Ipmitool: Basic installation and usage - Revision history

David at 10:32, 24 November 2016

2016-11-24T10:32:35Z

Jon: /* Static IP for IPMI interface */

2015-01-20T17:34:55Z

Static IP for IPMI interface

Jon: /* SOL session */

2015-01-20T17:34:35Z

SOL session

David at 13:01, 9 August 2013

2013-08-09T13:01:22Z

David: /* iptables - add rules */

2013-08-09T13:01:02Z

iptables - add rules

David: /* Static IP for IPMI interface */

2013-02-06T09:19:36Z

Static IP for IPMI interface

David at 09:18, 6 February 2013

2013-02-06T09:18:43Z

Jon: /* iptables & Firewalls */

2012-11-12T14:18:35Z

iptables & Firewalls

Jon at 14:14, 12 November 2012

2012-11-12T14:14:45Z

Roshan: /* Static IP for IPMI interface */

2012-11-09T11:28:33Z

Static IP for IPMI interface

← Older revision		Revision as of 10:32, 24 November 2016
Line 126:		Line 126:
	2 admin true false false ADMINISTRATOR		2 admin true false false ADMINISTRATOR
	</syntaxhighlight>		</syntaxhighlight>
		+
		+	== Resetting the IPMI Module ==
		+	Resets the management console without rebooting the BMC
		+
		+	# ipmitool mc reset warm
		+
		+	Reboots the BMC
		+
		+	# ipmitool mc reset cold
		+
		+	If this fails to restore usability of the interface, you can also attempt a cold reset from Supermicro's IPMICFG: ftp://ftp.supermicro.com/utility/IPMICFG/
		+
		+	# ipmicfg -nm reset
		+
		+	Finally, you can reset the BMC to factory defaults with IPMICFG or ipmitool. Be aware that this will wipe any existing settings on the BMC that you may have set from the web interface, but excludes network settings.
		+
		+	# ipmicfg -fd
		+
		+	or
		+
		+	# ipmitool raw 0x3c 0x40
		+
		+	To reset your network settings along with the factory reset, use the following IPMICFG command:
		+
		+	# ipmicfg -fde

@@ Line 59: / Line 59: @@
 === Static IP for IPMI interface ===
-To perform a chance of address remotely (*be careful!*)
+To perform a change of address remotely (*be careful!*)
 <syntaxhighlight>ipmitool -U admin -P admin -H 172.28.1.51 lan set 1 ipsrc static
 ipmitool -U admin -P admin -H 172.28.1.51 lan set 1 ipaddr 172.28.11.19 </syntaxhighlight>

← Older revision		Revision as of 17:34, 20 January 2015
Line 55:		Line 55:

	=== SOL session ===		=== SOL session ===
		+	'''From a remote system'''
	<syntaxhighlight> ipmitool -U ADMIN -P ADMIN -H 172.28.1.91 -I lanplus sol activate </syntaxhighlight>		<syntaxhighlight> ipmitool -U ADMIN -P ADMIN -H 172.28.1.91 -I lanplus sol activate </syntaxhighlight>

@@ Line 106: / Line 106: @@
 </syntaxhighlight>
-=== Change IPMI Password ===
+== Change IPMI Password ==
 View the current users (default password is admin):
 <syntaxhighlight>

@@ Line 104: / Line 104: @@
 # Save rules to /etc/sysconfig/iptables
 service iptables save
 </syntaxhighlight>

@@ Line 64: / Line 64: @@
 To perform a chance of IP address when logged in locally (ensure the /etc/init.d/ipmi service has been started)
 <syntaxhighlight>
-[root@gdss681 ~]$ ipmitool lan set 1 ipsrc static
+  ipmitool lan set 1 ipsrc static
-[root@gdss681 ~]$ ipmitool lan set 1 ipaddr 10.1.128.1
+  ipmitool lan set 1 ipaddr 10.1.128.1
-Setting LAN IP Address to 10.1.128.1
+  ipmitool lan set 1 netmask 255.255.0.0
-[root@gdss681 ~]$ ipmitool lan set 1 netmask 255.255.0.0
+  ipmitool lan set 1 defgw ipaddr 10.1.1.1
 </syntaxhighlight>
 == iptables & Firewalls ==

