Re: [Ipmitool-devel] IPMI Unable to ping

SourceForge Headquarters 1320 Columbia Street Suite 310 San Diego, CA 92101 +1 (858) 422-6466

Hi all,

I talked to Supermicro ppl and they said:

I just consult our IPMI engineer, and the IPMI channel 1 is for LAN.
Channel 2, or 3 is for something else but we don't know yet.

Is this good enough that IPMI card has LAN channel connected?

When I do 'ipmitool channel info 1'

 [root@4012a24 home]# ipmitool channel info 1

Channel 0x1 info:

  Channel Medium Type   : 802.3 LAN

  Channel Protocol Type : IPMB-1.0

  Session Support       : multi-session

  Active Session Count  : 0

  Protocol Vendor ID    : 7154

  Volatile(active) Settings

    Alerting            : enabled

    Per-message Auth    : enabled

    User Level Auth     : enabled

    Access Mode         : always available

  Non-Volatile Settings

    Alerting            : enabled

    Per-message Auth    : enabled

    User Level Auth     : enabled

    Access Mode         : always available

It looks to me it is setup correctly. :-(

Thx again!

________________________________

From: Cress, Andrew R [mailto:and...@in...] 
Sent: Thursday, August 07, 2008 1:58 PM
To: Choi, Paul; ipm...@li...
Subject: RE: [Ipmitool-devel] IPMI Unable to ping

The Link Auth parameter being false should still work.  Mine is set up
that way and it works.

Perhaps what James mentioned is the key.   Making sure that you have
configured the right LAN channel that is connected.  

Is there a LAN channel dedicated to the IPMI card?  

How many IPMI LAN channels are there?

ipmitool channel info N

will show the IPMI channels, where N=1,2,3, etc. and the LAN channels
will have Medium Type = 802.3 LAN.

Andy

________________________________

From: Choi, Paul [mailto:pau...@lm...] 
Sent: Thursday, August 07, 2008 1:34 PM
To: Cress, Andrew R; ipm...@li...
Subject: RE: [Ipmitool-devel] IPMI Unable to ping

Andy,

For enabled user on my new IPMI card:

#ipmitool user list 1

ID         Name    Callin    Link Auth           IPMI Msg
Channel Priv Limit

1                      true       false                 true
ADMINISTRATOR

2          ADMIN  true       false                 true
ADMINISTRATOR

For old IPMI card:

ID         Name    Callin    Link Auth           IPMI Msg
Channel Priv Limit

2          ADMIN  true       true                   true
ADMINISTRATOR

3 ~ 10   NO ACCESS

Only difference I see is Link Auth. How can I set it up?

Thx again.

Paul

________________________________

From: Cress, Andrew R [mailto:and...@in...] 
Sent: Thursday, August 07, 2008 1:07 PM
To: Choi, Paul; ipm...@li...
Subject: RE: [Ipmitool-devel] IPMI Unable to ping

Paul,

ipmitool channel getaccess 1 

will list access for all users for the lan channel 1

ipmitool user list 1

will list the users that are enabled for lan channel 1

Andy

________________________________

From: Choi, Paul [mailto:pau...@lm...] 
Sent: Thursday, August 07, 2008 11:18 AM
To: Cress, Andrew R; ipm...@li...
Subject: RE: [Ipmitool-devel] IPMI Unable to ping

Thx for replying

Is the IPMI LAN channel enabled?

'Ipmitool -I open lan set 1 access on' Is this good enough to enable
channel?

Is the admin user enabled for the LAN channel?

How do I do this? 'ipmitool -I open lan set 1 user ADMIN' ?

Is the BMC IPMI 1.5 or IPMI 2.0?  

IPMI 2.0

Sorry if these basic questions. I am kind of new on ipmitool.

Thx again

________________________________

From: Cress, Andrew R [mailto:and...@in...] 
Sent: Thursday, August 07, 2008 10:38 AM
To: Choi, Paul; ipm...@li...
Subject: RE: [Ipmitool-devel] IPMI Unable to ping

Three things to check:

Is the IPMI LAN channel enabled?

Is the admin user enabled for the LAN channel?

Is the BMC IPMI 1.5 or IPMI 2.0?  

Andy

________________________________

From: ipm...@li...
[mailto:ipm...@li...] On Behalf Of Choi,
Paul
Sent: Wednesday, August 06, 2008 9:12 AM
To: ipm...@li...
Subject: [Ipmitool-devel] IPMI Unable to ping

Hi

I set IPMI up in RedHat 4 and now I am trying it in RedHat5 (with
different machines). I can set mac, ip, etc using ipmitool but I can't
access it from outside. It won't ping and if I do:

#ipmitool chassis power status -I lanplus -U ADMIN -P ADMIN -H
10.2.12.124

Error: Unable to establish IPMI v2 / RMCP+ session

Unable to get Chassis Power Status.

Here is my setting:

Set in Progress         : Set In Progress

Auth Type Support       : NONE MD2 MD5 PASSWORD 

Auth Type Enable        : Callback : 

                        : User     : MD5 

                        : Operator : MD5 

                        : Admin    : MD5 

                        : OEM      : MD5 

IP Address Source       : Static Address

IP Address              : 10.2.12.124

Subnet Mask             : 255.255.0.0

MAC Address             : ac:29:0a:02:0c:7c

SNMP Community String   : public

IP Header               : TTL=0x40 Flags=0x40 Precedence=0x00 TOS=0x10

BMC ARP Control         : ARP Responses Enabled, Gratuitous ARP Disabled

Gratituous ARP Intrvl   : 2.0 seconds

Default Gateway IP      : 0.0.0.0

Default Gateway MAC     : 00:00:00:00:00:00

Backup Gateway IP       : 0.0.0.0

Backup Gateway MAC      : 00:00:00:00:00:00

RMCP+ Cipher Suites     : 0,1,2,3,6,7,8,11,12

Cipher Suite Priv Max   : Xaaaaaaaaaaaaaa

                        :     X=Cipher Suite Unused

                        :     c=CALLBACK

                        :     u=USER

                        :     o=OPERATOR

                        :     a=ADMIN

                        :     O=OEM

This is the exact setting from my previous IPMI card. It has no problem
pinging (of course not from itself). I checked ip and mac address of the
NIC but they are different. I looked at BIOS, and it looks like my older
IPMI servers. 

Am I missing something? 

Oh here is HWs that I am using:

Supermicro H8DA3-2 with AOC-SIMLC

Supermicro H8DMU+ with AOC-SIMSO

Unfortunately, using old IPMI card on new board isn't an option (won't
fit). 

Thx