C H A P T E R  6

Managing the ILOM Using the CLI

This chapter describes how to use the ILOM's Command-Line Interface (CLI). The sections include:


6.1 Configuring the Serial Port

You can display or configure the ILOM serial port settings from the CLI. The ILOM has two serial ports: an internal host port that interfaces directly with the host server using the start /SP/console command, and an external port that is exposed on the back of the server.

6.1.1 Displaying Serial Port Settings

Type the following command to display settings for the external serial port:

show /SP/serial/external

Type the following command to display settings for the host serial port:

show /SP/serial/host

6.1.2 Configuring Serial Port Settings

Use the set command to change properties and values for serial port settings. Port settings have two sets of properties: pending and active. The active settings are the settings currently in use by the ILOM. These settings are read-only. If you want to change settings, enter the updated settings as the pending settings, then set the commitpending property to true. This prevents accidental disconnections for both port and network settings.

6.1.2.1 Syntax

set target [propertyname=value]

6.1.2.2 Targets, Properties, and Values

The following targets, properties, and values are valid for ILOM serial ports.


TABLE 6-1 Valid Targets, Properties, and Values for ILOM Serial Ports

Target

Property

Value

Default

/SP/serial/external

commitpending

flowcontrol

pendingspeed

speed

true|(none)

none

<decimal>

9600

(none)

none

9600

9600

/SP/serial/host

commitpending

pendingspeed

speed

true|(none)

<decimal>

9600

(none)

(none)

9600


Example

To change the speed (baud rate) for the host serial port from 9600 to 57600, type:

-> set /SP/serial/host pendingspeed=57600 commitpending=true



Note - The speed of the host serial port must match the speed setting for serial port 0, COM1, or /dev/ttys0 on the host operating system for the ILOM to communicate properly with the host.




6.2 Configuring ILOM Network Settings

You can display or configure the ILOM network settings from the CLI.

6.2.1 Displaying Network Settings

Type the following command to display network settings:

show /SP/network

6.2.2 Configuring Network Settings

Use the set command to change properties and values for network settings.

Network settings have two sets of properties: pending and active. The active settings are the settings currently in use by the ILOM. These settings are read-only. If you want to change settings, enter the updated settings as the pending settings (pendingipaddress or pendingipgateway), then set the commitpending property to true. This prevents accidental disconnections for both port and network settings.



Note - Ensure that the same IP address is always assigned to an ILOM by either assigning a static IP address to your ILOM after initial setup, or configuring your DHCP server to always assign the same IP address to an ILOM. This enables the ILOM to be easily located on the network.



6.2.2.1 Syntax

set target [propertyname=value]

6.2.2.2 Targets, Properties, and Values

The following targets, properties, and values are valid for ILOM network settings.


TABLE 6-2 ILOM Network Targets, Properties, and Values

Target

Property

Value

Default

/SP/network

ipaddress

ipdiscovery

ipgateway

ipnetmask

These read only values are updated by the system

 

 

macaddress

MAC address of ILOM

 

 

commitpending

pendingipaddress

pendingipdiscovery

pendingipgateway

pendingipnetmask

true|(none)

<ipaddress|none>

dhcp|static

<ipaddress|none>

<ipdotteddecimal>

(none)

none

dhcp

none

255.255.255.255


Examples

To change the IP address for the ILOM, type:

-> set /SP/network ipaddress=nnn.nn.nn.nn commitpending=true



Note - Changing the IP address disconnects your active session if you are connected to the ILOM via a network.



To change the network settings from DHCP to static assigned settings, type:

-> set /SP/network pendingipdiscovery=static pendingipaddress=nnn.nn.nn.nn pendingipgateway=nnn.nn.nn.nn pendingipnetmask=nnn.nn.nn.nn commitpending=true


6.3 Setting the ILOM Clock

You can display clock settings or configure your clock to synchronize with one or two Network Time Protocol (NTP) servers. If you do not configure an NTP server, the time is set by the system BIOS.

6.3.1 Displaying Clock Settings

Type the following command to display clock settings:

show /SP/clock

6.3.2 Configuring the Clock to Use NTP Servers

Use the set command to change properties and values for NTP servers.

6.3.2.1 Syntax

set target [propertyname=value]

6.3.2.2 Targets, Properties, and Values

The following targets, properties, and values are valid for NTP servers.


TABLE 6-3 Valid Targets, Properties, and Values for NTP Servers

Target

Property

Value

Default

/SP/clients/ntp/server/1

address

ipaddress

(none)

/SP/clients/ntp/server/2

address

ipaddress

(none)


Example

To configure your clock to synchronize with an NTP server, type:

-> set /SP/clients/ntp/server/1 address=125.128.84.20

Then enable the NTP service by typing:

-> set /SP/clock/usentpserver=enabled



Note - Once you enable the NTP service, it can take up to five minutes for the clock to synchronize.



6.3.3 Interpreting ILOM Clock Settings

When the ILOM reboots, the ILOM clock is set to Thu Jan 1 00:00:00 UTC 1970. The ILOM reboots as a result of the following:



Note - Log event timestamps might appear different between host and client systems because of time zone adjustment.

