Z9264F-ON BMC User Guide August 2018
Notes, cautions, and warnings NOTE: A NOTE indicates important information that helps you make better use of your product. CAUTION: A CAUTION indicates either potential damage to hardware or loss of data and tells you how to avoid the problem. WARNING: A WARNING indicates a potential for property damage, personal injury, or death. Copyright © 2018 Dell Inc. or its subsidiaries. All rights reserved. Dell, EMC, and other trademarks are trademarks of Dell Inc. or its subsidiaries.
Contents 1 About this guide............................................................................................................................................. 5 Information symbols...........................................................................................................................................................5 Document revision history............................................................................................................................................
9 Dell EMC support........................................................................................................................................
1 About this guide This guide provides information for using the Dell EMC baseboard management controller (BMC). CAUTION: To avoid electrostatic discharge (ESD) damage, wear grounding wrist straps when handling this equipment. WARNING: Only trained and qualified personnel can install this equipment. Read this guide before you install and power up this equipment. This equipment contains two power cords. Disconnect both power cords before servicing.
2 Hardware and software support For the most current BMC update information, see the Z9264F-ON Release Notes. For more information about the intelligent platform management interface (IPMI), see the IPMI resources that is hosted by Intel at https:// www.intel.com/content/www/us/en/servers/ipmi/ipmi-technical-resources.html. Required drivers In Linux, the baseboard management controller (BMC) uses the ipmitool open-source tool during testing.
3 Configuration methods The diagnostic operating software (DIAG OS) running on the local processor has ipmitool installed by default. You can use the ipmitool both at the switch and remotely.
• Date and time • SNMP and email alerts • Add and delete users • Firewall • Event log • Default configuration Restore Configurations LAN configurations For network settings, see the IPMI Specification v2.0 chapter 23.1 Set LAN Configuration Parameters Command and Table 23-4 LAN Configuration Parameters. In addition to setting IP addresses, use ipmitool to set the network mask, MAC address, default gateway IP and MAC addresses, and so forth.
NOTE: Dell EMC recommends setting LAN parameters from the host microprocessor. You can run all other ipmitool options from a remote machine after the BMC has the correct IP address and LAN settings. When running ipmitool from a remote machine, the command prefix is ipmitool -H -I lanplus -U -P …"> The number refers to the LAN channel, which is 1 in this BMC implementation.
SNMP and email alerts Event filters To set the platform event filters, use the raw command format.
Alert Gateway Alert IP Address Alert MAC Address .. Alert Destination Alert Acknowledge Destination Type Retry Interval Number of Retries Alert Gateway Alert IP Address Alert MAC Address : Default : 0.0.0.0 : 00:00:00:00:00:00 : : : : : : : : 15 Unacknowledged PET Trap 0 0 Default 0.0.0.0 00:00:00:00:00:00 You can configure up to 15 destinations. To configure destination 1 to send an alert to a machine with IP address 10.11.227.180: # ipmitool lan alert set 1 1 ipaddr 10.11.227.
1 | 1 | enabled | Match-always | true | 1 | 802.3 LAN | PET | AMI | 3 | 3 | 10.11.227.180 | 00:00:00:00:00:00 2 | 2 | enabled | Match-always | 1 | 802.3 LAN | PET | AMI | 3 | 3 | 10.11.227.180 | 00:00:00:00:00:00 Add and delete users The following describes adding and deleting users: There are 10 entries for a user list. 1 Add a new user by modifying one of the empty entries in the user list using the following: $ ./ipmitool -H xx.xx.xxx.xx -I lanplus -U admin -P admin user set name 3 $ .
$ ./ipmitool -H xx.xx.xxx.xxx -I lanplus -U admin -P admin channel setaccess 1 3 callin=off link=off ipmi=on privilege=2 Set User Access (channel 1 id 3) successful. $ ./ipmitool -H xx.xx.xxx.
• Request data byte 2—User ID – [7:6] reserved – [5:0] User ID. 00000b = reserved • Request data byte 3—User limits – [7:6] reserved – [3:0] User Privilege Limit. This determines the maximum privilege level that the user can to switch to on the specified channel. • ◦ 0h-reserved ◦ 1h-Callback ◦ 2h-User ◦ 3h-Operator ◦ 4h-Adminstrator ◦ 5h-OEM Proprietary ◦ Fh-NO ACCESS Request data byte (4)—User Session Limit.
