Table Of Contents
Managing the VFrame System
Backing Up and Recovering the VFrame Database
Understanding How VFrame Creates Automatic Backups
Recovering the Most Recent Automatic Backup
Creating Your Own Database Backup
Recovering Your Own Database Backup
Configuring System Settings
Configuring SMTP Credentials for E-Mail Notifications
Configuring Syslog Server Notifications
Configuring Static Routes
Configuring Device Managers
Migrating the Golden Image Repository
Managing High Availability (Redundancy)
Understanding VFrame High Availability
Changing the Active Status of a System
Using the Command Line on the Server
Command Processing Environment
Getting Help about Commands
Command Reference
clear
config
copy
db
debug
del
do
end
exit
gir
install
interface
ip
license
ntp
ping
reboot
redundancy
setup
show cdp
show clock
show fault
show gir
show hardware
show install
show interface
show ip
show license
show logging
show logins
show ntp
show process
show redundancy
show system
show tech
show version
shutdown
ssh
tech
telnet
traceroute
user password
vha
Server Administration Reference
System Settings Dialog Box
SMTP Tab, System Settings Dialog Box
Syslog Tab, System Settings Dialog Box
VFrame Routing Table, System Settings Dialog Box
Device Manager Tab, System Settings Dialog Box
Device Manager Parameter Variables
Managing the VFrame System
These topics describe various management tasks related to maintaining the VFrame system, as opposed to managing a server farm.
•
Backing Up and Recovering the VFrame Database
•
Configuring System Settings
•
Migrating the Golden Image Repository
•
Managing High Availability (Redundancy)
•
Using the Command Line on the Server
•
Server Administration Reference
Backing Up and Recovering the VFrame Database
Data backup is critical to reducing the risk of unexpected outages. These topics describe VFrame backup and recovery:
•
Understanding How VFrame Creates Automatic Backups
•
Recovering the Most Recent Automatic Backup
•
Creating Your Own Database Backup
•
Recovering Your Own Database Backup
Understanding How VFrame Creates Automatic Backups
VFrame automatically backs up its database at regular intervals. You also can create your own backups whenever you want to take a snapshot of your data, in case you need to recover the database to the version that existed at that time.
There are two types of automatic backup:
•
Logical backup—Each time the database is changed, whether from your direct actions or from data collection, the changes are logged in log files that reside in the /nwdisks/2/ directory in the backup location that you configured during initial VFrame setup. When a log file fills, it is appended to the lbackup file in the same directory.
•
Physical backup—When the log files from logical backups are 65% full, or when one hour passes since the last physical backup (whichever comes first), a new physical backup of the database is created (the backup file), and a new lbackup is started. Before this is done, the backup and lbackup files are also copied to the /nwdisks/1/ directory.
Because VFrame replaces these files at least every hour, you should not rely on them for maintaining your system. Periodically create your own backup files at critical milestones to ensure that you can recover your system to a state that is meaningful to your organization.
Recovering the Most Recent Automatic Backup
If you corrupt your database and notice the problem right away, you can recover the most recent automatic backup file to restore your database. However, be aware that the automatic backup file mentioned in this procedure has at most a one-hour lifetime before it is replaced with a new backup file.
Before You Begin
Users should not be logged into VFrame. The recovery process stops system services, so users will be disconnected during the recovery.
Procedure
Step 1
Using an SSH client, log into the VFrame server using the admin username and password.
Step 2
If you are using the VFrame server in a high-availability setup with another VFrame server, disable redundancy before recovering the database by using the no redundancy enable command in configure mode:
Enter configuration commands, one per line. End with CNTL/Z.
vframe(config)# no redundancy enable
Step 3
Enter exit to return to User EXEC mode.
Step 4
Enter the db restore command specifying the /nwdisks/1/backup file, which is the most recent complete automatic backup file. VFrame stops system services before replacing the database.
vframe# db restore /nwdisks/1/backup
Backup file will be retrieved from /nwdisks/1
Waiting for 12 out of 13 processes to shutdown
Waiting for 10 out of 13 processes to shutdown
Waiting for 8 out of 13 processes to shutdown
Waiting for 7 out of 13 processes to shutdown
Waiting for 5 out of 13 processes to shutdown
Waiting for 4 out of 13 processes to shutdown
Waiting for 2 out of 13 processes to shutdown
Waiting for 1 out of 13 processes to shutdown
Waiting for 1 out of 13 processes to shutdown
Waiting for 0 out of 13 processes to shutdown
If you do not include the path, the backup file is retrieved from the default location /nwdisks/2.
Step 5
If you are using redundancy, reenable it.
Enter configuration commands, one per line. End with CNTL/Z.
vframe(config)# redundancy enable
Related Topics
•
Understanding How VFrame Creates Automatic Backups
•
Creating Your Own Database Backup
•
Recovering Your Own Database Backup
Creating Your Own Database Backup
To guard against accidental data corruption (through user error) or general system problems, you should periodically back up the database. Create backups at significant milestones so that you can recover your system to a known and desirable configuration.
Procedure
Step 1
Using an SSH client, log into the VFrame server using the admin username and password.
Step 2
Enter the db backup command with the filename that you want to use to create a backup:
vframe# db backup sample.backup
Backup file will be saved in /nwdisks/2
waiting for physical backup to complete
Physical backup is completed.
The backup location /nwdisks/2 is the default location. You can include a path in the filename to back up the file to a different location. However, the directory must either reside in the location identified as the backup location during initial system configuration or be mounted on it.
Related Topics
•
Understanding How VFrame Creates Automatic Backups
•
Recovering Your Own Database Backup
Recovering Your Own Database Backup
If you find that you need to return to a previous version of the database, due to data corruption or other system problems, recover a previous backup file that you created. If you need to try to recover the most recent automatic backup, see Recovering the Most Recent Automatic Backup.
Before You Begin
Users should not be logged into VFrame. The recovery process stops system services, so users will be disconnected during the recovery.
Procedure
Step 1
Using an SSH client, log into the VFrame server using the admin username and password.
Step 2
If you are using the VFrame server in a high-availability setup with another VFrame server, disable redundancy before recovering the database by using the no redundancy enable command in configure mode:
Enter configuration commands, one per line. End with CNTL/Z.
vframe(config)# no redundancy enable
Step 3
Enter exit to return to User EXEC mode.
Step 4
Enter the db restore command with the filename you want to use to create a backup. VFrame stops system services before replacing the database.
vframe# db restore sample.backup
Backup file will be retrieved from /nwdisks/2
Waiting for 12 out of 13 processes to shutdown
Waiting for 10 out of 13 processes to shutdown
Waiting for 8 out of 13 processes to shutdown
Waiting for 7 out of 13 processes to shutdown
Waiting for 5 out of 13 processes to shutdown
Waiting for 4 out of 13 processes to shutdown
Waiting for 2 out of 13 processes to shutdown
Waiting for 1 out of 13 processes to shutdown
Waiting for 1 out of 13 processes to shutdown
Waiting for 0 out of 13 processes to shutdown
The /nwdisks/2 directory is the default location. If you created the backup in a different directory, enter the full path with the filename. For example, to recover a file in the /repository/ directory, enter:
vframe# db restore /repository/sample.backup
Step 5
If you are using redundancy, reenable it.
Enter configuration commands, one per line. End with CNTL/Z.
vframe(config)# redundancy enable
Related Topics
•
Understanding How VFrame Creates Automatic Backups
•
Creating Your Own Database Backup
•
Recovering the Most Recent Automatic Backup
Configuring System Settings
Several system-level settings affect how the product functions. These sections describe how to configure these settings:
•
Configuring SMTP Credentials for E-Mail Notifications
•
Configuring Syslog Server Notifications
•
Configuring Static Routes
•
Configuring Device Managers
Configuring SMTP Credentials for E-Mail Notifications
You can configure fault notifications for resources or service networks to send e-mail notifications to selected users. Before VFrame can send these notifications, you must configure an e-mail address for the product to use.
Before You Begin
•
Log into the Admin context to change SMTP settings.
•
Create the e-mail account you want VFrame to use in your SMTP server.
Procedure
Step 1
Select File > System Settings to open the System Settings dialog box (see System Settings Dialog Box).
Step 2
Click the SMTP tab (see SMTP Tab, System Settings Dialog Box).
Step 3
Enter the SMTP server and e-mail account name that VFrame should use for sending e-mail notifications. If the SMTP server requires authentication, enter the required username and password for logging into the server.
Step 4
Click Test Settings to ensure that VFrame can use the specified account. You are prompted for an e-mail address to receive the test message, for example, admin@example.com.
Step 5
Click OK to save your settings.
Configuring Syslog Server Notifications
You can identify a syslog server that should receive messages from VFrame. You can then use your syslog server to monitor the VFrame system.
Before You Begin
Log into the Admin context to change syslog notification settings.
Make sure that the syslog server exists and is configured. VFrame does not configure or manage the syslog server.
Procedure
Step 1
Select File > System Settings to open the System Settings dialog box (see System Settings Dialog Box).
Step 2
Click the Syslog tab (see Syslog Tab, System Settings Dialog Box).
Step 3
Enter the IP address or DNS name of the syslog server in Server Address.
Step 4
Select the types of messages you want sent to the syslog server. For each type you select, also select the VFrame severity of the message. Messages with your selected severity (or worse) are sent to the syslog server.
Step 5
Click Save to save your changes.
Configuring Static Routes
VFrame must have a route to any address range it manages, that is, any address range you include in IP Address Range resource pools. If the default gateway you configure for VFrame has routes to all of these address ranges, you do not need to configure any static routes. Configure static routes only if VFrame is unable to route packets to a managed network.
To configure static routes, you can use this procedure, or you can use the ip route command in a VFrame CLI session, as described in ip. There is no difference between the methods.
Before You Begin
Log into the Admin context to change the routing table.
Procedure
Step 1
Select File > System Settings to open the System Settings dialog box (see System Settings Dialog Box).
Step 2
Click the VFrame Routing Table tab (see VFrame Routing Table, System Settings Dialog Box).
Step 3
To add a route:
a.
Click Add. The Add New Route dialog box opens.
b.
Enter this information:
•
Network Address—The network address for the network containing the IP address range that needs a static route. For example, 10.100.50.0.
•
Netmask—Select the subnet mask for the network address.
•
Gateway—Enter the IP address of the gateway that VFrame should use when communicating with the network.
•
Metric—Enter the relative weight for this gateway, from 0 (the highest) to 32767.
c.
Click OK. VFrame tests the route and adds it to the routing table if it is usable.
Step 4
To delete a route, select it in the table and click Delete.
Related Topics
•
Adding IP Address Resources
•
show ip
Configuring Device Managers
When you view devices on the Resources or Pools tabs, or on the Acquired Resources tab on the Operations tab, you can right-click on the device to get a shortcut menu. One of the commands on the menu, Device Manager, allows you to start an external program to connect to the device. For example, you could start an SSH client session with a Catalyst switch.
Before you can use the Device Manager command, you must configure the applications that users can select from.
Before You Begin
Log into the Admin context to configure device managers.
Procedure
Step 1
Select File > System Settings to open the System Settings dialog box (see System Settings Dialog Box).
Step 2
Click the Device Manager tab (see Device Manager Tab, System Settings Dialog Box).
Step 3
To add a device manager:
a.
Click New. The Assign Device Manager dialog box opens.
b.
Enter this information:
•
Device Type—Select the type of device for which this application can be used. For example, Catalyst switches. When users select the Device Manager command, they are presented only with device managers defined for the type of device selected.
