Sunteți pe pagina 1din 43

MESCA-X Training SHC

C.Vangramberen 2011 May

Serveur Hardware Console


SUMMARY
- Overview
- How to connect
- Configuration
- Monitoring
- System Control
- Maintenance

2 ©Bull, 2010 © Bull Confidentiel - Reproduction interdite sans accord préalable


Overview

The Hardware Console is a web-based administration application embedded on


the iBMC chip
.
It allows to remotely operate, monitor and configure the server via the enterprise
LAN using a Microsoft Internet Explorer or Mozilla Firefox browser.

Main features:

•Monitoring :System Event Log, Message Log, health, alerting, platform event
filtering
•Power and reset control:
•Embedded Serial Console Server (Serial Over LAN)
•Embedded KVM/IP Server with video compression
•Virtual media (USB mass storage emulation feature)
•User Management (support of LDAP)
•CLI server with CLP support
•SNMP, IP config protocols (DHCP, BOOTP)
•Based on IPMI 2.0 server stack

3 ©Bull, 2010 © Bull Confidentiel - Reproduction interdite sans accord préalable


Logging

- Errors are logged in the IPMI System Event Log


- The EMM provides a centralized, non-volatile System Event Log (flash 8KB, Max # of
events is 512).
- Event message is added to the SEL by the BMC when a platform event occurs.
- No more logging when full but alerting still works
- Can be retrieved with ipmitool command:
> ipmitool … sel list

- Additional Logging mechanism: Message Log


- An internal Message Log is also available.
- This Message Log gives more details about the event than IPMI SEL which data size is
limited at 16 bytes! So it is a help for diag of a failure.
- It is an EMM specific format.
- Circular file
- Can be retrieved with ipmitool command (needs IPMITOOL 1.8.11_Bull_1.5-2, EMM 11.09.xx):
> ipmitool … bulloem getlogs <backup foldername>

- Additional Logging mechanism: Machine Error Log (aka BIOS log)


- 6 log file of type “Fatal”, 15 of type “Uncorrected” and 15 of type “Corrected” can be
stored in the BMC flash.
- By default, only “F” and “U” log type are stored in the flash. This can be changed by
using an IPMI command.

4 ©Bull, 2009 PltMgt - EMM – Sept 2009


Error Management
•Chipset errors: « C » , « U » , « F »
– The FPGA sends an i2c alert to the EMM, the EMM accesses the FPGA to get the
source of the alert and then
• Only « U » and « F » error type (no corrected error pin in the Intel Chipset)
• logs a message in the Message log with the source of the error (ex: CPU#)
• logs the error in the SEL with the error type (« U » or « F »).
– The BIOS sends a Log (SAL format) to the EMM through the System Interface
• « C », « U » and « F » error type, If configure to do so
• the EMM stores the log in a file inside the BMC flash.
• the EMM logs an IPMI event of type « auxiliary log added » in the SEL with
the log file identifier and the error type in the data of the event..
• Log BIOS can be retrieved from iCare,
or by 'ipmitool' command (*):
> ipmitool … sel elist :
System Event #2000#fd | Entry added to auxiliary log #a30005 < mel ID
> ipmitool … bulloem getmel <mel ID> <outputfile_name>
in this example <mel ID> = 0005
The output file is in binary format, and can be analyzed with « amel » tool.

(*) needs IPMITOOL 1.8.11_Bull_1.5-2, EMM 11.09.xx, BIOSX008.10 or above.

•BIOS boot monitoring


– The IPMI watchdog timer is used for BIOS timeout detection while booting.
– An event is sent into the SEL and the last BIOS postcodes are logged into the
Message Log.

5 ©Bull, 2010 © Bull Confidentiel - Reproduction interdite sans accord préalable


How to connect
Launch your web browser :

Enter the IP address or Host name


(example: http://192.x.x.x).

The authentication page opens.

