nPartition Management Paradigms

HP nPartition Servers support three management paradigms. These paradigms enable administrators to manage nPartitions in the mode which best suits their environments. The three management paradigms are as follows:

• Local Management has been the most commonly used paradigm for managing nPartitions because it was the only supported paradigm on the first-generation nPartition servers. Local management entails logging into an nPartition on the complex and executing the management tools directly on the nPartition. Using local management, an administrator has the ability to either make changes to the entire complex or limit management capabilities to those that affect only the local nPartition.

• Remote Management via an nPartition allows administrators to manage the complex from a central management station. This enables more efficient management because the administrator need not log into each nPartition to be managed and start the respective management tools. Instead, the management tools can be executed from a single location and directed toward each nPartition to be managed. In addition, only a subset of the management components needs to be running on the nPartitions.

• Remote Management via the MP enables administrators to fully configure an nPartition server without running any of the management software components on the nPartitions. In addition, this management paradigm affords similar benefits regarding remote management via an nPartition and the ability to manage many complexes from a central management station. Finally, this management paradigm provides a means to perform system administration even if no nPartition is active in the complex.

Local nPartition Management Paradigm

Figure 4-2 shows the paradigm of local nPartition management. This paradigm applies to all HP nPartition servers. Local nPartition management involves logging into an nPartition on the complex and performing management tasks on the local nPartition. This architecture is the simplest to use out of the box because it requires only a single system, the nPartition, to be operating in order to perform nPartition management. However, this management paradigm doesn't take full advantage of the remote management capabilities available on HP nPartition servers; this topic will be discussed in the following sections.

Figure 4-2. Local nPartition Management Paradigm

nPartition management applications for the original HP 9000 nPartition servers use a proprietary interface to communicate with the MP for configuration tasks. This interface enables nPartition management tools to configure the entire complex from any nPartition within the complex. nPartition management tools provide some limitations on configuration changes from one nPartition to another, such as disallowing the removal of an active nPartition from another nPartition. However, most operations are allowed from any nPartition in the complex. This provides a simplified and flexible management model, as an administrator may log into a single nPartition and perform several tasks that affect other nPartitions. The ramifications of this simplicity and flexibility should be considered when managing a shared HP nPartition server.

The second-generation HP nPartition servers, which contain the sx1000 chipset, use the Intelligent Platform Management Interface (IPMI) protocol as the interface between the MP and the management applications. IPMI is an industry-standard protocol designed to facilitate low-level system management. The IPMI interface is supported on HP-UX, Microsoft Windows, and Linux operating systems for the HP nPartition servers containing the sx1000 chipset and later chipsets. As implemented on HP nPartition servers, IPMI supports two transport mechanisms for communicating with the MP. The first is block transfer (BT) and the second is LAN. These are commonly referred to as IPMI over BT (IPMI/BT) and IPMI over LAN (IPMI/LAN). The IPMI/BT transport goes though a kernel driver on an nPartition to communicate with the MP. The IPMI/LAN transport uses the MP's LAN interface for communication.

While nPartition management has remained very similar between the generations of HP nPartition servers, several enhancements have been added. The most notable enhancement relating to Figure 4-2 and the use of the IPMI/BT interface is a feature called the nPartition configuration privilege. This feature can be enabled on the MP by using the PARPERM command from the MP's command menu as shown in Listing 4-1.

note

The nPartition configuration privilege is supported only on HP nPartition servers based on the sx1000 chipset and later chipsets. This feature is not available on the first-generation HP 9000 nPartition servers.

Listing 4-1. Enabling the nPartition Configuration Privilege

                        Welcome to the                  rx8620 Management Processor (c) Copyright 1995-2003 Hewlett-Packard Co., All Rights Reserved.                        Version A.5.011     MP MAIN MENU:          CO: Consoles         VFP: Virtual Front Panel (partition status)          CM: Command Menu          CL: Console Logs          SL: Show Event Logs          HE: Help           X: Exit Connection MP> cm                 Enter HE to get a list of available commands MP:CM> parperm This command configures the nPartition Configuration Privilege. WARNING: When nPartition Configuration Privilege is unrestricted,          configuration commands issued by one partition can          affect the configuration of another partition. When          this privilege is restricted, configuration commands          issued by a partition cannot affect power or partition          assignment of hardware not already assigned to the          partition.  Restricting nPartition configuration          privilege does not restrict deallocation of processors          across partition boundaries.     nPartition Configuration Privilege is currently unrestricted.     Do you wish to restrict partition configuration     (preventing partitions from changing the configuration     of the platform)?  (Y/[N]) y     -> Partition reconfiguration is disabled MP:CM> 