•
Display Name—The name of the device manager. The name appears in the device managers table and also is the name users will select when they use the Device Managers command.
•
Application—Select the application to use for the device manager, if it is already defined in the list. Otherwise, choose the << Browse an Application item from the drop-down list. You must select the list item, not the item that appears in the combo box.
To select a Windows command-line utility, find it in the Windows/system32 (or equivalent) folder.
•
Parameters and Variables—Select the variables to include as parameters on the application's executable command (if any). Type in hard-coded parameters (such as -h) and add variables where appropriate.
To add variables to the parameters list, select them in the variables list in the order in which they should appear on the command. The available variables differ depending on the device type, so you must first select a device type before selecting variables. VFrame replaces the variables with the specific properties of the device selected when the Device Manager command is used. You must select only those variables that your device manager is expecting. For an explanation of the available variables, see Device Manager Parameter Variables.
c.
Click OK. VFrame adds the device manager to the device managers table, but the information is not yet saved.
Step 4
To modify a device manager's properties, select it in the table and click Edit. Make your changes in the Assign Device Manager dialog box and click OK. VFrame changes the device manager properties in the device managers table, but the information is not yet saved.
Step 5
To delete a device manager, select it in the table and click Delete. VFrame deletes the device manager from the device managers table, but the deletion is not yet permanent.
Step 6
Click OK on the System Settings dialog box to save all changes you have made to the device managers list.
Related Topics
•
Action and Shortcut Menu Commands, page 7-44
Migrating the Golden Image Repository
The golden image repository is the disk space that you use to store golden images. Eventually, you might need to move the repository from its current location to a new one. For example, you might be replacing the physical storage device, or you might be running out of space in the current repository.
To view information about the current location of the repository, and its available space, select Tools > Server Images and click View Repository Setup.
These are your options for the golden image repository:
•
Local—On the VFrame Data Center Director.
•
SAN—On a logical unit in a storage array. For new repositories, VFrame removes all partitions from the logical unit, creates a new single partition covering the entire disk, and creates the appropriate filesystems. Before migrating the repository to a LUN, the LUN must accessible from the VFrame Data Center Director. The LUN must be zoned with one or both of the VFrame Data Center Director's HBAs and mapped on the storage array.
•
NFS—On a volume in a NAS filer. For new repositories, VFrame creates a new Qtree named vfdc_gir and modifies the export rule for the Qtree and volume.
If you are configuring VFrame for high availability, you must configure the golden image repository on a LUN or volume.
If you will be storing a large number of golden images, it is also best to use a LUN or volume because of the relatively more limited space on the VFrame Data Center Director. We recommend that you do not use the repository's volume or LUN for other purposes. Instead, devote its use to the repository.
Because golden image repository configuration requires the shutdown of some services, it is a disruptive process. It is best to choose a location with sufficient storage during initial system configuration.
Note
Migrating the golden image repository does not affect any operational servers, which continue to function normally. During migration, the VFrame user interface is not available. Migrate the repository during off hours to minimize user disruption.
Before You Begin
You cannot migrate the repository to a volume or LUN that is currently managed in VFrame.
Create or locate a location for the repository, and gather the information you will need to identify the location. You will be asked for this information:
•
For NAS filer volumes:
–
IP address of the NAS filer.
–
Volume name.
–
User name and password.
•
For storage array LUNs:
–
Port World-Wide Name (WWN) for the storage array port.
–
Logical unit number.
Procedure
Step 1
Using an SSH client, log into the VFrame server using the admin username and password.
Step 2
From User EXEC mode, enter the config command to enter configure mode:
Enter configuration commands, one per line. End with CNTL/Z.
Step 3
Enter the gir migrate command. Enter yes when asked if you want to migrate the repository:
vframehost(config)# gir migrate
Warning: Migrating Golden Image Repository will require
shutting down all system services and migration
of golden images might take a long time.
Would you like to migrate the GIR now (yes/no) [no]? yes
Step 4
Follow the prompts to specify the storage location of the repository. This command migrates the repository from its existing location to the new location. The following is an example of specifying a NAS filer volume:
Enter the new GIR location type: Local, NFS or SAN (L/N/S)? N
Enter the Filer IP: 10.100.30.55
Enter the Volume Name: girvol
Migrating to a NetApp filer.
Please enter a username for 10.100.30.55: root
Please enter a password for 10.100.30.55:
Step 5
If the repository is not currently on the local system, you are asked for the login information for the current repository. Enter the required information. For example, the following prompts appear if the repository is on a NAS filer volume:
Migrating from a NetApp filer.
Please enter a username for 10.100.30.66: root
Please enter a password for 10.100.30.66:
Step 6
You are next asked whether you want the old repository cleaned up. If you respond yes, all files in the old repository are deleted:
Would you like to cleanup the old GIR after migration is complete?
(yes/no): yes
Step 7
You are next asked to confirm that you want to shut down services and reconfigure the repository. If you answer no, your configuration changes are not applied, and no changes are made to the repository.
After shutting down services, VFrame copies the golden images to the new location, deletes the contents of the old repository if you elected to do so, and restarts services:
Java and image management need to be down to run migration.
Is it ok to shut down these services? (yes/no): yes
Attempting to mount new GIR to a temporary place.
Waiting for services to shutdown...
Copying 9499368 KB from /gir to /mnt/girtemp... copy is 100% complete
Attempting to unmount the old GIR.
Removing 9499368 KB from /gir/vfdc_gir... remove is 100% complete
Remounting new GIR to permanent location.
Updating database and fstab to reflect new GIR.
GIR migration is complete.
To verify the repository configuration, you can enter the show gir command in User EXEC mode, or the do show gir command in configure mode.
Step 8
If you are migrating the repository for a redundant pair of VFrame Data Center Directors, enter the gir setup-ha-secondary command on the second system and specify the same repository location. This ensures that both systems use the same repository.
Related Topics
•
Managing Server Images
•
Understanding the Golden Image Repository
•
gir
•
show system
Managing High Availability (Redundancy)
You can configure two VFrame Data Center Directors as a redundant pair. This high-availability configuration ensures that there is a backup system available in case the primary system fails. These sections help you understand and manage redundancy. Redundancy must be configured during initial system setup, as explained in the Cisco VFrame Data Center 1.1 Installation and Configuration Guide. These sections give you further information about redundancy and how to manage it in a functioning system.
•
Understanding VFrame High Availability
•
Changing the Active Status of a System
Understanding VFrame High Availability
You can configure two VFrame Data Center Directors as peers in a single redundant pair. In a redundant pair, only one member of the pair is the active system; the other member is the standby. If the active peer stops functioning, the standby takes over for it, so that the time the VFrame system is down is minimized. This provides a high-availability setup required by many data centers.
When configured as a redundant pair, any update to the VFrame database requires a concurrent update to the database of the standby system. This maintains consistent databases and minimizes data loss caused by system problems.
During initial system configuration, the first system that you configure becomes the active peer. If the active system reboots, shuts down, or otherwise becomes unavailable, the standby system takes over and becomes the active system. It remains active unless it becomes unavailable for some reason. No member of the pair is the "default" active member. If you reboot the systems, whichever finishes booting first becomes the active member (in case the both finish rebooting at the same time, the system with the higher IP address becomes the active member). You can, however, force a system to become the active or standby peer if you need to for any reason (see Changing the Active Status of a System).
From a user's perspective, there is one difference between a system running as a redundant pair and one running standalone. Instead of logging into the system using the system's management interface IP address, users log in using the virtual IP (VIP) address of the management interface. The VIP address is the same for both members of the redundant pair so user connections are completed no matter which device is active. If you need to use the CLI, however, you need to log into the management interface IP address to ensure that you are configuring the expected system.
If you need to reboot or shut down the active member of a redundant pair, first use the redundancy resign command to give up active status. Explicit resignation prevents a delay in the standby member taking over active status.
Changing the Active Status of a System
In a redundant pair, one peer is active, the other is standby. You can force the active/standby status to change if necessary. For example, you might want to change the active peer to the standby peer to do system maintenance or to recover the database.
Procedure
Step 1
Log into the system whose status you want to change. Use the management interface's IP address, not the virtual IP (VIP) address.
If you are not sure about the status of the system, use the show redundancy status command to determine if the system is the active or the standby system.
Step 2
Use the config command to enter configure mode:
Enter configuration commands, one per line. End with CNTL/Z.
Step 3
Do one of the following:
•
If the system you are logged into is the active peer, use the redundancy resign command to change the status from active to standby, and give active control to the peer.
vframehost(config)# redundancy resign
•
If the system is the standby peer, use the redundancy coup command to change the status from standby to active, taking control from the peer.
vframehost(config)# redundancy coup
Related Topics
•
Understanding VFrame High Availability
•
redundancy
Using the Command Line on the Server
You can perform several server management tasks from an SSH or console session. These sections describe how to use the command line and the various commands that you can enter when logged into the VFrame server using an SSH client:
•
Command Processing Environment
•
Getting Help about Commands
•
Command Reference
Command Processing Environment
When you connect to the VFrame server using SSH or the console port, you are logging into the Admin context. You must log in using the admin user account; no other account can log into the server.
VFrame does not evaluate role permissions for the admin user when this user is logged into a command-line session. The admin user is permitted to use any command.
In a command-line session, the commands you can enter depend on the mode in which you are operating. You can enter these command modes:
•
User EXEC mode—You are placed in User EXEC mode when you initially log in.
•
Configure mode—You are placed in configure mode when you enter the config command. You will see (config) in the command prompt when you are in this mode.
•
Configure Interface mode—You are placed in Ethernet interface configure mode when you enter the interface command in configure mode. You will see (config-eth) in the command prompt when you are in this mode.
When you are in one of the configure modes, you can execute User EXEC commands using the do command. For example, to enter the show version command in configure mode, you would enter do show version.
Getting Help about Commands
You can get help information about commands when you are logged into the server through the console or an SSH session.
•
Enter a question mark (?) on the command line to see the commands available in the current mode.
•
Enter a question mark after partial text or part of a command to see the commands or parameters that can complete the string. For example:
–
show ? displays the parameters available on the show command.
–
sh? displays the commands that start with the letters sh.
If you enter part of a command and press the Tab key, you will see the same results as if you typed ? in the last space. However, if the characters you entered only match one string, VFrame automatically completes the command or parameter for you.
Command Reference
The following sections describe the commands that you can use on the VFrame command line.
clear
Use the clear command to reset the system to the factory defaults. Resetting the system erases all configuration information. Use this command with care.
clear setup
Syntax Description
setup
|
Reset the system configuration to the factory defaults.
|
Defaults
None.
Command Modes
User EXEC mode.
Usage Notes
The system reboots after resetting the configuration.
Examples
This is an example of using the clear command to reset the system configuration:
Warning: Running clear setup will cause the system to shut down VFrame
Do you really want to clear the setup configuration: (yes/no) [no]?
yes
INFO: Removing admin password
No password found for user macrouser.
Broadcast message from root (pts/0) (Wed Dec 27 10:08:55 2006):
The system is going down for reboot NOW!
Related Commands
•
setup
config
Use the config command to enter configure mode so that you can enter commands that change the system configuration.
config [terminal]
Syntax Description
terminal
|
This optional keyword does not affect the command actions. Entering config or config terminal results in the same action.
|
Defaults
None.
Command Modes
User EXEC mode.
Usage Notes
None.
