HP Integrity rx6600, Руководство по установке

Страница: 51 / 84

3. To setup user accounts:
a. Access the MP Main Menu.
b. Enter
CM
at the
MP>
prompt.
c. Enter
UC
at the
MP:CM>
prompt and follow the prompts to modify user accounts.
Setting Up Security
For greater security and reliability, HP generally recommends that iLO 2 MP management traffic
be on a separate dedicated management network and that only administrators be granted access
to that network. This not only improves performance by reducing traffic load across the main
network, it also acts as the first line of defense against security attacks. A separate network allows
administrators to physically control which workstations are connected to the network.
HP also strongly recommends you modify the default settings during the initial logon session and
determine the security access required and what user accounts and privileges are needed. Create
local accounts or use directory services to control user access. See
“Modifying User Accounts and
Default Password” (page 50) .
Security Access Settings
Determine the security access required and what user accounts and privileges are needed. The
iLO 2 MP provides options to control user access. Select one of the following options to prevent
unauthorized access to the iLO 2 MP:
•
Change the default user name and password. See “Modifying User Accounts and Default
Password” (page 50) ).
CAUTION: When DHCP is enabled, the system is vulnerable to security risks because anyone
can access the iLO 2 MP until you change the default user name and password.
HP strongly recommends you assign user groups and rights before proceeding.
•
Create local accounts. You can store up to 19 user names and passwords to manage iLO 2
MP access. This is ideal for small environments such as labs and small-to-medium sized
businesses.
•
Use directory services. Use the corporate directory to manage iLO 2 MP user access. This is
ideal for environments with a large number of frequently changing users. If you plan to use
directory services, HP recommends leaving at least one local account enabled as an alternate
method of access.
Accessing the Host Console
This section provides information on the different methods of accessing the host console of an HP
Integrity server.
Accessing the iLO 2 MP With the Web Browser
Web browser access is an embedded feature of the iLO 2 MP.
The iLO 2 MP has a separate LAN port from the system LAN port. It requires a separate LAN drop,
IP address, and networking information from that of the port used by the operating system.
IMPORTANT: Make sure you use the MAC address to the iLO 2 MP LAN and not the MAC
address to the server core LAN.
Before starting this procedure, you must have the following information:
•
IP address for the iLO 2 MP LAN
•
Host name (this is used when messages are logged or printed)
Accessing the Host Console 51