Sun Microsystems Sun SPARC Enterprise M3000 User Manual Download Page 123

Page: 123 / 398

Chapter 2

Setting Up XSCF

2-71

Enabling or Disabling Audit, Transferring a Log File, and Deleting
Audit Data

■

Command operation

1. Use the

showaudit

(8) command to display audit settings.

2. Use the

setaudit

(8) command to configure auditing.

<Example> Display all information on the current audit status in

the system.

XSCF>

showaudit all

Auditing:

enabled

Audit space used:

13713 (bytes)

Audit space free:

4180591 (bytes)

Records dropped:

Policy on full trail: count

User global policy:

enabled

Mail:

Thresholds:

80% 100%

User policy:

Events:

AEV_AUDIT_START

enabled

AEV_AUDIT_STOP enabled

<Example 1> Disable writing to the audit trail and transfer the log

file.

XSCF>

setaudit disable

<Example 2> Enable writing to the audit trail.

XSCF>

setaudit enable

Turns on writing of the audit records for the audit trail.

< Example 3> Request the log file transfer.

XSCF>

setaudit archive

< Example 4> Delete the log data of the audit trail.

XSCF>

setaudit delete

Summary of Contents for Sun SPARC Enterprise M3000

Page 1: ...stems Inc www sun com Submit comments about this document at http www sun com hwdocs feedback Sun SPARC Enterprise M3000 M4000 M5000 M8000 M9000 Servers XSCF User s Guide Part No 819 6202 16 August 2009 Revision A ...

Page 2: ...ountries Fujitsu and the Fujitsu logo are registered trademarks of Fujitsu Limited All SPARC trademarks are used under license and are registered trademarks of SPARC International Inc in the U S and other countries Products bearing SPARC trademarks are based upon architecture developed by Sun Microsystems Inc SPARC64 is a trademark of SPARC International Inc used under license by Fujitsu Microelec...

Page 3: ...ited Toutes les marques SPARC sont utilisées sous licence et sont des marques de fabrique ou des marques déposées de SPARC International Inc aux Etats Unis et dans d autres pays Les produits portant les marques SPARC sont basés sur une architecture développée par Sun Microsystems Inc SPARC64 est une marques déposée de SPARC International Inc utilisée sous le permis par Fujitsu Microelectronics Inc...

Page 4: ......

Page 5: ... 3 2 NTP Configuration and Time Synchronization 1 20 1 3 3 The CD RW DVD RW Drive Unit and Tape Drive Unit 1 20 1 4 XSCF User Interfaces 1 21 1 4 1 User Accounts and User Privileges 1 23 2 Setting Up XSCF 2 1 2 1 XSCF Setup Summary 2 1 2 1 1 Setup Summary by the XSCF Shell 2 3 2 1 2 Setup Summary Using the XSCF Web 2 11 2 2 Specifying the XSCF Settings 2 14 2 2 1 Network Configuration 2 15 2 2 2 U...

Page 6: ...ive Unit Administration 2 138 2 2 17 COD Administration 2 141 2 3 Save and Restore XSCF Configuration Information 2 145 3 Connecting to the XSCF and the Server 3 1 3 1 Connect Terminals to the XSCF 3 1 3 1 1 Terminal Operating Modes for Connection to XSCF 3 2 3 1 2 Port and Terminal Types Connected to the XSCF 3 3 3 1 3 About the XSCF LAN the DSCP Link Port Number and the Function and the Firewall...

Page 7: ...er On 4 14 4 4 4 Domain Power Off 4 15 4 4 5 Sending a Domain Panic Request 4 17 4 4 6 Domain Reset 4 18 4 4 7 Sending a Break Signal to a Domain 4 19 4 4 8 Air Conditioning Wait Time Administration 4 20 4 4 9 Warm Up Time Administration 4 21 4 4 10 Shutdown Wait Time Administration 4 23 4 4 11 Dual Power Feed Administration 4 23 4 5 Identifying the Location of the System 4 25 4 6 Managing Fault D...

Page 8: ...mmands 5 13 5 5 Domain Control and Maintenance Commands 5 14 5 6 View and Archive the XSCF Logs 5 16 5 7 User Management and Security Commands 5 17 5 8 Use the XSCF Other Commands 5 18 5 9 View XSCF Shell Error Messages 5 19 6 XSCF Mail Function 6 1 6 1 Overview of XSCF Mail Function 6 1 6 2 Setting Up the Mail Function 6 3 6 3 Contents of Parts Fault Notification 6 5 6 4 Test Mail 6 6 7 XSCF SNMP...

Page 9: ...1 11 If an Error Occurs During XSCF Firmware Update 8 20 8 1 12 Frequently Asked Questions 8 20 8 2 Collecting XSCF Logs 8 21 8 2 1 Log Types and Reference Commands 8 21 8 2 2 Method of Collecting the Log Information 8 24 9 How to Use the XSCF Web 9 1 9 1 Overview of the XSCF Web 9 1 9 2 Start the XSCF Web 9 5 9 2 1 Prerequisites 9 6 9 2 2 Supported Browsers 9 6 9 2 3 Functions to be Enabled on th...

Page 10: ...logs Command to Display Other Logs B 8 B 4 1 Monitor Message Log B 8 B 4 2 Temperature and Humidity History Log B 8 B 4 3 Console Log B 9 B 4 4 Panic Log B 9 B 4 5 IPL Log B 10 B 5 Audit Log B 10 C XSCF MIB C 1 C 1 MIB Object Identifiers C 1 C 2 Standard MIB C 3 C 3 Extended MIB C 3 C 4 Trap C 5 D Troubleshooting D 1 D 1 Troubleshooting XSCF and FAQ D 1 D 2 Troubleshooting the Server While XSCF Is...

Page 11: ...2 FIGURE 2 3 XSCF Domain Correlation Diagram 2 103 FIGURE 2 4 XSB Configuration Diagram Uni XSB In the Midrange Servers 2 104 FIGURE 2 5 XSB Configuration Diagram Quad XSB In the Midrange Servers 2 105 FIGURE 2 6 XSB Configuration Diagram Uni XSB In the High End Servers 2 106 FIGURE 2 7 XSB Configuration Diagram Quad XSB In the High End Servers 2 107 FIGURE 2 8 XSB Configuration Diagram Uni XSB In...

Page 12: ... One LAN Port 3 19 FIGURE 6 1 XSCF Mail Function 6 2 FIGURE 6 2 XSCF Fault Notification 6 3 FIGURE 6 3 Mail Sent for an XSCF Parts Fault That Occurred 6 5 FIGURE 7 1 Example of a Network Management Environment 7 2 FIGURE 7 2 Trap Issuance 7 7 FIGURE 8 1 Conceptual Diagram of the Firmware Update 8 2 FIGURE 9 1 Example of the Login Page 9 3 FIGURE 9 2 Example of the Tree Frame 9 4 FIGURE 9 3 Example...

Page 13: ...scriptions 1 24 TABLE 2 1 Network Configuration Terms 2 15 TABLE 2 2 Network Configuration 2 16 TABLE 2 3 User Account Administration Term 2 31 TABLE 2 4 User Account Administration 2 32 TABLE 2 5 LDAP Administration Terms 2 39 TABLE 2 6 LDAP Administration 2 40 TABLE 2 7 Setting Time and Date 2 45 TABLE 2 8 SSH Telnet Administration Terms 2 53 TABLE 2 9 SSH Telnet Administration 2 54 TABLE 2 10 h...

Page 14: ... Mode Configuration 2 127 TABLE 2 29 Value of Secure Variable and Status of Mode Switch 2 128 TABLE 2 30 Locale Administration 2 136 TABLE 2 31 Altitude Administration 2 137 TABLE 2 32 DVD Drive Tape Drive Unit Administration Terms 2 138 TABLE 2 33 DVD Drive Tape Drive Unit Configuration 2 139 TABLE 2 34 COD Administration 2 141 TABLE 3 1 Types of Terminals Connected With XSCF 3 4 TABLE 3 2 XSCF L...

Page 15: ...ation 9 13 TABLE 9 7 Domain Mode Configuration 9 13 TABLE 9 8 System Board Configuration 9 14 TABLE 9 9 Domain Configuration 9 15 TABLE 9 10 Network Configuration 9 16 TABLE 9 11 Time Settings 9 18 TABLE 9 12 SSH telnet Settings 9 18 TABLE 9 13 LDAP Configuration 9 19 TABLE 9 14 User Management Configuration 9 19 TABLE 9 15 Audit Configuration 9 20 TABLE 9 16 Mail Configuration SMTP 9 21 TABLE 9 1...

Page 16: ...SPARC Enterprise Mx000 Servers XSCF User s Guide August 2009 TABLE 9 24 Firmware Updating 9 26 TABLE 9 25 Log Collection 9 27 TABLE 9 26 Error Messages of XSCF Web 9 28 TABLE C 1 MIB Object Identifiers C 1 ...

Page 17: ...uide and the SPARC Enterprise M3000 M4000 M5000 M8000 M9000 Servers Administration Guide In addition read the SPARC Enterprise M3000 M4000 M5000 M8000 M9000 Servers XSCF Reference Manual and other manuals referenced in this manual This section includes Audience on page xviii Glossary on page xviii Structure and Contents of this Manual on page xviii SPARC Enterprise Mx000 Servers Documentation on p...

Page 18: ...vers Documentation on page xx refer to the Sun SPARC Enterprise M3000 M4000 M5000 M8000 M9000 Servers Glossary Structure and Contents of this Manual This manual is organized as follows Chapter 1 Provides an overview of the system monitor and control facility eXtended System Control Facility or XSCF Chapter 2 Explains how to set up XSCF Chapter 3 Describes how to connect consoles and terminals to t...

Page 19: ...rmation which can be viewed on the XSCF console using XSCF commands Appendix C Explains Management Information Base MIB which is supported by the XSCF SNMP agent function Appendix D Describes problems that can occur during use of the XSCF console or during operation of the system and provides solutions for them Appendix E Explains the license conditions that apply to using software functions that ...

Page 20: ... SPARC Enterprise M3000 Server Safety and Compliance Guide SPARC Enterprise M4000 M5000 Servers Safety and Compliance Guide SPARC Enterprise M8000 M9000 Servers Safety and Compliance Guide SPARC Enterprise M4000 Server Unpacking Guide SPARC Enterprise M5000 Server Unpacking Guide SPARC Enterprise M8000 M9000 Servers Unpacking Guide SPARC Enterprise M3000 Server Installation Guide SPARC Enterprise ...

Page 21: ...s support are provided on the Web http src opensolaris org source xref onnv onnv gate usr src lib fm libfmd_snmp mibs b Solaris OS related manuals http docs sun com 4 Provided on the firmware program CD for maintenance service i Firmware program file XSCF Control Package XCP file ii XSCF extension MIB definition file Sun SPARC Enterprise M4000 M5000 M8000 M9000 Servers Dynamic Reconfiguration DR U...

Page 22: ...vice Manual Sun SPARC Enterprise M8000 M9000 Servers Service Manual Installation Guide Sun SPARC Enterprise M3000 Server Installation Guide Sun SPARC Enterprise M3000 Server Installation Guide Sun SPARC Enterprise M8000 M9000 Servers Installation Guide Administration Guide Sun SPARC Enterprise M3000 M4000 M5000 M8000 M9000 Servers Administration Guide XSCF Reference Manual Sun SPARC Enterprise M30...

Page 23: ...nd Training Server class Model name Entry level SPARC Enterprise M3000 Midrange SPARC Enterprise M4000 SPARC Enterprise M5000 High end SPARC Enterprise M8000 SPARC Enterprise M9000 Sun Function URL Documentation http docs sun com Support http www sun com support Training http www sun com training ...

Page 24: ...the example of command impute in the frame The names of commands files and directories on screen computer output This font represents the example of command output in the frame XSCF adduser jsmith XSCF showuser p User name jsmith Privileges useradm auditadm AaBbCc123 Indicates names of manuals See the XSCF Reference Manual Indicates names of chapters sections items buttons or menus See Chapter 1 X...

Page 25: ... in A group of options for an optional keyword must be enclosed in and delimited by A group of options for a mandatory keyword must be enclosed in and delimited by The command syntax is shown in a box Example Conventions for Important Messages This manual uses the following conventions to show the important messages XSCF showuser l Caution IMPORTANT This indicates information that could help the u...

Page 26: ...ng products or other materials that are available on or through such sites or resources Sun will not be responsible or liable for any actual or alleged damage or loss caused by or in connection with the use of or reliance on any such content goods or services that are available on or through such sites or resources Sun Welcomes Your Comments Sun is interested in improving its documentation and wel...

Page 27: ... to achieve high system availability The XSCF firmware is a single centralized point for the management of hardware configuration control of hardware monitoring cooling system fan units domain status monitoring power on and power off of peripheral devices Note 2 and error monitoring The XSCF centrally controls and monitors the server The XSCF also has a partitioning function to configure and contr...

Page 28: ...nd the Standby XSCF monitor each other and if an error is detected they determine when a failover switching to Active or Standby should be performed External Interfaces The following connectors ports and LEDs act as the external interface of the XSCF Unit The user system administrator and field engineer FE can use these ports for server monitoring and XSCF firmware operations One Serial port that ...

Page 29: ...HECK LED Note 1 In this manual XSCF CLI functions are called XSCF Shell and XSCF BUI functions are called XSCF Web Rear Panel on the Entry Level Server FIGURE 1 1 is an outline drawing of the rear panel of the M3000 server The XSCF Unit of the M3000 server is not a removable unit but is fixed on the Motherboard unit The external interface of the XSCF Unit is exposed on a part of rear panel of the ...

Page 30: ...CI connector to the system the RCI port is used for interlocking with a power supply and error monitoring Note To use the RCI function the server or I O devices must have a RCI port Number Description Number Description 1 RCI port 7 ACT LED 2 USB port 8 LAN 1 port XSCF LAN 1 port 3 READY LED 9 LAN 0 port XSCF LAN 0 port 4 CHECK LED 10 UPC 1 port 5 Serial port 11 UPC 0 port 6 Link Speed LED ...

Page 31: ...can be used to identify the XSCF Unit even if there is no failure For details on the LED related commands of the XSCF Shell see Chapter 5 and the XSCF Reference Manual Note The Check LED turns on immediately after the server input power is turned on Serial Port The serial port RS 232C port uses an RJ 45 connector The serial port is used with the XSCF Shell to configure server settings and display ...

Page 32: ...ch of the XSCF LAN ports the ACT LED is a LAN LED that lights up in green When the communication state is Link up the ACT LED lights up When the communication state is Link down the ACT LED light is off The ACT LED light is off while data is being sent received though the associated LAN connection So the ACT LED looks as if it is blinking UPC Port There are two UPC ports These ports are a connecti...

Page 33: ...f the XSCF Unit front panel on the M8000 M9000 servers For connections between the model and an expansion cabinet an XSCF Unit as shown at the bottom of FIGURE 1 3 is mounted in the expansion cabinet The XSCF Unit of the M8000 M9000 servers is a removable unit In the M8000 M9000 servers for details on mounting the XSCF Unit see the SPARC Enterprise M8000 M9000 Servers Service Manual Number Descrip...

Page 34: ... as those of the M3000 server For descriptions of their functions see the explanation of FIGURE 1 1 Number Description Number Description 1 Link Speed LED 7 RCI port 2 ACT LED 8 ACTIVE LED 3 ETHERNET 0 port XSCF LAN 0 port 9 READY LED 4 ETHERNET 1 port XSCF LAN 1 port 10 CHECK LED 5 USB port 11 Connector that connects the XSCF Unit for base cabinet with the XSCF Unit for expansion cabinet 6 Serial...

Page 35: ...og immediately and analyzes it to locate the fault and determine the failure status by using the Fault Management Architecture FMA XSCF displays the status and if necessary degrades the faulty parts degrades the faulty domains or resets the system to prevent another problem from occurring XSCF thereby maintains high system reliability availability and serviceability RAS XSCF Shell and XSCF Web XSC...

Page 36: ...sing Secure Shell SSH or Secure Sockets Layer SSL and an audit function Any operation error or unauthorized attempt to access XSCF functionality is recorded in a log The system administrator can use this information for troubleshooting system errors and unauthorized login attempts Power Control for the Server System and Domains XSCF has power on and power off control of the server The user can pre...

Page 37: ...power is restored The system can be set up such that XSCF automatically turns on the power to the server then starts up the domains relieving the system administrator of extra work For details on operation settings for a power failure see Section 4 4 10 Shutdown Wait Time Administration on page 4 23 Support of Hot Swapping of Components XSCF supports maintenance work with the XSCF Shell during hot...

Page 38: ... XSB For details on domain configuration see the Overview Guide for your server and Chapter 2 Also for each term see Glossary Note In the M3000 server the domain configuration control function is not available The M3000 server consists of a single PSB Uni XSB equipped with one CPU and operates with one domain only Unlike the M4000 M5000 M8000 M9000 servers the user cannot configure a domain by log...

Page 39: ...Fault Information Collection Hardware Log Collection XSCF collects hardware fault information and saves it on the XSCF itself The XSCF hardware failure log makes it possible to identify the location of a failure The log also provides assistance in anticipating failures on the server and immediately reports precise information about failures to the user For details on error messages and their conte...

Page 40: ...rview Guide and the Service Manual for your server TABLE 1 1 Major Differences Between the Models Item Model M3000 server Entry level M4000 M5000 servers Midrange M8000 M9000 servers High end XSCF Unit Fixed on MBU Replaceable in units of MBU Replaceable Replaceable XSCF redundancy Not available Not available Available Number of domains 1 Max 2 M4000 Max 4 M5000 Max 16 M8000 Max 24 M9000 Number of...

Page 41: ...CF FIGURE 1 4 Connections to XSCF In the Midrange Servers Note In the systems with two XSCF Units the XSCF Unit is in a redundant configuration and there are physically twice as many XSCF LAN ports and serial ports Also in the entry level server there is only one domain SSH telnet https connection SSH telnet https connection Router Server XSCF LAN Ethernet connection Connection to the serial port ...

Page 42: ...net enables workstations and PCs to connect to the XSCF through the XSCF LAN port The following can be used with XSCF LAN Ethernet XSCF Shell via a SSH or telnet connection XSCF Web from a web browser running on the terminal Domain console access Mail reports SNMP notification For details on these XSCF functions see the following chapters Settings for each function Chapter 2 Shell terminal and con...

