MAP6120 Attaching the management console to the customer network

This MAP provides guidance on how to attach the management console customer network. The HMC will normally be connected to the customer network during installation. This MAP is intended for use when the customer decides to do that at a later time. This procedure can be performed concurrent with host access to the attached storage facilities.

MAP6120 Section-1

Procedure

  1. Obtain a copy of the customization worksheets from the customer.
  2. Logon to the management console with user ID CE and the default password serv1cece.
  3. Perform the following steps to verify or set the customer network configuration:
    1. From the navigation area, click HMC Management.
    2. In the right work area, go to the Operations section and click Change Network Settings.
      The Customize Network Settings window opens.
    3. Enter the Console Name and Domain Name from the customization worksheets. Do not click OK now, otherwise the console will be rebooted.
    4. Click the LAN adapters tab, select eth2 and click Details. Set the IP configuration, refer to the customization worksheets. Click OK to exit the window.
    5. Click the Name Services tab. Use Remove/Add to modify the DNS information per the customization worksheets. Click OK and then OK again to save the settings and exit the panel but do not restart at this time.
    6. Click the Routing tab. Perform a New, Change, or Delete task to the customer's Gateway settings based on the customization worksheets. Set the Gateway Device to eth2. If the Enable 'routed' check box is present, ensure that it is not selected. Click OK.
      After you click OK, the console is automatically rebooted. A message displays that informs you that the network configuration has changed. You can only acknowledge this message. There might be a message that prompts you to create a new certificate. Click Yes to create the new certificate. The network changes will be in effect after console reboot.
      Attention: If the customer has installed their own certificate, this procedure will replace their certificate with a self-signed certificate. Inform the customer and ask them to recreate their certificate and reinstall.
  4. Shutdown and power off the management console by performing the following steps:
    1. From the navigation area, click HMC Management.
    2. In the right work area, go to the Operations section and click Shut Down or Restart.
      The Shutdown or Restart window opens.
    3. Select Shutdown HMC. Click OK.
    4. Wait until the following message is displayed on the monitor: Master Resource Control: runlevel 0 has been reached.
  5. Route and connect the customer Ethernet cable to the eth2 port.
    1. Locate the customer-supplied Ethernet cable.
    2. Route the Ethernet cable through the tailgate and up to the rear of the management console server.

      Models configured for overhead cable management (top exit): route the Ethernet cable Callout label 2 through the top tailgate and cable trough at the left rear of the rack. See Figure 1 (models 951 or 961) or Figure 2 (models 98x).
      Figure 1. Overhead cable management (top exit) for Fibre Channel, communication, and power cables
      Overhead cable management (top exit) for Fibre Channel, communication, and power cables
      Figure 2. Routing customer host, customer network, and power cables, top or bottom
      Note: Figure shows top or bottom exit routing of host cables  1 , network cables  2 , and power cables  3 .
      Routing customer host, customer network, and power cables, top or bottom
    3. Connect the cable to the customer network (Ethernet) connector (eth2) on the management console server. See Figure 3 (X335 server) or Figure 4 (X336 server), or Figure 5 (X3550 server), or Figure 6 (laptop management console) or Figure 7 (small form factor management console, Models 98x).
      Figure 3. Ethernet connectors on the rear of the X335 management console server
      Management console rear view with Ethernet locations
      Figure 4. Ethernet connectors on the rear of the X336 management console server
      X336 management console Ethernet ports
      Figure 5. Ethernet connectors X3550 management console server (rear view)
      X3550 management console server (front view)
      Figure 6. ThinkPad laptop customer modem and Ethernet connectors, rear of rack
      Laptop rear connector view
      Note: Ethernet connector and modem connector might be reversed on some racks. Both connectors are at the rear of the rack, to the right of the Ethernet switches, below the bottom storage enclosure air baffle.
      Figure 7. Model 98x management console customer modem (where applicable) and Ethernet connectors, rear of rack
      Model 98x management console customer modem (where applicable) and Ethernet connectors, rear of rack
      Note: Ethernet connection  1  is for management console 1 (MC 1). Ethernet connection  2  is for management console 2 (MC 2).

      For management consoles with second customer LAN connection (eth1), refer to Table 1.

      Table 1. Small form factor management console customer network connections (rear)
      Index Management console connection or component
      1 Ethernet eth2 (customer), management console 1 (MC 1)
      2 Ethernet eth2 (customer), management console 2 (MC 2)
      3 Ethernet eth1 (second customer LAN connection, if used), management console 1 (MC 1)
      4 Ethernet eth1 (second customer LAN connection, if used), management console 2 (MC 2)
  6. Power on the management console server and wait until you can log in.
  7. Is a firewall set up between the HMC and the customer network?
    • Yes, to allow access for the DS CLI and DS Storage Manager, ensure that the customer opens the following TCP/IP ports: 1718, 1720, 1722, 1750, 1755 and 8451 - 8455. Continue with step 8.
    • No, continue with the next step.
  8. Test the communication from the customer network to the management console. Ask the customer to attempt to connect to the DS Storage Manager server in the HMC. If the customer is unable to access the management console, then verify that the settings in steps 3 and 7 are correct.
    If problem still exists, go to MAP6730 Customer access to management console problem.
  9. Is the management console at a LIC bundle prior to 88.xxx.xxx.xxx?

MAP6120 Section-2 - VPN Call Home for LIC bundles prior to 88.xxx.xxx.xxx

Procedure

  1. Will the customer allow an 'Internet VPN' connection to be used for Call Home?
    • Yes, continue with the next step.
    • No, exit this MAP.
  2. Perform the following steps to configure the 'Internet VPN' connection for Call Home.
    1. From the navigation area, click Service Management.
    2. In the right work area, go to the Connectivity section and click Manage Outbound Connectivity.
    3. Click the Internet VPN tab.
    4. Click Allow a VPN and an existing Internet connection for service.
    5. Click OK.
    6. Ensure that the customer has configured any firewalls to allow internet access as follows:
      IP Addresses:
      207.25.252.196 - IBM Boulder VPN Server
      129.42.160.16 - IBM Rochester VPN Server
      207.25.252.198 - IBM VPN Test Server

      Ports and Protocols:
      Protocol ESP Port 500
      Protocol UDP Port 500
      Protocol UDP Port 4500
    7. Click Test to test the Call Home via Internet VPN.
    8. The Test Internet VPN window opens. Click Start to begin the test.
    9. Did the test fail?