Oracle Integrated Lights Out Manager (ILOM) 3.0 Concepts Guide Table Of ContentsPrevious ChapterNext ChapterBook Index

C H A P T E R  1
ILOM Overview

Topics

Description

Links

Learn about ILOM features and functionality



Related Topics

For ILOM

Chapter or Section

Guide

  • CLI
  • CLI Overview
  • Logging In to and Out of ILOM

Oracle Integrated Lights Out Manager (ILOM) 3.0 CLI Procedures Guide
(820-6412)

  • Web interface
  • Web Interface Overview
  • Logging In to and Out of ILOM

Oracle Integrated Lights Out Manager (ILOM) 3.0 Web Interface Procedures Guide (820-6411)

  • SNMP and IPMI hosts
  • SNMP Overview
  • IPMI Overview

Oracle Integrated Lights Out Manager (ILOM) 3.0 Management Protocols Reference Guide (820-6413)

The ILOM 3.0 Documentation Collection is available at: http://docs.sun.com/app/docs/prod/int.lights.mgr30#hic


What Is ILOM?

Oracle’s Integrated Lights Out Manager (ILOM) provides advanced service processor hardware and software that you can use to manage and monitor your Oracle Sun servers. ILOM’s dedicated hardware and software is preinstalled on a variety of Oracle Sun server platforms, including x86-based Sun Fire servers, Sun Blade modular chassis systems, Sun Blade server modules, as well as on SPARC-based servers. ILOM is a vital management tool in the data center and can be used to integrate with other data center management tools already installed on your systems.

ILOM is supported on many Oracle systems enabling users to experience a single, consistent, and standards-based service processor (SP) across all Oracle Sun server product lines. This means you will have:

What Does ILOM Do?

ILOM enables you to actively manage and monitor the server independently of the operating system state, providing you with a reliable Lights Out Management (LOM) system. With ILOM, you can proactively:

The ILOM service processor (SP) runs its own embedded operating system and has a dedicated Ethernet port, which together provide out-of-band management capability. In addition, you can access ILOM from the server’s host operating system (Solaris, Linux, and Windows). Using ILOM, you can remotely manage your server as if you were using a locally attached keyboard, monitor, and mouse.

ILOM automatically initializes as soon as power is applied to your server. It provides a full-featured, browser-based web interface and has an equivalent command-line interface (CLI). There is also an industry-standard SNMP interface and IPMI interface.

You can easily integrate these management interfaces with other management tools and processes that you might have working already with your servers, such as Oracle Enterprise Ops Center. This easy-to-use system management platform for Solaris and Linux provides the tools that you need to efficiently manage systems on your network. Oracle Enterprise Ops Center can discover new and existing systems on your network, update firmware and BIOS configurations, provision the operating environment with off-the-shelf distributions or Solaris images, manage updates and configuration changes, and remotely control key aspects of the service processor such as boot control, power status, and indicator lights. For more information about Oracle Enterprise Ops Center, go to:

http://www.oracle.com/us/products/enterprise-manager/opscenter/index.html

In addition, you can integrate ILOM with these third-party management tools:

A description of these third-party system management tools and their support for Oracle’s Sun systems is available at:

http://www.sun.com/system-management/tools.jsp

ILOM Features and Functionality

ILOM offers a full set of features, functions, and protocols that will help you monitor and manage your server systems.


