OneFS 9.0 introduces support for the Intelligent Platform Module Interface (IPMI) on 6th generation Isilon nodes and PowerScale nodes. IPMI provides a dedicated management channel for lights-out management, external to OneFS. The supported IPMI features are power control and Serial over LAN (SoL).
Once IPMI is configured through OneFS, it can be accessed through the IPMItool, which is part of most Linux distributions, or other proprietary IPMI tools. On Gen 6 Isilon nodes, the 1 GbE interface becomes dual personality, continuing to support management, but now also supports IPMI. For PowerScale nodes, the 1 GbE iDRAC port provides support for IPMI.
Figure 26. IPMI access for Gen 6 and PowerScale nodes
Before configuring IPMI, consider the following information:
- Configuring the SoL feature on PowerScale nodes does require a node reboot to access and configure the serial communication settings.
- IPMI SoL is an alternative to physical serial cable access, but it is not a replacement for traditional SSH access to the cluster. Also, SoL is not available for initial cluster configuration because IPMI is disabled from the factory and must be enabled after initial cluster configuration.
- Gen 6 Isilon nodes require a Node Firmware Package at a minimum of v10.3.2.
- Configuring IPMI does require the ISI_PRIV_IPMI RBAC level, which is part of the Configuration privilege level.
- The IPMI IP address space cannot be on the same subnet as any of the cluster's front-end networks.
- On Gen 6 nodes, during an active SoL session, the physical serial port is disabled. Once the active SoL session is deactivated, the physical serial port becomes active again. Only a single SoL session is supported per node. On PowerScale nodes, the physical serial interface is disabled after the BIOS update explained in Configure serial devices.
- A power reset may be issued through SoL, using only the IPMI password for access.
- IPMI does not support VLAN tagging.
- As a security best practice, isolate IPMI traffic to a management only VLAN.
- At the initial login of the SoL session, the user is prompted for the OneFS CLI username and password. If the user logs out of the SoL session without logging out of the CLI, the CLI session remains active, allowing the next SoL session to enter the OneFS CLI without authenticating. As a security best practice, log out of the OneFS CLI session prior to logging out of the SoL session.
- Rebooting a node through SoL provides the full output of the entire OneFS shutdown and bootup sequence.
For releases prior to OneFS 9.0, IPMI is available for Gen 6 nodes as a manual configuration on each node. It is not officially supported, but it is also not prohibited, and it generally works. For OneFS 9.0, this process is an automated cluster configuration for all nodes within a cluster. If IPMI was configured on a release prior to OneFS 9.0, upgrading to 9.0 does not affect any existing IPMI configuration.