topic Re: LOM Firmware Update via CLI in Firewall and Security Management

LOM Firmware Update via CLI

AlJo — Thu, 12 May 2022 13:18:09 GMT

I have a few appliances that have older firmware and I'd like to update the firmware via command line. I don't see anything in the LOM Management docs on how to do this via CLI.

I'd like to do this via CLI for a couple of reasons:

1) Latest version of Chrome refuses to connect due to (I'm on a Corp Managed Dev so limited ability to alter back compatibility):

ERR_SSL_VERSION_OR_CIPHER_MISMATCH

Unsupported protocol

The client and server don't support a common SSL protocol version or cipher suite

2) An older version of Firefox I keep around for this type of situation just displays a blank page where I should be presented the login page.

3) I really prefer to use CLI for automation purposes

Specific Model with this issue: 23500

Current Firmware: 3.14

Target Firmware: 3.39. (3.41 is totally broken for KVM capabilities)

Thanks for any insight on this issue.

Re: LOM Firmware Update via CLI

G_W_Albrecht — Thu, 12 May 2022 13:42:17 GMT

You should contact TAC - there is no CLI documentation except # show lom for firmware version.

Re: LOM Firmware Update via CLI

Chris_A_H — Fri, 03 Mar 2023 17:43:28 GMT

Similar problem here:

Some legacy (don't ask) customer owned 4800 appliances at a customer site have a non functional LOM Web UI.
So far, I've been unsuccessful to recover them by either resetting the LOM to factory defaults as detailed in sk127573
or uploading a newer firmware image via CLI (starting with 2.22 up to the current 2.8).

LOM access via http(s) impossible, connect succeeds but the webserver never delivers a response
LOM runs 2.02
"ipmitool bmc reset cold" does reboot the BMC, but does not have any effect on the behavior
During cold boot of the LOM, the appliance serial port is dead and the LOM does not seem to
emit any of its boot messages there. After the LOM is back up one gets output from the appliance again...
"ipmitool fwup download ...." just dumps core without uploading any image
"ipmitool hpm" is not supported at all by the LOM
Reset to factory default according to sk127573 by issuing "ipmitool raw 0x2e 0x02" does not work.
LOM only responds with IPMI code "c1" - command not supported

Re: LOM Firmware Update via CLI

PhoneBoy — Sat, 04 Mar 2023 00:52:37 GMT

I suspect the LOM has failed and needs to be replaced.
The 4800s are End of Support, however, so I doubt you could get an RMA on it.

Re: LOM Firmware Update via CLI

Chris_A_H — Mon, 06 Mar 2023 09:16:37 GMT

Yeah, thats what I thought beforehand. the 4k8 are EoS since 06/2022.

I poked a bit more, and an internal failure of some sort seems very probable, as the
LOM reponds with C1 to various commands it shoud know. And it seems its not the only

box showing these symptoms

Re: LOM Firmware Update via CLI

Chris_A_H — Mon, 06 Mar 2023 10:07:13 GMT

Hmm... can SSH be enabled on the LOM via IPMItool? Since the GUI is not operational, that would be the only possiblity (if supported at all) to get to the lom from remote.