6

I would like to know if it is possible to disable ipmi over lan via ipmitool.

Setting the IP to 0.0.0.0 as stated here http://support.unitrends.com/ikm/questions.php?questionid=642 did not do what I hoped for. In fact it did nothing.

  • ipmitool -I lanplus -H hostname -U user -a lan set 1 ipaddr 0.0.0.0

Ipmitool is the only ipmi management utility available on that jumphost.

I would alternatively be interested in ways to disable impi over lan via ssh on hp hosts.

For those that came here from google, here is how to disable ipmi over lan via ssh on dell hosts: connect via ssh to the idrac, open racadm and use it to disable this service. Documentation can be found here: http://web.mit.edu/cron/documentation/dell-server-admin/en/idrac1/chap09.htm

Feel free to post if you know something remotely connected :)

Thank you!

Benedikt Haug
  • 111

2 Answers2

3

Here is another way to disable lan channel :

ipmitool lan set 1 access off
Victor
  • 71
  • 1
  • 2
  • 9
1
ipmitool raw 0x6 0x40 0x01 0x40 0x44
ipmitool raw 0x6 0x40 0x01 0x80 0x84

The above command is "Set Channel Access" IPMI . Here we disable the IPMI messaging payload for channel 1 (byte-3).

Second command will disable volatile settings (LAN access will be disabled till next BMC reboot) First command will disable non-volatile settings (LAN access will remain disabled across BMC reboots)

rajaganesh87
  • 111