{"id":255198,"date":"2015-02-14T00:04:27","date_gmt":"2015-02-13T16:04:27","guid":{"rendered":"http:\/\/blog.zhenglei.net\/?p=255198"},"modified":"2016-09-28T21:52:21","modified_gmt":"2016-09-28T13:52:21","slug":"how-to-remotely-access-the-ilo4-of-home-hp-microserver-gen8-behind-a-corporation-firewall","status":"publish","type":"post","link":"https:\/\/blog.zhenglei.net\/?p=255198","title":{"rendered":"How to Remotely access the iLO4 of Home HP MicroServer Gen8 behind a corporation firewall"},"content":{"rendered":"

By ssh local port forward, we can access the iLO4 and Remote console of Home from the corporation network which protected by firewall,\u00a0 with only 80 and 433 ports opened via proxy.<\/p>\n

 <\/p>\n

HOME<\/span><\/strong><\/p>\n

HP Proliant MicroServer Gen8
\niLO4 Advance License installed
\niLO4\u00a0 IP=HOME_ILO4_IP\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 ( Local IP of iLO4 port,\u00a0\u00a0 172.24.0.xxx )<\/p>\n

WAN Router<\/strong>
\nWNR2000 V3
\nDD-WRT build 24160,
\nRemote ssh login enabled
\nWAN IP=HOME_WAN_IP\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 ( 220.234.xxx.xxx, public IP )<\/p>\n

 <\/p>\n

OFFICE<\/strong><\/span><\/p>\n

Network:<\/strong><\/p>\n

Only out going 89\/443 allowed via HTTP Proxy:
\nOFFICE_PROXY_IP : OFFICE_PROXY_PORT<\/p>\n

Linux workstation:<\/strong>
\nUbuntu 10.10
\nOpen JDK v7.0\u00a0\u00a0 \u00a0\u00a0 Installed
\nCorkScrew \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 Installed<\/p>\n

 <\/p>\n

Windows workstation:<\/p>\n

Windows 7
\nputty 0.63 \u00a0 Installed<\/p>\n

How to Accesss ILO4 and Remote Console<\/span><\/h1>\n

by using SSH local port forward,\u00a0 From Office Workstation to Home SSH Server (Router),\u00a0 we can assess iLO4 and Remote Console in Office.<\/p>\n

 <\/p>\n

Linux<\/span>:<\/h2>\n

#!\/bin\/sh<\/strong><\/em><\/span><\/p>\n

# Http proxy of Corp<\/strong><\/em><\/span>
\nHTTP_PROXY_HOST=<\/strong><\/em><\/span>OFFICE_PROXY_IP<\/span>
\nHTTP_PROXY_PORT=<\/strong>OFFICE_PROXY_PROXY<\/span><\/span><\/em><\/span><\/p>\n

#\u00a0 Home ssh server<\/strong><\/em><\/span>
\nSSH_HOST=<\/strong><\/em><\/span>HOME_WAN_IP<\/span>
\nSSH_PORT=443<\/strong><\/em><\/span>
\nSSH_USER=xxxx<\/strong><\/em><\/span><\/p>\n

#\u00a0 Home ILO4 Host<\/strong><\/em><\/span>
\nREMOTE_ILO_HOST=<\/strong><\/em><\/span>HOME_ILO4_IP
\nREMOTE_ILO_PORT=”22 23 17990 80 443 17988 161 162 623″<\/strong><\/em><\/span><\/p>\n

# Office Workstation\u00a0 ILO4 IP <\/strong><\/em><\/span>
\nBIND_ILO_HOST=127.0.0.1<\/strong><\/em><\/span>
\n#BIND_ILO_HOST=192.168.127.8<\/strong><\/em><\/span><\/p>\n

#Generate proxy config file<\/strong><\/em><\/span><\/p>\n

ILO_SSH_PROXY_CONFIG=\/tmp\/ilo_ssh_config<\/strong><\/em><\/span><\/p>\n

echo “Host ${DDWRT_SSH_HOST}” > ${ILO_SSH_PROXY_CONFIG}<\/strong><\/em><\/span>
\necho “ProxyCommand corkscrew ${HTTP_PROXY_HOST} ${HTTP_PROXY_PORT} %h %p” >> ${ILO_SSH_PROXY_CONFIG}<\/strong><\/em><\/span>
\necho “port ${DDWRT_SSH_PORT}” >> ${ILO_SSH_PROXY_CONFIG}<\/strong><\/em><\/span><\/p>\n

echo “Host ${LINUX_SSH_HOST}” >> ${ILO_SSH_PROXY_CONFIG}<\/strong><\/em><\/span>
\necho “ProxyCommand corkscrew ${HTTP_PROXY_HOST} ${HTTP_PROXY_PORT} %h %p” >> ${ILO_SSH_PROXY_CONFIG}<\/strong><\/em><\/span>
\necho “port ${LINUX_SSH_PORT}” >> ${ILO_SSH_PROXY_CONFIG}<\/strong><\/em><\/span><\/p>\n

