IPMI Integration module allows to remotely control every single server configured in our system via IPMI protocol.
- Control Servers Remotely - Power On/Off/Reset
- Read Data From Server Sensors With Poller Submodules
- View System Event Logs
- Access Device SUmmary
- Check Detailed Information About BMC Plate
- Manage Access Permission For Administrators
In order to configure the IPMI protocol settings, please move to the summary page of a device you are interested in and use the action button located in the header and then follow to Settings tab.
The form requires the following fields to be provided:
- IPMI Enabled - define for which server IPMI protocol will be enabled
- IPMI IP Address - set up the IP address
- IPMI Username - provide the IPMI username
- IPMI Password - provide IPMI user password
- IPMI Protocol Version - this section displays the information about protocol which is running on a selected device, you can choose from 1.0, 1.5 and 2.0 version
- IPMI Proxy Server - determine the device which directs forward the set of commands concerning IPMI
- IPMI Board Type - you have to specify the executive type, you can choose from Dell Drac, Supermicro or Generic
- IPMI Port (UDP) - assign the port for the IpmiTool command, 623 as default
- IPMI Remote Console Port - this port is used along with applet download for Java Console
After saving your data you may use Test IPMI Connection button which checks the connection itself by sending the command “Session Info Active”.
To use the proxy server you need an additional server with OS:
- Debian 9 “Stretch”
- Ubuntu 18.04 LTS (Bionic Beaver)
Also, the server should have access to the internal network in which the IPMI IP is located. We recommend installing the proxy software on a separate server (either virtual or dedicated). The proxy server can have both a public and private IP address, but it must be available from EasyDCIM. It is possible to configure proxy on the EasyDCIM server, but we advise against it since every time you are using a proxy server with third-party software installed, the risk of unauthorized access to the target server significantly rises. Finally, please keep in mind that proxy increases the load on the proxy server, consequently slowing down the application.
Principle of operation
The remote JAVA console is downloaded directly from the server manufacturer’s panel, using the specific CURL commands. Additionally, to download the JAVA console, you need a public address of the IPMI interface which may lead to unauthorized access. If such a situation occurs, you can create a proxy server for IPMI connections in the application that will serve as a gateway between the application and the end user. The proxy server also channels all IPMI commands such as device power-on, restart or power-off. Owing to such a solution, none of the IPMI interfaces requires a public IP address and all important operations can be carried out in a secure private data center network.
Module at work
- The VNC server and the software required to display the IPMI interface and the remote console will be installed on the proxy server.
- The webockify server, which redirects traffic to the VNC server and back, will start on the server with EasyDCIM.
- noVNC, which refers to websockify locally and gets an image with the IPMI interface in the browser through the VNC server will be launched on the server with EasyDCIM.
On the EasyDCIM server, you must allow incoming traffic for the port range from 6081 to 6200.
The following operations are performed on the proxy server:
- Creates a new user called easydcim_vnc_X to be able to start the VNC server
- Installs the necessary system packages (chromium, java etc.)
- Creates an exception file for Java
- Downloading a JAVA console via the EasyDCIM API or launching a factory IPMI panel
- Creating a connection between EasyDCIM and the VNC server
The proxy server must have access to EasyDCIM (API)!
VNC session with downloaded JAVA console:
VNC session with IPMI manufacturer’s factory panel. You can use the “Send Login” and “Send Password” buttons to send your IPMI login and password to the login form.
The proxy server uses a range of ports to establish a connection between VNC and EasyDCIM.
The range of ports used by a proxy server:
- start port: 5901
- end port: 6000
The range of ports used by a EasyDCIM server:
- start port: 6081
- end port: 6200
Please remember that access to these ports must be public. All other ports can be blocked by the firewall.
Remote Device Management
The module grants to the options to remotely turn off, turn on and restart the device with IPMI protocol support. If you want to perform one of these actions, simply move to summary section of the device. If IPMI module is active then in the header, next to the Actions button, you will have an opportunity to control the device remotely.
To perform a demanded action, please choose it from IPMI Power list as available.
Executing commands for the particular actions:
- Power on
- Power cycle
- Power off
EasyDCIM allows to run the remote console for Dell Drac and Supermicro devices. To proceed with this action simply go to device Summary Section. If the IPMI Board Type field has been set for Dell Drac or Supermicro then in Summary Section additional box will be displayed:
To enter the console click on Launch Console button. Afterwards please download and run the applet.