1117 | | Requested account after joining emulab-ops group at https://www.geni.it.cornell.edu/joinproject.php3 |
| 1117 | Sent request for administrative account to site contact from the [http://groups.geni.net/geni/wiki/GeniAggregate/CornellInstaGENI Cornell InstaGENI] aggregate page. Followed instructions at the [http://groups.geni.net/geni/wiki/GENIRacksAdministration/InstaGENIAdministration InstaGENI Administration] page for account request. A local administrator account was requested by joining the ''emulab-ops'' group at https://www.geni.it.cornell.edu/joinproject.php3. Once the administrative account was approved and the membership to emulab-ops was granted, proceeded to execute administrative tests. |
| 1118 | |
| 1119 | {{{ |
| 1120 | LNM:~$ ssh control.geni.it.cornell.edu |
| 1121 | |
| 1122 | }}} |
| 1123 | |
| 1124 | Also access the boss node: |
| 1125 | {{{ |
| 1126 | LNM:~$ ssh boss.geni.it.cornell.edu |
| 1127 | Last login: Tue Jan 7 13:46:46 2014 from dhcp89-073-116.bbn.com |
| 1128 | FreeBSD 9.0-STABLE (TESTBED-XEN) #0: Tue Apr 30 14:24:36 MDT 2013 |
| 1129 | |
| 1130 | Welcome to FreeBSD! |
| 1131 | |
| 1132 | You can adjust the volume of various parts of the sound system in your |
| 1133 | computer by typing 'mixer <type> <volume>'. To get a list of what you can |
| 1134 | adjust, just type 'mixer'. |
| 1135 | > bash |
| 1136 | [lnevers@boss ~]$ sudo whoami |
| 1137 | root |
| 1138 | [lnevers@boss ~]$ uname -a |
| 1139 | FreeBSD boss.geni.it.cornell.edu 9.0-STABLE FreeBSD 9.0-STABLE #0: Tue Apr 30 14:24:36 MDT 2013 root@n1.one-freebsd.testbed.emulab.net:/usr/obj/mnt/src/sys/TESTBED-XEN i386 |
| 1140 | [lnevers@boss ~]$ |
| 1141 | |
| 1142 | }}} |
| 1143 | |
| 1144 | From boss node accessed each of the experiment nodes that support VMs: |
| 1145 | {{{ |
| 1146 | [lnevers@boss ~]$ for i in pc1 pc2 pc3; do ssh $i "echo -n '===> Host: ';hostname;sudo whoami;uname -a;echo"; done |
| 1147 | Warning: Permanently added 'pc1.geni.it.cornell.edu' (RSA) to the list of known hosts. |
| 1148 | ===> Host: vhost1.shared-nodes.emulab-ops.geni.it.cornell.edu |
| 1149 | root |
| 1150 | Linux vhost1.shared-nodes.emulab-ops.geni.it.cornell.edu 2.6.32-042stab049.6.emulab.1 #1 SMP Mon May 21 14:36:04 MDT 2012 x86_64 x86_64 x86_64 GNU/Linux |
| 1151 | |
| 1152 | Warning: Permanently added 'pc2.geni.it.cornell.edu' (RSA) to the list of known hosts. |
| 1153 | ===> Host: vhost2.shared-nodes.emulab-ops.geni.it.cornell.edu |
| 1154 | root |
| 1155 | Linux vhost2.shared-nodes.emulab-ops.geni.it.cornell.edu 2.6.32-042stab049.6.emulab.1 #1 SMP Mon May 21 14:36:04 MDT 2012 x86_64 x86_64 x86_64 GNU/Linux |
| 1156 | |
| 1157 | Warning: Permanently added 'pc3.geni.it.cornell.edu' (RSA) to the list of known hosts. |
| 1158 | ===> Host: vhost3.shared-nodes.emulab-ops.geni.it.cornell.edu |
| 1159 | root |
| 1160 | Linux vhost3.shared-nodes.emulab-ops.geni.it.cornell.edu 3.2.46 #1 SMP Wed Jun 5 15:53:18 MDT 2013 x86_64 x86_64 x86_64 GNU/Linux |
| 1161 | |
| 1162 | [lnevers@boss ~]$ |
| 1163 | |
| 1164 | |
| 1165 | }}} |
| 1166 | |
| 1167 | In order to access Dedicated Nodes some experiment must be running on the raw-pc device. At the time the two raw-pc nodes were in use (pc4 and pc5): |
