{"id":625,"date":"2009-12-22T07:00:29","date_gmt":"2009-12-22T12:00:29","guid":{"rendered":"http:\/\/www.gamescheat.ca\/?p=625"},"modified":"2019-09-04T19:57:40","modified_gmt":"2019-09-05T00:57:40","slug":"step-by-step-configuration-of-the-xscf-console-for-the-sun-sparc-m3000-server","status":"publish","type":"post","link":"http:\/\/www.gamescheat.ca\/?p=625","title":{"rendered":"Step by step configuration of the XSCF console for the Sun SPARC M3000 server."},"content":{"rendered":"<p>I installed the new SPARC M3000 server on the rack and powered it on.  The M3000 can only be configured via the serial cable connected to the serial port for XSCF.  Any windows computer with hyperterminal should be able to connect to it\u2019s console. Once the XSCF interface has been configured with an IP address and telnet has been enabled, you can then connect to it remotely across the network with telnet.<\/p>\n<p>XSCF (eXtended System Control Facility is used to control, monitor, operate, and service SPARC Enterprise series servers and domains. You can power on\/off the server (domain) via the XSCF interface.  As long as the server is plugged into a power source the XSCF console will always be online even though the domain (server) is off.  For those who are familiar with Windows servers, the XSCF is similar to the DRAC interface for Dell servers or HP Insight Manager.<\/p>\n<p>When you are connected to the XSCF console, you will be prompted for a login ID.  The default ID is \u201cdefault\u201d and there is no password.  With this ID you will need to create a new administrative ID.  You also need to be standing close to the server for this process as you will be prompted to change the panel mode switch.  If you do not create a new logon ID whenever you connect to the console or when the console session times out, you will be prompted to change the panel mode switch.<\/p>\n<blockquote><p>login: default<br \/>\nChange the panel mode switch to Locked and press return\u2026<br \/>\nLeave it in that position for at least 5 seconds.  Change the panel mode switch<br \/>\nto Service, and press return\u2026<\/p><\/blockquote>\n<p>Check the version of XSCF.<\/p>\n<blockquote><p>XSCF> version -c xcp<br \/>\nXSCF#0 (Active )<br \/>\nXCP0 (Current): 1090<br \/>\nXCP1 (Reserve): 1090<\/p><\/blockquote>\n<p>Create a user andrew<\/p>\n<blockquote><p>XSCF> adduser andrew<br \/>\nXSCF> password<br \/>\npassword: Permission denied<\/p><\/blockquote>\n<p>Change the password for andrew<\/p>\n<blockquote><p>XSCF> password andrew<br \/>\nNew XSCF password:<br \/>\nRetype new XSCF password:<\/p><\/blockquote>\n<p>Grant andrew the following privileges, useradm, platadm, aplatop.<\/p>\n<blockquote><p>XSCF> setprivileges andrew useradm platadm platop<\/p><\/blockquote>\n<p>Here is a list of all available privileges.<\/p>\n<blockquote><p>domainop@n<br \/>\n\u2022 Can refer to the status of any hardware mounted in a domain_n.<br \/>\n\u2022 Can refer to the status of any part of a domain_n.<br \/>\n\u2022 Can refer to the information of all system boards mounted.<\/p>\n<p>domainmgr@n<br \/>\n\u2022 Can power on, power off, and reboot a domain_n.<br \/>\n\u2022 Can refer to the status of any hardware mounted in a domain_n.<br \/>\n\u2022 Can refer to the status of any part of a domain_n.<br \/>\n\u2022 Can refer to the information of all system boards mounted.<\/p>\n<p>platop<br \/>\n\u2022 Can refer to the status of any part of the entire server but cannot change it.<\/p>\n<p>platadm<br \/>\n\u2022 Control of the entire system<br \/>\n\u2022 Can operate all hardware in the system.<br \/>\n\u2022 Can configure all XSCF settings except the useradm and auditadm privilege settings.<br \/>\n\u2022 Can add and delete hardware in a domain.<br \/>\n\u2022 Can do the power operation of a domain.<br \/>\n\u2022 Can refer to the status of any part of the entire server.<\/p>\n<p>useradm<br \/>\n\u2022 Can create, delete, invalidate, and validate user accounts.<br \/>\n\u2022 Can change user passwords and password profiles.<br \/>\n\u2022 Can change user privileges.