Dell EMC PowerSwitch Z9264F-ON BMC User Guide March 2021 March 2021 Rev.
Notes, cautions, and warnings NOTE: A NOTE indicates important information that helps you make better use of your product. CAUTION: A CAUTION indicates either potential damage to hardware or loss of data and tells you how to avoid the problem. WARNING: A WARNING indicates a potential for property damage, personal injury, or death. Copyright © 2018 Dell Inc. or its subsidiaries. All rights reserved. Dell, EMC, and other trademarks are trademarks of Dell Inc. or its subsidiaries.
Contents Chapter 1: About this guide........................................................................................................... 4 Information symbols............................................................................................................................................................ 4 Document revision history.................................................................................................................................................
1 About this guide This guide provides information for using the Dell EMC baseboard management controller (BMC). CAUTION: To avoid electrostatic discharge (ESD) damage, wear grounding wrist straps when handling this equipment. NOTE: Only trained and qualified personnel can install this equipment. Read this guide before you install and power up this equipment. This equipment contains two power cords. Disconnect both power cords before servicing.
Document revision history Table 1. Revision history Revision Date Description A00 2018-08 Initial release A01 2021-03 Removed broken link from the Date and time section. Added the IPMI commands section, Language note, and Appendix A: Firmware update. Updated the Default configuration restore, Hardware and software, and SNMP and email alerts sections. Updated to current Dell EMC standards.
2 Hardware and software support For the most current BMC update information, see the Z9264F-ON Release Notes. For more information about the intelligent platform management interface (IPMI), see the IPMI resources that is hosted by Intel at https://www.intel.com/content/www/us/en/servers/ipmi/ipmi-technical-resources.html. NOTE: The BMC out-of-band (OOB) network or LAN is not enabled for Trade Agreement Act-qualified (TAA) switches. The BMC OOB is enabled for non-TAA-qualified switches.
3 Configuration methods The diagnostic operating software (DIAG OS) running on the local processor has ipmitool installed by default. You can use the ipmitool both at the switch and remotely. Accessing BMC from the host does not require user name or password. The general syntax for using ipmitool is: NOTE: -I and -H are optional.
INTER_5.0V_volt | INTER_3.3V_volt | FPGA_1.0V_volt | FPGA_1.2V_volt | FPGA_1.8V_volt | FPGA_3.3V_volt | BMC_2.5V_volt | BMC_1.15V_volt | BMC_1.2V_volt | SWITCH_6.8V_volt| SWITCH_3.3V_volt| SWITCH_1.8V_volt| USB_5.0V_volt | NPU_1.2V_volt | NPU_VDDCORE_volt| NPU_VDDANLG_volt| BMC boot | SEL_sensor | 4.900 3.300 0.990 1.190 1.780 3.200 2.400 1.150 1.210 7.000 3.300 1.790 4.900 1.190 0.800 0.
To access BMC over a LAN, use the following ipmitool command: ipmitool [-c|-h|-v|-V] -I lanplus -H [-p ] [-U ] [-L ] [-a|-E|-P|-f ] [-o ] [-O ] [-C ] [-Y|[-K|- ] [-y ] [-e ] [-N ] [-R ] If needed, you can download ipmitool from the htps://sourceforge.net/ projects/ipmitool website. The commands to install ipmitool on Ubuntu or Fedora versions are as follows: 1.
bakgw ipaddr
To override the date and time that is used in the system event log (SEL) log, use the following command: root@dellemc-diag-os:~# ipmitool sel time get 08/01/2018 15:10:46 root@dellemc-diag-os:~# ipmitool sel time set usage: sel time set "mm/dd/yyyy hh:mm:ss" root@dellemc-diag-os:~# For ipmiutil/iseltime, download and install the binaries and documentation from http://ipmiutil.sourceforge.net. Also, various Linux distributions have binary packages prebuilt and available for download.
