Changes between Version 8 and Version 9 of GENIRacksHome/InstageniRacks/ConfirmationTestStatus/NYSERNet


Ignore:
Timestamp:
09/16/13 14:34:35 (6 years ago)
Author:
lnevers@bbn.com
Comment:

--

Legend:

Unmodified
Added
Removed
Modified
  • GENIRacksHome/InstageniRacks/ConfirmationTestStatus/NYSERNet

    v8 v9  
    11341134== IG-CT-6 - Administrative Tests ==
    11351135
     1136Sent request for administrative account to site contact from the [http://groups.geni.net/geni/wiki/GeniAggregate/NYSERNetInstaGENI NYSERNet InstaGENI] aggregate page.  Followed instructions at [https://users.emulab.net/trac/protogeni/wiki/RackAdminAccounts Admin Accounts on InstaGeni Racks] page for account request. A local admin account was create and also had to join the ''emulab-ops'' group at https://www.nysernet.org/joinproject.php3?target_pid=emulab-ops.   Once the administrative account was created and membership to emulab-ops was approved, proceeded to execute administrative tests. 
     1137
     1138{{{
     1139LNM:~$ ssh control.instageni.nysernet.org
     1140Welcome to Ubuntu precise (development branch) (GNU/Linux 3.2.0-23-generic x86_64)
     1141
     1142 * Documentation:  https://help.ubuntu.com/
     1143
     1144  System information as of Mon Sep 16 18:24:35 UTC 2013
     1145
     1146  System load:     0.0               IP address for xenbr0:   199.109.64.3
     1147  Usage of /:      31.2% of 5.85GB   IP address for xenbr0:1: 172.16.0.1
     1148  Memory usage:    38%               IP address for xenbr1:   10.1.1.254
     1149  Swap usage:      2%                IP address for xenbr2:   10.2.1.254
     1150  Processes:       166               IP address for xenbr3:   10.3.1.254
     1151  Users logged in: 1
     1152
     1153  Graph this data and manage this system at https://landscape.canonical.com/
     1154Last login: Mon Sep 16 17:34:17 2013 from 128.89.254.103
     1155To run a command as administrator (user "root"), use "sudo <command>".
     1156See "man sudo_root" for details.
     1157
     1158lnevers@nysernet:~$ sudo whoami
     1159root
     1160lnevers@nysernet:~$
     1161
     1162}}}
     1163
     1164Also access the boss node:
     1165{{{
     1166LNM:~$ ssh boss.instageni.nysernet.org
     1167Last login: Mon Sep 16 14:16:21 2013 from dhcp89-073-116.bbn.com
     1168FreeBSD 9.0-STABLE (TESTBED-XEN) #0: Tue Apr 30 14:24:36 MDT 2013
     1169
     1170Welcome to FreeBSD!
     1171
     1172Want to use sed(1) to edit a file in place?  Well, to replace every 'e' with
     1173an 'o', in a file named 'foo', you can do:
     1174
     1175        sed -i.bak s/e/o/g foo
     1176
     1177And you'll get a backup of the original in a file named 'foo.bak', but if you
     1178want no backup:
     1179
     1180        sed -i '' s/e/o/g foo
     1181[lnevers@boss ~]$ sudo whoami
     1182root
     1183[lnevers@boss ~]$ }}}
     1184
     1185From boss node accessed each of the experiment nodes that support VMs:
     1186{{{
     1187[lnevers@boss ~]$ for i in pc1 pc2; do ssh $i "echo -n '===> Host: ';hostname;sudo whoami;uname -a;echo"; done
     1188Warning: Permanently added 'pc1.instageni.nysernet.org' (RSA) to the list of known hosts.
     1189===> Host: vhost1.shared-nodes.emulab-ops.instageni.nysernet.org
     1190root
     1191Linux vhost1.shared-nodes.emulab-ops.instageni.nysernet.org 2.6.32-042stab049.6.emulab.1 #1 SMP Mon May 21 14:36:04 MDT 2012 x86_64 x86_64 x86_64 GNU/Linux
     1192
     1193Warning: Permanently added 'pc2.instageni.nysernet.org' (RSA) to the list of known hosts.
