Users Guide

Modifying network settings using web interface
To modify the iDRAC network settings:
1. In the iDRAC Web interface, go to Overview > iDRAC Settings > Network.
The Network page is displayed.
2. Specify the network settings, common settings, IPv4, IPv6, IPMI, and/or VLAN settings as per your requirement and click Apply.
If you select Auto Dedicated NIC under Network Settings, when the iDRAC has its NIC Selection as shared LOM (1, 2, 3, or 4) and
a link is detected on the iDRAC dedicated NIC, the iDRAC changes its NIC selection to use the dedicated NIC. If no link is detected on
the dedicated NIC, then the iDRAC uses the shared LOM. The switch from shared to dedicated time-out is five seconds and from
dedicated to shared is 30 seconds. You can configure this time-out value using RACADM or WSMAN.
Network operations over IPv6 is supported only with IPv6 address, using hostname is not supported.
For example, if IPv6 address of lcui-fwupdate.com is 2607:f2b1:f083:181::15. then using lcui-fwupdate.com causes a failure in network
operation. Use the IPv6 address 2607:f2b1:f083:181::15 to avoid this failure.
For information about the various fields, see the iDRAC Online Help.
使用本地 RACADM 修改网络设置
要生成可用网络属性列表，使用该命令
racadm get iDRAC.Nic
要使用 DHCP 获得 IP 地址，请使用下面的命令写入对象 DHCPEnable 并启用此功能。
racadm set iDRAC.IPv4.DHCPEnable 1
以下示例介绍如何使用命令配置所需的 LAN 网络属性：
racadm set iDRAC.Nic.Enable 1
racadm set iDRAC.IPv4.Address 192.168.0.120
racadm set iDRAC.IPv4.Netmask 255.255.255.0
racadm set iDRAC.IPv4.Gateway 192.168.0.120
racadm set iDRAC.IPv4.DHCPEnable 0
racadm set iDRAC.IPv4.DNSFromDHCP 0
racadm set iDRAC.IPv4.DNS1 192.168.0.5
racadm set iDRAC.IPv4.DNS2 192.168.0.6
racadm set iDRAC.Nic.DNSRegister 1
racadm set iDRAC.Nic.DNSRacName RAC-EK00002
racadm set iDRAC.Nic.DNSDomainFromDHCP 0
racadm set iDRAC.Nic.DNSDomainName MYDOMAIN
注: 如果将 iDRAC.Nic.Enable 或 iDRAC.Nic.Enable 设置为 0，则即使启用 DHCP，iDRAC LAN 也会处于禁用状态。
配置 IP 筛选
除了用户验证之外，访问 iDRAC 时使用以下选项可提供更高的安全性：
• IP 筛选限制访问 iDRAC 的客户端的 IP 地址范围。它将传入登录的 IP 地址与指定的范围进行比较，并只允许来自管理站（其 IP
地址位于该范围内）的 iDRAC 访问。所有其他登录请求都将被拒绝。
• 当特定 IP 地址发生重复登录失败时，则会阻止该地址在预选的时间长度内登录 iDRAC。如果您两次未成功登录，则只能在 30 秒
后才能重新登录。如果登录失败次数超过两次，则只能在 60 秒后重新登录。
随着特定 IP 地址登录失败次数的累积，累计次数将在内部计数器中记录。当用户成功登录后，失败历史记录将被清除，并且内部计
数器将重置。
注: 如果来自客户端 IP 地址的登录尝试被阻止，少数 SSH 客户端会显示以下信息：ssh exchange identification:
Connection closed by remote host。
注: 如果您使用 Dell Deployment Toolkit (DTK)，有关权限的信息请参阅 《Dell Deployment Toolkit 用户指南》 。
74 配置 iDRAC