ipmi access

Jared Mauch jared at puck.nether.net
Mon Jun 2 14:14:50 UTC 2014


My IPMI (super micro) you can put v6 and v4 filters into for protecting the ip space from trusted sources. Has my home static ip ranges and a few intermediary ranges that I also have access to.

> On Jun 2, 2014, at 5:10 AM, Randy Bush <randy at psg.com> wrote:
> 
> so how to folk protect yet access ipmi?  it is pretty vulnerable, so 99%
> of the time i want it blocked off.  but that other 1%, i want kvm
> console, remote media, and dim sum.
> 
> currently, i just block the ip address chunk into which i put ipmi at
> the border of the rack.  when i want access, i reconfig the acl.  bit of
> a pita.
> 
> anyone care to share better idea(s)?  thanks.
> 
> randy



More information about the NANOG mailing list