Changes between Version 12 and Version 13 of GENIRacksHome/InstageniRacks/ConfirmationTestStatus/Rutgers

Timestamp:

08/08/14 09:31:41 (10 years ago)

Author:

lnevers@bbn.com

Comment:

--

GENIRacksHome/InstageniRacks/ConfirmationTestStatus/Rutgers

@@ -773 +773 @@
 == IG-CT-6 - Administrative Tests ==
 
+Sent request for administrative account to site contact from the [http://groups.geni.net/geni/wiki/GeniAggregate/RutgersInstaGENI Rutgers InstaGENI] aggregate page.  Followed instructions at the [http://groups.geni.net/geni/wiki/GENIRacksAdministration/InstaGENIAdministration InstaGENI Administration] page for account request. A local administrator account was requested by joining the ''emulab-ops'' group at https://www.instageni.rutgers.edu/joinproject.php3.   Once the administrative account was approved and the membership to emulab-ops was granted, proceeded to execute administrative tests.  
+
+{{{
+LNM:~$ ssh control.instageni.rutgers.edu
+
+}}}
+
+Also access the boss node:
+{{{
+LNM:~$ ssh control.instageni.rutgers.edu
+The authenticity of host 'control.instageni.rutgers.edu (165.230.161.195)' can't be established.
+DSA key fingerprint is ef:36:0e:fe:25:cd:5d:4a:8f:36:fc:ef:ba:36:e6:87.
+Are you sure you want to continue connecting (yes/no)? yes
+Warning: Permanently added 'control.instageni.rutgers.edu,165.230.161.195' (DSA) to the list of known hosts.
+Permission denied (publickey).
+LNM:~$ ssh boss.instageni.rutgers.edu
+The authenticity of host 'boss.instageni.rutgers.edu (165.230.161.196)' can't be established.
+RSA key fingerprint is 46:63:92:67:c8:75:20:4e:52:9f:2d:f6:cb:58:16:77.
+Are you sure you want to continue connecting (yes/no)? yes
+Warning: Permanently added 'boss.instageni.rutgers.edu,165.230.161.196' (RSA) to the list of known hosts.
+FreeBSD 9.0-STABLE (TESTBED-XEN) #0: Tue Apr 30 14:24:36 MDT 2013
+
+Welcome to FreeBSD!
+
+To find out the hostname associated with an IP address, use
+
+        dig -x IP_address
+                -- Dru <genesis@istar.ca>
+> bash
+[lnevers@boss ~]$ sudo whoami 
+root
+[lnevers@boss ~]$ 
+}}}
+
+From boss node accessed each of the experiment nodes that support VMs: 
+{{{
+[lnevers@boss ~]$ for i in pc1 pc2 pc3; do ssh $i "echo -n '===> Host: ';hostname;sudo whoami;uname -a;echo"; done
+Warning: Permanently added 'pc1.instageni.rutgers.edu' (RSA) to the list of known hosts.
+===> Host: vhost1.shared-nodes.emulab-ops.instageni.rutgers.edu
+root
+Linux vhost1.shared-nodes.emulab-ops.instageni.rutgers.edu 3.2.0-56-generic #86-Ubuntu SMP Wed Oct 23 09:20:45 UTC 2013 x86_64 x86_64 x86_64 GNU/Linux
+
+Warning: Permanently added 'pc2.instageni.rutgers.edu' (RSA) to the list of known hosts.
+===> Host: vhost2.shared-nodes.emulab-ops.instageni.rutgers.edu
+root
+Linux vhost2.shared-nodes.emulab-ops.instageni.rutgers.edu 2.6.32-042stab049.6.emulab.1 #1 SMP Mon May 21 14:36:04 MDT 2012 x86_64 x86_64 x86_64 GNU/Linux
+
+Warning: Permanently added 'pc3.instageni.rutgers.edu' (RSA) to the list of known hosts.
+===> Host: vhost3.shared-nodes.emulab-ops.instageni.rutgers.edu
+root
+Linux vhost3.shared-nodes.emulab-ops.instageni.rutgers.edu 3.2.0-56-generic #86-Ubuntu SMP Wed Oct 23 09:20:45 UTC 2013 x86_64 x86_64 x86_64 GNU/Linux
+
+[lnevers@boss ~]$ 
+
+}}}
+
+In order to access Dedicated Nodes some experiment must be running on the raw-pc device. At the time of this capture two raw-pc nodes were in use (pc4 and pc5): 
+{{{
+[lnevers@boss ~]$ for i in pc4 pc5 ; do sudo ssh $i "echo -n '===> Host: ';hostname;whoami;uname -a;echo"; done
+===> Host: pc.ig-ct-2.ch-geni-net.instageni.rutgers.edu
+root
+Linux pc.ig-ct-2.ch-geni-net.instageni.rutgers.edu 2.6.40-4.emulab2.fc15.i686.PAE #1 SMP Tue Feb 26 13:35:12 MST 2013 i686 i686 i386 GNU/Linux
+
