Ask the Community
Groups
Configuring and using IPMI LAN for remote access - Connect IT Community | Kaseya
<main> <article class="userContent"> <h2 data-id="summary"><strong>SUMMARY</strong></h2> <p>Configuring and using IPMI LAN for remote access - previously published as KB 2971</p> <h2 data-id="issue"><strong>ISSUE</strong></h2> <p></p> <p>Use IPMI LAN commands to access the firmware even if the OS is down.</p> <p>IPMI is a firmware level interface that allows remote management of a server locally or through a network interface. The IPMI LAN firmware supports remote access regardless of the OS. It has the ability to remotely reboot a frozen server, monitor for hardware failures, access the firmware sensors, firmware log, and also supports accessing the console over IPMI LAN, even during boot.</p> <p>Unitrends systems do not have the IPMI LAN interface enabled by default, and it should not be enabled without also changing the default IPMI user password.<br><br>IPMI is equipped on Unitrends Appliances Generation 5 and higher that are FULL DEPTH 1u and higher rack appliances. Half-rack systems and desktop systems do not include this feature. <br><br>To use IPMI, a unique IP unused by other services and NOT one of the unitrends Appliance's production IPs must be selected for configuration. </p> <h3 data-id="n-a"> </h3> <h2 data-id="resolution"><strong>RESOLUTION</strong></h2> <p></p> <p>This article will guide through three methods of enabling IPMI LAN on the Unitrends system, accessing the IPMI web user interface, installing the ipmiutil client utility, running some commonly used commands and provide additional resources for advanced users.<br><br>On systems with physical IPMI ports optionally connect the IPMI interface to a non-production network segment if you wish this access to be independently secured. The IPMI port is commonly covered by a small plastic cap which is easily removed. This may also be connected in parallel to ETH0 to provide redundancy of access to the IPMI interface. IPMI's separate IP will be used across both ETH0 and the optional IPMI connection for redundancy. <br><br>Even if the OS is hung or not accessible, the system can be remotely diagnosed and/or restarted with IPMI LAN. <br><br>Enable IPMI LAN access using one of the following three methods:<br> </p> <ol><li>Enable IPMI LAN on the appliance via local access, in one of these methods (Unitrends Backup Console Interface, bios menu or using the ipmiutil command utility) :</li></ol><div> <br><i>Hint: IPMI LAN only needs to be enabled using one method. If you </i><i>choose option a, you do not need to perform option b or c</i><i>.</i> </div> <p><br>a) Enable IPMI LAN from the Unitrends Backup Console Interface:</p> <ol start="1"><li>If you cannot access the appliance's physical or virtual console screen, optionally use an SSH client such as <a rel="nofollow" href="/home/leaving?allowTrusted=1&target=https%3A%2F%2Fwww.chiark.greenend.org.uk%2F%7Esgtatham%2Fputty%2Flatest.html">PuTTY</a> to access the Unitrends system at the command line level. Note: Ensure you have the OS <a rel="nofollow" href="/home/leaving?allowTrusted=1&target=https%3A%2F%2Funitrends-support.zendesk.com%2Fhc%2Fen-us%2Farticles%2F360013244978">password</a> to access the Unitrends system’s command line. The OS password may differ from the password used to access the User Interface. Access the Unitrends Backup Console Interface by typing the command '<b>dpuconfig</b>' <pre class="code codeBlock" spellcheck="false" tabindex="0"> Unitrends Backup Console Interface 1. Network Setup 2. Console Access Password Setup 3. Firewall Settings 4. Advanced Options Please enter choice:</pre> </li> <li>Next select option 1. Network Setup</li> <li>Choose option 3. Configure IPMI LAN</li> <li>Type 'Y' to change the current IPMI configuration. <pre class="code codeBlock" spellcheck="false" tabindex="0"> Current IPMI IP address: 0.0.0.0 Current IPMI Netmask: 0.0.0.0 Current IPMI Gateway: 0.0.0.0 Edit IPMI configuration? [n/Y]:</pre> </li> <li>Set the IPMI LAN IP address, netmask, gateway and ADMIN password following the on-screen prompts. </li> </ol><div><i>Important: Set the IPMI LAN ADMIN password to a unique password. </i></div> <ol start="6"><li>Skip to step 2.