| 1102 | Sent request for administrative account to site contact from the [http://groups.geni.net/geni/wiki/GeniAggregate/NYUInstaGENI NYU InstaGENI] aggregate page. Followed instructions at [https://users.emulab.net/trac/protogeni/wiki/RackAdminAccounts Admin Accounts on InstaGeni Racks] page for account request. A local admin account was create and also had to join the ''emulab-ops'' group at https://www.nyu.edu/joinproject.php3?target_pid=emulab-ops. Once the administrative account was created and membership to emulab-ops was approved, proceeded to execute administrative tests. |
| 1103 | |
| 1104 | {{{ |
| 1105 | LNM:~$ ssh control.genirack.nyu.edu |
| 1106 | |
| 1107 | }}} |
| 1108 | |
| 1109 | Also access the boss node: |
| 1110 | {{{ |
| 1111 | LNM:~$ ssh boss.genirack.nyu.edu |
| 1112 | Last login: Fri Aug 23 11:42:12 2013 from dhcp89-073-116.bbn.com |
| 1113 | FreeBSD 9.0-STABLE (XEN) #4: Mon Nov 26 10:02:53 MST 2012 |
| 1114 | |
| 1115 | Welcome to FreeBSD! |
| 1116 | |
| 1117 | You can install extra packages for FreeBSD by using the ports system. |
| 1118 | If you have installed it, you can download, compile, and install software by |
| 1119 | just typing |
| 1120 | |
| 1121 | # cd /usr/ports/<category>/<portname> |
| 1122 | # make install && make clean |
| 1123 | |
| 1124 | as root. The ports infrastructure will download the software, change it so |
| 1125 | it works on FreeBSD, compile it, install it, register the installation so it |
| 1126 | will be possible to automatically uninstall it, and clean out the temporary |
| 1127 | working space it used. You can remove an installed port you decide you do not |
| 1128 | want after all by typing |
| 1129 | |
| 1130 | # cd /usr/ports/<category>/<portname> |
| 1131 | # make deinstall |
| 1132 | |
| 1133 | as root. |
| 1134 | > bash |
| 1135 | [lnevers@boss ~]$ |
| 1136 | |
| 1137 | }}} |
| 1138 | |
| 1139 | From boss node accessed each of the experiment nodes that support VMs: |
| 1140 | {{{ |
| 1141 | [lnevers@boss ~]$ for i in pc1 pc2 pc3; do ssh $i "echo -n '===> Host: ';hostname;sudo whoami;uname -a;echo"; done |
| 1142 | ===> Host: vhost1.shared-nodes.emulab-ops.genirack.nyu.edu |
| 1143 | root |
| 1144 | Linux vhost1.shared-nodes.emulab-ops.genirack.nyu.edu 2.6.32-042stab049.6.emulab.1 #1 SMP Mon May 21 14:36:04 MDT 2012 x86_64 x86_64 x86_64 GNU/Linux |
| 1145 | |
| 1146 | ===> Host: vhost2.shared-nodes.emulab-ops.genirack.nyu.edu |
| 1147 | root |
| 1148 | Linux vhost2.shared-nodes.emulab-ops.genirack.nyu.edu 2.6.32-042stab049.6.emulab.1 #1 SMP Mon May 21 14:36:04 MDT 2012 x86_64 x86_64 x86_64 GNU/Linux |
| 1149 | |
| 1150 | ===> Host: vhost3.shared-nodes.emulab-ops.genirack.nyu.edu |
| 1151 | root |
| 1152 | Linux vhost3.shared-nodes.emulab-ops.genirack.nyu.edu 3.2.46 #1 SMP Wed Jun 5 15:53:18 MDT 2013 x86_64 x86_64 x86_64 GNU/Linux |
| 1153 | |
| 1154 | [lnevers@boss ~]$ |
| 1155 | |
| 1156 | }}} |
| 1157 | |
| 1158 | In order to access Dedicated Nodes some experiment must be running on the raw-pc device. At the time of this capture two raw-pc nodes were in use (pc4 and pc5): |
| 1159 | {{{ |
| 1160 | [lnevers@boss ~]$ sudo ssh pc4 |
| 1161 | [root@pc2 ~]# sudo whoami |
| 1162 | root |
| 1163 | [root@pc2 ~]# uname -a |
| 1164 | Linux pc2.lnnyu.ch-geni-net.genirack.nyu.edu 2.6.40-4.emulab2.fc15.i686.PAE #1 SMP Tue Feb 26 13:35:12 MST 2013 i686 i686 i386 GNU/Linux |
