to define the Admin’ s password. This pas sword is used to access the IBM Blade Center port, but NOT to change th e passwo rd. Y ou must enter the S AME pa[...]

4: BladeManager Web Administra tion 4-24 AlterPat h BladeManag er Manual Using a DHCP Server and Se lecting the Correct IP Mod e A DHCP server is build into the Blad eManager . Y ou can use your company’ s DHCP server or the BladeManager as yo ur DHCP server . If yo u are not using a DHCP server , then you may use a static IP address. The Device [...]

Chassis Ma nagement AlterPath BladeManag er Manual 4-25 OnDemand means that the connection is es tablished only upon the user ’ s request, and disabled again when the last user on the console/device logs out. When disconnec ted, no data buffer or alarm is availa ble. >> Selecting the Group(s) to Access a Chassis T o select one or more group[...]

4: BladeManager Web Administra tion 4-26 AlterPat h BladeManag er Manual Proxies The BladeM anager includes a web proxy server so th at conn ections to th e native web interface of any supported d evice go throug h the BladeM anager . This feature enables the BladeManager to: • Connect users through the BladeMan ager to remote servers that it con[...]

Chassis Ma nagement AlterPath BladeManag er Manual 4-27 W arning: When you assign Forward Proxy Using ARP or Forward Proxy without ARP , all ports of the pr oxied device ar e r eachable fr om the workstation fr om which the user is logged in. It is important that all console ports ar e config ur ed with an authentication type other than None . The [...]

4: BladeManager Web Administra tion 4-28 AlterPat h BladeManag er Manual • Use the KVM viewer to access KVM/net console. >> Configuring the Proxy T o create or configure a proxy for a tar g et device, follow the steps below: 1. Go to: Devic es List form. 2. If the Device is new , click on the Add button (If the Device already exists, highli[...]

Chassis Ma nagement AlterPath BladeManag er Manual 4-29 >> V erifying your Proxy Setting 1. T o verify y our configuratio n, return to the Devices List form, and under the W eb Proxy column, select YES . A pop up window will display to sh ow the web page s of the selected device. Disabling the Proxy Setting the T ype of Proxy to none will dis[...]

4: BladeManager Web Administra tion 4-30 AlterPat h BladeManag er Manual The sys tem disp lays the Device s - Switch 1 tabbed form: 2. Complete the Switch 1 form, as necessary . T able 4-5: Devices, Switch 1 Form - Fields and Elements Fieldname Definition Switch 1 (tab) Currently selected tabbed form. IP Address The IP address of the chassis module[...]

Two Methods of Blade Configu ration AlterPath BladeManag er Manual 4-31 T wo Methods of Blade Configuration Once the chassis has been defined and configured, there are two ways to configure the blades a nd switches: • Through the Blade W izard • Th rough the Consoles form Status Dropdown list box to select: Enable - connection between the Blade[...]

4: BladeManager Web Administra tion 4-32 AlterPat h BladeManag er Manual >> Running the Blade Wizard The Blade W izard is designed to help you configure and au tomatically generate blades/switches for the current chassis. The wizard comprises a series of interactive screens or forms in which the system prompts you for input until it receives [...]

Two Methods of Blade Configu ration AlterPath BladeManag er Manual 4-33 1. W arning Message : The Console W izard begins with a warning message to notify you of any data to be overwritten and the choices you have before going ahead with the wizard. Note: Use the Back , Next , and Cancel buttons to navigate through the forms. Pressing the Next butto[...]

4: BladeManager Web Administra tion 4-34 AlterPat h BladeManag er Manual 3. (User) Access : +USER is the default list to which all users belong. The system also adds a plus (+) si gn to any added user group that appears in the selection box. Follow the instruc tions for the User Access form and then click on the Notify tab to proceed to the user no[...]

Two Methods of Blade Configu ration AlterPath BladeManag er Manual 4-35 5. Gr oups : Complete the Groups form, as necessary , and then select the Next button to display the Unconf igured Consoles form. 6. Unconfigur ed Consoles : Select the check box for each unconf igured con sole that you wish to configure, and then select the Next button to di s[...]