     1194===> Host: vhost2.shared-nodes.emulab-ops.instageni.nysernet.org
     1195root
     1196Linux vhost2.shared-nodes.emulab-ops.instageni.nysernet.org 2.6.32-042stab049.6.emulab.1 #1 SMP Mon May 21 14:36:04 MDT 2012 x86_64 x86_64 x86_64 GNU/Linux
     1197
     1198[lnevers@boss ~]$
     1199
     1200
     1201}}}
     1202
     1203In order to access Dedicated Nodes some experiment must be running on the raw-pc device. At the time of this capture only 1 raw-pc nodes was in use:
     1204{{{
     1205[lnevers@boss ~]$ sudo ssh pc4
     1206[root@pc ~]# sudo whoami
     1207root
     1208[root@pc ~]# exit
     1209logout
     1210Connection to pc4.instageni.nysernet.org closed.
     1211[lnevers@boss ~]$
     1212
     1213}}}
     1214
     1215Further verified access by ssh from ops.instageni.gpolab.bbn.com to boss.instageni.gpolab.bbn.com, which is usually restricted for non-admin users:
     1216{{{
     1217LNM:~$ ssh ops.instageni.nysernet.org
     1218Last login: Mon Sep 16 13:29:52 2013 from 128.89.254.103
     1219FreeBSD 9.0-STABLE (TESTBED-XEN) #0: Tue Apr 30 14:24:36 MDT 2013
     1220
     1221Welcome to FreeBSD!
     1222
     1223If you `set watch = (0 any any)' in tcsh, you will be notified when
     1224someone logs in or out of your system.
     1225> bash
     1226[lnevers@ops ~]$ sudo whoami
     1227root
     1228[lnevers@ops ~]$ ssh boss
     1229Last login: Mon Sep 16 14:25:43 2013 from dhcp89-073-116.bbn.com
     1230FreeBSD 9.0-STABLE (TESTBED-XEN) #0: Tue Apr 30 14:24:36 MDT 2013
     1231
     1232Welcome to FreeBSD!
     1233
     1234To see the 10 largest files on a directory or partition, use
     1235
     1236        du /partition_or_directory_name | sort -rn | head
     1237                -- Dru <genesis@istar.ca>
     1238[lnevers@boss ~]$
     1239
     1240}}}
     1241Access infrastructure Switches using documented password. First connect to the switch named procurve1 the control network switch:
     1242{{{
     1243[lnevers@boss ~]$ telnet procurve1
     1244Trying 10.1.1.253...
     1245Connected to procurve1.
     1246Escape character is '^]'.
     1247
     1248HP J9623A E2620-24 Switch
     1249Software revision RA.15.08.0009
     1250
     1251Copyright (C) 1991-2012 Hewlett-Packard Development Company, L.P.
     1252
     1253                   RESTRICTED RIGHTS LEGEND
     1254 Confidential computer software.  Valid license from HP required for possession,
     1255 use or copying. Consistent with FAR 12.211 and 12.212, Commercial Computer
     1256 Software, Computer Software Documentation, and Technical Data for Commercial
     1257 Items are licensed to the U.S. Government under vendor's standard commercial
     1258 license.
     1259                   HEWLETT-PACKARD DEVELOPMENT COMPANY, L.P.
     1260                   20555 State Highway 249, Houston, TX 77070
     1261
     1262We'd like to keep you up to date about:
     1263  * Software feature updates
     1264  * New product announcements
     1265  * Special events
     1266Please register your products now at:  www.hp.com/networking/register
     1267
     1268Username: manager
     1269Password:
     1270
     1271HP-E2620-24# show version
     1272Image stamp:    /ws/swbuildm/rel_galt_qaoff/code/build/xform(rel_galt_qaoff)
     1273                May  9 2012 15:28:43
     1274                RA.15.08.0009
     1275                474
     1276Boot Image:     Primary
     1277HP-E2620-24# show running-config
     1278
     1279Running configuration:
     1280
     1281; J9623A Configuration Editor; Created on release #RA.15.08.0009
     1282; Ver #02:13.2d:3c
     1283hostname "HP-E2620-24"
     1284max-vlans 50
     1285no stack
     1286no web-management
     1287ip default-gateway 10.1.1.254
     1288snmp-server community "xxx" unrestricted
     1289aaa authentication ssh login public-key
     1290aaa authentication ssh enable public-key
     1291vlan 1
     1292   name "DEFAULT_VLAN"
     1293   no untagged 23-24
     1294   untagged 1-22,25-28
     1295   ip address 10.254.254.253 255.255.255.0
     1296   ip igmp
     1297   exit
     1298vlan 10
     1299   name "control-hardware"
     1300   untagged 23
     1301   ip address 10.1.1.253 255.255.255.0
     1302   exit
     1303vlan 11
     1304   name "control-alternate"
     1305   untagged 24
     1306   ip address 10.2.1.253 255.255.255.0
     1307   exit
     1308management-vlan 10
     1309no dhcp config-file-update
     1310password manager
     1311password operator
     1312
     1313HP-E2620-24# show vlan 10
     1314
     1315 Status and Counters - VLAN Information - VLAN 10
     1316
     1317  VLAN ID : 10     
     1318  Name : control-hardware               
     1319  Status : Port-based
     1320  Voice : No
     1321  Jumbo : No
     1322
     1323  Port Information Mode     Unknown VLAN Status   
     1324  ---------------- -------- ------------ ----------
     1325  23               Untagged Learn        Up       
     1326 
     1327
     1328HP-E2620-24# exit
     1329HP-E2620-24> exit
     1330Do you want to log out [y/n]? y
     1331Connection closed by foreign host.
