HPE 9000 and HPE e3000 Servers
cancel
Showing results for 
Search instead for 
Did you mean: 

Access Console on L2000

 
marvik
Regular Advisor

Access Console on L2000

Hi Friends,

I have configured a LAN Console on this L2000 box.Problem is I connect thru putty on telnet and it says Authentication failed.I have created 2 users & changed the password for both and checked (am sure I am putting the correct password).Can u highlight where am I going wrong

*** I even tried with a blank password ****
Below is the detailed status::

GSP Host Name: Server1
GSP> ls

LS
LAN configuration:
. MAC Address : 0x00306e0b9c85
. IP address : 160.110.231.100
. GSP Host Name : hpserver
. Subnet mask : 255.255.255.0
. Gateway address : 160.110.231.1

LAN status: UP and RUNNING

GSP Host Name: hpserver
GSP> el

EL

Current LAN port access: Enabled

GSP> so

SO

This command allow you to modify the security options and access control.

GSP wide parameters are:
. Login Timeout: 2 minutes.
. Number of Password Faults allowed: 3
. Flow Control Timeout: 5 minutes.

Do you want to modify the GSP wide parameters? (Y/[N]) n
n

User number 1 parameters are:
. User's Name: unixadm
. User's Login: unixadm
. Organization's Name:
. Dial-back configuration: Disabled
. Access Level: Administrator
. Mode: Multiple
. User's state: Enabled

When I telnet to 160.100.231.100 it gives me below output and password doesn't works

**********************************
**********************************
** THIS IS A SECURED CORPORATE **
** NETWORK. UNAUTHORIZED ACCESS **
** IS PROHIBITED. **
** **
**********************************
**********************************
Username: unixadm
Password:

% Authentication failed.


User Access Verification

Username:


9 REPLIES 9
F Verschuren
Esteemed Contributor

Re: Access Console on L2000

the only reason I can think of is that this Ip is alreay used for a other server...
a way to check this chitout downtime is to change your bannerand see if that cange isvisable whit telnet.
marvik
Regular Advisor

Re: Access Console on L2000

Thanks , Can u tell me how to change this banner when I login to console
THIS IS A SECURED CORPORATE **
** NETWORK. UNAUTHORIZED ACCESS **
** IS PROHIBITED. **
Dennis Handly
Acclaimed Contributor
Bill Hassell
Honored Contributor

Re: Access Console on L2000

> When I telnet to 160.100.231.100 it gives me below output and password doesn't works
>
> **********************************
> **********************************
> ** THIS IS A SECURED CORPORATE **
> ** NETWORK. UNAUTHORIZED ACCESS **
> ** IS PROHIBITED. **

This *might* be a telnet banner from HP-UX.

> Username: unixadm
> Password:
>
> % Authentication failed.
>
>
> User Access Verification
>
> Username:

But the rest of the text (Username, % Authentication, etc) are not from HP-UX. You are apparently connecting to some sort of company firewall or access control system.

Check with your networking department to see what this interface requires before you can get connected to your HP-UX box. It is a common practice to connect your primary LAN card to a company network and to connect your GSP LAN to a restricted network as this port is much less secure than an HP-UX controlled port.


Bill Hassell, sysadmin
marvik
Regular Advisor

Re: Access Console on L2000

Thanks Bill for looking into this.I finally hard reset the GSP console from the card.but I am still to check the connectivity after that.
That's rite to have 2 sepnetwork segments for the Pri Lan and GSP lan.But I can ping to the IP address 160.110.231.100 from my PC.Also I think FW is allowing the traffic as the Login prompt is coming when I telnet the IP adress
I will keep posted

Cheers
Marvik
Torsten.
Acclaimed Contributor

Re: Access Console on L2000

Not sure if you have a revision A or B GSP in your server, but I would expect another login prompt like this:

Service Processor login:
Service Processor password:

Check if you have a duplicated IP and if you are really connected to the correct device.


Hope this helps!
Regards
Torsten.

__________________________________________________
There are only 10 types of people in the world -
those who understand binary, and those who don't.

__________________________________________________
No support by private messages. Please ask the forum!

If you feel this was helpful please click the KUDOS! thumb below!   
Bill Hassell
Honored Contributor

Re: Access Console on L2000

Yes, you can ping the IP address but those messages (especially % Authentication and User Access Verification) are likely coming from a firewall or restricted access router. I seem to remember this style of prompting from a Cisco access control system (TACACS) -- you aren't actually connecting to the GSP port at all. You can verify this by trying to connect, then on your PC, dump the arp table (arp -a using a DOS window). The MAC address for the GSP's address will probably not match. An alternative is to use Wireshark on your PC to track what is happening on during the connection.

Or talk with the networking people...


Bill Hassell, sysadmin
Roberto Arias
Valued Contributor

Re: Access Console on L2000

Hello Marvick :

The ip of GSP is:
" LAN configuration:
. MAC Address : 0x00306e0b9c85
. IP address : 160.110.231.100
"


why you try connect at ip 160.100.231.100? by output of your telnet this IP is of a router. Please try connect at 160.110.231.100

best regards
The man is your friend
marvik
Regular Advisor

Re: Access Console on L2000

Hi Robert,

That the IP address given to the Console hence I'm trying to access that.i am still investigating on the clue given by Bill.Will update as I get the solution

Thanks
Marvik