Cyclades AlterPath OnBoard User manual

AlterPath™OnBoard
User’s Guide
Software Version 1.1.0
Cyclades Corporation
3541 Gateway Boulevard
Fremont, CA 94538 USA
1.888.CYCLADES (292.5233)
1.510.771.6100
1.510.771.6200 (fax)
http://www.cyclades.com
Release Date: April 2006
Part Number: PAC0392

© 2006 Cyclades Corporation, all rights reserved
Information in this document is subject to change without notice.
The following are registered or registration-pending trademarks of Cyclades
Corporation in the United States and other countries: Cyclades and AlterPath.
All trademarks, trade names, logos and service marks referenced herein, even when
not specifically marked as such, belong to their respective companies and are not to be
considered unprotected by law

Contents
Before You Begin ...................................................xiii
Chapter 1: Introduction.............................................1
OnBoard Advantages for Server Management .................................... 3
Security Features Used in Access Control ........................................... 5
Types of Users ...................................................................................... 5
Types of User Authorizations .............................................................. 7
Authentication ...................................................................................... 8
Security Profiles’ Effects on Users’ Actions ....................................... 8
Types of Managed Devices ................................................................ 10
Options for Accessing the OnBoard, Managing User Passwords,
IPDU Power, and Devices .................................................................. 10
Command Line Access Through Console Logins ............................. 11
Accessing the OnBoard’s Console ..................................................... 12
User Shell (rmenush) .......................................................................... 13
OnBoard Shell (onbdshell) ................................................................. 14
Management Features Available to Authorized Users ....................... 14
What the Power Commands Do on Different Servers .................... 18
What the Reset Command Does on Different Servers ................... 18
Management Features Provided on Supported Device Types ........... 19
Using SSH with the OnBoard ............................................................ 20
Accessing the OnBoard Using SSH ............................................... 21
Device Management Commands for Use With SSH ..................... 21
Dial-in Access .................................................................................... 22
Cyclades Web Manager ..................................................................... 23
Power Management Options on the OnBoard ................................... 23
Accessing a Device’s Native Management Features ......................... 24
Native Web ..................................................................................... 24
Native Management Applications .................................................. 25

iv AlterPath OnBoard User’s Guide
Native IP Access Requirements ..................................................... 25
Tasks for Creating Secure Tunnels and Obtaining Native IP
Access ............................................................................................. 26
Information Users Need ..................................................................... 27
Sensor Plotting ................................................................................... 27
Common Tasks for Device Management ........................................... 31
Chapter 2: Web Manager Introduction...................35
Prerequisites for Using the Web Manager ......................................... 37
Requirements for Java Plug-In Availability ....................................... 38
Logging Into the Web Manager for Regular Users ............................ 42
Features of Regular Users’ Windows ................................................ 44
Web Manager Menu Options for Regular Users ................................ 45
Using the Devices Screen ................................................................... 45
Accessing a Service Processor’s Console .......................................... 47
Accessing a Device’s Console ........................................................... 48
Managing Power Through a Service Processor ................................. 49
Running Reset on a Service Processor ............................................... 51
Viewing Sensor Data .......................................................................... 51
Viewing and Clearing Event Logs ..................................................... 55
Accessing Native Features on a Service Processor ............................ 57
Accessing the OnBoard Console [Web Manager] ............................. 63
Managing Power Outlets on a Connected IPDU ................................ 65
Using the Outlets Manager Tab to Turn Power On and Off
and Check Power Status ................................................................. 66
Viewing IPDU Information ............................................................ 69
Using the “Software Upgrade” Screen to View the IPDU’s Current
Software Version ............................................................................ 71
Configuring Your Password ............................................................... 72
Chapter 3: Accessing the OnBoard and
Connected Devices..................................................73
Accessing the OnBoard’s Console ..................................................... 75