| 1165 | [root@pc2 ~]# exit |
| 1166 | logout |
| 1167 | Connection to pc4.genirack.nyu.edu closed. |
| 1168 | [lnevers@boss ~]$ sudo ssh pc5 |
| 1169 | [root@pc1 ~]# sudo whoami |
| 1170 | root |
| 1171 | [root@pc1 ~]# uname -a |
| 1172 | Linux pc1.lnnyu.ch-geni-net.genirack.nyu.edu 2.6.40-4.emulab2.fc15.i686.PAE #1 SMP Tue Feb 26 13:35:12 MST 2013 i686 i686 i386 GNU/Linux |
| 1173 | [root@pc1 ~]# exit |
| 1174 | logout |
| 1175 | Connection to pc5.genirack.nyu.edu closed. |
| 1176 | [lnevers@boss ~]$ |
| 1177 | }}} |
| 1178 | |
| 1179 | Further verified access by ssh from ops.instageni.gpolab.bbn.com to boss.instageni.gpolab.bbn.com, which is usually restricted for non-admin users: |
| 1180 | {{{ |
| 1181 | LNM:~$ ssh ops.genirack.nyu.edu |
| 1182 | Last login: Fri Aug 23 11:51:40 2013 from dhcp89-073-116.bbn.com |
| 1183 | FreeBSD 9.0-STABLE (XEN) #4: Mon Nov 26 10:02:53 MST 2012 |
| 1184 | |
| 1185 | Welcome to FreeBSD! |
| 1186 | |
| 1187 | If you `set watch = (0 any any)' in tcsh, you will be notified when |
| 1188 | someone logs in or out of your system. |
| 1189 | > bash |
| 1190 | [lnevers@ops ~]$ ssh boss |
| 1191 | Last login: Fri Aug 23 11:51:57 2013 from ops.genirack.nyu.edu |
| 1192 | FreeBSD 9.0-STABLE (XEN) #4: Mon Nov 26 10:02:53 MST 2012 |
| 1193 | |
| 1194 | Welcome to FreeBSD! |
| 1195 | |
| 1196 | You can disable tcsh's terminal beep if you `set nobeep'. |
| 1197 | > bash |
| 1198 | [lnevers@boss ~]$ |
| 1199 | |
| 1200 | |
| 1201 | }}} |
| 1202 | Access infrastructure Switches using documented password. First connect to the switch named procurve1 the control network switch: |
| 1203 | {{{ |
| 1204 | [lnevers@boss ~]$ sudo more /usr/testbed/etc/switch.pswd |
| 1205 | XXXXXXXXX |
| 1206 | [lnevers@boss ~]$ telnet procurve1 |
| 1207 | HP J9623A E2620-24 Switch |
| 1208 | Software revision RA.15.05.0006 |
| 1209 | |
| 1210 | Copyright (C) 1991-2011 Hewlett-Packard Development Company, L.P. |
| 1211 | |
| 1212 | RESTRICTED RIGHTS LEGEND |
| 1213 | Confidential computer software. Valid license from HP required for possession, |
| 1214 | use or copying. Consistent with FAR 12.211 and 12.212, Commercial Computer |
| 1215 | Software, Computer Software Documentation, and Technical Data for Commercial |
| 1216 | Items are licensed to the U.S. Government under vendor's standard commercial |
| 1217 | license. |
| 1218 | HEWLETT-PACKARD DEVELOPMENT COMPANY, L.P. |
| 1219 | 20555 State Highway 249, Houston, TX 77070 |
| 1220 | |
| 1221 | We'd like to keep you up to date about: |
| 1222 | * Software feature updates |
| 1223 | * New product announcements |
| 1224 | * Special events |
| 1225 | Please register your products now at: www.hp.com/networking/register |
| 1226 | |
| 1227 | Username: manager |
| 1228 | Password: |
| 1229 | |
| 1230 | sdc-sw-geni-hp2620# show version |
| 1231 | Image stamp: /sw/code/build/xform(RA_15_05) |
| 1232 | Aug 9 2011 09:08:18 |
| 1233 | RA.15.05.0006 |
| 1234 | 44 |
| 1235 | Boot Image: Primary |
| 1236 | sdc-sw-geni-hp2620# show running-config |
| 1237 | |
| 1238 | Running configuration: |
| 1239 | |
| 1240 | ; J9623A Configuration Editor; Created on release #RA.15.05.0006 |
| 1241 | ; Ver #01:01:00 |
| 1242 | |
| 1243 | hostname "sdc-sw-geni-hp2620" |
| 1244 | no stack auto-join |