</li></ol><p><br><br>b) Enable IPMI LAN from the BIOS menu</p> <ol start="1"><li>Reboot and press DEL during the boot cycle to enter the BIOS menu</li> <li>Select Advanced then IPMI to access the IPMI menu</li> <li>For specific details, see <a rel="nofollow" href="/home/leaving?allowTrusted=1&target=https%3A%2F%2Funitrends-support.zendesk.com%2Fhc%2Fen-us%2Farticles%2F360013263938">IPMI-LAN Configuration from BIOS for Remote Management</a><span id="articleDetail:j_id400"><span id="articleDetail:j_id400:j_id401:urlName">.</span></span> </li> <li>Skip to step 2.</li> </ol><div> <br><br> </div> <div> c) Enable IPMI LAN from the ipmiutil command utility:</div> <div> </div> <div> </div> <ol start="1"><li>Use an SSH client such as <a rel="nofollow" href="/home/leaving?allowTrusted=1&target=https%3A%2F%2Fwww.chiark.greenend.org.uk%2F%7Esgtatham%2Fputty%2Flatest.html">PuTTY </a>to access the Unitrends system at the command line level. Note: Ensure you have the OS <a rel="nofollow" href="/home/leaving?allowTrusted=1&target=https%3A%2F%2Funitrends-support.zendesk.com%2Fhc%2Fen-us%2Farticles%2F360013244978">password</a> to access the Unitrends system’s command line. The OS password may differ from the password used to access the User Interface.</li> <li>Run the ipmiutil command below to specify the ip address, account, password and to prompt the user for the IPMI LAN remote password.</li> </ol> <pre class="code codeBlock" spellcheck="false" tabindex="0"> # ipmiutil lan –e –l <<IPMI LAN ip address>> –u ADMIN –p <<password>> –y 2</pre> <p><i>Hint: If ipmiutil option –y is not available (version < 2.9.1), you should run the following command to set the IPMI LAN port to failover mode. See the Notes section of this article for more information on failover, shared or dedicated configurations.</i></p> <pre class="code codeBlock" spellcheck="false" tabindex="0"> # ipmiutil smcoem lanport failover</pre> <h2 data-id="connecting-to-the-ipmi-interface"> <br>Connecting to the IPMI interface</h2> Now, you can connect a browser to the IP (e.g. http <img class="emoji" src="https://kaseya.vanillacommunities.com/resources/emoji/confused.png" title=":/" alt=":/" height="20" loading="lazy"></img>/<<ip address>) to use the SuperMicro IPMI web UI. This includes a KVM Console function. This requires a KVM Java plugin which will install on the browser. <div> <img alt="User-added image" src="https://us.v-cdn.net/6032361/uploads/migrated/JH7XDMW9C4Z8/eid-ka03r0000015arq-feoid-00n40000003czqx-refid-0em1w000000vr0v." class="embedImage-img importedEmbed-img"></img><br> <img alt="User-added image" height="466" src="https://us.v-cdn.net/6032361/uploads/migrated/6CKC1QBWF3A9/eid-ka03r0000015arq-feoid-00n40000003czqx-refid-0em1w000000vr2b." width="622" class="embedImage-img importedEmbed-img"></img></div> <ul><li>You can also run ipmi commands from the ipmiutil client utility from a client system (e.g. Windows). </li></ul><div>a) Download the ipmiutil client utility from the <a rel="nofollow" href="/home/leaving?allowTrusted=1&target=http%3A%2F%2Fipmiutil.sourceforge.net%2F">ipmiutil</a><a rel="nofollow" href="/home/leaving?allowTrusted=1&target=http%3A%2F%2Fipmiutil.sourceforge.net%2F"> </a><a rel="nofollow" href="/home/leaving?allowTrusted=1&target=http%3A%2F%2Fipmiutil.sourceforge.net%2F">sourceforge</a><a rel="nofollow" href="/home/leaving?allowTrusted=1&target=http%3A%2F%2Fipmiutil.sourceforge.net%2F"> webpage</a>.<br>b) Run the installer package to install the client utility.<br><i>Hint: For Windows, look for the latest .msi installer under IPMIUTIL FILES on the left of the page.</i><br><img alt="User-added image" height="349" src="https://us.v-cdn.net/6032361/uploads/migrated/9WIIUJQLWP2M/eid-ka03r0000015arq-feoid-00n40000003czqx-refid-0em1w000000vqyz." width="426" class="embedImage-img importedEmbed-img"></img><img alt="User-added image" height="357" src="https://us.v-cdn.net/6032361/uploads/migrated/VFMJW0VZ9UXR/eid-ka03r0000015arq-feoid-00n40000003czqx-refid-0em1w000000vqye." width="434" class="embedImage-img importedEmbed-img"></img><img alt="User-added image" height="343" src="https://us.v-cdn.net/6032361/uploads/migrated/JE7V5PUN7CB9/eid-ka03r0000015arq-feoid-00n40000003czqx-refid-0em1w000000vqyj." width="417" class="embedImage-img importedEmbed-img"></img></div> <p> </p> <ol start="4"><li>Run Common ipmiutil commands from </li></ol><p>Open an elevated command prompt (as Administrator) to run ipmiutil commands.