Hi IPMI experts,

On some older machines (e.g.IBM x3650) I failed to do IPMI remote 
management with "lan" or "lanplus" option:

# ipmitool -I lanplus -H 10.0.8.26 -L ADMINISTRATOR -U xxxxx -P xxxxx 
lan print 1
Error: Unable to establish IPMI v2 / RMCP+ session
Get Channel Info command failed


While I can do it locally with "-I open":

$ ipmitool -I open -H 10.0.8.26 -L ADMINISTRATOR -U xxxx -P xxxx lan print 1
Set in Progress         : Set In Progress
Auth Type Support       : NONE MD2 MD5 PASSWORD
Auth Type Enable        : Callback :
                         : User     : MD2 MD5 PASSWORD
                         : Operator : MD2 MD5 PASSWORD
                         : Admin    : MD5
                         : OEM      :
IP Address Source       : Static Address
IP Address              : 10.0.8.26
Subnet Mask             : 255.255.0.0
MAC Address             : 00:21:5e:cd:92:75
SNMP Community String   : public
IP Header               : TTL=0x40 Flags=0x40 Precedence=0x00 TOS=0x10
BMC ARP Control         : ARP Responses Enabled, Gratuitous ARP Disabled
Gratituous ARP Intrvl   : 2.0 seconds
Default Gateway IP      : 0.0.0.0
Default Gateway MAC     : 00:00:00:00:00:00
Backup Gateway IP       : 0.0.0.0
Backup Gateway MAC      : 00:00:00:00:00:00
802.1q VLAN ID          : Disabled
802.1q VLAN Priority    : 0
RMCP+ Cipher Suites     : 0,1,2,3,4
Cipher Suite Priv Max   : aaaaaXXXXXXXXXX
                         :     X=Cipher Suite Unused
                         :     c=CALLBACK
                         :     u=USER
                         :     o=OPERATOR
                         :     a=ADMIN
                         :     O=OEM



I am not sure if it relates to the cipher suites, or if it's supported 
in the suites.
I tried to change the cipher_privs to something like aaaaaaaaaaaaaaa as 
a test, it returns:

$ ipmitool  lan set 1 cipher_privs aaaaaaaaaaaaaaa
LAN Parameter Data does not match!  Write may have failed.

I could only change the first 5 'a's (aaaaa..........).

Does it mean that it only support limited cipher suites?


Or is there anything else I can do to implement the remote IPMI 
access/management?


Thanks,

Erming




-- 
---------------------------------------------
  Erming Pei, Ph.D
  Senior System Analyst; Grid/Cloud Specialist

  Research Computing Group
  Information Services & Technology
  University of Alberta, Canada

  Tel: +1 7804929914        Fax: +1 7804921729
---------------------------------------------


------------------------------------------------------------------------------
Monitor Your Dynamic Infrastructure at Any Scale With Datadog!
Get real-time metrics from all of your servers, apps and tools
in one place.
SourceForge users - Click here to start your Free Trial of Datadog now!
http://pubads.g.doubleclick.net/gampad/clk?id=241902991&iu=/4140
_______________________________________________
Ipmitool-devel mailing list
Ipmitool-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/ipmitool-devel

Reply via email to