Examples
This is an example of issuing the config command to enter configure mode:
Enter configuration commands, one per line. End with CNTL/Z.
Related Commands
Enter ? in configure mode for a list of available commands.
copy
Use the copy command to copy certain types of files to the VFrame Data Center Director or to copy them from the system to a remote FTP or SCP server.
copy {
backup setup |
logs url {scp:// | ftp://} server_path_only |
setup {backup | url {scp:// | ftp://} path_and_filename} |
url {cdrom | protocol://server_path_filename} {install | license | setup}
}
Syntax Description
backup setup
|
Restore the local backup of the setup file. You are asked whether you want to reinitialize the database. Reinitialization erases all data, but it is necessary if the configuration you are applying is different from the one running on the system.
|
logs url {scp:// | ftp://} server_path_only
|
Collect and copy the system logs to the specified SCP or FTP server as a compressed tar file. The URL should include only the server name and path; do not include a filename. The URL can contain a maximum of 80 characters.
|
setup {backup | url {scp:// | ftp://} server_path_filename}
|
Copy the system setup file. You can specify these locations:
• backup—Back up the setup file on the VFrame system.
• url—Copy the setup file to the specified SCP or FTP server. You must specify the server, path, and filename of a system running SCP or FTP. If required, you are prompted to log into the target server. The URL can contain a maximum of 80 characters.
|
url {cdrom | protocol://server_path_ filename} {install | license | setup}
|
Copy the specified file to either the installation staging area or to the setup file.
• cdrom—The installation package is on a CD in the system's DVD/CD-ROM drive. This is an optional way to install a full-system recovery file.
• protocol—You can copy from a server running HTTP, TFTP, FTP, or SCP.
• server_path_filename—Include the server name, path, and filename in the URL. The URL can contain a maximum of 80 characters, including the protocol.
• install—Copy the file into the installation staging area. Use the install command to install the package.
• license—Copy the file to the license file staging area. Use this option when you are downloading a VFrame product license. Use the license command to install the license.
• setup—Copy the file to the system setup file, making it the new system configuration. You are asked whether you want to reinitialize the database.
|
Defaults
None.
Command Modes
User EXEC mode.
Usage Notes
Use the copy command to copy license files or update packages or patches to the system so that you can install them. Typically, you will obtain these licenses or packages from Cisco.com. You must set up a server running a supported protocol, and put the license or package on the server in a directory that will result in a total URL length of 80 characters or less, including the protocol part of the URL (for example, http://).
The copy command is also useful for copying log files to your FTP or SCP server so that you can maintain copies or send them to the Cisco Technical Assistance Center to help you resolve a problem.
Examples
This is an example of copying a patch to the installation staging area from an HTTP server that does not require user authentication. When prompted for a username, press Enter without entering a name.
vframehost# copy url http://maintenance.example.com/vframe/VFrameDebug.zip install
Getting image files... [OK]
Verifying patch signature... [OK]
Installing files in staging area... [OK]
This is an example of recovering a local backup of the system setup file and reinitializing the database. Not all output is shown.
vframehost# copy backup setup
Re-initialize the database. Warning erases and initializes all data in
the database: (yes/no) [no]? yes
Start database sent mts message to system manager
Re-initializing the database... This will take some time...
Related Commands
•
del
•
install
•
license
•
show install
•
show license
db
Use the db command to back up and recover the VFrame database.
db {backup filename | restore filename}
Syntax Description
backup filename
|
Back up the database to this file. You can include path information. The backup file is created on the backup storage medium selected when using the setup command.
|
restore filename
|
Restore the database from this backup file. You can include path information. The backup file must be on the backup storage medium selected when using the setup command.
|
Defaults
The default path is /nwdisks/2.
Command Modes
User EXEC mode.
Usage Notes
Before using this command, read the usage information in Backing Up and Recovering the VFrame Database. Be sure to disable redundancy if you are using a redundant setup before you restore a database. Also ensure that no one is logged into the system.
Examples
This is an example of backing up the database to a file named Jul2006.backup in the /workspace directory:
vframehost# db backup /workspace/Jul2006.backup
waiting for physical backup to complete
Physical backup is completed.
This is an example of restoring the backup file named Jul2006.backup:
vframe# db restore /workspace/Jul2006.backup
Waiting for 12 out of 13 processes to shutdown
Waiting for 10 out of 13 processes to shutdown
Waiting for 8 out of 13 processes to shutdown
Waiting for 7 out of 13 processes to shutdown
Waiting for 5 out of 13 processes to shutdown
Waiting for 4 out of 13 processes to shutdown
Waiting for 2 out of 13 processes to shutdown
Waiting for 1 out of 13 processes to shutdown
Waiting for 1 out of 13 processes to shutdown
Waiting for 0 out of 13 processes to shutdown
Related Commands
•
redundancy
•
setup
debug
Use the debug command to display debugging or system logs in real time.
debug services {
aaad |
daemons |
database |
dbmnt |
dhcpwd |
hdrh |
hsrp |
imagemgmt |
syscfg |
sysmgr |
sysmnt |
system |
trend |
vccjava |
vccvha |
vframe
}
Syntax Description
aaad
|
Display the debug log for the Authentication, Authorization, and Accounting (AAA) daemon, which controls user authentication.
|
daemons
|
Display the debug log for system daemons.
|
database
|
Display the debug log for the database service.
|
dbmnt
|
Display the debug log for the database mount service.
|
dhcpwd
|
Display the debug log for the DHCP service.
|
hdrh
|
Display the debug log for the HDRH service, which is used when the system is part of a redundant pair.
|
hsrp
|
Display the debug log for the Hot Standby Router Protocol (HSRP) service, which is used when the system is part of a redundant pair.
|
imagemgmt
|
Display the debugging log for the image management subsystem, which manages the creation of golden images from model servers.
|
syscfg
|
Display the debug log for the system configuration service.
|
sysmgr
|
Display the debug log for the system manager service.
|
sysmnt
|
Display the debug log for the system mount service.
|
system
|
Display the system syslog messages.
|
trend
|
Display the debug log for the trend service.
|
vccjava
|
Display the debugging log for the Java subsystem, which is required by the VFrame GUI.
|
vccvha
|
Display the debugging log for the VCC_VHA subsystem, which communicates with the VFrame Host Agent application that runs on model servers and managed application servers.
|
vframe
|
Display the VFrame syslog messages.
|
Defaults
None.
Command Modes
User EXEC mode.
Usage Notes
Press Ctrl+C to end the log display.
The debug command is similar to the show logging command. The difference is that the debug display keeps the log open so that you see messages as they are added to the log. The show logging command displays the contents of the log at the time you enter the command.
Examples
This is an example of displaying the AAA debugging log:
vframehost# debug services aaad
Sep 13 14:39:43,364 Added signal handler for SIGHUP
Sep 13 14:39:43,365 AAA daemon starting...
Sep 13 14:39:43,365 active_start()
Related Commands
•
show logging
•
show tech
del
Use the del command to delete a package from the installation staging area.
del install staged package_name
Syntax Description
install staged package_name
|
Delete the specified package from the installation staging area. Use the show install staged command to determine the package name.
|
Defaults
None.
Command Modes
User EXEC mode.
Usage Notes
Deleting a package from the installation staging area does not uninstall the package. You cannot uninstall a package that you installed using the install command.
Examples
This is an example of deleting the VFRAMEDebug package from the staging area:
vframehost# del install staged VFRAMEDebug
Related Commands
•
copy
•
install
•
show install
do
Use the do command to run a User EXEC mode command while in one of the configure modes.
do User_EXEC_command
Syntax Description
User_ EXEC_command
|
Any User EXEC mode command. Include the parameters required by the command.
|
Command Modes
Configure mode.
Configure interface mode.
Examples
This is an example of entering the ping command while in configure mode:
Enter configuration commands, one per line. End with CNTL/Z.
vframehost(config)# do ping 10.100.10.12
Related Commands
Enter do ? for a list of available commands.
end
Use the end command to leave either of the configure command modes and return to User EXEC mode.
end
Syntax Description
This command has no arguments or keywords.
Defaults
None.
Command Modes
Configure mode.
Configure interface mode.
Usage Notes
The difference between the end command and the exit command is that the end command always returns you to User EXEC mode (even if you are in configure interface mode) whereas the exit command takes you to the previous mode (in configure interface mode, it returns you to configure mode).
Examples
This is an example of entering the end command to leave configure mode:
Enter configuration commands, one per line. End with CNTL/Z.
Related Commands
•
exit
exit
Use the exit command to end the command mode session in which you are operating. If you use this command in User EXEC mode, it logs you out of the system.
exit
Syntax Description
This command has no arguments or keywords.
Defaults
None.
Command Modes
User EXEC mode.
Configure mode.
Configure interface mode.
Usage Notes
The difference between the end command and the exit command is that the end command always returns you to User EXEC mode (even if you are in configure interface mode) whereas the exit command takes you to the previous mode (in configure interface mode, it returns you to configure mode).
Examples
This is an example of using the exit command to leave configure mode:
Enter configuration commands, one per line. End with CNTL/Z.
Related Commands
•
end
gir
Use the gir command to configure the golden image repository. This command does not back up the repository. Instead, the command moves or remounts the repository.
gir {migrate | setup-ha-secondary | remount}
Syntax Description
migrate
|
Configure the repository and copy all data from the existing repository to the new one. Use this parameter when you want to move the repository to another location.
|
setup-ha-secondary
|
Configure the repository on the second member of a redundant (high availability) pair of VFrame systems. To use this command, you must first use gir migrate on the other system in the redundant pair, and configure an external repository (on either an NFS volume or SAN LUN). Use this command to identify the location of the repository.
|
remount
|
Remount the repository if it becomes unmounted from the VFrame system for some reason.
|
Defaults
The default golden image repository location is on the VFrame Data Center Director.
Command Modes
Configure mode.
Usage Notes
The gir command leads you through golden image repository configuration. You must know the location information of the storage location you select for the repository. If you are migrating an existing repository, you must also know the login information for the existing location. For detailed information, see Migrating the Golden Image Repository.
Examples
For an example, see Migrating the Golden Image Repository.
Related Commands
•
show gir
install
Use the install command to install software upgrades or other patches.
install {
abort |
update filename [force]
}
Syntax Description
abort
|
Stop a failed attempt to install an upgrade on a high-availability VFrame pair.
|
update filename
|
Install the named update package or patch. The package must be in the staging area. Use the show install staged command to view available packages.
|
force
|
(Optional.) Force the system to install the package. If you do not include this keyword, the system checks to see if the package is already installed and does not reinstall it if the system believes it is already installed.
|
Defaults
The install command does not install a package if it determines that the package is already installed.
Command Modes
User EXEC mode.
Usage Notes
Before you can install an update or patch, you must copy it into the staging area using the copy command. This is the typical sequence of commands:
•
copy—To copy the package from another server on the network to the system's installation staging area.
•
show install staged—To verify the package is in the staging area, and to verify the package name for use on the install command.
•
install—To install the package.
•
del—To delete the package from the staging area. You do not have to delete the package from the staging area unless you want to free the space.
You cannot uninstall a patch.
If you reinstall the entire system software, for example, by recovering the system, any packages in the staging area are erased.