Page 43: ...stem administrator can control the server control domains and display the console using the XSCF Shell XSCF LAN 1 port For field engineer operation Field engineers can configure the server and perform maintenance tasks using the XSCF Shell For remote maintenance service operation TABLE 1 3 XSCF LAN Operation Examples 2 LAN Name Operation XSCF LAN 0 port For system administrator operation For remot...

Page 44: ...ctions and the thick lines represent network connections FIGURE 1 5 shows configurations with a single mounted XSCF Unit one where the LAN is not redundant and the other with a redundant LAN FIGURE 1 5 XSCF LAN Redundancy In Entry level and Midrange Servers In the configuration examples shown in FIGURE 1 6 the XSCF LANs are redundant and the XSCF Unit is in a redundant configuration In the configu...

Page 45: ...guration In High End Servers For details on LAN configurations and connections see Chapter 3 For details on specifying IP addresses see Chapter 2 Active XSCF Standby XSCF System Failure of a path c A subnet failed Active XSCF Standby XSCF System XSCF failed d XSCF failed Failover ...

Page 46: ...SCF For details about NTP server setting see Chapter 2 TABLE 1 5 outlines XSCF and domain time synchronization methods 1 3 3 The CD RW DVD RW Drive Unit and Tape Drive Unit In the M3000 server one domain monopolizes the DVD drive unit In the M4000 M5000 servers the domain that uses a minimum XSB number of number 0 of the MotherBoard Unit MBU 0 can use the CD RW DVD RW drive unit and tape drive uni...

Page 47: ...CF user interfaces 1 XSCF Shell Ethernet Connection A set of XSCF Shell commands you can use from a PC or a terminal connected to the XSCF over an XSCF LAN Ethernet connection using SSH or telnet Also you can switch to domain console 2 XSCF Shell Serial Connection A set of XSCF Shell commands you can use from a PC or terminal directly connected to the XSCF by a serial cable Also you can switch to ...

Page 48: ...for control of this access record see Section 1 4 1 User Accounts and User Privileges on page 1 23 For details on login see Chapter 5 For details on authentication and Web functions see Chapter 9 For details on user account registration and mail function settings see Chapter 2 TABLE 1 6 outlines XSCF Functions and Connection Ports TABLE 1 6 XSCF Functions and Connection Ports Functions Contents Se...

Page 49: ...ilable to that user This is referred to as the user privilege of the registered user account For example to set up a domain administrator the user privilege for the domain is specified Moreover you can provide system monitoring privileges for instance without system operation privileges You can also limit privileges to specific domains TABLE 1 7 lists user privilege names and outlines the user pri...

Page 50: ... Can operate all hardware mounted in a domain_n Can refer to the status of any hardware mounted in a domain_n Can operate all of a domain Can refer to the status of any part of a domain_n Can refer to the information of all system boards mounted platop Reference of the status of any part of the entire system Can refer to the status of any part of the entire server but cannot change it platadm Cont...

Page 51: ...unt Administration on page 2 31 auditadm Audit control Note Can monitor and control XSCF access Can delete an XSCF access monitoring method fieldeng Field engineer operations Allows field engineers to perform the maintenance tasks or change the server configuration none None When the local privilege for a user is set to none that user has no privileges even if the privileges for that user are defi...

Page 52: ...1 26 SPARC Enterprise Mx000 Servers XSCF User s Guide August 2009 ...

Page 53: ...ail Administration optional LDAP Administration optional Https Administration optional Log Archiving Administration optional Audit Administration optional SNMP Administration optional Remote Maintenance Service Setting optional see the following Note 1 Domain Configuration required see the following Note 2 System Board Configuration required see the following Note 3 Domain Mode Configuration optio...

Page 54: ...the system board information Note 4 In the M3000 server COD is not available After the XSCF is set up the settings are automatically saved in XSCF internally and in the operator panel Once you have configured the XSCF it requires no day to day management However you can save or restore the XSCF setup configuration information For details of saving or restoring XSCF configuration information see Se...

Page 55: ...ault user account default The user privileges are useradm platadm Default password The default password is not input directly on the keyboard Instead after the default user account is input the mode switch of the operator panel is operated as follows a If Locked change to Service Or if Service change to Locked b Press return Keep the status for more than 5 seconds c Change to Locked Or change to S...

Page 56: ...ileges see the Administration Guide When you add the user account use the showuser 8 command with l option to confirm that there is no illegal user account in the user account list Note In preparation for maintenance work please create an account for a field engineer FE with the privilege of fieldeng during the initial set up login default Change the panel mode switch to Service and press return O...

Page 57: ...ime However the telnet connection is not a secure connection protocol We recommend that when you enable SSH that you disable telnet 6 Confirm the XSCF host public key Before using SSH for XSCF LAN connection record the fingerprint Or copy the text data of the host public key and save the data to a specific directory of the client The following screen is an example Set and display the time zone Set...

Page 58: ...a DSA key ssh dss AAAAB3NzaC1kc3MAAACBAMMG1ewTyceFX7EnKuDIp1BVnuxf UTtALVinkfXLQbUn gn84G8xp9GPnWOpNqiWXxAL8wInQrpz9wFd7n4sZk74HALM gIhpjbpdXR76FpEvO MzCi6qYuv4yQ 0 uKCHmJEfzIOvQnDoofVElXYRKxTIyQY5 mtsf 44IoGzJbxAAA AFQCTNSxe0 5hbDziCOlgvch7FdUM3QAAAIBKGSbFr3XMYxubT7ViDHHIFgFpjEMw DREJD05g7XwlslgFX4Ff2nqItepyfnok CeDi1bv1Xs0JGAGsbcwpBeKe7YcSepM3 xe8vGXSIdVqGbfDvqbO9P1q1n58qEKTA2Cj5L9a 6usSYfKHOSDh...

Page 59: ...ecure connection protocol We recommend that you use SSH During login using SSH on XSCF Shell Ethernet connection you are prompted to confirm the authenticity of the fingerprint of the host public key The reply is yes if the fingerprint is the same as the memo in Step 6 If the reply is not the same please confirm that the IP address is correct and not duplicated There is a possibility that IP addre...

Page 60: ...ning No xauth data using fake authentication data for X11 forwarding Last login Fri Sep 1 10 19 37 2006 from client Display mail notification settings and configure and test mail notification showsmtp 8 setsmtp 8 showemailreport 8 setemailreport 8 See Section 2 2 10 Mail Administration on page 2 91 Display and set LDAP client information showldap 8 setldap 8 See Section 2 2 3 LDAP Administration o...

Page 61: ...ystem board has been configured by default and you cannot change the settings However you can refer to the system board information Display log archiving settings and configure log archiving showarchiving 8 setarchiving 8 See Section 2 2 8 Log Archiving Administration on page 2 74 Display audit settings and configure auditing showaudit 8 setaudit 8 See Section 2 2 7 Audit Administration on page 2 ...

Page 62: ...configuration User s Guide In the configuration policy settings a degradation range applicable to errors detected during initial hardware diagnosis can be specified 18 Configure the domain mode settings The automatic boot setting configures whether to automatically boot the Solaris OS or to stop in the OpenBoot PROM mode ok prompt It is the same operation as to set true or false in auto boot which...

Page 63: ...t are used For details on settings see the corresponding parts of Section 2 2 Specifying the XSCF Settings on page 2 14 Display and set the Locale showlocale 8 setlocale 8 See Section 2 2 14 Locale Administration on page 2 136 Display altitude settings and configure altitude showaltitude 8 setaltitude 8 See Section 2 2 15 Altitude Administration on page 2 137 Display DVD drive tape drive unit info...

Page 64: ...ileges Same as Step 3 in Section 2 1 1 Setup Summary by the XSCF Shell on page 2 3 4 Set the time Same as Step 4 in Section 2 1 1 Setup Summary by the XSCF Shell on page 2 3 5 Make the SSH telnet settings Same as Step 5 in Section 2 1 1 Setup Summary by the XSCF Shell on page 2 3 6 Confirm the XSCF host public key Same as Step 6 in Section 2 1 1 Setup Summary by the XSCF Shell on page 2 3 7 Instal...

Page 65: ...en the XSCF Administration window This screen image is an example and differs from the actual screen display The remaining setting items are the same as those applicable to setup using the XSCF Web Referring to the setup flow proceed to Step 9 and later steps in Section 2 1 1 Setup Summary by the XSCF Shell on page 2 3 For details on the commands used to make settings see the corresponding parts o...

Page 66: ...o set a function that is not supported on the XSCF Web use the XSCF Shell to make these settings For the support information see the Product Notes for your server To describe the XSCF settings each subsequent section is formatted as follows 1 Each section first uses tables to explain terms setting items functions and XSCF Shell commands 2 Each section then provides setting examples When you set up...

Page 67: ...ndby side XSCF LAN 1 Standby side ISN Standby side Takeover IP address If the XSCF Unit is redundant XSCF LAN 0s XSCF LAN 1s Domain SP Communication Protocol DSCP XSCF side One IP address is required Domain side One IP address is required for each domain therefore the IP addresses for the maximum number of domains are required ISN This network is between two XSCF Units active and standby ISN is us...

Page 68: ...nt the connection status of the other side is not displayed Enable disable network Enables or disables an XSCF network interface see TABLE 2 1 setnetwork setdscp When the XSCF Unit is a redundant model Defaults of IP address of ISN are the following XSCF 0 192 168 1 1 XSCF 1 192 168 1 2 No default setting has been specified for the other interfaces You can use a single LAN port for XSCF LAN For ne...

Page 69: ...t use a period in a host name sethostname No default setting has been specified Display route Displays the XSCF routing environment as follows Network interface see TABLE 2 1 Destination IP address Gateway netmask Flags The meanings of the Flags are as follows U route is up H target is a host G use gateway R reinstate route for dynamic routing C cache entry reject route showroute Add delete route ...

Page 70: ...DSCP on both the XSCF and domain sides Caution IMPORTANT If the XSCF Unit is redundant issue the commands to setup all XSCF on only the Active XSCF Unit The command need not be executed on both Active and Standby XSCF Units The XSCF setting cannot be performed on the standby side XSCF network interface configuration The XSCF network interface includes the following LAN XSCF LAN for users to access...

Page 71: ... for XSCF Network Configuration In the High End Servers 7 8 Addresses of Inter SCF Network ISN Inside LAN Ethernet 1 6 Addresses of XSCF LAN 9 10 10 X Addresses of DSCP links 1 2 3 4 5 6 7 8 XSCFU 0 XSCFU 1 0 0 1 1 Server DomainID X DomainID 0 DomainID 1 9 9 10 11 10 X ...

Page 72: ... IP addresses XSCF LAN 0 of XSCFU 0 See 1 in FIGURE 2 1 XSCF LAN 1 of XSCFU 0 See 4 in FIGURE 2 1 In the M8000 M9000 servers subsequently to the XSCFU 0 side specify the IP address of XSCF LAN of the XSCFU 1 side see 2 and 5 in FIGURE 2 1 See shownetwork 8 setnetwork 8 Use the same subnet address to specify the LAN ports which share the same number in each XSCF unit so that you can connect to both...

Page 73: ...ssary to specify the IP address The ISN address has been set up with the default value see TABLE 2 2 If the IP address of XSCF LAN conflicts with the default subnet address of ISN you must specify the IP address of ISN see 7 and 8 in FIGURE 2 1 Also both ISN addresses must be in the same network subnet Users cannot access this network See shownetwork 8 setnetwork 8 4 Specify the DSCP address After...

Page 74: ...etwork settings See applynetwork 8 rebootxscf 8 Note An XSCF reset or failover might prevent any of the setting commands operation from completing If a reset or failover occurs during the setting operation log in to the active XSCF to determine if the operation succeeded If not try it again Enabling or Disabling the XSCF Network and Specifying an IP Address and Netmask for the Network and DSCP Com...

Page 75: ...s 20241827 19 3 MiB TX bytes 2089769 1 9 MiB Base address 0xe000 Example 3 Display the ISN information on network interfaces of XSCFU 0 XSCF shownetwork xscf 0 if xscf 0 if Link encap Ethernet HWaddr 00 0A 48 09 C9 1E inet addr 192 168 10 128 Bcast 192 168 10 255 Mask 255 255 255 0 UP BROADCAST RUNNING MULTICAST MTU 1500 Metric 1 RX packets 54424 errors 0 dropped 0 overruns 0 frame 0 TX packets 14...

Page 76: ...ion Address XSCF 192 168 244 1 Domain 00 192 168 244 2 Domain 01 192 168 244 3 Domain 02 192 168 244 4 Domain 03 192 168 244 5 Example 1 Specify IP address 192 168 1 10 and netmask 255 255 255 0 for XSCF LAN 0 in the XSCFU 0 to enable it XSCF setnetwork xscf 0 lan 0 m 255 255 255 0 192 168 1 10 Example 2 Specify IP address 192 168 12 10 for the ISN in the XSCFU 0 to enable it XSCF setnetwork xscf ...

Page 77: ...eration the IP addresses used by the XSCF and each domain specific DSCP link are automatically selected from within the range of addresses indicated by the network address If you set a netmask using the m option this netmask value shows the mask value in the XSCF network A netmask value when you display the DSCP network on the domain is not the netmask value in the XSCF network The netmask value f...

Page 78: ...n 1 Use the showhostname 8 command to display host names 2 Use the sethostname 8 command to specify a host name XSCF showhostname a xscf 0 scf hostname0 company com xscf 1 scf hostname1 company com Example 1 Specify the host name scf0 hostname for XSCFU 0 XSCF sethostname xscf 0 scf0 hostname Example 2 Specify the domain name com for XSCFU 0 XSCF sethostname d company com ...

Page 79: ...environment XSCF Unit 0 XSCF Unit 1 xscf 0 lan 0 192 168 1 10 xscf 1 lan 0 192 168 1 20 XSCF LAN 0 XSCF LAN 0 XSCF Unit 0 XSCF Unit 1 xscf 0 lan 1 10 12 108 10 xscf 1 lan 1 10 12 108 20 XSCF LAN 1 XSCF LAN 1 Destination Gateway Netmask Interface 192 168 1 0 255 255 255 0 xscf 0 lan 0 default 192 168 1 1 0 0 0 0 xscf 0 lan 0 192 168 1 0 255 255 255 0 xscf 1 lan 0 default 192 168 1 1 0 0 0 0 xscf 1 ...

Page 80: ...0 Example 2 Add routing with the default network for Destination and Gateway 10 12 108 1 to XSCF LAN 1 in the XSCFU 0 XSCF setroute c add n 0 0 0 0 g 10 12 108 1 xscf 0 lan 1 Example 3 Delete routing with destination 192 168 1 0 and netmask 255 255 255 0 to XSCF LAN 0 in the XSCFU 0 XSCF setroute c del n 192 168 1 0 m 255 255 255 0 xscf 0 lan 0 Example 1 Confirm that three name servers are added X...

Page 81: ...SCF and to complete the settings At this time the window session is disconnected so please reconnect to the XSCF by using the new network interface and log in again 4 Display the Network Configuration by using the shownetwork 8 showhostname 8 showroute 8 and shownameserver 8 commands again and check the new network information XSCF applynetwork The following network settings will be applied xscf 0...

Page 82: ...Name scf0 hostname company com Address 192 168 10 10 XSCF shownetwork i Active Internet connections without servers Proto Recv Q Send Q Local Address Foreign Address State tcp 0 0 xx xx xx xx telnet xxxx 1617 ESTABLISHE D Example Send packet to the host name scf0 hostname three times XSCF ping c 3 scf0 hostname PING scf0 hostname XX XX XX XX 56 data bytes 64 bytes from XX XX XX XX icmp_seq 0 ttl 6...

Page 83: ...com traceroute to server example com XX XX XX XX 30 hops max 40 byte packets 1 XX XX XX 1 XX XX XX 1 1 792 ms 1 673 ms 1 549 ms 2 XX XX XX 2 XX XX XX 2 2 235 ms 2 249 ms 2 367 ms 3 XX XX XX 3 XX XX XX 3 2 199 ms 2 228 ms 2 361 ms 4 XX XX XX 4 XX XX XX 4 2 516 ms 2 229 ms 2 357 ms 5 XX XX XX 5 XX XX XX 5 2 546 ms 2 347 ms 2 272 ms 6 server example com XX XX XX XX 2 172 ms 2 313 ms 2 36 ms TABLE 2 3...

Page 84: ...ays or specific date for the account validity period Or specify no expiration Specify the following for the password Note Maximum number of days in the password validity period up to 999999 days Minimum number of days in the password validity period 0 days Password expiration warning date seven days in advance Number of days in which the account remains unlocked after expiration of the password 0 ...

Page 85: ... Difok Minimum number of password characters Minlen Minimum number of digits contained in a password Dcredit Minimum number of uppercase letters contained in a password Ucredit Minimum number of lowercase letters contained in a password Lcredit Minimum number of symbols contained in a password Ocredit Maximum numbers of passwords in the password history Remember setpassword pol icy Once an account...

Page 86: ...r can attempt to login and fail an unlimited number of times If a user needs to access their locked account before the lockout time is complete they must get an administrator to disable the account lockout to allow them to login and then re enable the lockout by setting a lockout time For more information see the setloginlockout 8 and showloginlockout 8 man pages Note The ability to specify and vi...

Page 87: ...lready be in use either locally or in LDAP Note You cannot use the following user account names as they are reserved for system use root bin daemon adm operator nobody sshd rpc rpcuser ldap apache ntp admin or default XSCF showuser l User Name user001 UID 101 Status Enabled Minimum 0 Maximum 99999 Warning 7 Inactive 1 Last Change Jul 11 2006 Password Expires Never Password Inactive Never Account E...

Page 88: ...d xxxxxx BAD PASSWORD is too similar to the old one New XSCF password xxxxxx BAD PASSWORD it is too simplistic systematic New XSCF password xxx BAD PASSWORD it s WAY too short New XSCF password xxxxxx Retype new XSCF password xxxxxx XSCF Example 2 Specify 60 days for the validity period and also specify that a validity expiration warning be issued 15 days in advance XSCF password M 60 w 15 jsmith ...

Page 89: ...nt Specifying a Password Policy Command operation 1 Use the showpasswordpolicy 8 command to display password policy settings XSCF showuser p User Name jsmith Privileges useradm auditadm XSCF showuser a Example Enable a user account XSCF enableuser jsmith XSCF showpasswordpolicy Mindays 0 Maxdays 90 Warn 7 Inactive 1 Expiry 0 Retry 5 Difok 1 Minlen 8 Dcredit 0 Ucredit 0 Lcredit 0 Ocredit 0 Remember...

