Cloud , Converged , Hyper Converged , Visualization , SAN, NAS and Data Protection Demystified

Changing the IP Address of the Cisco DCNM-SAN & DCNM-SMIS OVA/LINUX Installation

To change the IP address of a Cisco DCNM-SAN & DCNM-SMIS Server, follow these steps:

Detailed Steps (INSTALL DIRECTORY in OVA is /usr/local/cisco)

Step 1 Stop the Cisco DCNM-SAN and DCNM-SMIS Servers.

Step 2 Change the old IP Address with the new IP Address in the following files:

$INSTALLDIR/jboss-as-7.2.0.Final/bin/init.d/sanservice.sh
/etc/init.d/FMServer
$INSTALLDIR/jboss-as-7.2.0.Final/standalone/configuration/standalone-san.xml (Including DB url)
$INSTALLDIR/fm/conf/server.properties

Step 3 Enter the following command to assign a new IP address.

run $INSTALLDIR/fm/bin/PLMapping.sh -p newipaddress 0

Assume $INSTALLDIR is the top directory of DCNM installation. The above command is for single server instance, where 0 is the server ID.

Step 4 Change the old IP Address with the new IP Address in the file $INSTALLDIR/fm/conf/smis.properties and update the property DCNM_IP_ADDRESS in the file /root/packaged-files/properties/installer.properties with the new IP Address.

Step 5 Start the Cisco DCNM-SAN and DCNM-SMIS Servers.

Unable to ping either of the Fabric Interconnects after changing the IP address of Fabric Interconnects

Recently we noticed that we are unable to ping one of the Fabric Interconnects after changing the IP’s of both the Fabric Interconnects and Virtual IP. After much troubleshooting we found that if we are changing the IP of Fabric Interconnects to a different VLAN/Subnet from the previous one then we also need to change the KVM IP’s to the same VLAN as of Fabric Interconnects. Once we changed the KVM IP’s to the same VLAN as of Fabric Interconnects we were able to ping both the FI’s.

Cisco UCS Major Alert Default Key Ring Certificate Invalid Reason Expired

I faced a major alert is UCSM regarding Default Key Ring Certificate Expired.

Certificates is only valid for 1 year. After that new certificate would needs to be generated.

Check the validity and expiry date as below

FI-A# scope security
FI-A/security# show keyring detail

Generate the new Certificate

FI-A# scope security
FI-A/security# scope keyring default
FI-A/security/ keyring# set regenerate yes
FI-A/security/ keyring*# commit-buffer

UCSM will disconnect and reconnect .

Run the above commands again to validate .