+===> Host: rutgers-ig-oml-01.mf-oml.ch-geni-net.instageni.rutgers.edu
+root
+Linux rutgers-ig-oml-01.mf-oml.ch-geni-net.instageni.rutgers.edu 3.2.0-56-generic #86-Ubuntu SMP Wed Oct 23 09:20:45 UTC 2013 x86_64 x86_64 x86_64 GNU/Linux
+
+[lnevers@boss ~]$ 
+}}}
+
+Further verified access by ssh from ops.instageni.gpolab.bbn.com to boss.instageni.gpolab.bbn.com, which is usually restricted for non-admin users: 
+{{{
+LNM:~$ ssh ops.instageni.rutgers.edu
+The authenticity of host 'ops.instageni.rutgers.edu (165.230.161.197)' can't be established.
+RSA key fingerprint is 46:63:92:67:c8:75:20:4e:52:9f:2d:f6:cb:58:16:77.
+Are you sure you want to continue connecting (yes/no)? yes
+Warning: Permanently added 'ops.instageni.rutgers.edu,165.230.161.197' (RSA) to the list of known hosts.
+FreeBSD 9.0-STABLE (TESTBED-XEN) #0: Tue Apr 30 14:24:36 MDT 2013
+
+Welcome to FreeBSD!
+
+"man ports" gives many useful hints about installing FreeBSD ports.
+> bash
+[lnevers@ops ~]$ ssh boss
+The authenticity of host 'boss.instageni.rutgers.edu (165.230.161.196)' can't be established.
+ECDSA key fingerprint is bd:05:23:a7:5b:cc:78:c8:8c:a8:d3:e9:f7:27:53:cb.
+Are you sure you want to continue connecting (yes/no)? yes
+Warning: Permanently added 'boss.instageni.rutgers.edu' (ECDSA) to the list of known hosts.
+Last login: Fri Aug  8 09:24:04 2014 from 128.89.255.200
+FreeBSD 9.0-STABLE (TESTBED-XEN) #0: Tue Apr 30 14:24:36 MDT 2013
+
+Welcome to FreeBSD!
+
+Nice tcsh prompts:
+        set prompt = '[%B%m%b] %B%~%b%# '
+        set prompt = '%m %# '
+        set prompt = '%n@%m%# '
+        set prompt = '%n@%m:%/%# '
+        set prompt = '%n@%m:%~%# '
+> bash
+[lnevers@boss ~]$ 
+}}}
+Access infrastructure switches using documented password. First connect to the switch named procurve1 the control network switch: 
+{{{
+[lnevers@boss ~]$ sudo more /usr/testbed/etc/switch.pswd
+XXXXXXXXX
+[lnevers@boss ~]$ telnet procurve1 
+Trying 10.1.1.253...
+Connected to procurve1.
+Escape character is '^]'.
+
+HP J9623A E2620-24 Switch
+Software revision RA.15.05.0006
+
+Copyright (C) 1991-2011 Hewlett-Packard Development Company, L.P.
+
+                   RESTRICTED RIGHTS LEGEND
+ Confidential computer software.  Valid license from HP required for possession,
+ use or copying. Consistent with FAR 12.211 and 12.212, Commercial Computer
+ Software, Computer Software Documentation, and Technical Data for Commercial
+ Items are licensed to the U.S. Government under vendor's standard commercial
+ license.
+                   HEWLETT-PACKARD DEVELOPMENT COMPANY, L.P. 
+                   20555 State Highway 249, Houston, TX 77070
+
+We'd like to keep you up to date about:
+  * Software feature updates
+  * New product announcements
+  * Special events
+Please register your products now at:  www.hp.com/networking/register
+
+Password: 
+
+HP-E2620-24# show version
+Image stamp:    /sw/code/build/xform(RA_15_05)
+                Aug  9 2011 09:08:18
+                RA.15.05.0006
+                44
+Boot Image:     Primary
+HP-E2620-24# show vlan
+
+ Status and Counters - VLAN Information
+
+  Maximum VLANs to support : 256                  
+  Primary VLAN : DEFAULT_VLAN    
+  Management VLAN : control-hardware
+
+  VLAN ID Name                             | Status     Voice Jumbo
+  ------- -------------------------------- + ---------- ----- -----
+  1       DEFAULT_VLAN                     | Port-based No    No   
+  10      control-hardware                 | Port-based No    No   
+  11      control-alternat                 | Port-based No    No   
+ 
+
+HP-E2620-24# show running-config 
+
+Running configuration:
+
+; J9623A Configuration Editor; Created on release #RA.15.05.0006
+; Ver #01:01:00
+
+hostname "HP-E2620-24" 