33 34 35 36 37 38 39 40 | | | | | | | | disabled, disabled, disabled, disabled, disabled, disabled, disabled, disabled, configurable configurable configurable configurable configurable configurable configurable configurable For more information, see the IPMI Specification v2.0 chapter 17.7 Event Filter Table and chapter 30.3 Set PEF Configuration Parameters Command. Alert policies and destinations For more information, see the IPMI Specification v2.0 chapter 17.11 Alert Policy Table and chapter 30.
The following output using the ipmitool lan alert print command shows that the configuration was successful: root@dellemc-diag-os:~# ipmitool lan alert print 1 1 Alert Destination : 1 Alert Acknowledge : Unacknowledged Destination Type : PET Trap Retry Interval : 0 Number of Retries : 0 Alert Gateway : Default Alert IP Address : 10.11.227.105 Alert MAC Address : 00:00:00:00:00:00 Alert policy setup To setup the alert policy, you must use the ipmitool raw command.
There are 10 entries for a user list. 1. Add a new user by modifying one of the empty entries in the user list using the following: $ ./ipmitool -H xx.xx.xxx.xx -I lanplus -U admin -P admin user set name 3 $ ./ipmitool -H xx.xx.xxx.xx -I lanplus -U admin -P admin user set password 3 Password for user 3: Password for user 3: Set User Password command successful (user 3) Step 1 creates a user with no access. 2. Set the privilege level for the user in Step 1 using the following: $ ./ipmitool -H xx.xx.
Product Asset Tag : D4SSG02 FRU Device Description : FRU_PSU1 (ID 1) Unknown FRU header version 0x00 FRU Device Description Board Mfg Date Board Mfg Board Product Board Serial Board Part Number : : : : : : FRU_PSU2 (ID 2) Fri Jan 12 18:47:00 2018 DELL PWR SPLY,495W,RDNT,DELTA CNDED0081G01GL 0GRTNKA02 FRU Device Description : FRU_FAN1 (ID 3) Unknown FRU header version 0x00 FRU Device Description Board Mfg Date Board Mfg Board Product Board Serial Board Part Number Product Manufacturer Product Name Produ
￭ Fh-NO ACCESS ● Request data byte (4)—User Session Limit. Optional—Sets how many simultaneous sessions are activated with the username associated with the user. If not supported, the username activates as many simultaneous sessions as the implementation supports. If an attempt is made to set a non-zero value, a CCh "invalid data field" error returns. ○ [7:4]-Reserved ○ [3:0]-User simultaneous session limit. 1=based. oh=only limited by the implementations support for simultaneous sessions.
Firewall To set a firewall, use the set firewall configuration command. Use parameters 0–3 to add the iptables rules and 4–7 to remove the iptables rules.
Table 3. Firewall parameters (continued) Parameter # Parameter data ● ● ● ● ● 0 = TCP 1 = UDP 2 = both TCP and UDP Data 2:3—port number [2:3]—MX byte first. Port number blocked or unblocked based on the state. Add the Pv4 port number range rule 3 Data 1:—Protocol TCP/UDP ● 0 = TCP ● 1 = UDP ● 2 = both TCP and UDP ● Data 2:5—port range ● [2:3]—Port number from the ports blocked or unblocked based on the state. ● [4:5]—Port number till ports are blocked or unblocked based on the state.
Table 3. Firewall parameters (continued) Parameter # Parameter data ● [4:5]—Port number till ports are blocked or unblocked based on the state. Flush IPv4 and IPv6 iptable 8 Flush all the rules set using iptables and ip6tables. Drop all 9 Add iptables rules to block IPv4 and IPv6 traffic to the BMC. The state selector is not used. ● Data1: Protocol ● Bit 7:2—Reserved ● Bit 1—IPv6 ● Bit 0—IPv4 Remove drop all rule 10 Remove iptables rules to block IPv4 and IPv6 traffic to the BMC.
Table 3. Firewall parameters (continued) Parameter # Parameter data ● Date 15-20—Stop time ● [15:16]—Year ● LS-byte first if little endian system. Two-byte data required to form year. Add the IPv4 port number with timeout rule 13 Data 1—Protocol TCP and UDP ● 0 = TCP ● 1 = UDP ● 2 = both TCP and UDP ● Data 2:3—port number ● [2:3]—Port number from the ports blocked or unblocked based on the state. ● Date 4:9—Start time ● [4:5]—Year ● LS-byte first if little endian system.
