IPMI on a Public LAN can be a major security liability providing anyone with the proper credentials direct hardware and console level access to your server. Please use good security practices when implementing IPMI access.
IN THIS ARTICLE
Outlines how to configure IPMI on Qumulo QC24 (Gen2), QC40, QC Series 4U (104/208/260/360) and Qumulo P-Series hardware
- IPMI port location
- Verify IPMI LAN Configuration
- IPMI LAN Configuration with static IPs
- IPMI User Operations
- Connect via IPMI
IMPORTANT! The IPMI Instructions listed below can be used with any Qumulo server besides the first generation QC24, Qumulo C-series, and Qumulo K-series platforms. Reference the IPMI Quick Reference Guide for QC24 (Gen1), IPMI Quick Reference Guide for Qumulo C-Series, or the IPMI Quick Reference Guide for Qumulo K-series article for additional details.
REQUIREMENTS
- QC24(Gen2), QC40, QC Series 4U (104/208/260/360) or Qumulo P-Series hardware
- Root user access via ssh on the client facing network
sudo -s
DETAILS
Qumulo node motherboards provide IPMI support which allow for off-band maintenance access even if the node is turned off when plugged into power.
- Nodes are configured to receive DHCP address assignments by default
-
The IPMI access network can be completely separate from your client-facing network
-
The default IPMI account & password varies based on when your hardware was manufactured:
-
For P-series hardware newer than August 2019, it is ADMINISTRATOR/ADMINISTRATOR (all uppercase)
- For all other hardware (regardless of age), it is ADMIN/ADMIN (all uppercase)
-
Note that this account name and password are completely independent of your Qumulo root/admin password
-
The instructions provided below have to be entered into each node that will be a member of your IPMI maintenance network.
IPMI Port Locations
QC24/QC40
QC Series 4U (104/208/260/360)
Qumulo P-series 2U
Verify IPMI LAN Configuration
- Use the following command:
# ipmitool lan print 3
IPMI LAN Configuration with static IPs
# ipmitool lan set 3 ipsrc static #Set IPMI ethernet interface to static IP
# ipmitool lan set 3 ipaddr XXX.XXX.XXX.XXX #Set the IP address of the interface
# ipmitool lan set 3 netmask 255.XXX.XXX.XXX #Set the Subnet Mask for the interface
# ipmitool lan set 3 defgw ipaddr XXX.XXX.XXX.XXX #Set the IP address of the Default Gateway
# ipmitool lan set 3 arp respond on #(Optional) Enable BMC ARP responses
IPMI User Operation Examples
- List Current users on a QC208
# ipmitool user list 3
ID Name Callin Link Auth IPMI Msg Channel Priv Limit
1 false false true ADMINISTRATOR
2 root false true true ADMINISTRATOR
- Change default ADMIN password
# ipmitool user set password 3
Password for user 3:
Password for user 3:
- Create new user
- Example: Create Admin user “netadmin” in user slot #4
# ipmitool user set name 4 netadmin
# ipmitool user set password 4
Password for user 4:
Password for user 4:
- Set access for user QC208
# ipmitool channel setaccess 3 4 link=on ipmi=on callin=on privilege=4
# ipmitool user enable 4
- Verify User Level Access QC208
# ipmitool channel getaccess 3
Maximum User IDs : 15
Enabled User IDs : 2
User ID : 1
User Name :
Fixed Name : Yes
Access Available : callback
Link Authentication : disabled
IPMI Messaging : enabled
Privilege Level : ADMINISTRATOR
User ID : 2
User Name : root
Fixed Name : Yes
Access Available : callback
Link Authentication : enabled
IPMI Messaging : enabled
Privilege Level : ADMINISTRATOR
..etc..
Connect to nodes via IPMI
Once configuration is complete, accessing the nodes via IPMI requires a Java-capable web browser using the IPs assigned by you or your DHCP server as outlined below. Use Firefox or Chrome for best results.
- QC208 IPMI Login Screen
- QC208 IPMI Control Panel
Troubleshooting
If you cannot connect to the IPMI management console, ensure that LAN access is turned on for the channel using the command below. For example, where the channel is 3:
# ipmitool lan set 3 access on
If you are still unable to connect and have verified that your network configuration is correct, reset the BMC via a SSH or KVM Console session to the node in question:
# ipmitool bmc reset cold
RESOLUTION
You should now be able to successfully configure and connect to your nodes via IPMI on QC24 (Gen 2), QC40, QC Series 4U (104/208/260/360) and Qumulo P-Series hardware
ADDITIONAL RESOURCES
IPMI Quick Reference Guide for QC24 (Gen1)
IPMI Quick Reference Guide for Qumulo C-Series
IPMI Quick Reference Guide for Qumulo K-series
QQ CLI: Networks and IP Addresses
Like what you see? Share this article with your network!
Comments
0 comments
Please sign in to leave a comment.