| 1168 | {{{ |
| 1169 | [lnevers@boss ~]$ sudo ssh pc4 |
| 1170 | Last login: Tue Jan 7 13:47:55 2014 from boss.geni.it.cornell.edu |
| 1171 | [root@cornell-ig2 ~]# sudo whoami |
| 1172 | root |
| 1173 | [root@cornell-ig2 ~]# uname -a |
| 1174 | Linux cornell-ig2.ig-ct-4.ch-geni-net.geni.it.cornell.edu 2.6.40-4.emulab2.fc15.i686.PAE #1 SMP Tue Feb 26 13:35:12 MST 2013 i686 i686 i386 GNU/Linux |
| 1175 | [root@cornell-ig2 ~]# exit |
| 1176 | logout |
| 1177 | Connection to pc4.geni.it.cornell.edu closed. |
| 1178 | [lnevers@boss ~]$ sudo ssh pc5 |
| 1179 | [root@cornell-ig ~]# sudo whoami |
| 1180 | root |
| 1181 | [root@cornell-ig ~]# uname -a |
| 1182 | Linux cornell-ig.ig-ct-4.ch-geni-net.geni.it.cornell.edu 2.6.40-4.emulab2.fc15.i686.PAE #1 SMP Tue Feb 26 13:35:12 MST 2013 i686 i686 i386 GNU/Linux |
| 1183 | [root@cornell-ig ~]# |
| 1184 | }}} |
| 1185 | |
| 1186 | Further verified access by ssh from ops.instageni.gpolab.bbn.com to boss.instageni.gpolab.bbn.com, which is usually restricted for non-admin users: |
| 1187 | {{{ |
| 1188 | LNM:~$ ssh ops.geni.it.cornell.edu |
| 1189 | Last login: Tue Jan 7 14:00:27 2014 from dhcp89-073-116.bbn.com |
| 1190 | FreeBSD 9.0-STABLE (TESTBED-XEN) #0: Tue Apr 30 14:24:36 MDT 2013 |
| 1191 | |
| 1192 | Welcome to FreeBSD! |
| 1193 | |
| 1194 | Nice bash prompt: PS1='(\[$(tput md)\]\t <\w>\[$(tput me)\]) $(echo $?) \$ ' |
| 1195 | -- Mathieu <mathieu@hal.interactionvirtuelle.com> |
| 1196 | > bash |
| 1197 | [lnevers@ops ~]$ sudo whoami |
| 1198 | root |
| 1199 | [lnevers@ops ~]$ uname -a |
| 1200 | FreeBSD ops.geni.it.cornell.edu 9.0-STABLE FreeBSD 9.0-STABLE #0: Tue Apr 30 14:24:36 MDT 2013 |
| 1201 | [lnevers@ops ~]$ |
| 1202 | [lnevers@ops ~]$ ssh boss |
| 1203 | The authenticity of host 'boss.geni.it.cornell.edu (192.122.236.68)' can't be established. |
| 1204 | ECDSA key fingerprint is bd:05:23:a7:5b:cc:78:c8:8c:a8:d3:e9:f7:27:53:cb. |
| 1205 | Are you sure you want to continue connecting (yes/no)? yes |
| 1206 | Warning: Permanently added 'boss.geni.it.cornell.edu' (ECDSA) to the list of known hosts. |
| 1207 | Last login: Tue Jan 7 13:46:54 2014 from dhcp89-073-116.bbn.com |
| 1208 | FreeBSD 9.0-STABLE (TESTBED-XEN) #0: Tue Apr 30 14:24:36 MDT 2013 |
| 1209 | |
| 1210 | Welcome to FreeBSD! |
| 1211 | |
| 1212 | sh (the default Bourne shell in FreeBSD) supports command-line editing. Just |
| 1213 | ``set -o emacs'' or ``set -o vi'' to enable it. |
| 1214 | > bash |
| 1215 | [lnevers@boss ~]$ |
| 1216 | |
| 1217 | }}} |
| 1218 | Access infrastructure switches using documented password. First connect to the switch named procurve1 the control network switch: |
| 1219 | {{{ |
| 1220 | [lnevers@boss ~]$ sudo more /usr/testbed/etc/switch.pswd |
| 1221 | XXXXXXXXX |
| 1222 | [lnevers@boss ~]$ telnet procurve1 |
| 1223 | Trying 10.1.1.253... |
| 1224 | Connected to procurve1. |
| 1225 | Escape character is '^]'. |
| 1226 | |
| 1227 | HP J9623A E2620-24 Switch |
| 1228 | Software revision RA.15.08.0009 |
| 1229 | |
| 1230 | Copyright (C) 1991-2012 Hewlett-Packard Development Company, L.P. |
| 1231 | |
