1. Overview
The IPMI (Intelligent Platform Management Interface) is an open-standard hardware management interface that allows you communicate with BMC (Baseboard Management Controller) of the platform hardware.
BMC, a dedicated micro-controller, manages the interface between system-management software and platform hardware. BMC performs operations such as remote power on or power off, or makes the console accessible. BMC also monitors the hardware resources such as sensors and can send alert messages over the LAN indicating a potential failure of the system.
IPMI is a way to manage the platform hardware by interacting with the hardware directly rather than with the operating system. The advantages of using IPMI are that it allows an out-of-band platform hardware management and the operating system is not burdened with the operational overheads by sending system status data.
1.1. Supported Platforms
Not all features are necessarily supported on each hardware platform. Refer to the Platform Guide for the features and the sub-features that are or are not supported by each platform.
2. IPMI Configuration
2.1. Configuration Syntax and Commands
The following sections describe the IPMI configuration syntax and commands.
2.1.1. IPMI Interface Configuration
This configuration allows you to communicate with the BMC on the platform hardware.
Syntax:
set system platform-management ipmi interface <interface-id> <attribute> <value>
| Attribute | Description |
|---|---|
interface <interface-id> |
IPMI channel ID. For UfiSpace switches, the LAN interface ID is 1. |
type <lan> |
type of network |
mode <dhcp|static> |
Manually set the static IPv4 address or configure DHCP to receive dynamic IPv4 address. |
address-family ipv4 prefix4 <prefix4> |
IPv4 prefix |
address-family ipv4 gateway-address <gateway-address> |
IPv4 address for gateway |
Example: IPMI Interface Configuration
{
"ietf-restconf:data": {
"rtbrick-config:system": {
"platform-management": {
"ipmi": {
"interface": [
{
"id": 1,
"type": "lan",
"mode": "static",
"address-family": {
"ipv4": {
"prefix4": "198.51.100.110/24",
"gateway-address": "198.51.100.111"
}
}
}
]
}
}
}
}
}
2.1.2. IPMI User Configuration
This configuration allows you to change the password of one of the 10 users, including the admin user.
Syntax:
set system platform-management ipmi user <user-id> <options>
| Attribute | Description |
|---|---|
user <user-id> |
User ID. The |
password-plain-text <password-plain-text> |
Plain text password |
password-encrypted-text <password-encrypted-text> |
Encrypted password |
Example: IPMI User Configuration
{
"ietf-restconf:data": {
"rtbrick-config:system": {
"platform-management": {
"ipmi": {
"user": [
{
"id": 2,
"password-encrypted-text": "$21e4946e31b406de98b3077aef03ed5a7"
}
]
}
}
}
}
}
3. IPMI Operational Commands
3.1. IPMI Validation Commands
The IPMI validation commands provide you the IPMI configuration, channel, and user information. Configure the server that connects to the hardware platform. Use the IPMI tool to verify the remote accessibility by the running the following commands on the Linux shell.
