[Captive]

System: System p5, p520, Type 9131-52A
OS: AIX 5.3
Connection type: Cat 5/RJ-45 to HMC1
Client: Linux, kernel 2.6.*
Browser: Firefox

HMC is 192.168.2.147, client is 192.168.2.222, ping works. Serial connection works, no information in log files.

Problem: There is no process listening on port 80 on the HMC. Entry in host file calls the 147 host "hmc". Connecting to the http or the https version of hmc yields nothing. The http connection just hangs until it finally times out. When trying the https connection, I'm informed that:

Firefox can't connect securely to 192.168.2.147 because the site uses a security protocol which isn't enabled.

I have spent the entire day searching the internet for information about how to enable/disable the web server process on the HMC. All the documentation takes the position that if you are alive then clearly you are breathing, that is, if the HMC is booted, then there is a process listening on port 80.

No there is not. Besides the browser, I used "telnet hmc 80" and got nothing. I ran a portscan of the hmc and only got ports listening in the >9000 range. I need to know that there is some way to more concisely manage the HMC. It's a black box with 3 undocumented buttons.

Is there a way to tell the HMC to start the http server process? Is there a way to find out why it's not running? I must be missing something simple and I'm happy to find out what it is.

[duke900ssd]

Doesn't sound correct / we don't have enough info.

FSP port HMC1 on the p520 should be 192.168.2.147 if there is no DHCP server. HMC will be what ever you configure.

From your description it seems you have another system (linux client ?) connected to the same lan, correct?

You are trying to connect to, and manage, the HMC from this linux client, correct?

HMC V6 or less has no http / https management interface. Only HMC V7 has a https management interface.

For HMC V6 you must use the WebSM client which, as you saw, uses ports > 9k.

To download the linux or windows WebSM client from the HMC point your client browser to:
http://<hmchost>/remote_client.html

This is worth a read for further info:
http://www.redbooks.ibm.com/redpapers/pdfs/redp3999.pdf

[Captive]

> FSP port HMC1 on the p520 should be 192.168.2.147 if there is no DHCP server

There is no DHCP server and it is 192.168.2.147.

> From your description it seems you have another system (linux client ?) connected to the same lan, correct?

It is a Linux client, point-to-point, i.e. the LAN ports are directly connected.

> You are trying to connect to, and manage, the HMC from this linux client, correct?

Correct. What I neglected to point out is that I had this working just fine and then I moved (as from our old house to our new house) and when I started the p520 back up and reconnected, I get nothing. I can ping the p520, but I cannot bring up the browser connection.

[ross.mather]

OK which version of the HMC are you using? If its version 7.x then you need a web browser, but if its 6.x or 5.x then you'll need the WebSM are listed above.

Assuming you had it working - then it was version 7.0. What is the IP information you have set on your HMC? which port is connected to your server and which port is conected to your linux box?

[jakubgaj]

Hello,

From CLI:

$ lshmc -V // check version
$ lshmc -r // check remote access settings

For HMC 6.x u need to enable HTTP access with 'chhmc' command, for 7.x use HTTPS protocol instead (not HTTP).

Hope this helps...

[Captive]

> OK which version of the HMC are you using?

Don't know.

> If its version 7.x then you need a web browser, but if its 6.x or 5.x then you'll need the WebSM are listed above.

If you can connect to 7 but not 6 using a browser then it's 7.

> Assuming you had it working - then it was version 7.0. What is the IP information you have set on your HMC?

HMC1 is set to 192.168.2.147

> which port is connected to your server and which port is conected to your linux box?

I'm on the wrong page here. The HMC1 port that I'm plugged into is on the same machine as the one being managed. There are not 2 computers here. There is one p520 and it has a card plugged into the backplane that has the HMC1 and HMC2 ports on it. My assumption was that this is an embedded real time system that manages the p520. I see references to HMC, FSP, ASMI in the documentation that I'm reading and most of it shows the HMC as being a physically separate computer. This is not the case here. I cannot log into this "box" any way right now except through the serial port, when the machine is powered down, and only as "admin". There is no hscroot password and no way for me to run lshmc commands. Using the console interface through the serial line, I can start AIX and log into it and there are also no lshmc commands present there.

I may be totally confused, but I know that *this worked* before. I would log onto my Linux workstation, bring up firefox, type "hmc" into the address field and I would get the web based interface for managing the p520. Now it does not work.

Lost.

[3geofftech]

OK, so you don't have an HMC (Hardware Management Console) - which is a stand alone linux/IBM server that connects to the HMC ports on several RS6000.

The HMC1 and HMC2 ports on your p520 allow you to connect to the p520's (Flexible) service processor (FSP) via an ASMI login (normally admin/admin).

As you say you have had this working before, it sounds to me that the issues are networking between the linux workstation (which I guess is an unmentioned seerver on your 192.168 network).

I'd expect to access the ASMI interface from the browser using https if the networks good.

With the system down, as you say again, you can get access to the ascii ASM interface - check the net settings again.

The IBM infocentre has a reasonable section on getting access to the FSP.
Bring up the main menu and search for ASMI !

[Captive]

> The HMC1 and HMC2 ports on your p520 allow you to connect to the p520's (Flexible) service processor (FSP) via an ASMI login (normally admin/admin).

That's where I am.

> As you say you have had this working before, it sounds to me that the issues are networking between the linux workstation

Incorrect. The connection between the Linux box and the p520 is point-to-point on a dedicated interface on the Linux box which is configured to IP 192.168.2.222 and I can ping the p520 without issue. A port scan of the p520 shows nothing listening on ports 1-1024.

Again, the issue is that the HTTP server that should be running on the FSP is not running. (Now that I have the terminology straightened out).

> (which I guess is an unmentioned server on your 192.168 network).

It's not a server. It's a build-it-yourself AMD Athlon running SuSE 9.1 as a build client. It's one of 7 clients on the subnet, including the p520.

> With the system down, as you say again, you can get access to the ascii ASM interface - check the net settings again.

Nothing wrong with the net. I've even added 192.168.2.222 to the allowed hosts list. Nothing. I've rebooted the FSP. Nothing. I've reset the FSP to factory settings. Nothing. The HTTP server that should be running on the FSP is not running.

> The IBM infocentre has a reasonable section on getting access to the FSP.

I've read it back and forth. Their attitude is that if it's running then you can connect to it with a browser. Which is incorrect.

I connected the cable to a different machine and tried http and https there as well. Nothing.

I appreciate all the help.

[3geofftech]

OK,
Sorry when I said 'check net' I ws referring to the network interface settings on the FSP menus. If you have set the FSP back to factory defaults, are you now set to 'static' or dynamic' addressing when you log into the FSP and look at network settings. And if its static - then is it the 2.147 IP mentioned above. And if its not that - then for the time being I'm out of suggestions :-)

So 2.147 is your FSP address and 2.222 is the host system (on eth0 )

[duke900ssd]

Are you sure you have been looking at the right docs?

Now you understand the terminoligy and that you don't have an HMC....

The FSP only has a serial and an HTTPS ASM interface, hence nothing listening on port 80, try 443 / https://

How did you "reset the FSP to factory settings", remove power, reset it through the ASMI serial connection, flip the dip switch(es), remove the battery?

ASMI / browser requirements:
http://publib.boulder.ibm.com/infoce...quirements.htm

Check the left pane on the above site for the "Accessing the ASMI" topics.

Or:

Try reconfiguring your linux box to 192.168.3 and connect to the HMC2 port.