Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Highlighted

LOM on newest Smart-1 appliances

Jump to solution

Hello,

Why newest Smart-1 appliances don't have LOM available, despite the fact there is LOM interface on the appliance ?

For example Smart-1 625 appliance:

image.png

What does it mean "For future use - currently not supported" ? Can we expect this will be allowed by some newest Take, or new version ?

LOM was available for almost all older Smart-1 appliances (25, 25B, 50, 150, 225, 3050, 3150).

LOM port is available on following Smart-1 appliances, but is not working at all:
Smart-1 525
Smart-1 5050
Smart-1 5150
Smart-1 625

Kind regards,
Jozko Mrkvicka
0 Kudos
Reply
1 Solution

Accepted Solutions
Highlighted
Employee
Employee

Hi,

I am glad to say that enabling and updating iDRAC FW is now available, more info in sk122914, relevant documentation will be modified as well.

Regards,

Dolev

View solution in original post

11 Replies
Highlighted
Admin
Admin
Check Point is in the process of integrating the LOM (iDRAC) with GAIA in order to provide more secured and robust operations.
As to when this will be formally supported, I can't say for sure.
I would check with your local Check Point office.
Highlighted
Explorer

Yeah, we have the same issue on our Smart-1 5050 appliances.  Would make me feel a lot better doing a fresh install on my appliances if LOM was working.  Hopefully Checkpoint will have this feature working in the near future.

0 Kudos
Reply
Highlighted
Explorer

We have an HA pair of Smart-1 5050 appliances and have been waiting for LOM feature to be enabled since we purchased them.  To me, the LOM is more important on the management appliances that my gateways.  Especially when doing a fresh install.  Hopefully Checkpoint will have this working in the near future.

0 Kudos
Reply
Highlighted
Champion
Champion

Check Point has just removed the LOM checkmark for Smart-1 625 appliances from their Smart-1 Datasheet. I wonder why they didn't remove the checkmark for their other Smart-1 appliances as well as these neither have LOM support (see Known Limitations).

Check Point's newest Smart-1 appliances are DELL Open Servers as mentioned by Check Point. I guess this is why all LOM commands built into the Gaia clish are not working > these are built to run with Check Point LOMs only. iDRAC support is decribed here. On Smart-1 appliances LOM is called iDRAC (integrated DELL Remote Access Controller). Luckily you can still use ipmitool in expert mode to talk to the LOM and check that fans, temperature, voltage and everything is ok. I created a SmartConsole Extension - LOM Info to make LOM checks within SmartConsole really easy. 😊

Highlighted
Admin
Admin

@JozkoMrkvicka & @Danny 

AFAIK, there are certain concerns with iDRAC implementation on these servers. Although there are plans to support iDRAC in the future, we are still working on addressing those concerns from our side. LOM support will eventually come, when we are confident that all issues are addressed and do not present security and/or stability risks. However, the process does not only reside in Check Point, other parties are involved. 

If you have a strong case of necessity to use LOM for your SMART-1, you can address this with your local Check Point office.

0 Kudos
Reply
Highlighted
Advisor

I  had  the same issue here. 
When escalating this with your local Check Point team someone from R&D will enable LOM for usage,
but this will happen with a disclaimer. You are responsible for all potential risks coming with activation.

0 Kudos
Reply
Highlighted
Employee
Employee

Hi,

I am glad to say that enabling and updating iDRAC FW is now available, more info in sk122914, relevant documentation will be modified as well.

Regards,

Dolev

View solution in original post

Highlighted

Hi Dolev,

Thank you for great info.

Did I get it correct, that current LOM (iDRAC) solution for Smart-1 appliances is kind of "iDRAC/LOM EA" ? I am reffering to the EULA disclaimer while setting User.

In R80.30, for Smart-1 5050/5150, we need to install JHF Take 217. I didnt find anything related to LOM/iDRAC for Take 217 within Resolved issues.

Can we expect that firmware upgrade of iDRAC will be part of future R80.x Jumbo ?

When is plan to release "official" support with all the features (without security risks) ?

Thank you.

Kind regards,
Jozko Mrkvicka
0 Kudos
Reply
Highlighted
Admin
Admin

The code for iDRAC has been there for some time but not publicized, thus the comment about the relevant documentation needing to be updated.

0 Kudos
Reply
Highlighted
Explorer

Just to let you know, there is no explanation on how to upload the firmware.

0 Kudos
Reply
Highlighted
Employee
Employee

Hi,

The update is done using CPUSE packages, there is a line in the SK with reference to relevant SK.

"For instructions on how to download the relevant CPUSE package, refer to sk92449 - Check Point Upgrade Service Engine (CPUSE) - Gaia Deployment Agent"

 

Regards,

Dolev

0 Kudos
Reply