CIMC Session Management

This chapter includes the following sections:

CIMC Session Management

You can view and close any KVM, vMedia, and SOL sessions in Cisco UCS Manager. If you have administrator privileges, you can discontinue the KVM, vMedia, and SoL sessions of any user. . Cisco Integrated Management Controller (CIMC) provides session information to Cisco UCS Manager. When Cisco UCS Manager gets an event from CIMC, it updates its session table and displays the information to all users.

The session information consists of the following information:

  • Name—The name of the user who launched the session.

  • Session ID—The ID associated with the session. The format of the session ID for blades is [unique identifier] _ [chassis id] _ [Blade id]. The format of the session ID for racks is [unique identifier] _ 0 _ [Rack id].

  • Type of session—KVM, vMedia, or SoL.

  • Privilege level of the user—Read-Write, Read Only, or Granted.

  • Administrative state—Active or Inactive. The value is active if the session is active. The value is inactive if the session terminate command has been issued but the session has not been terminated. This situation occurs when FSM of the server is in progress with another operation or when the connectivity to CIMC is lost.

  • Source Address—The IP address of the computer from which the session was opened.

  • Service Profile—The service profile associated with the session. The service profile attribute value for a CIMC session is displayed only if the session is opened on an IP address that is provided from the service profile.

  • Server—The name of the server associated with the session.

  • Login time—The date and time the session started.

  • Last Update Time—The last time the session information was updated by CIMC.

A new session is generally added when a user connects to KVM, vMedia, or SOL. A Pnuos vMedia session will be displayed in the session table during the server discovery with the user name __vmediausr__.

The CIMC session data is available under the CIMC Sessions tab in Cisco UCS Manager GUI. Any CIMC session terminated by the user is audit logged with proper details.


Note

To perform the GUI and CLI tasks that are described in this guide, a CIMC image version of 2.1(2a) or above is required for the session management support for the blade servers. The latest CIMC image version of 1.5(1l) and above is required for the rack-servers.

Viewing the CIMC Sessions Opened by the Local Users

Follow this task to view all the CIMC sessions opened by the local users or the CIMC sessions opened by a specific local user.

Note

Viewing CIMC sessions of a specific server or a service-profile option is not present in CLI. It is available in GUI.

Procedure
     Command or ActionPurpose
    Step 1 UCS-A # scope security 

    Enters security configuration mode.

     
    Step 2UCS-A /security # show cimc-sessions local  

    Displays all CIMC sessions opened by the local users.

     
    Step 3UCS-A /security # show cimc-sessions local user-name 

    Displays all CIMC sessions opened by a specific local user.

     

    The following examples show how to view:

    • All CIMC sessions opened by local users

    • CIMC session opened by a specific local user

    • Details of the CIMC session opened by a specific local user.

    All sessions opened by local users:
UCS-A # scope security
UCS-A /security # show cimc-sessions local

Session ID   Type     User      Source Addr     Admin State
----------   ------ --------- --------------- ------------
42_1_1       Kvm      admin     10.106.22.117     Active
4_1_5        Kvm      admin     10.106.22.117     Active
5_1_5        Vmedia   admin     10.106.22.117     Active

Session opened by a specific local user:
UCS-A /security # show cimc-sessions local admin
Session ID   Type     User      Source Addr     Admin State
----------   ------ --------- --------------- ------------
42_1_1       Kvm      admin     10.106.22.117     Active

Details of session opened by a specific local user:
UCS-A /security # show cimc-sessions local admin detail
Session ID 42_1_1
   Type: Kvm
   User: admin
   Source Addr: 10.106.22.117
   Login Time: 2013-06-28T06:09:53.000
			Last Updated Time: 2013-06-28T06:21:52.000
   Admin State: Active
   Priv: RW
   Server: sys/chassis-1/blade-1
			Service Profile:

    Viewing the CIMC Sessions Opened by the Remote Users

    Follow this task to view all the CIMC sessions opened by the remote users or the CIMC sessions opened by a specific remote user.

    Procedure
       Command or ActionPurpose
      Step 1 UCS-A # scope security 

      Enters security configuration mode.

       
      Step 2UCS-A /security # show cimc-sessions remote 

      Displays all CIMC sessions opened by the remote users.

       
      Step 3UCS-A /security # show cimc-sessions remote user-name 

      Displays all CIMC sessions opened by a specific remote user.

