Opengear ACM5000, Руководство пользователя

Страница: 299 / 335

Console Server & Router User Manual
299
DESCRIPTION
This program lets you manage Intelligent Platform Management Interface (IPMI) functions of either the local system, via a
kernel device driver, or a remote system, using IPMI V1.5 and IPMI v2.0. These functions include printing FRU
information, LAN configuration, sensor readings, and remote chassis power control.
IPMI management of a local system interface requires a compatible IPMI kernel driver to be installed and configured. On
Linux this driver is called
OpenIPMI and it is included in standard distributions. On Solaris this driver is called BMC and is
inclued in Solaris 10. Management of a remote station requires the IPMI-over-LAN interface to be enabled and configured.
Depending on the particular requirements of each system it may be possible to enable the LAN interface using
ipmitool
over the system interface.
OPTIONS
-a Prompt for the remote server password.
-A < authtype >
Specify an authentication type to use during IPMIv1.5 lan session activation. Supported types are NONE,
PASSWORD, MD5, or OEM.
-c Present output in CSV (comma separated variable) format. This is not available with all commands.
-C < ciphersuite >
The remote server authentication, integrity, and encryption algorithms to use for IPMIv2 lanplus connections. See
table 22-19 in the IPMIv2 specification. The default is 3 which specifies RAKP-HMAC-SHA1 authentication,
HMAC-SHA1-96 integrity, and AES-CBC-128 encryption algorightms.
-E The remote server password is specified by the environment variable IPMI_PASSWORD .
-f < password_file >
Specifies a file containing the remote server password. If this option is absent, or if password_file is empty, the
password will default to NULL.
-h Get basic usage help from the command line.
-H < address >
Remote server address, can be IP address or hostname. This option is required for lan and lanplus interfaces.
-I < interface >
Selects IPMI interface to use. Supported interfaces that are compiled in are visible in the usage help output.
-L < privlvl >
Force session privilege level. Can be CALLBACK, USER, OPERATOR, ADMIN. Default is ADMIN.
-m < local_address >
Set the local IPMB address. The default is 0x20 and there should be no need to change it for normal operation.
-o < oemtype >
Select OEM type to support. This usually involves minor hacks in place in the code to work around quirks in
various BMCs from various manufacturers. Use
-o list to see a list of current supported OEM types.
-p < port >
Remote server UDP port to connect to. Default is 623.
-P < password >
Remote server password is specified on the command line. If supported it will be obscured in the process list.
Note! Specifying the password as a command line option is not recommended.
-t < target_address >
Bridge IPMI requests to the remote target address.
-U < username >
Remote server username, default is NULL user.
-v Increase verbose output level. This option may be specified multiple times to increase the level of debug output. If
given three times you will get hexdumps of all incoming and outgoing packets.
-V Display version information.
If no password method is specified then ipmitool will prompt the user for a password. If no password is entered at the
prompt, the remote server password will default to NULL.
SECURITY
The ipmitool documentation highlights that there are several security issues to be considered before enabling the IPMI
LAN interface. A remote station has the ability to control a system's power state as well as being able to gather certain