Avocent MERGEPOINT SP MANAGER Installation and maintenance instructions

MERGEPOINT® SP MANAGER
Installer/User Guide

European Union Notification
WARNING: This is a class A product. In a domestic environment this product may cause
radio interference in which case the user may be required to take adequate measures.
USA Notification
WARNING: Changes or modifications to this unit not expressly approved by the party
responsible for compliance could void the user’s authority to operate the equipment.
NOTE: This equipment has been tested and found to comply with the limits for a Class A
digital device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide
reasonable protection against harmful interference when the equipment is operated in a
commercial environment. This equipment generates, uses and can radiate radio frequency
energy and, if not installed and used in accordance with the instruction manual, may cause
harmful interference to radio communications. Operation of this equipment in a residential
area is likely to cause harmful interference, in which case the user will be required to correct
the interference at his/her own expense.
Canadian Notification
This Class A digital apparatus complies with Canadian ICES-003.
Cet appareil numérique de la classe A est conforme à la norme NMB-003 du Canada.
Japanese Notification
Korean Notification

MergePoint® SP Manager
Installer/User Guide
Avocent, the Avocent logo, The Power of Being There, DSView and MergePoint are
registered trademarks of Avocent Corporation or its affiliates in the U.S. and other
countries. All other marks are the property of their respective owners.
© 2010 Avocent Corporation. 590-989-501C

Instructions
This symbol is intended to alert the user to the presence of important operating and
maintenance (servicing) instructions in the literature accompanying the appliance.
Dangerous Voltage
This symbol is intended to alert the user to the presence of uninsulated dangerous
voltage within the product’s enclosure that may be of sufficient magnitude to constitute
a risk of electric shock to persons.
Power On
This symbol indicates the principal on/off switch is in the on position.
Power Off
This symbol indicates the principal on/off switch is in the off position.
Protective Grounding Terminal
This symbol indicates a terminal which must be connected to earth ground prior to
making any other connections to the equipment.

T A B L E  OF  C ON T E N T S
Product Overview 1
Features and Benefits 1
Supported SPs 2
MergePoint SP5x00 Manager Configuration 3
LEDs on the MergePoint SP5x00 manager 4
MergePoint SP5x24/SP5x40 Manager Configuration 5
Safety Precautions 6
Rack mount safety considerations 8
Cabling installation, maintenance and safety tips 8
Installation and Setup 11
Configuring Power for the MergePoint SP manager 11
Connecting to the Network 13
Configuring the MergePoint SP Manager Basic Settings 13
Activating the MergePoint SP5x00 Manager License 15
Adding the MergePoint SP Manager to a DSView 3 SoftwareInstallation 16
MergePoint SP Manager Configuration Wizard 16
Saving the wizard settings in a config file 17
Modifying the config file settings (Admin users only) 17
Configuring the MergePoint SP Manager Network Settings 19
Ethernet ports on the MergePoint SP5x00 manager 19
Ethernet ports on the MergePoint SP5x24/SP5x40 manager 20
Configuring MergePoint SP5x00 manager network settings 21
Configuring MergePoint SP5x24/SP5x40 manager network settings 22
Private Subnets on the MergePoint SP5x24/SP5x40 Manager 24
Firewall/Packet Filtering 25
Chains 25
Rules 25
BMC Provisioning (IPMI Targets Only) 26
Starting or stopping the BMC provisioning service (Admin users only) 27
Configuring PXE parameters for IPMI BMC provisioning (Admin users only) 27
iii

BMC log 29
Managing MergePoint SP Manager User Accounts 29
DHCP on the MergePoint SP Manager 32
Service Processor Licenses 33
Automatically Manage SPs 34
Discovering and Adding SPs (Admin Users Only) 34
Manually Adding a Single SP 36
Adding blade chassis and blades 37
Managed and Unmanaged SP Lists (Admin users only) 38
Managing SP Groups (Admin users only) 40
Managing SP Profiles (Admin users only) 41
Managing Default Users (Admin users only) 43
Managing user accounts on SPs 45
Configuring the MergePoint SP Manager System Settings (Admin Users Only) 46
Completing the MergePoint SP Manager Installation 48
Operations 49
Using the MergePoint SP Manager 49
MergePoint SP manager web interface 49
Remote Power and Chassis Management 51
Performing SP Group Operations 53
Monitoring and Management 55
Viewing sensor status 55
Viewing SEL events 55
Viewing IML events 56
Viewing the accounting log 56
Import/export data 57
Accessing FRU information 57
Using the Alerts Viewer 58
Syslog 60
Configuring PET alerts 62
iv MergePoint® SP Manager Installer/User Guide