| 1232 | RESTRICTED RIGHTS LEGEND |
| 1233 | Confidential computer software. Valid license from HP required for possession, |
| 1234 | use or copying. Consistent with FAR 12.211 and 12.212, Commercial Computer |
| 1235 | Software, Computer Software Documentation, and Technical Data for Commercial |
| 1236 | Items are licensed to the U.S. Government under vendor's standard commercial |
| 1237 | license. |
| 1238 | HEWLETT-PACKARD DEVELOPMENT COMPANY, L.P. |
| 1239 | 20555 State Highway 249, Houston, TX 77070 |
| 1240 | |
| 1241 | We'd like to keep you up to date about: |
| 1242 | * Software feature updates |
| 1243 | * New product announcements |
| 1244 | * Special events |
| 1245 | Please register your products now at: www.hp.com/networking/register |
| 1246 | Username: manager |
| 1247 | Password: |
| 1248 | |
| 1249 | HP-E2620-24# |
| 1250 | HP-E2620-24# show version |
| 1251 | Image stamp: /ws/swbuildm/rel_galt_qaoff/code/build/xform(rel_galt_qaoff) |
| 1252 | May 9 2012 15:28:43 |
| 1253 | RA.15.08.0009 |
| 1254 | 474 |
| 1255 | Boot Image: Primary |
| 1256 | HP-E2620-24# show running-config |
| 1257 | |
| 1258 | Running configuration: |
| 1259 | |
| 1260 | ; J9623A Configuration Editor; Created on release #RA.15.08.0009 |
| 1261 | ; Ver #02:13.2d:3c |
| 1262 | hostname "HP-E2620-24" |
| 1263 | max-vlans 50 |
| 1264 | no stack |
| 1265 | no web-management |
| 1266 | ip default-gateway 10.1.1.254 |
| 1267 | snmp-server community "xxx" unrestricted |
| 1268 | aaa authentication ssh login public-key |
| 1269 | aaa authentication ssh enable public-key |
| 1270 | vlan 1 |
| 1271 | name "DEFAULT_VLAN" |
| 1272 | no untagged 23-24 |
| 1273 | untagged 1-22,25-28 |
| 1274 | ip address 10.254.254.253 255.255.255.0 |
| 1275 | ip igmp |
| 1276 | exit |
| 1277 | vlan 10 |
| 1278 | name "control-hardware" |
| 1279 | untagged 23 |
| 1280 | ip address 10.1.1.253 255.255.255.0 |
| 1281 | exit |
| 1282 | vlan 11 |
| 1283 | name "control-alternate" |
| 1284 | untagged 24 |
| 1285 | ip address 10.2.1.253 255.255.255.0 |
| 1286 | exit |
| 1287 | management-vlan 10 |
| 1288 | no dhcp config-file-update |
| 1289 | password xxx |
| 1290 | password xxx |
| 1291 | |
| 1292 | HP-E2620-24# show vlan 10 |
| 1293 | |
| 1294 | Status and Counters - VLAN Information - VLAN 10 |
| 1295 | |
| 1296 | VLAN ID : 10 |
| 1297 | Name : control-hardware |
| 1298 | Status : Port-based |
| 1299 | Voice : No |
| 1300 | Jumbo : No |
| 1301 | |
| 1302 | Port Information Mode Unknown VLAN Status |
| 1303 | ---------------- -------- ------------ ---------- |
| 1304 | 23 Untagged Learn Up |
| 1305 | |
| 1306 | |
| 1307 | HP-E2620-24# |
| 1308 | }}} |
| 1309 | |
| 1310 | Connect to the switch named procurve2 the dataplane network switch via ssh using the documented password: |
| 1311 | {{{ |
| 1312 | [lnevers@boss ~]$ sudo more /usr/testbed/etc/switch.pswd |
| 1313 | xxxxxxx |
| 1314 | [lnevers@boss ~]$ telnet procurve2 |
| 1315 | Trying 10.3.1.253... |
| 1316 | Connected to procurve2. |
| 1317 | Escape character is '^]'. |
| 1318 | |
| 1319 | HP J8697A Switch E5406zl |
| 1320 | Software revision K.15.06.5008 |
| 1321 | |
