Users Guide

The Log in Security enables you to configure the IP range attributes for CMC login using the CMC Web
interface. To configure the IP range attributes using CMC Web interface:
1. In the system tree, go to Chassis Overview and click NetworkNetwork.
The Network Configuration page is displayed.
2. In the IPv4 Settings section, click Advanced Settings. Alternatively, to access the Log in Security
page, in the system tree, go to Chassis Overview, click SecurityLog in.
The Log in Security page is displayed.
3. To enable the user blocking or IP blocking feature, in the Login Lockout Policy section, select
Lockout by User Name or Lockout by IP Address (IPV4).
The options to set the other login lockout policy attributes are activated.
4. Enter the required values for login lockout policy attributes in the activated fields — Lockout Fail
Count, Lockout Fail Window, and Lockout Penalty Time. For more information, see the CMC Online
Help.
5. To save these settings, click Apply.
Configuring Login Lockout Policy Attributes Using RACADM
You can use RACADM to configure the Login lockout policy attributes for the following features:
User blocking
IP address blocking
Number of login attempts allowed
Timespan for the lockout failure counts to occur
Lockout penalty time
To enable user blocking feature, use:
racadm config -g cfgRacTuning -o cfgRacTuneUserBlkEnable <0|1>
To enable IP blocking feature, use:
racadm config –g cfgRacTuning –o cfgRacTuneIPBlkEnable <0|1>
To specify the number of login attempts, use:
racadm config –g cfgRacTuning –o cfgRacTuneIpBlkFailCount
To specify the time span within which, lockout fail count failures must occur, use:
racadm config –g cfgRacTuning –o cfgRacTuneIpBlkFailWindow
To specify value for lockout penalty time, use:
racadm config –g cfgRacTuning –o cfgRacTuneIpBlkPenaltyTime
For more information about these objects, see the Chassis Management Controller for Dell PowerEdge
M1000e RACADM Command Line Reference Guide available at dell.com/support/manuals.
Understanding Redundant CMC Environment
You can install a standby CMC that takes over if your active CMC fails. The redundant CMC may be pre-
installed or can be installed later. It is important that CMC network is properly cabled to ensure full
redundancy or best performance.
Failovers can occur when you:
40