Schedules 62
Schedule a task (Admin users only) 62
SNMP Access 63
Configuring SNMP on the MergePoint SPmanager 64
Configuring SNMP on the service processor 66
SP Operations 68
Viewing SP information 69
Synchronizing blades for a blade chassis 69
Changing the SoL port number 69
Changing the access account of an SP 70
Changing SP parameters 70
Accessing system information 71
Recovering provisioning 71
Changing LAN parameters 72
Host table 72
Static routes 73
Configuring SoL parameters 74
NFS 74
Remote Control 75
Diagnostics 75
Appliance Operations 76
MergePoint SP manager sessions 76
Firmware version and upgrade 76
Boot configuration for the MergePoint SP5x24/SP5x40 manager 77
Unbinding the MergePoint SP manager from the DSView 3 server 78
SP Sessions and Connections 79
System Sessions 79
Active sessions 80
SoL Sessions 81
SP Console Sessions 82
Table of Contents v

Telnet Sessions 82
SSH Sessions 83
Choosing DirectCommand Sessions or Native IP Connections 83
DirectCommand Sessions 86
Native IP Connections 89
Native IP operations using the web interface 90
Native IP operations using SSH Commands 92
Configuring External Authentication Services 95
Configuring a Kerberos Authentication Server 96
Configuring an LDAP Authentication Server 97
Configuring an NIS Authentication Server 98
Configuring a RADIUS Authentication Server 98
Configuring an SMB Authentication Server 99
Configuring a TACACS+ Authentication Server 100
Configuring an Authentication Method for the MergePoint SP Manager 100
Administration Tasks Not Performed in the Web Interface 103
Using MindTerm to Create an SSH Tunnel 103
Using SSH with the MergePoint SP Manager 104
The SSH command line format 104
User shell 105
MgpShell 106
SSH Passthrough 106
SSH Passthrough commands 106
Telnet 108
Displaying the MergePoint SP Manager Firmware Version 108
Configuring the Users’ Console Login Menu 108
Configuring Routes With CLI 110
Backing Up Configuration Files 111
Restoring backed up configuration files 111
Restoring factory default configuration files 112
vi MergePoint® SP Manager Installer/User Guide

Shutting down the MergePoint SP Manager 112
Configuring Groups for Use with Authentication Servers 112
Configuring group authorization for LDAP authentication 113
Configuring group authorizations on an AD server 113
Defining groups on an LDAP server running OpenLDAP 115
Configuring group authorization for RADIUS authentication 116
Configuring group authorization for TACACS+ authentication 118
Using the CLI Utility 121
CLI Utility Overview 121
Execution Modes 121
Command line mode 121
Interactive mode 122
Batch mode 122
CLI Options 122
CLI Parameters and Arguments 123
Entering a command in interactive mode 124
Entering a command in command code 124
Entering a command in batch mode 124
Autocompletion 125
CLI Commands 126
add 126
cd 131
commit 132
delete 132
get | show 132
list 133
quit | exit 134
quit! 134
rename 134
set 135
Table of Contents vii

shell 135
revert 136
version 136
Summary of How to Configure the Top Level Parameters 136
Using SMASH Command Line Protocol 149
SMASH CLP Overview 150
SMASH CLP implementation 150
Supported profiles 151
Terms 152
General command syntax 153
Targets 154
Starting a SMASHCLP session 155
Using Commands 156
Viewing targets, properties and commands for a target 156
Setting properties on a target 156
Associations 157
MergePoint SP appliance commands 157
Server commands 163
Using WS-Management 171
Automatic Discovery Management 172
Examples 174
Power Management 176
Examples 177
Telnet and SSHSession Management 179
Examples 181
WinRM Examples 183
Openwsman CLI Examples 186
Appendix A: Technical Support 193
Appendix B: Technical Specifications 194
Appendix C: Troubleshooting 197
viii MergePoint® SP Manager Installer/User Guide