Page 90: ...one login successfully by a user accout at the next time the lockout function will be disabled Example Specify 3 for the retry count an eight character password containing at least two digits 60 days for the expiration period and 15 days for the advance notice of expiration XSCF setpasswordpolicy y 3 m 8 d 2 u 0 l 0 o 0 M 60 w 15 XSCF showpasswordpolicy Mindays 0 Maxdays 60 Warn 15 Inactive 1 Expi...

Page 91: ... TABLE 2 5 LDAP Administration Terms Term Description LDAP Abbreviation for Lightweight Directory Access Protocol LDAP is a protocol used to access directory databases in TCP IP networks baseDN Abbreviation for base Distinguished name Under LDAP directory information is in a hierarchical structure To perform a search specify the subtree to be searched in the hierarchical structure To do so specify...

Page 92: ...ord Sets a password used to bind an LDAP server setldap A password can consist of 8 to 16 characters Search base Sets an LDAP tree search base baseDN setldap If this item is omitted the command searches the tree beginning from the top Search base maximum length is 128 characters Certificate chain Imports the certificate chain of an LDAP server Import a certificate chain as follows Import a secure ...

Page 93: ...ing an LDAP Server Port Number Bind ID Bind Password Search Base BaseDN and Search Time Timeout Period Command operation 1 Use the showldap 8 command to display LDAP client settings XSCF showlookup Privileges lookup Local only Authentication lookup Local and LDAP Example Enable the use of LDAP server for both user authentication and user privilege XSCF setlookup a ldap XSCF setlookup p ldap XSCF s...

Page 94: ...ssword XSCF setldap p Password xxxxxxxx Example 3 Specify the primary and secondary LDAP servers and port numbers XSCF setldap s ldap onibamboo 389 ldaps company2 com 636 Example 4 Specify the timeout period for LDAP search XSCF setldap T 60 XSCF showldap Bind Name cn Directory Manager Base Distinguished Name ou People dc users dc apl dc com o isp LDAP Search Timeout 60 Bind Password Set LDAP Serv...

Page 95: ... 2 4 Time Administration Time administration is used to specify the time and the NTP settings for this system The server all domains uses the XSCF Unit clock as the reference time Note The customer should decide the NTP server operating mode For details on NTP see the NTP manuals XSCF showldap Bind Name cn Directory Manager Base Distinguished Name ou People dc users dc apl dc com o isp LDAP Search...

Page 96: ... XSCF Unit being the NTP server In this case the XSCF Unit must be set up as an NTP server In this case the Solaris OS domain will obtain its initial time of day from the XSCF NTP server which will then be used to keep the Solaris domain and the XSCF unit in sync A Solaris domain can be set up as an NTP client from an external NTP server In this case the initial time for Solaris OS will be obtaine...

Page 97: ...niversal Time UTC showdate Date and time Sets a date and time to a local time or UTC The specification format is as follows yyyy mm dd HH MM SS mmddHHMMyyyy SS yyyy Year mm Month dd Day of the month HH Hour 24 hour system MM Minute SS Second setdate The settings can be enabled when all of the domains are powered off XSCF reset is done after the settings Display NTP server settings Displays NTP ser...

Page 98: ...ue Specifies a stratum service for XSCF You can specify an integer from 1 to 15 setntp The default stratum value is 5 Reset time subtraction Resets the time subtraction between the XSCF and each domain which is stored in XSCF As a result the time of each domain will be set to the same time as the XSCF after startup resetdateoffset The settings can be enabled when all of the domains are powered off...

Page 99: ...e is JST the offset from GMT is 9 hours the name of Daylight Saving Time is JDT Daylight Saving Time is 1 hour ahead and the time period is from the last Sunday of March 2 00 JST to the last Sunday of October 2 00 JDT XSCF showtimezone c dst m custom JST 9JDT M3 5 0 M10 5 0 Example 1 Sets the Daylight Saving Time information as follows abbreviation of time zone is JST the offset from GMT is 9 hour...

Page 100: ...the replacement XSCF unit execute the showdate 8 command to check the time and reset it using the setdate 8 command Configuring an NTP Server Command operation 1 Use the showntp 8 command to display the NTP server for the XSCF network Example 1 Display the current time with local time XSCF showdate Mon Jan 23 14 53 00 JST 2006 Example 2 Display the current time with UTC XSCF showdate u Mon Jan 23 ...

Page 101: ... 168 0 27 192 168 1 56 2 u 27 64 377 12 929 2 756 1 993 192 168 0 57 192 168 1 86 2 u 32 64 377 13 030 2 184 94 421 127 127 1 0 LOCAL 0 5 l 44 64 377 0 000 0 000 0 008 Example 1 Add the three IP addresses 192 168 1 2 130 34 11 111 and 130 34 11 117 as NTP servers for XSCF XSCF setntp c add 192 168 1 2 130 34 11 111 130 34 11 117 Please reset the XSCF by rebootxscf to apply the ntp settings Example...

Page 102: ...prefer by setntp 8 command is supported only on M3000 M4000 M5000 M8000 M9000 servers that run certain versions of XCP firmware beginning with XCP 1082 Changing Stratum Value for XSCF Command operation 1 Use the showntp 8 command to display the stratum value for the XSCF network XSCF showntp m prefer on Example 1 Specify prefer for NTP server XSCF setntp m prefer on Please reset the XSCF by reboot...

Page 103: ...CF Time Command operation 1 Use the showdate 8 command to display the XSCF time 2 Use the showdateoffset 8 command to confirm the difference the XSCF time with each domain time 3 Use the poweroff 8 command to turn off power to all domains Example Set 7 as stratum value for XSCF network XSCF setntp c stratum i 7 Please reset the XSCF by rebootxscf to apply the ntp settings XSCF showntp s stratum 7 ...

Page 104: ...02 03 Continue y n y 00 Powering off 01 Powering off 02 Powering off 03 Powering off Note This command only issues the instruction to power off The result of the instruction can be checked by the showlogs power XSCF XSCF resetdateoffset XSCF XSCF poweron a DomainIDs to power on 00 01 02 03 Continue y n y 00 Powering on 01 Powering on 02 Powering on 03 Powering on Note This command only issues the ...

Page 105: ...telnet setting including the SSH access control from domain the SSH host key and the automatic timeout period after login Also install an SSH user public key to XSCF TABLE 2 8 lists terms used in SSH telnet Administration SSH Client In this system you can use the following SSH clients Solaris Secure Shell OpenSSH PuTTY UTF 8 TeraTerm Pro with TTSSH2 Please refer to each software manual for command...

Page 106: ... when you don t want to login to XSCF using SSH from domain via the DSCP Host key Generates an SSH2 host key RSA key and DSA key setssh When the SSH is enabled first the host key is generated Display telnet setting information Displays telnet settings The displayed telnet settings include information indicating whether telnet is enabled or disabled showtelnet The telnet port number is 23 Enable di...

Page 107: ...5000 M8000 M9000 servers that run certain versions of XCP firmware beginning with XCP 1081 Enabling or Disabling SSH Telnet Command operation 1 Use the showssh 8 command to display SSH settings or use the showtelnet 8 command to display telnet settings 2 Use the setssh 8 command to make the SSH settings or use the settelnet 8 command to make the telnet settings Example 1 Display SSH settings XSCF ...

Page 108: ...access to XSCF from domain via DSCP 3 To permit and refuse the SSH access the XSCF reset is required Use the rebootxscf 8 command to reset the XSCF After the XSCF reset the XSCF session is disconnected Please log in again to the XSCF XSCF rebootxscf The XSCF will be reset Continue y n y XSCF showssh SSH status enabled SSH DSCP accept RSA key DSA key Example 1 Permit SSH access XSCF setssh m dscp a...

Page 109: ...3NzaC1kc3MAAACBAJSy4GxD7Tk4fxFvyW1D0NUDqZQPY3PuY2IG7QC4BQ1ke wDnblB8 JEqI 8pnfbWzmOWU37KHL19OEYNAv6v WZT6RE lU5Pyb8F16uq96L8QDMswFlICMZgrn ilJNStr6r8KDJfwOQMmK0eeDFj2mL40NOv aLQ83 rRwW6Ny yF1Rgv6PUpUqRLw4VeRb uOfmPRpe6 kb4z lO htpWI9bay6CK0nrFRok z54ez7BrDFBQVuNZx9PyEFezJG9ziEYVUag 23LIAiLxx BmW9pqa WxC21Ja4RQVN3009kmVwAAAIAON1LR 9Jdd7yyG18 Ue7eBBJHrCA0pkSzvfzzFFj5XUzQBdabh5p5Rwz 1vriawFIZI9j2uhM ...

Page 110: ...lay the user public key 2 Generate the user private key and the user public key for a created XSCF user account with your client software See the manual for your client software for procedures to create the user public key and to set the passphrase We recommend that the passphrase be set 3 Use the setssh 8 command with option for installing user public key Then copy and paste the user public key w...

Page 111: ...y default You can use the XSCF Web console securely XSCF setssh c addpubkey u efgh Please input a public key ssh rsa AAAAB3NzaC1yc2EAAAABIwAAAIEAzFh95SohrDgpnN7zFCJCVNy jaZ PTjNDxcid QGbihYDCBttI4151Y0Sv85FJwDpSNHNKoVLMYLjtBmUMPbGgGVB61qs kSv FeV44hefNCZMiXGItIIpKP0nBK4XJpCFoFbPXNUHDw1rTD9icD5U wRFGSRRx FI Ub5oLRxN8 A8 efgh example com Press Ctrl and D keys XSCF Example The user key is set by numb...

Page 112: ...e Step b CA and Procedures The following are the settings procedures for each type of CA a Using the External CA or CA in Intranet 1 Create a web server private key for the XSCF 2 Make the Certificate Signing Request CSR by the XSCF 3 Request the issue of the certificate for the CSR to the CA 4 Import a web server certificate signed by CA to the XSCF 5 Enable https For Step 1 Step 5 above specify ...

Page 113: ...https setting Displays the https settings Information on whether https is enabled or disabled and key states are displayed showhttps Enabling disabling Enables or disables https sethttps External authentication When the external CA and CA in Intranet are used set the following Create a web server private key of XSCF Make the Certificate Signing Request CSR by XSCF and Request the issue of the cert...

Page 114: ...Https Command operation 1 Use the showhttp 8 or the showhttps 8 command to display https settings Self authentication Automatically the self CA is constructed in XSCF and the certificate is installed The following are set A self CA is constructed A private key is made A web server certificate self signed is made sethttps Specify the same DN as the External authentication at making a web server cer...

Page 115: ...AYTAmpqMQ4wDAYDVQQIEwVzdGF0ZTERMA8G A1UEBxMIbG9jYWxpdHkxFTATBgNVBAoTDG9yZ2FuaXphdGlvbjEPMA0GA1UECxMG b3JnYW5pMQ8wDQYDVQQDEwZjb21tb24xFjAUBgkqhkiG9w0BCQEWB2VlLm1haWww gZ8wDQYJKoZIhvcNAQEBBQADgY0AMIGJAoGBAJ5D57X k42LcipTWBWzv2GrxaVM 5GEyx3bdBW8 7WZhnd3uiZ9 ANlvRAuw YYy7I pAD NQJesBcBjuyj9x IiJl9F MrI5fR8pOIywVOdbMPCar09rrU45bVeZhTyi uQOdWLoX Dhq0fm2BpYuh9WukT5 pTEg 2dABg8UdHmNAgMBAAGgADANBgkqhkiG9w0...

Page 116: ...ish to update y n y Enter passphrase xxxxxxxx Verifying Enter passphrase xxxxxxxx Example Specify the DN JP Kanagawa Kawasaki Example Development scf host abc example com XSCF sethttps c gencsr JP Kanagawa Kawasaki Example Development scf_host abc example com XSCF showhttps HTTPS status disabled Server key installed in Jul 11 06 33 25 UTC 2006 CA key installed in Jul 11 06 33 21 UTC 2006 CA cert i...

Page 117: ...nnected Please log in again to the XSCF 8 Access the XSCF Web specifying the https form client In the window please check that the security warning dialog is not displayed or confirm whether the certificate is correct XSCF sethttps c enable Continue y n y Please reset the XSCF by rebootxscf to apply the https settings XSCF rebootxscf The XSCF will be reset Continue y n y ...

Page 118: ... Example Development scf host abc example com XSCF sethttps c selfsign JP Kanagawa Kawasaki Example Development scf host abc example com CA key and CA cert already exist Do you still wish to update y n y Enter passphrase xxxxxxxx Verifying Enter passphrase xxxxxxxx XSCF showhttps HTTPS status disabled Server key installed in Jul 11 06 33 25 UTC 2006 CA key installed in Jul 11 06 33 21 UTC 2006 CA ...

Page 119: ...es are linked and become an audit trail see TABLE 2 12 4 Audit records are thus kept as an audit trail so that the user can refer to the Audit trail see viewaudit 8 TABLE 2 12 lists terms used in audit administration TABLE 2 12 Audit Administration Terms Term Description Audit Function for auditing system access It is also called auditing Audit event Security related system action that can be audi...

Page 120: ...on Enable disable auditing Note 1 Request the log archive Note 1 Data deletion Also specify the audit policy as follows Enable or disable auditing for the specified user only or for global policy Note 2 Enable or disable an audit class Enable of disable an audit event Enable or disable auditing for all users global policy Specify the destination address for the mail sent when usage of the local au...

Page 121: ... in units of audit records Records after the specified time Records before the specified time Records the specified range of time Records on a specific date 24 hours of records on that date in local time Audit class Audit event Audit session ID User privilege Return value success failure or none User name or UID Also to display an audit trail specify the following formats Line by line printing Del...

Page 122: ...dvance with audit policy set to disable and clear the audit trail space Then continue with XSCF operation If the audit trail space becomes full when suspend is specified and you haven t previously set up in advance a user account with audit policy disable you will not be able to clear the audit trail space or perform any other functions In this case you must log in as default user from the console...

Page 123: ...used 13713 bytes Audit space free 4180591 bytes Records dropped 0 Policy on full trail count User global policy enabled Mail Thresholds 80 100 User policy Events AEV_AUDIT_START enabled AEV_AUDIT_STOP enabled Example 1 Disable writing to the audit trail and transfer the log file XSCF setaudit disable Example 2 Enable writing to the audit trail XSCF setaudit enable Turns on writing of the audit rec...

Page 124: ...Policy on full trail suspend User global policy enabled Mail Thresholds 80 100 User policy Events AEV_AUDIT_START enabled AEV_AUDIT_STOP enabled Example 1 Specify three users enable the AUDIT and LOGIN groups for the Audit class enable SSH login for the Audit event and disable the global policy for the users XSCF setaudit a yyyyy uuuuu nnnnn enabe c ACS_AUDIT ACS_LOGIN enable e AEV_LOGIN_SSH enabl...

Page 125: ...cy Events AEV_AUDIT_START enabled AEV_AUDIT_STOP enabled AEV_LOGIN_BUI enabled AEV_LOGIN_CONSOLE enabled AEV_LOGIN_SSH enabled AEV_LOGIN_TELNET enabled XSCF viewaudit file 1 2006 06 29 13 42 59 128 09 00 20060629044259 0000000000 localhost header 20 1 audit start localhost localdomain 2006 06 29 13 42 59 131 09 00 header 31 1 login console localhost localdomain 2006 06 29 13 45 03 755 09 00subject...

Page 126: ...on Terms Term Description Log archiving Function that saves the log information stored on an XSCF to another host Archive host Host to which logs are saved Archive directory Directory in the archive host to which logs are saved TABLE 2 15 Log Archiving Administration Item Description Shell Command Remarks Display log archiving information Displays the following log archiving information Log archiv...

Page 127: ...g a key by downloading it from the archive host Using text to specify a public key for the archive host setarchiving To specify a public key use RSA An MD5 key is displayed for a fingerprint If a public key is set but not used for this authentication the public key is deleted Capacity Sets limits for the space consumed by archives There are two limits one for each category of logs Audit log Other ...

Page 128: ... set the log archiving target 3 Use the setarchiving 8 command to make an enable or disable selection for the log archiving function Example No values have been set for the settings XSCF showarchiving Archiving Configuration Archiving state Disabled Archive host Not configured Archive directory Not configured User name for ssh login Not configured Example Specify a user name host name directory an...

Page 129: ...ar logs xx User name for ssh login foo XSCF showarchiving v Archiving Configuration Archiving state Enabled Archive host example com Archive directory var logs this xscf xx User name for ssh login foo Archive host public key Server authentication disabled Archive host fingerprint Server authentication disabled Connection to Archive Host Latest communication 2005 09 22 22 12 34 Example Specifying t...

Page 130: ...me for ssh login foo Archive host public key Server authentication disabled Archive host fingerprint Server authentication disabled Connection to Archive Host Latest communication 2005 09 22 22 12 34 Connection status OK AUDIT LOGS OTHER LOGS Archive space limit 10000 MB 5000 MB Archive space used 3010 MB 2252 MB Total archiving failures 171 2 Unresolved failures 4 0 Example Specifying capacity li...

Page 131: ... on the archive host Command usr bin du sk foo bar error log Output from command usr bin du Command not found Example 2 No error occurred XSCF showarchiving e No archiving errors have occurred TABLE 2 16 SNMP Administration Terms Term Description SNMP Abbreviation for Simple Network Management Protocol This query command and response protocol is used to test and change configuration parameters of ...

Page 132: ...mp System management information Makes the following settings as management information that is common to the v1 v2c v3 agent protocol Installation location of the agent system Mail address of the administrator Description of the agent system Port number of the agent listening port number setsnmp The default agent port number is 161 The default values of other port numbers are to be defined You ca...

Page 133: ...the trap destination is 162 SNMPv1 SNMPv2c Trap Makes the following SNMPv1 and SNMPv2c trap settings Trap type setting Community string Port number of the trap destination Host name of the trap destination setsnmp One of the following three trap types is selected v1 v2 inform Note 2 The default port number of the trap destination is 162 Disable SNMPv3 trap Disables trap sending to the target host ...

Page 134: ...entication encryption passwords for users Copying a user Deleting a user setsnmpusm SNMPv3 settings Specify the password over 8 characters Display VACM management information Displays VACM management information for the SNMP agent showsnmpvacm VACM management information Sets VACM management information for the following for the SNMP agent Making access control group and access control view MIB vi...

Page 135: ...stem Location Unknown System Contact Unknown System Description Unknown Example Specifying the installation location of the system system description and mail address of the administrator XSCF setsnmp l MainTower21F c foo example com d DataBaseServer Example 1 Enabling the agent XSCF setsnmp enable Example 2 Disabling the agent XSCF setsnmp disable XSCF showsnmp Agent Status Enabled Agent port 161...

