CIMC Session Management

CIMC Session Management

You can view and close any KVM, vMedia, and SOL sessions in Cisco UCS Manager. If you have administrator privileges, you can discontinue the KVM, vMedia, and SoL sessions of any user. . Cisco Integrated Management Controller (CIMC) provides session information to Cisco UCS Manager. When Cisco UCS Manager gets an event from CIMC, it updates its session table and displays the information to all users.

The session information consists of the following information:

  • Name—The name of the user who launched the session.

  • Session ID—The ID associated with the session. The format of the session ID for blades is [unique identifier] _ [chassis id] _ [Blade id]. The format of the session ID for racks is [unique identifier] _ 0 _ [Rack id].

  • Type of session—KVM, vMedia, or SoL.

  • Privilege level of the user—Read-Write, Read Only, or Granted.

  • Administrative state—Active or Inactive. The value is active if the session is active. The value is inactive if the session terminate command has been issued but the session has not been terminated. This situation occurs when FSM of the server is in progress with another operation or when the connectivity to CIMC is lost.

  • Source Address—The IP address of the computer from which the session was opened.

  • Service Profile—The service profile associated with the session. The service profile attribute value for a CIMC session is displayed only if the session is opened on an IP address that is provided from the service profile.

  • Server—The name of the server associated with the session.

  • Login time—The date and time the session started.

  • Last Update Time—The last time the session information was updated by CIMC.

A new session is generally added when a user connects to KVM, vMedia, or SOL. A Pnuos vMedia session will be displayed in the session table during the server discovery with the user name __vmediausr__.

The CIMC session data is available under the CIMC Sessions tab in Cisco UCS Manager GUI. Any CIMC session terminated by the user is audit logged with proper details.


Note

To perform the GUI and CLI tasks that are described in this guide, a CIMC image version of 2.1(2a) or above is required for the session management support for the blade servers. The latest CIMC image version of 1.5(1l) and above is required for the rack-servers.

Viewing the CIMC Sessions Opened by the Local Users

Follow this task to view all the CIMC sessions opened by the local users or the CIMC sessions opened by a specific local user.

Note

Viewing CIMC sessions of a specific server or a service-profile option is not present in CLI. It is available in GUI.

Procedure

  Command or Action Purpose

Step 1

UCS-A # scope security

Enters security configuration mode.

Step 2

UCS-A /security # show cimc-sessions local

Displays all CIMC sessions opened by the local users.

Step 3

UCS-A /security # show cimc-sessions local user-name

Displays all CIMC sessions opened by a specific local user.

Example

The following examples show how to view:

  • All CIMC sessions opened by local users

  • CIMC session opened by a specific local user

  • Details of the CIMC session opened by a specific local user.

All sessions opened by local users:
UCS-A # scope security
UCS-A /security # show cimc-sessions local

Session ID   Type     User      Source Addr     Admin State
----------   ------ --------- --------------- ------------
42_1_1       Kvm      admin     10.106.22.117     Active
4_1_5        Kvm      admin     10.106.22.117     Active
5_1_5        Vmedia   admin     10.106.22.117     Active

Session opened by a specific local user:
UCS-A /security # show cimc-sessions local admin
Session ID   Type     User      Source Addr     Admin State
----------   ------ --------- --------------- ------------
42_1_1       Kvm      admin     10.106.22.117     Active

Details of session opened by a specific local user:
UCS-A /security # show cimc-sessions local admin detail
Session ID 42_1_1
   Type: Kvm
   User: admin
   Source Addr: 10.106.22.117
   Login Time: 2013-06-28T06:09:53.000
			Last Updated Time: 2013-06-28T06:21:52.000
   Admin State: Active
   Priv: RW
   Server: sys/chassis-1/blade-1
			Service Profile:

Viewing the CIMC Sessions Opened by the Remote Users

Follow this task to view all the CIMC sessions opened by the remote users or the CIMC sessions opened by a specific remote user.

Procedure

  Command or Action Purpose

Step 1

UCS-A # scope security

Enters security configuration mode.

Step 2

UCS-A /security # show cimc-sessions remote

Displays all CIMC sessions opened by the remote users.

Step 3

UCS-A /security # show cimc-sessions remote user-name

Displays all CIMC sessions opened by a specific remote user.

Example

The following examples show how to view:

  • All CIMC sessions opened by remote users

  • CIMC session opened by a specific remote user

  • Details of the CIMC session opened by a specific remote user.

