IntelÃ‚Â® Server System Server System "Emerald Ridge ... - CTL

More documents

Recommendations

Info

Intel® Server System "Emerald Ridge” ” Integrated Baseboard Management Controller EPS 錯誤 ! 尚未定義樣式。4.8.2.2.2 Hex-ASCII CommandsThe BMC supports the IPMI binary commands specified in this document.The BMC supports the privilege level scheme for terminal mode text commands as specified inTable 554.8.2.3 BridgingThe BMC supports the optional bridging functionality described in the Intelligent PlatformManagement Interface Specification Second Generation v2.0.4.8.2.4 Invalid PasswordsIf three successive invalid Activate Session commands are received on the EMP interface, theBMC delays 30 seconds before accepting another Activate Session command.4.9 LAN InterfaceThe BMC implements both the IPMI 1.5 and IPMI 2.0 messaging models. These provide out-ofbandlocal area network (LAN) communication between the BMC and the network.See the Intelligent Platform Management Interface Specification Second Generation v2.0 fordetails about the IPMI-over-LAN protocol.Run-time determination of LAN channel capabilities can be determined both by standard IPMIdefined mechanisms.4.9.1 IPMI 1.5 MessagingThe communication protocol packet format consists of IPMI requests and responsesencapsulated in an IPMI session wrapper for authentication, and wrapped in an RMCP packet,which is wrapped in an IP/UDP packet. Although authentication is provided, no encryption isprovided, so administrating some settings, such as user passwords, through this interface is notadvised.Session establishment commands are IPMI commands that do not require authentication or anassociated session.The BMC supports the following authentication types over the LAN interface.None (no authentication)Straight password / keyMD54.9.2 IPMI 2.0 MessagingIPMI 2.0 messaging is built over RMCP+ and has a different session establishment protocol.The session commands are defined by RMCP+ and implemented at the RMCP+ level, not IPMIcommands. Authentication is implemented at the RMCP+ level. RMCP+ provides link payloadencryption, so it is possible to communicate private / sensitive data (confidentiality).The BMC supports the following cipher suites:Revision 1.1Intel ® Confidential 65
錯誤 ! 尚未定義樣式。Intel® Server System "Emerald Ridge” Integrated Baseboard Management Controller EPSTable 30. Supported RMCP+ Cipher SuitesIDAuthentication AlgorithmIntegrity Algorithm(s)Confidentiality Algorithm(s)0 1 RAKP-none None None1 RAKP-HMAC-SHA1 None None2 RAKP-HMAC-SHA1 HMAC-SHA1-96 None3 RAKP-HMAC-SHA1 HMAC-SHA1-96 AES-CBC-1286 RAKP-HMAC-MD5 None None7 RAKP-HMAC-MD5 HMAC-MD5-128 None8 RAKP-HMAC-MD5 HMAC-MD5-128 AES-CBC-12811 RAKP-HMAC-MD5 MD5-128 None12 RAKP-HMAC-MD5 MD5-128 AES-CBC-128Note:1. Cipher suite 0 defaults to callback privilege for security purposes. This may be changed by any administrator.For user authentication, the BMC can be configured with ‘null’ user names, whereby password /key lookup is done based on ‘privilege level only’, or with non-null user names, where the keylookup for the session is determined by user name.IPMI 2.0 messaging introduces payload types and payload IDs to allow data types other thanIPMI commands to be transferred. IPMI 2.0 serial-over-LAN is implemented as a payload type.Table 31. Supported RMCP+ Payload TypesPayload TypeFeatureIANA00h IPMI message N/A01h Serial-over-LAN N/A02h OEM explicit Intel (343)10h – 15h Session setup N/A4.9.3 RMCP / ASF MessagingThe BMC supports RMCP ping discovery in which the BMC responds with a pong message toan RMCP / ASF ping request. This is implemented per the Intelligent Platform ManagementInterface Specification Second Generation v2.0.4.9.4 BMC Embedded LAN ChannelsBMC hardware includes two dedicated 10/100 network interfaces,Interface 1: This interface is available from either of available NIC ports in system which can beshared with the host. Only one NIC may be enabled for management traffic at any time. Tochange the NIC enabled for management traffic, please use the “Write LAN Channel Port” OEMIPMI command. For more details on this command, please see Table 56.Interface 2: This interface is available from RMM3 which is dedicated management NIC and notshared with host.For these channels, support can be enabled for IPMI-over-LAN and DHCP.66Intel ConfidentialRevision 1.1
Page 1:
Intel ® Server System "Emerald Rid
Page 4 and 5:
錯誤 ! 尚未定義樣式
Page 6 and 7:
Page 8 and 9:
Page 10 and 11:
Page 12 and 13:
Page 14 and 15:
Page 16 and 17:
Page 18 and 19:
Page 20 and 21:
Page 22 and 23:
Page 24 and 25:
Page 26 and 27:
Page 28 and 29:
Page 30 and 31:
Page 32 and 33: 錯誤 ! 尚未定義樣式
Page 70 and 71: Intel® Server System "Emerald Ridg
Page 132 and 133:
Intel® Server System "Emerald Ridg
Page 134 and 135:
Page 136 and 137:
Page 138 and 139:
Page 140 and 141:
Page 142 and 143:
Page 144 and 145:
Page 146 and 147:
Page 148 and 149:
Page 150 and 151:
Page 152 and 153:
Page 154 and 155:
Page 156 and 157:
Intel® Server System "Emerald "Rid
Page 158 and 159:
Page 160 and 161:
Page 162 and 163:
Page 164 and 165:
Page 166 and 167:
Page 168 and 169:
Page 170 and 171:
Page 172 and 173:
Page 174 and 175:
Page 176 and 177:
Page 178 and 179:
Page 180 and 181:
Page 182 and 183:
Page 184 and 185:
Page 186 and 187:
Page 188 and 189:
Page 190 and 191:
Page 192 and 193:
Page 194 and 195:
Page 196 and 197:
show all

IntelÃ‚Â® Server System Server System "Emerald Ridge ... - CTL

Create successful ePaper yourself

Delete template?

Save as template?