[Info-vax] Integrity iLO Configuration?

[Stephen Hoffman]

On 2021-06-27 01:42:04 +0000, Dave Froble said:

> Ok, back to the iLO....
> 
> My next question is "what good methods are there for learning to talk 
> to the iLO?"  If I got to play with this beast, at least I can try to 
> do it correctly.

Setup and general info for using iLO 2: 
http://h10032.www1.hp.com/ctg/Manual/c00553302.pdf

Connect the iLO port to the network, configure the iLO for a static IP 
address either outside of your DHCP address pool or coordinated with 
your DHCP by MAC address, disable IMPI access on the iLO, and then use 
ssh to access the iLO. If your ssh is new enough, you'll have to 
downgrade the connection. If your ssh is outdated, it'll probably also 
not notice the ssh problems with the iLO. Probably want to reset the 
default passwords and/or add your own iLO admin user, too.

>From a semi-recent Unix or Linux or macOS system: ssh -o 
HostKeyAlgorithms=ssh-rsa,ssh-dss -o 
KexAlgorithms=diffie-hellman-group1-sha1 -o Ciphers=aes128-cbc,3des-cbc 
-o MACs=hmac-md5,hmac-sha1 User at Server.Example.Com

telnet access is also possible, with all the issues incumbent in that path.

How to disable IPMI access from the management processor command menu: 
MP:CM> sa -lanipmi d

Remote access monitoring tools can or do require IPMI be enabled, 
unfortunately.

iLO 2 scripting: http://h10032.www1.hp.com/ctg/Manual/c02237707.pdf

Some of the iLO docs around are for ProLiant, so you might have to 
ignore some parts of the doc related to that.


-- 
Pure Personal Opinion | HoffmanLabs LLC