Setting Up Lights-Out Management - Cisco 7010 Installation Manual

Chapter 8 Restoring a Firepower System Appliance to Factory Defaults

Setting Up Lights-Out Management

If you need to restore a Firepower device to factory defaults and do not have physical access to the
appliance, you can use Lights-Out Management (LOM) to perform the restore process. Note that you can
use Lights-Out Management on the default (
The baseboard management controller (BMC) for a Firepower 71xx, Firepower 82xx, or a Firepower or
Note
AMP 83xx device is only accessible via 1Gbps link speeds when the host is powered on. When the
device is powered down the BMC can only establish Ethernet link at 10 and 100Mbps. Therefore if LOM
is being used to remotely power the device, connect the device to the network using 10 and 100Mbps
link speeds only.
The LOM feature allows you to perform a limited set of actions on a Firepower device, using a Serial
over LAN (SOL) connection. With LOM, you use a command line interface on an out-of-band
management connection to perform tasks such as viewing the chassis serial number, or monitoring
conditions such as fan speed and temperature.
The syntax of LOM commands depends on the utility you are using, but LOM commands generally
contain the elements listed in the following table.
.
Table 8-3
IPMItool (Linux/Mac)
ipmitool
n/a
-I lanplus
-H IP_address
-U username
n/a (prompted on
login)
command
Therefore, for IPMItool:
ipmitool -I lanplus -H IP_address -U username command
Or, for ipmiutil:
ipmiutil command -V4 -J3 -N IP_address -U username -P password
Note that the
appliances. For a full list of LOM commands supported by the Firepower System, see the Configuring
Appliance Settings chapter in the Firepower Management Center Configuration Guide.
LOM Command Syntax
ipmiutil (Windows)
ipmiutil
-V4
-J3
-N IP_address
-U username
-P
password
command
and
chassis power off chassis power cycle
) management interface only.
eth0
Description
Invokes the IPMI utility.
For ipmiutil only, enables admin privileges for the
LOM session.
Enables encryption for the LOM session.
Specifies the IP address of the management interface
on the appliance.
Specifies the user name of an authorized LOM
account.
For ipmiutil only, specifies the password for an
authorized LOM account.
The command you want to issue to the appliance. Note
that where you issue the command depends on the
utility:
• For IPMItool, type the command last.
For ipmiutil, type the command first.
•
commands are not valid on 70xx Family
Firepower 7000 and 8000 Series Installation Guide

Setting Up Lights-Out Management

8-15