topic The command utility is in Network Security

Configure Console (ILO)

NOOKALARAMU — Tue, 12 Mar 2019 13:24:53 GMT

Can somebody please help on the commands to configure console (ilo) IP on Firepower sensor with OS 5.4 version?

Are you asking about the

Marvin Rhoads — Fri, 02 Jun 2017 03:22:25 GMT

Are you asking about the classic FirePOWER appliances (3D series like 7000 and 8000 models)?

If so, please refer to the system installation guide:

http://www.cisco.com/c/dam/en/us/td/docs/security/sourcefire/3d-system/53/Sourcefire_3D_System_Installation_Guide_v53.pdf

Page 221 covers "Setting Up Lights-Out Management".

More details are also covered in the User Guide here:

http://www.cisco.com/c/en/us/td/docs/security/firesight/541/user-guide/FireSIGHT-System-UserGuide-v5401/Local-Configuration.html#pgfId-8464098

Yes it is 7k and 8k series.

NOOKALARAMU — Fri, 02 Jun 2017 16:17:18 GMT

Yes it is 7k and 8k series. Can you please give the exact command to assign ILO IP via CLI?

How you setup the ILO depends

Marvin Rhoads — Sat, 03 Jun 2017 03:14:34 GMT

How you setup the ILO depends on what you have access to.

Do you currently have access to the web interface or ssh via the management interface?

I have access only through

NOOKALARAMU — Mon, 05 Jun 2017 15:14:44 GMT

I have access only through SSH. No Web UI access.

The command utility is

Marvin Rhoads — Mon, 05 Jun 2017 15:42:34 GMT

The command utility is ipmitool. You need to run it as the root user from ssh.

The command usage to set the address is as follows:

root@Sourcefire3D:/Volume/home/admin# ipmitool lan set

usage: lan set <channel> <command> <parameter>

LAN set command/parameter options:
 ipaddr <x.x.x.x> Set channel IP address
 netmask <x.x.x.x> Set channel IP netmask
 macaddr <x:x:x:x:x:x> Set channel MAC address
 defgw ipaddr <x.x.x.x> Set default gateway IP address
 defgw macaddr <x:x:x:x:x:x> Set default gateway MAC address
 bakgw ipaddr <x.x.x.x> Set backup gateway IP address
 bakgw macaddr <x:x:x:x:x:x> Set backup gateway MAC address
 password <password> Set session password for this channel
 snmp <community string> Set SNMP public community string
 user Enable default user for this channel
 access <on|off> Enable or disable access to this channel
 alert <on|off> Enable or disable PEF alerting for this channel
 arp respond <on|off> Enable or disable BMC ARP responding
 arp generate <on|off> Enable or disable BMC gratuitous ARP generation
 arp interval <seconds> Set gratuitous ARP generation interval
 vlan id <off|<id>> Disable or enable VLAN and set ID (1-4094)
 vlan priority <priority> Set vlan priority (0-7)
 auth <level> <type,..> Set channel authentication types
 level = CALLBACK, USER, OPERATOR, ADMIN
 type = NONE, MD2, MD5, PASSWORD, OEM
 ipsrc <source> Set IP Address source
 none = unspecified source
 static = address manually configured to be static
 dhcp = address obtained by BMC running DHCP
 bios = address loaded by BIOS or system software
 cipher_privs XXXXXXXXXXXXXXX Set RMCP+ cipher suite privilege levels
 X = Cipher Suite Unused
 c = CALLBACK
 u = USER
 o = OPERATOR
 a = ADMIN
 O = OEM

root@Sourcefire3D:/Volume/home/admin#