Factory default Username : super


Factory default Password : pass

Note: the IP address is configured


using the tool :
psetup (Windows) / mc-setup (Linux)

SHC application allows simultaneous


user connectioons.

6 ©Bull, 2010 © Bull Confidentiel - Reproduction interdite sans accord préalable


Overview
A: Navigation tree The navigation tree provides access to console features.
Note that displayed features differ according to the tab selected.

B User logon name


C Name given to the server for easy identification
D: Tabs Four tabs allow access to four families of features accessible from the associated navigation trees:
System Control, Monitoring, Configuration and Maintenance
E: Control pane The control pane displays the commands and information associated with the item selected in the
navigation tree.

7 ©Bull, 2010 © Bull Confidentiel - Reproduction interdite sans accord préalable


Configuration: Global Settings

Platform Settings
Platform ID and Platform Name
must be unique

One Platform includes one to four


interconnected Mesca drawers.

Managed Server Settings


Managed Server Name:
Server Name known by the OS,
can be changed from OS

A Managed Server is a Domain


including one or several
interconnected Mesca drawers
8 ©Bull, 2010 © Bull Confidentiel - Reproduction interdite sans accord préalable
Configuration: Global Settings

Functional Profiles
Set of parameters defining the
Processor Threading Mode
and
The Power Restore Policy
at system power-on.

Power Restore Policy values:

• OFF : the system remains off when AC power returns.


• RESTORE : the system returns to its power state before the AC power loss.
• ON : the system powers on when AC power returns.
9 ©Bull, 2010 © Bull Confidentiel - Reproduction interdite sans accord préalable
Configuration: BMC Settings

Network

Network parameters

Allow connection to BMC with telnet or


SSH:
- to use the Command Line Protocol
- launch Terminal mode (SOL console)
(Serial On Line)

To connect directly to CLP


(Command Line Protocol)

To enable access to SOL console


( '' terminal '' command)
To prevent server discovery on LAN

Mng0(/ETH0):
mandatory in multi-drawer configuration
or Mng1
Prevent resetting physical interface
of Kawela to avoid disconnection

10 ©Bull, 2010 © Bull Confidentiel - Reproduction interdite sans accord préalable


Configuration: BMC Settings
Date Time

Strongly recommended, to
avoid clearing date & time on
a power cut-off

11 ©Bull, 2010 © Bull Confidentiel - Reproduction interdite sans accord préalable


Configuration: BMC Settings

SNMP
Allows the SNMP agent to
communicate with an SNMP
manager (for example, Bull
System Manager).

if required by your SNMP


manager. This option is to
be selected for Bull System
Manager.

Select this option if required


by your SNMP
manager.

12 ©Bull, 2010 © Bull Confidentiel - Reproduction interdite sans accord préalable


Configuration: BMC Settings

Messages

New features:

- Multiple Destinations
(i.e several platform
management servers ,like
iCare & BSM)

- Syslog forwarding
allows Board and Security
messages to be sent by the
syslog protocol, to centralize
the Board and Security logs
on a Linux platform.

Note: Alert and message transmission to the iCare Console must be set up
directly from the iCare Console interface.
13 ©Bull, 2010 © Bull Confidentiel - Reproduction interdite sans accord préalable
Configuration: BMC User Management

Users : Create

Groups : Create

14 ©Bull, 2010 © Bull Confidentiel - Reproduction interdite sans accord préalable


Configuration: BMC User Management

Group : Permissions
To grant Console
Features to the select
Group

15 ©Bull, 2010 © Bull Confidentiel - Reproduction interdite sans accord préalable


Configuration: Security

Encryption

16 ©Bull, 2010 © Bull Confidentiel - Reproduction interdite sans accord préalable


Configuration: Security

Certificate

- Create the CSR

17 ©Bull, 2010 © Bull Confidentiel - Reproduction interdite sans accord préalable


Configuration: Security

Certificate

Download the CSR

Send the CSR


to a Certification
Authority,
to get a Certificate

Upload the
SSL Certificate

18 ©Bull, 2010 © Bull Confidentiel - Reproduction interdite sans accord préalable


Configuration: Security

User Logon Policy

If checked,it is not possible to log


on to the console again using the
same user account.