When the nPartition configuration privilege is enabled (restricted), only configuration changes to the PCD data structure for the nPartition from which the request originated are allowed. Therefore, an administrator on one nPartition may not make changes to the SCCD or any other nPartition's PCD. In order to change the SCCD and the PCD data structures other than the PCD for the local nPartition, the administrator must use the IPMI over LAN interface; this is described in the next section.

In Figure 4-2, immediately above the IPMI or HP proprietary kernel interface component is the nPartition provider. The nPartition provider is a software component that implements the Web-Based Enterprise Management (WBEM) standard provider interface. Since an industry-standard WBEM interface for nPartition configuration is available for HP nPartition servers, third-party management tools are able to integrate with HP's nPartition servers.

Next to the nPartition provider component is the instant capacity provider. Similar to the nPartition provider, the instant capacity provider exposes an industry-standard interface for managing unlicensed components on HP nPartition servers. The nPartition management infrastructure verifies all changes to the SCCD and PCD data structures with the instant capacity provider to ensure that the complex remains in compliance with the number of unlicensed resources. All nPartition configuration changes on complexes containing unlicensed components must be made through an nPartition running HP-UX. The interface between the nPartition provider and the instant capacity provider is built to deny all configuration changes on complexes with unlicensed resources if the operating system is not HP-UX. For complexes that weren't purchased with unlicensed instant capacity components, the instant capacity provider will automatically approve all configuration changes.

Above the nPartition provider and instant capacity provider components in Figure 4-2 is the WBEM or Windows Management Instrumentation (WMI) server. When the nPartition provider is running on the HP-UX and Linux operating systems, it runs under the Pegasus open-source implementation of the WBEM server. When running on the Microsoft Windows operating system, the nPartition provider takes advantage of the (WMI) server. This allows the nPartition provider to operate as part of an existing framework on the Microsoft Windows operating system.

The next component above the WBEM or WMI Server is the nPartition commands. The nPartition commands component is the command-line interface (CLI) used for managing nPartitions. Commands such as parcreate, parmodify, and parstatus are represented by this component. The nPartition commands use the WBEM or WMI interface to read status information and configure HP nPartition servers. The nPartition commands are available on HP-UX, Linux, and Microsoft Windows.

Finally, the uppermost box in Figure 4-2 is the Partition Manager (parmgr) graphical user interface (GUI). The Partition Manager GUI provides a web-based interface for viewing the status and making configuration changes to HP nPartition servers. Partition Manager provides graphical hardware and logical views of the entire complex to facilitate system administration. Partition Manager uses the WBEM or WMI interface to read the configuration data for the complex. It makes all changes to the complex configuration using the nPartition commands. This allows administrators to preview the commands that will be executed and even cut and paste the commands into a script or use the GUI as a learning tool. Partition Manager is available on HP-UX, Linux, and Microsoft Windows operating systems.

Remote Management via an nPartition Paradigm

Figure 4-3 shows the paradigm of remote nPartition management via an nPartition in the complex. This paradigm can be used with all architectures of HP nPartition servers.

Figure 4-3. Architecture of Remote nPartition Management via an nPartition

The management paradigm depicted in Figure 4-3 involves logging into a remote system separate from the nPartition or complex to be managed. The remote system can be any HP-UX, Windows, or Linux system capable of running the nPartition commands and the parmgr GUI. This use model is extremely powerful in that an administrator may perform management of all the HP nPartition servers in the data center from a central management station. Additionally, the task of running the nPartition commands and parmgr GUI are offloaded to the remote system and the nPartitions are left to execute their production workloads.

note

Remote management via an nPartition requires certain security measures to be taken on the remote system to establish a trust relationship between the nPartition and the remote system. See the product manual pages and documentation for specific instructions on performing these steps.

