-
Cisco VFrame Data Center 1.1 Administration Guide
-
Preface
-
Getting Started with VFrame Data Center
-
Managing Roles and Local Users
-
Setting Up the Physical Network
-
Managing Device Credentials
-
Configuring DHCP for VFrame
-
Discovering Devices
-
Managing Devices
-
Managing Server Images
-
Managing Resource Pools
-
Managing Virtual Contexts
-
Designing Templates
-
Managing Macros and Variable Group Types from the Library Manager
-
Designing Service Networks
-
Operating Service Networks
-
Managing Faults
-
Viewing Reports
-
Maintaining Devices
-
Managing the VFrame System
-
System Actions and Default Variables
-
Index
-
Table Of Contents
Understanding Device Credentials
Understanding How VFrame Uses the Device Credential Lists
Understanding IP Address Patterns
Understanding How to Organize a Credentials List and to Use Stop Flags
Working with Device Credentials
Configuring Device Credentials
Configuring Network Credentials
Configuring Network Services Credentials
Configuring SNMP Credentials for SAN Fabric Devices
Configuring Storage Manager Credentials
Configuring Server Credentials
Editing or Modifying Device Credentials
Rearranging the Device Credentials List and Using Stop Flags
Troubleshooting Device Credentials
SNMPv1n2 Credential Dialog Box
SAN Manager Credential Dialog Box
LOM Manager Credential Dialog Box
Credentials Shortcut Menu Options
Managing Device Credentials
VFrame requires device credentials for communicating with the devices it manages. The following topics provide more information:
•
Understanding Device Credentials
•
•
Understanding Device Credentials
VFrame must know the credentials (such as usernames, passwords, SNMP community strings) for any device you want it to manage. These sections explain more about device credentials, how VFrame uses them, and provides recommendations on how to define and organize them effectively:
•
•
•
What Are Device Credentials?
Device credentials are simply the usernames, passwords, and SNMP (version 1 or 2) community strings required to log into a device and obtain the information VFrame requires to discover and manage the device. The username and password is the same user account you would use to log into the device's CLI to perform system configuration.
You must configure the correct device credentials for any device you want VFrame to manage. VFrame encrypts passwords to keep them safe. As you change passwords on managed devices, ensure that you also change them in the VFrame credentials list.
VFrame separates credentials into these categories:
•
•
•
–
–
•
–
–
–
Related Topics
•
•
•
Understanding How VFrame Uses the Device Credential Lists
Each category of device credential is a separate list of credentials. When VFrame needs the credential for a device, it searches the appropriate list from top to bottom looking for a match. Thus, it is important how you arrange your credential list.
This is how VFrame processes a credential list when trying to find the credentials for a device:
Step 1
Step 2
•
•
–
–
–
Step 3
Related Topics
•
•
Understanding IP Address Patterns
When you create a device credential, you must include one or more IP addresses of the devices that use the credential. When VFrame searches the credentials list, it looks for a match to the IP address of the device it is trying to manage.
Instead of entering credentials for every unique IP address used by your devices, you can create IP address patterns or variable expressions. Thus, you can match a set of IP addresses with a single credential entry or IP address definition.
These are the ways you can define IP addresses in a credential entry:
•
•
To create a default credential, one that matches any IP address, you can create a credential for the *.*.*.* IP address. Place default credentials last in the credential list.
•
•
Related Topics
•
•
Understanding How to Organize a Credentials List and to Use Stop Flags
When you add a credential, VFrame places the new credential at the bottom of the list. However, this might not be the best placement for the credential you are adding. Use the up and down arrow keys to create your desired sequence of entries. You can also set stop flags to control whether VFrame tries additional entries after a credential fails.
In general, you should organize your credentials list so that more specific credentials are at the top of the list, and more general ones are at the bottom of the list. This ensures that VFrame will always first try a credential that most closely matches a device's IP address.
Consider the entries shown in Figure 4-1. If VFrame is looking for a credential for 10.100.90.15, it will use the test1 credential (username admin) because 10.100.90.15 fits the 10.100.90.[10-20] IP address pattern. If the credential fails, VFrame will try the test2 credential (user root) because the IP address also matches the 10.100.90.* pattern. However, if that credential fails, VFrame will not try any additional credentials because there is a stop flag on the test2 credential, that is, Stop appears in the On Failure field.
