ILO2 Issue

[XRoK]

I have 1 DL380 G5 and 2 DL580 G5 with ILO2.

I cannot access ILO Web or Online Configuration to all three Servers.

I have to COLD reboot (Unlpug Power Cords) to bring ILO Back, and all seems working fine.

Nextday, it is acting same as before on all three server.

is there licnese issue? I have advance Liccense for all three.

I can ping th IP to ILO but nothing happens, and cannot access Online Configuration from Serve Desktop.

Any Suggestions?

XRoK

[Oscar A. Perez]

Are you running a security scanner on your network?

Look at the iLO section.

http://intranet.hp.com/tsg/GSE/SSRT/Pages/CVE-2014-0160.aspx

[XRoK]

NO, Server is at Data Center and they are not running anything.

Link to site did not work for me.

[Oscar A. Perez]

http://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay/?docId=emr_na-c04249766

[waaronb]

There was another thread talking about Heartbleed and the effect of scanning for that on ILO.

To summarize, ILO isn't vulnerable, but ILO and ILO2 systems will basically lock up if you try scanning it for the Heartbleed flaw, requiring power removal to restore it. Ouch.

Sounds to me like saying they're not vulnerable to Heartbleed isn't exactly true because that's a DoS right there.

Anyway, even if you're not scanning, could someone else have done a scan on your systems to test for flaws? Hopefully your ILO addresses aren't visible to the world. If so, it's possible it was scanned by any of the thousands (hundreds of thousands?) of bots out there looking for servers to compromise ever since it was announced.

[Torsten.]

Update to 2.25:

http://h20566.www2.hp.com/portal/site/hpsc/template.PAGE/public/psi/swdHome/?sp4ts.oid=1135772&spf_p.tpst=swdMain&spf_p.prp_swdMain=wsrp-navigationalState%3DswEnvOID%253D4064%257CswLang%253D%257Caction%253DlistDriver&javax.portlet.begCacheTok=com.vignette.cachetoken&javax.portlet.endCacheTok=com.vignette.cachetoken