+ip default-gateway 10.1.1.254 
+vlan 1 
+   name "DEFAULT_VLAN" 
+   untagged 1-22,25-28 
+   ip address 10.254.254.253 255.255.255.0 
+   no untagged 23-24 
+   ip igmp 
+   exit 
+vlan 11 
+   name "control-alternat" 
+   untagged 24 
+   ip address 10.2.1.253 255.255.255.0 
+   exit 
+vlan 10 
+   name "control-hardware" 
+   untagged 23 
+   ip address 10.1.1.253 255.255.255.0 
+   exit 
+no web-management
+snmp-server community "xxx" unrestricted
+aaa authentication ssh login public-key
+aaa authentication ssh enable public-key
+management-vlan 10
+no dhcp config-file-update
+password xxx
+password xxx
+
+HP-E2620-24# 
+}}}
+
+Connect to the switch named procurve2 the dataplane network switch via ssh using the documented password: 
+{{{
+[lnevers@boss ~]$ sudo more /usr/testbed/etc/switch.pswd
+xxxxxxx
+[lnevers@boss ~]$ telnet procurve2
+Trying 10.3.1.253...
+Connected to procurve2.
+Escape character is '^]'.
+
+HP J8697A Switch E5406zl
+Software revision K.15.06.5008
+
+                   RESTRICTED RIGHTS LEGEND
+ Confidential computer software.  Valid license from HP required for possession,
+ use or copying. Consistent with FAR 12.211 and 12.212, Commercial Computer
+ Software, Computer Software Documentation, and Technical Data for Commercial
+ Items are licensed to the U.S. Government under vendor's standard commercial
+ license.
+                   HEWLETT-PACKARD DEVELOPMENT COMPANY, L.P. 
+                   20555 State Highway 249, Houston, TX 77070
+
+We'd like to keep you up to date about:
+  * Software feature updates
+  * New product announcements
+  * Special events
+Please register your products now at:  www.hp.com/networking/register
+
+System went down:  04/12/07 10:13:18
+Saved crash information:
+NMI event SW:IP=0x011bdca8 MSR:0x02029200 LR:0x011bdc14
+ cr: 0x44000400 sp:0x02bedbe8 xer:0x00000000
+ Task='InetServer' Task ID=0xab33000
+Username: manager
+Password: 
+
+HP-E5406zl# show version 
+Image stamp:    /ws/swbuildm/of_bridge_qaoff/code/build/btm(of_bridge_qaoff)
+                Feb 18 2012 11:26:28
+                K.15.06.5008
+                79
+Boot Image:     Primary
+HP-E5406zl# show vlan
+
+ Status and Counters - VLAN Information
+
+  Maximum VLANs to support : 256                  
+  Primary VLAN : DEFAULT_VLAN    
+  Management VLAN : control-hardware
+
+  VLAN ID Name                             | Status     Voice Jumbo
+  ------- -------------------------------- + ---------- ----- -----
+  1       DEFAULT_VLAN                     | Port-based No    No   
+  10      control-hardware                 | Port-based No    No   
+  30      5031                             | Port-based No    No   
+  257     5001                             | Port-based No    No   
+  258     5136                             | Port-based No    No   
+  259     5138                             | Port-based No    No   
+  1753    5000                             | Port-based No    No   
+  3701    5006                             | Port-based No    No   
+  3702    5007                             | Port-based No    No   
+  3703    5008                             | Port-based No    No   
+  3704    5009                             | Port-based No    No   
+  3705    5030                             | Port-based No    No   
+  3734    5183                             | Port-based No    No   
+  3738    5181                             | Port-based No    No   
+ 
+HP-E5406zl# show running-config 
+
+Running configuration:
+
+; J8697A Configuration Editor; Created on release #K.15.06.5008
+; Ver #02:10.0d:1f
+
+hostname "HP-E5406zl" 
+module 1 type J9549A 
+interface A1 
+   speed-duplex auto-1000 
+exit
+interface A2 
+   speed-duplex auto-1000 
+exit
+interface A3 
