5 – 160
© 2018 Cyphre Security Solutions, LLC.
-p <port>
Remote server UDP port to connect to. Default is 623.
-P <password>
Remote server password is specified on the command line. If supported it will be
obscured in the process list. Note! Specifying the password as a command line option
is not recommended.
-S <sdr_cache_file>
Use local file for remote SDR cache. Using a local SDR cache can drastically
increase performance for commands that require knowledge of the entire SDR to
perform their function. Local SDR cache from a remote system can be created with the
sdr dump command.
-t <target_address>
Bridge IPMI requests to the remote target address.
-U <username>
Remote server username, default is NULL user.
-v Increase verbose output level. This option may be specified multiple times to
increase the level of debug output. If given three times you will get hexdumps of
all incoming and outgoing packets.
-V Display version information.
If no password method is specified then ipmitool will prompt the user for a password. If no password
is entered at the prompt, the remote server password will default to NULL.
5.3 IPMITool Security
There are several security issues be considered before enabling the IPMI LAN interface. A remote
station has the ability to control a system's power state as well as being able to gather certain
platform information. To reduce vulnerability it is strongly advised that the IPMI LAN interface only be
enabled in 'trusted' environments where system security is not an issue or where there is a dedicated
secure 'management network'.
Further it is strongly advised that you should not enable IPMI for remote access without setting a
password, and that password should not be the same as any other password on that system.
When an IPMI password is changed on a remote machine with the IPMIv1.5 lan interface the new
password is sent across the network as clear text. This could be observed and then used to attack
the remote system. It is thus recommended that IPMI password management only be done over
IPMIv2.0 lanplus interface or the system interface on the local station.
For IPMI v1.5, the maximum password length is 16 characters. Passwords longer than 16 characters
will be truncated.
For IPMI v2.0, the maximum password length is 20 characters; longer passwords are truncated.
Confidential
BT1 Security Appliance User Guide
5 About the IPMITool