Page 136: ...161 System Location MainTower21F System Contact foo example com System Description DataBaseServer Trap Hosts Hostname Port Type Community String Username Auth Protocol host1 162 v1 public n a n a host2 1162 v2 public n a n a SNMP V1 V2c Status Enabled Community String public Example Specify a user name an engine ID an authentication algorithm authentication and encryption passwords and the host na...

Page 137: ...rm that the trap destination host has been disabled XSCF showsnmp Agent Status Enabled Agent Port 161 System Location MainTower21F System Contact musha jp fujitsu com System Description DataBaseServer Trap Hosts Hostname Port Type Community String Username Auth Protocol host3 162 v3 n a yyyyy SHA host1 62 v1 public n a n a host2 1162 v2 public n a n a SNMP V1 V2c Status Enabled Community String pu...

Page 138: ...NMPv1 and SNMPv2c Trap Command operation 1 Use the showsnmp 8 command to display the SNMP settings 2 Use the setsnmp 8 command to set the SNMPv1 or SNMPv2c trap 3 Confirm the SNMPv1 and SNMPv2c trap settings XSCF showsnmp Example 1 Enable SNMPv1 and SNMPv2c XSCF setsnmp enablev1v2c public Example 2 Disable SNMPv1 and SNMPv2c XSCF setsnmp disablev1v2c XSCF setsnmp enable XSCF showsnmp XSCF showsnmp...

Page 139: ...itializing the SNMP Setting to the Default Value Command operation 1 Use the showsnmp 8 command to display SNMP settings 2 Use the setsnmp 8 command to change the SNMP settings back to the default At this time the SNMP agent becomes disabled 3 Use the showsnmp 8 command to confirm that the SNMP setting returned to the default 4 Set the SNMP again and enable the SNMP agent XSCF showsnmp Example Dis...

Page 140: ...rmation for Sun MC again execute the setsunmc 8 command with the s option For details about the command see the XSCF Reference Manual or the man page Specifying a User Authentication Algorithm Creating or Changing an Authentication Encryption Password Copy a User or Delete a User All of Which is USM Management Information Command operation 1 Use the showsnmpusm 8 command to display USM management ...

Page 141: ...mation Command operation 1 Use the showsnmpvacm 8 command to display VACM management information Example 1 Create an authentication algorithm authentication password and encryption password for a new user XSCF setsnmpusm create a SHA yyyyy Authentication Password xxxxxxxx Encryption Password xxxxxxxx Example 2 Change only an authentication password If no password is entered entry of a password is ...

Page 142: ...mple 2 Delete a user from an access control group xxxxx XSCF setsnmpvacm deletegroup u yyyyy xxxxx Example 3 Create an MIB access control view without conditions XSCF setsnmpvacm createview s 1 all_view Example 4 Create an MIB access control view by using an OID mask XSCF setsnmpvacm createview s 1 3 6 1 2 1 m fe excl_view Example 5 Delete an MIB access control view XSCF setsnmpvacm deleteview s 1...

Page 143: ...erver Sets the host name or IP address of the SMTP server setsmtp No default value has been set Only one SMTP server can be specified If you specify a host name for an SMTP server the server name must be resolvable by DNS server Authentication server If you enable the Authentication at the same time select the POP authentication or the SMTP authentication When you enable the authentication specify...

Page 144: ...on showemailreport Enable Disable Enables or disables the mail report function setemailreport The default setting is Disable Recipient address Sets the recipient address for a mail message to be sent to the system administrator setemailreport Multiple addresses can be specified to up to 255 characters by using a comma as the delimiter Include one mark per address Ex name1 domain1 name2 domain2 nam...

Page 145: ...ation Example 1 Specifying a host name port number reply address and SMTP authentication XSCF setsmtp s mailserver 192 1 4 5 s port 25 s replyaddress yyyy example com s auth smtp auth s usr usr001 s password xxxxxxxx Example 2 Specifying a host name port number reply address and POP authentication XSCF setsmtp Mail Server 192 1 4 2 192 1 4 5 Port 25 Authentication Mechanism none pop POP Server 192...

Page 146: ...t For details on whether to divide a PSB into 1 Not divided or 4 units see Section 2 2 12 System Board Configuration on page 2 122 In the M3000 server you cannot perform the operations such as setting the domain configuration or adding or deleting the system board Domain has been configured by default and cannot be changed However you can set the configuration policy and display the domain informa...

Page 147: ...igned to an XSB Each domain has its own set of LSB assignments LSB numbers are used to control how resources such as kernel memory get allocated within domains System board The hardware resources of a PSB or an XSB A system board is used to describe the hardware resources for operations such as domain construction and use In this manual the system board refers to the XSB Uni XSB One of the divisio...

Page 148: ...em board XSB configuration that prevents a specific domain from logically using memory on a system board Floating board Note 2 A floating board is designated to be moved easily to another domain In operation with a kernel and important I O on the system board in a domain and to facilitate the DR operation of the system board it is necessary to define the system board so that can be deleted or move...

Page 149: ...lt is loss of access to half the installed memory on the CMU You can add DIMMs to a CMU but you cannot reconfigure memory resident on a CMU to the valid XSBs to prevent that memory from becoming unavailable The server generates a configuration error message for those XSBs that do not have a CPUM and memory For details of components such as CPU Memory Board unit I O unit and Motherboard unit see th...

Page 150: ...mation on the DCL can be set for one domain These items can be displayed and specified by showdcl 8 and setdcl 8 For details on DCL terms see TABLE 2 19 High end systems The system containing up to 32 CPU chips M9000 0 23 32 8 x 4 Uni XSBs only Enabled The system containing up to 16 CPU chips M8000 0 15 16 4 x 4 High end system with expansion cabinet The system containing up to 64 CPU chips M9000 ...

Page 151: ...Floating Board True Selects a Floating Board False Does not select a Floating Board default Configuration policy FRU Removal in units of Field Replaceable Unit FRU components Default XSB Removal in XSB units System Hardware is degraded in units of domains or the relevant domain is stopped without degradation In the M3000 server you can set the configuration policy only Domain status Display domain...

Page 152: ...ted or assigned XSB not yet configured available XSB in the system board pool state assigned XSB assigned to the domain power Pwr Indicates the XSB power status n XSB power off state y XSB power on state connectivity Conn Indicates the state of a hardware connection to a domain n System board pool state The XSB has been deleted from the domain by hardware This includes a domain shutdown y XSB conn...

Page 153: ...lists the hardware resources that configure a domain XSCF manages the hardware configuration of each domain in the server The CPU and the memory DIMM are installed in a CMU or MBU The domain uses CPU memory and I O device logically divided as one system board fault_code Fault Indicates that state of a degradation in the XSB Normal Normal Degraded A component is to be removed Faulted Error found in...

Page 154: ...main fully uses the resources in the PSB Note FIGURE 2 3 is an XSCF domain correlation diagram XSCF enables domain configuration control and DR function control by using DSCP interface and SCF interface for XSCF domain modules control program communication CMU MBU IOU PSB I O device I O device CPU CPU Memory Memory CPU Memory CPU Memory I O device I O device DomainID X LSB XSB System Domain Domain...

Page 155: ...dware configuration diagrams in the midrange servers The number of hardware resources depends on whether the PSB type is a Uni XSB or Quad XSB FIGURE 2 4 and FIGURE 2 5 are examples when two CMUs are mounted on the MBU Domain modules XSCF modules XSCF Domain network DSCP Interface XSCF Domain Command SCF Interface ...

Page 156: ...r s Guide August 2009 FIGURE 2 4 XSB Configuration Diagram Uni XSB In the Midrange Servers When PSB n is Uni XSB type CMU IOU XSB 00 0 XSB 01 0 MBU Memory Memory Memory Memory Memory Memory Memory Memory I O device I O device I O device I O device ...

Page 157: ...er of hardware resources depends on whether the PSB type is a Uni XSB or Quad XSB FIGURE 2 6 shows Uni XSB hardware configuration diagrams in high end servers When PSB n is Quad XSB type CMU IOU XSB 00 2 XSB 00 3 XSB 00 0 XSB 00 1 XSB 01 2 XSB 01 3 XSB 01 0 XSB 01 1 MBU CPU CPU CPU CPU CPU CPU CPU CPU Memory I O device I O device I O device I O device Memory Memory Memory Memory Memory Memory Memo...

Page 158: ... FIGURE 2 6 XSB Configuration Diagram Uni XSB In the High End Servers FIGURE 2 7 shows Quad XSB hardware configuration diagrams in high end servers XSB xx 0 IOU n CMU n When PSB n is Uni XSB type Memory I O device Memory Memory Memory I O device I O device I O device ...

Page 159: ... level server The PSB type is fixed to Uni XSB In the entry level server the number of domains is one and the domain fully uses the resources in the PSB FIGURE 2 8 XSB Configuration Diagram Uni XSB In the Entry Level Server XSB xx 3 XSB xx 2 XSB xx 1 XSB xx 0 Memory I O device Memory Memory Memory I O device I O device I O device IOU n CMU n When PSB n is Quad XSB type ...

Page 160: ... 2 2 12 System Board Configuration on page 2 122 3 Create the DCL information corresponding to a domain LSB and XSB See showdcl 8 setdcl 8 4 Assign an XSB to the domain according to the created DCL information See addboard 8 showboard 8 5 Turn on the power to the domain Note Make these settings only to change the number of XSB divisions and the mirror mode Note For the procedure for installing rem...

Page 161: ... system board in the specified domain showdcl DCL Sets DCL information Specify configuration for LSB of specified domain For details of configuration information see TABLE 2 22 setdcl Omit memory Omit I O and Floating board are false by default Add to domain Adds or assigns an XSB to a domain according to DCL information Specify the following Domain ID and number of the added XSB assign Specify on...

Page 162: ...hese are the DR functions Move to domain Moves an XSB from its current domain to another domain After the XSB is deleted from its domain the function adds or assigns it to the other domain Specify the following Domain ID and XSB number of the move destination assign Specify one of the following movement integration states when the domain is running the DR function configure configure into Solaris ...

Page 163: ...ing or Specifying DCL Information Command operation 1 Use the showdcl 8 command to display DCL information Example 1 Display all XSB status information XSCF showboards va XSB R DID LSB Assignment Pwr Conn Conf Test Fault COD 00 0 00 00 Assigned y y y Passed Normal n 00 1 00 01 Assigned y y y Passed Normal n 00 2 02 02 Assigned y y n Passed Normal n 00 3 03 03 Assigned y y n Passed Normal n 01 0 01...

Page 164: ...ify XSB 01 0 for an LSB 07 system for the configuration policy false for Omit memory option false for Omit I O option and false for floating board XSCF setdcl d 2 a 7 1 0 XSCF setdcl d 2 s policy system XSCF setdcl d 2 s no mem false 7 XSCF setdcl d 2 s no io false 7 XSCF setdcl d 2 s float false 7 Example 2 In domain ID 2 specify XSB 00 0 for an LSB 00 XSB 00 1 for an LSB 01 XSB 01 1 for an LSB 0...

Page 165: ...ation use the showfru 8 showdcl 8 commands to display XSB status information XSCF showdcl va DID LSB XSB System No Mem No IO Float Cfg policy 02 Powered Off System 00 00 0 False False False 01 02 03 04 05 06 07 01 0 False False False 08 01 1 False False False 09 01 2 False False False 10 01 3 False False False 11 12 13 14 15 ...

Page 166: ...ered Off System 00 00 0 False False False 01 02 03 04 05 06 07 01 0 False False False 08 01 1 False False False 09 01 2 False False False 10 01 3 False False False 11 12 13 14 15 Example Display detailed information about XSBs XSCF showboards va XSB R DID LSB Assignment Pwr Conn Conf Test Fault COD 00 0 SP Available n n n Passed Normal n 01 0 SP Available n n n Passed Normal n 01 1 SP Available n ...

Page 167: ...D 2 Continue y n y XSB 01 0 will be assigned to DomainID 2 Continue y n y XSB 01 1 will be assigned to DomainID 2 Continue y n y XSB 01 2 will be assigned to DomainID 2 Continue y n y XSB 01 3 will be assigned to DomainID 2 Continue y n y XSCF XSCF showboards va XSB R DID LSB Assignment Pwr Conn Conf Test Fault COD 00 0 02 00 Assigned n n n Passed Normal n 01 0 02 07 Assigned n n n Passed Normal n...

Page 168: ...rate the XSB without stopping the domain see the Dynamic Reconfiguration User s Guide XSCF showboards va XSB R DID LSB Assignment Pwr Conn Conf Test Fault COD 00 0 02 00 Assigned y y y Passed Normal n 01 0 02 07 Assigned y y y Passed Normal n 01 1 02 08 Assigned y y y Passed Normal n 01 2 02 09 Assigned y y y Passed Normal n 01 3 02 10 Assigned y y y Passed Normal n XSCF showdomainstatus a DID Dom...

Page 169: ...line 2376 0 02 01 2 40 on line 2376 0 02 01 2 41 on line 2376 0 02 01 2 42 on line 2376 0 02 01 2 43 on line 2376 0 02 01 3 50 on line 2376 0 02 01 3 51 on line 2376 0 02 01 3 52 on line 2376 0 02 01 3 53 on line 2376 0 Memory board perm base domain target deleted remaining DID XSB mem MB mem MB address mem MB XSB mem MB mem MB 02 01 0 8192 2048 0x000003c000000000 32768 02 01 1 8192 0 0x0000020000...

Page 170: ...09 Assigned y y y Passed Normal n 01 3 02 10 Assigned y y y Passed Normal n XSCF poweroff d 2 DomainIDs to power off 02 Continue y n y 02 Powering off Note This command only issues the instruction to power off The result of the instruction can be checked by the showlogs power XSCF showboards va XSB R DID LSB Assignment Pwr Conn Conf Test Fault COD 00 0 02 00 Assigned n n n Passed Normal n 01 0 02 ...

Page 171: ...the showboards 8 command to confirm that the XSB has been deleted from the domain Moving a System Board From One Domain to Another Command operation 1 Use the showdcl 8 command to display DCL information 2 Use the setdcl 8 command to define the LSB of a new domain XSCF showboards va XSB R DID LSB Assignment Pwr Conn Conf Test Fault COD 00 0 02 00 Assigned n n n Passed Normal n 01 0 02 07 Assigned ...

Page 172: ... 2 03 01 3 02 Powered Off 00 00 0 07 01 0 08 01 1 09 01 2 10 01 3 XSCF showboards va XSB R DID LSB Assignment Pwr Conn Conf Test Fault COD 00 0 02 00 Assigned n n n Passed Normal n 01 0 02 07 Assigned n n n Passed Normal n 01 1 SP Available n n n Passed Normal n 01 2 02 09 Assigned n n n Passed Normal n 01 3 02 10 Assigned n n n Passed Normal n Example Delete XSBs and make XSB assignment to new do...

Page 173: ...signed n n n Passed Normal n 01 0 01 00 Assigned n n n Passed Normal n 01 1 SP Available n n n Passed Normal n 01 2 02 09 Assigned n n n Passed Normal n 01 3 02 10 Assigned n n n Passed Normal n XSCF poweron a DomainIDs to power on 01 02 Continue y n y 01 Powering on 02 Powering on Note This command only issues the instruction to power on The result of the instruction can be checked by the showlog...

Page 174: ...ed in system board configuration TABLE 2 26 lists the settings and the corresponding shell commands TABLE 2 25 System Board Configuration Term Term Description Memory mirror mode In this mode a PSB has two memory units one mirroring the other Saving the same data in the separate memory units improves data security TABLE 2 26 System Board Configuration Item Description Shell Command Remarks Display...

Page 175: ...ce Manual for your server and any manual written for FEs Dividing a PSB Into XSBs Command operation 1 Use the showfru 8 command to display information on dividing a PSB into XSBs 2 Use the setupfru 8 command to divide a PSB into XSBs Delete device The device such as a system board is deleted deletefru Note 2 Replace device The device such as a system board is replaced replacefru Note 2 Diagnosis D...

Page 176: ...u 8 command to enable memory mirror mode on a PSB 3 Use the showfru 8 command to confirm the setting of memory mirror mode XSCF showfru a sb Device Location XSB Mode Memory Mirror Mode sb 00 Quad No sb 01 Uni No sb 02 Uni No XSCF showfru a sb Device Location XSB Mode Memory Mirror Mode sb 00 Quad No sb 01 Uni No sb 02 Uni No Example Enable Memory Mirror mode on PSB 00 XSCF setupfru m y sb 00 XSCF ...

Page 177: ...atic boot enable automatic boot suppression suppress a break signal from the console enable break signal suppression or suppress a panic during a Host watchdog reset In the M3000 server CPU operational mode cannot be configured XSCF testsb 0 Initial diagnosis is about to start Continue y n y Initial diagnosis is executing Initial diagnosis has completed XSB Test Fault 00 0 Passed Normal 00 1 Passe...

Page 178: ...t The automatic boot function automatically boots the Solaris OS such as to start a domain and sets the auto boot OpenBoot PROM variable to either true or false If the automatic boot function is suppressed it stops at an ok prompt so that the user can start the Solaris OS in single user mode in a Solaris OS installation for example Break signal Break means to forcibly interrupt data sending and re...

Page 179: ...not performed and break signals are received for the domain s The host watchdog is enabled and the break signal suppression is enabled by default To apply the setting to the domain restart the domain Automatic boot autoboot Enables on or disable off automatic boot for the specified domain or all domains If the function is disabled automatic boot is not performed for the domain s The function is en...

Page 180: ...he prtdiag 1M command output which depends on the value of secure variable and the keyposition of the mode switch on the operator panel For details of the setdomainmode 8 command see the XSCF Reference Manual For details of the prtdiag 1M command see the Solaris OS documentation SPARC64 VI and SPARC64 VII Processors and CPU Operational Modes Note This section applies only to M4000 M5000 M8000 M900...

Page 181: ... Unit CMU and Domain Configuration A mix of SPARC64 VI and SPARC64 VII processors can be mounted on a single CPU Memory Board unit as shown in CMU 2 and CMU 3 in FIGURE 2 9 And a single domain can be configured with a mix of these SPARC64 processors as shown in Domain 2 in FIGURE 2 9 An M4000 M5000 M8000 M9000 server domain runs in one of the following CPU operational modes SPARC64 VI Compatible M...

Page 182: ...forces the Solaris OS to set the CPU operational mode to SPARC64 VI Compatible Mode on reboot To do so power off the domain execute the setdomainmode 8 command to change the cpumode setting from auto to compatible then reboot the domain DR operations work normally on domains running in SPARC64 VI Compatible Mode You can use DR to add delete or move boards with either or both processor types which ...