On the other hand, if VFrame is looking for a credential for 10.100.70.8, it will first try the test1 credential. If that fails, it will pass by test2 because the IP address does not match any IP address pattern defined in test2. Thus, the stop flag will not prevent VFrame from continuing down the list to the Default credential, which it will also try, because *.*.*.* matches all IP addresses.
Figure 4-1 Example Network CLI Credentials List
Now consider the list shown in Figure 4-2, where the test1 and test2 credentials are switched. This time when VFrame processes 10.100.90.15, it will try the test2 credential first. If the test2 credential fails, the test1 credential will not be tried because of the stop flag on the test1 credential. In this case, defining 10.100.90.[10-20] in the test1 credential is pointless, because all IP addresses in the 10.100.90.* address space will either succeed using the test2 credential, or VFrame will stop looking for another credential.
Figure 4-2 Example Network CLI Credential Reordered
Related Topics
•
•
Working with Device Credentials
These topics describe how to create and manage device credential lists:
•
•
•
Configuring Device Credentials
The following topics describe how to configure credentials:
•
•
•
•
•
Configuring Network Credentials
You must configure CLI and SNMP credentials so that VFrame can communicate with Ethernet switches. CLI credentials are required for logging into a switch. The SNMP read community string is required for discovering a switch.
Before You Begin
Determine the usernames, passwords, and SNMP read community strings for each of the switches that VFrame will manage.
Procedure
Step 1
Step 2
Step 3
When you finish defining the credential, click OK to add it to the end of the credential table. Use the up and down arrows to reposition the credential in the list as desired. See these topics for information on the importance of credential order and stop flag usage:
•
•
Step 4
Step 5
When finished defining the credential, click OK to add it to the end of the credential table. Use the up and down arrows to reposition the credential in the list as desired.
Next Step
After you add the credentials, you can discover the Ethernet switch (see Discovering Ethernet Switches and Service Modules, page 6-6).
Related Topics
•
•
Configuring Network Services Credentials
Network services credentials are the credentials required for logging into service modules such as FWSM and CSM. These service modules reside in an Ethernet switch.
Before You Begin
Determine the usernames and passwords for each of the service modules that VFrame will manage.
Procedure
Step 1
Step 2
Step 3
When you finish defining the credential, click OK to add it to the end of the credential table. Use the up and down arrows to reposition the credential in the list as desired. See these topics for information on the importance of credential order and stop flag usage:
•
•
Next Step
After you add the credentials, you can discover the Ethernet switch and its service modules. (see Discovering Ethernet Switches and Service Modules, page 6-6).
Related Topics
•
•
Configuring NAS Credentials
If you are using NAS filers, configure the NAS credentials so that VFrame can communicate with them.
Before You Begin
Determine the usernames and passwords for each of the NAS filers that VFrame will manage.
Procedure
Step 1
Step 2
Step 3
Step 4
When you finish defining the credential, click OK to add it to the end of the credential table. Use the up and down arrows to reposition the credential in the list as desired. See these topics for information on the importance of credential order and stop flag usage:
•
•
Next Step
After you add the credentials, you can discover the NAS filer and its volumes (see Discovering NAS Filers and Their Components, page 6-10).
Related Topics
•
•
Configuring SNMP Credentials for SAN Fabric Devices
If you are using SAN fabric devices, configure the SNMP credentials so that VFrame can communicate with them.
Before You Begin
Determine the SNMP read and write community strings for each of the MDS switches that VFrame will manage.
Procedure
Step 1
Step 2
Step 3
Step 4
When you finish defining the credential, click OK to add it to the end of the credential table. Use the up and down arrows to reposition the credential in the list as desired. See these topics for information on the importance of credential order and stop flag usage:
•
•
Next Step
After you add the credentials, you can discover SAN fabric devices, such as the MDS switches in the fabric and the VSANs, target ports in the VSANs, and LUNs associated with the target ports (see Discovering SAN Fabric Devices and Their Components, page 6-8).
Related Topics
•
•
Configuring Storage Manager Credentials
During initial VFrame configuration after installation if you selected to manage your SAN in storage array mode (through an MDS switch and a storage manager), you must configure the storage manager credentials so that VFrame can communicate with the storage managers.
Before You Begin
Determine the usernames and passwords for each of the storage managers that VFrame will manage.
Procedure
Step 1
Step 2
Step 3
Step 4
When you finish defining the credential, click OK to add it to the end of the credential table. Use the up and down arrows to reposition the credential in the list as desired. See these topics for information on the importance of credential order and stop flag usage:
•
•
Next Step
After you add the credentials, you can discover storage managers and the LUNs and ports associated with them (see Discovering Storage Arrays and Their Components Through Storage Managers, page 6-11).