     1332[lnevers@boss ~]$
     1333}}}
     1334
     1335Connect to the switch named procurve2 the dataplane network switch via ssh using the documented password:
     1336{{{
     1337[lnevers@boss ~]$ sudo more /usr/testbed/etc/switch.pswd
     1338xxxxxxx
     1339[lnevers@boss ~]$  telnet procurve2
     1340Trying 10.3.1.253...
     1341Connected to procurve2.
     1342Escape character is '^]'.
     1343
     1344HP J8697A Switch E5406zl
     1345Software revision K.15.06.5008
     1346
     1347Copyright (C) 1991-2012 Hewlett-Packard Development Company, L.P.
     1348
     1349                   RESTRICTED RIGHTS LEGEND
     1350 Confidential computer software.  Valid license from HP required for possession,
     1351 use or copying. Consistent with FAR 12.211 and 12.212, Commercial Computer
     1352 Software, Computer Software Documentation, and Technical Data for Commercial
     1353 Items are licensed to the U.S. Government under vendor's standard commercial
     1354 license.
     1355                   HEWLETT-PACKARD DEVELOPMENT COMPANY, L.P.
     1356                   20555 State Highway 249, Houston, TX 77070
     1357
     1358We'd like to keep you up to date about:
     1359  * Software feature updates
     1360  * New product announcements
     1361  * Special events
     1362Please register your products now at:  www.hp.com/networking/register
     1363
     1364Username: manager
     1365Password:
     1366
     1367
     1368HP-E5406zl# show version
     1369Image stamp:    /ws/swbuildm/of_bridge_qaoff/code/build/btm(of_bridge_qaoff)
     1370                Feb 18 2012 11:26:28
     1371                K.15.06.5008
     1372                79
     1373Boot Image:     Primary
     1374HP-E5406zl# show running-config
     1375
     1376Running configuration:
     1377
     1378; J8697A Configuration Editor; Created on release #K.15.06.5008
     1379; Ver #02:10.0d:1f
     1380
     1381hostname "HP-E5406zl"
     1382module 1 type J9549A
     1383interface A1
     1384   speed-duplex auto-1000
     1385exit
     1386interface A2
     1387   speed-duplex auto-1000
     1388exit
     1389interface A3
     1390   speed-duplex auto-1000
     1391exit
     1392interface A4
     1393   speed-duplex auto-1000
     1394exit
     1395interface A5
     1396   speed-duplex auto-1000
     1397exit
     1398interface A6
     1399   speed-duplex auto-1000
     1400exit
     1401interface A7
     1402   speed-duplex auto-1000
     1403exit
     1404interface A8
     1405   speed-duplex auto-1000
     1406exit
     1407interface A9
     1408   speed-duplex auto-1000
     1409exit
     1410interface A10
     1411   speed-duplex auto-1000
     1412exit
     1413ip default-gateway 10.3.1.254
     1414vlan 1
     1415   name "DEFAULT_VLAN"
     1416   forbid A1-A9
     1417   untagged A11-A19,A21-A23
     1418   no untagged A1-A10,A20,A24
     1419   no ip address
     1420   exit
     1421vlan 10
     1422   name "control-hardware"
     1423   untagged A20
     1424   ip address 10.3.1.253 255.255.255.0
     1425   exit
     1426vlan 257
     1427   name "_1"
     1428   untagged A1-A9
     1429   no ip address
     1430   exit
     1431vlan 258
     1432   name "_6"
     1433   tagged A4,A7
     1434   no ip address
     1435   exit
     1436vlan 259
     1437   name "_7"
     1438   tagged A1,A4
     1439   no ip address
     1440   exit
     1441vlan 1750
     1442   name "_8"
     1443   tagged A1,A24
     1444   no ip address
     1445   exit
     1446vlan 260
     1447   name "_17"
     1448   tagged A7
     1449   no ip address
     1450   exit
     1451vlan 261
     1452   name "_19"
     1453   tagged A7,A10
     1454   no ip address
     1455   exit
