> Source: [sk176942](https://support.checkpoint.com/results/sk/sk176942) # sk176942 - iDRAC Troubleshooting | Property | Value | |----------|-------| | Solution ID | sk176942 | | Date Created | 2021-12-16 | | Last Modified | 2023-04-20 | | Technical Level | General | | Products | Security Management Server | | Versions | R81.20, R81.10 (EOS), R81 (EOS) | | OS | Gaia | | Platform | Smart-1 | ## Solution This table provides some verification tests and troubleshooting for iDRAC/LOM. Table key: * Test - The verification test to do. * Command - The command to run for the test. * Expected Output - The expected output/behavior in a normal system. * Next Step - What to do in case of a result other than the expected output/behavior. **Important Note** : Do **not** change the iDRAC interface. |-------------------------------------------------------------------------------------------------------------|-----------------|-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| | Test | Items | Description | | Make sure that the admin user password generated | Command | N/A | | Make sure that the admin user password generated | Expected Output | N/A | | Make sure that the admin user password generated | Next Step | `cpidrac --generate_admin_password` **Note**: The admin user is for system use only because of the non-operator User Role. | | Check the default status of the iDRAC NIC (enabled or disabled) | Command | `cpidrac --get_external_nic_state` | | Check the default status of the iDRAC NIC (enabled or disabled) | Expected Output | ``` External NIC status:enabled ``` | | Check the default status of the iDRAC NIC (enabled or disabled) | Next Step | `cpidrac --set_external_nic_state=enable` | | Check that the eth-idrc0 interface is up and running in the ifconfig output and has the correct ip and mask | Command | `ifconfig eth-idrc0` | | Check that the eth-idrc0 interface is up and running in the ifconfig output and has the correct ip and mask | Expected Output | ``` eth-idrc0 � Link encap:Ethernet �HWaddr 6C:2B:59:7C:A4:12 inet addr:169.254.0.2 �Bcast:169.254.0.255 �Mask:255.255.255.0 UP BROADCAST RUNNING MULTICAST �MTU:1500 �Metric:1 ``` | | Check that the eth-idrc0 interface is up and running in the ifconfig output and has the correct ip and mask | Next Step | Run these commands: `ifconfig eth-idrc0 169.254.0.2 netmask 255.255.255.0` `ifup eth-idrc0` | | Check bindings of the iDRAC interface Important: Do **not**change the iDRAC interface. | Command | `cat /config/active | grep -i idrc` | | Check bindings of the iDRAC interface Important: Do **not**change the iDRAC interface. | Expected Output | ``` interface:eth-idrc0 t interface:eth-idrc0:ipaddr:169.254.0.2:mask 24 interface:eth-idrc0:state on ``` | | Check bindings of the iDRAC interface Important: Do **not**change the iDRAC interface. | Next Step | Run these commands: `dbset interface:eth-idrc0:ipaddr:169.254.0.2:mask 24` `dbset interface:eth-idrc0:state on` `dbset :save` | | Check ping to the internal iDRAC address | Command | `ping 169.254.0.1` | | Check ping to the internal iDRAC address | Expected Output | ``` PING 169.254.0.1 (169.254.0.1) 56(84) bytes of data. 64 bytes from 169.254.0.1: icmp_seq=1 ttl=64 time=0.214 ms 64 bytes from 169.254.0.1: icmp_seq=2 ttl=64 time=0.167 ms ``` | | Check ping to the internal iDRAC address | Next Step | Run these commands: `dbset interface:eth-idrc0:ipaddr:169.254.0.2:mask 24` `dbset interface:eth-idrc0:state on` `dbset :save` | | Make sure that "169.254.0.0/24" is allowed to access your machine | Command | `clish -c "show allowed-client all"` | | Make sure that "169.254.0.0/24" is allowed to access your machine | Expected Output | ``` Host � � � � �169.254.0.2 OR Network � �� � 169.254.0.0 � � � 24 OR Host � � � � ��Any ``` | | Make sure that "169.254.0.0/24" is allowed to access your machine | Next Step | `clish -c "add allowed-client network ipv4-address 169.254.0.0 mask-length 24"` | | Check lominfo output | Command | `lominfo` | | Check lominfo output | Expected Output | ``` Firmware Revision : 4.40 IP Address : 192.168.1.5 IPv6 Status : Enabled IPv6 Address : 3900:172::2/64 ``` | | Check lominfo output | Next Step | `service ipmi restart` | | Check that there are no errors in this file "/var/log/cp_idrac.log" | Command | N/A | | Check that there are no errors in this file "/var/log/cp_idrac.log" | Expected Output | N/A | | Check that there are no errors in this file "/var/log/cp_idrac.log" | Next Step | N/A | | Check ssh to the iDRAC interface | Command | `ssh 169.254.0.1` | | Check ssh to the iDRAC interface | Expected Output | ``` Prompt to type password: Password: ``` | | Check ssh to the iDRAC interface | Next Step | Check *".ssh/known_hosts"* file content, there should be an entry for this IP. You can try to remove the entry and try the ssh again. | | Check that ipmi is up and running | Command | `service ipmi status` | | Check that ipmi is up and running | Expected Output | ``` ipmi_msghandler module loaded. ipmi_si module loaded. ipmi_devintf module loaded. /dev/ipmi0 exists. ``` | | Check that ipmi is up and running | Next Step | `service ipmi restart` |
If the issue persists, or is not listed in the table above, [contact Check Point Support](https://www.checkpoint.com/support-services/contact-support/) for assistance. --- # Agent Instructions This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products. ## Navigating This Knowledge Base - **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt) - **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml) - **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}` - **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content