All sessions opened by remote users:
UCS-A # scope security
UCS-A /security # show cimc-sessions remote

Session ID   Type     User             Source Addr      Admin State
----------   ------ ---------        ---------------   ------------
43_1_1       Kvm     administrator     10.106.22.117     Active
6_1_5        Kvm     test-remote       10.106.22.117     Active
7_1_5        Vmedia  test-remote       10.106.22.117     Active

Session opened by a specific remote user:
UCS-A /security # show cimc-sessions remote administrator

Session ID   Type     User             Source Addr      Admin State
----------   ------ ---------        ---------------   ------------
43_1_1       Kvm     administrator     10.106.22.117     Active

Details of session opened by a specific remote user:
UCS-A /security # show cimc-sessions remote administrator detail
Session ID 43_1_1
   Type: Kvm
   User: administrator
   Source Addr: 10.106.22.117
   Login Time: 2013-06-28T06:09:53.000
   Last Updated Time: 2013-06-28T06:21:52.000   
   Admin State: Active
   Priv: RW
   Server: sys/chassis-1/blade-1
			Service Profile:

Viewing the CIMC Sessions Opened by an IPMI User

To view the CIMC sessions opened by an IPMI user, complete the following steps:

Procedure

  Command or Action Purpose

Step 1

UCS-A # scope org org-name

Enters the root organization mode.

Step 2

UCS-A /org # scope ipmi-access-profile profile-name

Enters the IPMI access profile name.

Step 3

UCS-A /org/ipmi-access-profile # scope ipmi-user user-name

Enters an IPMI user name.

Step 4

UCS-A /org/ipmi-access-profile/ipmi-user # show cimc-sessions

Displays all CIMC sessions opened by the specified IPMI User.

Example

The following example shows how to view all the CIMC sessions opened by an IPMI user:

UCS-A # scope org Finance
UCS-A /org* # scope ipmi-access-profile ReadOnly
UCS-A /org/ipmi-access-profile* # scope ipmi-user alice
UCS-A /org/ipmi-access-profile/ipmi-user # show cimc-sessions

Session ID    Type    User        Source Addr       Admin State
----------   ------  ---------   ---------------   --------------
45_1_1        sol     alice       10.106.22.117     Active

Clearing the CIMC Sessions of a Server

This task shows how to clear all CIMC sessions opened on a server. You can also clear the CIMC sessions on a server based on the session type and the user name.

Procedure

  Command or Action Purpose

Step 1

UCS-A # scope security

Enters security configuration mode.

Step 2

UCS-A /security # terminate cimc-sessions server chassis-id/blade-id

Clears the CIMC sessions on a specific blade server of a chassis.

Step 3

UCS-A /security # terminate cimc-sessions server Rack-server-id

Clears the CIMC sessions on a specific rack server.

Step 4

UCS-A /security # terminate cimc-sessions server server-id type session-type

Clears the CIMC sessions of a specific type on a server.

Step 5

UCS-A /security # terminate cimc-sessions server server-id user-name user-name

Clears the CIMC sessions of a specific user on a server.

Example

The first example shows how to clear all CIMC sessions on a server. The second example shows how to clear the CIMC sessions of a specific type on a server. The third example shows how to clear the CIMC sessions of a specific user on a server: 

UCS-A /security # scope security
UCS-A /security # terminate cimc-sessions server 2/1
This will close KVM sessions. Are you sure? (yes/no):yes
UCS-A /security

UCS-A # scope security
UCS-A /security # terminate cimc-sessions server 2/1 type kvm
This will close KVM sessions. Are you sure? (yes/no):yes

UCS-A # scope security
UCS-A /security # terminate cimc-sessions server 2/1 user-name test-user
This will close KVM sessions. Are you sure? (yes/no):yes

Clearing the CIMC Sessions of a Modular Server

This task shows how to clear all CIMC sessions opened on a server. You can also clear the CIMC sessions on a server based on the session type and the user name.

Procedure

  Command or Action Purpose

Step 1

UCS-A # scope security

Enters security configuration mode.

Step 2

UCS-A /security # terminate cimc-sessions server chassis-id / cartridge-id / server-id

Clears the CIMC sessions on a specific modular server of a cartridge on a chassis.

Step 3

UCS-A /security # terminate cimc-sessions server chassis-id / cartridge-id / server-id type session-type

Clears the CIMC sessions of a specific type on a server.

Step 4

UCS-A /security # terminate cimc-sessions server chassis-id / cartridge-id / server-id user-name user-name

Clears the CIMC sessions of a specific user on a server.

