Users Guide

The Log in Security enables you to configure the IP range attributes for CMC login using the CMC web interface. To configure
the IP range attributes using CMC web interface:
1. In the left pane, go to Chassis Overview and click Network > Network.
The Network Configuration page is displayed.
2. In the IPv4 Settings section, click Advanced Settings. Alternatively, to access the Log in Security page, in the left pane,
go to Chassis Overview, click Security > Log in.
The Log in Security page is displayed.
3. To enable the user blocking or IP blocking feature, in the Login Lockout Policy section, select Lockout by User Name or
Lockout by IP Address (IPV4) .
The options to set the other login lockout policy attributes are activated.
4. Enter the required values for login lockout policy attributes in the activated fields — Lockout Fail Count, Lockout Fail
Window , and Lockout Penalty Time. For more information, see the CMC Online Help.
5. To save these settings, click Apply.
Configuring Login Lockout Policy Attributes Using
RACADM
You can use RACADM to configure the Login lockout policy attributes for the following features:
● User blocking
● IP address blocking
● Number of login attempts allowed
● Timespan for the lockout failure counts to occur
● Lockout penalty time
● To enable user blocking feature, use:
racadm config -g cfgRacTuning -o cfgRacTuneUserBlkEnable <0|1>
● To enable IP blocking feature, use:
racadm config –g cfgRacTuning –o cfgRacTuneIPBlkEnable <0|1>
● To specify the number of login attempts, use:
racadm config –g cfgRacTuning –o cfgRacTuneIpBlkFailCount
● To specify the time span within which, lockout fail count failures must occur, use:
racadm config –g cfgRacTuning –o cfgRacTuneIpBlkFailWindow
● To specify value for lockout penalty time, use:
racadm config –g cfgRacTuning –o cfgRacTuneIpBlkPenaltyTime
For more information about these objects, see the Chassis Management Controller for PowerEdge VRTX RACADM Command
Line Reference Guide available at dell.com/support/manuals.
Understanding Redundant CMC Environment
You can install a standby CMC that takes over if your active CMC stops functioning. The redundant CMC may be pre-installed
or can be installed later. To make sure full redundancy or best performance, it is important that the CMC network is properly
cabled.
Failovers can occur when you:
● Run the RACADM cmcchangeover command. See the cmcchangeover command section in the Chassis Management
Controller for PowerEdge VRTX RACADM Command Line Reference Guide available at dell.com/support/manuals.
● Run the RACADM racreset command on the active CMC. See the racreset command section in the Chassis
Management Controller for PowerEdge VRTX RACADM Command Line Reference Guide available at dell.com/support/
manuals..
Installing and Setting Up CMC
37