IPMI on a Public LAN can be a major security liability providing anyone with the proper credentials direct hardware and console level access to your server. Please use good security practices when implementing IPMI access.
IN THIS ARTICLE
Outlines how to configure IPMI on first generation QC24 servers
- IPMI port location
- Verify IPMI LAN Configuration
- IPMI LAN Configuration with static IPs
- IPMI User Operations
- Connect via IPMI
- QC24 (Gen1) platform
- Root user access via ssh on the client facing network
NOTE: The IPMI Instructions listed below can be used the first generation QC24 and QC40 platforms. Reference the IPMI Quick Reference Guide for Qumulo K-series article or the IPMI Quick Reference Guide for all other platforms.
Qumulo node motherboards provide IPMI support which allow for off-band maintenance access even if the node is turned off when plugged into power.
- Nodes are configured to receive DHCP address assignments by default
The IPMI access network can be completely separate from your client facing network
The default IPMI account & password is ADMIN/ADMIN all uppercase
Note that this account name and password are completely independent of your Qumulo root/admin password
The instructions provided below have to be entered into each node that will be a member of your IPMI maintenance network.
IPMI Port Location
Verify IPMI LAN Configuration
- Use the following command:
# ipmitool lan print
IPMI LAN Configuration with static IPs
# ipmitool lan set 1 ipsrc static #Set IPMI ethernet interface to static IP
IPMI User Operation Examples
List Current users on a QC24 (Gen1)
# ipmitool user list
- Change default ADMIN user password
# ipmitool user set password 2
- Create new user
- Example: Create Admin user “netadmin” in user slot #4
# ipmitool user set name 4 netadmin
- Set user access
# ipmitool channel setaccess 1 4 link=on ipmi=on callin=on privilege=4
- Verify User Level Access
# ipmitool channel getaccess 1
Connect to nodes via IPMI
Once configuration is complete, accessing the nodes via IPMI requires a Java-capable web browser using the IPs assigned by you or your DHCP server as outlined below. Use Firefox or Chrome for best results.
- IPMI Login Screen
- IPMI Control Panel
If you cannot connect to the IPMI management console and you are sure that your network configuration is correct, reset the BMC via a SSH or KVM Console session to the node in question:
# ipmitool bmc reset cold
You should now be able to successfully configure and connect to your nodes via IPMI on a QC24 (Gen1) server
Like what you see? Share this article with your network!