</p> <ul><li>Get the sensors: <br><b>ipmiutil sensor –c –N <<ip address>> –U ADMIN –P <<password>></b><br><img alt="User-added image" height="342" src="https://us.v-cdn.net/6032361/uploads/migrated/9DOOI0RFGY3X/eid-ka03r0000015arq-feoid-00n40000003czqx-refid-0em1w000000vr0g." width="657" class="embedImage-img importedEmbed-img"></img></li></ul> <ul><li>Get the firmware log (SEL):<br><b>ipmiutil sel -e –N <<ip address>> –U ADMIN –P <<password>></b> </li></ul><ul><li>Power cycle the unit: WARNING: do this only when the unitrends OS is not running. <br><b>ipmiutil reset -c –N <<ip address>> –U ADMIN –P <<password>></b> </li></ul><ul><li>Start a Serial-Over-LAN console session (must configure a serial console first):<br><b>ipmiutil sol -a –N <<ip address>> –U ADMIN –P <<password>> </b> </li> <li>Access the IPMI Web User Interface</li> </ul><ol start="5"><li>For advanced user, see the <a rel="nofollow" href="/home/leaving?allowTrusted=1&target=http%3A%2F%2Fipmiutil.sourceforge.net%2Fdocs%2FUserGuide">ipmiutil user guide</a> for additional options and command line arguments.</li></ol><br><br>To disable IPMI LAN and set its IP to 0.0.0.0 run this command: <p><b>ipmiutil lan –d</b></p> <br>ipmiutil lan -d<h2 data-id="notes"><strong>NOTES</strong></h2> <p></p> <ol><li>IPMI has three options - Failover, Shared (or On-Board), and Dedicated.</li></ol><div>If you choose the On-Board or Failover, the only other port that IPMI use (other than the dedicated one) is LAN port 1. The other LAN ports on 2,3, or 4 are not wired for IPMI functionalities.</div> <ol start="2"><li>To disable IPMI LAN and set its IP to 0.0.0.0 run this:</li></ol><p><b>ipmiutil lan –d</b></p> <h3 data-id="third-party-sources">Third-Party Sources</h3> <p>See <a rel="nofollow" href="/home/leaving?allowTrusted=1&target=http%3A%2F%2Fipmiutil.sourceforge.net%2Fdocs%2FUserGuide">http://ipmiutil.sourceforge.net/docs/UserGuide</a> for a detailed User Guide</p> <p>See <a rel="nofollow" href="/home/leaving?allowTrusted=1&target=http%3A%2F%2Fipmiutil.sourceforge.net">http://ipmiutil.sourceforge.net</a> for binaries, source, and other files.</p> <p><a rel="nofollow" href="/home/leaving?allowTrusted=1&target=http%3A%2F%2Fwww.intel.com%2Fcontent%2Fwww%2Fus%2Fen%2Fservers%2Fipmi%2Fipmi-home.html">http://www.intel.com/content/www/us/en/servers/ipmi/ipmi-home.html</a></p> <p><b>Related Articles</b></p> <p><a rel="nofollow" href="/home/leaving?allowTrusted=1&target=https%3A%2F%2Funitrends-support.zendesk.com%2Fhc%2Fen-us%2Farticles%2F360013263938">IPMI-LAN Configuration from BIOS for Remote Management</a><br><br><a rel="nofollow" href="/home/leaving?allowTrusted=1&target=https%3A%2F%2Funitrends-support.zendesk.com%2Fhc%2Fen-us%2Farticles%2F360013160377">IPMI - disabling IPMI LAN for DHCP</a><br><br><a rel="nofollow" href="/home/leaving?allowTrusted=1&target=https%3A%2F%2Funitrends-support.zendesk.com%2Fhc%2Fen-us%2Farticles%2F360013245298">IPMI DHCP traffic</a><br><br><a rel="nofollow" href="/home/leaving?allowTrusted=1&target=https%3A%2F%2Funitrends-support.zendesk.com%2Fhc%2Fen-us%2Farticles%2F360013168457">IPMI KVM console mouse correction</a><br><br><a rel="nofollow" href="/home/leaving?allowTrusted=1&target=https%3A%2F%2Funitrends-support.zendesk.com%2Fhc%2Fen-us%2Farticles%2F360013160357">Diagnosing memory errors with IPMI</a><br><br><a rel="nofollow" href="/home/leaving?allowTrusted=1&target=https%3A%2F%2Funitrends-support.zendesk.com%2Fhc%2Fen-us%2Farticles%2F360013175137">Red LED on the front of my Unitrends appliance is lit - diagnosing it with IPMI</a><br><br><a rel="nofollow" href="/home/leaving?allowTrusted=1&target=https%3A%2F%2Funitrends-support.zendesk.com%2Fhc%2Fen-us%2Farticles%2F360013274578">Unitrends Security: IPMI Port Vulnerabilities</a></p> </article> </main>