     1456no web-management
     1457openflow
     1458   vlan 1750
     1459      enable
     1460      controller "tcp:10.3.1.7:6633" fail-secure on
     1461      exit
     1462   exit
     1463snmp-server community "xxx" unrestricted
     1464aaa authentication ssh login public-key
     1465aaa authentication ssh enable public-key
     1466management-vlan 10
     1467no autorun
     1468no dhcp config-file-update
     1469no dhcp image-file-update
     1470password xxx
     1471password xxx
     1472
     1473HP-E5406zl#  show vlan 1750
     1474
     1475 Status and Counters - VLAN Information - VLAN 1750
     1476
     1477  VLAN ID : 1750   
     1478  Name : _8                             
     1479  Status : Port-based
     1480  Voice : No
     1481  Jumbo : No
     1482
     1483  Port Information Mode     Unknown VLAN Status   
     1484  ---------------- -------- ------------ ----------
     1485  A1               Tagged   Learn        Up       
     1486  A24              Tagged   Learn        Up       
     1487 
     1488
     1489HP-E5406zl#
     1490
     1491}}}
     1492
     1493Access the FOAM VM and gather information for version
     1494{{{
     1495LNM:~$ ssh lnevers@foam.nysernet.org
     1496
     1497sudo foamctl admin:get-version  --passwd-file=/etc/foam.passwd
     1498
     1499}}}
     1500Check FOAM configuration for  site.admin.email, geni.site-tag, email.from settings:
     1501{{{
     1502foamctl config:get-value --key="site.admin.email"  --passwd-file=/etc/foam.passwd
     1503
     1504foamctl config:get-value --key="geni.site-tag"  --passwd-file=/etc/foam.passwd
     1505
     1506foamctl config:get-value --key="email.from"  --passwd-file=/etc/foam.passwd
     1507
     1508# check if FOAM auto-approve is on. Value 2 = auto-approve is on.
     1509
     1510foamctl config:get-value --key="geni.approval.approve-on-creation"  --passwd-file=/etc/foam.passwd
     1511
     1512}}}
     1513
     1514Show FOAM slivers and details for one sliver:
     1515
     1516{{{
     1517foamctl geni:list-slivers --passwd-file=/etc/foam.passwd
     1518
     1519}}}
     1520Access the FlowVisor VM and gather version information:
     1521{{{
     1522
     1523ssh lnevers@flowvisor.nysernet.org
     1524}}}
     1525Check the !FlowVisor version, list of devices, get details for a device, list of active slices, and details for one of the slices:
     1526{{{     
     1527
     1528fvctl --passwd-file=/etc/flowvisor.passwd ping hello
     1529
     1530# Devices
     1531fvctl --passwd-file=/etc/flowvisor.passwd listDevices
     1532
     1533fvctl --passwd-file=/etc/flowvisor.passwd getDeviceInfo 06:d6:6c:3b:e5:68:00:00
     1534
     1535#Slices
     1536fvctl --passwd-file=/etc/flowvisor.passwd listSlices
     1537
     1538fvctl --passwd-file=/etc/flowvisor.passwd getSliceInfo 5c956f94-5e05-40b5-948f-34d0149d9182
     1539
     1540}}}
     1541
     1542Check the FlowVisor setting:
     1543{{{
     1544fvctl --passwd-file=/etc/flowvisor.passwd dumpConfig /tmp/flowvisor-config
     1545more /tmp/flowvisor-config
     1546
     1547}}}
     1548
     1549
     1550Verify alerts for the compute resource Aggregate Manager are being reported to the [http://monitor.gpolab.bbn.com/nagios/cgi-bin/status.cgi GPO Tango GENI Nagios monitoring] and that all alerts have status OK.
     1551
     1552
     1553[[Image(NYSERNet-nagios.jpg)]]
     1554
     1555Verify alerts for the FOAM Aggregate Manager are being reported to the [http://monitor.gpolab.bbn.com/nagios/cgi-bin/status.cgi GPO Tango GENI Nagios monitoring] and that all alerts have status OK.
     1556
     1557[[Image(NYSERNet-OF-nagios.jpg)]]
    11361558----
    11371559{{{