| 1245 | interface 22 |
| 1246 | name "master ilo" |
| 1247 | exit |
| 1248 | interface 28 |
| 1249 | name "NYU vDMZ" |
| 1250 | exit |
| 1251 | ip default-gateway 10.1.1.254 |
| 1252 | snmpv3 enable |
| 1253 | snmpv3 restricted-access |
| 1254 | vlan 1 |
| 1255 | name "DEFAULT_VLAN" |
| 1256 | untagged 1-22,25-28 |
| 1257 | ip address 192.86.139.12 255.255.255.128 |
| 1258 | ip address 10.254.254.253 255.255.255.0 |
| 1259 | no untagged 23-24 |
| 1260 | ip igmp |
| 1261 | exit |
| 1262 | vlan 11 |
| 1263 | name "control-alternate" |
| 1264 | untagged 24 |
| 1265 | ip address 10.2.1.253 255.255.255.0 |
| 1266 | exit |
| 1267 | vlan 10 |
| 1268 | name "control-hardware" |
| 1269 | untagged 23 |
| 1270 | ip address 10.1.1.253 255.255.255.0 |
| 1271 | exit |
| 1272 | no web-management |
| 1273 | snmp-server community "xx" |
| 1274 | snmp-server community "xx" unrestricted |
| 1275 | snmp-server contact "Andrew Grabowski - grab@nyu.edu" location "SDC - GENI Rack" |
| 1276 | management-vlan 10 |
| 1277 | no dhcp config-file-update |
| 1278 | password manager |
| 1279 | password operator |
| 1280 | |
| 1281 | sdc-sw-geni-hp2620# show vlan |
| 1282 | |
| 1283 | Status and Counters - VLAN Information |
| 1284 | |
| 1285 | Maximum VLANs to support : 256 |
| 1286 | Primary VLAN : DEFAULT_VLAN |
| 1287 | Management VLAN : control-hardware |
| 1288 | |
| 1289 | VLAN ID Name | Status Voice Jumbo |
| 1290 | ------- -------------------------------- + ---------- ----- ----- |
| 1291 | 1 DEFAULT_VLAN | Port-based No No |
| 1292 | 10 control-hardware | Port-based No No |
| 1293 | 11 control-alternate | Port-based No No |
| 1294 | |
| 1295 | |
| 1296 | sdc-sw-geni-hp2620# show vlan 10 |
| 1297 | |
| 1298 | Status and Counters - VLAN Information - VLAN 10 |
| 1299 | |
| 1300 | VLAN ID : 10 |
| 1301 | Name : control-hardware |
| 1302 | Status : Port-based |
| 1303 | Voice : No |
| 1304 | Jumbo : No |
| 1305 | |
| 1306 | Port Information Mode Unknown VLAN Status |
| 1307 | ---------------- -------- ------------ ---------- |
| 1308 | 23 Untagged Learn Up |
| 1309 | |
| 1310 | |
| 1311 | sdc-sw-geni-hp2620# show vlan 11 |
| 1312 | |
| 1313 | Status and Counters - VLAN Information - VLAN 11 |
| 1314 | |
| 1315 | VLAN ID : 11 |
| 1316 | Name : control-alternate |
| 1317 | Status : Port-based |
| 1318 | Voice : No |
| 1319 | Jumbo : No |
| 1320 | |
| 1321 | Port Information Mode Unknown VLAN Status |
| 1322 | ---------------- -------- ------------ ---------- |
| 1323 | 24 Untagged Learn Up |
| 1324 | |
| 1325 | |
| 1326 | sdc-sw-geni-hp2620# exit |
| 1327 | sdc-sw-geni-hp2620> exit |
| 1328 | Do you want to log out [y/n]? y |
| 1329 | Connection closed by foreign host. |
| 1330 | [lnevers@boss ~]$ |
| 1331 | }}} |
| 1332 | |
| 1333 | Connect to the switch named procurve2 the dataplane network switch via ssh using the documented password: |
| 1334 | {{{ |
| 1335 | [lnevers@boss ~]$ sudo more /usr/testbed/etc/switch.pswd |
| 1336 | xxxxxxx |
| 1337 | [lnevers@boss ~]$ ssh manager@procurve2 |
| 1338 | Warning: Permanently added 'procurve2' (RSA) to the list of known hosts. |
| 1339 | We'd like to keep you up to date about: |
| 1340 | * Software feature updates |
| 1341 | * New product announcements |
| 1342 | * Special events |
| 1343 | Please register your products now at: www.hp.com/networking/register |