◦ 00b-disable user ◦ 01b-enable user-10b-set password ◦ 11b-test password. This compares the password data give in the request with the presently stored password and returns an OK completion code if it matches. Otherwise, an error completion code returns. • Request data byte 3:18—For 16-byte passwords. Password data. This is a fixed-length required filed used for setting and testing password operations.
Table 3. Firewall parameters Parameter # Parameter data Add the IPv4 address rule 0 Data 1:4—IP address MS-byte first. This is an IPv4 address that is blocked or unblocked based on the state. Add the range of IPv4 addresses rule 1 Data 1:8—IP address range [1:4]—Starting IP address from which IPs are blocked or unblocked based on the state. [5:8]—Ending IP address until IPs are blocked or unblocked based on the state. For example, if the IP address is x1.x2.x3.
Parameter # Parameter data [5:8]—Ending IP address that is blocked or unblocked based on the state. For example, if the IP address is x1.x2.x3.x4, the format is: 1st byte = x1 2nd byte = x2 3rd byte = x3 4th byte = x4 Remove the IPv4 port number rule 6 Data 1:—Protocol TCP/UDP 0 = TCP 1 = UDP 2 = both TCP and UDP Data 2:3—port number [2:3]—Port number from the ports blocked or unblocked based on the state.
Parameter # Parameter data Bit 7:2—Reserved Bit 1—IPv6 Bit 0—IPv4 Add IPv4 address with timeout rule 11 Data 1:4—IP address MS-byte first. The IPv4 address type blocked or unblocked based on the state. Date 5:10—Start time [5:6]—Year LS-byte first if little endian system. Twobyte data required to form year. 7—month 8—date 9—hour 10—minute Date 11-16—stop time [11:12]—Year LS-byte first if little endian system. Twobyte data required to form year.
Parameter # Parameter data Date 15-20—Stop time [15:16]—Year LS-byte first if little endian system. Twobyte data required to form year. Add the IPv4 port number with timeout rule 13 Data 1—Protocol TCP and UDP 0 = TCP 1 = UDP 2 = both TCP and UDP Data 2:3—port number [2:3]—Port number from the ports blocked or unblocked based on the state. Date 4:9—Start time [4:5]—Year LS-byte first if little endian system. Twobyte data required to form year.
Parameter # Parameter data [4:5]—Port number till the ports blocked or unblocked based on the state. Date 6:11Start time [6:7]—Year LS-byte first if little endian system. Twobyte data required to form year. 8—month 9—date 10—hour 11—minute Date 12-17—stop time [12:13]—Year LS-byte first if little endian system. Twobyte data required to form year. 14—month 15—date 16—hour 17—minute Remove the IPv4 address with timeout rule 15 Data 1:4—IP address MS-byte first.
Parameter # Parameter data 15—hour 16—minute Remove the range IPv4 address with timeout rule 16 Data 1:8—IP address [1:4]—Starting IP address blocked or unblocked based on the state. [5:8]—Ending IP address till IPs are blocked or unblocked based on the state. Date 9:14—Start time [9:10]—Year LS-byte first if little endian system. Twobyte data required to form year. 11—month 12—date 13—hour 14—minute Date 15-20—Stop time [15:16]—Year LS-byte first if little endian system.
Parameter # Parameter data 7—date 8—hour 9—minute Date 10-15—stop time [10:11]—Year LS-byte first if little endian system. Twobyte data required to form year. 12—month 13—date 14—hour 15—minute Remove the IPv4 port number range with timeout rule 18 Data 1:—Protocol TCP and UPD 0 = TCP 1 = UDP 2 = both TCP and UDP Data 2:5—port number [2:3]—Port number from the ports blocked or unblocked based on the state. [4:5]—Port number till the ports blocked or unblocked based on the state.
Parameter # Parameter data 16—hour 17—minute Drop all IPv4 or IPv6 with timeout rule 19 Add iptables rules to block IPv4 and IPv6 traffic to the BMC. The state selector is not used. Data1: Protocol Bit 7:2—Reserved Bit 1—IPv6 Bit 0—IPv4 Date 2:7—Start time [2:3]—Year LS-byte first if little endian system. Twobyte data required to form year. 4—month 5—date 6—hour 7—minute Date 8:13—Stop time [8:9]—Year LS-byte first if little endian system. Twobyte data required to form year.
