Data Domain IPMI Interface no longer accessable after DD OS Upgrade

Question

Hello,

i have a problem with my Data Domain IPMI Interface. Firstly our Data Domain is just a Test-Box, so nothing special. But a Customer contacted me, because his Data Domain IPMI Interface was no longer accessable after an upgrade from DD OS 5.4.2.X to 5.5.0.8. So i thought i recreate that problem on our Data Domain (DD 2500, ver. 5.4.0.8). And I ran into the same problem as the customer described. The problem is as follows:

With Webbrowser: Error: Failed to Connect

SSH: connect to host 192.168.176.224 port 22: Connection refused

Telnet with a bunch of ports: (Port 80) connect to address 192.168.176.224: Connection refused

(Port 22) connect to address 192.168.176.224: Connection refused

(Port 443) connect to address 192.168.176.224: Connection refused

Ping to IPMI is possible. I already restartet the DD and I powerd it off and unplugged it from power as well. Nothing changed. The only thing that worked is, to connect to DD GUI with webbrowser, go to Maintenance->IPMI and choose "Login to Remote System". When I log in to the IPMI Interface, it works! But it is supposed to do so? I mean, before the update everything was fine; I was able connect via SSH or Webbrowser to my IPMI and restart the box as I want! One strange thing to add: I can access a html-page on the IPMI over webbrowser. Its the index.html. So I can connect to 192.168.176.224/index.html but I can do absolutely nothing there except for navigating a little bit through the menues, but still can't log in there or power on/off the machine.

I already talked to customer support but they won't confess a bug yet.

I Can definetly say that there is no firewall between the machines, that could lead to that connection refused-statement. Again I testet it with only a consumer switch between the IPMI-Interface and a server; Same here with connection refused.

My thoughts on that are, that there is bug with IPMI by upgrading the system to 5.5.0.8. I think the IPMI shielded itself against everything and there is just one little option, that isn't restored after upgrade.

Hannes

ble1 · Accepted Answer

It has been discussed here couple of times already that IPMI usage is intended only via DD GUI.  So, forget ssh, forget http(s).

bobt5 · Answer

At this time, DD does not know of a bug that causes the IPMI port to become disabled on a DD2500 upgraded to DD OS 5.5.0.8. I would recommend opening a support case to allow research into this.

The Java console through a web browser is not supported on DD systems. Some systems were shipped with this function enabled but the functionality of this "feature" is not supported and can cause erratic system performance.

What happens if you try to connect through enterprise Manager? Can you power cycle the system?

hannes20 · Answer

I can log in to IPMI via Enterprise Manager and can power-on-off the machine. Through ipmitool as well. But ssh and webbrowser is refused.

hannes20 · Answer

That's not very satisfying. As a user I'm very confused because of that working and not working of the IPMI-Interface. But nevertheless, it works and i can get used to it. Hopefully my customers, too...

hannes20 · Answer

Thank you for replying. Now its clear to me.

jbrooksuk · Answer

You correctly marked Hrvoje as correct answer, some models allow it and some don't, you'll find that the upgrade actually fixed the flaw rather than broke something.

None of the IPMI interfaces on DD's should allow you to browse or SSH into your DD - it was never intended to do that but some however do, they should hopefully all align going forward.

I imagine the IPMI firmware was updated as part of your DDOS 5.5 upgrade and it was fixed there.

If you want to power your DD back on, use the IPMI method you have already confirmed is working via the DDEM through another DDR, if you want to watch your DD boot (all the way from BIOS), use IPMI/SOL to do so, from a linux host with IPMItool or via an SSH session onto another DDR and watch it there.
If you want to manage your DD, use the normal management port and perform shutdowns and reboots directly in there in DDOS.

If you don't have an IP on another interface that is in your management network, you can create an alias under another interface and allocate another IP to that physical (or virtual) port and access management from there, all the functionality you require is possible by their correct and intended interfaces on all DD's on all DDOS versions.

Hope that helps,

Jonathan

ble1 · Answer

As user, have you read manual&KB and found any reference to IPMI usage via ssh/web?

Data Domain

Data Domain IPMI Interface no longer accessable after DD OS Upgrade

Was this post helpful?