User's Manual

Using the RACADM Command Line Interface 77
Configuring the Network Security Settings
NOTE: To perform the following steps, you must have Chassis Configuration
Administrator privilege.
Enabling IP Range Checking
IP filtering compares the IP address of an incoming login to the IP address
range that is specified in the following cfgRacTuning properties:
• cfgRacTuneIpRangeAddr
• cfgRacTuneIpRangeMask
The cfgRacTuneIpRangeMask property is applied to both the incoming IP
address and to the cfgRacTuneIpRangeAddr properties. If the results are
identical, the incoming login request is allowed to access the iDRAC. Logins
from IP addresses outside this range receive an error.
The login proceeds if the following expression equals zero:
cfgRacTuneIpRangeMask & (
<incoming-IP-address> ^
cfgRacTuneIpRangeAddr)
where & is the bitwise AND of the quantities and ^ is the bitwise exclusive-
OR.
Using RACADM to Configure Users
Before You Begin
You can configure up to 16 users in the CMC property database. Before you
manually enable a CMC user, verify if any current users exist. If you are
configuring a new CMC or you ran the RACADM racresetcfg command,
the only current user is root with the password calvin. The
racresetcfg subcommand resets the CMC back to the original defaults.
NOTICE: Use caution when using the racresetcfg command, because it will
reset all configuration parameters to the original defaults. Any previous changes
are lost.
NOTE: Users can be enabled and disabled over time, and disabling a user does not
delete the user from the database. If a user is disabled and then added again, the
user may have a different index number on each chassis.