Parameter # Parameter data LS-byte first if little endian system. Twobyte data required to form year. 4—month 5—date 6—hour 7—minute Date 8:13—Stop time [8:9]—Year LS-byte first if little endian system. Twobyte data required to form year. 10—month 11—date 12—hour 13—minute Add IPv6 address with timeout rule 21 Data 1:16—IPv6 address MS-byte first. The IPv6 address type blocked or unblocked based on the state. Date 7:22—Start time [17:18]—Year LS-byte first if little endian system.
Parameter # Parameter data [1:16]—Port number from the ports blocked or unblocked based on the state. [17:32]—Port number till the ports blocked or unblocked based on the state. Date 33:38—Start time [33:34]—Year LS-byte first if little endian system. Twobyte data required to form year. 35—month 36—date 37—hour 38—minute Date 39:44—stop time [39:40]—Year LS-byte first if little endian system. Twobyte data required to form year.
Parameter # Parameter data 25—month 26—date 27—hour 28—minute Remove the Ipv6 address range with timeout rule 24 Data 1:16—IPv6 address range [1:16]—Port number from the ports blocked or unblocked based on the state. [17:32]—Port number till the ports blocked or unblocked based on the state. Date 33:38—Start time [33:34]—Year LS-byte first if little endian system. Twobyte data required to form year.
Parameter # Parameter data LS-byte first if little endian system. Twobyte data required to form year. 6—month 7—date 8—hour 9—minute Date 10-15—stop time [10:11]—Year LS-byte first if little endian system. Twobyte data required to form year. 12—month 13—date 14—hour 15—minute Add the IPv6 port number range with timeout rule 26 Data 1—Protocol TCP and UDP 0 = TCP 1 = UDP 2 = both TCP and UDP Data 2:5—port number [2:3]—Port number from the ports blocked or unblocked based on the state.
Parameter # Parameter data 14—month 15—date 16—hour 17—minute Remove the IPv6 port number with timeout rule 27 Data 1—Protocol TCP and UDP 0 = TCP 1 = UDP 2 = both TCP and UDP Data 2:3—port number [2:3]—Port number from the ports blocked or unblocked based on the state. [4:9]—Year Date 4:9—Start time [4:5]—Year LS-byte first if little endian system. Twobyte data required to form year. 6—month 7—date 8—hour 9—minute Date 10-15—stop time [10:11]—Year LS-byte first if little endian system.
Parameter # Parameter data [2:3]—Port number from the ports blocked or unblocked based on the state. [4:5]—Year Date 6:11—Start time [6:7]—Year LS-byte first if little endian system. Twobyte data required to form year. 8—month 9—date 10—hour 11—minute Date 12-17—stop time [12:13]—Year LS-byte first if little endian system. Twobyte data required to form year. 14—month 15—date 16—hour 17—minute Add the IPv6 address rule 29 Data 1:16—IPv6 address MS-byte first.
Parameter # Parameter data 1 = UDP 2 = both TCP and UDP Data 2:3—port number [2:3]—Port number from the ports blocked or unblocked based on the state. Add the IPv6 port number range rule 34 Data 1—Protocol TCP and UDP 0 = TCP 1 = UDP 2 = both TCP and UDP Data 2:5—port number [2:3]—Port number from the ports blocked or unblocked based on the state. [4:5]—Port number till the ports are blocked or u nblocked based on the state.
Reserve system event log (SEL) command Use reserve SEL to set the present owner of the SEL. This reservation provides a limited amount of protection on repository access from the IPMB when you delete or incrementally read records. Use get SEL to read the SEL repository. • Response data byte 1—Completion code – 81h—cannot execute the command, SEL erase in progress • Response data byte 2—Reservation ID, LS byte 0000h reserved.
• Response data byte 1—Cmd – [7:2] Reserved – [1:0] 00h–system log • Response data byte 2—Status – [7:2] Reserved – [1:0] 01h–Disabled – 01h–Enable local • Response data byte 3-70 for REMOTE (68 bytes) or 3-7 for LOCAL (5 bytes)—ENABLED REMOTE – NOTE: These request data bytes are required only when you enable either the local or remote system log. 64bytes : Hostname (ASCII) Remote syslog server 4bytes : port number To set the remote server ip address to 10.0.124.
Default configuration Restore Use configuration restore to start the configuration from scratch. For example, use configuration restore to remove the old configuration and start over if you reinstall the system or move the system to a new location. Restore default configuration command • NetFn—0x32 • Command—0x66 • Response byte 1—Completion code Set backup configuration flag To set the backup flags for the manage BMC confirguration command, use the set backup configuration flag command.