@@ Line 73: / Line 73: @@
 * Port 555 (TCP) - Unsure but SM say to open this port
 * Port 623 (TCP & UDP) - '''Normal IPMI traffic'''
 * Port 5900 (TCP) - '''HID Device''' (USB keyboard/mouse emulation)
 * Port 5901 (TCP) - '''Video Redirection''' (for KVM-over-IP)
@@ Line 87: / Line 89: @@
 iptables -A INPUT -m state --state NEW -m tcp -p tcp --dport 623 -j ACCEPT
 iptables -A INPUT -m state --state NEW -m udp -p udp --dport 623 -j ACCEPT
 iptables -A INPUT -m state --state NEW -m tcp -p tcp --dport 5900 -j ACCEPT
 iptables -A INPUT -m state --state NEW -m tcp -p tcp --dport 5901 -j ACCEPT

← Older revision		Revision as of 14:14, 12 November 2012
Line 61:		Line 61:
	<syntaxhighlight>ipmitool -U admin -P admin -H 172.28.1.51 lan set 1 ipsrc static		<syntaxhighlight>ipmitool -U admin -P admin -H 172.28.1.51 lan set 1 ipsrc static
	ipmitool -U admin -P admin -H 172.28.1.51 lan set 1 ipaddr 172.28.11.19 </syntaxhighlight>		ipmitool -U admin -P admin -H 172.28.1.51 lan set 1 ipaddr 172.28.11.19 </syntaxhighlight>
		+
		+	== iptables & Firewalls ==
		+
		+	For full IPMI functionality via the built in web interface, a number of ports (both TCP and UDP) need to be openend if a firewall is to route IPMI traffic.
		+
		+	=== Supermicro IPMI ports (up to X9 generation/AMI IPMI) ===
		+	The ports are as follows:
		+	* Port 22 (TCP) - '''Normal IPMI traffic'''
		+	* Port 80 (TCP) - '''HTTP Access'''
		+	* Port 443 (TCP) - '''Secure HTTP Access'''
		+	* Port 555 (TCP) - Unsure but SM say to open this port
		+	* Port 623 (TCP & UDP) - '''Normal IPMI traffic'''
		+	* Port 5900 (TCP) - '''HID Device''' (USB keyboard/mouse emulation)
		+	* Port 5901 (TCP) - '''Video Redirection''' (for KVM-over-IP)
		+
		+	=== iptables - add rules ===
		+	<syntaxhighlight>
		+	# Port 22 may well be open for normal SSH access
		+	iptables -A INPUT -m state --state NEW -m tcp -p tcp --dport 22 -j ACCEPT
		+
		+	# Remaining ports
		+	iptables -A INPUT -m state --state NEW -m tcp -p tcp --dport 80 -j ACCEPT
		+	iptables -A INPUT -m state --state NEW -m tcp -p tcp --dport 443 -j ACCEPT
		+	iptables -A INPUT -m state --state NEW -m tcp -p tcp --dport 555 -j ACCEPT
		+	iptables -A INPUT -m state --state NEW -m tcp -p tcp --dport 623 -j ACCEPT
		+	iptables -A INPUT -m state --state NEW -m udp -p udp --dport 623 -j ACCEPT
		+	iptables -A INPUT -m state --state NEW -m tcp -p tcp --dport 5900 -j ACCEPT
		+	iptables -A INPUT -m state --state NEW -m tcp -p tcp --dport 5901 -j ACCEPT
		+
		+	# Save rules to /etc/sysconfig/iptables
		+	service iptables save
		+	</syntaxhighlight>