| 1322 | Copyright (C) 1991-2012 Hewlett-Packard Development Company, L.P. |
| 1323 | |
| 1324 | RESTRICTED RIGHTS LEGEND |
| 1325 | Confidential computer software. Valid license from HP required for possession, |
| 1326 | use or copying. Consistent with FAR 12.211 and 12.212, Commercial Computer |
| 1327 | Software, Computer Software Documentation, and Technical Data for Commercial |
| 1328 | Items are licensed to the U.S. Government under vendor's standard commercial |
| 1329 | license. |
| 1330 | HEWLETT-PACKARD DEVELOPMENT COMPANY, L.P. |
| 1331 | 20555 State Highway 249, Houston, TX 77070 |
| 1332 | |
| 1333 | We'd like to keep you up to date about: |
| 1334 | * Software feature updates |
| 1335 | * New product announcements |
| 1336 | * Special events |
| 1337 | Please register your products now at: www.hp.com/networking/register |
| 1338 | |
| 1339 | Username: manager |
| 1340 | Password: |
| 1341 | |
| 1342 | HP-E5406zl# show version |
| 1343 | Image stamp: /ws/swbuildm/of_bridge_qaoff/code/build/btm(of_bridge_qaoff) |
| 1344 | Feb 18 2012 11:26:28 |
| 1345 | K.15.06.5008 |
| 1346 | 79 |
| 1347 | Boot Image: Primary |
| 1348 | HP-E5406zl# show running-config |
| 1349 | |
| 1350 | Running configuration: |
| 1351 | |
| 1352 | ; J8697A Configuration Editor; Created on release #K.15.06.5008 |
| 1353 | ; Ver #02:10.0d:1f |
| 1354 | |
| 1355 | hostname "HP-E5406zl" |
| 1356 | module 1 type J9549A |
| 1357 | interface A1 |
| 1358 | speed-duplex auto-1000 |
| 1359 | exit |
| 1360 | interface A2 |
| 1361 | speed-duplex auto-1000 |
| 1362 | exit |
| 1363 | interface A3 |
| 1364 | speed-duplex auto-1000 |
| 1365 | exit |
| 1366 | interface A4 |
| 1367 | speed-duplex auto-1000 |
| 1368 | exit |
| 1369 | interface A5 |
| 1370 | speed-duplex auto-1000 |
| 1371 | exit |
| 1372 | interface A6 |
| 1373 | speed-duplex auto-1000 |
| 1374 | exit |
| 1375 | interface A7 |
| 1376 | speed-duplex auto-1000 |
| 1377 | exit |
| 1378 | interface A8 |
| 1379 | speed-duplex auto-1000 |
| 1380 | exit |
| 1381 | interface A9 |
| 1382 | speed-duplex auto-1000 |
| 1383 | exit |
| 1384 | interface A10 |
| 1385 | speed-duplex auto-1000 |
| 1386 | exit |
| 1387 | interface A13 |
| 1388 | speed-duplex auto-1000 |
| 1389 | exit |
| 1390 | interface A24 |
| 1391 | speed-duplex 1000-full |
| 1392 | exit |
| 1393 | ip default-gateway 10.3.1.254 |
| 1394 | vlan 1 |
| 1395 | name "DEFAULT_VLAN" |
| 1396 | forbid A1-A9 |
| 1397 | untagged A11-A12,A14-A19,A21-A23 |
| 1398 | no untagged A1-A10,A13,A20,A24 |
| 1399 | no ip address |
| 1400 | exit |
| 1401 | vlan 10 |
| 1402 | name "control-hardware" |
| 1403 | untagged A20 |
| 1404 | ip address 10.3.1.253 255.255.255.0 |
| 1405 | exit |
| 1406 | vlan 257 |
| 1407 | name "5000" |
| 1408 | untagged A1-A9 |
| 1409 | no ip address |
| 1410 | exit |
| 1411 | vlan 258 |
| 1412 | name "5002" |
| 1413 | tagged A1,A4 |
| 1414 | no ip address |
| 1415 | exit |
| 1416 | vlan 259 |
| 1417 | name "5001" |
| 1418 | tagged A4,A7 |
| 1419 | no ip address |
| 1420 | exit |
| 1421 | vlan 1750 |
| 1422 | name "5003" |
| 1423 | tagged A1,A4,A7,A10,A13,A24 |
| 1424 | no ip address |
| 1425 | exit |
| 1426 | no web-management |