Appendix D: Access Privileges 200
Appendix E: Configuring the BIOS Settings for SoL 204
Appendix F: Configuring a Virtual Serial Port 205
Appendix G: Profile Configuration 206
Appendix H: Glossary and Acronyms 218
License Information 221
Table of Contents ix

xMergePoint® SP Manager Installer/User Guide

Product Overview
1
1
The MergePoint service processor (SP) manager is a secure, centralized enterprise management
solution for target devices equipped with IPMI, HP®, Dell®, IBM®, Sun®and Fujitsu Technology
Solutions (FTS) service processors (SPs). You can remotely perform server management tasks,
including power control and console access, on managed target devices.
The MergePoint SP manager provides a standardized interface independent of the management
protocols used to manage each SP. Management operations can be performed using the following
three methods:
• The DSView® 3 management software interface.
• The MergePoint SP manager web interface from a standard web browser.
• Commands or scripts over a Telnet, command line interface (CLI) utility, Systems
Management Architecture for Server Hardware Command Line Protocol (SMASH CLP),
Secure Shell (SSH) session or Web Service for Management (WS-MAN).
SMASH CLP is a standards-based user and scripting interface defined by the Distributed
Management Task Force (DMTF). This interface provides a single command line
interface to manage servers from multiple manufacturers, simplifying management and
streamlining interoperability while providing scripting and automation capabilities.
NOTE: MergePoint SP manager refers to the SP5200/SP5300/SP5224/SP5324/SP5240/SP5340 models. For
features supported only by specific models, the supported model is noted.
Features and Benefits
The MergePoint SP manager provides secure Serial over LAN (SoL) console access, power
control and server hardware monitoring. With easy-to-use IPMI provisioning capabilities and an
auto discovery mechanism for server management technologies within the network, the
MergePoint manager is ideal for enterprise data centers as well as for high performance
computing (HPC) and other clustering environments.

The MergePoint SP manager allows enterprise-class authentication, authorization and auditing
(AAA) security and encryption, and extends this functionality to all servers. Other standard
features include data logging, event detection and notification, SNMP proxy, graphing and
alarm events for sensors and shared access to management ports. Also, simultaneous power
control of multiple servers boosts the already existing power management capabilities of service
processors, including graceful shutdown support for IPMI.
With multiple Ethernet ports, the MergePoint SP5x24/SP5x40 manager connects point-to-point
with Ethernet-based service processors. By isolating and protecting the connected service
processors from the external production network, the MergePoint SP5x24/SP5x40 manager
provides secure and efficient rack-level management with seamless integration into the
management infrastructure.
Supported SPs
A variety of service processors are supported by the MergePoint SP manager. For a complete list
of SPs supported by the version of firmware on your appliance, see the release notes or visit
www.avocent.com to check for the latest release notes and firmware update.
2MergePoint® SP Manager Installer/User Guide

MergePoint SP5x00 Manager Configuration
Figure 1.1: MergePoint SP5x00 Manager Configuration
Number Description Number Description
1Remote User Web Interface 6 RJ-45 Ethernet Ports
2LAN 7 Power
3Target Device 8 Connection to the Serial Port
Table 1.1: Descriptions for MergePoint 00 Manager Configuration
Chapter 1: Product Overview 3

Number Description Number Description
4CAT 5 Cables 9 Terminal or Workstation (for Configuration)
5MergePoint SP5x00 Manager
LEDs on the MergePoint SP5x00 manager
On the front of the MergePoint SP5x00 manager, the LAN LED provides information about the
LAN activity; the LED blinks to indicate activity. The power LED is green if the MergePoint
SP5x00 manager is turned on.
4MergePoint® SP Manager Installer/User Guide

MergePoint SP5x24/SP5x40 Manager Configuration
Figure 1.2: MergePoint SP5x24/SP5x40 Manager Configuration (SP5340 model shown)
Chapter 1: Product Overview 5

Number Description Number Description
1Private ethernet ports (24 or 40) 5
10/100 secondary public Ethernet port - (Optional)
For connection to a second network connection or for
failover connection to the primary network
210/100/GE (Gigabit Ethernet) primary
public Ethernet port 6Blade or service processor
3Auxiliary (AUX) port (disabled) 7Remote user web interface
4
Console port - For connecting either a
terminal or a computer running a
terminal emulation program
8Console user
Table 1.2: Descriptions for MergePoint 24/40 Manager Configuration
Safety Precautions
To avoid potentially fatal shock hazard and possible damage to equipment, please observe the
following precautions:
• Do not use a 2-wire power cord in any Avocent product configuration.
• Test AC outlets at the target device and monitor for proper polarity and grounding.
• Use only with grounded outlets.
NOTE: The AC inlet is the main power disconnect.
Failure to observe the precautions in this section may result in personal injury or damage to
equipment.
Observe the following general safety precautions when setting up and using Avocent
equipment.
• Follow all cautions and instructions marked on the equipment.
• Follow all cautions and instructions in the installation documentation or on any cautionary
cards shipped with the product.
• Do not push objects through the openings in the equipment. Dangerous voltages may be
present. Objects with conductive properties can cause fire, electric shock or damage to the
equipment.
• Do not make mechanical or electrical modifications to the equipment.
• Do not block or cover openings on the equipment.
6MergePoint® SP Manager Installer/User Guide