In order to perform remote management as depicted in Figure 4-3, the nPartition commands require command-line options for specifying the remote nPartition's hostname or IP address, username, and password. Given the address and authentication credentials, the nPartition commands send WBEM requests to the WBEM or WMI Server over a secure channel.

Listing 4-2 is an example execution of an nPartition command using remote manage ment via an nPartition. In the example, the parstatus command sends remote WBEM requests to the nPartition with the hostname rex01 as the user root. Notice that the password is not specified directly on the command line; instead, the command prompts for the password. It should be noted that some of the command's output has been removed for formatting purposes.

Listing 4-2. nPartition Command Using Remote Management via an nPartition

 # /usr/sbin/parstatus -C -h rex01 -u root: Please enter the password for user root: [Cell]                         CPU     Memory                         OK/     (GB) Hardware   Actual       Deconf/ OK/ Location   Usage        Max     Deconf    Connected To ========== ============ ======= ========= =================== cab0,cell0 Active Core  4/0/8   4.0/0.0   cab0,bay0,chassis0 cab0,cell1 Active Core  4/0/8   4.0/0.0   cab0,bay0,chassis1 cab0,cell2 Active Core  4/0/8   4.0/0.0   cab8,bay0,chassis0 cab0,cell3 Active Core  4/0/8   4.0/0.0   cab8,bay0,chassis1 Notes: * = Cell has no interleaved memory. 

The Partition Manager GUI also provides the ability to switch between the complexes being managed as shown in Figure 4-4. The top portion of the dialog labeled "A remote nPartition" provides the ability to switch between any nPartitions in the data center as long as the WBEM or WMI Server is running and the additional components shown in the figure are present on the nPartition.

Figure 4-4. Partition Manager Remote Management Interface

Remote Management via the MP Paradigm

The final nPartition management paradigm, remote management via the MP, is presented in Figure 4-5. This paradigm is not available on the first-generation HP nPartition servers. Instead, only HP nPartition servers with the sx1000 chipset and later support this management paradigm.

Figure 4-5. Remote nPartition Management via the MP Paradigm

The use model depicted in Figure 4-5 allows the full nPartition management stack to be run on a remote system that is separate from the complex being managed. In fact, there need not be any nPartitions running or defined in the complex for this architecture to function properly. The only requirement on the complex is for housekeeping power and network connectivity to the MP.

Performing remote management using IPMI over a local area network (LAN) as depicted in Figure 4-5 involves providing command-line options to the nPartition commands for the MP's hostname or IP address and password. The address and password are passed to the nPartition provider, which uses the credentials to send IPMI requests directly to the MP over the LAN interface.

note

Remote management via IPMI over LAN is the only management paradigm that can be used to make changes to the SCCD when the nPartition configuration privilege is restricted.

Listing 4-3 shows an example execution of an nPartition command using remote management via IPMI over LAN. In the example, the parstatus command sends WBEM requests to the nPartition provider on the local system and the nPartition provider sends an IPMI message over the LAN interface directly to the MP. The hostname of the MP in this listing is rex-s. Once again, some of the command's output has been removed for formatting purposes.

Listing 4-3. nPartition Command Using Remote Management via IPMI over LAN

 # /usr/sbin/parstatus -C -h rex-s -g Please enter the IPMI password: Note: The -g option may require up to 2 minutes to complete.  Please wait... [Cell]                         CPU     Memory                         OK/     (GB) Hardware   Actual       Deconf/ OK/ Location   Usage        Max     Deconf    Connected To ========== ============ ======= ========= =================== cab0,cell0 Active Core  4/0/8   4.0/0.0   cab0,bay0,chassis0 cab0,cell1 Active Core  4/0/8   4.0/0.0   cab0,bay0,chassis1 cab0,cell2 Active Core  4/0/8   4.0/0.0   cab8,bay0,chassis0 cab0,cell3 Active Core  4/0/8   4.0/0.0   cab8,bay0,chassis1 Notes: * = Cell has no interleaved memory. 

The parmgr GUI provides the ability to connect directly to the MP of a complex for remote management via IPMI over a LAN. The lower portion of the dialog labeled "A remote partitionable complex" shown in Figure 4-4 provides the ability to specify the MP's hostname or IP address and the IPMI password. When parmgr is provided with the MP's hostname and IPMI password, messages will be sent from nPar provider directly to the MP via IPMI over LAN.