Contents v
Accessing Device Management Features From the OnBoard’s
Console Menu .................................................................................... 77
Accessing the Console of a Device Through the OnBoard’s Console or
By Using SSH .................................................................................... 79
Creating an SSH Tunnel ..................................................................... 82
Creating a VPN Tunnel ...................................................................... 86
Routing Requirements for VPN Connections ................................ 88
IPSec VPN Routing Requirements ............................................. 88
PPTP VPN Routing Requirements ............................................. 88
Summary of VPN-related Requirements for Native IP Access ...... 90
VPN Through IPSec Connections .................................................. 91
PPTP VPN Connections ................................................................. 93
Obtaining and Using One Time Passwords for Dial-ins .................... 97
Appendix A: MindTerm Applet Reference.............99
Java Plug-In Requirements for Using MindTerm ............................ 100
Customizing MindTerm ................................................................... 100
Example MindTerm Window .......................................................... 100
MindTerm Terminal Menu Options ................................................. 101
Using Hot Keys During Console Sessions ....................................... 108
Glossary .................................................................109
Index .......................................................................135

vi AlterPath OnBoard User’s Guide

vii
Figures
Figure 1-1: Secure Path to a Connected Service Processor............. 3
Figure 1-2: Example Graph for Readings From a Fan Sensor....... 28
Figure 2-1: Web Manager Login Screen........................................ 42
Figure 2-2: User Options on the Web Manager............................. 44
Figure 2-3: Devices Web Manager Screen..................................... 46
Figure 2-4: Service Processor Console Example........................... 47
Figure 2-5: Device Console Example............................................ 49
Figure 2-6: Power Web Manager Screen....................................... 50
Figure 2-7: Example Power Status Dialog..................................... 50
Figure 2-8: Sensors Data Loading Message .................................. 52
Figure 2-9: Example of Unformatted Sensor Data ........................ 53
Figure 2-10: Graph Example............................................................ 54
Figure 2-11: Example Event Log Web Manager Screen ................. 56
Figure 2-12: Native IP: Not Available Status .................................. 57
Figure 2-13: Example HP iLO Native Web Interface...................... 60
Figure 2-14: OnBoard Console Login Screen.................................. 63
Figure 2-15: User Menu When Connected to the OnBoard’s
Console........................................................................ 64
Figure 2-16: IPDU Tabs................................................................... 66
Figure 2-17: IPDU Access Failed Message from “Outlets
Manager”..................................................................... 67
Figure 2-18: Access -> IPDU -> Outlets Manager Screen .............. 67
Figure 2-19: Outlets Manager Outlets State Close-up..................... 68
Figure 2-20: View IPDU Info Screen .............................................. 69
Figure 2-21: IPDU “Software Upgrade” Screen on the Web
Manager....................................................................... 71

viii AlterPath OnBoard User’s Guide
Figure 2-22: “Password” Screen...................................................... 72
Figure 3-1: User Shell Menu.......................................................... 77
Figure 3-2: Device Access Menu................................................... 78
Figure 3-3: Service Processor Action Menu.................................. 79
Figure 3-4: OnBoard VPN Example Using IPSec......................... 86
Figure A-1: Root Log into MindTerm Running an SSH
Console Session ........................................................ 101
Figure A-2: Terminal Menu.......................................................... 102

ix
Tables
Table P-1: Document Organization................................................ xiv
Table P-2: Related Documentation...............................................xvii
Table P-3: Typographic Conventions...........................................xviii
Table P-4: Other Terms and Conventions....................................xviii
Table 1-1: Access-related Security Features..................................... 5
Table 1-2: User Types, Responsibilities, and Default Password ...... 6
Table 1-3: Services and Other Functions Controlled by Security .....
Profiles............................................................................. 9
Table P-2: Console Login Types..................................................... 11
Table P-3: User Shell Default Menu Options ................................. 13
Table 1-1: Options and Command Names for Device
Management .................................................................. 15
Table P-2: Possible Power Management Command Effects........... 18
Table 1-1: Supported Device Types and Management Features..... 19
Table 1-2: Tasks for Creating Tunnels and Obtaining Native IP
Access............................................................................ 26
Table P-2: Sensor Graph Parameters .............................................. 28
Table P-3: Tasks for Managing Devices ......................................... 31
Table 2-1: Supported Browser and JRE Versions........................... 37
Table 2-2: Device Access Menu Options ....................................... 45
Table 2-3: Management Features Accessed Through the Web
Manager......................................................................... 46
Table 2-4: Information on the View IPDU Info Screen.................. 69
Table 3-1: Tasks for Enabling and Using Native IP Access Using
VPN............................................................................... 87
Table 3-2: Tasks for Enabling and Using Native IP Access Using
VPN............................................................................... 90
Table A-1: Console Session Terminal Menu Options ................... 102
Table A-2: Hot Keys Available During Console Sessions ............ 108