4: BladeManager Web Administra tion 4-36 AlterPat h BladeManag er Manual 7. Edit Configuration : From the Edit Settings form, verify your settiings and modify as necessary . Click on the second tab ( Page 2/2 ) to continue the same form. Note: If you need to change the prefix of the console names, type in the new prefix in the Console Prefix field [...]

Two Methods of Blade Configu ration AlterPath BladeManag er Manual 4-37 and repeat Edit Configuration and Co nfirmation, otherwise select the Finish button. Configuring Blades Manually through the Menu The other method for co nfiguring bl ades and switches is to manually complete the forms that compose the Chassis option of the menu. Consoles List [...]

4: BladeManager Web Administra tion 4-38 AlterPat h BladeManag er Manual See the Consoles section to view the Consoles Deta il form, incl uding Access , Notify , and Groups . >> Connecting to a Device T o connect to a device, follow the steps below: 1. From the De vice List form, c lick on the devic e name to whic h you wish to connect. If th[...]

Alarm Trigger AlterPath BladeManag er Manual 4-39 >> Deleting a Device from a Group The proper way to delete a chassis, blade or s witch from a group is to edit the group from which they belong. T o delete a device from one or more groups, follows the steps below: 1. From the menu panel, select Devices . The system displays the Device List fo[...]

4: BladeManager Web Administra tion 4-40 AlterPat h BladeManag er Manual Alarm T rigger Management Use the Alarm T r igger forms to pe rform the following Alarm T rigger configuration procedures: Note: Users who use the application in Access Mode also have the capability to change their email addr ess thr ough the User Pr ofile form. >> V iew[...]

Alarm Trigger AlterPath BladeManag er Manual 4-41 The system displays the Al arm T rigger list form: For an explanation of each fieldname, refer to the Form Fieldnames and Elements of the Alarm T rigger Detail form, next form section. T o view or edit the configuration of an alarm trigger , click on the alarm trigger name. >> Creating an Alar[...]

4: BladeManager Web Administra tion 4-42 AlterPat h BladeManag er Manual The sys tem disp lays the Al arm T rigger Detail form: T able 4-8: Alarm T rigger Form - Fieldnames and Elements Field Name Definition Alarm T rigger Name Name of the tr igger . Selecting a trigger name invokes the Alarm T rigger Detail form for that trigger . T rigger Express[...]

Blades / Switches AlterPath BladeManag er Manual 4-43 3. Complete the fields, as necessary . 4. Click on Save to complete the procedure. >> Deleting an Alarm T rigger 1. From the main Alarm T rigger form, se lect the triggers to be deleted by clicking the check boxes to the left of each Alarm T rigger na me. 2. Click on the Delete button. Usi[...]

4: BladeManager Web Administra tion 4-44 AlterPat h BladeManag er Manual Consoles List Form Blades and switches are access ed from the Console form as consoles. The Console List form shows one console na me for each blade or switch. When you move your cursor over the blade or switch name, a pop-up wind ow displays options to provide yo u the follow[...]

Blades / Switches AlterPath BladeManag er Manual 4-45 A user ’ s access to the blades switches and connection types are bas ed on the user ’ s Security Profile . If you choose not to use the Console W izard ( Devices : Device List > Device Detail), then you can add consoles a ttached to the added device using the Console List and Console De [...]

4: BladeManager Web Administra tion 4-46 AlterPat h BladeManag er Manual The sys tem displa ys the Co nsole Lis t form: From the Console List form, you can add, edit, or delete a console by selecting the appropriate button or link. >> Adding a Serial Console This procedure uses the serial console as an example of the console type to be create[...]

Blades / Switches AlterPath BladeManag er Manual 4-47 The system displays the Se lect Cons ole T ype form: 3. From the Select Console T ype form, select the type of conso le (Blade or Switch) you wish to add. The system displa ys the Console Details form:[...]