Examples
This is an example of installing a patch called VFRAMEDebug:
vframehost# install update VFRAMEDebug
PROGRESS: extraction finished Fri Jul 28 11:04:59 PDT 2006
PROGRESS: Start upgrade install script
PROGRESS: Install completed OK
Related Commands
•
copy
•
del
•
show install
interface
Use the interface command to enter configure interface mode for the specified interface.
interface eth int_number
Syntax Description
int_number
|
The interface number of the interface you want to configure. Values are 0, 1, 2.
|
Defaults
None.
Command Modes
Configure mode.
Usage Notes
Most interface configuration, such as specifying the IP address and subnet mask, is done using the setup command.
Examples
This is an example of entering the configure interface mode for the eth2 interface (typically used as the high-availability interface):
Enter configuration commands, one per line. End with CNTL/Z.
vframehost(config)# interface eth 2
Related Commands
•
end
•
setup
•
shutdown
ip
Use the ip command to configure IP-related settings such as the DNS configuration, static routes, and firewall settings.
[no] ip {
default-gateway IP_address |
dns {domain name | server IP_address} |
firewall eth number {management | data | open} |
firewall {start | stop} |
route Network_IP Netmask Gateway_IP [metric num]
}
Syntax Description
default-gateway IP_address
|
The IP address of the default gateway. This address is normally set using the setup command. If you need to change the default gateway, you should change it from a console session so that you do not loose connectivity to the system. Before configuring a new gateway, you must first remove the existing gateway using the no default-gateway command, specifying the existing gateway address.
|
dns domain name
|
Configure the domain name for the Domain Name System (DNS), for example, example.com.
|
dns server IP_address
|
Add the specified DNS server. The server is added to the configuration after all existing servers; it does not replace any DNS server already configured. Servers are searched top to bottom; your primary DNS server should be at the top of the list.
To remove a DNS server, use the no ip dns server command, specifying the address of the server you want to remove.
|
firewall eth number {management | data | open}
|
Configure the firewall settings for the specified Ethernet interface.
• number—The interface number; 0, 1, or 2.
• management—Apply firewall settings that are appropriate for the management interface.
• data—Apply firewall settings that are appropriate for the server communication interface.
• open—Do not apply firewall settings beyond the default settings.
See below for detailed information about the firewall settings options.
|
firewall start
|
Start the firewall IP tables, which enables your firewall settings.
|
firewall stop
|
Stop the firewall IP tables, which disables your firewall settings and all interfaces use the default settings.
|
route Network_IP Netmask Gateway_IP [metric num]
|
Create a static route in the routing table for the specified network. Include the network IP address, the subnet mask for the network, and the IP address of the router to be used as the gateway for the network.
(Optional.) You can also specify a metric to define the relative priority of the route. The highest priority is 0, the lowest is 32767. It is usually best to use the default metric.
To remove a route, use the no ip route command specifying the route you want to remove.
|
Defaults
Firewalls are not configured on any interface.
Command Modes
Configure mode.
Usage Notes
These are the firewall settings. Use the show ip iptables command to display more detailed information.
•
Loopback interface—Permit all access.
•
All interfaces (defaults if you start the firewall, even for open interfaces)—Drop these from external sources:
–
Packets on the FORWARD chain.
–
Packets deemed unclean by the system.
–
Stealth TCP port scans.
–
Packets to ports 2812, 5025, 32772, and 7911.
•
Management firewall settings—If you configure an interface to use the management firewall, these additional items are dropped:
–
All DHCP incoming requests.
–
All packets from network 0/24.
–
All packets from 255.255.255.255/24.
–
All access to the database port.
–
All access to the VFrame Host Agent (VHA) port.
–
All access to NFS.
•
Data firewall settings—If you configure an interface to use the data firewall, these are the additional actions:
–
All DHCP packets are allowed.
–
All other broadcast traffic is dropped.
•
Open firewall settings—If you configure an interface to be open, only the default settings for all interfaces are used.
Examples
This is an example of adding a DNS server:
Enter configuration commands, one per line. End with CNTL/Z.
vframehost(config)# ip dns server 192.168.1.4
This is an example of configuring the eth0 interface to use the management interface firewall and starting the firewall:
Enter configuration commands, one per line. End with CNTL/Z.
vframehost(config)# ip firewall eth 0 management
vframehost(config)# ip firewall start
Related Commands
•
show ip
license
Use the license command to install a VFrame product license file.
license install filename
Syntax Description
install filename
|
Install the license with the specified filename. Before you use this command, use the copy command to download the license file to the VFrame Data Center Director.
|
Defaults
None.
Command Modes
Configure mode.
Usage Notes
VFrame has these types of product license:
•
Managed Switch Port—You must have a license for each switch port to which a managed server is connected. Port limits include ports on Ethernet and Fibre Channel switches. For example, if a server is using one Ethernet connection and two Fibre Channel connections to managed switches, that counts as three managed switch ports. VFrame includes a base license for 100 managed switch ports. If you need more managed ports, you must purchase and install additional managed switch port licenses.
To determine how many ports you using, open the VFrame GUI and select Help > About. The About dialog box displays your current licenses and how many ports you are using.
•
High Availability—If you want to enable redundancy on VFrame to provide a high-availability configuration with another VFrame Data Center Director, you must install a high-availability license on the active VFrame Data Center Director.
To obtain and install a product license, follow these steps:
1.
Enter the show license hostid command to obtain your host ID. If you are obtaining a high-availability license, get the host ID from both VFrame Data Center Directors.
2.
Go to Cisco.com and use your host ID to purchase the license you require. Place the license on a server that is accessible to the VFrame Data Center Director and that supports a file download protocol supported by VFrame (for example, SCP, FTP, TFTP, or HTTP).
3.
Enter the copy url url_of_license_file license command to download the license to your VFrame Data Center Director. If you are installing a high-availability license, download the license to the active member of the redundant pair.
4.
Enter config to start configure mode.
5.
Enter the license command to install the downloaded license file.
6.
Enter exit to leave configure mode.
7.
Enter show license status to verify that the license was installed.
Examples
This is an example of installing a license file:
Enter configuration commands, one per line. End with CNTL/Z.
vframehost(config)# license install vfdc_20070531.txt
Successfully installed license file!
Related Commands
•
copy
•
show license
ntp
Use the ntp command to configure Network Time Protocol (NTP) settings, which control the system clock.
[no] ntp {
peer name [prefer] |
server name [prefer]
}
Syntax Description
peer name [prefer]
|
The DNS name or IP address of a peer with which the system synchronizes its clock. The system's clock can change to the peer's clock, or the peer's clock might change the system's clock.
(Optional.) Specify prefer if you are configuring more than one peer and you want the system to prefer to synchronize with this peer.
Use the no ntp peer command, specifying the peer's name, to remove a system as a peer.
|
server name [prefer]
|
The DNS name or IP address of an NTP server with which the system should synchronize its clock. The NTP server influences the system's clock, but the system does not in turn influence the NTP server's clock.
(Optional.) Specify prefer if you are configuring more than one server and you want the system to prefer to synchronize with this server.
Use the no ntp server command, specifying the server's name, to remove a system as a server.
|
Defaults
NTP is not used.
Command Modes
Configure mode.
Usage Notes
If you remove all NTP peers and servers, NTP is not used as the time protocol. The system clock is kept locally.
Examples
This is an example of specifying an NTP peer:
Enter configuration commands, one per line. End with CNTL/Z.
vframehost(config)# ntp peer 10.100.40.16
This is an example of specifying an NTP server and identifying it as the preferred server:
Enter configuration commands, one per line. End with CNTL/Z.
vframehost(config)# ntp server 10.100.40.17 prefer
Related Commands
•
show ntp
•
show clock
ping
Use the ping command to test whether a remote system can receive ICMP packets. The command sends ICMP echo requests and waits for ICMP echo replies. A successful ping indicates that the remote system is alive and responsive.
ping IP_address
Syntax Description
IP_address
|
The IP address of the remote system whose connectivity you are testing.
|
Defaults
None.
Command Modes
User EXEC mode.
Usage Notes
The ping command sends four echo requests. Press Ctrl+C to end the ping before the four requests are finished.
Examples
This is an example of pinging the remote system 10.100.30.50:
vframehost# ping 10.100.30.50
PING 10.100.30.50 (10.100.30.50) 56(84) bytes of data.
From 10.100.30.1: icmp_seq=0 Redirect Host (New nexthop: 10.100.30.50)
64 bytes from 10.100.30.50: icmp_seq=0 ttl=64 time=0.642 ms
64 bytes from 10.100.30.50: icmp_seq=1 ttl=64 time=0.070 ms
64 bytes from 10.100.30.50: icmp_seq=2 ttl=64 time=0.065 ms
64 bytes from 10.100.30.50: icmp_seq=3 ttl=64 time=0.069 ms
--- 10.100.30.50 ping statistics ---
4 packets transmitted, 4 received, 0% packet loss, time 3011ms
rtt min/avg/max/mdev = 0.065/0.211/0.642/0.248 ms, pipe 2
Related Commands
•
traceroute
reboot
Use the reboot command to reboot the VFrame Data Center Director. Rebooting shuts down the system, and then restarts it. In comparison, the shutdown command shuts down the system without restarting it.
reboot
Syntax Description
This command has no arguments or keywords.
Defaults
None.
Command Modes
User EXEC mode.
Usage Notes
After entering the reboot command, you are asked to confirm that you want to reboot the system. If you are connected to the system through an SSH client, you loose connection during the reboot and you must log in again. Enter y to continue, or enter n to stop the command and not reboot the system.
If you are rebooting a system that is a member of a high-availability redundant pair, and the system is the active member, use the redundancy resign command before the reboot command. Explicit resignation allows the standby system to take over active status without delay, making the transition smoother than if you simply reboot the system.
Examples
This is an example of rebooting the system:
Continue with reboot? [y/n] y
Broadcast message from root (pts/0) (Fri Jul 14 10:58:46 2006):
The system is going down for reboot NOW!
Related Commands
•
redundancy
•
shutdown
redundancy
Use the redundancy command to configure the high-availability features of VFrame. These settings determine how the members of a redundant pair function together. For more information on high availability, see Managing High Availability (Redundancy).
redundancy {
coup |
enable |
hellotime seconds |
holdtime seconds |
peer hostname DB_name HA_IP_address Server_Comm_IP_Address |
resign
}
no redundancy {
enable |
hellotime |
holdtime
}
Syntax Description
coup
|
Take over as the active member of the redundant pair. This command works only if the system is the standby member of the pair and redundancy is enabled.
|
enable
|
Turn on the redundancy high-availability feature. You need to use this command only if you turned off redundancy using the no redundancy enable command. Use the redundancy peer command to initially enable redundancy.
|
hellotime seconds
|
How often to send heartbeat signals to the other member of the redundant pair, in seconds. The default is to send signals every 10 seconds. You can specify an interval between 3 and 30 seconds.
Use the no redundancy hellotime command to return to the default setting.
|
holdtime seconds
|
How long to assume the peer is still functioning after not receiving a heartbeat from it. The default is 20 seconds, which coupled with the default hello time, means the system assumes the peer is functioning until three consecutive heartbeats are missed. Hold time is reset every time a heartbeat is received. You can specify a hold time between 3 and 300.
After hold time is exceeded, the system assumes the peer is no longer functioning. If the system is currently the standby member of the pair, it takes over as the active member. To avoid unnecessarily quick failover, ensure that hold time is a multiple of hello time.
Use the no redundancy holdtime command to return to the default setting.
|
peer hostname DB_name HA_IP_address Server_Comm_IP_Address
|
Identify the other member of the redundant pair and enable redundancy. You must include these parameters, all of whose values are defined when running the setup command on the peer.
