LOM setup Configuration guide

[Nas]

Hello, I need to setup lom on my appliances and i want to know if there is a document which to follow for setup.

Thank you for help

[PhoneBoy]

What precise appliance?

[Nas]

16200 and 26000

[PhoneBoy · Accepted solution]

Start with the the LOM Admin Guide (applies to both appliances): http://downloads.checkpoint.com/dc/download.htm?ID=32414

[Nas]

The guides provide steps post ip setup on appliance. For me i need setup ip from console from ipmitool. You have steps for that?

[funkylicious · Accepted solution]

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut...

[Nas]

[Expert@HostName:0]# ipmitool lan set <Number_of_Channel> ipaddr <IP_ADDRESS>

Channel number? How to get that in my case?

[Nas]

Guide does not mention channel

number for 16000

[funkylicious · Accepted solution]

Considering that the 16k appliances are fairly new and the SK isn't updated with the latest models, I would expect to be on channel 8.

Whatever commad returns a result, that's the channel no 

ipmitool lan print 1|8

[Matlu]

Hello,

I have a doubt with the LOM interface.
I have an appliance model 9700 that has been put into production.
The LOM interface is in the same segment as the MGMT interface.

My question is, can the LOM interface be accessed by SSH?

I have tested the availability of the LOM port, but only doing a PING test or a Telnet to port 443 of the IP configured in the LOM (10.123.119.47), but when I have tried to launch a SSH connection to the same interface, it does not work.

Is this normal?

Thanks for your comments.

[genisis__]

I don't believe so,  LOM generally is accessed via https (together with KVM-ports), you would then launch  a console session to access the console (which would use the KVM-ports).

[Matlu]

Uhmm, it makes more sense then, because definitely by SSH you can't access the LOM port. 🤓

It only allows me to “test” by a simple ping, and/or by telnetting to 443 of the LOM IP.

A question, the command “ethtool” does not work to validate this interface?

Because I thought that with this command I could see, if the port detects the patchcord connected, but I can't find any documentation to tell me if it works or not.

Greetings.

[PhoneBoy]

The LOM NIC is not installed on the appliance's PCI bus, therefore ethtool won't see it.

[genisis__]

The only way I know of is to run "show asset all" in clish to see the installed LOM and then to use IPMI tool, but I'm not sure that's going to give you the information you required.

[Bob_Zimmerman]

Incidentally, Check Point's LOMs are the only ones I have which don't work over SSH, serial-over-LAN, IPMI, and Redfish. They're extremely limited.

I really like my old Sun LOMs. It's a shame Oracle bought them and killed off their amd64 hardware.