background image

user

Using the shelf manager CLI

 FortiGate-5060   Chassis Guide 

56

01-400-129494-20110912

http://docs.fortinet.com/

 • 

Feedback

user

clia user [add | delete | enable | name | passwd | channel]
clia user [-v] [<user_id>]

Use this command to add, delete, modify and display RMCP user accounts for a shelf 
manager. 

Display all user accounts

Enter the following command to display user account information:

clia user -v

Pigeon Point Shelf Manager Command Line Interpreter

1: ""

Channels 0-15 Privilege level: "Administrator"

Flags: "IPMI Messaging"

7: "TEST1" Disabled

Channels 0-15 Privilege level: "NO ACCESS"

Include 

-v

 to display disabled user accounts. For each user account the command 

displays:
• User ID
• User name
• Channel access information for each IPMI channel: the maximum privilege level of that 

user account on that channel, and channel access flags. If the channel access 
information is the same for several channels, the output displays the information for the 
channel number range.

Adding a user account

Use the following command syntax to add a user account:

user add <user_id> <user_name> <channel_access_flags> 

<privilege_level> <password>

This command adds a new RMCP user account to the shelf manager. The command also 
sets the same maximum privilege level and channel access flags for all channels. Where:

<user_id>

 is a valid user ID

<user_name>

 is a user name (truncated to the 16 characters without notice)

<channel_access_flags>

 is the first byte of the SetUserInfo commands (only bits 

4,5,6 are meaningful)
• bit 6 enables IPMI messaging
• bit 5 enables link authentication
• bit 4 restricts the user to callback

<privilege_level>

 is the user account privilege level

<password>

 is the user account password (truncated to the 16 characters without 

notice).

For example, add a user account with user ID 

9

, user name 

user_1

, administrator 

privilege level, and password 

my-password

.

clia user

Содержание FortiGate-5060

Страница 1: ...60 Chassis Guide describes FortiGate 5060 hardware features and how to install the FortiGate 5060 chassis The most recent versions of this and all FortiGate 5000 series documents are available from th...

Страница 2: ...ion by wearing an anti static wrist strap and attaching it to an available ESD connector such as the ESD sockets provided on FortiGate 5000 series chassis Make sure all FortiGate 5000 series component...

Страница 3: ...r 15 Cooling fan trays 16 Power connection and configuration 17 About data center DC power 17 Connecting the FortiGate 5060 chassis to DC power and data center ground 17 Connecting a FortiGate 5060 PE...

Страница 4: ...ensors that are outside of established thresholds 31 Display sensor data for a FRU 31 Display the FRU information for a FRU 31 Change the speed for a fan tray 31 Display the contents of the system eve...

Страница 5: ...Changing a user account password 58 version 58 Generating SNMP traps for system events 58 SNMP trap details 62 Removing and inserting a fan tray 64 Using the chassis system event log SEL 64 Before you...

Страница 6: ...Contents FortiGate 5060 Chassis Guide 6 01 400 129494 20110912 http docs fortinet com Feedback...

Страница 7: ...f the boards installed in a FortiGate 5060 chassis can be operating in a FortiGate HA cluster and some can be operating as standalone FortiGate units You can also operate multiple HA clusters and stan...

Страница 8: ...ortiSwitch 5003B boards installed Also visible on the front of the FortiGate 5060 chassis The location of the two hot swappable FortiGate 5060 cooling fan trays The location of the front replaceable a...

Страница 9: ...B to a DC power source Figure 2 FortiGate 5060 chassis back panel shows PEM B connected to DC power source The back panel includes the FortiGate 5060 chassis ground connector which must be connected t...

Страница 10: ...tive shelf manager fails or is removed the standby shelf manager takes over all shelf manager functions The FortiGate 5060 shelf managers control chassis power allocation monitor chassis operating par...

Страница 11: ...ased set of commands that can be accessed directly or through a higher level management application or a script Using the CLI you can access information about the current state of the chassis includin...