       

      The following examples show how to view:

      • All CIMC sessions opened by remote users

      • CIMC session opened by a specific remote user

      • Details of the CIMC session opened by a specific remote user.

      All sessions opened by remote users:
UCS-A # scope security
UCS-A /security # show cimc-sessions remote

Session ID   Type     User             Source Addr      Admin State
----------   ------ ---------        ---------------   ------------
43_1_1       Kvm     administrator     10.106.22.117     Active
6_1_5        Kvm     test-remote       10.106.22.117     Active
7_1_5        Vmedia  test-remote       10.106.22.117     Active

Session opened by a specific remote user:
UCS-A /security # show cimc-sessions remote administrator

Session ID   Type     User             Source Addr      Admin State
----------   ------ ---------        ---------------   ------------
43_1_1       Kvm     administrator     10.106.22.117     Active

Details of session opened by a specific remote user:
UCS-A /security # show cimc-sessions remote administrator detail
Session ID 43_1_1
   Type: Kvm
   User: administrator
   Source Addr: 10.106.22.117
   Login Time: 2013-06-28T06:09:53.000
   Last Updated Time: 2013-06-28T06:21:52.000   
   Admin State: Active
   Priv: RW
   Server: sys/chassis-1/blade-1
			Service Profile:

      Viewing the CIMC Sessions Opened by an IPMI User

      To view the CIMC sessions opened by an IPMI user, complete the following steps:

      Procedure
         Command or ActionPurpose
        Step 1 UCS-A # scope org org-name 

        Enters the root organization mode.

         
        Step 2UCS-A /org # scope ipmi-access-profile profile-name  

        Enters the IPMI access profile name.

         
        Step 3UCS-A /org/ipmi-access-profile # scope ipmi-user user-name 

        Enters an IPMI user name.

         
        Step 4UCS-A /org/ipmi-access-profile/ipmi-user # show cimc-sessions  

        Displays all CIMC sessions opened by the specified IPMI User.

         

        The following example shows how to view all the CIMC sessions opened by an IPMI user:

        UCS-A # scope org Finance
UCS-A /org* # scope ipmi-access-profile ReadOnly
UCS-A /org/ipmi-access-profile* # scope ipmi-user alice
UCS-A /org/ipmi-access-profile/ipmi-user # show cimc-sessions

Session ID    Type    User        Source Addr       Admin State
----------   ------  ---------   ---------------   --------------
45_1_1        sol     alice       10.106.22.117     Active

        Clearing the CIMC Sessions of a Server

        This task shows how to clear all CIMC sessions opened on a server. You can also clear the CIMC sessions on a server based on the session type and the user name.

        Procedure
           Command or ActionPurpose
          Step 1 UCS-A # scope security 

          Enters security configuration mode.

           
          Step 2UCS-A /security # terminate cimc-sessions server chassis-id/blade-id 

          Clears the CIMC sessions on a specific blade server of a chassis.

           
          Step 3UCS-A /security # terminate cimc-sessions server Rack-server-id 

          Clears the CIMC sessions on a specific rack server.

           
          Step 4UCS-A /security # terminate cimc-sessions server server-id type session-type 

          Clears the CIMC sessions of a specific type on a server.

           
          Step 5UCS-A /security # terminate cimc-sessions server server-id user-name user-name 

          Clears the CIMC sessions of a specific user on a server.

           

          The first example shows how to clear all CIMC sessions on a server. The second example shows how to clear the CIMC sessions of a specific type on a server. The third example shows how to clear the CIMC sessions of a specific user on a server:

          UCS-A /security # scope security
UCS-A /security # terminate cimc-sessions server 2/1
This will close KVM sessions. Are you sure? (yes/no):yes
UCS-A /security

UCS-A # scope security
UCS-A /security # terminate cimc-sessions server 2/1 type kvm
This will close KVM sessions. Are you sure? (yes/no):yes

UCS-A # scope security
UCS-A /security # terminate cimc-sessions server 2/1 user-name test-user
This will close KVM sessions. Are you sure? (yes/no):yes

          Clearing All CIMC Sessions Opened by a Local User

          This task shows how to clear the sessions opened by a local user.

          Procedure
             Command or ActionPurpose
            Step 1 UCS-A # scope security 

            Enters security configuration mode.

             
            Step 2UCS-A /security # terminate cimc-sessions local-user user-name 

            Clears all CIMC sessions opened by a local user.