Example

The first example shows how to clear all CIMC sessions on a server. The second example shows how to clear the CIMC sessions of a specific type on a server. The third example shows how to clear the CIMC sessions of a specific user on a server: 

UCS-A /security # scope security
UCS-A /security # terminate cimc-sessions server 1/2/1
This will close cimc sessions. Are you sure? (yes/no):yes
UCS-A /security

UCS-A # scope security
UCS-A /security # terminate cimc-sessions server 1/2/1 type kvm
This will close KVM sessions. Are you sure? (yes/no):yes

UCS-A # scope security
UCS-A /security # terminate cimc-sessions server 1/2/1 user-name test-user
This will close cimc sessions. Are you sure? (yes/no):yes

Clearing All CIMC Sessions Opened by a Local User

This task shows how to clear the sessions opened by a local user.

Procedure

  Command or Action Purpose

Step 1

UCS-A # scope security

Enters security configuration mode.

Step 2

UCS-A /security # terminate cimc-sessions local-user user-name

Clears all CIMC sessions opened by a local user.

Step 3

UCS-A /security # terminate cimc-sessions local-user user-name type {kvm | vmedia sol | all}

Clears all CIMC sessions of specific session type opened by a local user.

Example

The following example shows how to clear the CIMC sessions opened by a local user:

UCS-A /security# scope security
UCS-A /security# terminate cimc-sessions local-user testuser
This will close cimc sessions. Are you sure? (yes/no):yes
UCS-A /security#

Clearing All CIMC Sessions Opened by a Remote User

This task shows how to clear CIMC sessions opened by a remote user.

Procedure

  Command or Action Purpose

Step 1

UCS-A # scope security

Enters security configuration mode.

Step 2

UCS-A /security # terminate cimc-sessions remote-user user-name

Clears all CIMC sessions opened by a remote user.

Step 3

UCS-A /security # terminate cimc-sessions remote-user user-name type {kvm | vmedia sol | all}

Clears all CIMC sessions of specific session type opened by a remote user.

Example

The following example shows how to clear all CIMC sessions opened by a remote user:

UCS-A /security# scope security
UCS-A /security# terminate cimc-sessions remote-user testuser
This will close cimc sessions. Are you sure? (yes/no):yes
UCS-A /security#

Clearing a Specific CIMC Session Opened by a Local User

This task shows how to clear a specific CIMC session opened by a local user.

Procedure

  Command or Action Purpose

Step 1

UCS-A # scope security

Enters security configuration mode.

Step 2

UCS-A /security # scope local-user user-name

Enters local user mode.

Step 3

UCS-A /security/local user # terminate cimc-session session-id

Clears the chosen CIMC session.

Step 4

UCS-A /security/local user* # commit-buffer

Commits the transaction.

Example

The following example shows how to clear a specific CIMC session opened by a local user and commits the transaction:

UCS-A /security# scope security
UCS-A /security# scope local-user admin
UCS-A /security/local user # terminate cimc-session 6_1_2
UCS-A /security/local user*# commit-buffer
UCS-A /security/local user#

Clearing a Specific CIMC Session Opened by a Remote User

This task shows how to clear a specific CIMC session opened by a remote user.

Procedure

  Command or Action Purpose

Step 1

UCS-A # scope security

Enters security configuration mode.

Step 2

UCS-A /security # scope remote -user user-name

Enters remote user mode.

Step 3

UCS-A /security/remote user # terminate cimc-session session-id

Clears the chosen CIMC session.

Step 4

UCS-A /security/remote user* # commit-buffer

Commits the transaction.

Example

The following example shows how to clear a specific CIMC session opened by a remote user and commits the transaction: 

UCS-A /security# scope security
UCS-A /security# scope remote-user admin
UCS-A /security/remote user # terminate cimc-session 6_1_3
UCS-A /security/remote user*# commit-buffer
UCS-A /security/remote user#

Clearing a CIMC Session Opened by an IPMI User

To clear a CIMC session opened by an IPMI user, complete the following steps:

Procedure

  Command or Action Purpose

Step 1

UCS-A # scope org org-name

Enters the root organization mode.

Step 2

UCS-A /org # scope ipmi-access-profile profile-name

Enters the IPMI access profile name.

Step 3

UCS-A /org/ipmi-access-profile # scope ipmi-user user-name

Enters the IPMI user.

Step 4

UCS-A /org/ipmi-access-profile/ipmi-user # terminate cimc-sessions session-id

Terminates a specific CIMC session opened by an IPMI user.

Step 5

UCS-A /org/ipmi-access-profile/ipmi-user * commit-buffer

Commits the changes.

Example

The following example displays how to clear a specific CIMC session opened by an IPMI user and commits the changes:

UCS-A # scope org Finance
UCS-A /org* # scope ipmi-access-profile ReadOnly
UCS-A /org/ipmi-access-profile* # scope ipmi-user alice
UCS-A /org/ipmi-access-profile/ipmi-user # terminate cimc-sessions 5_1_2
UCS-A /org/ipmi-access-profile/ipmi-user* # commit-buffer