ILO trough ssh port tunnel

[Denali]

Hello,

I've sucessfully connected from my computer to ILO via ssh port forwarding/tunneling (trough two hop servers, second server is facing the ILO IP in the same network so is able to connect to ILO, but doesn't have GUI, hence the shh tunneling), with these ports:

443, 17990, 17988, 23, 3389

I connect to ILO:

https://127.0.0.1:443

Everything is working, even the java remote console, but when I try to connect remote iso image, console is frozen for couple of seconds, then the error appears:

Unexpected HELLO reponse (10).Connection failed

I have this: ILO4, HP DL 380p G8, ILO FW 2.61

Java console logging:

ui: Pushing modality for applet ID 4 with dialog java.awt.FileDialog[filedlg10,0,0,0x0,APPLICATION_MODAL,title=Choose Disk Image File,dir= null,file= *.iso,load]
Image file: C:\Install\ISO\sw_arch.iso
Got NO CD or removable connection

network: Connecting http://127.0.0.1:17988/ with proxy=DIRECT
Unexpected Hello Response!
ui: Pushing modality for applet ID 4 with dialog com.hp.ilo2.virtdevs.VErrorDialog[dialog12,572,316,348x130,layout=java.awt.BorderLayout,APPLICATION_MODAL,title=Error,defaultCloseOperation=HIDE_ON_CLOSE,rootPane=javax.swing.JRootPane[,8,31,332x91,layout=javax.swing.JRootPane$RootLayout,alignmentX=0.0,alignmentY=0.0,border=,flags=16777673,maximumSize=,minimumSize=,preferredSize=],rootPaneCheckingEnabled=true]

I can't connect here if I try in web browser:

http://127.0.0.1:17988/

Thank you for your help

[Denali]

I've upgraded firmware to 2.78  - latest I found, now also .NET is working, but still can't mount ISO - in .NET or Java

I also tried standalone HP console application. This prints no error when ISO is attached, but when I try to boot from ISO, is not working.

Interestingly all is working on another server but it's Gen9 (ILO 4, fw is 2.77).

What can be wrong with the Gen8 server?

[Denali]

Tested with ILO5 server on the same network and the same result. No problem then with ILO, firmware or Generation.

Must be a networking problem.

Disabled firewall. But nothing.

But check this:

This is remote console established ok on port 17990:

# netstat -an|grep 17990
tcp 0 0 192.168.128.20:43342       192.168.128.2:17990 ESTABLISHED
tcp 3194164 0 192.168.128.20:43340        192.168.128.2:17990 ESTABLISHED

And this is remote drive waiting for accept - and why is there 92.168.128.2 and not 192.168.128.2 ? :

# netstat -an|grep 17988
tcp 0 1 194.196.139.186:32894         92.168.128.2:17988 SYN_SENT

[Denali · Accepted solution]

Well that is because I made a mistake in my ssh command:

-L 17988:92.168.128.2:17988 

instead of

L 17988:192.168.128.2:17988

What a shame, sorry for the stupid error.