• hostname—The name of the peer. The fully qualified name is preferred (that is, include the domain name).
• DB_name—The name of the peer's database.
• HA_IP_address—The IP address of the peer's high availability interface, usually eth2.
• Server_Comm_IP_Address—The IP address of the peer's server communication interface, usually eth1.
|
resign
|
Give up status as the active member of the redundant pair. This command works only if the system is the active member of the pair and redundancy is enabled.
|
Defaults
Redundancy is disabled. Hello time is 10 seconds. Hold time is 20 seconds.
Command Modes
Configure mode.
Usage Notes
You must configure high-availability parameters using the setup command for any of the redundancy commands to work. You also must install and configure the peer correctly. See the Cisco VFrame Data Center 1.1 Installation and Configuration Guide for information on initial system configuration.
Use the show redundancy status and show redundancy config commands to view the current status and configuration.
For redundancy to work correctly, the show system services command will show the hdrh and hsrp services as started. When VFrame is operating in standalone mode, the opposite state is normal for these services. (The hdrh service is the high-availability data replication helper; the hsrp service is the Hot Standby Router Protocol.)
If you did not configure the system to use an external database backup location during setup, the redundacy peer command prompts you to select a backup location. You must select a remote backup location to successfully configure redundancy.
If you disable redundancy, and reconfigure the system to use the local system as the backup location, the redundancy enable command prompts you to select a remote backup location.
Examples
This is an example of identifying a peer and enabling redundancy:
Enter configuration commands, one per line. End with CNTL/Z.
vframehost(config)# redundancy peer vframepeer.example.com peerdb
10.100.40.25 10.100.30.15
This is an example of resigning active status to the peer:
Enter configuration commands, one per line. End with CNTL/Z.
vframehost(config)# redundancy resign
This is an example of taking active status away from the peer:
Enter configuration commands, one per line. End with CNTL/Z.
vframehost(config)# redundancy coup
Related Commands
•
db
•
setup
•
show redundancy
setup
Use the setup command to perform the initial system configuration. Normally, you run this command only once.
setup
Syntax Description
This command has no arguments or keywords.
Defaults
If you rerun this command, default settings are based on your previous inputs.
Command Modes
User EXEC mode.
Usage Notes
The setup command leads you through system configuration, asking for various inputs based on your previous inputs. In general, you should rerun this command only if you want to change the high-availability configuration.
Most changes require that you reinitialize the database, which erases all information in the database, including all items you or other users have created using the product. It also removes the golden image repository configuration.
For detailed information about using this command, see the Cisco VFrame Data Center 1.1 Installation and Configuration Guide.
Examples
This is an example of running the setup command. Password input is displayed, although passwords are not displayed in the actual command interaction. In this example, <enter> indicates that you press the Enter key without entering any text.
Setup is used to initialize the basic system parameters
needed for VFrame to start running.
Entering System Configuration wizard
Use ctrl-c to abort configuration dialog at any prompt.
Current/default settings are in square brackets '[]'.
Hit enter to choose current/default value.
Would you like to configure admin password (yes/no) [no]? yes
Changing password for user admin.
BAD PASSWORD: it is too short
Retype new password: admin
passwd: all authentication tokens updated successfully.
Would you like to configure password for user 'macrouser' (yes/no)
[no]? yes
Changing password for user macrouser.
Retype new password: macrouser
passwd: all authentication tokens updated successfully.
Enter hostname [localhost.localdomain]: vframehost.example.com
Enter Management (Northbound) Interface: eth [0]: 0
Enter eth0 IP address []: 10.100.20.10
Enter eth0 netmask []: 255.255.255.0
Enter Server Communication Interface: eth [1]: 1
Enter eth1 IP address []: 10.100.30.10
Enter eth1 netmask []: 255.255.255.0
Enter default-gateway IP address []: 10.100.20.1
Configure DNS Server (yes/no) [yes]? <enter>
Enter the DNS Server IP address []: 10.100.20.55
Please enter DB backup file storage type 0:local, 1:nfs, 2:san [0] 0
Please enter a unique Database Server name for this system
consisting of (at most 32) alphanumeric chars [vccids]: <enter>
Manage storage arrays through storage array macros?
Answering "no" will require LUN zoning on MDS with
storage array security turned off. (yes/no) [yes]? yes
Would you like to configure HA interface (yes/no) [no]? <enter>
You have entered the following configuration:
Hostname : vframe.example.com
Management Interface : eth0
Management IP/Netmask : 10.100.20.10 255.255.255.0
Server Comn Interface : eth1
Server Comn IP/Netmask : 10.100.30.10 255.255.255.0
Default Gateway IP : 10.100.20.1
DNS Domain Name : example.com
DNS Server IP : 10.100.20.55
VHA connection over SSL: no
Storage mode : Storage Template Array
DB backup storage : local
Would you like to apply this configuration (yes/no) [yes] ? <enter>
Waiting for 12 out of 14 processes to shutdown
Waiting for 10 out of 14 processes to shutdown
Waiting for 8 out of 14 processes to shutdown
Waiting for 6 out of 14 processes to shutdown
Waiting for 4 out of 14 processes to shutdown
Waiting for 2 out of 14 processes to shutdown
Waiting for 0 out of 14 processes to shutdown
Wait for vcc_java to go down
................Starting services
Related Commands
•
clear
•
show redundancy
•
show system
•
show version
show cdp
Use the show CDP command to display information about the system's Cisco Discovery Protocol (CDP) settings and neighbors.
show cdp {
all |
entry {all | name device_name} |
global |
neighbors [detail]
}
Syntax Description
all
|
Display CDP configuration information for all CDP-enabled interfaces.
|
entry {all | name device_name}
|
Display information on entries in the CDP table. You can show all entries (all), or just the entry for the specified device (name device_name).
|
global
|
Display information about the system's global CDP configuration.
|
neighbors [detail]
|
Display information about the system's neighbors that are running CDP. Include the detail keyword to show full information for each neighbor.
|
Defaults
None.
Command Modes
User EXEC mode.
Usage Notes
See the Cisco IOS Software documentation for detailed information about CDP, including how to configure and manage it in your network.
Examples
This is an example of displaying global CDP configuration information:
vframehost# show cdp global
Sending CDP packets every 60 seconds
Sending a holdtime value of 180 seconds
Sending CDPv2 advertisements is enabled
This is an example of displaying the list of CDP neighbors:
vframehost# show cdp neighbors
Capability Codes: R - Router, T - Trans-Bridge, B - Source-Route-Bridge
S - Switch, H - Host, I - IGMP, r - Repeater
Device ID Local Intrfce Hldtme Capability Platform Port ID
switch1.example.com eth0 174 R S I WS-C6509-E Gig3/24
switch1.example.com eth1 174 R S I WS-C6509-E Gig3/37
Related Commands
•
show system
show clock
Use the show clock command to view the current date and time as defined on the system.
show clock
Syntax Description
This command has no arguments or keywords.
Defaults
None.
Command Modes
User EXEC mode.
Usage Notes
None.
Examples
This is an example of displaying the system clock:
Fri Jul 28 15:30:32 PDT 2006
Related Commands
•
ntp
•
show ntp
show fault
Use the show fault command to display information about VFrame system fault state machines.
show fault {history | status}
Syntax Description
history
|
Display historical information about VFrame system fault alarms. If there have not been any alarms, no output is shown.
|
status
|
Display the current status of all VFrame system fault alarms.
|
Defaults
None.
Command Modes
User EXEC mode.
Usage Notes
VFrame system fault alarms relate to the functioning of the VFrame Data Center Director instead of your data center equipment and service networks. You can configure notifications for these fault alarms in the SMTP system settings (see SMTP Tab, System Settings Dialog Box).
VFrame system fault state machines can have these states:
•
Clear—There is not an active fault alarm for this fault state machine. If there had been an active fault alarm, it has been resolved.
•
Raise—There is an active fault alarm for this fault state machine.
When you use the show fault history command, the fault alarm severity is represented by a number. The numbers have the following meanings:
•
0 (Emergency)—The system is unusable.
•
1 (Alert)—You must take action must immediately to resolve the problem.
•
2 (Critical)—This is a critical condition.
•
3 (Error)—This is an error condition.
The following are the VFrame system fault state machines:
•
HA Peer Unreachable—The high-availability peer for this VFrame Data Center Director cannot be reached. This fault applies only if you are operating in redundant mode.
To resolve the fault:
–
Use the show interface command to check if the HA Ethernet port is shut down. If the link status is down, enter interface configuration mode and use the no shutdown command to restart the port.
–
Because the HA peers are direct connected to each other, check the Ethernet cable.
–
If the cable is not the problem, ensure that the peer is functioning correctly. Reboot the peer if necessary.
–
Check the redundancy configuration in both peers to ensure they use the correct IP addresses.
•
DB Down—The VFrame database is not functioning correctly.
To resolve the problem, use the show system status command to determine if any database-related services are down. If they are, use the tech service reset command to restart the service. If this does not solve the problem, reboot the system.
•
DB Backup Down—The VFrame database backup is not functioning correctly.
To resolve the problem, check the system on which the database backup is running. If the system is functioning correctly, ensure that there is network access between VFrame and the backup system. If this does not solve the problem, reboot the VFrame system.
•
VFDC Service Down—One or more VFrame Data Center Director system services is not functioning correctly.
To resolve the problem, use the show system status command to determine which services are down, then use the tech service reset command to restart the service. If this does not solve the problem, reboot the system.
•
GIR Unreachable—The golden image repository (GIR) is not reachable.
To resolve the problem, check the system on which the GIR is running. If the system is functioning correctly, ensure that there is network access between VFrame and the GIR system. If this does not solve the problem, reboot the VFrame system.
•
VFDC in Unlicensed State—The license configured for VFrame is not adequate for your use of the system. Visit Cisco.com, purchase the licenses required for your use of the system, and install those licenses.
Examples
This is an example of displaying the current status of VFrame system fault alarms:
vframehost# show fault status
=====================================
HA Peer Unreachable CLEAR
VFDC in unlicensed state CLEAR
Related Commands
•
gir
•
interface
•
reboot
•
redundancy
•
show gir
•
show interface
•
show license
•
show redundancy
•
show system
•
shutdown
•
tech
show gir
Use the show gir command to display information about the golden image repository setup.
show gir
Syntax Description
This command has no arguments or keywords.
Defaults
None.
Command Modes
User EXEC mode.
Usage Notes
None.
Examples
This is an example of displaying golden image repository setup information:
vframehost(config)# show gir
Current GIR Information: NFS - Filer: 10.100.30.55 Volume: girvol
Related Commands
•
gir
show hardware
Use the show hardware command to display information about the system's hardware, including processor and interface details such as MAC addresses.
show hardware
Syntax Description
This command has no arguments or keywords.
Defaults
None.
Command Modes
User EXEC mode.
Usage Notes
None.
