Inventec P47 series, Руководство по обслуживанию

Страница: 111 / 129

K800G4 BMC Specification
11
9. RMCP(IPMI v1.5)/RMCP+(IPMI v2.0) and Payload Support
"Payloads" are a capability specified for RMCP+ that enable an IPMI session to carry types of traffic that are in addition to
IPMI Messages. In this project we support following payload type, Authentication Algorithm, Integrity Algorithm, and
Confidentiality Algorithm. In IPMI v2.0 Spec, the RMCP+ session connection support one-key & two-key login option. This
function also is implemented in this project. Following list the RMCP+ and payload characteristics in this project.
9.1 Payload Type List
Payload Type Number Type
Major Format Version
B[7:4]
Minor Format Version
B[3:0]
0h IPMI Message 0x01 0x00
1h SOL (serial over LAN) 0x01 0x00
9.2 RMCP Payloads
Authentications Status
OEM Disable
Straight Password Enable
MD5 Enable
MD2 Enable
None Authentication Enable
9.3 RMCP+ Payloads
Algorithm Admin Operator User Callback OEM
Authentication
None O X O O X
HMAC SHA1 O O O O X
HMAC MD5 X X X X X
HMAC SHA2 X X X X X
Integrity
None O O O O X
HMAC SHA1 96 O O O O X
HMAC MD5 128 O O X X X
MD5 128 X X X X X
HMAC SHA2 128 X X X X X
Confidentiality
None O O O O X
AES CBC 128 O O O O X
XRC4 128 X X X X X
XRC4 40 X X X X X
9.4 Cipher Suite of RMCP+
ID characteristics
Cipher
Suite
Authentication
Algorithm
Integrity
Algorithm(s)
Confidentiality
Algorithm(s)
Cipher Suite
Priv. Max
1 S 01h, 00h, 00h
RAKP-HMAC-SHA1
None None Administrator
2 S,A 01h, 01h, 00h
HMAC-SHA1-96
None Administrator
3 S,A,E 01h, 01h, 01h AES-CBC-128 Administrator
Key:
S = authenticated session setup (correct role, username and password/key required to establish session)
A = authenticated payload data supported.
E = authentication and encrypted payload data supported