The timestamps on events reported in the server's system event log and IPMI logs are always based on GMT/UTC. However, when you view system information from a client system using the GUI or IPMItool, the timestamps displayed are adjusted based on the time zone of the client system. Therefore, the same event can appear to have two different timestamps when viewed directly from the host and from a client system in a different time zone.



After an ILOM reboot, the ILOM clock is changed by the following:


6.4 Resetting the ILOM

To reset the ILOM using the CLI, type reset /SP.


6.5 Resetting the ILOM and BIOS Passwords

This procedure causes the ILOM to reset the administration password and to clear the BIOS password.

This procedure requires changing a hardware jumper in your server enclosure. See your service manual for details.


6.6 Updating the ILOM Firmware

You can use CLI to update the ILOM firmware. Updating the ILOM from the command line enables you to update both the ILOM firmware and the BIOS at the same time. See Section A.2.6, Using the load Command for more information.



Caution - Ensure that you have reliable power before upgrading your firmware. If power to the system fails (for example, if the wall socket power fails or the system is unplugged) during the firmware update procedure, the ILOM could be left in an unbootable state.





Caution - Shut down your host operating system before proceeding. Otherwise the ILOM will shut the host down ungracefully, which could cause filesystem corruption.





Note - The upgrade takes about five minutes. During this time, no other tasks can be performed in the ILOM.



1. If the server OS is running, perform a clean shutdown.

2. Type the following command to update the ILOM firmware:

load -source URL



Note - A network failure during the file upload results in a time-out. This causes the ILOM to reboot with the prior version of the ILOM firmware.



Example:

 -> load -source tftp://archive/newmainimage
Are you sure you want to load the specified file (y/n)? y
File upload is complete.
Firmware image verification is complete.
Do you want to preserve the configuration (y/n)? n
Updating firmware in flash RAM: 
.
Firmware update is complete.
ILOM will not be restarted with the new firmware.


6.7 Enabling HTTP or HTTPS Web Access

The ILOM allows you to enable HTTP or HTTPS, and it allows you to automatically redirect HTTP access to HTTPS. It also allows you to set the HTTP and HTTPS ports.

The properties are located in /SP/services/http and /SP/services/https.

Use the set command to change properties and values as follows:


TABLE 6-4 Values for HTTP and HTTPS Settings

Desired State

Target

Values

Enable HTTP only

HTTP

securedirect=enabled

 

HTTP

servicestate=disabled

 

HTTPS

servicestate=disabled

Enable HTTP and HTTPS

HTTP

securedirect=disabled

 

HTTP

servicestate=enabled

 

HTTPS

servicestate=enabled

Enable HTTPS only

HTTP

securedirect=disabled

 

HTTP

servicestate=disabled

 

HTTPS

servicestate=enabled

Automatically redirect HTTP to HTTPS

HTTP

securedirect=enabled

 

HTTP

servicestate=disabled

 

HTTPS

servicestate=enabled


6.7.0.1 Targets, Properties, and Values

The following table shows the properties and values for HTTP and HTTPS.


TABLE 6-5 Valid Targets, Properties, and Values for HTTP and HTTPS

Target

Property

Value

Default

/SP/services/http

securedirect

enabled|
disabled

 

enabled

 

servicestate

enabled|
disabled

disabled

 

port

<portnum>

80

/SP/services/https

servicestate

enabled|
disabled

enabled

 

port

<portnum>

443



6.8 Viewing ssh Settings

Use the show command to view ssh settings. These are read-only values that you can display but not write.

TABLE 6-6 shows the valid targets and properties for ssh values.


TABLE 6-6 Valid Targets and Properties for ssh

Target

Property

/SP/services/ssh/keys/dsa

fingerprint

length

publickey

/SP/services/ssh/keys/rsa

fingerprint

length

publickey


Use the show command to enter dsa or rsa values.

Example:

 -> show /SP/services/ssh/keys/dsa
 
 /SP/services/ssh/keys/dsa
    Targets:
 
    Properties:
        fingerprint = f7:49:85:b0:e3:65:c0:d0:96:48:06:f5:8c:b7:9c:6b
        length = 1024
        publickey = AAAAB3NzaC1kc3MAAACBAKh+LPnkehPiIou96JraqiZ7qjJ4KTc4DdNJ3ZkBZ94XKrz2B5BNROCL7h4Gb7uAaMZEgtpPqefKy5awEvkA8jNyL5P=
 
    Commands:
        cd
        show
 
-> 


6.9 Displaying ILOM Information

You can display active sessions, current versions, and other information about the ILOM using the CLI. TABLE 6-7 shows the commands and the information they display.


TABLE 6-7 Commands to Display ILOM Information

Command

Information Displayed

version

The current ILOM version

show /SP/cli/commands

All the CLI commands

show /SP/sessions

All active sessions

help targets

Available valid targets


6.9.1 Displaying Version Information

Type the following command to display the current ILOM version:

version

For example:


-> version
SP firmware 1.1.1
SP firmware build number: r14021
SP firmware date: Fri Oct 13 21:18:44 PDT 2006
SP filesystem version: 0.1.14
 
-> 

6.9.2 Displaying Available Targets

Type the following command to display the available valid targets:

help targets