xAlterPath OnBoard User’s Guide

xi
Procedures
Chapter 2: Web Manager Introduction...................35
TTo Check Browsers for Java Plug-in Support............................................38
TTo Install JRE2 Software and Register the Java Plug-in...........................39
TTo Log Into the Web Manager...................................................................43
TTo Connect to a Service Processor’s Console [Web Manager].................48
TTo Connect to a Device’s Console [Web Manager]..................................49
TTo Manage a Server’s Power Through a Service Processor [Web
Manager]....................................................................................................50
TTo Reset a Server from a Service Processor [Web Manager] ...................51
TTo View a Server’s Sensor Data from a Service Processor [Web
Manager]...................................................................................................54
TTo View or Clear a Server’s Event Log Through a Service Processor
Web Manager] ...........................................................................................56
TTo Create a PPTP VPN Connection Profile on Windows—Example.......60
TTo Enable Access to Native Features on a Device [Web Manager]..........62
TTo Access the OnBoard’s Console [Web Manager]..................................64
TTo Manage Power Outlets on a Connected IPDU.....................................68
TTo View IPDUs Information .....................................................................71
TTo Change Your Password ........................................................................72
Chapter 3: Accessing the OnBoard and Connected
Devices .....................................................................73
TTo Access the OnBoard’s Console............................................................76
TTo Use a SSH Command to Connect Directly to a Device’s or Service
Processor’s Console...................................................................................80
TTo Use OnBoard’s Console Menus to Access the Device Management
Options.......................................................................................................81
TTo Exit from a Console Session.................................................................82

xii AlterPath OnBoard User’s Guide
TTo Use OpenSSH on Linux to Create an SSH Tunnel ..............................83
TTo Use PuTTY on a Windows PC to Create an SSH Tunnel....................83
TTo Bring Up a Native Web Application When an SSH Tunnel Exists .....85
TTo Create an IPSec VPN Tunnel...............................................................92
TTo Enable Native IP Access Through an IPSec VPN Tunnel...................92
TTo Create a PPTP VPN Tunnel .................................................................93
TTo Enable Native IP Access Through a PPTP VPN Tunnel .....................94
TTo Access a Native Web Application When a VPN Tunnel Exists ..........94
TTo Access a Native Management Application...........................................95
TTo Generate an OTP Password When Challenged at Dial-in....................98

xiii
Before You Begin
This AlterPath OnBoard User’s Guide provides background information and
procedures for using the Cyclades™ AlterPath™ OnBoard to access server-
management services that are provided by service processors and to gain
console access to devices that allow access to their consoles through Ethernet
ports.
Audience
This manual is intended for users who are authorized to connect to service
processors or to the consoles of connected servers or other types of devices
and to manage power through the OnBoard. The user’s guide is also
prerequisite reading for the administrator, who needs to understand what the
user can do on the OnBoard and how to connect to the OnBoard before being
able to perform the procedures in the AlterPath OnBoard Administrator’s
Guide.
Note: This manual describes use of the OnBoard only. It does not describe
how to set up and administer other external services or servers that the
OnBoard may access for authentication, system logging, IPMI control, SNMP
notifications, data buffering, file sharing, or other purposes. This manual
assumes that users who are authorized to connect to service processors and
other devices through the OnBoard already know how to use the management
functions provided by the connected devices.

xiv AlterPath OnBoard User’s Guide
Document Organization
The document contains the chapters listed in the following table.
Table P-1: Document Organization
Chapter Number and Title Description
1: Introduction Provides an overview of the features of the
AlterPath OnBoard for the regular user,
along with necessary prerequisite
information for understanding the rest of the
information in this guide and in the
administrator’s guide.
2: Web Manager Introduction Describes how authorized users use the Web
Manager to do the following:
• Access management features of service
processors
• Access the console of other types of
devices that are connected to the private
Ethernet ports on the OnBoard
• Manage power
• Change their own passwords

Before You Begin xv
3: Accessing the OnBoard and Con-
nected Devices Describes options other than using the Web
Manager, which a user can use to do the
following:
• Access management features of service
processors
• Access the console of other types of
devices that are connected to the private
Ethernet ports on the OnBoard
• Manage power
• Change the user’s passwords
Options include the following:
• Connecting to the OnBoard console and
choose options from a menu
•Usingssh with device management com-
mands to access and manage devices
directly through the OnBoard.
A. “MindTerm Applet Reference Describes using and customizing the
MindTerm applets that appear when the
console of the OnBoard or a connected
device is accessed through the Web
Manager. Also describes the special keys
and commands the user can use once
connected to the web interface or console of
a service processor or device.
Glossary Defines terms needed for understanding
how to use Cyclades products.
Table P-1: Document Organization (Continued)
Chapter Number and Title Description

xvi AlterPath OnBoard User’s Guide
Index Provides a way to look up information and
procedures. In the online version of this
manual, clicking the terms in the index
brings you to where they are used in the
manual.
Table P-1: Document Organization (Continued)
Chapter Number and Title Description