Page 183: ...oards until you change the domain from SPARC64 VII Enhanced Mode to SPARC64 VI Compatible mode which requires a reboot Setting cpumode to compatible in advance enables you to avoid possible failure of a later DR add operation and one or more reboots Changing the Initial Hardware Diagnostic Level Command operation 1 Use the showdomainmode 8 command to display the initial hardware diagnostic level N...

Page 184: ...aximum initial hardware diagnostic level for domain ID 0 XSCF setdomainmode d 0 m diag max Diagnostic Level min max Secure Mode off Autoboot on CPU Mode auto The specified modes will be changed Continue y n y configured Diagnostic Level max Secure Mode off host watchdog unavailable Break signal receive Autoboot on autoboot on CPU Mode auto Example Display the initial hardware diagnostic levels of ...

Page 185: ... max Secure Mode off on Autoboot on CPU Mode auto The specified modes will be changed Continue y n y configured Diagnostic Level max Secure Mode on host watchdog available Break signal non receive Autoboot on autoboot on CPU Mode auto XSCF showdomainmode d 0 Host ID 0f010f10 Diagnostic Level max Secure Mode on Autoboot on CPU Mode auto Example Disable automatic boot for domain ID 0 XSCF setdomainm...

Page 186: ...2 134 SPARC Enterprise Mx000 Servers XSCF User s Guide August 2009 3 Use the showdomainmode 8 command to confirm that autoboot is off Also to apply the setting to the domain restart the domain ...

Page 187: ...he domain You may set the initial diagnostic level enable or disable the host watchdog function break signal automatic boot and CPU operational mode XSCF showdomainmode d 0 Host ID 0f010f10 Diagnostic Level max Secure Mode on Autoboot on CPU Mode auto Example Specify SPARC64 VI compatible mode for CPU operational mode of domain ID 0 XSCF setdomainmode d 0 m cpumode compatible Diagnostic Level max ...

Page 188: ...tion 2 Use the setlocale 8 command to set a locale The locale setting becomes effective at the next login TABLE 2 30 Locale Administration Item Description Shell Command Remarks Display locale Displays the locale of XSCF Shell showlocale Locale Specify the following a default locale English Japanese UTF8 setlocale Example 1 Japanese locale XSCF showlocale ja_JP UTF 8 Example 2 English locale XSCF ...

Page 189: ...etting items and the corresponding shell commands Setting Altitude Command operation 1 Use the showaltitude 8 command to check the current altitude settings 2 Use the setaltitude 8 command to set the altitude settings Note To apply the specified configuration execute the rebootxscf 8 command and reset XSCF TABLE 2 31 Altitude Administration Item Description Shell Command Remarks Display settings D...

Page 190: ...rive unit A basic cabinet and an expansion cabinet contain one DVD drive unit respectively which is accessed through I O unit card A IOUA mounted in an I O unit The DVD drive unit is connected to a specified I O unit and is used to a single domain that use the I O unit In the M8000 M9000 servers the DVD drive unit can be assigned to the specified IOUA port In the M3000 M4000 M5000 servers the DVD ...

Page 191: ...n Item Description Shell Command Remarks Display DVD drive tape drive unit setting information Displays the DVD drive tape drive unit setting information for an IOUA port cfgdevice DVD drive tape drive unit Sets the target IOUA port for connecting or disconnecting DVD drive and tape drive units Note Specify the following Connect disconnect IOUA port number I O unit number IOUA number I O unit numb...

Page 192: ...cfgdevice l Current connection for DVD DAT Main chassis port 0 2 Expansion chassis port 8 0 Expander status Port No IOU SAS status SAS status 0 0 enable up enable up 0 2 disable down enable up 0 4 disable down enable up 0 6 disable down enable up 1 0 disable down enable up 1 2 disable down enable up 1 4 disable down enable up 1 6 disable down enable up 2 0 disable down enable up Example 1 Specify ...

Page 193: ...king settings and license acquisition see the Administration Guide or related COD documentation TABLE 2 34 lists the settings and the corresponding shell commands TABLE 2 34 COD Administration Item Description Shell command Remarks Display License information Displays COD license setting information The following is displayed Resource type Version Term of validity Number of licenses Status showcod...

Page 194: ...e addcodlicense deletecodlicense Deleting a license key If the number of licenses is less than the number of COD CPUs no license key can be deleted Display COD management information Displays the following COD management information State of license reservation for domains Headroom quantity This system ID showcod COD management Configures the following COD management information Reserve the licens...

Page 195: ...rds 8 and showcod 8 commands to display the information of the COD board and license resevation Example Display the use status of each resource processor XSCF showcodusage p resource Resource In Use Installed Licensed Status PROC 4 4 16 OK 12 available Example 2 Display the use status for each domain XSCF showcodusage p domain Domain Resource In Use Installed Reserved 0 PROC 4 4 0 1 PROC 4 4 0 2 P...

Page 196: ...nstalled 10 PROC Headroom Quantity 0 PROC RTUs reserved for domain 0 4 PROC RTUs reserved for domain 1 0 PROC RTUs reserved for domain 2 0 PROC RTUs reserved for domain 3 0 Example Specify 4 for headroom quantity reserve 3 for domain ID 0 and reserve 0 for other domains XSCF setcod PROC RTUs installed 8 PROC Headroom Quantity 0 to disable 4 MAX 0 4 PROC RTUs reserved for domain 0 10 MAX 0 3 PROC R...

Page 197: ...n the XSCF Unit front panel of the M4000 M5000 M8000 M9000 servers or rear panel of the M3000 server The configuration data is transmitted through the network with an encryption protocol Saving and Restoring Notes The USB device should only be formatted using the FAT32 file system Please ask authorized service personnel about the USB capacity and the handling of USB devices You can restored the co...

Page 198: ...urn the input power supply of the server off then on For details of configuration file and encryption see the man page or the XSCF Reference Manual The following is the procedure for saving configuration information Saving the Configuration Information by Connecting the USB Device for Exclusive Use to the Panel of the XSCF Unit Command operation 1 Connect a USB device to the USB connector mounted ...

Page 199: ...cting the USB Device for Exclusive Use to the Panel of the XSCF Unit Command operation 1 Power off all domains 2 Connect a USB device containing the saved configuration file to the USB connector mounted on the XSCF Unit panel 3 Perform the restoreconfig 8 command and specify the local USB device on the XSCF Unit for the input file see Note 4 The identification data of the restored configuration fi...

Page 200: ...ommand operation 1 Power off all domains 2 Perform the restoreconfig 8 command specifying the target directory 3 When the data transfer is complete confirm the identification data in the head of the saved configuration file 4 The XSCF will be reseted After the data is restored the XSCF will be halted Turn the input power supply of the server off then on Note For more about encrypted data see the m...

Page 201: ... server 3 1 Connect Terminals to the XSCF XSCF monitors and controls the server You can use a terminal to interface with XSCF by connecting to the LAN or serial port of the XSCF Unit This section describes the modes for connecting terminals and the methods of establishing a connection to XSCF from a remote console For the initial settings for connection to XSCF see Chapter 2 ...

Page 202: ...ystem that has one XSCF Unit M3000 M4000 M5000 servers the number of XSCF LAN ports is two and the number of serial ports is one In systems with two XSCF Units M8000 M9000 servers the number of actual XSCF LAN and serial ports is twice that of the system with one XSCF Unit SSH telnet https connection SSH telnet https connection Mail notification Router XSCF LAN Ethernet connection Connection to th...

Page 203: ...rnal NTP server and user authentication with an LDAP server Connect cables to the appropriate connectors log in to XSCF from the XSCF terminal and then perform the console 8 command After that you can use the domain console see Note below You can return to the XSCF Shell console by pressing the default escape character and period keys while holding down the Enter key The XSCF functions do not vary...

Page 204: ...default escape character and period while holding down the Enter key For details on changing these default keys see the description on the console 8 command SSH 22 telnet 23 A LAN cable is required Domain console RW console Note 2 OS console enabled for input and output The RW console is enabled by specifying a write enabled console in the console 8 command from the shell terminal In one domain on...

Page 205: ...2 lists the port numbers used for the XSCF LAN ports and XSCF functions To defend from attacks against XSCF and prevent unauthorized access to XSCF a firewall must be installed for connections to external networks When the firewall has been installed each XSCF LAN port must be permitted to pass packets as necessary Serial port One per XSCF Unit XSCF Shell terminal The XSCF Shell can be used immedi...

Page 206: ...rnal network 23 TCP XSCF Shell telnet External network XSCF 25 TCP Mail notification and remote maintenance service XSCF external network 53 TCP 53 UDP DNS XSCF external network 110 TCP Authentication with a POP server XSCF external network 123 UDP Time synchronization using NTP when an external server is used XSCF external network 161 UDP SNMP function External network XSCF 162 UDP SNMP Trap func...

Page 207: ...ed into the serial connector on the front of the XSCF Unit and confirm that the PC and workstation to be used are correctly connected 2 Check whether the following are set on the terminal software Baud rate 9600 bps Data length 8 bit No parity STOP bit 1 bit No flow control Delay Except for 0 ...

Page 208: ... Terminal Software Settings Note Please increase the delay when you cannot connect 3 On the PC or workstation to be used use one of the following procedures Connecting the XSCF Shell terminal a Establish a connection via the serial port to use the XSCF Shell terminal b Enter a user account and password to login to the XSCF Shell ...

Page 209: ...tion Guide for your server The following is the procedure for connecting to XSCF using SSH via the XSCF LAN port 1 Confirm that a LAN cable is inserted into the XSCF LAN port connector on the front of the XSCF Unit or confirm that the PC and workstation to be used are correctly connected 2 On the PC or workstation to be used use one of the following procedures Connecting the XSCF Shell terminal a ...

Page 210: ...ecting to XSCF Using Telnet via the LAN Port The procedure described below assumes that telnet is enabled in the SSH telnet settings of XSCF as described in Chapter 2 For details on cable connections between the server and a LAN and the connection between a PC and workstation see the Installation Guide for your server The following is the procedure for connecting to a terminal using telnet via the...

Page 211: ...main console OS console a If the domain is powered off use the poweron 8 command for the domain on the XSCF Shell terminal and turn it on to start the Solaris OS b Follow Step a to Step c in the above Connecting the XSCF Shell terminal c Perform the console 8 command d Confirm the change into the specified domain console 3 1 7 Switching Between the XSCF Shell and the Domain Console With a PC or wo...

Page 212: ...rm the console 8 command with specifying the option It is enabled only at the current session Note For details on types of the escape character see the man page or the XSCF Reference Manual 3 2 Types of XSCF Connections This section provides some examples of XSCF connection 3 2 1 Connecting XSCF via the XSCF LAN Port Or the Serial Port XSCF Connection via an XSCF LAN Port Recommended Establish an ...

Page 213: ...ing to the XSCF and the Server 3 13 XSCF Shell XSCF Web SNMP agent function Mail notification function Time synchronization with an external NTP server Authentication function using an LDAP server Log archiving function ...

Page 214: ...When you use the XSCF Shell you can have high security by using SSH not telnet The XSCF Web uses SSL to provide authentication security SSH telnet https connection Mail Notification Router Basic cabinet XSCF LAN port Serial port Intranet Terminal User LAN User LAN DomainID x DomainID y DomainID m DomainID n XSCFU 0 XSCFU 1 Terminal SSH telnet https connection ...

Page 215: ...on In High End Server For security reasons using Virtual Private Network VPN as the external network is strongly recommended SSH telnet https connection SSH telnet https connection Mail Notification Router Router VPN communication Internet Terminal Terminal Basic cabinet Serial port User LAN User LAN DomainID x DomainID y DomainID m DomainID n XSCFU 0 XSCFU 1 XSCF LAN port ...

Page 216: ...ser who connected with the serial port can safely use the XSCF Shell 3 2 2 XSCF LAN and Serial Connection Purposes The XSCF Unit has one serial port and two XSCF LAN ports with 10 100 Mbps interfaces This section describes examples of using the XSCF LAN ports and the serial port Caution IMPORTANT The IP address of XSCF LAN 0 and IP address of XSCF LAN 1 must be specified in different subnet addres...

Page 217: ... occurs in the active XSCF Unit in the systems with two XSCF Units XSCF generates a failover then the LAN of the other XSCF Unit can be used FIGURE 3 6 Example of LAN Port Connections Made Redundant Direct attach port for initial setup maintenance Port from XSCFU 0 Port from XSCFU 1 System with redundant XSCFU only Fire Wall Fire Wall Remote Services System administration port Maintenance port Hub...

Page 218: ... shows an example of a configuration where the two XSCF LANs of one XSCF Unit are used selectively for the system administrators and the FE This configuration does not make the XSCF LAN redundant The purpose is as follows One LAN is used for the system administrator The other LAN is used for the remote maintenance service only or by the FE ...

Page 219: ...istrator The same XSCF LAN port is used for the remote maintenance service An FE uses either the other XSCF LAN port with the other LAN or a maintenance terminal that is serially and directly connected Port from XSCFU 0 Port from XSCFU 1 System with redundant XSCFU only Fire Wall Remote Services System administration port Maintenance port Direct attach port for initial setup maintenance Hub Hub Se...

Page 220: ...on With One LAN Port Port from XSCFU 0 Port from XSCFU 1 System with redundant XSCFU only Fire Wall Remote Services Maintenance port Direct attach port for initial setup maintenance Hub Serial Serial LAN LAN Basic cabinet User LAN User LAN DomainID x DomainID y DomainID m DomainID n XSCFU 0 XSCFU 1 ...

Page 221: ... during system configuration or operation To display the configuration and status of a server use the XSCF Shell Commands Used to Display Information Execute the following commands individually as appropriate For details of these commands see Chapter 5 showhardconf version showdate showenvironment showstatus cfgdevice 4 1 1 Displaying System Information Command operation 1 Use the showhardconf 8 c...

Page 222: ...itch Locked Power_Supply_System Single SCF ID XSCF 0 System_Power On System_Phase Cabinet Power On Domain 0 Domain_Status Powered Off MBU_B Status Normal Ver 0101h Serial 7867000282 XSCF showdate Thu Jul 6 14 48 01 UTC 2006 XSCF version c xcp v XSCF 0 Active XCP0 Current 1082 OpenBoot PROM 02 09 0000 XSCF 01 08 0005 XCP1 Reserve 1082 OpenBoot PROM 02 09 0000 XSCF 01 08 0005 XSCF 1 Standby XCP0 Cur...

Page 223: ...etting the fan speed level varies by the environmental temperature To display the fan speed for each environmental temperature execute the showenvironment 8 command Fan speed level indicates Low speed Middle speed or High speed XSCF showstatus BP_A Status Degraded DDC_A 0 Status Faulted PSU 0 Status Faulted XSCF showenvironment Temperature 30 70C Humidity 90 00 XSCF showenvironment temp Temperatur...

Page 224: ... 15 18 C Low speed level 4 23 26 C 21 24 C 19 22 C 17 20 C Middle speed level 5 25 28 C 23 26 C 21 24 C 19 22 C Middle speed level 6 27 30 C 25 28 C 23 26 C 21 24 C High speed level 7 29 32 C 27 30 C 25 28 C 23 26 C High speed level 8 31 34 C 29 32 C 27 30 C 25 28 C High speed level 9 More than 33 C More than 31 C More than 29 C More than 27 C TABLE 4 2 Fan speed levels corresponding to altitude a...

Page 225: ...o earlier than the XCP 1081 edition for your server To display the power consumption use the showenvironment power command The results displays the maximum Permitted AC power consumption and actual Actual AC power consumption power consumption values To display the amount of exhaust air use the showenvironment air command You can also obtain the data of power consumption and exhaust air using the ...

Page 226: ...for a while after the active replacement complete 4 1 2 Display Server Configuration Status Information Command operation Use the showhardconf 8 command to check the status of a device The status information of each device is as below CPU Memory board unit Motherboard unit information Unit number status version serial number FRU number memory capacity and type In the M3000 server the displayed inf...

Page 227: ... and information on each PCI and DDC The displayed information on each PCI includes the unit number name property and card type The displayed information on each DDC includes the unit number and status In the M3000 server there is information on each PCI slot External I O Expansion Unit IOBOX information Unit number serial number and information on each I O boat and power supply unit in an I O exp...

Page 228: ...ion Unit number status version serial number and FRU number Fan unit information Unit number status serial number Note The configuration information might change based on model configuration in M3000 M4000 M5000 M8000 M9000 servers Note The External I O Expansion Unit may be referred to as IOBOX in example program output and the text in this manual Note 8GB DIMM is supported in XCP1081 or later Ty...

Page 229: ...onfiguration policy No memory state true false No IO state true false floating board state and degradation information 2 Use the showdomainstatus 8 command to check the domain status Example 1 In the SPARC Enterprise M4000 M5000 M8000 M9000 servers XSCF showdcl va DID LSB XSB Status No Mem No IO Float Cfg policy 00 Running FRU 00 00 0 False False False 01 02 03 04 01 0 False True False 05 15 Examp...

Page 230: ... To configure domains for a server use the XSCF Web console or the XSCF Shell commands XSCF showdomainstatus a DID Domain Status 00 Running 01 02 Powered Off 03 Panic State 04 Shutdown Started 05 Booting OpenBoot PROM prompt 06 Initialization Phase 07 OpenBoot Execution Completed XSCF showboards a XSB DID LSB Assignment Pwr Conn Conf Test Fault 00 0 00 00 Assigned y y y Passed Normal 00 1 00 01 As...

Page 231: ...omain see Chapter 2 of the XSCF Reference Manual or the Administration Guide For details on using the DR function to change the domain configuration see the Dynamic Reconfiguration User s Guide 4 4 Server and Domain Power Operations This section describes power operations for servers and domains and it explains how to display the power status of a server or domain To perform the power operations u...

Page 232: ...wer off Sending a Domain Panic Request Solaris OS dump request Domain reset Sending break signal to a domain Air conditioning wait time administration Warm up time administration Dual power feed 4 4 1 System Power On Command operation 1 Use the showdomainstatus 8 command to check the power status of the system 2 Use the poweron 8 command to turn on power to all domains XSCF showdomainstatus a DID ...

Page 233: ... poweroff 8 command to turn off power to all domains XSCF poweron a DomainIDs to power on 00 01 02 03 Continue y n y 00 Not powering on The power supply has already been turned on 01 Powering on 02 Powering on 03 Powering on Note This command only issues the instruction to power on The result of the instruction can be checked by the showlogs power XSCF showdomainstatus a DID Domain Status 00 Runni...