4: BladeManager Web Administra tion 4-48 AlterPat h BladeManag er Manual T able 4-10: Consoles Detail Form - Fieldnames and Elements Fieldname Definition Details T ab to display the Console Detail form whi ch is the currently displayed form. Notify T ab to display the Co nsole Notify form used to assign users to be notified when an alarm pertaining[...]

Blades / Switches AlterPath BladeManag er Manual 4-49 4. Complete the Console Detail form, as necessary . 5. Click on Save to complete the procedure. Adding a Switch Console Adding a switch console follows the same procedure, except you have to select Switch when the system prompts for the console type. Be sure that you have set the switch to Enabl[...]

4: BladeManager Web Administra tion 4-50 AlterPat h BladeManag er Manual The system displays the Co nsole Acc ess form: 2. From the resulting form, select a user from the Select User to Console Access view pane l. In the selection box, +USER is the default list which contains all users. The plus (+ ) sign is also u sed to ind icate all d efined gr [...]

Blades / Switches AlterPath BladeManag er Manual 4-51 The sys tem disp lays the Console Notify form: 2. From the resulting form, select a user from the Select User to Notify view panel. In the selection box, +USER is the default list whic h contains all users. The plus (+) sign is also used to indicate all defined grou ps. 3. Select the Add button.[...]

4: BladeManager Web Administra tion 4-52 AlterPat h BladeManag er Manual The sys tem disp lays the Co nsole Groups form: 2. From the resulting form, select a group from the Select Console Groups view panel. Note: As with USER, CONSOL E is the default list which contains all consoles. 3. Select the Add button. The system transfers the selected group[...]

Blades / Switches AlterPath BladeManag er Manual 4-53 The system displays th e Console Detail form. 3. From the Conso le Detail form, cli ck on Groups. The system displays th e Console Group form. 4. From the Selected Group s view pa nel of th e Console Gro up form, select the group or groups from which you wish to remove th e current console. 5. C[...]

4: BladeManager Web Administra tion 4-54 AlterPat h BladeManag er Manual >> Setting Log Rotation in Auto Mode Y ou can also set t he log rotation to be automatically performed on a daily , weekly , or monthly basis. T o set the system to automatically initiate log rotation on a regular basis, perform the following steps: 1. From the Consoles [...]

Users AlterPath BladeManag er Manual 4-55 Import ant: Re gardless of the au thentication type (remo te, local or none), any user who will use the BladeManager application MUST be entered in the BladeManager da tabase in order to access the application. User List form Use the User List form to view all Bl a deManager system administrators and regula[...]

4: BladeManager Web Administra tion 4-56 AlterPat h BladeManag er Manual 1. From the menu, select Users . The system displays the User List form. 2. From the User List form, click on the Add button. The sys tem disp lays th e User Detail form: 3. Complete the User Detail form, as ne cessary . T able 4-12: Users, Details Form - Fieldnames and Elemen[...]

Users AlterPath BladeManag er Manual 4-57 4. Click on Save to complete the procedure. Local Password Checkbox to en able local authentication for the user . NOTE: Even if you ar e us ing another server authentication (e.g., LDAP , RADIUS), it is advisable that you activate the passwor d for local authentication in the event that your authentication[...]

4: BladeManager Web Administra tion 4-58 AlterPat h BladeManag er Manual >> Selecting Con soles for a User The User Access form allows you to assign one or more consoles for the current user . T o assign consoles to a user , follow the ste ps below: 1. From the menu, select Users . The system displays the User List form. 2. From the User List[...]

Users AlterPath BladeManag er Manual 4-59 6. T o select another console, repeat steps 4 and 5. Y ou can also use the <Shift> key to select multiple groups. 7. Click on Save to complete the procedure. >> Selecting User Group(s) for a User The User Group form allows you to as sign a user to one or more user groups. The user group, however[...]