TABLE 1-1 ILOM Features and Functionality

ILOM Feature

What You Can Do

Dedicated service processor and resources

  • Manage the server without consuming system resources
  • Continue to manage the server using standby power even when the server is powered-off

Simple ILOM initial configuration

  • Manual SP configuration, including IP address, through BIOS interface, serial or Ethernet SP ports, or host OS

Downloadable firmware updates

  • Download firmware updates via browser-based web interface

Remote hardware monitoring

  • Monitor system status and event logs
  • Monitor customer-replaceable units (CRUs) and field-replaceable units (FRUs), including power supplies, fans, host bus adapters (HBAs), disks, CPUs, memory, and motherboard
  • Monitor environmentals (component temperatures)
  • Monitor sensors, including voltage and power
  • Monitor indicators (LEDs)

Hardware and FRU inventory and presence

  • Identify installed CRUs and FRUs and their status
  • Identify part numbers, versions, and product serial numbers
  • Identify NIC card MAC addresses

Remote Access

  • Redirect the system serial console via serial port and LAN
  • Access keyboard, video, and mouse (KVM) on remote x86 systems and on some SPARC systems
  • Redirect the OS graphical console to a remote client browser
  • Connect a remote CD/DVD/floppy to the system for remote storage

System power control and monitoring

  • Power the system on or off, either locally or remotely
  • Force power-off for emergency shutdown or perform a graceful shutdown to shut down the host operating system before power off

Configuration and management of user accounts

  • Configure local user accounts
  • Authenticate user accounts using LDAP, LDAP/SSL, RADIUS, and Active Directory

Error and fault management

  • Monitor system BIOS, POST, and sensor messages
  • Log events in a consistent method for all “service” data
  • Monitor hardware and system-related errors, as well as ECC memory errors, reported into SP logs, syslog, and remote log-host

System alerts, including SNMP traps, IPMI PETs, remote syslog, and email alerts

  • Monitor components using industry-standard SNMP commands and the IPMItool utility.

New Features in ILOM 3.0

ILOM 3.0 is enhanced with many new features and functions that were not available in ILOM 2.x, including improved security, improved usability, and easier integration into your data center environment. TABLE 1-2 lists new features for ILOM 3.0.


TABLE 1-2 ILOM 3.0 New Features

Category

Feature

General Functionality

 

DNS support

 

Timezone support

 

Configuration backup and restore

 

Restore to factory defaults

 

Enhanced LDAP and LDAP/SSL support

 

Java-based remote storage CLI

 

Power management capabilities

 

Ability to generate new SSH keys

Scalability and Usability

 

User-configurable filtering of hardware monitoring information in CLI and web interface

 

Use host name to access other services by name, such as LDAP, Active Directory, LDAP/SSL

Security

 

More granular user roles

 

Predefined root and default accounts

 

User SSH key authentication

 

Ability to disable the network management port when you are using only the serial port

 

Ability to disable individual services, such as IPMI, SSH, and KVMS, so that the port is closed

Serviceability

 

Data collection utility to diagnose system problems


Roles for ILOM User Accounts

For ILOM 3.0, user roles are implemented to control user privileges. However, for backward compatibility, ILOM 2.x style user accounts (which have either Administrator or Operator privileges) are still supported.

For more information about ILOM 3.0 user roles, see ILOM 3.0 User Account Roles.

Support for ILOM 2.x User Accounts

For backward compatibility, ILOM 3.0 supports ILOM 2.x user accounts such that users with ILOM 2.x Administrator or Operator privileges are granted ILOM 3.0 roles that match those privileges. TABLE 1-3 lists the roles assigned to users with Administrator and Operator privileges.


TABLE 1-3 ILOM 3.0 Roles Granted to ILOM 2.x User Accounts

2.x User Privileges

ILOM 3.0 User Roles Granted

Administrator

Admin (a), User Management (u), Console (c), Reset and Host Control (r), and Read Only (o)

Operator

Console (c), Reset and Host Control (r), and Read Only (o)

Note - To make the level of authorization granted to users with Operator privileges consistent with 2.x capabilities, the Console (c) role granted in this case is modified to prohibit the user from accessing the ILOM Remote Console (JavaRConsole).


ILOM Interfaces

To access all of ILOM’s features and functions, you can choose to use a browser-based web interface, a command-line interface, or industry-standard protocols. For more information on ILOM interfaces, see the Overview chapters in the ILOM 3.0 Procedures Guides.

