HP Integrity BL870c HP Integrity iLO 2 Operations Guide, Eleventh Edition - Page 52

Setting Up Security, Setting Security Access, Setting iLO 2 MP LAN From EFI

Get HP Integrity BL870c PDF manuals and user guides View all HP Integrity BL870c manuals
Add to My Manuals
Save this manual to your list of manuals

Page 52 highlights

a. Access the MP Main Menu. b. Enter CM at the MP> prompt. c. Enter UC at the MP:CM> prompt and follow the prompts to modify default passwords. 3. To set up user accounts, follow these steps: a. Access the MP Main Menu. b. Enter CM at the MP> prompt. c. Enter UC at the MP:CM> prompt and follow the prompts to modify user accounts. Setting Up Security For greater security and reliability, HP recommends that iLO 2 management traffic be on a separate dedicated management network and that only administrators be granted access to that network. This not only improves performance by reducing traffic load across the main network, it also acts as the first line of defense against security attacks. A separate network enables you to physically control which workstations are connected to the network. Setting Security Access Determine the security access required and what user accounts and privileges are needed. iLO 2 provides options to control user access. Select one of the following options to prevent unauthorized access to iLO 2: • Change the default user name and password. See "Modifying User Accounts and Default Passwords" (page 51). CAUTION: When DHCP is enabled, the system is vulnerable to security risks because anyone can access iLO 2 until you change the default user name and password. HP strongly recommends you assign user groups and rights before proceeding. • Create local accounts. You can store up to 19 user names and passwords to manage iLO 2 access. This is ideal for small environments such as labs and small-to-medium sized businesses. • Use corporate directory services to manage iLO 2 user access. This is ideal for environments with a large number of frequently changing users. If you plan to use directory services, HP recommends leaving at least one local account enabled as an alternate method of access. For more information on how to create local accounts and use directory services, see Chapter 9: "Installing and Configuring Directory Services " (page 179). Setting iLO 2 MP LAN From EFI Integrity iLO 2 supports an EFI utility to view or configure the iLO 2 MP LAN parameters. If the parameters have not been previously configured, you can use this utility to set them from EFI. To view the iLO 2 MP LAN parameters from EFI, follow these steps: 1. Boot to the EFI Shell. 2. Run ilosetup.efi from EFI. fs0:\EFI\TOOLS> ilosetup get Current LAN parameters: IP Address : 15.255.96.44 Subnet : 255.255.248.0 Gateway : 15.255.96.1 To configure the iLO 2 MP LAN parameters from EFI, follow these steps: 1. Boot to the EFI Shell. 52 Getting Connected to iLO 2

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • 167
  • 168
  • 169
  • 170
  • 171
  • 172
  • 173
  • 174
  • 175
  • 176
  • 177
  • 178
  • 179
  • 180
  • 181
  • 182
  • 183
  • 184
  • 185
  • 186
  • 187
  • 188
  • 189
  • 190
  • 191
  • 192
  • 193
  • 194
  • 195
  • 196
  • 197
  • 198
  • 199
  • 200
  • 201
  • 202
  • 203
  • 204
  • 205
  • 206
  • 207
  • 208
  • 209
  • 210
  • 211
  • 212
  • 213
  • 214
  • 215
  • 216
  • 217
  • 218
  • 219
  • 220
  • 221
  • 222
  • 223
  • 224
  • 225
  • 226
  • 227
  • 228
  • 229
a.
Access the MP Main Menu.
b.
Enter
CM
at the
MP>
prompt.
c.
Enter
UC
at the
MP:CM>
prompt and follow the prompts to modify default passwords.
3.
To set up user accounts, follow these steps:
a.
Access the MP Main Menu.
b.
Enter
CM
at the
MP>
prompt.
c.
Enter
UC
at the
MP:CM>
prompt and follow the prompts to modify user accounts.
Setting Up Security
For greater security and reliability, HP recommends that iLO 2 management traffic be on a
separate dedicated management network and that only administrators be granted access to that
network. This not only improves performance by reducing traffic load across the main network,
it also acts as the first line of defense against security attacks. A separate network enables you
to physically control which workstations are connected to the network.
Setting Security Access
Determine the security access required and what user accounts and privileges are needed. iLO
2 provides options to control user access. Select one of the following options to prevent
unauthorized access to iLO 2:
•
Change the default user name and password. See
“Modifying User Accounts and Default
Passwords” (page 51)
.
CAUTION:
When DHCP is enabled, the system is vulnerable to security risks because
anyone can access iLO 2 until you change the default user name and password.
HP strongly recommends you assign user groups and rights before proceeding.
•
Create local accounts. You can store up to 19 user names and passwords to manage iLO 2
access. This is ideal for small environments such as labs and small-to-medium sized
businesses.
•
Use corporate directory services to manage iLO 2 user access. This is ideal for environments
with a large number of frequently changing users. If you plan to use directory services, HP
recommends leaving at least one local account enabled as an alternate method of access.
For more information on how to create local accounts and use directory services, see
Chapter 9:
“Installing and Configuring Directory Services ” (page 179)
.
Setting iLO 2 MP LAN From EFI
Integrity iLO 2 supports an EFI utility to view or configure the iLO 2 MP LAN parameters. If the
parameters have not been previously configured, you can use this utility to set them from EFI.
To view the iLO 2 MP LAN parameters from EFI, follow these steps:
1.
Boot to the EFI Shell.
2.
Run
ilosetup.efi
from EFI.
fs0:\EFI\TOOLS> ilosetup get
Current LAN parameters:
IP Address : 15.255.96.44
Subnet
: 255.255.248.0
Gateway
: 15.255.96.1
To configure the iLO 2 MP LAN parameters from EFI, follow these steps:
1.
Boot to the EFI Shell.
52
Getting Connected to iLO 2