| 1344 | |
| 1345 | |
| 1346 | manager@procurve2's password: |
| 1347 | HP J8697A Switch E5406zl |
| 1348 | Software revision K.15.06.5008 |
| 1349 | |
| 1350 | Copyright (C) 1991-2012 Hewlett-Packard Development Company, L.P. |
| 1351 | |
| 1352 | RESTRICTED RIGHTS LEGEND |
| 1353 | Confidential computer software. Valid license from HP required for possession, |
| 1354 | use or copying. Consistent with FAR 12.211 and 12.212, Commercial Computer |
| 1355 | Software, Computer Software Documentation, and Technical Data for Commercial |
| 1356 | Items are licensed to the U.S. Government under vendor's standard commercial |
| 1357 | license. |
| 1358 | HEWLETT-PACKARD DEVELOPMENT COMPANY, L.P. |
| 1359 | 20555 State Highway 249, Houston, TX 77070 |
| 1360 | |
| 1361 | Press any key to continue |
| 1362 | |
| 1363 | HP-E5406zl# |
| 1364 | HP-E5406zl# show version |
| 1365 | Image stamp: /ws/swbuildm/of_bridge_qaoff/code/build/btm(of_bridge_qaoff) |
| 1366 | Feb 18 2012 11:26:28 |
| 1367 | K.15.06.5008 |
| 1368 | 79 |
| 1369 | Boot Image: Primary |
| 1370 | HP-E5406zl# show running-config |
| 1371 | |
| 1372 | Running configuration: |
| 1373 | |
| 1374 | ; J8697A Configuration Editor; Created on release #K.15.06.5008 |
| 1375 | ; Ver #02:10.0d:1f |
| 1376 | |
| 1377 | hostname "HP-E5406zl" |
| 1378 | module 1 type J9550A |
| 1379 | interface A1 |
| 1380 | speed-duplex auto-1000 |
| 1381 | exit |
| 1382 | interface A2 |
| 1383 | speed-duplex auto-1000 |
| 1384 | exit |
| 1385 | interface A3 |
| 1386 | speed-duplex auto-1000 |
| 1387 | exit |
| 1388 | interface A4 |
| 1389 | speed-duplex auto-1000 |
| 1390 | exit |
| 1391 | interface A5 |
| 1392 | speed-duplex auto-1000 |
| 1393 | exit |
| 1394 | interface A6 |
| 1395 | speed-duplex auto-1000 |
| 1396 | exit |
| 1397 | interface A7 |
| 1398 | speed-duplex auto-1000 |
| 1399 | exit |
| 1400 | interface A8 |
| 1401 | speed-duplex auto-1000 |
| 1402 | exit |
| 1403 | interface A9 |
| 1404 | speed-duplex auto-1000 |
| 1405 | exit |
| 1406 | interface A10 |
| 1407 | speed-duplex auto-1000 |
| 1408 | exit |
| 1409 | interface A13 |
| 1410 | speed-duplex auto-1000 |
| 1411 | exit |
| 1412 | ip default-gateway 10.3.1.254 |
| 1413 | vlan 1 |
| 1414 | name "DEFAULT_VLAN" |
| 1415 | forbid A1-A9 |
| 1416 | untagged A11-A12,A14-A19,A21-A23 |
| 1417 | no untagged A1-A10,A13,A20,A24 |
| 1418 | no ip address |
| 1419 | exit |
| 1420 | vlan 10 |
| 1421 | name "control-hardware" |
| 1422 | untagged A20 |
| 1423 | ip address 10.3.1.253 255.255.255.0 |
| 1424 | exit |
| 1425 | vlan 1750 |
| 1426 | name "_1" |
| 1427 | tagged A1,A4,A7,A24 |
| 1428 | no ip address |
| 1429 | exit |
| 1430 | vlan 257 |
| 1431 | name "_3" |
| 1432 | untagged A1-A9 |
| 1433 | no ip address |
| 1434 | exit |
| 1435 | vlan 258 |
| 1436 | name "_47" |
| 1437 | untagged A10,A13 |
| 1438 | no ip address |
| 1439 | exit |
| 1440 | no web-management |
| 1441 | openflow |
| 1442 | vlan 1750 |
| 1443 | enable |
| 1444 | controller "tcp:10.3.1.7:6633" fail-secure on |
| 1445 | exit |
| 1446 | exit |
| 1447 | snmp-server community "xx" unrestricted |
| 1448 | management-vlan 10 |
| 1449 | no autorun |
| 1450 | no dhcp config-file-update |
| 1451 | no dhcp image-file-update |
| 1452 | password xx |
| 1453 | password xx |
| 1454 | |
| 1455 | HP-E5406zl# show vlan |
| 1456 | |