Before You Begin xvii
Related Documents
Before installing or using this product, refer to the release notes for important
information about supported hardware and software, known problems, and
outstanding bugs. You can download the release notes by going to http://
www.cyclades.com/support/downloads.php and searching for
the product name “AlterPath OnBoard.”
The following table lists the AlterPath OnBoard documents. As indicated, the
QuickStart Guide is printed, and it is also included with the other AlterPath
OnBoard documents in PDF format on the Documentation CD that is also
shipped with the product. The documents are also at http://
www.cyclades.com/support/downloads.php under “AlterPath OnBoard.”
Printed versions of this document and all the above listed documents can be
ordered from your Cyclades sales representative.
Documents for the AlterPath PM mentioned in this guide are also on the
Documentation CD shipped with the product, and they are also available at:
http://www.cyclades.com/downloads under the product’s name.
Updated versions of this document will be posted on the downloads section of
the Cyclades website when Cyclades releases new versions of the software.
See “Additional Resources” on page xix for information about free software
upgrades.
Table P-2: Related Documentation
Guide Title Printed and Shipped? PDFs on DocCD? Part Number
AlterPath OnBoard QuickStart Guide YY PAC0389
AlterPath OnBoard Installation Guide N (orderable) YPAC0390
AlterPath OnBoard Administrator’s Guide N (orderable) Y PAC0391

xviii AlterPath OnBoard User’s Guide
Typographic and Other Conventions
The following table describes the typographic conventions used in Cyclades
manuals.
The following table describes other terms and conventions.
Table P-3: Typographic Conventions
Typeface Meaning Example
Links Hypertext links or URLs Go to: http://www.cyclades.com.
Emphasis Titles, emphasized or new words
or terms See the AlterPath OnBoard Quick Start.
Filename or
Command
Names of commands, files, and
directories; onscreen computer
output.
Edit the pslave.conf file.
User type What you type in an example,
compared to what the computer
displays
# ifconfig eth0
Table P-4: Other Terms and Conventions
Term or Convention Meaning Examples
Hot keys When hot keys are shown, a
plus (+) appears between
two keys that must be
pressed at the same time,
and a space appears
between two keys that must
be pressed sequentially.
• Ctrl+k p entered while the
user is connected to a KVM
port brings up an IPDU power
management screen. Ctrl and
kmust be pressed at the same
time followed by ppressed by
itself.
•Ctrl+Shift+i entered
while the user is connected to a
serial port brings up the IPMI
power management utility. The
Ctrl key and the Shift and
ikeys must be pressed at the
same time.

Before You Begin xix
Additional Resources
The following sections describe how to get technical support, training, and
software upgrades.
Cyclades Technical Support
Cyclades offers free technical support. To find out how to contact the support
center in your region, go to: http://www.cyclades.com/support/
technical_support.php.
Navigation shortcuts Shortcuts use the −>
symbol to indicate how to
navigate to Web Manager
or OSD screens.
Go to Configuration −> KVM −>
General −> IP Users in Expert
mode.
\in a command line
example Used in screen examples when a command does not
fit in the space available.
Indicates that the whole
command should be
entered in either of the two
following ways:
• On one line without the
backslash
• On multiple lines with a
backslash at the end of
each line to tell the shell
that the command
continues on the
following line.
# openssl req -new \ -
nodes -key \
private_key.pem \
-out cert.csr
Table P-4: Other Terms and Conventions (Continued)
Term or Convention Meaning Examples

xx AlterPath OnBoard User’s Guide
Cyclades Technical Training
To learn about the Cyclades Technical Training Center and the courses
offered, visit http:www.cyclades.com/training, call 1-888-292-5233, or send
an email to [email protected].
Cyclades Software Upgrades
Cyclades offers periodic software upgrades for the AlterPath products free of
charge to current Cyclades customers. You may want to check http://
www.cyclades.com/support/downloads.php from time to time to see if
upgrades are available for the OnBoard or for an AlterPath PM that you may
also be using with this product.
See the AlterPath OnBoard Administrator’s Guide for instructions on
upgrading the software on your AlterPath OnBoard and on an optionally-
connected AlterPath PM IPDUs.