4: BladeManager Web Administra tion 4-60 AlterPat h BladeManag er Manual 5. Select the Add button. The system transfers the selected group to the Selected Groups view panel on the righ t. 6. T o select another user group, repeat steps 4 and 5. Y ou can also us e the <Shift> key to select multiple user groups. 7. Click on Save to complete the [...]

Users AlterPath BladeManag er Manual 4-61 Setting the Local Password Y ou can set up users to have local authentication by setting the L ocal Password, and defining the user name and password. A local password is used if the authen tication setting for the BladeManager is Local . The local password is also used as a backup when server -based authen[...]

4: BladeManager Web Administra tion 4-62 AlterPat h BladeManag er Manual Group s The Gr oups option allows you to create new group s of users, consoles, o r devices, as well as to edit or delete th ese groups. The BladeM anager has three default grou ps: •D e v i c e •C o n s o l e •U s e r The system does not allow you to edit or delete thes[...]

Groups AlterPath BladeManag er Manual 4-63 The system displays the Group List form: 2. From the Group List form , click on the Add button. The system displays th e Adding Group form: 3. From the resulting form, select th e group type you wish to create ( Device , Console , or User ).[...]

4: BladeManager Web Administra tion 4-64 AlterPat h BladeManag er Manual Based on your selection , the system displays the Group Detail form. The example below uses the Group Detail form for the Group T ype, User: 4. Enter the Group Name and Description of the new gro up. 5. Click on Save to complete the procedure. >> Deleting a Group Note: Y[...]

Security Profiles AlterPath BladeManag er Manual 4-65 1. Select the security profile from the Select Security Profile box and then click on th e Add button. Security Profiles A security profile defines a set of rules or conditions regarding a user ’ s access permissions and limits for accessing the BladeMana ger and its fe atures. The Security Pr[...]

4: BladeManager Web Administra tion 4-66 AlterPat h BladeManag er Manual Security profile management is comp osed of th e following forms: Security Profile List The Security Profile List fo rm displays a list of all Se cu rity Profiles that yo u can assign to a user or user group. The list contains four columns: T able 4-13: Summary of Security Pro[...]

Security Profiles AlterPath BladeManag er Manual 4-67 >> Adding or Editing a Security Profile T o add or edit a security profile, perform the following steps: 1. From the menu select Security Profile. The system displays the Security Profile list form (see previous page). 2. Select the Add button to add, or select an existing profile to edit.[...]

4: BladeManager Web Administra tion 4-68 AlterPat h BladeManag er Manual The sys tem disp lays the Security Profi les - General tabbed form: 3. From the General tabbed form, enter the profile name (required), a brief description of the profile, its status (Enabled, Disabled, Deleted), and the rule to be applied to the entire profile (Allow or Deny)[...]

Security Profiles AlterPath BladeManag er Manual 4-69 The system displays the Source IP tabbed form: 2. Complete or modify the form, as needed. T able 4-14 : Security Profiles, Sour ce IP - Fieldnames and Elem ents Field Name Func tion Source IP (tab) T itle of the current tabbed form. Rule The configured policy (Allow or Deny) that applies to the [...]

4: BladeManager Web Administra tion 4-70 AlterPat h BladeManag er Manual 3. Click on Save . >> Security Profiles: LAN ITF The LAN ITF (Local Area Network Interfaces) tabbed form allows you to define the interfaces to which a user is either allowe d to conn ect, or denied access. This feature is designed for situ ations where multiple network [...]

Security Profiles AlterPath BladeManag er Manual 4-71 T able 4-15 : Security Profiles, VLA N/Subnet - Fieldnam es and Elements Field Name Func tion LAN ITF (tab) T ab title to select the current form. Rule The configured policy (Allow or Deny) that applies to the current form and the entire security profile. The default rule is configured from the [...]

4: BladeManager Web Administra tion 4-72 AlterPat h BladeManag er Manual >> Security Profile: Date/T ime The Date/T ime tabbed form allows you to specify the time in which the profile will allow or deny access to the system. Delete Button to remove any selected LAN ITF conditions from the right list box. Selected LAN ITF Conditions List of se[...]