Страница 12: ...Gate 5060 shelf alarm panel The FortiGate 5060 shelf alarm panel SAP located at the top of the FortiGate 5060 front panel provides LED indicators of FortiGate 5060 alarms a telco alarm connector an al...

Страница 13: ...icates a minor alarm Blinking Amber Alarm cutoff ACO activated by pressing the alarm LED reset button USER3 USER2 USER1 Off Normal operation Amber Indicates a user definable alarm Blinking Amber Alarm...

Страница 14: ...duty cycle The current drawn by a reset input does not exceed 12 mA The alarm LED reset button activates the alarm cutoff ACO state for major minor and user defined alarms You cannot reset critical al...

Страница 15: ...pected regularly If dirty or damaged the filter should be disposed of and replaced The air filter can be removed using the air filter handle on the front of the FortiGate 5060 chassis To install a new...

Страница 16: ...led in the FortiGate 5060 chassis Fan speeds are monitored by a tachometer signal sent from the cooling fan trays to the shelf manager The shelf manager regulates the fan speed by adjusting the DC vol...

Страница 17: ...quipped with a 48VDC power system fed from a 30A listed circuit breaker that provides power to existing networking or telecom equipment The FortiGate 5060 chassis is designed to be connected directly...

Страница 18: ...tions not supplied with the chassis If you are connecting both PEMs the 48VDC and RTN terminals on PEM A and PEM B must be wired symmetrically This means that the connections must be the same to both...

Страница 19: ...60 PEM labeled 48V 60 V the lower connectors on the PEM Connect two red RTN return wires from data center RTN to the connectors on the FortiGate 5060 PEM labeled RTN the upper connectors on the PEM 5...

Страница 20: ...power converter shelf with hot swappable power supplies to convert AC power to DC power FortiGate power converter shelves and power supplies are not supplied with the FortiGate 5060 chassis and must b...

Страница 21: ...trays should be lit As well the Status LED on the FortiGate 5060 shelf manager front panel should be lit see Figure 3 on page 11 None of the LEDs on the shelf alarm panel SAP should be lit see Figure...

Страница 22: ...Turning on FortiGate 5060 chassis power Power connection and configuration FortiGate 5060 Chassis Guide 22 01 400 129494 20110912 http docs fortinet com Feedback...

Страница 23: ...t exceed the manufacturer s maximum rated ambient temperature Air flow For rack installation make sure that the amount of air flow required for safe operation of the FortiGate 5060 chassis is not comp...

Страница 24: ...c backplane results in three connections between the FortiSwitch 5003A boards which could also result in FortiGate boards installed in the chassis and operating in Transparent mode to have multiple co...

Страница 25: ...1 or slot 2 provide base backplane switching for all of the FortiGate 5000 series boards installed in the chassis Base backplane switching is usually used for HA heartbeat communication between FortiG...

Страница 26: ...Using FortiSwitch 5003A boards for backplane communication FortiGate 5060 hardware procedures FortiGate 5060 Chassis Guide 26 01 400 129494 20110912 http docs fortinet com Feedback...

Страница 27: ...on two redundant physical buses The shelf manager CLI can be used to communicate with the intelligent management controllers of the shelf with boards and with the Shelf Manager itself The CLI is an I...

Страница 28: ...ccount When you log into the shelf manager CLI you are logging into a Linux shell as root You can begin entering commands at the prompt Changing the shelf manager root account password Use the followi...

Страница 29: ...ommand clia help shelf pwrreorder Pigeon Point Shelf Manager Command Line Interpreter Change the order of FRU Activation and Power Descriptors instead of addr fru_id user may use board N shm N power_s...

Страница 30: ...oard is installed in a slot the slot will have one FRU with an ID of FRU 0 However if a FortiGate 5001A board is installed in a slot with an AMC module this slot has two FRUs FRU 0 and FRU 1 For examp...

Страница 31: ...p ip_address channel is the shelf manager channel and can be 1 or 2 ip_address is the new IP address in dotted decimal notation For example clia setlanconfig 1 ip 192 168 0 2 Display the shelf manager...

