Configure out of band access to servers

[TimStallard]

Having out of band access via IPMI + Serial on all physical servers would be useful for anyone doing maintenance. With some fiddling this can be set up on both older servers with DRAC4 (IPMI 1.5) and newer servers with IPMI 2.

Servers to sort:

• [x] radius2
• [x] auth2
• [x] vms
• [x] gw2
• [x] gw
• [x] vpn2

Things to consider:

• Do we want this on the main SOWN LAN, or on an isolated VLAN?
  • GW will likely need to have this on the SOWN LAN regardless, unless we can get an extra VLAN trunked over there and tagged on its eth0
• IPMI config can be sorted through ipmitool, but BIOS settings need tweaking for serial, either we need to install dell's "syscfg" on all servers, or go and do them all in person
  • Will also require reboots
  • I am in favour of just doing this in person, aside from gw (and the process has been tested on radius2)
• Auth2 will need cables swapping, currently the shared DRAC port is the ECS DMZ interface
  • Will either need udev rules to remap in linux, or actually swap and update all network + fw config
  • Looking at the number of references to eth0/1 in /etc, just updating udev rules looks a lot easier :)
• We should probably have separate credentials for this
• Need to work out some way of teaching the admin system what box has what IPMI IP, and version, or just put it on the wiki?
  • If we taught the admin system about them properly, could generate dns records and monitoring

Magic instructions for the old DRACs, could probably be adapted into a wiki page - https://jslf.app/projects/ipmi/isol-setup.txt

[TimStallard]

All sorted other than VMS today. Auth2 was a pain, SOL can only be mapped to its second serial port - grub + iPXE using console redirection, works fine, kernel + getty configured to use ttyS1. Probably worth noting somewhere (wiki page?), will be needed if booting it into the ubuntu installer.

[TimStallard]

This is all done now - and all tested and working for the VMS-B53-1 build.