Sun Fire Mx00 initial configuration

login with admin, if admin doesn’t work use default which will wait till the key is turned.

login: admin

Cerate user jsmith and privileges

XSCF> adduser -u 921 jsmith
XSCF> password jsmith
XSCF> setprivileges jsmith platadm fieldeng useradm mode auditadm
XSCF> exit

login as jsmith Get all hardware configs

XSCF> showhardconf
SPARC Enterprise M5000;
    + Serial:BEF1016D82; Operator_Panel_Switch:Locked;
    + Power_Supply_System:Single; SCF-ID:XSCF#0;
    + System_Power:On; System_Phase:Cabinet Power On;
    Domain#0 Domain_Status:Running;
snip [...]

console -d 0

M5000 IP Setup

Example Configuration

#configure the IP for XSCF-LAN#0 on XSCF Unit 1
XSCF> setnetwork xscf#1-lan#0 -m  
XSCF> setnetwork -c up 
XSCF> shownetwork
XSCF> setroute -c add -n  -g  
 
#After configuring the interface, you must apply then reboot the xscf.
XSCF> applynetwork
XSCF> rebootxscf 
 
# After reboot, verify network settings
XSCF> shownetwork -a
 
#set hostname and dns server for xscf
XSCF> sethostname  
XSCF> sethostname -d 
XSCF> showhostname -a
XSCF> setnameserver  
 
#add the NTP server
XSCF> setntp -c add 
XSCF> rebootxscf 
 
#enable http, email and ssh services
XSCF> sethttps -c enable
XSCF> setsmtp
XSCF> setssh -c enable

Example configuration

XSCF> adduser admin
XSCF> password admin
New XSCF password: 
BAD PASSWORD: it does not contain enough DIFFERENT characters
Retype new XSCF password: 
XSCF> setprivileges admin useradm platadm platop fieldeng
XSCF> adduser admin2
password admin2
XSCF> password admin2
New XSCF password: 
Retype new XSCF password: 
setprivileges admin2 useradm platadm platop fieldeng
XSCF> setprivileges admin2 useradm platadm platop fieldeng
XSCF> setnetwork xscf#0-lan#0 -m 255.255.248.0 10.20.105.12
XSCF> setnetwork -c up xscf#0-lan#0
XSCF> setroute -c add -n 0.0.0.0 -g 10.20.104.1 xscf#0-lan#0
 
XSCF> sethostname xscf#0 informix2-xscf
XSCF> sethostname -d domain.com
XSCF> applynetwork
The following network settings will be applied:
  xscf#0 hostname  :informix2-xscf
  DNS domain name  :domain.com
 
  interface        :xscf#0-lan#0
  status           :up
  IP address       :10.20.105.12
  netmask          :255.255.248.0
  route            :-n 0.0.0.0 -m 0.0.0.0 -g 10.20.104.1 
 
  interface        :xscf#0-lan#1
  status           :down
  IP address       :
  netmask          :
  route            :
 
Continue? [y|n] :y
 
Please reset the XSCF by rebootxscf to apply the network settings.
Please confirm that the settings have been applied by executing 
showhostname, shownetwork, showroute and shownameserver after rebooting 
the XSCF.
XSCF> 
XSCF> rebootxscf
The XSCF will be reset. Continue? [y|n] :y
XSCF> execute J00shutdown_start  --  complete
execute K000end  --  complete
execute S10ioxoff  --  complete
[...]
XSCF> shownetwork -a
xscf#0-lan#0
          Link encap:Ethernet  HWaddr 00:21:28:B0:64:72  
          inet addr:10.20.105.12  Bcast:10.20.111.255  Mask:255.255.248.0
          UP BROADCAST MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000 
          RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)
          Base address:0xe000 
 
xscf#0-lan#1
          Link encap:Ethernet  HWaddr 00:21:28:B0:64:73  
          BROADCAST MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000 
          RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)
          Base address:0xc000
 
XSCF> setnameserver 10.20.8.60
XSCF> setntp -c add 10.20.18.141
XSCF> setssh -c enable
Continue? [y|n] :y
Please reset the XSCF by rebootxscf to apply the ssh settings.
 
XSCF> setdscp
DSCP network  [0.0.0.0        ] > 10.1.1.0
 
DSCP netmask  [255.0.0.0      ] > 255.255.255.0
 
XSCF address  [10.1.1.1       ] > 10.20.105.12
ERROR: Address out of range.  Try again.
 
XSCF address  [10.1.1.1       ] > 10.1.1.10
Domain #00 address  [10.1.1.11       ] > 
Domain #01 address  [10.1.1.12       ] > 
Domain #02 address  [10.1.1.13       ] > 
Domain #03 address  [10.1.1.14       ] > 
Commit these changes to the database? [y|n] : y

configuration example

The simplest forum is to run

XSCF> setupplatform -p user

# Then
XSCF> setupplatform -p network

Then to setup https I also needed to set his own ca
sethttps -c selfsign us ny new-york company company informix2.domain.com admin@domain.com

XSCF> setdscp
DSCP network  [0.0.0.0        ] > 10.1.1.0

DSCP netmask  [255.0.0.0      ] > 255.255.255.0

XSCF address  [10.1.1.1       ] > 10.1.1.10
Domain #00 address  [10.1.1.2       ] > 10.1.1.11
Domain #01 address  [10.1.1.3       ] > 10.1.1.12
Domain #02 address  [10.1.1.4       ] > 10.1.1.13
Domain #03 address  [10.1.1.5       ] > 10.1.1.14
Commit these changes to the database? [y|n] : y