Страница 32: ...ress Manually Configured 0x01 MAC Address 00 50 c2 3f f0 9a Subnet Mask 255 255 255 0 IPv4 Header Parameters 0x40 0x40 0x10 Primary RMCP Port Number 0x026f Secondary RMCP Port Number 0x0298 BMC genera...

Страница 33: ...in hexadecimal defined in the IPMI specification Example of sensor type 01 for temperature sensor 02 for voltage sensor C0 FF for OEM reserved sensors F0 is the hot swap sensor and F1 is the IPMB link...

Страница 34: ...ables the ability to clear the critical alarm condition without the alarm cutoff button Default is FALSE ALLOW_CLEARING_CRITICAL_ALARM FALSE If you change ALLOW_CLEARING_CRITICAL_ALARM to TRUE you can...

Страница 35: ...nd easier to use when boards may not include an IPM controller and therefore are not easily addressable using the IPMB address FRU device ID pair Viewing information about a board Enter the following...

Страница 36: ...ll fan FRUs controlled by the IPM controller at the specified address If IPMB_address is also omitted the command displays information about all fan FRUs known to the shelf manager The command display...

Страница 37: ...Hot Swap State M4 Active Previous M3 Activation In Process Last State Change Cause Normal State Change 0x0 Device ID String PPS BMC 20 FRU 1 Entity 0xf2 0x60 Hot Swap State M4 Active Previous M3 Acti...

Страница 38: ...ress that refers to a physical slot to display information similar to that displayed by the clia board command see board on page 35 For example to display information about the board in physical slot...

Страница 39: ...t Tag 0000000000000001 FRU Programmer File ID 21990024AABIN bin Custom Product Info Multi Record Area Record Type 0xc0 OEM Defined Record Version 2 Nothing is known about this PPS record 0x01 Record T...

Страница 40: ...a configuration parameter Table 11 lists some commonly used parameter_names and parameter_numbers Displaying all configuration parameters for a channel If you do not include a parameter_name or param...

Страница 41: ...Shelf Manager Command Line Interpreter Subnet Mask 255 255 255 0 The following command displays the default gateway IP address associated with channel 1 clia getlanconfig 1 dft_gw_ip Pigeon Point Shel...

Страница 42: ...w Data 0xb3 Processed data 1 754200 Volts 88 LUN 0 Sensor 5 CPU2 Voltage Type Threshold 0x01 Voltage 0x02 Lower Non Critical Threshold Raw Data 0x6c Processed data 1 058400 Volts Lower Critical Thresh...

Страница 43: ...0600 Volts Upper Non Critical Threshold Raw Data 0xde Processed data 2 708400 Volts Upper Critical Threshold Raw Data 0xe6 Processed data 2 806000 Volts Upper Non Recoverable Threshold Raw Data 0xee P...

Страница 44: ...w Data 0x85 Processed data 1 303400 Volts Upper Non Recoverable Threshold Raw Data 0x8a Processed data 1 352400 Volts 88 LUN 0 Sensor 12 Incoming Air Flo Type Threshold 0x01 Temperature 0x01 Upper Non...

Страница 45: ...oint Shelf Manager Command Line Interpreter 88 LUN 0 Sensor 13 CPU Board Temp Type Threshold 0x01 Temperature 0x01 Upper Non Critical Threshold Raw Data 0x4b Processed data 75 000000 degrees C Upper C...

Страница 46: ...ile name frudataw s d p l addr fru id file name frudataw s d p l c addr fru id fruinfo addr fru_id getbootdev addr fru id amc addr getconfigparam parameter name getfanlevel addr fru_id getfanpolicy ad...

Страница 47: ...ENABLE DISABLE timeout s addr site_type fru_id site_n umber setfruledstate addr fru_id LedId ALL LedOp tail LedColor setfunctionpolicy EnableDisableMask NetFn CMD channel LUN sethysteresis addr lun s...

Страница 48: ...name flags privilege level password user channel user id channel number flags privilege level user delete user id user enable user id 1 0 user name user id user name user passwd user id user password...

Страница 49: ...el This command displays or sets the minimum fan level Under normal conditions the cooling management algorithm gradually decreases the level for the fans in the chassis while thermal conditions stay...