Security Profiles AlterPath BladeManag er Manual 4-73 >> Configuring Authorization The Authorization tabbed fo rm allows you to define the authorized actions for the current profile. If the rule chosen for a security profile is Allow , then you T able 4-16 : Security Profiles, Date/T im e - Fieldnames and Elements Field Name Func tion Date/T [...]

4: BladeManager Web Administra tion 4-74 AlterPat h BladeManag er Manual must select at least one action from the Authorization form. T o configure or authorize actions for a profile, follow the procedure below: 1. Go to: Se curity Profiles > Authorization . The sys tem disp lays the Au thorization tabbed form: 2. From the left hand box, which l[...]

Security Profiles AlterPath BladeManag er Manual 4-75 3. Repeat the previous step for all actions you wish to assign. 4. Click on Save to complete the procedure. >> Deleting a Security Profile T o delete a security profile, perform the following steps: 1. From the main menu, select Security Profiles . 2. From the Security Profiles List form, [...]

4: BladeManager Web Administra tion 4-76 AlterPat h BladeManag er Manual Backup and Restore Scenarios For illustration purposes, there are two scenarios in which you can perform the backup . • Replicating data to a hot spare machine - Y ou back u p the configuration data and data buffers and restore th em to a second BladeManager unit. This metho[...]

System Re covery Guidelin es AlterPath BladeManag er Manual 4-77 BladeManager Database T ransaction Support The BladeManager commits all successf ul database transactions to the BladeManager database. T o ensure data integrity , the BladeManager roll will roll back any failed database tr ansaction in the event that: • There are concurrent users u[...]

4: BladeManager Web Administra tion 4-78 AlterPat h BladeManag er Manual Changing the Default Configuration This configuration procedu re is for advanced users only . T o change the default database co nfiguration of the BladeManager , please refer to Chapter 5: Advanced Configuration . Info / Reporting Info/Reporting is a list that summarizes all [...]

Info / Reporting AlterPath BladeManag er Manual 4-79 T o view a more detailed in formation about a particular user from a detail line, select from under the User column the particular user you wi sh to view . When you select a user from the Info /Reporting List screen, the system displays the following detail list: Reason Reason for any failure of [...]

4: BladeManager Web Administra tion 4-80 AlterPat h BladeManag er Manual[...]

This chapter presents some procedures for configuring the BladeManager through the Command Line Interface (CLI). First T ime Configuration aside, Cycl ades recommends the use of the CLI only for advanced admin users who are proficient with CLI, and would like more control over the configuration features of the BladeManager . This chapter is organiz[...]

5: Advanc ed Configur ation 5-2 Alterpath Bla deManager Manual W orking from a CLI The BladeManager allows you to use a command line interface (CLI) as an alternative to the web interface. Y ou ma y use Linux or W indows-based secure shell (SSH) client. The same restrictio ns to the web management interface apply to the CLI. >> Logging In 1. [...]

Working from a CLI AlterPath BladeManag er Manual 5-3 Copying and Pasting T ext within the Console Applet Window The APM allows you to copy and paste te xt within your conso le (Java applet) window to facilitate any command line configuration of a device and other similar operations. T o use the copy & paste feature, right click yo ur mouse. Th[...]

5: Advanc ed Configur ation 5-4 Alterpath Bla deManager Manual This command opens a SSH c onnection to the manager , checks the username and password, checks the access c ontrol list to verify user access, and then establishes the connection to the appropriate consol e. Sample Command Line Interface An example of a command line interface as accesse[...]

Working from a CLI AlterPath BladeManag er Manual 5-5 [Enter `^Ec.' to disconnect] ******** ********* ******* ********* ********* ******* ****** CLI Commands For your convenience, the CLI key co mmands (a ccessible by pressing ^Ec?) are summarized in the ta ble below . Each command must be preceded by ^Ec . For example, to send a broadcast mes[...]