XSCF> setnetwork xscf#0-lan#0 -m 255.255.248.0 10.20.105.11
XSCF> setnetwork -c up lan#0
XSCF> setroute -c add -n 0.0.0.0 -g 10.20.104.1 xscf#0-lan#1

XSCF> sethostname xscf#0 informix1-xscf
XSCF> sethostname -d domain.com
XSCF> applynetwork
The following network settings will be applied:
  xscf#0 hostname  :informix1-xscf
  DNS domain name  :domain.com

  interface        :xscf#0-lan#0
  status           :up
  IP address       :10.20.105.11
  netmask          :255.255.248.0
  route            :

  interface        :xscf#0-lan#1
  status           :down
  IP address       :
  netmask          :
  route            :-n 0.0.0.0 -m 0.0.0.0 -g 10.20.104.1 

Continue? [y|n] :y
Please reset the XSCF by rebootxscf to apply the network settings.
Please confirm that the settings have been applied by executing 
showhostname, shownetwork, showroute and shownameserver after rebooting 
the XSCF.
XSCF> rebootxscf
The XSCF will be reset. Continue? [y|n] :y
XSCF> execute J00shutdown_start  --  complete
execute K000end  --  complete
[...]snip

Addinal tips

Add User:
1) adduser admin2
2) password admin2
3) setpriveldges admin2 userasdm platadm
 
Configure Network:
1) setnetwork xscf#0 -m 255.255.255.0 156.45.54.99  [note:1]
2) setdscp -i 194.12.10.0 -m 255.255.255.0 [note:2]   
3) setdscp -s -i 194.12.10.1 [note:3]
4) setdscp -d 0 -i 194.12.10.2 [note:4]
5) sethostname xscf#0 scf0-grumpy [note:5]
6) sethostname -d sun.com [note:6]
7) setroute -c add -n 0.0.0.0 -g 156.45.54.1 [note:7]
8) setnameserver 193.54.67.76 146.89.45.9 [note:8]
9) applynetwork
10) rebootxscf [note:14]
 
Set ntp, enable ssh/https and other good stuff:
1) setntp -c add 145.76.78.2 145.76.98.4 [note:9]
2) setssh -c enable
3) setssh -c genhostkey [note:10]
4) setautologout -s 90 [note:11]
5) sethttps -c enable [note:12]
6) sethttps -c selfsign companynamehere scf0-grumpy.sun.com david@yahoo.com  [note:13]
7) rebootxscf  [note:14]

note:1 - this IP address is the address you will use to get to the xscf 
remotely

note:2 - this is a non-routable subnet

note:3 - 
this is an IP assigned from the non-routable subnet, this is the 
internal IP used for the XSCF.

note:4 - This uses an IP from the 
non-routable subnet, this is used to setup communication between the 
domain and the xscf. If you are going to have more than one domain, you 
would need to replicate as necessary. we only use one domain.

note:5
 - grumpy is my fictitious hostname, this is not the same name as your 
server. it can be based off the server name if you like.

note:6 -
 Assign a domain (maybe I should of put oracle.com)

note:7 This 
adds your netmask and your gateway. Don't ask me why it is 0's for 
netmask, don't know. It is just what they configured it to be.

note:8
 Dns name servers

note:9
 - we are using are name servers to set this. I do not remember why I 
used those. Those are not our ntp servers, I'm not sure if I had a 
reason, it works though.

note:10 - generates a hostkey that will 
be used later.

note:11 - modifies the default logout time, it may
 be good to change it to the max which is 255 while your are configuring
 everything. the number is minutes I believe.

note:12 - enable 
https for web based gui (https://156.45.54.99
 or https://grumpy.sun.com)

note:13
 - this is to create a selfsign certificate. I opted for this instead of
 importing a cert.

note:14 - reboot is required for some of the 
changes made to take affect.

Commend help

rebootxscf - reboots the xscf system

XSCF> console -d 0
XSCF> showstatus
XSCF> showversion -c xcp -v [shows xcp firmware, version, openboot prom version
XSCF> showenvironment
XSCF> showenvironment temp
XSCF> showenvironment volt
XSCF> showhardconf
XSCF> showdcl -va  [check domain id...]
XSCF> showdomainstatus -a
XSCF> showboards -a
XSCF> poweron -a        [powers up all domains]
XSCF> poweroff -a       [powers off all domains]
XSCF> poweron -d 0      [powers on domain 0]
XSCF> poweroff -d 0     [powers off domain 0]
XSCF> poweroff -f -d 0  [forces a power off domain 0]
XSCF> reset -d 0 por    [resets domain 0]
XSCF> reset -d 0 xir    [resets domain 0 with XIR reset]
XSCF> sendbreak -d 0    [sends break command to domain 0]
XSCF> setautologout -s 60       [sets autologout to 60 minutes]
XSCF> showautologout
XSCF> shownetwork -a
XSCF> setnetwork xscf#0-lan#0 -m 255.255.255.0 10.10.10.5
XSCF> sethostname xscf#0 fire-xscf
XSCF> sethostname -h host.org
XSCF> setroute -h host.org
XSCF> setnameserver 10.10.10.2 10.10.10.3
XSCF> setroute -c add -n 10.10.10.1 -m 255.255.255.0 xscf#0-lan#0

References Tips on XSCF

Helpful tips on configuring theXSCF