Related Topics
•
•
Configuring Server Credentials
You must configure the LOM manager credentials so that VFrame can communicate with the LOM managers to run inventory and to power on and power off the servers. VFrame controls the power management of the servers through LOM managers. You must also configure the LOM interface credentials so that the LOM managers can log into the interfaces.
Before You Begin
Determine the usernames and passwords for each of the LOM managers that VFrame will use, and for the LOM interfaces on each application, and optionally, on each model server.
Procedure
Step 1
Step 2
Step 3
When you finish defining the credential, click OK to add it to the end of the credential table. Use the up and down arrows to reposition the credential in the list as desired. See these topics for information on the importance of credential order and stop flag usage:
•
•
Step 4
Step 5
When finished defining the credential, click OK to add it to the end of the credential table. Use the up and down arrows to reposition the credential in the list as desired.
Next Step
After you add the credentials, you can discover LOM managers and the servers they control (see Discovering Servers, page 6-13).
Related Topics
•
•
Editing or Modifying Device Credentials
If a credential is no longer correct, you can modify it. You can change the IP address range, usernames, passwords, or SNMP community strings.
Procedure
Step 1
Step 2
Step 3
This opens one of these dialog boxes so that you can modify the credential.
•
•
•
After making your modifications, click OK.
Related Topics
•
•
Deleting Device Credentials
If you no longer need a credential, you can delete it. Make sure that the credential is not needed by any VFrame-managed device.
Procedure
Step 1
Step 2
Step 3
Related Topics
•
•
•
Rearranging the Device Credentials List and Using Stop Flags
The order in which device credentials appear in a credentials list matters. When searching for the credential for a specific device, VFrame starts from the top of the credentials list and searches down, looking for a credential with an IP address pattern that matches the IP address of the device. If the credential does not work, VFrame continues to search the list. If a credential matches, a stop flag prevents VFrame from trying additional entries in the list in case a credential does not work.
For a complete explanation, with examples, of how VFrame processes a credentials list and handles credential order and stop flags, read these topics:
•
•
To rearrange the credentials and modify stop flag settings:
•
Figure 4-3 Up and Down Buttons for Credentials
•
•
Related Topics
•
Troubleshooting Device Credentials
These are some problems you might encounter with device credentials and their solutions:
•
•
•
Problem
Solution
Problem
Solution
Problem
Solution
Device Credentials Reference
These topics describe the fields available for managing device credentials and reference information on using the various GUI features:
•
•
•
•
Device Credentials Tab
Use the Device Credentials tab to define and manage the credentials (such as usernames, passwords, SNMP community strings) for the devices you want VFrame to manage. You must keep this list up-to-date as you change passwords on the devices.
How to Get to This TabSelect Tools > Device Credentials to open the Device Credentials page.
Related Topics•
–
–
–
•
•
•
Field Reference
Table 4-1 Device Credentials Tab
New button
Click this button to add a credential to the credentials list displayed in the tab below this button. A different dialog box opens for you to enter the credential information depending on the type of credential you are defining:
•
•
•
•
•
•
•
•
Edit button
Click this button to modify the selected credential.
Delete button
Click this button to delete the selected credential.
Stop Trying Credentials,
Try Additional Credentials buttonsClick the Stop Trying Credentials button to add a stop flag to the selected row, or the Try Additional Credentials button to remove the stop flag from the selected row. If a flag is set on a credential, Stop appears in the On Failure field.
For information on how stop flags affect credential processing, see Understanding How to Organize a Credentials List and to Use Stop Flags.
Up and Down arrows (on the right side of the window)
Click the up or down arrows to move the selected row up or down in the credentials list. When searching for a device credential, VFrame searches the list from top to bottom. Therefore, the order of the credentials is important and affects processing. For an explanation of how credential ordering affects processing, see Understanding How to Organize a Credentials List and to Use Stop Flags.
When you select a category from the left pane, tabs appear in the right pane. Each tab represents a separate credentials list. When searching for device credentials, VFrame only searches the list appropriate for the type of device it is accessing, and the type of action it needs to take. The following information describes these credential lists and their usage.
The table column headings are explained after the categories.
Network category
The credentials required for Ethernet switches:
•
•
Network Services category
The credentials required for Ethernet services modules such as FWSM and CSM.