5: Advanc ed Configur ation 5-6 Alterpath Bla deManager Manual Set Commands The following set commands are availa ble to enable you to manually and individually configure specific E2000 settings through CLI: • setauth • setboot • setcons • setdatetime •d a t e • setnames • setnetwork • setntp • setsmtp SET A UTH - sets the authent[...]

Working from a CLI AlterPath BladeManag er Manual 5-7 SETCONS - sets console connection. For example: [root@APM_Paulo root]# set cons APM Console Configuration Utility -------------------------- ------- Current Parameters: 9600, 8n1, vt100 Press <ENTER> if you wish to change it, or [Q<ENT ER>] to quit: Enter Baud Rate (in bps) [ 9600]: [...]

5: Advanc ed Configur ation 5-8 Alterpath Bla deManager Manual 16) EST5EDT 33) Ira n 50) Poland 67 ) right 17) Egypt 34) Isr ael 51) Portugal 68 ) zone.tab Enter the number corre sponding to your choice : 48 Current system date an d time is: Tue Jan 25 15:40:35 PST 2005 Press ENTER to accept it or specify new ones. Enter date in MM/DD/YY YY format:[...]

Working from a CLI AlterPath BladeManag er Manual 5-9 Enter Primary Ethernet Sub net Mask: 255.255.255.0 Secondary Ethernet IP addr ess: (S)tatic, (N)one o r (K)eep current ? [K]: Subinterface eth0:1 IP add ress: (S)tatic, (N)one or (K)eep current ? [K]: Subinterface eth0:9999 IP address: (S)tatic, (N)o ne or (K)eep current ? [K]: Configure more Et[...]

5: Advanc ed Configur ation 5-10 Alterpath Blad eManager Manual Use ^C to stop changing interfaces and ke ep all changes ma de. If you do not exit with ^C at the end, the script will ask if you want to make the changes effective now , in which case the script automatically runs /etc/init.d/ networking restart . SETNTP - sets the NTP server ’ s IP[...]

Working from a CLI AlterPath BladeManag er Manual 5-11 [Enter `^Az.' to disconnect] Re-defining the Interrupt Key The key sequence Ctrl + C in the file /var/apm/bin/apmrun.sh has been changed to Ctrl + _ (that is: ^_) to prevent th e system from directing this command to any appli cation running on the foreground rath er than to the console se[...]

5: Advanc ed Configur ation 5-12 Alterpath Blad eManager Manual <session-timeout> 60 </session-timeout> 3. T o make the change effective, reboot or restart tomcat as follows: /etc/init.d/tomcat stop /etc/init.d/tomcat start Enabling T elnet T elnet is available in the E2000, but disa bled by default to avo id security problems. T o enab[...]

NIS Configuration AlterPath BladeManag er Manual 5-13 NIS Configuration T o use NIS authentication, NIS is selec ted from the First T ime Configuration script. T o further control NIS authentication, edit the following configuration file as follows: File to edit: /etc/nsswitch.conf Format: <database>:<service>[<actions><s ervic[...]

5: Advanc ed Configur ation 5-14 Alterpath Blad eManager Manual User Authentication T o use NIS only to authenticate users, change the lines about passwd, shadow and group in the co nfiguration file (/etc/nsswitc h.conf) as described below . The BladeM anager does not su pport user authentication agains t a NIS map and the local file (/etc/passwd) [...]

Active Directory Configuration AlterPath BladeManag er Manual 5-15 group_compat: nis Active Directory Configuration T o configure the BladeMan ager to use Active Directory for authentication, follow the steps below: 1. During First T i me Configuration (see Chapter 4: W eb Configuration ), select ldap when prom pted for the de sired authentication [...]

5: Advanc ed Configur ation 5-16 Alterpath Blad eManager Manual Disabling HTTP to Use Only HTTPS The BladeManager is configured to allow bo th HTTP and HTTPS access. Y ou can, however disa ble HTTP access by co mmenting out its conf iguration in the BladeManager unit by using the co mmand line. T o do so, perform the following steps: 1. Edit the fi[...]

