jared at puck.nether.net
Mon Jun 2 14:14:50 UTC 2014
My IPMI (super micro) you can put v6 and v4 filters into for protecting the ip space from trusted sources. Has my home static ip ranges and a few intermediary ranges that I also have access to.
> On Jun 2, 2014, at 5:10 AM, Randy Bush <randy at psg.com> wrote:
> so how to folk protect yet access ipmi? it is pretty vulnerable, so 99%
> of the time i want it blocked off. but that other 1%, i want kvm
> console, remote media, and dim sum.
> currently, i just block the ip address chunk into which i put ipmi at
> the border of the rack. when i want access, i reconfig the acl. bit of
> a pita.
> anyone care to share better idea(s)? thanks.
More information about the NANOG