ILOM supports multiple interfaces for accessing its features and functions. You can choose to use a browser-based web interface, a command-line interface, or industry-standard protocols.

For more information about using IPMI to monitor or manage your Oracle Sun system, see the Oracle Integrated Lights Out Manager (ILOM) 3.0 Management Protocols Reference Guide.

For more information about WS-Management/CIM, see the Oracle Integrated Lights Out Manager (ILOM) 3.0 Management Protocols Reference Guide.

For a complete list of SNMP MIBs supported and used by ILOM, see the Oracle Integrated Lights Out Manager (ILOM) 3.0 Management Protocols Reference Guide.

ILOM on the Server and CMM

ILOM supports two ways of managing a system: using the SP directly or using the chassis monitoring module (CMM), if you are using a modular chassis system.

Access and Initial Login to ILOM

You can access ILOM 3.0 from a browser interface or Secure Shell (SSH) client using either an IPv4 address, IPv6 address, or a DNS hostname. For detailed information on logging in to ILOM for the first time using the root user account, see the following guides:

root and default User Accounts

ILOM 3.0 provides two preconfigured accounts: the root user account and the default user account. You will use the root account for initial login to ILOM. This root user account will be familiar to users who are migrating from ILOM 2.x to ILOM 3.0 and who know how to log in using the root user account. The default user account is a new feature in ILOM 3.0 that is used for password recovery.

root User Account

The root user account is persistent and is available on all interfaces (web interface, CLI, SSH, serial console, and IPMI) unless you choose to delete the root account. The root account provides built-in administrative privileges (read and write) for all ILOM features, functions, and commands.

To log in to ILOM, use the following root account user name and password:

User name: root

Password: changeme

To prevent unauthorized access to your system, you should change the root password (changeme) on each service processor (SP) or chassis monitoring module (CMM) installed in your system. Alternatively, you can delete the root account to secure access to your system. However, before you delete the root account, you must set up a new user account or configure a directory service so that you will be able to log in to ILOM.

default User Account

The default user account is used for password recovery. The default user account is available through the serial console only and you must prove physical presence at the server to use the default user account. The default user account cannot be changed or deleted.

If you delete the root account before you have configured another user account to log in to ILOM, you can use the default account as an alternative way to log in and re-create the root account. To re-create the root user account, use the normal ILOM user commands to create a new account. For information about how to create a user account, see the section about Add User Account and Assign Privileges in either the web interface or CLI section of the Oracle Integrated Lights Out Manager (ILOM) 3.0 Getting Started Guide.

For password recovery, use the following user name and password to log in using the default account:

User name: default

Password: defaultpassword

root Factory Default Password Warning Message

As of ILOM 3.0.6, when the root password in ILOM is set to the factory default, a warning will appear on the ILOM CLI and web interface.

For example:


Root password mouse-over warning text.


Root password warning text dialog.


Root password warning text in CLI.

System Banner Messages

As of ILOM 3.0.8, system administrators can create banner messages and display them on the Login page or immediately after logging in to ILOM.

Creating and displaying banner messages in ILOM is optional. However, system administrators can use this capability whenever there is a need to share information about system updates, system policies, or other important announcements. Examples of where (Login page or after login) the banner message appear in ILOM after they have been created are shown in FIGURE 1-1, FIGURE 1-2, and FIGURE 1-3.

For instructions on how to create the banner messages in ILOM, see the following guides:

FIGURE 1-1 Login Page - Connect Banner Example - Web Interface


Login page banner example.

FIGURE 1-2 After Logging In - Banner Message Example - Web Interface


Banner example after login.

FIGURE 1-3 Banner Message Example - CLI


CLI banner example.



Oracle Integrated Lights Out Manager (ILOM) 3.0 Concepts Guide 820-6410-12 Table Of ContentsPrevious ChapterNext ChapterBook Index

Copyright © 2010, Oracle and/or its affiliates. All rights reserved.