Ask the Community
Groups
IPMI - disabling IPMI LAN for DHCP - Connect IT Community | Kaseya
<main> <article class="userContent"> <h2 data-id="summary"><strong>SUMMARY</strong></h2> <p>IPMI - disabling IPMI LAN for DHCP</p> <h2 data-id="issue"><strong>ISSUE</strong></h2> <p></p> <h2 id="title" data-id="ipmi-intelligent-platform-management-interface">IPMI - Intelligent Platform Management Interface</h2> <h3 data-id="purpose">Purpose</h3> <p>How to configure and disable IPMI for DHCP on Unitrends Recovery-series Appliances</p> <h3 data-id="applies-to">Applies To</h3> <p>Unitrends Appliances with IPMI-Enabled Motherboards</p> <h3 data-id="symptoms-description">Symptoms / Description</h3> <p>IPMI is a firmware level interface that allows remote management of a server locally or through a network interface. It has the ability to remotely reboot a frozen server, monitor for hardware failures, and also supports KVM over LAN. <br><br>IPMI LAN has been known to create traffic on a clients network with DHCP requests and this could pose a security risk if not properly configured or disabled.</p> <p>Some Unitrends systems have the first onboard NIC enabled for IPMI LAN with DHCP by default, and some only have the IPMI dedicated NIC enabled for IPMI LAN. The IPMI dedicated NIC comes with a black plastic plug in it. </p> <h3 data-id="resolution">Resolution</h3> <p>To access BIOS IPMI settings reboot the Unitrends appliance into BIOS and choose Advanced -> IPMI Configuration. Then to disable IPMI from BIOS - set a static IP address of 0.0.0.0</p> <p>To do this without rebooting, from a putty/ssh shell, you can use ipmiutil. </p> <p>First make sure that ipmiutil is installed (skip this step if release 7.2.0 or later):</p> <p>a) install ipmiutil from the repo: </p> <p><b># yum install ipmiutil</b></p> <p><span id="answer">b) Or it can also be downloaded from <a rel="nofollow" href="/home/leaving?allowTrusted=1&target=http%3A%2F%2Fipmiutil.sourceforge.net%2FFILES%2F">http://ipmiutil.sourceforge.net/FILES/</a></span> then installed by doing </p> <p><b># rpm -i ipmiutil*.rpm</b></p> <p>Run this command to show the current IPMI LAN configuration:</p> <p> # <b>ipmiutil lan -c</b></p> <p>Run this command to disable IPMI LAN, if desired</p> <p> # <b>ipmiutil lan -d</b></p> See <a rel="nofollow" href="/home/leaving?allowTrusted=1&target=https%3A%2F%2Funitrends-support.zendesk.com%2Fhc%2Fen-us%2Farticles%2F360013151657">Using IPMI LAN for remote access</a> for more information. <h3 data-id="third-party-sources">Third-Party Sources</h3> <p><a rel="nofollow" href="/home/leaving?allowTrusted=1&target=http%3A%2F%2Fwww.intel.com%2Fcontent%2Fwww%2Fus%2Fen%2Fservers%2Fipmi%2F">http://www.intel.com/content/www/us/en/servers/ipmi/</a></p> <p><a rel="nofollow" href="/home/leaving?allowTrusted=1&target=ftp%3A%2F%2Fftp.supermicro.com%2FCDR-0010_2.10_IPMI_Server_Managment%2FManuals%2FInstallation_20.pdf">ftp://ftp.supermicro.com/CDR-0010_2.10_IPMI_Server_Managment/Manuals/Installation_20.pdf</a></p> <p><a rel="nofollow" href="/home/leaving?allowTrusted=1&target=http%3A%2F%2Fipmiutil.sourceforge.net%2Fdocs%2FUserGuide">http://ipmiutil.sourceforge.net/docs/UserGuide</a></p> <h2 data-id="notes"><strong>NOTES</strong></h2> <p>20200716jmaynard - corrected internal link</p> </article> </main>