Examples
This is an example of displaying hardware information:
vframehost# show hardware
Model: HP ProLiant DL380 G4
Model: Intel(R) Xeon(TM) CPU 3.40GHz
Freq: 3400.295 MHz, Cache: 1024 KBytes
Model: Intel(R) Xeon(TM) CPU 3.40GHz
Freq: 3400.295 MHz, Cache: 1024 KBytes
Model: Intel(R) Xeon(TM) CPU 3.40GHz
Freq: 3400.295 MHz, Cache: 1024 KBytes
Model: Intel(R) Xeon(TM) CPU 3.40GHz
Freq: 3400.295 MHz, Cache: 1024 KBytes
Host Bus Adapter: qla2300/0
Node WWN: 200000e08b847b8e, Port WWN: 210000e08b847b8e
Related Commands
•
show interface
show install
Use the show install command to display information about packages available in the installation staging area or a history of packages installed on the system.
show install {
history [detail [name package_name] | short] |
staged [detail [name package_name]]
}
Syntax Description
history [detail [name package_name] |
short]
|
Display a history of packages installed on the system. You can include these optional keywords:
• detail—Display the installation logs. This setting shows you a lot of information about each step in the installation for each package installed. If you want to see the logs for a single package's installation, include the name keyword specifying the package name.
• short—Display brief information about installed packages. This is the default.
|
staged [detail [name package_name]]
|
Display packages available in the installation staging area.
Include the detail keyword to display detailed information about each package. If you only want detailed information on a specific package, include the detail name package_name keywords, specifying the name of the package.
|
Defaults
The default is to display the short version of the history or installation staging area information.
Command Modes
User EXEC mode.
Usage Notes
Use the show install staged command after you copy a package into the staging area to determine the exact name you will need to use on the install command.
Examples
This is an example of displaying the list of packages available in the installation staging area:
vframehost# show install staged
Patches waiting in staging area
Name Version Type Summary
----------------- -------- ------- -------------------
VFRAMEDebug 1.1 update VFRAME Debug patch
Related Commands
•
copy
•
del
•
install
show interface
Use the show interface command to display configuration information about the system's Ethernet interfaces.
show interface [eth number]
Syntax Description
eth number
|
(Optional.) The specific Ethernet interface about which you want to display information. The number can be 0, 1, or 2.
|
Defaults
Information about all interfaces is shown.
Command Modes
User EXEC mode.
Usage Notes
None.
Examples
This is an example of displaying information about the eth0 interface:
vframehost# show interface eth 0
IP address: 10.100.20.10, netmask: 255.255.255.0
broadcast address: 10.100.20.255
hardware address: 0:14:c2:c0:94:e7
Received: 114865 bytes, 892 packets, 0 input errors, 0 drops
Transmitted: 80600 bytes, 638 packets, 0 output errors, 0 drops
Related Commands
•
interface
•
setup
•
shutdown
show ip
Use the show ip command to display information about IP-related settings such as static route tables and DNS and firewall settings.
show ip {
dns |
firewall [eth number] |
iptables |
route
}
Syntax Description
dns
|
Display information about the Domain Name System (DNS) configuration.
|
firewall [eth number]
|
Display information about the firewall settings for the system's interfaces.
(Optional.) To display information about a specific interface, include the eth keyword with the number of the interface (0, 1, or 2).
|
iptables
|
Display the IP tables, which are used for implementing firewall settings. This information tells you the precise firewall settings.
|
route
|
Display the routing table.
|
Defaults
None.
Command Modes
User EXEC mode.
Usage Notes
For information on how to configure the settings displayed by this command, and on the various firewall settings, see the ip command.
Examples
This is an example of displaying the DNS configuration:
This is an example of displaying the firewall configuration.
vframehost# show ip firewall
firewall eth0 : management
Related Commands
•
ip
show license
Use the show license command to display information about the VFrame product license.
show license {
file [all | name filename] |
hostid |
status
}
Syntax Description
file [all | name filename]
|
Display the license files that are installed or downloaded. You can add these parameters to display different information related to license files:
• all—Display all installed licenses. The list does not include downloaded license files.
• name filename—Display information about the specified license file.
|
hostid
|
Display this system's host ID. Use this ID to obtain your product license from Cisco.
|
status
|
Display the current status of licenses installed on this system.
|
Defaults
None.
Command Modes
User EXEC mode.
Usage Notes
For information on installing a product license, see license.
Examples
This is an example of showing the system's host ID:
vframehost# show license hostid
This is an example of displaying the current license information for the system:
vframehost# show license status
Licensed Feature License count
--------------------------------------------------
LicVFrameAccessSwitchPortsMax 100
Related Commands
•
copy
•
license
show logging
Use the show logging command to display debugging or system logs.
show logging {
aaad |
daemons |
database |
dbmnt |
dhcpwd |
hdrh |
hsrp |
imagemgmt |
syscfg |
sysmgr |
sysmnt |
system |
trend |
vccjava |
vccvha |
vframe
}
Syntax Description
aaad
|
Display the debug log for the Authentication, Authorization, and Accounting (AAA) daemon, which controls user authentication.
|
daemons
|
Display the debug log for system daemons.
|
database
|
Display the debug log for the database service.
|
dbmnt
|
Display the debug log for the database mount service.
|
dhcpwd
|
Display the debug log for the DHCP service.
|
hdrh
|
Display the debug log for the HDRH service, which is used when the system is part of a redundant pair.
|
hsrp
|
Display the debug log for the Hot Standby Router Protocol (HSRP) service, which is used when the system is part of a redundant pair.
|
imagemgmt
|
Display the debugging log for the image management subsystem, which manages the creation of golden images from model servers.
|
syscfg
|
Display the debug log for the system configuration service.
|
sysmgr
|
Display the debug log for the system manager service.
|
sysmnt
|
Display the debug log for the system mount service.
|
system
|
Display the system syslog messages.
|
trend
|
Display the debug log for the trend service.
|
vccjava
|
Display the debugging log for the Java subsystem, which is required by the VFrame GUI.
|
vccvha
|
Display the debugging log for the VCC_VHA subsystem, which communicates with the VFrame Host Agent application that runs on model servers and managed application servers.
|
vframe
|
Display the VFrame syslog messages.
|
Defaults
None.
Command Modes
User EXEC mode.
Usage Notes
Enter q and press Enter if you want to stop the log display before reaching the end of the log.
The debug command is similar to the show logging command. The difference is that the debug display keeps the log open so that you see messages as they are added to the log. The show logging command displays the contents of the log at the time you enter the command.
Examples
This is an example of showing the AAA debugging log:
vframehost# show logging aaad
Sep 13 14:39:43,364 Added signal handler for SIGHUP
Sep 13 14:39:43,365 AAA daemon starting ...
Sep 13 14:39:43,365 active_start()
Related Commands
•
debug
•
show tech
show logins
Use the show logins command to display information about when users logged into the VFrame Data Center Director's command-line interface.
show logins cli [count number]
Syntax Description
cli
|
Show login information for the command-line interface.
|
count number
|
(Optional.) Display information on this number of the most recent user logins. The default is 10.
|
Defaults
Display information on the 10 most recent user logins.
Command Modes
User EXEC mode.
Usage Notes
The login information table displays the following information (from left to right):
•
User name. The name reboot indicates that the system was rebooted.
•
Connection type. The port number (pts) for connections from a connected network; the TTY line (tty) for connections from the console; or system boot when rebooting the system.
•
The date of the connection, start time, and end time, with the total connection time in parentheses.
•
The DNS name or IP address from which the user connected. The device might be a VPN concentrator.
If you want to view user login information for the product's graphical user interface (GUI), use the user audit report from the GUI.
Examples
This is an example of showing login information for the VFrame Data Center Director:
vframehost# show logins cli
root pts/0 Mon Jul 24 10:18 still logged in vpn.example.com
root pts/1 Fri Jul 21 15:54 - 16:33 (00:39) vpn.example.com
root pts/0 Fri Jul 21 15:42 - 16:37 (00:54) 192.168.216.147
reboot system boot Fri Jul 21 15:41 (2+18:39) 10.100.20.5
root pts/0 Fri Jul 21 14:07 - down (01:27) 192.168.216.147
reboot system boot Fri Jul 21 14:06 (01:27) 10.100.20.5
root pts/0 Fri Jul 21 13:54 - down (00:05) 192.168.216.147
root pts/0 Fri Jul 21 11:42 - 13:54 (02:12) 192.168.216.147
reboot system boot Fri Jul 21 11:41 (02:18) 10.100.20.5
reboot system boot Fri Jul 21 11:34 (00:03) 10.100.20.5
Related Commands
•
reboot
show ntp
Use the show ntp command to display the information about the network time protocol (NTP) setup for the system. NTP controls the system clock.
show ntp {config | status | trace}
Syntax Description
config
|
Show the list of NTP servers.
|
status
|
Show the current NTP status, including information on clock accuracy.
|
trace
|
Show a trace of NTP server relationships.
|
Defaults
None.
Command Modes
User EXEC mode.
Usage Notes
You must already have added NTP servers to the configuration to see any output.
Examples
This is an example of displaying the NTP configuration:
vframehost# show ntp config
ntp server 10.68.10.150 prefer
Related Commands
•
ntp
•
show clock
show process
Use the show process command to display information about the processes running on the system. This information might be helpful during system debugging.
show process
Syntax Description
This command has no arguments or keywords.
Defaults
None.
Command Modes
User EXEC mode.
Usage Notes
None.
Examples
This is an example of displaying process information. The output is not shown.
Related Commands
•
show tech
show redundancy
Use the show redundancy command to display information about the high-availability redundancy setup for the system.
show redundancy {config | status}
Syntax Description
config
|
Display information about the redundancy configuration.
|
status
|
Display information about the status of the redundant pair.
|
Defaults
None.
Command Modes
User EXEC mode.
Usage Notes
None.
Examples
This is an example of displaying information about the redundancy configuration:
vframehost# show redundancy config
HA Priority:100 Hellotime:10 Holdtime:20
DB Server Name: vframehost
NFS Server IP: 192.168.2.57
Server Comn IP: 10.100.30.10
Peer DB Server Name: vfpeerdb
Peer Server Comn IP: 10.100.30.11
Peer hostname: vframepeer
This is an example of displaying information about redundancy status:
vframehost# show redundancy status
HA state: ACTIVE_READY STANDBY_READY
DB mode: Primary Secondary
In this example, the DB hdr status indicates whether the database in the peers are synchronized (they contain the same information). It also indicates which system is active and which is standby.
Related Commands
•
redundancy
show system
Use the show system command to display information about the status of system services and configurations.
show system {services | setup}
Syntax Description
services
|
Display information about the status of system services.
|
setup
|
Display information about the system configuration.
|
Defaults
None.
Command Modes
User EXEC mode.
Usage Notes
When you display the status of system services, the expected state differs depending on whether the system is part of an active redundant pair. If the status is shown as OK, the state of that service is the expected state under the current operating conditions.
•
Standalone mode—If the system is not part of a redundant pair, all systems should be started except hsrp and hdrh, which should be down.
•
Paired mode—If the system is part of a redundant pair, all systems should be started except ids, which should be down. Use the show redundancy status command to view the status of the IDS system.
If the status of a service is listed as not OK, you can use the tech service reset command to restart the service. If the tech command cannot restart the service, you must reboot the system.
Examples
This is an example of displaying the status of system services:
vframehost# show system services
-------------------------------------------------------
This is an example of displaying information about the system configuration:
vframehost# show system setup
Hostname : vframehost.example.com
Management Interface : eth0
Management IP/Netmask : 10.100.20.10 255.255.255.0
Server Comn Interface : eth1
Server Comn IP/Netmask : 10.100.30.10 255.255.255.0
Default Gateway IP : 10.100.20.1
DNS Domain Name : example.com
DNS Server IP : 10.100.50.25
VHA connection over SSL: no
Storage mode : Storage Template Array
DB backup storage : local
GIR NFS Filer : 10.100.50.25
Related Commands
•
gir
•
reboot
•
setup
•
tech
show tech
Use the show tech command to display technical information that might be useful for system debugging.
show tech
Syntax Description
This command has no arguments or keywords.
