IPMI over LAN Policy
An IPMI over LAN Policy configures the IPMI service on UCS servers, controlling remote server management access over the network with configurable privilege levels and optional traffic encryption.
Location in Intersight GUI:
Policies » IPMI over LAN
Diagram
Section titled “Diagram”Classes
Section titled “Classes”policies (compute.intersight.organizations)
Section titled “policies (compute.intersight.organizations)”| Name | Type | Constraint | Mandatory | Default Value |
|---|---|---|---|---|
| ipmi_over_lan | List | [ipmi_over_lan] | No |
ipmi_over_lan (compute.intersight.organizations.policies)
Section titled “ipmi_over_lan (compute.intersight.organizations.policies)”| Name | Type | Constraint | Mandatory | Default Value |
|---|---|---|---|---|
| name | String | Regex: ^[a-zA-Z0-9_.:-]{1,64}$ | Yes | |
| description | String | No | ||
| managed | Boolean | true, false | No | true |
| tags | List | [tags] | No | |
| enabled | Boolean | true, false | No | true |
| privilege | Choice | admin, user, read-only | No | admin |
| encryption_key | String | No |
tags (compute.intersight.organizations.policies.ipmi_over_lan)
Section titled “tags (compute.intersight.organizations.policies.ipmi_over_lan)”| Name | Type | Constraint | Mandatory | Default Value |
|---|---|---|---|---|
| key | String | Yes | ||
| value | String | Yes |
Examples
Section titled “Examples”Example-1: Configure an IPMI over LAN policy with admin privilege and encryption, with environment tags.
compute: intersight: organizations: - name: MyOrg policies: ipmi_over_lan: - name: MyIpmiPolicy enabled: true privilege: admin encryption_key: !env IPMI_ENCRYPTION_KEY tags: - key: env value: prodExample-2: Configure IPMI with read-only privilege for monitoring-only access.
compute: intersight: organizations: - name: MyOrg policies: ipmi_over_lan: - name: MyIpmiReadOnly enabled: true privilege: read-onlyExample-3: Disable IPMI over LAN access for servers that do not require it.
compute: intersight: organizations: - name: MyOrg policies: ipmi_over_lan: - name: MyIpmiDisabled enabled: false