Verification of remote access can be performed using the following command:
ipmitool -I lanplus -H <ip address> -U admin -P admin lan print 1
Example for remote access verification
supervisor@srv10-tst:~$ ipmitool -I lanplus -H 198.51.100.100 -U admin -P admin lan print 1
Set in Progress : Set Complete
Auth Type Support :
Auth Type Enable : Callback : MD5
: User : MD5
: Operator : MD5
: Admin : MD5
: OEM : MD5
IP Address Source : Static Address
IP Address : 198.51.100.100
Subnet Mask : 255.255.255.128
MAC Address : e8:c5:7a:8f:78:0d
SNMP Community String : AMI
IP Header : TTL=0x40 Flags=0x40 Precedence=0x00 TOS=0x10
BMC ARP Control : ARP Responses Enabled, Gratuitous ARP Disabled
Gratituous ARP Intrvl : 0.0 seconds
Default Gateway IP : 198.51.100.41
Default Gateway MAC : 00:00:5e:00:01:01
Backup Gateway IP : 198.51.100.10
Backup Gateway MAC : 00:00:00:00:00:00
802.1q VLAN ID : Disabled
802.1q VLAN Priority : 0
RMCP+ Cipher Suites : 0,1,2,3,6,7,8,11,12,15,16,17
Cipher Suite Priv Max : caaaaaaaaaaaXXX
: X=Cipher Suite Unused
: c=CALLBACK
: u=USER
: o=OPERATOR
: a=ADMIN
: O=OEM
Bad Password Threshold : 0
Invalid password disable: no
Attempt Count Reset Int.: 0
User Lockout Interval : 0
Use the following command to verify the channel information:
sudo ipmitool channel info 1
Example for channel information
supervisor@onl>ufi06.q2c.u25.r4.nbg.rtbrick.net:~ $ sudo ipmitool channel info 1
Channel 0x1 info:
Channel Medium Type : 802.3 LAN
Channel Protocol Type : IPMB-1.0
Session Support : multi-session
Active Session Count : 0
Protocol Vendor ID : 7154
Volatile(active) Settings
Alerting : enabled
Per-message Auth : disabled
User Level Auth : enabled
Access Mode : always available
Non-Volatile Settings
Alerting : enabled
Per-message Auth : disabled
User Level Auth : enabled
Access Mode : always available
Use the following command to verify a specific channel information:
sudo ipmitool lan print 1
Example for specific channel information
supervisor@onl>ufi06.q2c.u25.r4.nbg.rtbrick.net:~ $ sudo ipmitool lan print 1
Set in Progress : Set Complete
Auth Type Support :
Auth Type Enable : Callback : MD5
: User : MD5
: Operator : MD5
: Admin : MD5
: OEM : MD5
IP Address Source : Static Address
IP Address : 198.51.100.100
Subnet Mask : 255.255.255.128
MAC Address : e8:c5:7a:8f:78:0d
SNMP Community String : AMI
IP Header : TTL=0x40 Flags=0x40 Precedence=0x00 TOS=0x10
BMC ARP Control : ARP Responses Enabled, Gratuitous ARP Disabled
Gratituous ARP Intrvl : 0.0 seconds
Default Gateway IP : 198.51.100.41
Default Gateway MAC : 00:00:5e:00:01:01
Backup Gateway IP : 198.51.100.10
Backup Gateway MAC : 00:00:00:00:00:00
802.1q VLAN ID : Disabled
802.1q VLAN Priority : 0
RMCP+ Cipher Suites : 0,1,2,3,6,7,8,11,12,15,16,17
Cipher Suite Priv Max : caaaaaaaaaaaXXX
: X=Cipher Suite Unused
: c=CALLBACK
: u=USER
: o=OPERATOR
: a=ADMIN
: O=OEM
Bad Password Threshold : 0
Invalid password disable: no
Attempt Count Reset Int.: 0
User Lockout Interval : 0
Use the following command to verify the user for a channel:
sudo ipmitool user list 1
Example for user per channel
supervisor@onl>ufi06.q2c.u25.r4.nbg.rtbrick.net:~ $ sudo ipmitool user list 1 ID Name Callin Link Auth IPMI Msg Channel Priv Limit 1 false false true ADMINISTRATOR 2 admin false false true ADMINISTRATOR 3 true false false NO ACCESS 4 true false false NO ACCESS 5 true false false NO ACCESS 6 true false false NO ACCESS 7 true false false NO ACCESS 8 true false false NO ACCESS 9 true false false NO ACCESS 10 true false false NO ACCESS
©Copyright 2023 RtBrick, Inc. All rights reserved. The information contained herein is subject to change without notice. The trademarks, logos and service marks ("Marks") displayed in this documentation are the property of RtBrick in the United States and other countries. Use of the Marks are subject to RtBrick’s Term of Use Policy, available at https://www.rtbrick.com/privacy. Use of marks belonging to other parties is for informational purposes only.