Defaults
None.
Command Modes
User EXEC mode.
Usage Notes
The show tech command displays this information:
•
System serial number.
•
The amount of time the system has been running.
•
The amount of system memory.
•
The status of system processes.
•
Mount points.
•
Disk space information.
•
CPU information.
•
Interface information.
•
The routing table.
•
Patches that have been installed.
•
Syslog messages.
Examples
This is an example of entering the show tech command. Output is not shown.
Related Commands
•
tech
show version
Use the show version command to display information about the system software version and how long the system has been running.
show version
Syntax Description
This command has no arguments or keywords.
Defaults
None.
Command Modes
User EXEC mode.
Usage Notes
None.
Examples
This is an example of displaying version information:
Compiled on Tue May 22 03:00:38 PDT 2007
Copyright 2007 by Cisco Systems, Inc
System Uptime is 0 days, 4 hours, 6 minutes 5 secs
Hostname is vframehost.example.com
Related Commands
•
install
shutdown
Use the shutdown command to disable, or shut down, the system or an interface. The system shuts down if you enter the command in User EXEC mode. If you are in configure interface mode, the command shuts down the interface you are configuring, which prevents communication through the interface.
The no shutdown command is available only in configure interface mode. It reenables the interface, allowing communication to resume.
shutdown
no shutdown
Syntax Description
This command has no arguments or keywords.
Defaults
Interfaces are not shut down if you configure their IP addresses with the setup command.
Command Modes
User EXEC mode.
Configure interface mode.
Usage Notes
If you shut down the system, reboot it using the iLO interface (lights-out management). If you want to shut down the system and restart it immediately, use the reboot command.
If you are shutting down a system that is a member of a high-availability redundant pair, and the system is the active member, use the redundancy resign command before the shutdown command. Explicit resignation allows the standby system to take over active status without delay, making the transition smoother than if you only shut down the system.
Examples
This is an example of entering configure interface mode for the eth2 interface, shutting down the interface, and then reenabling it:
Enter configuration commands, one per line. End with CNTL/Z.
vframehost(config)# interface eth 2
vframehost(config-eth)# shutdown
vframehost(config-eth)# no shutdown
Related Commands
•
config
•
end
•
interface
•
reboot
ssh
Use the ssh command to establish an SSH connection to another device.
ssh IP_Address user_name [port number] [version {1 | 2}]
Syntax Description
IP_Address
|
The IP address of the host to which you want to connect.
|
user_name
|
The user account name to use when logging into the device. If the remote device accepts the connection, you are prompted for the user's password.
|
port number
|
Optionally, the port number used for SSH by the destination host. Specify a port number only if the remote system is configured to use a port other than the default port for SSH.
|
version {1 | 2}
|
Optionally, the version of SSH you want to use, either 1 or 2.
|
Defaults
The default port is 22. The default version is 2.
Command Modes
User EXEC mode.
Usage Notes
The ssh command creates a standard SSH client connection. Once connected, you are operating in the remote host until you quit the SSH connection, typically by entering the quit command.
Examples
This is an example of making an SSH connection to the host 10.100.10.12 using the root user account. When you enter the password, nothing appears on the screen, but the keystrokes are accepted and evaluated by the remote host.
vframehost# ssh 10.100.10.12 root
root@10.100.10.12's password:
Related Commands
•
telnet
tech
Use the tech command to perform advanced system debugging.
tech {
dumptcp interface [count number] |
dumpthreads |
renable |
service reset service_name |
unenable |
verify
}
Syntax Description
dumptcp interface
|
Perform a TCP packet dump to the console for the specified Ethernet interface. Specify the number of the interface whose TCP traffic you want to inspect. Unless you specify the count parameter, all packets are dumped to the console; to stop the dump, press Ctrl+C.
|
count number
|
(Optional.) The number of TCP packets you want dumped to the console when performing a TCP dump. The count can be 0 to 10000.
|
dumpthreads
|
Dump the current status of all Java threads to the java-app log file.
|
renable
|
Set the root user's password and enable root access to the system. You must install a debugging patch at the direction of the Cisco Technical Assistance Center to use this command and to access the system as the root user.
|
service reset service_name
|
Reset a system service if it is not functioning correctly. If the output of the show system services command indicates that a service is not OK, use this command to reset the service without rebooting the VFrame Data Center Director. Use one of the following keywords to reset the service:
• aaad
• cdpd
• dbmnt
• dhcpwd
• image_mgmt
• ntpwd
• radiusd
• syscfgd
• sysmnt
• tftp
• vcc_java
• vcc_vha
|
unenable
|
Disable root access to the system.
|
verify
|
Verify that the software installed on the system is uncorrupted.
|
Defaults
None.
Command Modes
User EXEC mode.
Usage Notes
If you do not specify a count when performing a TCP dump, press Ctrl+C to stop the dump. You must have advanced knowledge of TCP/IP in order to read and understand the information dumped to the console. The information is meant to help advanced users diagnose connection problems in the network.
Examples
This is an example of running a TCP dump on interface eth0 to display three TCP packets. Output is not displayed.
vframehost# tech dumptcp 0 count 3
Related Commands
•
show fault
•
show tech
telnet
Use the telnet command to establish a Telnet connection to another device.
telnet IP_Address [port number]
Syntax Description
IP_Address
|
The IP address of the remote host.
|
port number
|
(Optional.) The port number to use for the connection. The default is 23, the standard Telnet port. Specify a port number if the remote host is configured to accept Telnet connections on a different host.
|
Defaults
Default port is 23.
Command Modes
User EXEC mode.
Usage Notes
If the remote host accepts your connection, you are prompted for a username and password to log into the system, if one is required.
If the remote host supports SSH, use the ssh command to create a secure connection to the remote host.
Examples
This is an example of making a Telnet connection to the host 10.100.10.12 using the root user account. When you enter the password, nothing appears on the screen, but the keystrokes are accepted and evaluated by the remote host.
vframehost# telnet 10.100.10.12
Connected to 10.100.10.12.
Escape character is '^]'.
Related Commands
•
ssh
traceroute
Use the traceroute command to determine the router hops between the VFrame system and the remote system. This information can help you diagnose connectivity problems.
traceroute IP_address
Syntax Description
IP_address
|
The IP address of the remote system to which you are trying the route.
|
Defaults
None.
Command Modes
User EXEC mode.
Usage Notes
The traceroute command sends three ICMP packets to each hop along the route, and displays the number of milliseconds (ms) it took to get a response. The output lists each hop along the route. An asterisk (*) appears if the next hop cannot be determined or if no response is received. Press Ctrl+C to stop the traceroute if it does not end normally.
Examples
This is an example of tracing the route to host 192.168.2.57:
vframehost# traceroute 192.168.2.57
traceroute to 192.168.2.57 (192.168.2.57), 30 hops max, 38 byte
packets
1 10.100.20.1 0.435 ms 0.170 ms 0.157 ms
2 10.100.0.1 0.478 ms 0.312 ms 0.296 ms
3 192.168.2.57 0.527 ms 0.083 ms 0.084 ms
Related Commands
•
ping
user password
Use the user password command to change the password for the admin or macrouser user account. These passwords are initially configured by the setup command.
user password {admin | macrouser}
Syntax Description
admin
|
Set the password for the admin user account. The admin user is the default superuser for the product. The password you configure controls the password for SSH or console sessions and for logging into the GUI.
|
macrouser
|
Set the password for the macrouser user account. You need to set this password only if you are using the VFrame Data Center Director as a LOM manager for discovering servers. Your LOM manager macros run under this user account, and macrouser makes SSH connections to the lights-out management (LOM) interfaces of the selected servers. Use the macrouser account only if you do not have LOM management software installed on another server to manage LOM connections to your servers.
To use the macrouser account, specify macrouser and the password you configure with this command in the server LOM credentials (select Tools > Device Credentials).
|
Defaults
None.
Command Modes
Configure mode.
Usage Notes
After entering the user password command, you are prompted for the password, and asked to enter it again to confirm it. The password does not appear on your screen, but the system accepts the typed input.
If the system judges the password to be inadequately secure, it notifies you with a BAD PASSWORD message. However, you can ignore the prompt and reenter the password to confirm it.
If you want to choose a different password after receiving the BAD PASSWORD message, you can press Enter without reentering the password at the retry password prompt, and you are prompted for a new password.
Examples
This is an example of changing the admin password to one that satisfies the system's rules for adequate passwords. The text shown in this example as the password is not displayed on your screen.
Enter configuration commands, one per line. End with CNTL/Z.
vframehost(config)# password
Changing password for user admin.
Retype new password: AW1dfg
passwd: all authentication tokens updated successfully.
This is an example of changing the admin password to one that does not satisfy the system's rules for adequate passwords. The text shown in this example as the password is not displayed on your screen.
vframehost(config)# password
Changing password for user admin.
BAD PASSWORD: it is too short
Retype new password: admin
passwd: all authentication tokens updated successfully.
Related Commands
•
setup
vha
Use the vha command to configure settings for the VFrame Host Agent (VHA). The VHA runs on managed servers to communicate status and health information to VFrame.
vha connection ssl
no vha connection ssl
Syntax Description
connection ssl
|
Use Secure Sockets Layer (SSL) for communications between the VHA and VFrame. Use the no version of the command to change from SSL to TCP communications.
|
Defaults
The VHA uses SSL to communicate with VFrame.
Command Modes
Configure mode.
Usage Notes
You do not configure the VHA connection type on model servers when you install the VHA. The VHA always tries to connect to the VFrame Data Center Director using port 3010, for SSL connections. If that fails, it tries port 3000, for TCP connections. Thus, the connection should succeed whether you configure TCP or SSL for the connection type on the VFrame Data Center Director.
You do not need to create a certificate for SSL. VFrame generates a self-signed certificate for SSL.
Examples
This is an example of setting the communications protocol for the VHA to VFrame connection to SSL.
Enter configuration commands, one per line. End with CNTL/Z.
vframehost(config)# vha connection ssl
Related Commands
•
show system
Server Administration Reference
These topics describe the main tabs and dialog boxes that relate to VFrame system administration:
•
System Settings Dialog Box
System Settings Dialog Box
The System Settings dialog box includes tabs for various system-level settings, which affect system-wide behaviors. You can configure these settings only in the Admin context.
How to Get to This Dialog Box
Select File > System Settings to open the System Settings dialog box.
Related Topics
•
Configuring System Settings
Field Reference
Table 18-1 System Settings Dialog Box
Element
|
Description
|
SMTP tab
The e-mail address and SMTP server that VFrame should use when sending e-mail notifications.
For information about these fields, see SMTP Tab, System Settings Dialog Box.
|
Syslog tab
The syslog servers to which VFrame should send syslog messages.
For information about these fields, see Syslog Tab, System Settings Dialog Box.
|
VFrame Routing Table
The VFrame routing table contains static routes for managed networks (those included in the IP Address Range resource pool).
For information about these fields, see VFrame Routing Table, System Settings Dialog Box.
|
System Preferences tab
Various system properties.
|
Database Pruning
|
Properties that control how long certain types of data is kept in the database.
• Keep job history—The number of days to keep information about the job run status and logs for jobs.
• Keep reporting history—The number of days to keep information for user-generated reports, such as resource utilization reports.
|
SNMP Properties
|
Properties that control how SNMP queries are handled.