• Choose a location that avoids excessive heat, direct sunlight, dust or chemical exposure, all
of which can cause the product to fail. For example, do not place an Avocent product near
a radiator or heat register, which can cause overheating.
• Connect products that have dual power supplies to two separate power sources, for
example, one commercial circuit and one uninterruptible power supply (UPS). The power
sources must be independent of each other and must be controlled by separate circuit
breakers.
• For products that have AC power supplies, ensure that the voltage and frequency of the
power source match the voltage and frequency on the label on the equipment.
• Products with AC power supplies have grounding-type three-wire power cords. Make sure
the power cords are plugged into single-phase power systems that have a neutral ground.
• Do not use household extension power cords with Avocent equipment because household
extension cords are not designed for use with computer systems and do not have overload
protection.
• Make sure to connect DC power supplies to a grounded return.
• Ensure that air flow is sufficient to prevent extreme operating temperatures. Provide a
minimum space of 6 inches (15 cm) in front and back for adequate airflow.
• Keep power and interface cables clear of foot traffic. Route cables inside walls, under the
floor, through the ceiling or in protective channels or raceways.
• Route interface cables away from motors and other sources of magnetic or radio frequency
interference.
• Stay within specified cable length limitations.
• Leave enough space in front and back of the equipment to allow access for servicing.
When installing Avocent equipment in a rack or cabinet, observe the following precautions:
• Ensure that the floor’s surface is level.
• Load equipment starting at the bottom first and fill the rack or cabinet from the bottom to
the top.
• Exercise caution to ensure that the rack or cabinet does not tip during installation and use
an anti-tilt bar.
When using a desk or table, observe the following precautions:
• Choose a desk or table sturdy enough to hold the equipment.
Chapter 1: Product Overview 7

• Place the equipment so that at least 50% of the equipment is inside the table or desk’s leg
support area to avoid tipping of the table or desk.
Rack mount safety considerations
• Elevated Ambient Temperature: If installed in a closed rack assembly, the operating
temperature of the rack environment may be greater than room ambient. Use care not to
exceed the rated maximum ambient temperature of the switch.
• Reduced Air Flow: Installation of the equipment in a rack should be such that the amount
of airflow required for safe operation of the equipment is not compromised.
• Mechanical Loading: Mounting of the equipment in the rack should be such that a
hazardous condition is not achieved due to uneven mechanical loading.
• Circuit Overloading: Consideration should be given to the connection of the equipment to
the supply circuit and the effect that overloading of circuits might have on overcurrent
protection and supply wiring. Consider equipment nameplate ratings for maximum current.
• Reliable Earthing: Reliable earthing of rack mounted equipment should be maintained. Pay
particular attention to supply connections other than direct connections to the branch
circuit (for example, use of power strips).
Cabling installation, maintenance and safety tips
The following is a list of important safety considerations that should be reviewed prior to
installing or maintaining your cables:
• Keep all CAT 5 runs to a maximum of 10 meters each.
• Maintain the twists of the pairs all the way to the point of termination, or no more than
one half inch untwisted. Do not skin off more than one inch of jacket while terminating.
• If bending the cable is necessary, make it gradual with no bend sharper than a one inch
radius. Allowing the cable to be sharply bent or kinked can permanently damage the
cable’s interior.
• Dress the cables neatly with cable ties, using low to moderate pressure. Do not overtighten
ties.
• Cross-connect cables where necessary, using rated punch blocks, patch panels and
components. Do not splice or bridge cable at any point.
• Keep CAT 5 cable as far away as possible from potential sources of EMI, such as electrical
cables, transformers and light fixtures. Do not tie cables to electrical conduits or lay cables
on electrical fixtures.
8MergePoint® SP Manager Installer/User Guide