Table 3. Firewall parameters (continued) Parameter # Parameter data ● 17—minute Remove the IPv4 address with timeout rule 15 Data 1:4—IP address ● MS-byte first. The IPv4 address type blocked or unblocked based on the state. ● Date 5:10—Start time ● [5:6]—Year ● LS-byte first if little endian system. Two-byte data required to form year. ● 7—month ● 8—date ● 9—hour ● 10—minute ● Date 11-16—stop time ● [11:12]—Year ● LS-byte first if little endian system. Two-byte data required to form year.
Table 3. Firewall parameters (continued) Parameter # Parameter data ● LS-byte first if little endian system. Two-byte data required to form year. ● 6—month ● 7—date ● 8—hour ● 9—minute ● Date 10-15—stop time ● [10:11]—Year ● LS-byte first if little endian system. Two-byte data required to form year.
Table 3. Firewall parameters (continued) Parameter # Parameter data ● ● ● ● ● ● ● ● ● 6—hour 7—minute Date 8:13—Stop time [8:9]—Year LS-byte first if little endian system. Two-byte data required to form year. 10—month 11—date 12—hour 13—minute Remove drop all Ipv4 or IPv6 with timeout rule 20 Add iptables rules to block IPv4 and IPv6 traffic to the BMC. The state selector is not used.
Table 3. Firewall parameters (continued) Parameter # Parameter data Add IPv6 address range with timeout rule 22 Data 1:16—IPv6 address range ● [1:16]—Port number from the ports blocked or unblocked based on the state. ● [17:32]—Port number till the ports blocked or unblocked based on the state. ● Date 33:38—Start time ● [33:34]—Year ● LS-byte first if little endian system. Two-byte data required to form year.
Table 3. Firewall parameters (continued) Parameter # Parameter data ● ● ● ● ● ● ● ● ● ● ● 35—month 36—date 37—hour 38—minute Date 39:44—stop time [39:40]—Year LS-byte first if little endian system. Two-byte data required to form year. 41—month 42—date 43—hour 44—minute Add the IPv6 port number with timeout rule 25 Data 1—Protocol TCP and UDP ● 0 = TCP ● 1 = UDP ● 2 = both TCP and UDP ● Data 2:3—port number ● [2:3]—Port number from the ports blocked or unblocked based on the state.
Table 3. Firewall parameters (continued) Parameter # Parameter data ● Date 12-17—stop time ● [12:13]—Year ● LS-byte first if little endian system. Two-byte data required to form year. ● 14—month ● 15—date ● 16—hour ● 17—minute Remove the IPv6 port number with timeout rule 27 Data 1—Protocol TCP and UDP ● 0 = TCP ● 1 = UDP ● 2 = both TCP and UDP ● Data 2:3—port number ● [2:3]—Port number from the ports blocked or unblocked based on the state.
Table 3. Firewall parameters (continued) Parameter # Parameter data ● LS-byte first if little endian system. Two-byte data required to form year. ● 14—month ● 15—date ● 16—hour ● 17—minute Add the IPv6 address rule 29 Data 1:16—IPv6 address. ● MS-byte first. This is an IPv6 address that is blocked or unblocked based on state. Add the IPv6 address range rule 30 Data 1:16—IPv6 address range ● [1:16]—Starting IP address from which IPs are blocked or unblocked based on the state. ● [17.
Table 3. Firewall parameters (continued) Parameter # Parameter data ● [2:3]—Port number from the ports blocked or unblocked based on the state. Remove the IPv6 port number range rule 36 Data 1—Protocol TCP and UDP ● 0 = TCP ● 1 = UDP ● 2 = both TCP and UDP ● Data 2:5—port number ● [2:3]—Port number from the ports blocked or unblocked based on the state. ● [4:5]—Port number till the ports are blocked or u nblocked based on the state.