+   speed-duplex auto-1000 
+exit
+interface A4 
+   speed-duplex auto-1000 
+exit
+interface A5 
+   speed-duplex auto-1000 
+exit
+interface A6 
+   speed-duplex auto-1000 
+exit
+interface A7 
+   speed-duplex auto-1000 
+exit
+interface A8 
+   speed-duplex auto-1000 
+exit
+interface A9 
+   speed-duplex auto-1000 
+exit
+interface A10 
+   speed-duplex auto-1000 
+exit
+interface A13 
+   speed-duplex auto-1000 
+exit
+interface A19 
+   speed-duplex auto-1000 
+exit
+ip default-gateway 10.3.1.7 
+vlan 1 
+   name "DEFAULT_VLAN" 
+   forbid A1-A9 
+   untagged A11-A12,A14-A17,A21-A24 
+   no untagged A1-A10,A13,A18-A20 
+   no ip address 
+   exit 
+vlan 10 
+   name "control-hardware" 
+   untagged A20 
+   ip address 10.3.1.253 255.255.255.0 
+   exit 
+vlan 1753 
+   name "5000" 
+   tagged A4,A7,A19 
+   no ip address 
+   exit 
+vlan 257 
+   name "5001" 
+   untagged A1-A9 
+   no ip address 
+   exit 
+vlan 3701 
+   name "5006" 
+   tagged A7,A13,A19 
+   no ip address 
+   exit 
+vlan 3702 
+   name "5007" 
+   tagged A19 
+   no ip address 
+   exit 
+vlan 3703 
+   name "5008" 
+   tagged A19 
+   no ip address 
+   exit 
+vlan 3704 
+   name "5009" 
+   tagged A19 
+   no ip address 
+   exit 
+vlan 3705 
+   name "5030" 
+   tagged A18-A19 
+   no ip address 
+   exit 
+vlan 30 
+   name "5031" 
+   tagged A7,A18 
+   no ip address 
+   exit 
+vlan 258 
+   name "5136" 
+   tagged A1 
+   no ip address 
+   exit 
+vlan 259 
+   name "5138" 
+   tagged A1,A10 
+   no ip address 
+   exit 
+vlan 3738 
+   name "5181" 
+   tagged A7,A19 
+   no ip address 
+   exit 
+vlan 3734 
+   name "5183" 
+   tagged A1,A19 
+   no ip address 
+   exit 
+no web-management
+openflow
+   vlan 1753
+      enable
+      controller "tcp:10.3.1.7:6633" fail-secure on
+      exit
+   vlan 3733
+      controller "tcp:192.1.249.185:33017" listener "ptcp:5000" fail-secure on
+      exit
+   exit
+snmp-server community "xxx" unrestricted
+aaa authentication ssh login public-key
+aaa authentication ssh enable public-key
+management-vlan 10
+no autorun
+no dhcp config-file-update
+no dhcp image-file-update
+password xxx
+password xxx
+
+HP-E5406zl# 
+
+}}}
+
+Access the FOAM VM and gather information for version
+{{{
+LNM:~$ ssh lnevers@foam.rutgers.edu
+
+sudo foamctl admin:get-version  --passwd-file=/etc/foam.passwd 
+
+}}}
+Check FOAM configuration for  site.admin.email, geni.site-tag, email.from settings:
+{{{
+foamctl config:get-value --key="site.admin.email"  --passwd-file=/etc/foam.passwd 
+
+foamctl config:get-value --key="geni.site-tag"  --passwd-file=/etc/foam.passwd 
+
+foamctl config:get-value --key="email.from"  --passwd-file=/etc/foam.passwd 
+
+# check if FOAM auto-approve is on. Value 2 = auto-approve is on.
+
+foamctl config:get-value --key="geni.approval.approve-on-creation"  --passwd-file=/etc/foam.passwd 
+
+}}}
+
+Show FOAM slivers details:
+
+{{{
+foamctl geni:list-slivers --passwd-file=/etc/foam.passwd
+
+}}}
+Access the FlowVisor VM and gather version information:
+{{{
+
+ssh lnevers@flowvisor.rutgers.edu
+}}}
+Check the !FlowVisor version, list of devices, get details for a device, list of active slices, and details for one of the slices:
+{{{     
+
+fvctl --passwd-file=/etc/flowvisor.passwd ping hello
+
+# Devices
+fvctl --passwd-file=/etc/flowvisor.passwd listDevices
+
+fvctl --passwd-file=/etc/flowvisor.passwd getDeviceInfo 06:d6:6c:3b:e5:68:00:00
+
+#Slices
+fvctl --passwd-file=/etc/flowvisor.passwd listSlices
+
+fvctl --passwd-file=/etc/flowvisor.passwd getSliceInfo 5c956f94-5e05-40b5-948f-34d0149d9182
+
+}}}
+
+Check the FlowVisor setting:
+{{{
+fvctl --passwd-file=/etc/flowvisor.passwd dumpConfig /tmp/flowvisor-config
+more /tmp/flowvisor-config 
+
+}}}
+
 ----
 {{{