4 Firmware update To update the firmware from a remote machine, use the BMC LAN interface. You can also update the firmware in the local host OS using the USB interface. The USB interface is between the BMC and the microprocessor. When using the USB, the BMC simulates a virtual USB device, then Yafuflash sends the image to the BMC via the USB bus. Typically the update process completes in five minutes. For more information about Yafuflash, see the Z9264F-ON Release Notes. Table 4.
5 Host power control The following are host power control commands: • Power Off—the ipmitool powers off • Power On—the ipmitool powers on • Power Cycle—the ipmitool power cycles • Hard Reset—the ipmitool power resets Host power control 35
6 Access system health sensors To check sensor information, use the following command: root@dellemc-diag-os:~# ipmitool sensor list To change the sensor threshold, see the IPMI Specification v2.0 chapter 35.8 Set Sensor Thresholds Command. • Request data byte 1—Sensor number, FFH=reserved • Request data byte 2— – [7:6] - reserved.
PSU1_Chass_temp | 28.000 80.000 | 85.000 PSU2_Normal_temp | 37.000 80.000 | 85.000 PSU2_Sys_temp | 30.000 80.000 | 85.000 PSU2_Chass_temp | 29.000 80.000 | 85.000 CPU_temp | 35.000 60.000 | 68.000 DRAM1_temp | 33.000 60.000 | 68.000 DRAM2_temp | 0.000 60.000 | 68.000 FAN1_Rear_rpm | 6570.000 15390.000 | na FAN2_Rear_rpm | 6570.000 15390.000 | na FAN3_Rear_rpm | 6570.000 15390.000 | na FAN4_Rear_rpm | 6570.000 15390.000 | na FAN1_Front_rpm | 6570.000 15390.000 | na FAN2_Front_rpm | 6570.000 15390.
na | na FAN3_prsnt | 0x1 na | na FAN4_prsnt | 0x1 na | na Fan1_Rear_state | 0x0 na | na Fan2_Rear_state | 0x0 na | na Fan3_Rear_state | 0x0 na | na Fan4_Rear_state | 0x0 na | na Fan1_Front_state | 0x0 na | na Fan2_Front_state | 0x0 na | na Fan3_Front_state | 0x0 na | na Fan4_Front_state | 0x0 na | na root@dellemc-diag-os:~# 38 Access system health sensors | discrete | 0x0180| na | na | na | na | | discrete | 0x0180| na | na | na | na | | discrete | 0x0080| na | na | na | na | | discrete
7 Access FRU data To check field replacement unit (FRU) data, use the following command: root@dellemc-diag-os:~# ipmitool fru print For more FRU information, see the IPMI Specification v2.0 chapter 34.2 Read FRU Data Command. • Request data 1—FRU device ID. FFh=reserved • Request data 2—FRU inventory offset to read, LS byte • Request data 3—FRU inventory offset to read, LS byte – Offset is in bytes or words-per-device. Access type returned in the Get FRU Inventory Area Info command output.
Board Mfg Date : Mon May 14 13:44:00 2018 Board Mfg : DELL Board Product : Board Serial : TW0M6X8JDNT008570208 Board Part Number : 0M6X8JX01FRU Device Description : FRU_PSU1 (ID 6) Board Mfg Date : Fri Jan 5 20:43:00 2018 Board Mfg : DELL Board Product : PWR SPLY,1600W,RDNT,DELTA Board Serial : CNDED0081500XQ Board Part Number : 095HR5A04FRU Device Description : FRU_PSU2 (ID 7) Board Mfg Date : Fri Jan 5 20:51:00 2018 Board Mfg : DELL Board Product : PWR SPLY,1600W,RDNT,DELTA Board Serial : CNDED0081506H8 B
8 ipmiutil package NOTE: All commands are subject to change as the ipmiutil package evolves over time. For more information about the IPMI utility, use cases, and the newest list of subcommands, see the IPMI website that is hosted by Intel at https://www.intel.com/ content/www/us/en/servers/ipmi/ipmi-technical-resources.html. • ipmiutil—a metacommand to invoke each of the following functions: – ipmiutil alarms (ialarms)—show and set the front panel alarms, including light emitting diodes (LEDs) and relays.
ipmiutil package
9 Dell EMC support The Dell EMC support site provides documents and tools to help you effectively use Dell EMC equipment and mitigate network outages. Through the support site you can obtain technical information, access software upgrades and patches, download available management software, and manage your open cases. The Dell EMC support site provides integrated, secure access to these services. To access the Dell EMC support site, go to www.dell.com/support/.