Страница 50: ...ta in raw and processed if available formats The command sel clear clears the SEL on the specified IPM Controller at IPMB address 20h by default The v option makes the command output more user readabl...

Страница 51: ...x89 0x021A Event at Aug 6 10 39 55 2009 from 0x8c 0 0 sensor 0xf1 1 event 0x6f asserted 0xA2 0x00 0x8F 0x021C Event at Aug 6 10 39 55 2009 from 0x88 0 0 sensor 0xf1 1 event 0x6f asserted 0xA3 0x00 0x8...

Страница 52: ...fied IPM controller If you do not enter any parameters the command displays values of all known sensors The following information is displayed for each sensor IPMB address of the owning IPM controller...

Страница 53: ...reserved If the LUN is omitted the command applies to the sensor with the specified sensor number on the lowest LUN For example if the command specifies sensor 3 without explicit LUN qualification and...

Страница 54: ...ta 90 000000 degrees C shmstatus clia shmstatus v This command displays the Shelf Manager status in redundant configurations Active or Backup In verbose mode using v the command displays more informat...

Страница 55: ...last state change switchover clia switchover force If a chassis has two shelf managers you can enter this command to switch the active shelf manager to running as the backup shelf manager and the back...

Страница 56: ...the channel access information is the same for several channels the output displays the information for the channel number range Adding a user account Use the following command syntax to add a user a...

Страница 57: ...er delete 23 Disabling and enabling user accounts Use the following command syntax to disable and enable user accounts clia user enable user_id 1 0 Where 1 enables the user account and 2 disables the...

Страница 58: ...2 2009 Pigeon Point Systems All rights reserved Build date time Dec 14 2009 10 09 35 Carrier HPDL ACB Carrier subtype 0 subversion 0 Cooling Management Library libcooling_acb so Version 2 6 4 4 Carrie...

Страница 59: ...se when an alert filter matches an event The combination of event filter entry and alert destination are used to select a given Alert String from a set of strings kept in the PEF configuration paramet...

Страница 60: ...entries The syntax of the command is clia setpefconfig event_filter entry_number flter_configuration filter_action alert_policy_number severity IPMB_address channel sensor_type sensor_number event_typ...

Страница 61: ...ddress 82 the first hub slot any channel FF is for the hot swap sensor F0 is for any sensor number FF any sensor offset FF any event type FF and any event offset FF clia setpefconfig event_filter 1 80...

Страница 62: ...PEM B there are three state changes M1 M2 M3 M4 and three traps sent SNMP trap details The trap below could be sent when PEM B state changes from M4 to M6 The important trap fields are the specific t...

Страница 63: ...rises 3183 1 1 1 valueType value 0 value simple 4294967295 simple string value 1 Value Hex STRING 54 FA FC B6 41 50 11 DD 00 80 00 50 C2 3F F0 9A 00 4F 13 C8 C3 75 00 00 20 20 02 20 09 00 00 A6 14 07...

Страница 64: ...t Swap 0xf0 Belongs to entity 0x1e 97 FRU 4 When inserted there are 4 state changes and 4 SNMP traps sent Using the chassis system event log SEL This section document describes the components that mak...

Страница 65: ...ious FRUs report back to their respective IPMC Sensors connected to chassis FRU devices like the fan trays or power entry modules can report back their sensor readings through either IPMC 10h 12h or t...

Страница 66: ...x04 10 event 0x1 asserted Upper Critical Threshold 0xff Reading 0xff Where 0x018D The event ID every new event increments by 1h So the next event in the log file will be tagged with 0x018E You can use...

Страница 67: ...Version 2 2 Hot Swap State M4 Active Previous M3 Activation In Process Last State Change Cause Normal State Change 0x0 20 Entity 0xf0 0x1 Maximum FRU device ID 0x10 PICMG Version 2 2 Hot Swap State M4...