•
Server category
The credentials for the lights-out management (LOM) managers that will control the servers.
•
Define the username and password required to log into the LOM manager. For more information on LOM managers, see LOM Managers.
•
Storage category
The credentials required for the storage devices.
•
•
•
The following information describes the table columns for the credential lists. There are essentially two types of lists: CLI credentials and SNMP credentials. Most attributes are common to both types of lists; differences are noted.
Each row in the table is a separate credential.
Name
The name of the credential. This name is a label for your use in identifying the purpose of a credential. It is not used when accessing a device.
IP Ranges
The IP address patterns defined for this credential. VFrame compares a device's IP address to the IP address patterns in this list to find a match. For more information about IP address patterns, see Understanding IP Address Patterns.
User
The username defined for the credential.
The User field only appears for CLI, Network Services CLI, LOM manager, NAS, or SAN Manager (Storage Manager) credentials.
Read Community
The SNMP read community string for the credential. Even if the credential requires a write community string, only the read string is shown in the table.
The Read Community field only appears for SNMPv1n2 credentials.
On Failure
Whether there is a stop flag defined for this credential.
When Stop appears in this field, if VFrame tries to use this credential when accessing a specific device and the credential fails, no additional credentials are tried. The stop flag takes effect only if VFrame tries the credential, that is, if the IP address of the device fits an IP address pattern in the credential.
If the field is blank, VFrame continues to the next credential if the credential fails.
CLI Credential Dialog Box
Use the CLI Credential dialog box to create or modify credentials for logging into an Ethernet switch or its service modules.
How to Get to This Dialog BoxWhen viewing the CLI or Network Services CLI tabs on the Device Credentials page (select Tools > Device Credentials):
•
•
Related Topics•
•
•
•
Field Reference
Table 4-2 CLI Credential Dialog Box
Name
A name assigned to the credential. This name is to help you identify the purpose of a credential. It is not used when accessing a device.
The name must be unique within the credentials list to which you are adding the credential.
You cannot modify the name after you create the credential.
IP Ranges
A comma-separated list of IP address patterns. When VFrame searches for a credential for a device, it compares the device's IP address to the IP address patterns entered here, and uses the credential if there is a match. You can use an asterisk (*) as a wildcard to match any number in an octet (for example, 10.100.10.*), or [x-y] to match a range of numbers (from x to y, for example, 10-20).
For a more thorough explanation of IP address patterns, see Understanding IP Address Patterns.
User
The username configured on the switch.
Password
Confirm Password
The user EXEC mode password configured for the username. Enter the password in both fields.
Enable Password
Confirm Enable Password
The privileged EXEC (enable) mode password configured on the switch, if any. Enter the password in both fields.
SNMPv1n2 Credential Dialog Box
Use the SNMPv1n2 dialog box to create or modify the SNMP community strings for Ethernet switches or SAN fabric devices.
How to Get to This Dialog BoxWhen viewing the SNMPv1n2 tab in the Network or Storage categories on the Device Credentials page (select Tools > Device Credentials):
•
•
Related Topics•
•
•
•
Field Reference
Table 4-3 SNMPv1n2 Credential Dialog Box
Name
A name assigned to the credential. This name is to help you identify the purpose of a credential. It is not used when accessing a device.
The name must be unique within the credentials list to which you are adding the credential.
You cannot modify the name after you create the credential.
IP Ranges
A comma-separated list of IP address patterns. When VFrame searches for a credential for a device, it compares the device's IP address to the IP address patterns entered here, and uses the credential if there is a match. You can use an asterisk (*) as a wildcard to match any number in an octet (for example, 10.100.10.*), or [x-y] to match a range of numbers (from x to y, for example, 10-20).
For a more thorough explanation of IP address patterns, see Understanding IP Address Patterns.
Read Community
The SNMP read community string. This is used for Ethernet device discovery and MDS switch inventory management.
Write Community
(Storage only)
The SNMP write community string. This is required for MDS switch inventory management.
NAS Credential Dialog Box
Use the NAS Credential dialog box to create or modify the NAS filer credentials.
How to Get to This Dialog BoxWhen viewing the NAS tab in the Storage category on the Device Credentials page (select Tools > Device Credentials):
•
•
Related Topics•
•
Field Reference
Table 4-4 NAS Credential Dialog Box
Name
A name assigned to the credential. This name is to help you identify the purpose of a credential. It is not used when accessing a device.
