[Info-vax] Integrity iLO Configuration?

[Dave Froble]

On 6/27/2021 6:03 AM, Jan-Erik Söderholm wrote:
> Den 2021-06-27 kl. 05:41, skrev Dave Froble:
>> On 6/26/2021 10:33 PM, Stephen Hoffman wrote:
>>> On 2021-06-27 01:42:04 +0000, Dave Froble said:
>>>
>>>> Ok, back to the iLO....
>>>>
>>>> My next question is "what good methods are there for learning to talk
>>>> to the iLO?"  If I got to play with this beast, at least I can try to
>>>> do it correctly.
>>>
>>> Setup and general info for using iLO 2:
>>> http://h10032.www1.hp.com/ctg/Manual/c00553302.pdf
>>>
>>> Connect the iLO port to the network, configure the iLO for a static IP
>>> address either outside of your DHCP address pool or coordinated with
>>> your DHCP by MAC address, disable IMPI access on the iLO, and then use
>>> ssh to access the iLO. If your ssh is new enough, you'll have to
>>> downgrade the connection. If your ssh is outdated, it'll probably also
>>> not notice the ssh problems with the iLO. Probably want to reset the
>>> default passwords and/or add your own iLO admin user, too.
>>>
>>> From a semi-recent Unix or Linux or macOS system: ssh -o
>>> HostKeyAlgorithms=ssh-rsa,ssh-dss -o
>>> KexAlgorithms=diffie-hellman-group1-sha1 -o Ciphers=aes128-cbc,3des-cbc
>>> -o MACs=hmac-md5,hmac-sha1 User at Server.Example.Com
>>>
>>> telnet access is also possible, with all the issues incumbent in that
>>> path.
>>>
>>> How to disable IPMI access from the management processor command menu:
>>> MP:CM> sa -lanipmi d
>>>
>>> Remote access monitoring tools can or do require IPMI be enabled,
>>> unfortunately.
>>>
>>> iLO 2 scripting: http://h10032.www1.hp.com/ctg/Manual/c02237707.pdf
>>>
>>> Some of the iLO docs around are for ProLiant, so you might have to
>>> ignore some parts of the doc related to that.
>>>
>>>
>>
>> Thanks ...
>>
>> My intentions are to change the iLO IP address to be accessable from
>> my internal network,
>
> I haven't used any Itanium or iLO, but in a home/lab enviornment, I'd
> probably first try with a telnet connection, *if* that gives access to
> the same functionallity as ssh with all issues that comes with that.
>
>> then after looking at what is there, get VMS V8l.4 2L3 and the latest
>> TCP/IP, install on system disk, and clear the other disks.  Currently
>> has a RAID set-up, but I will do away with that. Perhaps remove most
>> of the disk drives, unless I can shut them off while still installed
>> in the box.
>
> Remove/shutoff disks for noice reasons?
>
>>
>> One system disk, one disk for backup of system,
>
> On a 146 disk you will have room for many backup images files, no reason
> to allocate a full disk for a disk-to-disk backup.
>
>> and one disk with VMS distribution image.
>
> Yes, the bootable base distribution. The layeared disks images
> can be mounted using LD. No need for physical disks for them.
>
> Maybe you have said before, but what Itenium model is it?
>
>   Should be all I need.
>

It is an RX 2660

-- 
David Froble                       Tel: 724-529-0450
Dave Froble Enterprises, Inc.      E-Mail: davef at tsoft-inc.com
DFE Ultralights, Inc.
170 Grimplin Road
Vanderbilt, PA  15486