Page 234: ...wer On Command operation 1 Use the showdomainstatus 8 command to check the power status of all domains XSCF poweroff a DomainIDs to power off 00 01 02 03 Continue y n y 00 Powering off 01 Powering off 02 Powering off 03 Powering off Note This command only issues the instruction to power off The result of the instruction can be checked by the showlogs power XSCF showdomainstatus a DID Domain Status...

Page 235: ...e 1 Turn on power to the specified domain XSCF poweron d 0 DomainIDs to power on 00 Continue y n y 00 Powering on Note This command only issues the instruction to power on The result of the instruction can be checked by the showlogs power Example 2 Cancel domain power on in progress XSCF poweron d 0 DomainIDs to power on 00 Continue y n n XSCF XSCF showdomainstatus a DID Domain Status 00 Running 0...

Page 236: ...command Execute the shutdown 1M command on the domain Note that when Solaris OS of the domain is running domain power off shutdown i5 or equivalent is required Example 1 Turn off power to the specified domain XSCF poweroff d 1 DomainIDs to power off 01 Continue y n y 01 Powering off Note This command only issues the instruction to power off The result of the instruction can be checked by the showl...

Page 237: ...main Panic Request Command operation 1 Use the showdomainstatus 8 command to check the power status of the domain to which a panic instruction is to be issued 2 Use the reset 8 command to issue a panic instruction to the specified domain XSCF showdomainstatus a DID Domain Status 00 Running 01 Running 02 Running 03 Running Example Issue a panic instruction to the specified domain XSCF reset d 0 pan...

Page 238: ...0 Running 01 Running 02 Running 03 Running Example 1 Issue a domain ID 0 reset instruction XSCF reset d 0 por DomainID to reset 00 Continue y n y 00 Reset Note This command only issues the instruction to reset The result of the instruction can be checked by the showlogs power Example 2 Issue an XIR reset instruction XSCF reset d 0 xir DomainID to reset 00 Continue y n y 00 Reset Note This command ...

Page 239: ... a failure in a hard disk drive or other components Use this command only for the purpose of recovery such as if the Solaris OS hangs and for other limited purposes 4 4 7 Sending a Break Signal to a Domain Command operation 1 Use the showdomainstatus 8 command to confirm the domain status 2 Use the sendbreak 8 command to send a Break signal to the specified domain XSCF showdomainstatus a DID Domai...

Page 240: ...oning wait time is set the server will start power on processing after its power is turned on and the set air conditioning time elapses Command operation 1 Use the showpowerupdelay 8 command to display the air conditioning wait time wait time 2 Use the setpowerupdelay 8 command to set the air conditioning wait time Set the air conditioning wait time from 0 to 255 min The default is 0 min 3 Use the...

Page 241: ... the warm up time from 0 to 255 min The default is 0 min 3 Use the showpowerupdelay 8 command to confirm the setting Also to apply the setting turning on the server power supply 4 When turning on the server power supply the next time please confirm that it takes more time than usually by checking the amount of time it takes from the power on until the time when the first Power On Self Test POST st...

Page 242: ...Guide August 2009 Caution IMPORTANT When the power is turned on from the operator panel the air conditioning time and warm up time that you set are ignored If you have set these times and wish to observe them at startup perform the poweron 8 command ...

Page 243: ...es the system to continue operation This capability can be enabled or disabled using an XSCF Shell command This setting is done by FEs Note The ability to enable and disable the dual power feed or display its current status is available on M3000 M4000 M5000 servers only However the dual power feed mode cannot be used with 100V power on M4000 M5000 servers When the optional power cabinet for dual p...

Page 244: ...scf 8 command 4 Confirm whether the setting is valid after turning off on the input power Example 1 Enabling the dual power feed XSCF setdualpowerfeed s enable disable enable NOTE Dual power feed will be enabled the next time the platform is powered on Example 2 Disabling the dual power feed XSCF setdualpowerfeed s disable enable disable NOTE Dual power feed will be disabled the next time the plat...

Page 245: ...t status of the CHECK LED 2 Use the showlocator 8 command to blink or reset the CHECK LED 3 Use the showlocator 8 command to display the state of the CHECK LED 4 6 Managing Fault Degradation 4 6 1 Displaying the Degraded Component The status of a faulty or degraded component or a part of such component can be displayed by using the following methods Command operation Use the showstatus 8 command t...

Page 246: ...ing degraded XSCF showstatus MBU_B Status Normal CPUM 1 CHIP 1 Status Deconfigured XBU_B 0 Status Degraded Example 3 No degraded component is found XSCF showstatus No failures found in System Initialization Faulted The component is faulty and not operating Degraded The component is operating However either an error has been detected or the component is faulty As a result the component might be ope...

Page 247: ... active is as follows Command operation 1 Log in the XSCF Unit on the standby side 2 Use the switchscf 8 command to switch the XSCF Unit from standby status to active status Note If possible confirm that the ACTIVE LED states changes on the front panels of both XSCF Units Execute the switchscf 8 command only on one side active side or standby side of the XSCF Units to automatically switch active s...

Page 248: ...see the External I O Expansion Unit Installation and Service Manual or the Service Manual for your server For details and examples of use of commands see the XSCF Reference Manual and the ioxadm 8 man page TABLE 4 4 lists terms used in External I O Expansion Unit administration TABLE 4 5 lists setting items and the corresponding shell commands TABLE 4 4 External I O Expansion Unit Administration T...

Page 249: ... the environment of the specified External I O Expansion Unit or downlink card as sensor measurement values The following is displayed Current A Voltage V Fan speed RPM Temperature C LED state ioxadm Also the preciseness is displayed together with the sensor measurement values Display set locator LED Note 2 Displays and sets the locator LED state for individual components in the specified External...

Page 250: ... I O Expansion Units and downlink card paths and to display information for each component Example 1 Display a list of External I O Expansion Units and downlink cards XSCF ioxadm list IOX Link 0 Link 1 IOX 5309 IOU 2 PCI 2 IOU 3 PCI 1 IOX A3B5 IOU 1 PCI 1 IOU 2 PCI 1 Example 2 Display a list of External I O Expansion Units I O ports link cards and power supply units XSCF ioxadm v list IOU 1 PCI 1 ...

Page 251: ...Value Res Units IOX 12B4 LOCATE Fast LED IOX 12B4 PS0 SERVICE Fast LED Example 2 Set the locator LED state of PSU0 to on XSCF ioxadm locator on iox 12B4 ps0 Location Sensor Value Res Units IOX 12B4 LOCATE Fast LED IOX 12B4 PS0 SERVICE On LED Example 1 Display the PSU states of an External I O Expansion Unit and components XSCF ioxadm v list IOX 12B4 Location Type FW Ver Serial Num Part Num State I...

Page 252: ...4 32 SPARC Enterprise Mx000 Servers XSCF User s Guide August 2009 ...

Page 253: ... The following XSCF commands can be used from the XSCF Shell prompt XSCF displayed after login to XSCF There are nine user privilege types as described below For details on setting the user privilege see Chapter 2 For details on the operations available with each user privilege level see Chapter 1 or the Administration Guide domainop The user can refer to all status information in a domain domainm...

Page 254: ...SCF user account password Alternatively it changes the user s own XSCF user account password setpasswordpolicy Configures the XSCF password policy showpasswordpolicy Displays the XSCF password policy setprivileges Assigns user privileges setloginlockout Configures the lockout of user accounts showloginlockout Displays the lockout setting of user accounts setnetwork Configures the XSCF network show...

Page 255: ...s and fingerprint settelnet Configures telnet showtelnet Displays the telnet settings setautologout Sets the session timeout time of the XSCF Shell showautologout Displays the session timeout time of the XSCF Shell setsmtp Configures the SMTP server showsmtp Displays the the SMTP server settings setemailreport Configures mail notification showemailreport Displays the mail notification settings set...

Page 256: ...t settings setsnmpusm Configures the USM management information for the SNMP agent showsnmpusm Displays the USM management information for the SNMP agent setsnmpvacm Configures the VACM management information for the SNMP agent showsnmpvacm Displays the VACM management information for the SNMP agent setsunmc Start or stop the Sun Management Center agent and make changes to its configuration showsu...

Page 257: ...performed according to the applicable guide setdomainmode Sets a hardware initial diagnostic level No standard maximum Enables or disables break signal sending host watchdog automatic boot and sets CPU operation mode showdomainmode Displays the domain host ID the hardware initial diagnostic level information of enabled or disabled status on break signal sending Host watchdog automatic boot and dis...

Page 258: ... time and the air conditioning wait time settings setshutdowndelay Sets the UPS shutdown delay time at power failure showshutdowndelay Displays the UPS shutdown delay time at power failure setdualpowerfeed Sets the dual power feed showdualpowerfeed Displays the dual power feed setlocator Enables or disables the CHECK LED blinking showlocator Displays the LED status switchscf Switches the XSCF Unit...

Page 259: ...faults Initialises the server or XSCF Unit to the factory shipping state snapshot Saves log information to the specified destination showmonitorlog Displays the XSCF monitoring messages on console in real time showlogs Displays an error log power log event log console log panic log IPL log temperature humidity log and monitor message log fmadm Monitors or controls the Fault Management Diagnosis En...

Page 260: ...onsole While one user is using the RW console another user cannot start another RW console in the same domain For details on console connection see Chapter 3 When a login fails see Appendix D Note In this manual the window of the XSCF Shell terminal is called the XSCF console 5 2 2 Operation From a Terminal Connected to the Serial Port This section describes how to log in from a terminal connected...

Page 261: ...t is authentic enter yes as the response since the XSCF is correct with confirming the fingerprint 5 Enter XSCF commands at the shell prompt XSCF that is displayed after log in to XSCF Note To set the password for an XSCF user account use the password 8 command The shownetwork 8 command can be used to display XSCF LAN setting information and the current network connection status The following is a...

Page 262: ... The following example shows a login using a user public key client ssh nana 192 168 1 12 Enter passphrase for key home nana ssh id_rsa xxxxxxx Warning No xauth data using fake authentication data for X11 forwarding Last login Mon Sep 1 10 19 37 2006 from client XSCF ...

Page 263: ... Commands This section describes the typical XSCF Shell commands that can be used to display the server status operate the server and control the server For details on the commands see the man page or the XSCF Reference Manual For XSCF setup commands see Chapter 2 showenvironment showlocator setlocator showconsolepath fmadm fmdump fmstat showdomainstatus reset poweron poweroff sendbreak showenviro...

Page 264: ... performs fault management FMA for CPUs memory and the I O system during Solaris OS operation The system administrator can use the fmadm 8 command to display configuration and status information about individual FMA modules that detect faults perform fault diagnoses and resolve faults The command can also list faulty and degraded resources The fmstat 8 command displays the processing time and numb...

Page 265: ...dicated by a mark The system administrator can check the component configurations and the numbers of different types of components shownetwork showroute shownameserver showdscp The shownetwork 8 command displays the IP addresses masks and network connection information for the XSCF LAN and ISN installed in the XSCF Unit Also the shownetwork 8 command displays the XSCF network connection status By ...

Page 266: ...nt to domains and resource removal from domains install devices remove devices replace devices and enable or disable functions showdevices cfgdevice console showdcl setdcl showfru setupfru addfru deletefru replacefru showboards addboard deleteboard moveboard showdomainmode setdomainmode showdevices cfgdevice The cfgdevice 8 command displays the domain to which a DVD drive unit or tape drive unit i...

Page 267: ...he commands for effective use of resources addfru deletefru replacefru The addfru 8 command is used to select a device such as a CPU Memory Board unit I O unit fan unit or PSU to add it to the server and the deletefru 8 and replacefru 8 commands are used to select and remove or replace respectively such a device mounted in the server Each type of operation can be performed interactively with menus...

Page 268: ...isplay server operation logs console logs temperature histories and error logs from XSCF log files which also configure the information for archiving XSCF logs to a host For details on error logs see Appendix B showlogs showarchiving setarchiving showlogs The showlogs 8 command displays error logs power logs event logs console logs panic logs IPL logs and temperature humidity logs The system admin...

Page 269: ...leteuser 8 commands add and delete user accounts The enableuser 8 and disableuser 8 commands enable and disable respectively user accounts password setprivilege showpasswordpolicy setpasswordpolicy The password 8 and setprivilege 8 commands set passwords and user privileges respectively for user accounts The showpasswordpolicy 8 and setpasswordpolicy 8 commands display and specify the validity of ...

Page 270: ...g in to that user account failed showssh setssh The showssh 8 and setssh 8 commands can be used to display and specify the information on whether or not to enable the SSH access when a user logs in to XSCF These commands can be used in generating the host key registering deleting the user public key setting the timeout period of XSCF Shell and setting whether or not to permit the SSH access from d...

Page 271: ...he error message depends on the command Therefore you will occasionally see more messages TABLE 5 2 Error Messages of XSCF Shell Commands Message Meaning Invalid parameter An abnormal parameter error has occurred Operation failed Abnormal end Permission denied An execution authority error has occurred Operation not supported on this system Unsupported function Operation interrupted Processing inte...

Page 272: ...5 20 SPARC Enterprise Mx000 Servers XSCF User s Guide August 2009 ...

Page 273: ...ification by email of faults in system components monitored by the XSCF Even if a system failure or a serious error that disables reboot occurs an email message is guaranteed to be sent POP authentication facility and SMTP authentication at email sendings are possible To prevent illegal Mail Sending POP Authentication POP before SMTP or SMTP Authentication SMTP AUTH can be done before mail sending...

Page 274: ...sage through the SMTP server The host name or IP address of the SMTP server must be set Sending an email with POP authentication or SMTP authentication It is necessary to specify whether to do the authentication And the POP authentication or the SMTP authentication must be selected Then ID and password for the authentication is required System XSCF Parts fault Unauthorized access SMTP server SMTP ...

Page 275: ...strator FIGURE 6 2 XSCF Fault Notification 6 2 Setting Up the Mail Function This section explains how to set up the XSCF mail function The workflow is as described below Perform each step for setup with the XSCF Shell command line For details on setup see Chapter 2 1 Log in to XSCF 2 Make the following settings for the XSCF mail function Host name or IP address of the SMTP server See setsmtp 8 Sel...

Page 276: ...sent as test mail is confirmed to have been received by the system administrator it means that the correct settings have been made If the email massage is not received error mail is sent to the reply mail address From or a record is made in an error log In this event identify the cause of the error correct it and start from step 1 again Once the test is completed normally the mail report function ...

Page 277: ...n 2003 14 03 16 0900 From XSCF root host name example com To mail address smtp example com Subject Defect xxxxxxxxxxx MSG ID FMD 8000 4M TYPE Defect VER 1 0 SERVERITY Minor EVENT TIME 04 07 2006 10 34 07 PST PLATFORM i386 CSN DOMAIN ID SERVER ID opleval1 EVENT ID b57a9e55 f024 4ce7 9c39 ec7edd2548e4 DESC The Solaris Fault Manager received an event from a component to which no automated diagnosis s...

Page 278: ...web site information in MSG ID corresponds VER Version EVENT TIME Time of fault occurrence indicated in local time FLATFORM Target architecture CSN Chassis serial number DOMAIN ID Domain ID SERVER ID ID of this system EVENT ID Number used to uniquely identify the problem in an arbitrary system set DIAGCODE Field engineers and authorized service personnel use this code for troubleshooting The user ...

Page 279: ...on This chapter explains the XSCF SNMP agent function 7 1 Overview of the XSCF SNMP Agent XSCF supports the Simple Network Management Protocol SNMP agent function FIGURE 7 1 shows an example of a network management environment using SNMP ...

Page 280: ...gement of the operating conditions of terminals and network problems The SNMP agent responds with management information from the Management Information Base MIB to requests from the manager Also a function called Trap can be used by the SNMP agent to exchange special information in asynchronous communication with the manager Note The SNMP agent uses the 161 port and the 162 port for trap by defau...

Page 281: ...sing information XSCF SNMP agent behavior information For a list from the standard MIB information supported by XSCF see Appendix C Extended MIB Other than the standard MIB two extended MIBs are supported by this system as follows The XSCF extension MIB which has been extended for the XSCF SNMP agent The Fault Management MIB which has a format compatible with the Solaris OS They are used to manage...

Page 282: ...M9000 servers To perform server monitoring install the XSCF extension MIB definition file to the SNMP manager For the method of installation see the manuals of the SNMP manager in use For details on obtaining the XSCF extension MIB definition file and the Fault Management MIB definition file see Preface on page xvii scfMachineType OBJECT TYPE SYNTAX DisplayString ACCESS read only STATUS mandatory ...

Page 283: ... expansion unit LED state change 9 External I O expansion unit temperature faults 10 XSCF SNMP agent function startup Standard trap 11 Occurance of unauthorized access to the XSCF SNMP agent Standard trap 12 Cold start trap generated at changing in composition of managed object for when the SNMP agent starts up Standard trap Note In case 3 above the target components are those whose fault location...

Page 284: ...G ID and message site might be included For details about the UUID MSG ID and message site see Appendix B varbind TRAP agent 10 123 223 18 community generic 6 enterprise enterprises 42 2 195 1 7 specific 1 timestamp 754201501 varbind enterprises 42 2 195 1 1 1 2 36 51 101 49 52 53 52 53 50 45 54 53 52 57 45 52 97 55 101 45 57 97 99 52 45 49 100 55 52 98 101 49 57 53 98 56 52 2 36 0 3e145452 6549 4...

Page 285: ...tual diagram of issuance of a Trap FIGURE 7 2 Trap Issuance Trap issued System XSCF Event reports System XSCF Faulty part replaced Parts fault System XSCF Unauthorized access to XSCF SNMP agent System XSCF System XSCF XSCF SNMP agent function started SNMP manager ...

Page 286: ...e MIB information Installation location of the agent system Mail address of the administrator Description of the agent system Port number of the agent listening port number Step 2 Specify the following management information for SNMPv3 SNMPv1 and SNMPv2c SNMPv3 management information settings User name Note Authentication password Note Encryption password Note Authentication algorithm Port number ...

Page 287: ... neither are secure enough In SNMPv3 more secure transmission can be achieved through authentication and encryption settings on both the agent and manager sides The server uses SNMPv3 as the default SNMP agent Suspending or Disabling Transmission Disabling the XSCF SNMP agent function Disable one or both of the following according to the user environment SNMPv1 and SNMPv2c SNMPv3 Disabling sending...

