topic Re: LOM setup Configuration guide in Firewall and Security Management

LOM setup Configuration guide

Nas — Sun, 20 Sep 2020 15:20:01 GMT

Hello, I need to setup lom on my appliances and i want to know if there is a document which to follow for setup.

Thank you for help

Re: LOM setup Configuration guide

PhoneBoy — Sun, 20 Sep 2020 16:21:23 GMT

What precise appliance?

Re: LOM setup Configuration guide

Nas — Sun, 20 Sep 2020 16:27:38 GMT

16200 and 26000

Re: LOM setup Configuration guide

PhoneBoy — Sun, 20 Sep 2020 16:30:55 GMT

Start with the the LOM Admin Guide (applies to both appliances): http://downloads.checkpoint.com/dc/download.htm?ID=32414

Re: LOM setup Configuration guide

Nas — Sun, 20 Sep 2020 16:58:56 GMT

The guides provide steps post ip setup on appliance. For me i need setup ip from console from ipmitool. You have steps for that?

Re: LOM setup Configuration guide

funkylicious — Sun, 20 Sep 2020 17:20:05 GMT

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk92986

Re: LOM setup Configuration guide

Nas — Sun, 20 Sep 2020 18:23:03 GMT

[Expert@HostName:0]# ipmitool lan set <Number_of_Channel> ipaddr <IP_ADDRESS>

Channel number? How to get that in my case?

Re: LOM setup Configuration guide

Nas — Sun, 20 Sep 2020 18:31:40 GMT

Guide does not mention channel

number for 16000

Re: LOM setup Configuration guide

funkylicious — Sun, 20 Sep 2020 18:42:44 GMT

Considering that the 16k appliances are fairly new and the SK isn't updated with the latest models, I would expect to be on channel 8.

Whatever commad returns a result, that's the channel no

ipmitool lan print 1|8

Re: LOM setup Configuration guide

Matlu — Thu, 27 Feb 2025 07:33:01 GMT

Hello,

I have a doubt with the LOM interface.
I have an appliance model 9700 that has been put into production.
The LOM interface is in the same segment as the MGMT interface.

My question is, can the LOM interface be accessed by SSH?

I have tested the availability of the LOM port, but only doing a PING test or a Telnet to port 443 of the IP configured in the LOM (10.123.119.47), but when I have tried to launch a SSH connection to the same interface, it does not work.

Is this normal?

Thanks for your comments.

Re: LOM setup Configuration guide

genisis__ — Thu, 27 Feb 2025 10:01:21 GMT

I don't believe so, LOM generally is accessed via https (together with KVM-ports), you would then launch a console session to access the console (which would use the KVM-ports).

Re: LOM setup Configuration guide

Matlu — Thu, 27 Feb 2025 14:54:39 GMT

Uhmm, it makes more sense then, because definitely by SSH you can't access the LOM port. 🤓

It only allows me to “test” by a simple ping, and/or by telnetting to 443 of the LOM IP.

A question, the command “ethtool” does not work to validate this interface?

Because I thought that with this command I could see, if the port detects the patchcord connected, but I can't find any documentation to tell me if it works or not.

Greetings.

Re: LOM setup Configuration guide

PhoneBoy — Thu, 27 Feb 2025 17:42:55 GMT

The LOM NIC is not installed on the appliance's PCI bus, therefore ethtool won't see it.

Re: LOM setup Configuration guide

Bob_Zimmerman — Thu, 27 Feb 2025 18:35:06 GMT

Incidentally, Check Point's LOMs are the only ones I have which don't work over SSH, serial-over-LAN, IPMI, and Redfish. They're extremely limited.

I really like my old Sun LOMs. It's a shame Oracle bought them and killed off their amd64 hardware.

Re: LOM setup Configuration guide

genisis__ — Thu, 27 Feb 2025 22:00:12 GMT

The only way I know of is to run "show asset all" in clish to see the installed LOM and then to use IPMI tool, but I'm not sure that's going to give you the information you required.

Re: LOM setup Configuration guide

the_rock — Fri, 28 Feb 2025 03:22:24 GMT

Hey bro,

Definitely cant access it via ssh. You can via https, like regular Gaia portal, but if any issues, I would check below for LOM firmware.

Andy

https://support.checkpoint.com/results/sk/sk88064