| 1427 | openflow |
| 1428 | vlan 1750 |
| 1429 | enable |
| 1430 | controller "tcp:10.3.1.7:6633" fail-secure on |
| 1431 | exit |
| 1432 | exit |
| 1433 | snmp-server community "xxx" unrestricted |
| 1434 | aaa authentication ssh login public-key |
| 1435 | aaa authentication ssh enable public-key |
| 1436 | no autorun |
| 1437 | no dhcp config-file-update |
| 1438 | no dhcp image-file-update |
| 1439 | password xxx |
| 1440 | password xxx |
| 1441 | |
| 1442 | HP-E5406zl# show vlan 1750 |
| 1443 | |
| 1444 | Status and Counters - VLAN Information - VLAN 1750 |
| 1445 | |
| 1446 | VLAN ID : 1750 |
| 1447 | Name : 5003 |
| 1448 | Status : Port-based |
| 1449 | Voice : No |
| 1450 | Jumbo : No |
| 1451 | |
| 1452 | Port Information Mode Unknown VLAN Status |
| 1453 | ---------------- -------- ------------ ---------- |
| 1454 | A1 Tagged Learn Up |
| 1455 | A4 Tagged Learn Up |
| 1456 | A7 Tagged Learn Up |
| 1457 | A10 Tagged Learn Up |
| 1458 | A13 Tagged Learn Up |
| 1459 | A24 Tagged Learn Up |
| 1460 | |
| 1461 | |
| 1462 | HP-E5406zl# |
| 1463 | }}} |
| 1464 | |
| 1465 | Access the FOAM VM and gather information for version |
| 1466 | {{{ |
| 1467 | LNM:~$ ssh lnevers@foam.cornell.net |
| 1468 | |
| 1469 | sudo foamctl admin:get-version --passwd-file=/etc/foam.passwd |
| 1470 | |
| 1471 | }}} |
| 1472 | Check FOAM configuration for site.admin.email, geni.site-tag, email.from settings: |
| 1473 | {{{ |
| 1474 | foamctl config:get-value --key="site.admin.email" --passwd-file=/etc/foam.passwd |
| 1475 | |
| 1476 | foamctl config:get-value --key="geni.site-tag" --passwd-file=/etc/foam.passwd |
| 1477 | |
| 1478 | foamctl config:get-value --key="email.from" --passwd-file=/etc/foam.passwd |
| 1479 | |
| 1480 | # check if FOAM auto-approve is on. Value 2 = auto-approve is on. |
| 1481 | |
| 1482 | foamctl config:get-value --key="geni.approval.approve-on-creation" --passwd-file=/etc/foam.passwd |
| 1483 | |
| 1484 | }}} |
| 1485 | |
| 1486 | Show FOAM slivers details: |
| 1487 | |
| 1488 | {{{ |
| 1489 | foamctl geni:list-slivers --passwd-file=/etc/foam.passwd |
| 1490 | |
| 1491 | }}} |
| 1492 | Access the FlowVisor VM and gather version information: |
| 1493 | {{{ |
| 1494 | |
| 1495 | ssh lnevers@flowvisor.cornell.net |
| 1496 | }}} |
| 1497 | Check the !FlowVisor version, list of devices, get details for a device, list of active slices, and details for one of the slices: |
| 1498 | {{{ |
| 1499 | |
| 1500 | fvctl --passwd-file=/etc/flowvisor.passwd ping hello |
| 1501 | |
| 1502 | # Devices |
| 1503 | fvctl --passwd-file=/etc/flowvisor.passwd listDevices |
| 1504 | |
| 1505 | fvctl --passwd-file=/etc/flowvisor.passwd getDeviceInfo 06:d6:6c:3b:e5:68:00:00 |
| 1506 | |
| 1507 | #Slices |
| 1508 | fvctl --passwd-file=/etc/flowvisor.passwd listSlices |
| 1509 | |
| 1510 | fvctl --passwd-file=/etc/flowvisor.passwd getSliceInfo 5c956f94-5e05-40b5-948f-34d0149d9182 |
| 1511 | |
| 1512 | }}} |
| 1513 | |
| 1514 | Check the FlowVisor setting: |
| 1515 | {{{ |
| 1516 | fvctl --passwd-file=/etc/flowvisor.passwd dumpConfig /tmp/flowvisor-config |
| 1517 | more /tmp/flowvisor-config |
| 1518 | |
| 1519 | }}} |
| 1520 | |