Backing Up User Data AlterPath BladeManag er Manual 5-17 Upgrading the APBM Firmware Y ou may up grade the APBM firmware by downloading the upgraded software from the we b to th e E2000. 1. From the Cyclades website (www .cyc lades. com), download and cop y the firmware to the E2000 via Secure Copy (SCP). The firmware is composed of two files: • [...]

5: Advanc ed Configur ation 5-18 Alterpath Blad eManager Manual Backup and Restore Scenarios For illustration purposes, there are two scenarios in which you can perform the backup. • Replicating data to a h ot spar e machine - Y ou back up the configuration data and data buffers and resto re th em to a second Bl adeManager unit. This method enabl[...]

Managing L og Files AlterPath BladeManag er Manual 5-19 Y ou can back up these files to another server using the secure shell SCP program. Backing Up Log Files to a Remote Server Y ou can copy rotated logs to another ser ver that is more suited for holding larg e amounts of log data using th e following command line syntax: save_rotated_log [[ user[...]

5: Advanc ed Configur ation 5-20 Alterpath Blad eManager Manual If the BladeManager goes down, you will still have direct access to ports and consoles, but you will need to redefine the devices. Changing the Dat abase Configuration Caution: This configuration pr ocedur e is for advanced users only . Y ou can change the default configuration values [...]

Installing SSL Certificates AlterPath BladeManag er Manual 5-21 Inst alling SSL Certificates This section explains how to add or import your own SSL certificate to the BladeManager instead of using the Cyclades defau lt SSL certificate . A certificate for the HTTP security is created by a Certificati on Authority (CA). Using a public algorithm such[...]

5: Advanc ed Configur ation 5-22 Alterpath Blad eManager Manual The command generates a Certificate Si gning Request (CSR) which contains some person al (or corporate) information and its public key . S tep 2: Submit the CSR to the CA Once generated, submit the CSR and so me personal data to the CA. Y ou can request this service by selecting from a[...]

Installing SSL Certificates AlterPath BladeManag er Manual 5-23 Be sure to check a certificate very caref ully before importing it as a trusted certificate! V iew it first (using the -printcert subcommand, o r the -import subcommand without the -nopr ompt option), and make sure that the displayed certific ate fingerprin t(s) match the expected ones[...]

5: Advanc ed Configur ation 5-24 Alterpath Blad eManager Manual[...]

Glossary Glossary-1 AlterPath Manager E20 00 Manual Access Control List The ACL is used for security inside of programs and ( ACL ) opera ting systems. For example, W indows NT use s ACLs for directory and file access; Lotus Domino uses ACLs for database access. An ACL contains both us ers and groups and what level of access each has. For example, [...]

Glossary Glossary-2 AlterPath Manager E2 000 Manual baud rate cannot be equated to bandwidth unless the numb er of bits per symbol is kn own. Blade Server A Blade Server is a computer system on a motherboard, which includes processor(s), me mory , a network connection and, sometimes, storage. Th e blade concept addresses the needs of lar ge scale d[...]

Glossary AlterPath Manager E2 000 Manual Glossary-3 Cluster A cluster is a group of one or more computers working as a group to execute a certain task. From the user standpoint, a cluster acts as a large computer system. Console T erminal used to co nfigure network devices at boot (start-up) time. Also used to refer to the keyboard, video and mouse[...]

Glossary Glossary-4 AlterPath Manager E2 000 Manual Network will have the same thing as the right-hand portion of their Domain Names (matisse.net in the examples above). It is also possible for a Domain Name to exist but not be connected to an actual machine. This is often done so that a group or business can have an Internet e-mail addre ss withou[...]