Page 288: ...ds for users Changing authentication encryption passwords for users Copying a user Deleting a user Step 2 Add user accounts in and delete users from access control groups and provide access control views MIB views by performing the following operations individually Adding a user account to an access control group Deleting a user from an access control group Creating an MIB access control view Dele...

Page 289: ... firmwares hereafter collectively called the OpenBoot PROM firmware XSCF firmware When updating the firmware the new XCP firmware see Note is obtained from a web site or from external media such as a CD ROM disk and downloaded to an arbitrary folder on a personal computer or workstation connected to the server The firmware update sequence is 1 XCP import in the system and 2 update Note XCP Abbrevi...

Page 290: ...8 1 Conceptual Diagram of the Firmware Update 1 XCP import 2 Update includes application of the XSCF firmware URL Web site CD ROM DVD ROM or flash drive Or Server OpenBoot PROM firmware Flash memories of CMUs MBUs PROM DomainID 0 PROM DomainID 1 PROM DomainID 2 PROM DomainID 3 Flash memory of the XSCF XCP data XSCF firmware 1 2 2 ...

Page 291: ...e XSCF Web console the user can easily update firmware from a browser Also regular maintenance and emergency firmware updates are supported For the method of starting XSCF Web see Chapter 9 Firmware update using the XSCF Shell Use the following commands to update the firmware getflashimage 8 command Imports firmware to this system flashupdate 8 command Downloads the firmware to flash memory and ap...

Page 292: ...the format described below After obtaining the XCP files you can import XCP regardless of whether the operating system is running or stopped At a web site Format Compressed tar file tar gz or Windows executable exe Note To obtain the URL of the Web site see the description of the firmware download in Preface on page xvii Note When the operation is done by Service or Field Engineers SEs FEs a CD RO...

Page 293: ...web site To obtain the URL of the web site contact your sales representative 8 1 5 Three Steps of the Firmware Update The firmware update for the server has three steps XCP import update application as explained below 1 XCP import Storing the obtained XCP data in this system is called XCP import The system administrator or a field engineer obtains the XCP data files from the network or external me...

Page 294: ... 3 Application Making the firmware written to flash memory in this system actually usable is called application Note The number of domains that can be updated application is one or more To apply the OpenBoot PROM firmware in the target domain be sure to reboot the domain for firmware application 8 1 6 Features of XSCF Firmware Update The firmware update that is managed by XSCF has the following fe...

Page 295: ...e XSCF Unit is replaced the firmware version of each replacement component is automatically matched to the version of the replaced component Note 2 However when a component is replaced in the state of input power off The cold replacement the firmware is not updated automatically When the DR function is used to add move or replace a system board XSB the firmware version is automatically matched to ...

Page 296: ...ive side and update the firmware The firmware upgrade is performed first on the XSCF Unit on the standby side and then on the active side automatically Due to resetting the XSCF and switching the networks of the XSCF Units on the active and standby sides the network is disconnected at this time Therefore the user must log in again For details see Section 8 1 10 Firmware Update Procedure on page 8 ...

Page 297: ...o a domain by the DR function the version on the board is automatically matched to the version in the destination domain When a maintenance component is replaced or added the version is automatically matched to the version of the firmware currently running 8 1 10 Firmware Update Procedure TABLE 8 2 outlines the firmware update tasks Detailed descriptions are provided at the link destinations of ea...

Page 298: ...P file is copied onto external media such as a CD ROM Imports XCP from the CD ROM disk by using XSCF Use the XSCF Web or the XSCF Shell for the firmware update The rest of the task is the same as updating XCP from the network In the system with a XSCF Unit About 45 minutes In the system with redundant XSCF Units About 120 minutes Excludes the time for component replacement work Confirming That the...

Page 299: ...lable when you are using M8000 M9000 servers Note When a component is replaced in the state of main line switch off the cold replacement the firmware is not updated automatically The operator must match the number of the versions About 5 minutes Excludes the time for component replacement work Confirming That the XSCF Firmware Is Updated When the XSCF Unit Is Replaced in a System With a Single XSC...

Page 300: ...y the firmware program tar gz file and import XCP to the system The update is not performed at this point XSCF getflashimage l Existing versions Version Size Date FFXCP1080 tar gz 51298982 Thu Jan 15 20 09 09 JST 2009 Example Login a remote ftp server specifying the user name and host name that requires authentication password then import the new 1082 version firmware program tar gz XSCF getflashi...

Page 301: ...ate The XSCF firmware is downloaded and applied and the OpenBoot PROM firmware is downloaded a Use the version 8 command to display the current firmware version b Use the flashupdate 8 command to confirm whether to be able to update the new firmware version If the XCP update is possible with domains up message is displayed you can update the firmware Note If the XCP firmware version is 1050 or bef...

Page 302: ...SCF download is started XSCFU 0 bank 1 XCP version 1082 last version 1080 Firmware Element ID 07 version 01080004 last version 01080000 XSCF download has been completed XSCFU 0 bank 1 XCP version 1082 last version 1080 Firmware Element ID 07 version 01080004 last version 01080000 XSCF update has been completed XSCFU 0 bank 1 XCP version 1082 last version 1080 XCP update is started XCP version 1082...

Page 303: ... unit have become the opposite of original state For instance if the firmware update is executed on XSCFU 0 when completing the command XSCFU 1 would become the active side To switch the XSCF execute the switchscf 8 command To confirm the switching between XSCFs execute the showhardconf 8 command Example XSCF switchscf t Standby The XSCF unit switch between the Active and Standby states Continue y...

Page 304: ...d the XCP importing has ended Perform the firmware update The XSCF firmware is downloaded and applied and the OpenBoot PROM firmware is downloaded a Display the XCP update window The version of the imported XCP firmware and the version of the firmware currently running has already displayed in the screen b Make a selection for the firmware version check Confirm whether or not it is possible to upd...

Page 305: ...t of the firmware applied from the XSCF Web console Updating XCP From External Media 1 Insert the external media with the XCP file into the drive Insert the external media into a drive connected to the network that XSCF has access to If necessary copy the XCP file to an arbitrary folder 2 Confirm the XCP version in the XCP file tar gz of external media The latest XCP information is released on ext...

Page 306: ...Redundant XSCF Units a Operation in State of the Input Power On 1 After doing an XSCF Unit replacement task by using the maintenance guidance for FEs the version of the XSCF firmware is automatically set to match the appropriate firmware 2 Confirm the firmware version of replaced XSCF Unit Note When a component is replaced in the state of input power off a cold replacement the firmware is not upda...

Page 307: ...o impact on Web browser operation 1 Repeat Step 1 and Step 2 of the Command operation Then login to the XSCF on the XSCF Web 2 Display the firmware update menu 3 Display the XSCF firmware version and confirm it 4 If you find an unmatched version of the replaced XSCF Unit select the XCP sync In the window match the version of the current firmware 5 Display the XCP version and XSCF firmware version ...

Page 308: ...work to update XCP and confirm the version 8 1 11 If an Error Occurs During XSCF Firmware Update If the system hangs or any of the messages shown below is output during the firmware update the XSCF Unit on the faulty side cannot be used and is treated as a faulty component Try the firmware update again when an error occurs while updating the XSCF firmware The second attempt may succeed where the f...

Page 309: ...d simultaneously to all the domains 8 2 Collecting XSCF Logs Log information for the XSCF firmware is used for investigating hardware or firmware faults XSCF log information can be viewed by the system administrator domain administrators and FEs 8 2 1 Log Types and Reference Commands You can view XSCF log information from the XSCF console after logging in to XSCF When the log archiving function is...

Page 310: ...e display form of the log is interchangeable on the Solaris OS About 200 generations Variable len gth Domain XSCF Amount for about 1 month Archived Note fmdump 8 fmdump 1M XSCF error log Log for error events notifications and faults occurred in server Log information is the same as the FM log The display form of the log is peculiar to the platform About 200 generations Variable len gth Domain XSCF...

Page 311: ...e message log if the XSCF console is specified as the output destination of the Solaris OS console When the input power is turned off the log is clear 512KB domain About 10000 lines domain Amount for about 1 week Archived showlogs 8 XSCF Web Panic log Console log for a panic occurrence 64KB About 1200 lines Amount for 1 time Archived showlogs 8 XSCF Web IPL log Log for the period from power on to ...

Page 312: ...an be saved in the device using one of the following two methods The configuration information can be saved and restored when a USB device has been connected to the USB connector mounted on the XSCF Unit front panel of the M4000 M5000 M8000 M9000 servers or on the rear panel of the M3000 server The log data is transmitted through the network with an encryption protocol Note The USB device should o...

Page 313: ...t 8 command and specify the local USB device on the XSCF Unit for the output file see Note 3 When the data transfer is complete please contact authorized service personnel Note For details on using the snapshot 8 command including how to enable encryption see the man page or the XSCF Reference Manual Saving the Logs to a Specified Target Directory Over a Network Web browser operation 1 Select the ...

Page 314: ... XSCF Reference Manual Caution IMPORTANT When the XSCF Unit is the redundant configuration log in to the standby side and collect the log in the same way The form of the collected log file is as follows XSCF snapshot t joe jupiter west home joe logs x File name The file name is generated automatically at XSCF IP address and the log taking out time So the log file cannot be generated in the file na...

Page 315: ...rt of server status display server operation control and configuration information display When a configured user establishes a connection with a web browser to the XSCF Web from a client terminal and logs in with an XSCF user account either a tree index of available pages or another such page is displayed Select the target page such as the device status page For details on creating the user accou...

Page 316: ... is displayed here Event frame Monitor message frame A page that displays the monitoring message located under the screen Frame displaying the entire system events As for the monitor message frame the content of the display is regularly refreshed An initial value at refreshing intervals is 60 seconds You can change the interval value on the same frame Status display Page displaying the status of t...

Page 317: ...Chapter 9 How to Use the XSCF Web 9 3 FIGURE 9 1 shows an example of the Login page FIGURE 9 1 Example of the Login Page FIGURE 9 2 shows an example of the Tree frame ...

Page 318: ...9 4 SPARC Enterprise Mx000 Servers XSCF User s Guide August 2009 FIGURE 9 2 Example of the Tree Frame ...

Page 319: ...xamples and they may be changed to improve functionality The screen displays shown may also depend on the model and other conditions 9 2 Start the XSCF Web This section describes how to start the XSCF Web console with the XSCF Web To use the XSCF Web log in via an XSCF LAN port This connection cannot be established from a serial port Note The browser window for the XSCF Web is called the XSCF Web ...

Page 320: ...s supported by the XSCF Web To use functions in any of the following web browsers enable the appropriate settings The first firmware to support the newer entry level server is the XCP 1080 firmware For specific information about minimum OS and firmware requirements see the latest version of the Product Notes no earlier than the XCP 1080 edition for your server 9 2 3 Functions to be Enabled on the ...

Page 321: ...1 Logging in to XSCF The XSCF Web pages are connected by login from the top page When login is successful the default page is displayed In the default page the tree frame to select each page and one page are displayed If Authentication Fails If login fails a message indicating that login failed is displayed Further event and audit logs are collected 9 3 2 Access Status Monitoring The XSCF Web moni...

Page 322: ... be changed The authentication timeout is 10 minutes by default The monitoring interval ranges from 1 to 255 minutes You can set the monitoring interval ranges at the Menu Settings Autologout page 9 3 3 Logging Out From XSCF To exit the XSCF Web log out by selecting logout in the page on XSCF Web console ...

Page 323: ...ion Domain Configuration Settings Network Current Reserve Time SSH Telnet LDAP User Manager Audit SMTP Email Reporting SNMP SNMP Security Log Archives Capacity on Demand Sun MC Autologout When you select an item on the menu the target page is displayed on the main page Pages which are the system domain state display the system domain operation the XSCF configuration firmware update and log display...

Page 324: ...tions see Chapter 2 and Chapter 5 Continued Utility Firmware Update Switch Over Reboot XSCF Logs Error Log Power Log Event Log Console Log Panic Log Environment Log IPL Message Log Monitor Message Log Audit Log Snapshot or Data Collector Physical tree Physical components in the server When you select each component the component information and the state are displayed in the main page Logical tree...

Page 325: ...howdate 8 command Failure component display This function is equivalent to the showstatus 8 command Displaying temperature and humidity information This function is equivalent to the showenvironment 8 command The humidity is displayed for the M8000 M9000 servers Displaying air flow information This function is equivalent to the showenvironment 8 command The airflow information is displayed for the...

Page 326: ...status display function and the XSB information display function Domain status display Configuration policy and domain power status are displayed This function is equivalent to the showdcl 8 command XSB information display XSB status is displayed This function is equivalent to the showdcl 8 showboards 8 and showstatus 8 commands TABLE 9 5 Device Status Display Function Remarks CPU status display D...

Page 327: ...s Domain power on off Specifies the domain power on off This function is equivalent to the poweron 8 poweroff 8 commands Reset System reset XIR reset and panic for the domain are performed This function is equivalent to the reset 8 command Send break Specifies the send break This function is equivalent to the sendbreak 8 command TABLE 9 7 Domain Mode Configuration Function Remarks Domain mode conf...

Page 328: ...ory mirror information for each PSB in the form of table Note The M3000 server does not display the system board configuration but displays the detail information in the system board detail display System board detail display Displays the PSB and the XSB on the PSB detail information This function is equivalent to the showfru 8 showhardconf 8 and showboards 8 commands XSB division memory mirroring...

Page 329: ... Sets the DCL information Specify configuration for the LSB of a specified domain This function is equivalent to the setdcl 8 command For detail of configuration information see TABLE 2 22 In the M3000 server this function is not available XSB addition deletion and movement Specifies the XSB configuration modification to the domain as below Assign or configure a system board to a domain Delete a s...

Page 330: ... and XSCF network configuration Displays the XSCF network information and status which is running on the server This function is equivalent to the shownetwork 8 and showhostname 8 commands Also this function sets each host name domain name IP address netmask and enabling disabling of the XSCF network interface This function is equivalent to the setnetwork 8 and sethostname 8 commands You can confi...

Page 331: ...ute configuration information display and configuration Displays the route configuration information This function is equivalent to the applynetwork 8 command Also this function configures the routing This function is equivalent to the setroute 8 command DNS server configuration information display and configuration Displays the nameserver configuration information This function is equivalent to t...

Page 332: ...rver display and configuration Displays and sets the time zone and Daylight Saving Time These function are equivalent to the showntp 8 and setntp 8 commands Reset XSCF to complete the settings TABLE 9 12 SSH telnet Settings Function Remarks SSH Enabling and disabling Displays and sets the enabling disabling the SSH These function are equivalent to the showssh 8 and setssh 8 commands After enabling...

Page 333: ... to the showldap 8 and setldap 8 commands TABLE 9 14 User Management Configuration 1 of 2 Function Remarks User accounts list display Displays user accounts information and the state being registered now The useradm privilege is required This function is equivalent to the showuser 8 command User accounts addition and deletion Adds and deletes a user account The useradm privilege is required These ...

Page 334: ...nt to the showuser 8 and password 8 commands Password policy display and setting Display the current system password policy And set the password policy that will be applied now These function are equivalent to the showpasswordpolicy 8 and setpasswordpolicy 8 commands Privileges for remote user account settings Change the privilege for a user account that is defined in an LDAP repository This funct...

Page 335: ...uivalent to the setaudit 8 command Audit event class display and setting Display the audit events and the audit classes Also Enable and disable the audit events and the audit classes This function is equivalent to the setaudit 8 command TABLE 9 16 Mail Configuration SMTP Function Remarks SMTP server display and configuration Displays SMTP server setting information Sets the host name and the port ...

Page 336: ...Remarks Mail notification function display and configuration Displays and sets the mail report function Enables or disables the mail report function and displays and specifies the recipient address to be sent to the system administrator These functions are equivalent to the showemailreport 8 and setemailreport 8 commands ...

Page 337: ...owsnmp 8 and setsnmp 8 commands Notification destination server display and setting Displays and sets the trap host for SNMPv1v2c or SNMPv3 This functions is equivalent to the showsnmp 8 and setsnmp 8 commands TABLE 9 19 SNMP Configuration Security Access Function Remarks USM management information display and setting Displays and sets the USM management information for SNMPv3 This function is equ...

Page 338: ...garchiving 8 and setlogarchiving 8 commands Host public key setting Sets a public key used in server authentication for the archive host This functions is equivalent to the setlogarchiving 8 command TABLE 9 21 COD Configuration 1 of 2 Function Remarks COD resource use status display and headroom configuration Displays the current use status of COD resources in a resource and displays and sets the ...

Page 339: ... equivalent to the showcodlicense 8 addcodlicense 8 and deletecodlicense 8 commands TABLE 9 22 Sun Management Center Agent Configuration Function Remarks Sun Management Center Agent Configuration Displays setup information and status of Sun Management Center agent Start or stop the Sun Management Center agent and make changes to its configuration These functions are equivalent to the showsunmc 8 a...

Page 340: ...CF Unit you can perform operations such as XSCF switching and log collection To reset the XSCF select Utility Reboot XSCF in the menu tree This function is equivalent to the rebootxcf 8 command TABLE 9 24 Firmware Updating Function Remarks XCP version display Displays the XCP version This function is equivalent to the version 8 command XSCF OpenBoot PROM version display Displays the XSCF firmware ...

Page 341: ...o the console option of the showlogs 8 command Panic log display Display the panic log This function is equivalent to the panic option of the showlogs 8 command Temperature and humidity history log display Environment Log Display temperature and humidity history log in the server environment Also you can search the logs This function is equivalent to the env option of the showlogs 8 command The hu...

Page 342: ...ion the state of each component on the Physical tree and the Logical tree can be updated by pushing the REFRESH button of the XSCF Web Console If there is a component with an abnormal status a mark is added to the component on the tree Select the component so marked and confirm its details Note Screen layouts and configurations may be changed to improve functionality 9 5 XSCF Web Error Messages TA...

Page 343: ... to the domain console the user can identify the portion corresponding to the notified fault in the server The FMA message is retained as log information in a fault log or error log The Solaris fmdump 1M command or the fmdump 8 or showlogs 8 command of the XSCF Shell can be used to display the message contents for more detailed investigation The user can also confirm the contents by using the spec...

Page 344: ... XSCF unit is redundant the console messages retained in the XSCF Unit on the active side are not copied to the standby side Accordingly after the XSCF Unit is switched the console messages on the previously active side cannot be referenced Monitoring message The XSCF firmware outputs this message to notify the server fault or status The monitoring message is output by using the showmonitorlog 8 c...