<\/p>\n<p>auditop<br \/>\n\u2022 Can refer to the XSCF access monitoring status and monitoring methods.<\/p>\n<div style=\"float: right;\"><div style=\"margin: 15px 15px 15px 15px\";><script type=\"text\/javascript\"><!--\ngoogle_ad_client = \"pub-3319935785736004\";\ngoogle_alternate_color = \"FFFFFF\";\ngoogle_ad_width = 180;\ngoogle_ad_height = 150;\ngoogle_ad_format = \"180x150_as\";\ngoogle_ad_type = \"text_image\";\ngoogle_ad_channel =\"\";\ngoogle_color_border = \"cccccc\";\ngoogle_color_link = \"cc0000\";\ngoogle_color_bg = \"ffffff\";\ngoogle_color_text = \"000000\";\ngoogle_color_url = \"008000\";\n\/\/--><\/script>\n<script type=\"text\/javascript\"\n  src=\"http:\/\/pagead2.googlesyndication.com\/pagead\/show_ads.js\">\n<\/script><\/div><\/div><p>auditadm<br \/>\n\u2022 Can monitor and control XSCF access.<br \/>\n\u2022 Can delete an XSCF access monitoring method.<\/p>\n<p>fieldeng<br \/>\n\u2022 Allows field engineers to perform the maintenance tasks or change the server configuration.<\/p>\n<p>None<br \/>\n\u2022 When the local privilege for a user is set to none, that user has no privileges, even if the privileges<br \/>\nfor that user are defined in LDAP.<br \/>\n\u2022 Setting a user\u2019s privilege to none prevents the user\u2019s privileges from being looked up in LDAP.<\/p><\/blockquote>\n<p>XSCF firmware has two networks for internal communication. The Domain to Service Processor Communications Protocol (DSCP) network provides an internal communication link between the Service Processor and the Solaris domains. The Inter-SCF Network (ISN) provides an internal communication link between the two Service Processors in a high-end server.<\/p>\n<p>Configure DSCP with an IP address using the setdscp command.<\/p>\n<blockquote><p>XSCF> setdscp<br \/>\nDSCP network  [0.0.0.0        ] > 10.1.1.0<\/p>\n<p>DSCP netmask  [255.0.0.0      ] > 255.255.255.0<\/p>\n<p>XSCF address  [10.1.1.1       ] ><br \/>\nDomain #00 address  [10.1.1.2       ] ><br \/>\nCommit these changes to the database? [y|n] : y<\/p><\/blockquote>\n<p>Configure the XSCF interface with an IP address, this will be the adress you connect to via telnet to manage the console.<\/p>\n<blockquote><p>XSCF> setnetwork xscf#0-lan#0 -m 255.255.0.0. 162.10.10.11<\/p><\/blockquote>\n<p>Enable the XSCF interface you just configured with an IP address of 162.10.10.11<\/p>\n<blockquote><p>XSCF> setnetwork -c up lan#0<\/p><\/blockquote>\n<p>Confiure the default route<\/p>\n<blockquote><p>XSCF> setroute -c add -n 0.0.0.0 -g 162.10.10.1 xscf#0-lan#1<br \/>\nXSCF> showroute -a<br \/>\nDestination     Gateway         Netmask         Flags Interface<br \/>\n1622.10.0.0      *               255.255.0.0     U     xscf#0-lan#0<\/p><\/blockquote>\n<p>Configure the hostname.<\/p>\n<blockquote><p>XSCF> sethostname xscf#0 paris<\/p><\/blockquote>\n<p>Configure the domain name.<\/p>\n<blockquote><p>XSCF> sethostname -d parishilton.com<\/p><\/blockquote>\n<p>You must apply the network configurations with the applynetwork command.<\/p>\n<blockquote><p>XSCF> applynetwork<br \/>\nThe following network settings will be applied:<br \/>\n  xscf#0 hostname  :paris<br \/>\n  DNS domain name  :parishilton.com<\/p>\n<p>  interface        : xscf#0-lan#0<br \/>\n  status           :up<br \/>\n  IP address       :162.10.10.11<br \/>\n  netmask          :255.255.0.0<br \/>\n  route            :<\/p>\n<p>  interface        : xscf#0-lan#1<br \/>\n  status           :down<br \/>\n  IP address       :<br \/>\n  netmask          :<br \/>\n  route            :<\/p>\n<p>Continue? [y|n] :yes<\/p>\n<p>Please reset the XSCF by rebootxscf to apply the network settings.<br \/>\nPlease confirm that the settings have been applied by executing<br \/>\nshowhostname, shownetwork, showroute and shownameserver after rebooting<br \/>\nthe XSCF.<\/p><\/blockquote>\n<p>Now reboot XSCF for the configuration to take effect.<\/p>\n<blockquote><p>XSCF> rebootxscf<\/p><\/blockquote>\n<p>After the reboot check the network settings.<\/p>\n<blockquote><p>XSCF> shownetwork -a<br \/>\nxscf#0-lan#0<br \/>\n          Link encap:Ethernet  HWaddr 00:0B:5D:E3:39:B4<br \/>\n          inet addr:162.10.10.11  Bcast:162.10.255.255  Mask:255.255.0.0<br \/>\n          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1<br \/>\n          RX packets:13160 errors:0 dropped:0 overruns:0 frame:0<\/p>\n<p>          TX packets:5 errors:0 dropped:0 overruns:0 carrier:0<br \/>\n          collisions:0 txqueuelen:1000<br \/>\n          RX bytes:1943545 (1.8 MiB)  TX bytes:210 (210.0 B)<br \/>\n          Base address:0xe000<\/p>\n<p>xscf#0-lan#1<br \/>\n          Link encap:Ethernet  HWaddr 00:0B:5D:E3:39:B5<br \/>\n          BROADCAST MULTICAST  MTU:1500  Metric:1<br \/>\n          RX packets:0 errors:0 dropped:0 overruns:0 frame:0<br \/>\n          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0<br \/>\n          collisions:0 txqueuelen:1000<br \/>\n          RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)<br \/>\n          Base address:0xc000\n<\/p><\/blockquote>\n<p>Enable ssh, it will require a reboot.<\/p>\n<blockquote><p>XSCF> setssh -c enable<br \/>\nContinue? [y|n] :y<br \/>\nPlease reset the XSCF by rebootxscf to apply the ssh settings.<\/p><\/blockquote>\n<p>Enable telnet.  You probably do not need telnet if ssh is enabled.<\/p>\n<blockquote><p>XSCF> settelnet -c enable<br \/>\nXSCF> showtelnet<br \/>\nTelnet status: enabled<\/p><\/blockquote>\n<p>It is much easier to configure and manage XSCF via https as you do not have to remember all the commands.  I will show you how to enable https by creating a Web Server Certificate by constructing the self CA.<\/p>\n<p>First generate the web server private key.  Remember the passphrase you will need it in the next step.<\/p>\n<blockquote><p>XSCF> sethttps -c genserverkey<br \/>\nEnter passphrase:<br \/>\nVerifying \u2013 Enter passphrase:<\/p><\/blockquote>\n<p>Create the self-signed web server certificate by speficying the DN.<\/p>\n<blockquote><p>XSCF> sethttps -c selfsign CA Ontario Toronto CupidPost Technology Center andrew_lin@email.com<br \/>\nCA key and CA cert already exist. Do you still wish to update? [y|n] :y<br \/>\nEnter passphrase:<br \/>\nVerifying \u2013 Enter passphrase:<\/p><\/blockquote>\n<p>Now enable https.<\/p>\n<blockquote><p>XSCF> sethttps -c enable<br \/>\nContinue? [y|n] :y<br \/>\nPlease reset the XSCF by rebootxscf to apply the https settings.<\/p><\/blockquote>\n<p>Reboot with the rebootxscf command,<\/p>\n<blockquote><p>XSCF> rebootxscf<br \/>\nThe XSCF will be reset. Continue? [y|n] :y<\/p><\/blockquote>\n<p>After the reboot you can connect to the XSCF console by telnet, ssh or https.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>I installed the new SPARC M3000 server on the rack and powered it on. The M3000 can only be configured via the serial cable connected to the serial port for XSCF. Any windows computer with hyperterminal should be able to&hellip;<\/p>\n<p class=\"more-link-p\"><a class=\"more-link\" href=\"http:\/\/www.gamescheat.ca\/?p=625\">Read more &rarr;<\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[19],"tags":[],"_links":{"self":[{"href":"http:\/\/www.gamescheat.ca\/index.php?rest_route=\/wp\/v2\/posts\/625"}],"collection":[{"href":"http:\/\/www.gamescheat.ca\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.gamescheat.ca\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.gamescheat.ca\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/www.gamescheat.ca\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=625"}],"version-history":[{"count":10,"href":"http:\/\/www.gamescheat.ca\/index.php?rest_route=\/wp\/v2\/posts\/625\/revisions"}],"predecessor-version":[{"id":979,"href":"http:\/\/www.gamescheat.ca\/index.php?rest_route=\/wp\/v2\/posts\/625\/revisions\/979"}],"wp:attachment":[{"href":"http:\/\/www.gamescheat.ca\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=625"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.gamescheat.ca\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=625"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.gamescheat.ca\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=625"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}