Important: Using IPMI on a public LAN can be a major security liability because this interface can provide any user with credentials with direct hardware- and console-level access to your node. Follow security best practices when you implement IPMI access.
IN THIS ARTICLE
This article explains how to configure IPMI.
Important: These instructions don't apply to the following node types:
- QC24 (Gen1)
- C-72T
- C-168T
- C-192T
- C-432T
- K-144T
- K-168T
- K-432T
For more information, see:
- IPMI Reference Guide for QC24 (Gen1)
- IPMI Reference Guide for Qumulo C-Series
- IPMI Reference Guide for Qumulo K-series
REQUIREMENTS
SSH access on the client facing network, for example:
sudo -s
Note: To access the IPMI CLI while physically connected to the node, press CTRL+ALT+F1.
DETAILS
Qumulo node motherboards provide IPMI support which allow for off-band maintenance access even if the node is turned off when plugged into power.
- Nodes are configured to receive DHCP address assignments by default
-
The IPMI access network can be completely separate from your client-facing network
- The default IPMI account and password varies based on when your hardware was manufactured:
- For P-23T, P-92T, P-184T, and P-368T nodes newer than August 2019, the username and password are both
ADMINISTRATOR
(case-sensitive). - For all other hardware (regardless of date), the username and password are both
admin
(case-sensitive).
- For P-23T, P-92T, P-184T, and P-368T nodes newer than August 2019, the username and password are both
Notes:
- These credentials are unrelated to your Qumulo root or administrator password.
- You must use the following instructions with each node that will be part of your IPMI maintenance network.
IPMI Port Locations
QC24, QC40
QC104, QC 208, QC260, QC360
P-23T, P-92T, P-184T, P-368T
Verify IPMI LAN Configuration
To verify the IPMI LAN configuration, use the following command.
# ipmitool lan print 3
IPMI LAN Configuration with static IPs
# ipmitool lan set 3 ipsrc static #Set IPMI ethernet interface to static IP # ipmitool lan set 3 ipaddr XXX.XXX.XXX.XXX #Set the IP address of the interface # ipmitool lan set 3 netmask 255.XXX.XXX.XXX #Set the Subnet Mask for the interface # ipmitool lan set 3 defgw ipaddr XXX.XXX.XXX.XXX #Set the IP address of the Default Gateway # ipmitool lan set 3 arp respond on #(Optional) Enable BMC ARP responses
IPMI User Operation Examples
To list the current users on a QC208 node, use the following command.
# ipmitool user list 3 ID Name Callin Link Auth IPMI Msg Channel Priv Limit 1 false false true administrator 2 root false true true administrator
To change the default administrator password, use the following command.
# ipmitool user set password 3
To create a new user in slot 4, use the following command.
# ipmitool user set name 4 netadmin # ipmitool user set password 4
To set access for a user on a QC208 node, use the following command.
# ipmitool channel setaccess 3 4 link=on ipmi=on callin=on privilege=4 # ipmitool user enable 4
To verify user level access on a QC208 node, use the following command.
# ipmitool channel getaccess 3 Maximum User IDs : 15 Enabled User IDs : 2 User ID : 1 User Name : Fixed Name : Yes Access Available : callback Link Authentication : disabled IPMI Messaging : enabled Privilege Level : administrator User ID : 2 User Name : root Fixed Name : Yes Access Available : callback Link Authentication : enabled IPMI Messaging : enabled Privilege Level : administrator
Connect to nodes via IPMI
When configuration is complete, you must access the IPMI interface using a Java-capable web browser and the IP addresses that you or your DHCP server assigned.
Troubleshooting
If you can't connect to the IPMI management console, make sure that LAN access is turned on for the channel by using the the following command (in this example, we use channel 3).
# ipmitool lan set 3 access on
If you still can't connect but your network configuration is correct, reset the BMC by using an SSH or KVM Console session to the node.
# ipmitool bmc reset cold
ADDITIONAL RESOURCES
IPMI Reference Guide for QC24 (Gen1)
IPMI Reference Guide for Qumulo C-Series
Comments
0 comments