The name must be unique within the credentials list to which you are adding the credential.
You cannot modify the name after you create the credential.
IP Ranges
A comma-separated list of IP address patterns. When VFrame searches for a credential for a device, it compares the device's IP address to the IP address patterns entered here, and uses the credential if there is a match. You can use an asterisk (*) as a wildcard to match any number in an octet (for example, 10.100.10.*), or [x-y] to match a range of numbers (from x to y, for example, 10-20).
For a more thorough explanation of IP address patterns, see Understanding IP Address Patterns.
User
(Optional) The username configured on the NAS filer.
Password
Confirm Password
The password configured for the username. Enter the password in both fields.
SAN Manager Credential Dialog Box
Use the SAN Manager Credential dialog box to enter the storage manager credentials.
How to Get to This Dialog BoxWhen viewing the SAN Manager tab in the Storage category on the Device Credentials page (select Tools > Device Credentials):
•
•
Related Topics•
•
•
Field Reference
Table 4-5 SAN Manager Credential Dialog Box
Name
A name assigned to the credential. This name is to help you identify the purpose of a credential. It is not used when accessing a device.
The name must be unique within the credentials list to which you are adding the credential.
You cannot modify the name after you create the credential.
IP Ranges
A comma-separated list of IP address patterns. When VFrame searches for a credential for a device, it compares the device's IP address to the IP address patterns entered here, and uses the credential if there is a match. You can use an asterisk (*) as a wildcard to match any number in an octet (for example, 10.100.10.*), or [x-y] to match a range of numbers (from x to y, for example, 10-20).
For a more thorough explanation of IP address patterns, see Understanding IP Address Patterns.
User
(Optional) The username configured on the storage manager.
Password
Confirm Password
The password configured for the username. Enter the password in both fields.
LOM Manager Credential Dialog Box
Use the LOM Manager Credential dialog box to create or modify the LOM manager credentials.
How to Get to This Dialog BoxWhen viewing the LOM Manager tab in the Server category on the Device Credentials page (select Tools > Device Credentials):
•
•
Related Topics•
•
•
Field Reference
Table 4-6 LOM Manager Credential Dialog Box
Name
A name assigned to the credential. This name is to help you identify the purpose of a credential. It is not used when accessing a device.
The name must be unique within the credentials list to which you are adding the credential.
You cannot modify the name after you create the credential.
IP Ranges
A comma-separated list of IP address patterns. When VFrame searches for a credential for a device, it compares the device's IP address to the IP address patterns entered here, and uses the credential if there is a match. You can use an asterisk (*) as a wildcard to match any number in an octet (for example, 10.100.10.*), or [x-y] to match a range of numbers (from x to y, for example, 10-20).
For a more thorough explanation of IP address patterns, see Understanding IP Address Patterns.
User
The username configured on the LOM manager.
If you are using VFrame as the LOM manager, the username is macrouser.
Password
Confirm Password
The password configured for the username. Enter the password in both fields.
LOM Credential Dialog Box
Use the LOM Credential dialog box to create or modify the credentials for server LOM interfaces. You can enter credentials for both application and model servers.
How to Get to This Dialog BoxWhen viewing the LOM tab in the Server category on the Device Credentials page (select Tools > Device Credentials):
•
•
Related Topics•
•
•
Field Reference
Table 4-7 LOM Credential Dialog Box
Name
A name assigned to the credential. This name is to help you identify the purpose of a credential. It is not used when accessing a device.
The name must be unique within the credentials list to which you are adding the credential.
You cannot modify the name after you create the credential.
IP Ranges
A comma-separated list of IP address patterns. When VFrame searches for a credential for a device, it compares the device's IP address to the IP address patterns entered here, and uses the credential if there is a match. You can use an asterisk (*) as a wildcard to match any number in an octet (for example, 10.100.10.*), or [x-y] to match a range of numbers (from x to y, for example, 10-20).
For a more thorough explanation of IP address patterns, see Understanding IP Address Patterns.
User
The username configured on the LOM interface, for example, root.
Password
Confirm Password
The password configured for the username. Enter the password in both fields.
Credentials Shortcut Menu Options
Use the credentials shortcut menu options to perform tasks such as modifying or deleting a selected device credential, or adding or removing a stop flag on a selected device credential.
How to Open the Shortcut MenuSelect Tools > Device Credentials to open the Credentials page. Select a credential and right-click to display the menu options.
Related Topics•
•
•
•
Field Reference