Страница 68: ...tate Change Cause Unknown 0xf 9c Entity 0xa0 0x60 Maximum FRU device ID 0x00 Hot Swap State M7 Communication Lost Previous M4 Active Last State Change Cause Unknown 0xf Example FRU log output clia fru...

Страница 69: ...wap State M4 Active Previous M3 Activation In Process Last State Change Cause Normal State Change 0x0 Device ID String PEM A 20 FRU 7 Entity 0xa 0x61 Hot Swap State M4 Active Previous M3 Activation In...

Страница 70: ...10 LUN 0 Sensor 5 I2C_PWR_B Type Threshold 0x01 Voltage 0x02 Belongs to entity 0xf0 96 FRU 0 10 LUN 0 Sensor 6 VBAT Type Threshold 0x01 Voltage 0x02 Belongs to entity 0xf0 96 FRU 0 10 LUN 0 Sensor 7...

Страница 71: ...25 Belongs to entity 0xf0 96 FRU 0 10 LUN 0 Sensor 128 CPLD State Type Discrete 0x6f OEM reserved 0xde Belongs to entity 0xf0 96 FRU 0 20 LUN 0 Sensor 0 FRU 0 HOT_SWAP Type Discrete 0x6f Hot Swap 0xf0...

Страница 72: ...Entity Presence 0x25 Belongs to entity 0x1e 98 FRU 5 20 LUN 0 Sensor 120 Center Exhaust Type Threshold 0x01 Temperature 0x01 Belongs to entity 0xf0 1 FRU 0 20 LUN 0 Sensor 121 Left Exhaust Type Thresh...

Страница 73: ...r 163 PEM A In 2 Fused Type Discrete 0x6f Entity Presence 0x25 Belongs to entity 0xa 96 FRU 6 20 LUN 0 Sensor 164 PEM A In 1 Type Discrete 0x6f Entity Presence 0x25 Belongs to entity 0xa 96 FRU 6 20 L...

Страница 74: ...Discrete 0x6f Entity Presence 0x25 Belongs to entity 0xa 97 FRU 7 20 LUN 0 Sensor 181 PEM B In 3 Fused Type Discrete 0x6f Entity Presence 0x25 Belongs to entity 0xa 97 FRU 7 20 LUN 0 Sensor 192 PEM A...

Страница 75: ...FRU 3 20 LUN 0 Sensor 214 48B FT 0 Fuse Type Discrete 0x6f Entity Presence 0x25 Belongs to entity 0x1e 96 FRU 3 20 LUN 0 Sensor 215 24V FT 1 Type Discrete 0x6f Entity Presence 0x25 Belongs to entity 0...

Страница 76: ...r 227 48A FT 2 Fuse Type Discrete 0x6f Entity Presence 0x25 Belongs to entity 0x1e 98 FRU 5 20 LUN 0 Sensor 228 48B FT 2 Fuse Type Discrete 0x6f Entity Presence 0x25 Belongs to entity 0x1e 98 FRU 5 86...

Страница 77: ...01 Temperature 0x01 Belongs to entity 0x3 96 FRU 0 86 LUN 0 Sensor 14 CPU1 Temp Type Threshold 0x01 Temperature 0x01 Belongs to entity 0x3 96 FRU 0 Sample sections of SEL Output Shows the active shelf...

Страница 78: ...erted Lower Critical Threshold 0xb3 Reading 0x99 Shows the board in ATCA slot 4 has exceeded the incoming air temperature limit 0x0080 Event at Jan 1 00 25 25 1970 from 0x8e 0 0 sensor 0x01 12 event 0...

Страница 79: ...Fortinet product The documents on this CD are current at shipping time For current versions of Fortinet documentation visit the Fortinet Technical Documentation web site http docs fortinet com Fortine...

Страница 80: ...out prior written permission of Fortinet Inc Trademarks Dynamic Threat Prevention System DTPS APSecure FortiASIC FortiBIOS FortiBridge FortiClient FortiGate FortiGate Unified Threat Management System...

Страница 81: ...For more information Customer service and technical support FortiGate 5060 Chassis Guide 01 400 129494 20110912 81 http docs fortinet com Feedback...

Отзывы: