Cisco UCS Manager CLI Configuration Guide, Release 2.1
CIMC Session Management
Downloads: This chapterpdf (PDF - 1.32MB) The complete bookPDF (PDF - 8.96MB) | The complete bookePub (ePub - 1.39MB) | Feedback

CIMC Session Management

CIMC Session Management

This chapter includes the following sections:

CIMC Session Management

You can view and close any KVM, vMedia, and SOL sessions in Cisco UCS Manager. If you have administrator privileges, you can discontinue the KVM, vMedia, and SoL sessions of any user. . Cisco Integrated Management Controller (CIMC) provides session information to Cisco UCS Manager. When Cisco UCS Manager gets an event from CIMC, it updates its session table and displays the information to all users.

The session information consists of:
  • Name—The name of the user who launched the session.
  • Session ID—The ID associated with the session. The format of the session ID for blades is [unique identifier] _ [chassis id] _ [Blade id]. The format of the session ID for racks is [unique identifier] _ 0 _ [Rack id].
  • Type of session—KVM, vMedia, or SoL.
  • Privilege level of the user—Read-Write, Read Only, or Granted.
  • Administrative state—Active or Inactive. The value is active if the session is active. The value is inactive if the session terminate command has been issued but the session has not been terminated. This situation occurs when FSM of the server is in progress with another operation or when the connectivity to CIMC is lost.
  • Source Address—The IP address of the computer from which the session was opened.
  • Service Profile—The service profile associated with the session. The service profile attribute value for a CIMC session is displayed only if the session is opened on an IP address that is provided from the service profile.
  • Server—The name of the server associated with the session.
  • Login time—The date and time the session started.
  • Last Update Time—The last time the session information was updated by CIMC.

A new session is generally added when a user connects to KVM, vMedia, or SOL. A Pnuos vMedia session will be displayed in the session table during the server discovery with the user name __vmediausr__.

The CIMC session data is available under the CIMC Sessions tab in Cisco UCS Manager GUI. Any CIMC session terminated by the user is audit logged with proper details.


Note


To perform the GUI and CLI tasks that are described in this guide, a CIMC image version of 2.1(2a) or above is required for the session management support for the blade servers. The latest CIMC image version of 1.5(1l) and above is required for the rack-servers.


Viewing the CIMC Sessions Opened by the Local Users

Follow this task to view all the CIMC sessions opened by the local users or the CIMC sessions opened by a specific local user.

Note


Viewing CIMC sessions of a specific server or a service-profile option is not present in CLI. It is available in GUI.


Procedure
     Command or ActionPurpose
    Step 1 UCS-A # scope security 

    Enters security configuration mode.

     
    Step 2UCS-A /security # show cimc-sessions local  

    Displays all CIMC sessions opened by the local users.

     
    Step 3UCS-A /security # show cimc-sessions local user-name 

    Displays all CIMC sessions opened by a specific local user.

     

    The following examples show how to view:

    • All CIMC sessions opened by local users
    • CIMC session opened by a specific local user
    • Details of the CIMC session opened by a specific local user.
    All sessions opened by local users:
    UCS-A # scope security
    UCS-A /security # show cimc-sessions local
    
    Session ID   Type     User      Source Addr     Admin State
    ----------   ------ --------- --------------- ------------
    42_1_1       Kvm      admin     10.106.22.117     Active
    4_1_5        Kvm      admin     10.106.22.117     Active
    5_1_5        Vmedia   admin     10.106.22.117     Active
    
    Session opened by a specific local user:
    UCS-A /security # show cimc-sessions local admin
    Session ID   Type     User      Source Addr     Admin State
    ----------   ------ --------- --------------- ------------
    42_1_1       Kvm      admin     10.106.22.117     Active
    
    Details of session opened by a specific local user:
    UCS-A /security # show cimc-sessions local admin detail
    Session ID 42_1_1
       Type: Kvm
       User: admin
       Source Addr: 10.106.22.117
       Login Time: 2013-06-28T06:09:53.000
    			Last Updated Time: 2013-06-28T06:21:52.000
       Admin State: Active
       Priv: RW
       Server: sys/chassis-1/blade-1
    			Service Profile: 
    
    

    Viewing the CIMC Sessions Opened by the Remote Users

    Follow this task to view all the CIMC sessions opened by the remote users or the CIMC sessions opened by a specific remote user.

    Procedure
       Command or ActionPurpose
      Step 1 UCS-A # scope security 

      Enters security configuration mode.

       
      Step 2UCS-A /security # show cimc-sessions remote 

      Displays all CIMC sessions opened by the remote users.

       
      Step 3UCS-A /security # show cimc-sessions remote user-name 

      Displays all CIMC sessions opened by a specific remote user.

       

      The following examples show how to view:

      • All CIMC sessions opened by remote users
      • CIMC session opened by a specific remote user
      • Details of the CIMC session opened by a specific remote user.
      All sessions opened by remote users:
      UCS-A # scope security
      UCS-A /security # show cimc-sessions remote
      
      Session ID   Type     User             Source Addr      Admin State
      ----------   ------ ---------        ---------------   ------------
      43_1_1       Kvm     administrator     10.106.22.117     Active
      6_1_5        Kvm     test-remote       10.106.22.117     Active
      7_1_5        Vmedia  test-remote       10.106.22.117     Active
      
      Session opened by a specific remote user:
      UCS-A /security # show cimc-sessions remote administrator
      
      Session ID   Type     User             Source Addr      Admin State
      ----------   ------ ---------        ---------------   ------------
      43_1_1       Kvm     administrator     10.106.22.117     Active
      
      Details of session opened by a specific remote user:
      UCS-A /security # show cimc-sessions remote administrator detail
      Session ID 43_1_1
         Type: Kvm
         User: administrator
         Source Addr: 10.106.22.117
         Login Time: 2013-06-28T06:09:53.000
         Last Updated Time: 2013-06-28T06:21:52.000   
         Admin State: Active
         Priv: RW
         Server: sys/chassis-1/blade-1
      			Service Profile: 
      
      

      Viewing the CIMC Sessions Opened by an IPMI User

      To view the CIMC sessions opened by an IPMI user, complete the following steps:

      Procedure
         Command or ActionPurpose
        Step 1 UCS-A # scope org org-name 

        Enters the root organization mode.

         
        Step 2UCS-A /org # scope ipmi-access-profile profile-name  

        Enters the IPMI access profile name.

         
        Step 3UCS-A /org/ipmi-access-profile # scope ipmi-user user-name 

        Enters an IPMI user name.

         
        Step 4UCS-A /org/ipmi-access-profile/ipmi-user # show cimc-sessions  

        Displays all CIMC sessions opened by the specified IPMI User.

         

        The following example shows how to view all the CIMC sessions opened by an IPMI user:

        UCS-A # scope org Finance
        UCS-A /org* # scope ipmi-access-profile ReadOnly
        UCS-A /org/ipmi-access-profile* # scope ipmi-user alice
        UCS-A /org/ipmi-access-profile/ipmi-user # show cimc-sessions
        
        Session ID    Type    User        Source Addr       Admin State
        ----------   ------  ---------   ---------------   --------------
        45_1_1        sol     alice       10.106.22.117     Active
        
        

        Clearing the CIMC Sessions of a Server

        This task shows how to clear all CIMC sessions opened on a server. You can also clear the CIMC sessions on a server based on the session type and the user name.

        Procedure
           Command or ActionPurpose
          Step 1 UCS-A # scope security 

          Enters security configuration mode.

           
          Step 2UCS-A /security # terminate cimc-sessions server chassis-id/blade-id 

          Clears the CIMC sessions on a specific blade server of a chassis.

           
          Step 3UCS-A /security # terminate cimc-sessions server Rack-server-id 

          Clears the CIMC sessions on a specific rack server.

           
          Step 4UCS-A /security # terminate cimc-sessions server server-id type session-type 

          Clears the CIMC sessions of a specific type on a server.

           
          Step 5UCS-A /security # terminate cimc-sessions server server-id user-name user-name 

          Clears the CIMC sessions of a specific user on a server.

           

          The first example shows how to clear all CIMC sessions on a server. The second example shows how to clear the CIMC sessions of a specific type on a server. The third example shows how to clear the CIMC sessions of a specific user on a server:

          UCS-A /security # scope security
          UCS-A /security # terminate cimc-sessions server 2/1
          This will close KVM sessions. Are you sure? (yes/no):yes
          UCS-A /security
          
          UCS-A # scope security
          UCS-A /security # terminate cimc-sessions server 2/1 type kvm
          This will close KVM sessions. Are you sure? (yes/no):yes
          
          UCS-A # scope security
          UCS-A /security # terminate cimc-sessions server 2/1 user-name test-user
          This will close KVM sessions. Are you sure? (yes/no):yes
          

          Clearing All CIMC Sessions Opened by a Local User

          This task shows how to clear the sessions opened by a local user.

          Procedure
             Command or ActionPurpose
            Step 1 UCS-A # scope security 

            Enters security configuration mode.

             
            Step 2UCS-A /security # terminate cimc-sessions local-user user-name 

            Clears all CIMC sessions opened by a local user.

             
            Step 3UCS-A /security # terminate cimc-sessions local-user user-name type {kvm | vmedia sol | all}  

            Clears all CIMC sessions of specific session type opened by a local user.

             

            The following example shows how to clear the CIMC sessions opened by a local user:

            UCS-A /security# scope security
            UCS-A /security# terminate cimc-sessions local-user testuser
            This will close cimc sessions. Are you sure? (yes/no):yes
            UCS-A /security#
            
            

            Clearing All CIMC Sessions Opened by a Remote User

            This task shows how to clear CIMC sessions opened by a remote user.

            Procedure
               Command or ActionPurpose
              Step 1 UCS-A # scope security 

              Enters security configuration mode.

               
              Step 2UCS-A /security # terminate cimc-sessions remote-user user-name 

              Clears all CIMC sessions opened by a remote user.

               
              Step 3UCS-A /security # terminate cimc-sessions remote-user user-name type {kvm | vmedia sol | all}  

              Clears all CIMC sessions of specific session type opened by a remote user.

               

              The following example shows how to clear all CIMC sessions opened by a remote user:

              UCS-A /security# scope security
              UCS-A /security# terminate cimc-sessions remote-user testuser
              This will close cimc sessions. Are you sure? (yes/no):yes
              UCS-A /security#
              
              

              Clearing a Specific CIMC Session Opened by a Local User

              This task shows how to clear a specific CIMC session opened by a local user.

              Procedure
                 Command or ActionPurpose
                Step 1 UCS-A # scope security 

                Enters security configuration mode.

                 
                Step 2UCS-A /security # scope local-user user-name 

                Enters local user mode.

                 
                Step 3UCS-A /security/local user # terminate cimc-session session-id 

                Clears the chosen CIMC session.

                 
                Step 4UCS-A /security/local user* # commit-buffer 

                Commits the transaction.

                 

                The following example shows how to clear a specific CIMC session opened by a local user and commits the transaction:

                UCS-A /security# scope security
                UCS-A /security# scope local-user admin
                UCS-A /security/local user # terminate cimc-session 6_1_2
                UCS-A /security/local user*# commit-buffer
                UCS-A /security/local user#
                
                

                Clearing a Specific CIMC Session Opened by a Remote User

                This task shows how to clear a specific CIMC session opened by a remote user.

                Procedure
                   Command or ActionPurpose
                  Step 1 UCS-A # scope security 

                  Enters security configuration mode.

                   
                  Step 2UCS-A /security # scope remote -user user-name 

                  Enters remote user mode.

                   
                  Step 3UCS-A /security/remote user # terminate cimc-session session-id 

                  Clears the chosen CIMC session.

                   
                  Step 4UCS-A /security/remote user* # commit-buffer 

                  Commits the transaction.

                   

                  The following example shows how to clear a specific CIMC session opened by a remote user and commits the transaction:

                  UCS-A /security# scope security
                  UCS-A /security# scope remote-user admin
                  UCS-A /security/remote user # terminate cimc-session 6_1_3
                  UCS-A /security/remote user*# commit-buffer
                  UCS-A /security/remote user#
                  
                  

                  Clearing a CIMC Session Opened by an IPMI User

                  To clear a CIMC session opened by an IPMI user, complete the following steps:

                  Procedure
                     Command or ActionPurpose
                    Step 1 UCS-A # scope org org-name 

                    Enters the root organization mode.

                     
                    Step 2UCS-A /org # scope ipmi-access-profile profile-name  

                    Enters the IPMI access profile name.

                     
                    Step 3UCS-A /org/ipmi-access-profile # scope ipmi-user user-name  

                    Enters the IPMI user.

                     
                    Step 4UCS-A /org/ipmi-access-profile/ipmi-user # terminate cimc-sessions session-id 

                    Terminates a specific CIMC session opened by an IPMI user.

                     
                    Step 5UCS-A /org/ipmi-access-profile/ipmi-user * commit-buffer  

                    Commits the changes.

                     

                    The following example displays how to clear a specific CIMC session opened by an IPMI user and commits the changes:

                    UCS-A # scope org Finance
                    UCS-A /org* # scope ipmi-access-profile ReadOnly
                    UCS-A /org/ipmi-access-profile* # scope ipmi-user alice
                    UCS-A /org/ipmi-access-profile/ipmi-user # terminate cimc-sessions 5_1_2
                    UCS-A /org/ipmi-access-profile/ipmi-user* # commit-buffer