I love being caught in a troubleshooting circle. C...
# citrix-netscaler
r
I love being caught in a troubleshooting circle. Customer deploying new MPX 16k LOM is configured and you can attach. Console won't open because Java not working and HTML5 is “greyed out” I'm assuming not enabled. New 16k so the IPMI is locked. Can't add an IP to the shell because we can't launch the console. Can't turn off the IPMI lock without the shell having an IP Address. Anyone know of a method to overcome this remotely?
b
Remotely connected serial over ethernet? Jokes... I ran into this same thing recently - was it discovered via a security scan? Or could we use an Edge in the compatibility mode with an old Java ver in a fslogix Java container?
r
It is a brand new pair of appliances. They had the LOM set up after they were rack mounted and then they left. I'm just starting with the customer and this is where it's at. I'm opening a ticket with support, but thought I'd ask in here to see if anyone else ran into the problem, or if I'm lucky and found it first. Lol.
b
i think the one i was dealing with, the lom port wasnt even plugged in and we had to hit IPMI via 0/1 to configure
i wasnt physically in front of it
but the guy remotely swore it wasnt plugged and i think its doable to ipmitool via mgmt
r
Maybe, I can't find the commands. Hopefully the ticket will give us an answer, and I'll share the fix.
👀 1
m
@Richard Faulkner hit me up if you need help, you can do it using ipmitool. First try to see if ipmitool mc info returns any information for you. The cmd to set an IP is just ipmitool lan set 1 ipsrc static ipmitool lan set 1 ipaddr 1.1.1.10 ipmitool lan set 1 netmask 255.255.255.255 ipmitool lan set 1 defgw ipaddr 1.1.1.1
r
Those commands set the IP of the NetScaler itself? I'll get it downloaded and give it a shot.
m
It sets the IP on the LOM, did i misunderstand that you couldn't set the IP on the LOM because it was locked? https://support.citrix.com/article/CTX477557/mpxsdx-series-910016000-gui-lom-access-to-configuration-settings-are-readonly
r
The IP on the LOM is set, and I can log in to the gui. I cannot open the console to set the NSIP. The GUI only permits the Java console with the HTML 5 client greyed out. As the article states, the GUI config can't be modified because it is locked. To unlock it, you have to log in to the console, from what I understand. I thank you in advance for any assistance.
m
I misunderstood, i read it the other way around.
r
As I feared, with the LOM/BMC being locked by default, you must be physically present at the appliance to issue the commands to unlock it. Might want to add that step to your installation checklists.
m
can you set up the port you have plugged into the management to be on the default subnet and then just hit the GUI that way?
create a new vlan for 192.168.100.0 and set your switch port to an access port with that vlan
r
We'd have to set routes, modify the core switches, etc. It is in a remote hosted data center. We are going to use “Remote Hands”