IPMI fence agents not working properly.

  • 7022880
  • 24-Apr-2018
  • 24-Apr-2018

Environment


SUSE Linux Enterprise High Availability Extension 12
SUSE Linux Enterprise High Availability Extension 11 Service Pack 4

Situation

ipmi fence agent appears to reset the power on itself rather than specified remote host.
Using ipmitool to test and the only interface option that works is the "open" interface.
Example:  This command would actually reset the local host rather than host specified with the -H option.
ipmitool -I open -U <iLO admin user> -H <remote host iLO interface ip> power reset

Resolution

Need to enable the IPMI/DCMI over LAN setting using the web interface so the client side tools are able to connect.  This is necessary for the cluster external/ipmi fence agents to be able to reset the other node in the cluster. 

Cause

IPMI/DCMI over LAN setting is disabled by default for HPE iLO5 cards.
When IPMI/DCMI over LAN is disabled, iLO disables IPMI/DCMI over the LAN. Server-side IPMI/DCMI applications are still functional when this feature is disabled.  This is why the only interface option that could be used was "-I open" and seemed to ignore the "-H <remote host>" option.

Additional Information

Reference guide for HPE ILO5

To test the IPMI device use ipmitool command ('zypper in ipmitool').
For example:
# /usr/bin/ipmitool -I lanplus -U <USER_NAME> -P  <PASSWORD> -H  <IPMI_DEVICE_IP> chassis status

To connect to local IPMI interface and see "lan" information you can use the following command.
# /usr/bin/ipmitool -I open lan print

To show other commands and how to use this tool.
# man ipmitool 

To display information regarding cluster stonith resource external/ipmi
# crm ra info stonith:external/ipmi

Feedback service temporarily unavailable. For content questions or problems, please contact Support.