• Timeout—The time, in seconds, for VFrame to stop waiting for an answer to an SNMP query.
• Retries—The number of times VFrame should retry a failed SNMP query.
|
SSH Session Settings
|
Properties that control how SSH sessions from VFrame are handled.
• LOM Manager Timeout—How long to wait for the reply to each request to a LOM manager during an SSH session or Perl macro execution, in milliseconds.
• Storage Manager Timeout—How long to wait for the reply to each request to a storage manager during an SSH session or Perl macro execution, in milliseconds.
• FWSM Timeout—How long to wait for the reply to each request to an FWSM during an SSH session, in milliseconds.
• Catalyst 6500 Timeout—How long to wait for the reply to each request to a Catalyst 6500 supervisor engine during an SSH session, in milliseconds.
• Socket Connection Timeout—How long to wait when trying to establish an SSH connection before ending the attempt, in milliseconds.
|
User-Defined CLI Prompt Settings
|
Properties that identify the prompts for the command-line interface (CLI) for devices. These settings are required for VFrame to connect to the devices using SSH. If you configure prompts that are different from the Cisco IOS software defaults, you must update this preference:
• CLI Prompt—The prompts defined on Ethernet switches and service modules. Enter all prompts that are configured on the devices you will manage, for User EXEC and privileged (enable) mode. Separate the prompts with commas, spaces, or both. The default prompts are > and #.
|
Device Managers tab
The Device Managers tab contains programs that you access using the Device Manager command on the Resources or Pools tabs, or on the Acquired Resources tab on the Operations tab. You can define different device managers for each type of device that VFrame supports.
For information about these fields, see Device Manager Tab, System Settings Dialog Box.
|
SMTP Tab, System Settings Dialog Box
Use the SMTP tab in the System Settings dialog box to identify the e-mail account that VFrame should use for sending e-mail. VFrame can send e-mail notifications for various reports and monitoring policies. If you want to create these types of notifications, you must configure the SMTP credentials for the product.
How to Get to This Tab
Select File > System Settings to open the System Settings Dialog Box, and then click the SMTP tab.
Related Topics
•
Configuring SMTP Credentials for E-Mail Notifications
Field Reference
Table 18-2 SMTP Tab, System Settings Dialog Box
Element
|
Description
|
Mail Server (SMTP)
|
The IP address or DNS name of the SMTP server the product should use to send e-mails, for example, mailserver.example.com.
|
Port
|
The SMTP server port for sending e-mail. The default is 25. Change this only if your SMTP server is configured to use a different port.
|
From
|
The existing e-mail account name that the product should use when sending e-mail, for example, vframe@example.com.
|
Notification for System Errors
|
The e-mail address of the person or group who should be notified in the case of VFrame system errors. For information on the system faults that can result in a notification being sent to this address, see show fault.
You can enter only one e-mail address in this field.
|
Server Requires Authentication
|
Whether the SMTP server is configured to require users to log in before sending e-mail. If you select this, you must fill in these fields:
• Login—The account name required to log into the SMTP server, for example, vframe.
• Password—The password for the selected account. Asterisks are displayed instead of the password.
|
Test Settings
|
Click this button to test whether the product can use the SMTP credentials you entered. You are prompted to enter an e-mail address to receive the test message.
|
Syslog Tab, System Settings Dialog Box
Use the Syslog tab in the System Settings dialog box to identify the syslog server that should receive messages from the product. You can then use your syslog server to monitor the VFrame system.
How to Get to This Tab
Select File > System Settings to open the System Settings Dialog Box, and then click the Syslog tab.
Related Topics
•
Configuring Syslog Server Notifications
Field Reference
Table 18-3 Syslog Tab, System Settings Dialog Box
Element
|
Description
|
Server Address
|
The IP address or DNS name of the syslog server.
|
Module selection table
|
This table lists the types of messages you can send to the syslog server. For each type, you also select the VFrame severity level for the messages that should be sent to the syslog server. Messages of the severity level that you select, plus any worse severities, are sent to syslog. The severities, highest first, are Fatal, Error, Warning, Info, Debug.
|
VFrame Routing Table, System Settings Dialog Box
Use the VFrame Routing Table to configure static routes for networks or hosts that VFrame manages. VFrame must have a route to any address range you include in IP Address Range resource pools. If the default gateway you configure for VFrame has routes to all of these address ranges, you do not need to configure any static routes. Configure static routes only if VFrame is unable to route packets to a managed network.
Configuring static routes in this table is equivalent to using the ip route command in a VFrame CLI session, as described in ip.
How to Get to This Tab
Select File > System Settings to open the System Settings Dialog Box, and then click the VFrame Routing Table tab.
Related Topics
•
Configuring Static Routes
Field Reference
Table 18-4 VFrame Routing Table Tab, System Settings Dialog Box
Element
|
Description
|
Network Address
|
The network address for the network containing the IP address range that needs a static route. For example, 10.100.50.0.
You can also enter a host address to define a route to a single host.
|
Netmask
|
The subnet mask for the network address.
Use 255.255.255.252/32 for a host address.
|
Gateway
|
The IP address of the gateway that VFrame should use when communicating with the network or host.
|
Metric
|
The relative weight for this gateway, from 0 (the highest) to 32767. If more than one route exists for a network, VFrame tries the highest priority route first before trying other routes.
|
Add button
|
Click this button to add a static route to the table. You are prompted to enter the information described above for the route.
|
Delete button
|
Click this button to delete the selected route.
|
Device Manager Tab, System Settings Dialog Box
Use the Device Manager tab to configure programs that you access using the Device Manager command on the Resources or Pools tabs, or on the Acquired Resources tab on the Operations tab. When you select a device, and then select the Device Manager command from the right-click shortcut menu, you can select a program that you configured for the device, and VFrame starts the program for you. For example, you can configure an SSH client as a device manager for Catalyst switches, and start an SSH connection to the switch from the VFrame interface.
How to Get to This Tab
Select File > System Settings to open the System Settings Dialog Box, and then click the Device Manager tab.
Related Topics
•
Configuring Device Managers
Field Reference
Table 18-5 Device Manager Tab, System Settings Dialog Box
Element
|
Description
|
Device Type
|
The type of device for which this device manager is defined.
|
Display Name
|
The name for this device manager. The name appears here and also in the selection list when you select the Device Manager command on the Resources or Pools tabs, or on the Acquired Resources tab on the Operations tab.
|
Application
|
The path and filename of the application that will be started if the user selects this device manager.
|
Parameters
|
The parameters that will be added to the application's executable command when it is started. For example, the management IP address ($MgmtAddr).
|
New button
|
Click this button to add a device manager to the table. You are prompted to enter the information described above for the route. Keep these tips in mind:
• When selecting an application, you must choose the << Browse an Application item from the drop-down list. You must select the list item, not the item that appears in the combo box.
• To add variables to the parameters list, select them in the variables list in the order in which they should appear on the command (if any). The available variables differ depending on the device type, so you must first select a device type before selecting variables. VFrame replaces the variables with the specific properties of the device selected when the Device Manager command is used. You must select only those variables that your device manager is expecting. For an explanation of the available variables, see Device Manager Parameter Variables.
You must also type in any nonvariable keywords required by the application. For example, if you are configuring an SSH client and want to pass the client the switch's IP address, you probably need to pass the $MgmtAddr variable on the -h parameter. To do this, type in -h and then insert $MgmtAddr:
-h $MgmtAddr
|
Edit button
|
Click this button to edit the selected device manager's properties.
|
Delete button
|
Click this button to delete the selected device manager.
|
OK button
|
Click this button to save any changes that you made to the device manager table. Making changes in the table is not sufficient to save your changes.
|
Device Manager Parameter Variables
When you configure a device manager as described in Configuring Device Managers, you can include variables as parameters on the application executable. For example, with an SSH client, you can pass it an IP address as a parameter, which makes a connection directly to the device, instead of just starting the SSH client.
The parameters you can use depend on what the application can accept and on what variables VFrame makes available to you (they are limited by device type). Select only those variables that your application can accept.
When configuring device manager parameters, the following variables are available for use. Unless otherwise noted, the variables are available for all device types.
Keep in mind that you must follow the parameter rules of the application. For example, if you must include a keyword parameter to pass one of these variables, type in the parameter before adding the variable. For example, an SSH client might require the -h parameter to pass the $MgmtAddr variable: -h $MgmtAddr.
To see the values of these variables for a specific device, right-click the device on the Resources or Pools tabs, or on the Acquired Resources tab on the Operations tab, and select Properties. On the Properties dialog box, select the Device Managers tab, and the variables with their values are listed in the bottom part of the dialog box.
The following variables are available for use as device manager parameters:
•
$MgmtAddr—The management IP address of the selected device or service module.
–
For Content Switching Modules (CSM), the address is the IP address of the containing switch's supervisor engine.
–
For FWSM security contexts, the address is the IP address of the FWSM module in which the context is defined.
–
For physical (hardware) servers, the address is the IP address of the LOM interface.
–
For logical servers (based on operating system), the address is the IP address of the interface that PXE booted.
–
For LOM managers, the address is the IP address or hostname for the primary manager.
•
$AltMgmtAddr—The alternate management IP address. To set this IP address for a device, right-click the device on the Resources or Pools tabs, or on the Acquired Resources tab on the Operations tab, and select Properties. On the Properties dialog box, select the Device Managers tab, select the $AltMgmtAddr variable and click Edit. You are presented a dialog box in which you can enter the alternate IP address.
•
$AltMgmtPort—The alternate management port. To set this port for a device, right-click the device on the Resources or Pools tabs, or on the Acquired Resources tab on the Operations tab, and select Properties. On the Properties dialog box, select the Device Managers tab, select the $AltMgmtPort variable and click Edit. You are presented a dialog box in which you can enter the alternate port.
•
$BladeId—For physical (hardware) servers, if the server is a blade server, the blade identifier. You should also evaluate the $IsABlade variable to determine if the blade identifier is a valid value. Ignore the blade ID if $IsABlade is false.
•
$getMgmtIPAddr—For storage managers, the IP address or hostname of the primary storage manager.
•
$ImageName—For logical servers (based on operating system), the name of the golden image that is configured for the server.
•
$Interfacename—For Ethernet switch ports, the name of the interface, for example, gi3/24.
•
$IsABlade—For physical (hardware) servers, whether the server is a blade server. Possible values are true or false.
•
$Label—The name of the device as it appears in the VFrame interface, which is not necessarily the same as anything configured on the device.
•
$LomUserAttribute1, 2, 3, 4—For physical (hardware) servers, these are user-defined attributes that are configured in the LOM manager inventory file, as described in Creating the LOM Interface and Application Server Inventory File.
•
$Model—For physical (hardware) servers, the server model. For example, ProLiant DL360 G4p.
•
$NetAppLabel—For Qtrees, the label for the NAS filer that hosts the Qtree as it appears in the VFrame interface.
•
$ServerMacAddr—For physical (hardware) servers, the MAC address for the server. If the server has more than one MAC address, VFrame selects one of them.
•
$SnName—For logical servers (based on operating system), the name of the service network in which the server is running.
•
$SwitchLabel—For Ethernet switch ports, the label for the switch that hosts the port as it appears in the VFrame interface.
•
$Vendor—For physical (hardware) servers, the name of the company that made the server. For example, HP.
•
$VsgName—For logical servers (based on operating system), the name of the server group in which the server is defined.