● Netfn—0x32 ● Command—0x68 Audit log configuration ● Request data byte 1—Cmd ○ [7:2] Reserved ○ [1:0] 01h–Audit log ● Request data byte 1—Status ○ [7:2] Reserved ○ [1:0] 01h–Disabled ○ 01h–Enable local ● Response data byte 1—00h-success ○ CCh=invalid data field ○ FFh=unspecified error ● Response data byte 1—Cmd ○ [7:2] Reserved ○ [1:0] 00h–system log ● Response data byte 2—Status ○ [7:2] Reserved ○ [1:0] 01h–Disabled ○ 01h–Enable local ● Response data byte 3-70 for REMOTE (68 bytes) or 3-7 for LOCAL (5 by
● Command—0x66 ● Response byte 1—Completion code Default settings The following tables list the default settings after a switch restore. Table 4.
4 Host power control The following are host power control commands: ● ● ● ● Power Off—the ipmitool powers off Power On—the ipmitool powers on Power Cycle—the ipmitool power cycles Hard Reset—the ipmitool power resets Host power control 31
5 Access system health sensors To check sensor information, use the following command: root@dellemc-diag-os:~# ipmitool sensor list To change the sensor threshold, see the IPMI Specification v2.0 chapter 35.8 Set Sensor Thresholds Command. ● Request data byte 1—Sensor number, FFH=reserved ● Request data byte 2— ○ [7:6] - reserved.
FAN3_prsnt | FAN4_prsnt | FAN1_Rear_stat | FAN2_Rear_stat | FAN3_Rear_stat | FAN4_Rear_stat | FAN1_Front_stat | FAN2_Front_stat | FAN3_Front_stat | FAN4_Front_stat | INTER_5.0V_volt | INTER_3.3V_volt | FPGA_1.0V_volt | FPGA_1.2V_volt | FPGA_1.8V_volt | FPGA_3.3V_volt | BMC_2.5V_volt | BMC_1.15V_volt | BMC_1.2V_volt | SWITCH_6.8V_volt| SWITCH_3.3V_volt| SWITCH_1.8V_volt| USB_5.0V_volt | NPU_1.2V_volt | NPU_VDDCORE_volt| NPU_VDDANLG_volt| BMC boot | SEL_sensor | 0x0 0x0 0x0 0x0 0x0 0x0 0x0 0x0 0x0 0x0 4.
6 IPMI commands NOTE: All commands are subject to change as the ipmi commands evolve over time.
● ● ● ● ● ● ● ● ● ● ● ● ● ● ● ● ● ● ● ● ● ● ● ● ● ● ● ● ● ● ● ● ● ● ● ● ● ● ● ● ● ● ● ● ● ● ● ● ● ● ● ● ● ● ipmi ipmi ipmi ipmi ipmi ipmi ipmi ipmi ipmi ipmi ipmi ipmi ipmi ipmi ipmi ipmi ipmi ipmi ipmi ipmi ipmi ipmi ipmi ipmi ipmi ipmi ipmi ipmi ipmi ipmi ipmi ipmi ipmi ipmi ipmi ipmi ipmi ipmi ipmi ipmi ipmi ipmi ipmi ipmi ipmi ipmi ipmi ipmi ipmi ipmi ipmi ipmi ipmi ipmi mc watchdog off mc selftest mc getenables mc getenabled - mc getsysinfo system_fw_version mc getsys
● ● ● ● ● ● ● ● ● ● ● ● ● ● ● ● ● ● ● ● ● ● ● ● ● ● ● ● ● ● ● ● ● ● ● ● 36 ipmi sol payload [channel][userid] ipmi sol activate [][instance=] ipmi sol deactivate [instance=] ipmi sol looptest [[[]]] ipmi user summary [] ipmi user list [] ipmi user set name ipmi user set password [<16|20>] ipmi user disable ipmi user
7 ipmiutil package NOTE: All commands are subject to change as the ipmiutil package evolves over time. For more information about the IPMI utility, use cases, and the newest list of subcommands, see the IPMI website that is hosted by Intel at https:// www.intel.com/content/www/us/en/servers/ipmi/ipmi-technical-resources.html. ● ipmiutil—a metacommand to invoke each of the following functions: ○ ipmiutil alarms (ialarms)—show and set the front panel alarms, including light emitting diodes (LEDs) and relays.