| 1457 | Status and Counters - VLAN Information |
| 1458 | |
| 1459 | Maximum VLANs to support : 256 |
| 1460 | Primary VLAN : DEFAULT_VLAN |
| 1461 | Management VLAN : control-hardware |
| 1462 | |
| 1463 | VLAN ID Name | Status Voice Jumbo |
| 1464 | ------- -------------------------------- + ---------- ----- ----- |
| 1465 | 1 DEFAULT_VLAN | Port-based No No |
| 1466 | 10 control-hardware | Port-based No No |
| 1467 | 257 _3 | Port-based No No |
| 1468 | 258 _47 | Port-based No No |
| 1469 | 1750 _1 | Port-based No No |
| 1470 | |
| 1471 | |
| 1472 | HP-E5406zl# show vlan 1750 |
| 1473 | |
| 1474 | Status and Counters - VLAN Information - VLAN 1750 |
| 1475 | |
| 1476 | VLAN ID : 1750 |
| 1477 | Name : _1 |
| 1478 | Status : Port-based |
| 1479 | Voice : No |
| 1480 | Jumbo : No |
| 1481 | |
| 1482 | Port Information Mode Unknown VLAN Status |
| 1483 | ---------------- -------- ------------ ---------- |
| 1484 | A1 Tagged Learn Up |
| 1485 | A4 Tagged Learn Up |
| 1486 | A7 Tagged Learn Up |
| 1487 | A24 Tagged Learn Up |
| 1488 | |
| 1489 | |
| 1490 | HP-E5406zl# exit |
| 1491 | Connection to procurve2 closed by remote host. |
| 1492 | Connection to procurve2 closed. |
| 1493 | [lnevers@boss ~]$ |
| 1494 | |
| 1495 | }}} |
| 1496 | |
| 1497 | Access the FOAM VM and gather information for version |
| 1498 | {{{ |
| 1499 | LNM:~$ ssh lnevers@foam.genirack.nyu.edu |
| 1500 | |
| 1501 | sudo foamctl admin:get-version --passwd-file=/etc/foam.passwd |
| 1502 | |
| 1503 | }}} |
| 1504 | Check FOAM configuration for site.admin.email, geni.site-tag, email.from settings: |
| 1505 | {{{ |
| 1506 | foamctl config:get-value --key="site.admin.email" --passwd-file=/etc/foam.passwd |
| 1507 | |
| 1508 | foamctl config:get-value --key="geni.site-tag" --passwd-file=/etc/foam.passwd |
| 1509 | |
| 1510 | foamctl config:get-value --key="email.from" --passwd-file=/etc/foam.passwd |
| 1511 | |
| 1512 | # check if FOAM auto-approve is on. Value 2 = auto-approve is on. |
| 1513 | |
| 1514 | foamctl config:get-value --key="geni.approval.approve-on-creation" --passwd-file=/etc/foam.passwd |
| 1515 | |
| 1516 | }}} |
| 1517 | |
| 1518 | Show FOAM slivers and details for one sliver: |
| 1519 | |
| 1520 | {{{ |
| 1521 | foamctl geni:list-slivers --passwd-file=/etc/foam.passwd |
| 1522 | |
| 1523 | }}} |
| 1524 | Access the FlowVisor VM and gather version information: |
| 1525 | {{{ |
| 1526 | |
| 1527 | ssh lnevers@flowvisor.nyu.edu |
| 1528 | }}} |
| 1529 | Check the !FlowVisor version, list of devices, get details for a device, list of active slices, and details for one of the slices: |
| 1530 | {{{ |
| 1531 | |
| 1532 | fvctl --passwd-file=/etc/flowvisor.passwd ping hello |
| 1533 | |
| 1534 | # Devices |
| 1535 | fvctl --passwd-file=/etc/flowvisor.passwd listDevices |
| 1536 | |
| 1537 | fvctl --passwd-file=/etc/flowvisor.passwd getDeviceInfo 06:d6:6c:3b:e5:68:00:00 |
| 1538 | |
| 1539 | #Slices |
| 1540 | fvctl --passwd-file=/etc/flowvisor.passwd listSlices |
| 1541 | |
| 1542 | fvctl --passwd-file=/etc/flowvisor.passwd getSliceInfo 5c956f94-5e05-40b5-948f-34d0149d9182 |
| 1543 | |
| 1544 | }}} |
| 1545 | |
| 1546 | Check the FlowVisor setting: |
| 1547 | {{{ |
| 1548 | fvctl --passwd-file=/etc/flowvisor.passwd dumpConfig /tmp/flowvisor-config |
| 1549 | more /tmp/flowvisor-config |
| 1550 | |
| 1551 | }}} |