             
            Step 3UCS-A /security # terminate cimc-sessions local-user user-name type {kvm | vmedia sol | all}  

            Clears all CIMC sessions of specific session type opened by a local user.

             

            The following example shows how to clear the CIMC sessions opened by a local user:

            UCS-A /security# scope security
UCS-A /security# terminate cimc-sessions local-user testuser
This will close cimc sessions. Are you sure? (yes/no):yes
UCS-A /security#

            Clearing All CIMC Sessions Opened by a Remote User

            This task shows how to clear CIMC sessions opened by a remote user.

            Procedure
               Command or ActionPurpose
              Step 1 UCS-A # scope security 

              Enters security configuration mode.

               
              Step 2UCS-A /security # terminate cimc-sessions remote-user user-name 

              Clears all CIMC sessions opened by a remote user.

               
              Step 3UCS-A /security # terminate cimc-sessions remote-user user-name type {kvm | vmedia sol | all}  

              Clears all CIMC sessions of specific session type opened by a remote user.

               

              The following example shows how to clear all CIMC sessions opened by a remote user:

              UCS-A /security# scope security
UCS-A /security# terminate cimc-sessions remote-user testuser
This will close cimc sessions. Are you sure? (yes/no):yes
UCS-A /security#

              Clearing a Specific CIMC Session Opened by a Local User

              This task shows how to clear a specific CIMC session opened by a local user.

              Procedure
                 Command or ActionPurpose
                Step 1 UCS-A # scope security 

                Enters security configuration mode.

                 
                Step 2UCS-A /security # scope local-user user-name 

                Enters local user mode.

                 
                Step 3UCS-A /security/local user # terminate cimc-session session-id 

                Clears the chosen CIMC session.

                 
                Step 4UCS-A /security/local user* # commit-buffer 

                Commits the transaction.

                 

                The following example shows how to clear a specific CIMC session opened by a local user and commits the transaction:

                UCS-A /security# scope security
UCS-A /security# scope local-user admin
UCS-A /security/local user # terminate cimc-session 6_1_2
UCS-A /security/local user*# commit-buffer
UCS-A /security/local user#

                Clearing a Specific CIMC Session Opened by a Remote User

                This task shows how to clear a specific CIMC session opened by a remote user.

                Procedure
                   Command or ActionPurpose
                  Step 1 UCS-A # scope security 

                  Enters security configuration mode.

                   
                  Step 2UCS-A /security # scope remote -user user-name 

                  Enters remote user mode.

                   
                  Step 3UCS-A /security/remote user # terminate cimc-session session-id 

                  Clears the chosen CIMC session.

                   
                  Step 4UCS-A /security/remote user* # commit-buffer 

                  Commits the transaction.

                   

                  The following example shows how to clear a specific CIMC session opened by a remote user and commits the transaction:

                  UCS-A /security# scope security
UCS-A /security# scope remote-user admin
UCS-A /security/remote user # terminate cimc-session 6_1_3
UCS-A /security/remote user*# commit-buffer
UCS-A /security/remote user#

                  Clearing a CIMC Session Opened by an IPMI User

                  To clear a CIMC session opened by an IPMI user, complete the following steps:

                  Procedure
                     Command or ActionPurpose
                    Step 1 UCS-A # scope org org-name 

                    Enters the root organization mode.

                     
                    Step 2UCS-A /org # scope ipmi-access-profile profile-name  

                    Enters the IPMI access profile name.

                     
                    Step 3UCS-A /org/ipmi-access-profile # scope ipmi-user user-name  

                    Enters the IPMI user.

                     
                    Step 4UCS-A /org/ipmi-access-profile/ipmi-user # terminate cimc-sessions session-id 

                    Terminates a specific CIMC session opened by an IPMI user.

                     
                    Step 5UCS-A /org/ipmi-access-profile/ipmi-user * commit-buffer  

                    Commits the changes.

                     

                    The following example displays how to clear a specific CIMC session opened by an IPMI user and commits the changes:

                    UCS-A # scope org Finance
UCS-A /org* # scope ipmi-access-profile ReadOnly
UCS-A /org/ipmi-access-profile* # scope ipmi-user alice
UCS-A /org/ipmi-access-profile/ipmi-user # terminate cimc-sessions 5_1_2
UCS-A /org/ipmi-access-profile/ipmi-user* # commit-buffer