HP Intelligent Management Center

From wiki.adammorgan.org
Jump to: navigation, search

Intelligent Management Server (IMC) is the replacement for the now-defunct Procurve Manager. It's primarily designed to monitor and configure Procurve networking products, but also supports Cisco, 3com, etc.

Help References

File Transfers (General info)

  • IMC File Transfer mode is set at Service -> Configuration Center -> Options. In addition to specifying default settings, you can also define exceptions at the bottom: for example, if you have one or two oddball devices that don't support whatever default transfer method you use for everything else.
    • Note the file transfer direction – if you use TFTP or FTP, the device pushes the config to the IMC server. If you use SCP or SFTP, IMC pulls configuration from the device.[1]
  • SCP (file transfer over SSH) is probably the most secure way to backup/restore config files, and I've found it to be faster for software update deployments.
  • The IMC server can also run Filezilla server for FTP/FTPS transers. IMC's built-in TFTP server (works fine for most switch backloads/uploads, but some devices like the MSM760 wifi controller won't backup to IMC via TFTP or SCP, I've had success using siumultaneously with Filezilla.
  • TFTP can be really slow (sends 512-byte packets one-at-a-time). SCP or SFTP is recommended as being both faster and more secure. [2]
  • If a device's page in IMC has login-type set to "SSH", TFTP may not work! If IMC is set to securely login to a device, it also expects to transfer files to/from it securely (using SFTP or SCP). I've used SSH login with TFTP transfers to backup configs and deploy software files - usually works fine, but IMC may give false errors afterwards.
  • If you can't get IMC to deploy software to a switch, you can always open putty ssh-console to the device and initiate a manual TFTP download from there, specifying the appropriate path/filename on your IMC server.

Device Configuration Backup/Deployment

  • If you've set-up automatic config backups of your devices, each job logs all its transfer info to a single file, imccfgbakdm.yyyy-mm-dd.txt, located in this directory:
C:\Program Files\iMC\server\conf\log

Auto Backup Plans

  • The Auto Backup Plans can be found under Service\Configuration Center\Auto Backup Plan.
  • Every time you add a new switch, you must also add it to the Auto-Backup plan!
  • IMC stores configuration backups (from tftp and ftp) in:
C:\Program Files\iMC\server\data\cfgbak
  • Uses default file transfer setting specified in Service\Configuration Center\Options. For some devices you may need to specify a different file transfer mode (such as TFTP), which can be done under Service\Configuration Center\Options\File Transfer Mode (see "Single Device Transfer Mode" at bottom of the tab).
  • IMC automatically deletes old backup files as specified in Service\Configuration Center\Options\Backup Policy.

Scheduled Task: Reboot Switches Monthly

  • The following is a simple reboot CLI script that will work on most Procurve switches:
reload after 10^|^
y^|^

Device Software Deployment

IMC stores device software obtained using "LiveUpdate" in this folder:

C:\Program Files\iMC\server\data\image

Before updating switch software

  • It's best to update switches in batches by model. First try updating a single switch, reboot it, and confirm that it reboots properly and is using the new software (by using the show system command).
  • First look-up the device here. Type the model number (eg. J4899A) into the Auto-Search box, then check-mark the item and hit "Display Selected", then "Software Downloads". Find the newest/latest software version listed at the top under "General Availability" (there may be newer versions available, but these are the newest stable releases).
    • Note: each number separated by decimals increments from 0 to ###, so version N.11.107 is newer than N.11.99.
  • Check the Release Notes for special instructions! Most software updates can simply be installed regardless of the version currently running on the device, but sometimes you may have to first update to an intermediate version. Also, some updates require you to go on-site and physically reboot the device after transferring the software to flash. Don't assume that IMC will warn you about special instructions for a given upgrade (it won't).
  • You can view a list of all switches' model and current software version at "Service\Configuration Center\Configuration Center". This is useful when confirming that you've successfully finished updating all switches of a given model.

Deploy switch software using IMC

  • If you haven't lately, go to "System\Resource Management\LiveUpdate" and check for "Device Software" using default network settings. In a minute or two, it should list all available software that you haven't yet downloaded.
    • There's no need to download everything listed; lots of them are outdated versions that you normally won't ever need.
  • Go to "Service\Configuration Center\Configuration Guide". Select the switch you want to upgrade, then select the software from the list.
  • Deployment Options:
    • One default option is to set the current software as backup/secondary software. Leave this checked: for some switches or software versions it's mandatory, in which case if it's not checked, the task will fail with a message instructing you to check that box.
    • Another default option is "restart device after deployment". This is ok, but generally isn't required, so if you want to deploy software during business hours and wait until after work to reboot the device. If you deploy the software this way, the show system command will say that it's currently running the old software, but the show flash command should show the new version in the "primary" slot. After a reboot, the show system command should say it's now running the new software.
    • Scheduled vs Immediate: Generally I choose "Immediate", but if you want to schedule it for later, make sure you specify a time in the future. The option defaults to "Scheduled", but if you don't change the default time, it usually winds-up being scheduled for a few minutes in the past, and thus never executes.
    • Concurrent vs. Sequential: If you're deploying software to more than one device, always choose "Sequential". Otherwise IMC will attempt to upload software to all the selected devices simultaneously, and will possibly hang-up and require a server reboot.
  • After you've finished creating the deployment task, you can check on its progress at "Service\Configuration Center\Deployment Task", which lists all current and old tasks.
    • If the task fails with an error, don't panic! During a recent round of updates, virtually all the tasks failed with the message "Failed to execute script". That's just IMC being IMC.

Licensing

IMC requires 3 types of licenses to manage devices:

  • Node licenses, required for switches, routers, wireless controllers, servers, workstations, etc.
  • WSM licenses, required for AP's.
  • NTA node licenses, required to monitor sflow data from interfaces.
  • HP Passport login: https://h10145.www1.hp.com

Adding New Licenses

When licenses are received, the reseller emails you:

  • "License Entitlement Certificate"
  • "Electronic Delivery Receipt" (parts of the sold-to and ship-to information may refer to the reseller, not your organization)

The Electronic Delivery Receipt will have a web address you must click to retrieve your license. When you follow the link, you'll be shown a Confirmation Number, and asked to enter an email address (whatever's displayed under the "Sold To Address" in the Electronic Delivery Receipt). The page will then display detailed info on the purchase. For each line item, there's a "Get License" link in the "Deliverables" column. Click it. On the next page, click the "Get License" link. On next page, click the "Redeem..." button. You may be prompted to select a base platform product ("5011-5143" should work) and enter its serial. . Download the license file (the name will be something like "<serial number>.txt"). Then navigate to the login page for MCSIMC (MCSIMC:8080). Click activate, select "activate host license" (or something like that), browse and upload your license file. If it works, you'll be prompted to reboot the system to continue. Simply reboot your server.

NTA (Network Traffic Analyzer)

How-To

Topology

  • I've heard IMC will use both CDP and LLDP info, but that LLDP's usually the way to go for procurve devices.

Installation