To force password change after the


specified period

Timer for automatic disconnection,


if no activity

19 ©Bull, 2010 © Bull Confidentiel - Reproduction interdite sans accord préalable


Configuration: Security

Authentication

3 Authentication Modes:

- Local:
Users are defined locally

- LDAP

-Radius

20 ©Bull, 2010 © Bull Confidentiel - Reproduction interdite sans accord préalable


Configuration: Security

Power Button Lockout

Used to inhibit the physical Power Button on LCP

21 ©Bull, 2010 © Bull Confidentiel - Reproduction interdite sans accord préalable


Configuration: Security

User Lockout

The user account is


locked once the
maximum invalid
logon attempts is
reached

Time in minutes during which the user account remains


locked

22 ©Bull, 2010 © Bull Confidentiel - Reproduction interdite sans accord préalable


Configuration: Remote Console Settings

User Specific

23 ©Bull, 2010 © Bull Confidentiel - Reproduction interdite sans accord préalable


Configuration: Alert Settings

To send alerts to iCare


(or other Platform
Manager):

- Declare the
'Lan Destinations'
Type : E_Mail or SNMP
trap

- Enable a Policy index


for each Lan Destination

24 ©Bull, 2010 © Bull Confidentiel - Reproduction interdite sans accord préalable


Configuration: Alert Settings (con't)

Note: Filters are predefined , it is recommended to not change the filter parameters.

25 ©Bull, 2010 © Bull Confidentiel - Reproduction interdite sans accord préalable


Monitoring : Viewing Sensors
The server is equipped with various sensors that monitor:
• Power status
• Presence, absence,
redundancy of components
• Voltage values
• Temperature values
• Fan speed

26 ©Bull, 2010 © Bull Confidentiel - Reproduction interdite sans accord préalable


Monitoring : Viewing / Clearing SEL
The System Event Log records events compliant with the IPMI standard, concerning platform events:
• Power supplies
• FANs

• Temperature sensors
. Processor,chipset errors

The System Event Log can


only store up to 512 entries
at a time (flash 8KB).

Use Clear button when


Log is (nearly) full .

The contents of SEL may be retreived by ipmitool


27 ©Bull, 2010 © Bull Confidentiel - Reproduction interdite sans accord préalable
Monitoring : Viewing Board and Security Messages
- The Board and Security Messages log records non-IPMI events, such as power-on errors, user
authentication, connection to the remote console, security violation, log deletion …
- Gives more details, it is a help for diag of a failure.

This log can record up to 1.000 events. Once this limit is reached, the
arrival of new messages will automatically delete the oldest messages
The contents of message log may be retreived by ipmitool (need version 1.8.11_BULL_1.5.1 and EMM build 1147)

28 ©Bull, 2010 © Bull Confidentiel - Reproduction interdite sans accord préalable


System Control : Power

Power Management

Caution:
Force Power Off ,
Force Power Cycle,
Hard Reset ,
functions are NOT gracefully

NMI request: for OS debugging

Power On using Backup BIOS:


Allow to initialize server from the
backup BIOS (useful if main
Bios is broken)

29 ©Bull, 2010 © Bull Confidentiel - Reproduction interdite sans accord préalable


System Control : Virtual Media

Virtual Media feature allows a remote system to access a local (virtual) media, such as :
a CD-ROM drive, hard disk drive, floppy disk drive, a USB mass storage device, from anywhere
on the network.