Page 345: ...laris OS command such as the syslog reference command or fmdump 1M command on the domain console For how to identify fault information by using these commands see the Solaris OS documentation Example FMA Message SUNW MSG ID SUN4U 800J C0 TYPE Fault VER 1 SEVERITY Critical EVENT TIME Wed Jun 28 17 45 36 PDT 2006 PLATFORM SUNW SPARC Enterprise CSN HOSTNAME dc102 SOURCE eft REV 1 5 EVENT ID 24fe9f8c ...

Page 346: ...ation see the web site information about the messages listed in Preface on page xvii Recognizing a Fault in a Message Reported by Email 1 The user recognizes status notification or fault information as the Subject of the email reported by XSCF or in the text of the message For an example of a mail message see Chapter 6 2 According to the displayed message ID MSG ID the user can access the specifie...

Page 347: ... option and perform the showlogs 8 command to identify fault information 3 In the XSCF error log confirm the contents of entry corresponding to the fault See Appendix B 4 Specify the error detail option in showlogs 8 to display the message ID MSG ID The information can be confirmed by accessing the specified URL according to the displayed message ID MSG ID Authorized service personnel use the DIAG...

Page 348: ...A 6 SPARC Enterprise Mx000 Servers XSCF User s Guide August 2009 ...

Page 349: ...ic Log IPL Log B 1 XSCF Error Log To reference the log related to a status notification or a fault information that occurred in the server use these two commands showlogs 8 error option fmdump 8 The showlogs 8 error option displays fault information in a format specific to the platform Conversely the fmdump command displays fault information in a format compatible with the Solaris OS This latter c...

Page 350: ...rvice personnel use for troubleshooting Code The user is requested to inform the field engineer and authorized service personnel of this Code This is useful in settling the problem at an early stage Fault level of the component Status One of the following items is displayed Time at which each problem occurred Occurred This is indicated in local time Replacement component FRU that is probably fault...

Page 351: ...necessary to replace the device connected to PCI slot No 3 as circumstances require d MBU_A MEMB 0 MEM 02A is displayed The above indicates the following MBU_A MEMB 0 MEM 02A was detected as the suspect component and memory slot No 02A of memory board No 0 on the MBU is problematic It may be necessary to replace memory slot No 02A as circumstances require e CMU 0 MEM 02A is displayed The above ind...

Page 352: ...the fmdump 8 command to confirm the XSCF error log in a display format that is compatible with the Solaris OS Using the fmdump 8 Command to Confirm a Fault 1 Perform the fmdump 8 command on the XSCF Shell and reference the log The layout of the command example is subject to change without previous notice for functional improvement In the example above the following items are displayed Time at whic...

Page 353: ...8 Command to Reference Power Logs Specify the power option on the XSCF Shell and perform the showlogs 8 command to reference power logs The examples are subject to change without previous notice for functional improvement In the examples above the following items are displayed Time at which each power log was collected Date This is indicated in local time Example 1 Power logs are displayed as a li...

Page 354: ...ion was turned off XIR The XIR was reset Domain Reset The domain was reset Cause Meaning Self Reset Self resetting of the XSCF reset the XSCF Power On Turning on the input power supply reset the XSCF System Reset The detection of an error reset the XSCF Panel Operating a switch on the operator panel caused a power event Scheduled Setting the TOD timer caused a power event RCI The I O device connec...

Page 355: ... logs See TABLE 8 3 for the size and generation numbers of XSCF event logs Using the showlogs 8 Command to Reference XSCF Event Logs Specify the event option on the XSCF Shell and perform the showlogs 8 command to reference XSCF event logs The example is subject to change without previous notice for functional improvement In the example above the following items are displayed Time at which each ev...

Page 356: ...tor option on the XSCF Shell and perform the showlogs 8 command to reference the monitor message log The following items are displayed Time at which the monitoring message was collected Date This is indicated in local time Monitoring message Message B 4 2 Temperature and Humidity History Log Using the showlogs 8 Command to Reference Temperature and Humidity History Logs The XSCF firmware collects ...

Page 357: ...owlogs 8 command to reference console logs The following items are displayed Domain ID DomainID Time at which each console log was collected Date This is indicated in local time Console message Message B 4 4 Panic Log Using the showlogs 8 Command to Reference Panic Logs In case of panic a console message is output to the domain console This console message is collected by the XSCF firmware in a pa...

Page 358: ...he XSCF Shell and perform the showlogs 8 command to reference IPL logs The following items are displayed Domain ID DomainID Time at which each IPL log was collected Date This is indicated in local time IPL message Message B 5 Audit Log This section explains how to reference the audit logs by using the viewaudit 8 command For details of each log option audit class and audit event of viewaudit 8 see...

Page 359: ...en Label command name argument1 argumentN Authentication Token Label authentication result user name message terminal type remote IP address remote port Return Token Label return value Example Display all audit records XSCF viewaudit file 1 2006 04 26 21 37 25 626 00 00 20060426213725 0000000000 SCF 4 0 header 20 1 audit start 0 0 0 0 2006 04 26 21 37 25 660 00 00 header 43 1 authenticate 0 0 0 0 ...

Page 360: ...ipal audit events and Tokens Login telnet header subject text return Login SSH As for Login telnet Login BUI As for Login telnet Logout Header Subject Audit start Header Audit stop Header Shell command Header Subject Command Text Upriv Updpriv Return Note Some Tokens might not be output according to the environment Also it might be changed because of the function improvement without notice ...

Page 361: ...E C 1 MIB Object Identifiers internet OBJECT IDENTIFIER iso org 3 dod 6 1 directory OBJECT IDENTIFIER internet 1 mgmt OBJECT IDENTIFIER internet 2 experimental OBJECT IDENTIFIER internet 3 private OBJECT IDENTIFIER internet 4 mib 2 OBJECT IDENTIFIER mgmt 1 system OBJECT IDENTIFIER mib 2 1 interfaces OBJECT IDENTIFIER mib 2 2 at OBJECT IDENTIFIER mib 2 3 ip OBJECT IDENTIFIER mib 2 4 icmp OBJECT IDE...

Page 362: ... scfSystemInfo OBJECT IDENTIFIER scfObjects 4 scfDomainInfo OBJECT IDENTIFIER scfObjects 5 scfXsbInfo OBJECT IDENTIFIER scfObjects 6 scfLsbInfo OBJECT IDENTIFIER scfObjects 7 scfBoardInfo OBJECT IDENTIFIER scfObjects 8 scfCpuInfo OBJECT IDENTIFIER scfObjects 9 scfMemoryInfo OBJECT IDENTIFIER scfObjects 10 scfIoBoxInfo OBJECT IDENTIFIER scfObjects 11 scfComponentInfo OBJECT IDENTIFIER scfObjects 12...

Page 363: ...ion from the XSCF extension MIB provided by the XSCF includes Server information hardware firmware version and server configuration information Environment information temperature humidity voltage and fan speed Domain status and domain configuration information Note For details of the Fault Management MIB see the Solaris OS documentation scfMIBObjectGroups OBJECT IDENTIFIER scfMIBGroups 1 scfMIBNo...

Page 364: ...p This group provides overall status information known to the XSCF 3 scfMonitorInfo group This group provides environmental information for a variety of components within the system 4 scfSystemInfo group This group provides general System information and LED states 5 scfDomainInfo group This group provides information specific to all Domains known to the XSCF 6 scfXsbInfo group This group provides...

Page 365: ...tus information for every component in the System Obtaining the Latest Extension MIB For details on obtaining the XSCF extension MIB definition file and the Fault Management MIB definition file see Preface on page xvii C 4 Trap Traps are classified as either a standard Trap or an extension Trap Standard Trap is provided for each device defined in SNMP as standard For a description of a standard Tr...

Page 366: ...C 6 SPARC Enterprise Mx000 Servers XSCF User s Guide August 2009 ...

Page 367: ...rs Could Not Log in to XSCF Check whether you entered the correct user name for login Check whether you entered the correct password Check the number of XSCF users For information about the number of users see Chapter 2 and Chapter 3 Forgot the Login Password for XSCF Ask a system administrator who has the platadm or useradm user privilege to reset your password using the password 8 command If a s...

Page 368: ...mber see Chapter 2 and Chapter 3 If necessary use the console on the personal computer that is directly connected to XSCF through the serial port to log in to the XSCF Shell and check the XSCF LAN settings by using the shownetwork 8 command Could Not Connect Using SSH to XSCF via the XSCF LAN Check the LAN cable connection between the XSCF terminal and the server Use the shownetwork 8 command to c...

Page 369: ...ell is not used during the specified length of time after login it automatically terminates itself This forced termination occurs when the specified period has elapsed only if the time monitoring function is enabled and a length of time is specified for this function in the XSCF settings When the escape character Example set by client and period keys are entered the Solaris Secure Shell or SSH cli...

Page 370: ... Function Use the showhttps 8 command to check whether the setting for XSCF is enabled Check whether the entered URL is correct e g whether the s in https is missing Ask the system administrator to check whether access through the IP address that is set is permitted Check whether the SSL TSL function setting of the web browser is enabled Could Not Display XSCF Web Windows If XSCF Web windows are n...

Page 371: ...rt used for the XSCF LAN A An IP address is not assigned by default If an IP address were assigned by default one IP address would be temporarily duplicated during the concurrent setup of multiple units This may affect the user LAN environment To prevent this the XSCF LAN network function is disabled by default However there is a default value for the IP address for the network connecting redundan...

Page 372: ...til the operating system starts A The processing flow before system startup is as follows 1 The operator turns on input power 2 XSCF starts 3 The operator turns on the power to the server 4 XSCF initializes the hardware 5 The POST starts and performs an initial diagnosis of hardware 6 OpenBoot PROM starts 7 OpenBoot PROM starts the boot process 8 The operating system starts Q During normal log in ...

Page 373: ...ur Authorized Service Personnel Before contacting our authorized service personnel first follow the procedure below This procedure may be helpful not only in solving the problem but also could eliminate the need to make an inquiry 1 If the server does not respond set the Mode switch on the operator panel to Service mode 2 Check the system status by using either of the following methods When you ca...

Page 374: ...error see Appendix B in this manual for the corrective action d Check the XSCF console log or panic log for the latest messages A message may have been output by the operating system after it detected the problem In cases involving a panic use the showlogs 8 command with the panic option to check the events that occurred at the time the panic occurred For information about using the command see th...

Page 375: ...ense Conditions Some of the software functions explained in this manual are licensed under public licenses GNU Public License GPL GNU Lesser Public License LGPL and others This appendix lists these public licenses and conditions ...

Page 376: ...to carry prominent notices stating that you changed the files and the date of any change b You must cause any work that you distribute or publish that in whole or in part contains or is derived from the Program or any part thereof to be licensed as a whole at no charge to all third parties under the terms of this License c If the modified program normally reads commands interactively when run you ...

Page 377: ... PROGRAM PROVE DEFECTIVE YOU ASSUME THE COST OF ALL NECESSARY SERVICING REPAIR OR CORRECTION 12 IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING WILL ANY COPYRIGHT HOLDER OR ANY OTHER PARTY WHO MAY MODIFY AND OR REDISTRIBUTE THE PROGRAM AS PERMITTED ABOVE BE LIABLE TO YOU FOR DAMAGES INCLUDING ANY GENERAL SPECIAL INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE USE OR IN...

Page 378: ...ains code derived from the library whereas the latter must be combined with the library in order to run GNU LESSER GENERAL PUBLIC LICENSE TERMS AND CONDITIONS FOR COPYING DISTRIBUTION AND MODIFICATION 0 This License Agreement applies to any software library or other program which contains a notice placed by the copyright holder or other authorized party saying it may be distributed under the terms...

Page 379: ...system rather than copying library functions into the executable and 2 will operate properly with a modified version of the library if the user installs one as long as the modified version is interface compatible with the version that the work was made with c Accompany the work with a written offer valid for at least three years to give the same user the materials specified in Subsection 6a above ...

Page 380: ...n of warranty and each file should have at least the copyright line and a pointer to where the full notice is found one line to give the library s name and a brief idea of what it does Copyright C year name of author This library is free software you can redistribute it and or modify it under the terms of the GNU Lesser General Public License as published by the Free Software Foundation either ver...

Page 381: ...er it and redistribute it freely subject to the following restrictions 1 The origin of this software must not be misrepresented you must not claim that you wrote the original software If you use this software in a product an acknowledgment in the product documentation would be appreciated but is not required 2 Altered source versions must be plainly marked as such and must not be misrepresented as...

Page 382: ...odified in accordance with the wishes of the Copyright Holder Copyright Holder is whoever is named in the copyright or copyrights for the package You is you if you re thinking about copying or distributing this Package Reasonable copying fee is whatever you can justify on the basis of media cost duplication charges time of people involved and so on You will not be required to justify it to the Cop...

Page 383: ...r Derivative Works in any way such that the Original Work or Derivative Works may be accessed or used by anyone other than You whether the Original Work or Derivative Works are distributed to those persons made available as an application intended for use over a computer network or used to provide services or otherwise deliver content to anyone other than You As an express condition for the grants...

Page 384: ...s to that Work or Derivative Works thereof that is intentionally submitted to Licensor for inclusion in the Work by the copyright owner or by an individual or Legal Entity authorized to submit on behalf of the copyright owner For the purposes of this definition submitted means any form of electronic verbal or written communication sent to the Licensor or its representatives including but not limit...

Page 385: ...e terms Your use of the source code for the these subcomponents is subject to the terms and conditions of the following licenses For the mod_mime_magic component mod_mime_magic MIME type lookup via file magic numbers Copyright c 1996 1997 Cisco Systems Inc This software was submitted by Cisco Systems to the Apache Group in July 1997 Future revisions and derivatives of this source code must acknowl...

Page 386: ...ntence like this Regular expression support is provided by the PCRE library package which is open source software written by Philip Hazel and copyright by the University of Cambridge England somewhere reasonably visible in your documentation and in any relevant files or online help data or similar A reference to the ftp site for the source that is to ftp ftp csx cam ac uk pub software programming ...

Page 387: ...NTIES WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS IN NO EVENT SHALL CMU OR THE REGENTS OF THE UNIVERSITY OF CALIFORNIA BE LIABLE FOR ANY SPECIAL INDIRECT OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM THE LOSS OF USE DATA OR PROFITS WHETHER IN AN ACTION OF CONTRACT NEGLIGENCE OR OTHER TORTIOUS ACTION ARISING OUT OF OR IN CONNECTIO...

Page 388: ...DERS OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT INDIRECT INCIDENTAL SPECIAL EXEMPLARY OR CONSEQUENTIAL DAMAGES INCLUDING BUT NOT LIMITED TO PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES LOSS OF USE DATA OR PROFITS OR BUSINESS INTERRUPTION HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY WHETHER IN CONTRACT STRICT LIABILITY OR TORT INCLUDING NEGLIGENCE OR OTHERWISE ARISING IN ANY WAY OUT OF THE USE OF THI...

Page 389: ... kuleuven ac be author Paulo Barreto paulo barreto terra com br This code is hereby placed in the public domain THIS SOFTWARE IS PROVIDED BY THE AUTHORS AS IS AND ANY EXPRESS OR IMPLIED WARRANTIES INCLUDING BUT NOT LIMITED TO THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED IN NO EVENT SHALL THE AUTHORS OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT INDIRECT ...

Page 390: ...f from the apps directory application code you must include an acknowledgement This product includes software written by Tim Hudson tjh cryptsoft com THIS SOFTWARE IS PROVIDED BY ERIC YOUNG AS IS AND ANY EXPRESS OR IMPLIED WARRANTIES INCLUDING BUT NOT LIMITED TO THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTOR...

Page 391: ...entations about the suitability of this software for any purpose It is provided as is without express or implied warranty C The Regents of the University of Michigan and Merit Network Inc 1992 1993 1994 1995 All Rights Reserved Permission to use copy modify and distribute this software and its documentation for any purpose and without fee is hereby granted provided that the above copyright notice ...

Page 392: ...ribution and that this copyright notice is also included in any redistribution Modifications to this software may be distributed either by distributing the modified software or by distributing patches to the original software under the following additional terms 1 The version number will be modified as follows a The first 3 components of the version number i e number number number will remain unch...

Page 393: ... 2 67 Audit logs displaying 2 73 Audit policy specifying 2 72 Audit record 2 67 Audit token 2 68 Audit trail 2 68 Automatic boot function enabling or disabling 2 133 B Break signal suppression enabling or disabling 2 132 C Changing the initial hardware diagnostic level 2 131 Changing the Stratum Value for XSCF 2 50 COD Administration 2 141 COD license keys adding and deleting 2 143 Collect XSCF Lo...

Page 394: ...isabling ssh telnet 2 55 Enabling or disabling the automatic boot function 2 133 Enabling or disabling the Host watchdog function and the Break signal suppression 2 132 Enabling or disabling the log archiving 2 76 Enabling or disabling the mail report function 2 93 Enabling Disabling the SNMP agent 2 82 Enabling disabling the SNMPv1 and v2c 2 86 Error messages XSCF web 9 28 Event log B 7 Extended ...

Page 395: ...rver configuration 5 11 5 13 control 5 11 information commands 5 11 5 13 status 5 11 troubleshooting D 7 Server and domain power operations 4 11 setdomainmode 8 2 130 Setting altitude 2 137 Setting locale 2 136 Setting SNMPv3 trap 2 84 Setting the Domain Time to the XSCF Time 2 51 Setting the memory mirror mode for a PSB 2 124 Setting the SNMPv1 and v2c trap 2 86 Setting the XSCF time 2 47 Setting...

Page 396: ...ficate creating 2 66 importing 2 63 X XSB status displaying 2 111 XSB status information 2 100 XSCF active XSCF 1 2 2 15 3 17 4 27 connecting terminals 3 1 connecting through ssh 3 9 connecting through the serial port 3 6 connection types 3 12 DNS settings 2 28 error log B 1 event logs B 7 firmware update 8 1 fmdump 8 and faults B 4 Front panel 1 6 1 7 function messages A 3 log collection 8 21 log...

Page 397: ...Index 5 error messages 9 28 starting 9 5 XSCF LAN firewall 3 5 function 3 5 port number 3 5 serial connection 3 16 ...

Page 398: ...Index 6 SPARC Enterprise Mx000 Servers XSCF User s Guide August 2009 ...

Search results

Summary of Contents for Sun SPARC Enterprise M3000

Reviews:

Related manuals for Sun SPARC Enterprise M3000

Brands by name

Popular brands

Sun Microsystems Sun SPARC Enterprise M3000, User Manual

Search results

Summary of Contents for Sun SPARC Enterprise M3000

Reviews:

Related manuals for Sun SPARC Enterprise M3000

Brands by name

Popular brands