C H A P T E R 6 - System Configuration Using the WebGUI

C H A P T E R 6

System Configuration Using the WebGUI

This chapter describes how to do system configuration using the WebGUI.

It includes the following sections:

Section 6.1, Setting the ILOM Session Time-Out Period.

Section 6.2, Configuring the ILOM Serial Port.

Section 6.3, Setting the ILOM Clock.

Section 6.4, Configuring Network Settings.

Section 6.5, Uploading a New SSL Certificate.

Section 6.6, Enabling HTTP or HTTPS Web Access.

6.1 Setting the ILOM Session Time-Out Period

This section explains how to set the time-out period for your ILOM session. Once you set the time-out period, if your session is inactive for that amount of time, you will be automatically logged out of the session.

1. Log in to the ILOM as Administrator or Operator to reach the WebGUI.

2. From the System Information tab, select Session Time-Out.

The Session Time-out page appears.

FIGURE 6-1 Session Time-Out Page

Graphic showing session login using an SSH CLI interface.

3. From the drop-down list, select the amount of time for the session time-out period.

4. Click the Apply button.

A confirmation dialog box appears.

5. Click OK in the dialog box.

The session time-out period is set to the selected amount of time. If you exceed the amount of time set for your session, you are automatically logged out of the WebGUI.

6.2 Configuring the ILOM Serial Port

This section explains how to configure the ILOM serial port. Use this procedure only when you need to change the serial port default settings, which are 9600 baud and no flow control.

The serial port provides access to the WebGUI, the command-line interface (CLI), and to the system console stream using serial port redirection.

The internal serial port is the connection between the host server and the ILOM that allows an ILOM user to access the host serial console. The ILOM internal serial port speed must match the speed of the serial console port on the host server, often referred to as serial port 0, COM1, or /dev/ttyS0.

The external serial port is the RJ-45 serial port on the ILOM. Typically the internal and external serial port connections should run at the same speed to avoid flow control issues when connecting to the host console from the ILOM external serial port.

1. Log in to the ILOM as Administrator to reach the WebGUI.

2. From the Configuration tab, select Serial Port.

The Serial Port Settings page appears.

FIGURE 6-2 Serial Port Settings Page

Graphic showing session login using an SSH CLI interface.

3. Select the baud rate for the internal serial port using the Internal Serial Port drop-down list.

This setting must match the setting for serial port 0, COM1 or /dev/ttyS0 on the host operating system.

The baud rate value must match the speed that was specified for the BIOS serial redirection feature (default is 9600 baud) and the speed used for the boot loader and operating system configuration.

4. Select the baud rate for the external serial port using the External Serial Port drop-down list.

This setting must match the baud rate on the RJ-45 serial port on the Sun server.

5. Click the Save button for your changes to take effect, or click the Cancel button to return to the previous settings.

6.3 Setting the ILOM Clock

This section explains how to set the ILOM clock manually or to synchronize the ILOM date and time with a Network Time Protocol (NTP) server.

The ILOM clock is described in Section 5.7.1, Interpreting the System Event Log (SEL) Time Stamps.

Before you begin, obtain IP addresses of the NTP servers you want to use.

6.3.1 Setting the ILOM Clock Manually

1. Log in to the ILOM as Administrator to reach the WebGUI.

2. From the Configuration tab, select Clock Settings.

The Clock Settings page appears.

FIGURE 6-3 Clock Settings Page

Graphic showing session login using an SSH CLI interface.

3. Type a date in the Date text box.

Type the date in the format mm/dd/yyyy.

4. Set the hour and minute using the drop-down lists.

5. Click the Save button for your changes to take effect.

6.3.2 Synchronizing the ILOM Clock with an NTP Server:

1. Log in to the ILOM as Administrator to reach the WebGUI.

2. From the Configuration tab, select Clock Settings.

The Clock Settings page appears. See FIGURE 6-3.

3. Click the Enable check box next to Synchronize Time Using NTP.

4. Type the IP addresses of the NTP servers you want to use.

5. Click the Save button for your changes to take effect.

6.3.3 Interpreting ILOM Clock Settings

When the ILOM reboots, the ILOM clock is set to Thu Jan 1 00:00:00 UTC 1970. The ILOM reboots as a result of the following:

A complete system unplug/replug power cycle

An IPMI command; for example, mc reset cold

A command-line interface (CLI) command; for example, reset /SP

WebGUI operation; for example, from the Maintenance tab, select Reset SP

An ILOM firmware upgrade

Note - Log event timestamps might appear different between host and client systems because of time zone adjustment.

The timestamps on events reported in the server's system event log and IPMI logs are always based on GMT/UTC. However, when you view system information from a client system using the GUI or IPMItool, the timestamps displayed are adjusted based on the time zone of the client system. Therefore, the same event can appear to have two different timestamps when viewed directly from the host and from a client system in a different time zone.

After an ILOM reboot, the ILOM clock is changed by the following:

When the host is booted - The host's BIOS unconditionally sets the ILOM time to that indicated by the host's RTC. The host's RTC is set by the following operations:

When the host's CMOS is cleared as a result of changing the host's RTC battery or inserting the CMOS-clear jumper on the motherboard. The host's RTC starts at Jan 1 00:01:00 2002.