30 ©Bull, 2010 © Bull Confidentiel - Reproduction interdite sans accord préalable


System Control : Virtual Media
Set a CD-ROM image Result:

31 ©Bull, 2010 © Bull Confidentiel - Reproduction interdite sans accord préalable


System Control : Remote System Console / Preview

Allows to remotely view, use


and control the MESCA
System with the keyboard,
video and mouse on your
local computer.

Note:Java Runtime
Environment (JRE) version
1.4 or higher is required on
your computer.

Working under EFI Shell

32 ©Bull, 2010 © Bull Confidentiel - Reproduction interdite sans accord préalable


System Control : Remote System Console

Server running under A


Operating System Linux B

A: Menu bar The Menu bar gives access to the


following menus:
• Connection
• Control
• Keyboard
• Mouse
• Virtual Media
• View C

B: Toolbar The Toolbar gives access to


the following controls:
• Exit
• Screenshot
• Properties
• Enter/Leave Monitor Only
Mode
• Enter/Leave Exclusive
Access Mode
• Scaling
• Full Screen Mode
• Virtual Media
• Select/Send Keyboard
Macro
• Sync Mouse (Reserved)
• Single Cursor Mode

C: Remote This area displays the remote


desktop system desktop screen. D

D: The Statusbar provides


Statusbar connection information.
33 ©Bull, 2010 © Bull Confidentiel - Reproduction interdite sans accord préalable
System Control : Remote System Console

Drive Redirection :
1 Click 2 Select a drive (local or
Image file or a Local folder)
and Drive Number

3 Then click 'Connect'

34 ©Bull, 2010 © Bull Confidentiel - Reproduction interdite sans accord préalable


System Control : Remote System Console
Drive Redirection : the drive is mounted

35 ©Bull, 2010 © Bull Confidentiel - Reproduction interdite sans accord préalable


System Control : Remote System Console ,Menu's
Connection menu View menu Control menu Mouse menu Keyboard menu

36 ©Bull, 2010 © Bull Confidentiel - Reproduction interdite sans accord préalable


Maintenance : FRU, Firmware and User Information
Management Board Information

"Download Information File"


to save Management Board
Information in xml file

37 ©Bull, 2010 © Bull Confidentiel - Reproduction interdite sans accord préalable


Maintenance : FRU, Firmware and User Information
FRU Information

"Get Identity Card"


to save FRU Information
in xml file

38 ©Bull, 2010 © Bull Confidentiel - Reproduction interdite sans accord préalable


Maintenance : FRU, Firmware and User Information
Firmware Version

39 ©Bull, 2010 © Bull Confidentiel - Reproduction interdite sans accord préalable


Maintenance : Updating Firmware

Updating BMC firmware :


related to SHC , SDR...
Condition : server can be operating

Updating MTBC, ILBC and BIOS


Firmware

MXB :related to FPGA


Condition : server stopped
File name example :
FPGA_EMM_MXBC6_C4500102.HEX

ILB : related to FPGA


Condition :server stopped
File name example :
FPGA_EMM_ILBC3_B4500104.HEX

40 ©Bull, 2010 © Bull Confidentiel - Reproduction interdite sans accord préalable


Maintenance : Updating Firmware
Updating ADM1069
related to sensors threshold
Condition : server stopped

41 ©Bull, 2010 © Bull Confidentiel - Reproduction interdite sans accord préalable


Maintenance : Resetting Devices

Reset Keyboard/Mouse
(USB), USB, video
engine :
Resets the subdevice
which manages the
Remote System Console

Reset Device :
Restarts the embedded
software (= BMC) :
disconnects any connected
users

42 ©Bull, 2010 © Bull Confidentiel - Reproduction interdite sans accord préalable


Maintenance : Excluding/Including Processor Sockets

The console allows to exclude


and include processor
sockets in a static way:
the system must be powered
off to select the
components to
exclude/include and the
modification is taken into
account at next power on.

43 ©Bull, 2010 © Bull Confidentiel - Reproduction interdite sans accord préalable

S-ar putea să vă placă și