Glossary AlterPath Manager E2 000 Manual Glossary-5 side signals the sending side to stop until the buffer has space again. Between hardware (s uch as your mo dem and your computer), hardware flow cont rol is used; between modems, software flow control is used. Hot-Swap Ability to remove and add hard ware to a computer system without powering of f [...]

Glossary Glossary-6 AlterPath Manager E2 000 Manual After a client and server has used Kerberos to prove their identity , they can also encrypt a ll of their communications to assure privacy and data integrity as they go about their business. KVM Keyboard, video and mou se interface to a server . LDAP Lightweight Dir ectory Access Pr otocol . A sof[...]

Glossary AlterPath Manager E2 000 Manual Glossary-7 connect to the Internet via PPP , you migh t want to set your machine's MTU to 576 too. Most Ethernet networks, on the other hand, have an MTU of 1500. Network Mask A 32-bit numb er used to group IP addresses together or to indicate the range of IP addresses on a single IP network/ subnet/sup[...]

Glossary Glossary-8 AlterPath Manager E2 000 Manual The following lists the availabl e parity parameters and their meanings: Odd - Parity bit set so that th ere is an odd number of 1 bits Ev en - Parity bit set so that ther e is an even number of 1 bits None - Parity bit is ignored, value is indeterminate PCMCIA Personal Computer Memor y Car d Inte[...]

Glossary AlterPath Manager E2 000 Manual Glossary-9 of the Internet Engineering T ask Force (IETF). PPP is commonly u sed when remote comp uters call an Internet service provider (ISP) or a corporate server that is configured to receive incoming calls. Pr ofile Usage setup of the ACS either as a Console Acce ss Server (CAS), a T erminal Server , or[...]

Glossary Glossary-10 AlterPath Manager E2000 Manual SMTP Simple Mail T ra nsfer Protocol. Specifies the format of messages that an SMTP client on one computer can use to send electronic mail to an SMTP s erver on another computer . SOL Serial Over LAN. SSH (Secure Shell) A protocol which permits secure remote access over a network from one comp ute[...]

Glossary AlterPath Manager E2 000 Manual Glossary-11 T ACACS+ T erminal Access Contr oller Access Contr ol System Plus . A protocol that provides re mote acc ess authentication, authorization, and related accounting an d logging services, used by Cisco Systems. TCP Keep-Alive Interval The time interval between the periodic polling of all inactive T[...]

Glossary Glossary-12 AlterPath Manager E2000 Manual UDP User Datagram Pr otocol uses a special type of packet called a datagram. Datagrams do not require a response; they are one way only (connectionless). Datagrams are usually used for streaming media because an occasional packet loss will not affect the final product of the transmission. U Rack H[...]

Appendix A: BladeManager Hardware Specifications AlterPath BladeManager Manual A-1 Microprocessor One Intel Pen tium IV 1024 KB (minimum) Level-2 cache and MMX TM (MMX2) technology . Memory 512MB SDRAM 256MB CompactFlash Operating System Netlinos Open Source Networking OS Security RADIUS, T ACACS+, Kerberos, LDA P , Active Directory , SSHv2, SSL Ma[...]

A: BladeManager Hardware Sp ecifications A-2 AlterPath BladeManager Manua l Expansion Slots T wo 66 MHz/64-bit PCI-X slots (one low pr ofile half-length, one full-height three-quarter -length) V ideo Controller A TI Radeon 7000M IGP v ideo on system board Compatible with SVGA and VGA 16 MB DD-SDRAM video memory Power 300 watt (1 10 or 220 V ac auto[...]

A: BladeManager Hardware Specificati ons AlterPath BladeManager Manual A-3 Supported web browsers and java runtime systems: • Mozilla 1.0.2/java plugin 1.4.2 • Netscape 7.1/java plugin 1 .4.2 • Internet Explorer 6. 0/java plugin 1.4.2 The Java Runtime plugin is available from the Sun web site at: http://java.s un.com/pro ducts/plugin/ Support[...]

A: BladeManager Hardware Sp ecifications A-4 AlterPath BladeManager Manua l[...]