8 Access FRU data To check field replacement unit (FRU) data, use the following command: root@dellemc-diag-os:~# ipmitool fru print For more FRU information, see the IPMI Specification v2.0 chapter 34.2 Read FRU Data Command. ● Request data 1—FRU device ID. FFh=reserved ● Request data 2—FRU inventory offset to read, LS byte ● Request data 3—FRU inventory offset to read, LS byte ○ Offset is in bytes or words-per-device. Access type returned in the Get FRU Inventory Area Info command output.
Board Serial : TW0M6X8JDNT008570208 Board Part Number : 0M6X8JX01FRU Device Description : FRU_PSU1 (ID 6) Board Mfg Date : Fri Jan 5 20:43:00 2018 Board Mfg : DELL Board Product : PWR SPLY,1600W,RDNT,DELTA Board Serial : CNDED0081500XQ Board Part Number : 095HR5A04FRU Device Description : FRU_PSU2 (ID 7) Board Mfg Date : Fri Jan 5 20:51:00 2018 Board Mfg : DELL Board Product : PWR SPLY,1600W,RDNT,DELTA Board Serial : CNDED0081506H8 Board Part Number : 095HR5A04 root@dellemc-diag-os:~# root@dellemc-diag-os:/
9 Dell EMC support The Dell EMC support site provides documents and tools to help you use Dell EMC equipment and mitigate network outages. Through the support site you can obtain technical information, access software upgrades and patches, download available management software, and manage your open cases. The Dell EMC support site provides integrated, secure access to these services. To access the Dell EMC support site, go to www.dell.com/support/.
A Firmware update BMC, BIOS, and CPLD firmware update is required before you install the Z9264F-ON switch. CAUTION: The preferred method of updating the BMC code is through the ONIE Firmware Updater. For firmware update instructions, see the Dell EMC PowerSwitch Firmware Updater Release Notes . Only use the following update method if there is an issue with the Firmware Updater. To update the firmware from a remote machine, use the BMC LAN interface.
USB-based firmware update Update your BMC, BIOS, and CPLD firmware with the following commands: Power on the switch Plug in the power cable to the back of the switch. The switch powers up immediately. Create a serial console connection To establish a console connection, use a universal serial bus (USB)-to-RS-232 connection from a USB port to the switch console port. NOTE: The baud rate is 115200. BIOS access process 1. Press delete after the POST Lower DRAM Memory test appears on the screen.
Figure 3. Boot up screen Figure 4. BIOS setup and configuration screen 2. Use the scrollbar on the right side of the console window to scroll up to display the BIOS and CPLD versions. Figure 5. Display BIOS and CPLD versions Update BMC in DIAG OS Use the following DIAG OS command to update BMC: updatetool -D MAIN-BMC -U -e ./-BMC-vx.xx.ima NOTE: Switch to the BMC console to monitor the BMC update status. Confirm BMC updates. Reboot the system. Go to the BIOS update.
You are prompted for confirmation. Press y and enter to continue. When the update is complete, you must power cycle the system. root@dellemc-diag-os:~# updatetool -D MAIN-BMC -U -e disable preserve BIOS configration 00 Disable device protect Disable MAIN-BMC protect operation success, wait HW reset Write image to MAIN-BMC INFO: Yafu INI Configuration File not found... Default options will not be applied... Creating IPMI session via USB...
Network interface settings Complete the following after the switch boots: 1. Go to the BMC console and check the network interface settings. ifconfig eth0 Link encap:Ethernet HWaddr 54:BF:64:A9:E7:C9 inet addr:xxx.xx.xxx.xx Bcast:xxx.xx.xxx.xxx Mask:255.255.255.