When the host's operating system sets the host's RTC. The BIOS does not consider time zones. Solaris and Linux software respect time zones and will set the system clock to UTC. Therefore, after the OS adjusts the RTC, the time set by the BIOS will be UTC. Microsoft Windows software does not respect time zones and sets the system clock to local time. Therefore, after the OS adjusts the RTC, the time set by the BIOS will be local time.

When the user sets the RTC using the host BIOS Setup screen.

Continuously through NTP if NTP is enabled on the ILOM - NTP jumping is enabled to recover quickly from an erroneous update from the BIOS or user. NTP servers provide UTC time. Therefore, if NTP is enabled on the ILOM, the ILOM clock will be in UTC.

Through the CLI, WebGUI, and IPMI

6.4 Configuring Network Settings

This section explains how to configure the network parameters for the ILOM.

The ILOM automatically configures its IP settings using the Dynamic Host Configuration Protocol (DHCP). If your network does not support this protocol, you need to set the parameters manually.

1. Log in to the ILOM as Administrator to reach the WebGUI.

2. From the Configuration tab, select Network.

The Network Settings page appears.

FIGURE 6-4 Network Settings Page

Graphic showing network settings page.

3. Complete the information in the Network Settings page.

Use the descriptions in TABLE 6-1 when completing the information.

TABLE 6-1 Network Settings Page Fields
Item	Description
MAC Address	The ILOM's media access control (MAC) address is set at the factory. The MAC address is a hardware address that is unique to each networked device. The ILOM's MAC address is provided on a label on the ILOM, on the Customer Information Sheet included on the ship kit, and in the BIOS Setup screen.
Configuration Method	Select one of the following radio buttons to configure the ILOM's IP address either dynamically or statically. Obtain an IP Address Automatically (Use DHCP) - Enables a DHCP server to configure the ILOM's IP address dynamically. Use the Following IP Address - Enables you to configure the ILOM's IP address with a static IP. The IP Address, Subnet Mask, and Default Gateway fields will become editable when you select this option.
IP Address	Type the ILOM's IP address. The IP address is a unique name that identifies the system on a TCP/IP network.
Subnet Mask	Type the subnet mask of the network on which the ILOM resides.
Default Gateway	Type the ILOM's gateway access address.

4. Click the Save button for your settings to take effect.

Settings are considered pending until you click the Save button. Changing the IP address will end your ILOM session.

You are prompted to close your Internet browser.

5. Log back in to the ILOM using the new IP address.

Note - If you changed the network settings, you must log back in with a new browser session.

6.5 Uploading a New SSL Certificate

This section explains how to upload a Secure Sockets Layer (SSL) certificate and SSL private key to use when accessing the ILOM.

To establish a secure HTTPS connection to the ILOM, you must upload an SSL certificate and a private key into the ILOM. These two together help provide a secure connection to the correct server when using HTTPS. Ensure that the uploaded SSL certificate and private key match. If they do not match, secure access may not work properly.

1. Log in to the ILOM as Administrator to reach the WebGUI.

2. From the Configuration tab, select System Management Access, then select SSL Certificate.

The SSL Certificate Upload page appears.

FIGURE 6-5 SSL Certificate Upload Page

Graphic showing SSL certificate upload page.

3. Type the file name of the new SSL certificate or click the Browse button to search for a new SSL certificate.

The file name has a .pem file extension. The ILOM does not support pass-phrase encrypted certificates.

4. Click the Upload button to upload the selected SSL certificate.

The SSL Certificate Upload Status dialog appears.

5. Once you have uploaded the certificate and private key, click the OK button to reset the ILOM immediately, or click the Cancel button to reset the ILOM later.

The ILOM must be reset for the new certificate to take effect. If you click OK, you must close your Internet browser and reconnect to the ILOM. HTTPS is enabled by default.

You can now access the ILOM securely using the following format in your IP Address field from your Internet browser:

https://<ILOM IP address>

For example, if the ILOM's IP address is 192.168.0.30, type the following:

https://192.168.0.30

Note - Ensure that you include the "s" after http.

6.6 Enabling HTTP or HTTPS Web Access

This section explains how to view and modify web server settings. Hypertext Transfer Protocol (HTTP) and Hypertext Transfer Protocol Secure (HTTPS) enable you to retrieve hypertext messages from client to server and server to client. Both protocols are based on the Transmission Control Protocol/Internet Protocol (TCP/IP). HTTPS is an extension of HTTP that uses Secure Sockets Layer (SSL) to enable secure transmissions over a TCP/IP network. HTTPS is enabled by default.

1. Log in to the ILOM as Administrator to reach the WebGUI.

2. From the Configuration tab, select System Management Access, then select Web Server.

The Web Server Settings page appears.

FIGURE 6-6 Web Server Settings Page

Graphic showing web server settings page.

3. Select the HTTP or HTTPS web server.

To select an HTTP web server - Select Enabled from the drop-down list. You can also select:

Redirect HTTP Connection to HTTPS. HTTP connnections are automaticaly redirected to HTTPS.

Disabled - Turn HTTP off.

To select an HTTPS web server - Select the HTTPS Web Server Enabled check box.

The HTTPS web server is enabled by default.

4. Assign an HTTP or HTTPS port number.

5. Click the Save button for your settings to take effect.