ILO_OPT_LIST=””<\/strong><\/em><\/span>
\nfor p in ${REMOTE_ILO_PORT}; do<\/strong><\/em><\/span>
\n ILO_OPT_LIST=”${ILO_OPT_LIST} -L ${BIND_ILO_HOST}:${p}:${REMOTE_ILO_HOST}:${p}”<\/strong><\/em><\/span>
\n done<\/strong><\/em><\/span><\/p>\n

# Stop local services already bind to the local ILO4 Ports<\/strong><\/em><\/span>
\nsudo \/etc\/init.d\/ssh stop<\/strong><\/em><\/span>
\nsudo \/etc\/init.d\/lighttpd stop<\/strong><\/em><\/span><\/p>\n

# Setup SSH local forward link from Office to Home<\/strong><\/em><\/span>
\necho “sudo ssh -N -f -F ${ILO_SSH_PROXY_CONFIG} ${ILO_OPT_LIST} ${SSH_USER}@${SSH_HOST}”<\/strong><\/em><\/span>
\nsudo ssh -N -f -F ${ILO_SSH_PROXY_CONFIG} ${ILO_OPT_LIST} ${SSH_USER}@${SSH_HOST}<\/strong><\/em><\/span><\/p>\n

SSH_PID=`pgrep -f “${ILO_OPT_LIST}”`<\/strong><\/em><\/span><\/p>\n

# Access the iLO4 via firefox browser<\/strong><\/em><\/span>
\nfirefox https:\/\/${BIND_ILO_HOST}\/<\/strong><\/em><\/span><\/p>\n

# Launch the Java remote console from iLO4<\/p>\n

# cleanup,\u00a0 stop the ssh local forward<\/strong><\/em><\/span>
\nsudo kill -9 ${SSH_PID}<\/strong><\/em><\/span><\/p>\n

 <\/p>\n

Windows 7:<\/span><\/h2>\n

Config putty iLO4 session as following:<\/p>\n

Config\u00a0 Connection\/Proxy\/HTTP proxy<\/p>\n

Config\u00a0 Connection\/SSH\/Tunnels,\u00a0 by add follow local port forwarding:<\/p>\n

(BIND_ILO_HOST -> HOME_ILO4_IP)<\/p>\n

22 23 17990 80 443 17988 161 162 623<\/strong><\/em><\/span><\/p>\n

Launch firefox,\u00a0 and\u00a0\u00a0 goto https:\/\/ BIND_ILO_HOST\u00a0 => iLO4 Panel Access<\/p>\n

Launch\u00a0 remote console\/ .iNET.IRC<\/strong> from iLO4 panel<\/p>\n

\u00a0<\/span><\/p>\n

\u00a0Note:<\/span><\/p>\n

Note:<\/p>\n

If the PC support Intel AMT technology, you may meet the error 10013 when try to forward 623 port,
\nbecause the port 623 have been taken by the LMS.exe service:<\/p>\n

Solution: Disable the LMS service<\/p>\n

Launch the terminal with admin permission, and run:<\/p>\n

sc stop “UNS”
\nsc stop “LMS”
\nOr disable it forever:<\/p>\n

sc config “UNS” start= disabled
\nsc config “LMS” start= disabled<\/p>\n

 <\/p>\n

*********************************************<\/p>\n

<\/span>iLO 2 Advanced License Keys:
\n35DPH-SVSXJ-HGBJN-C7N5R-2SS4W
\n35SCR-RYLML-CBK7N-TD3B9-GGBW2<\/p>\n

 <\/p>\n","protected":false},"excerpt":{"rendered":"

By ssh local port forward, we can access … \u7ee7\u7eed\u9605\u8bfb →<\/span><\/a><\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6,2,192],"tags":[120,218,303,217,216],"class_list":["post-255198","post","type-post","status-publish","format-standard","hentry","category-internet","category-linux","category-windows7","tag-ddwrt","tag-hp-microserver-gen8","tag-ilo","tag-ilo4","tag-ssh-local-port-forward"],"_links":{"self":[{"href":"https:\/\/blog.zhenglei.net\/index.php?rest_route=\/wp\/v2\/posts\/255198","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.zhenglei.net\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.zhenglei.net\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.zhenglei.net\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.zhenglei.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=255198"}],"version-history":[{"count":12,"href":"https:\/\/blog.zhenglei.net\/index.php?rest_route=\/wp\/v2\/posts\/255198\/revisions"}],"predecessor-version":[{"id":255609,"href":"https:\/\/blog.zhenglei.net\/index.php?rest_route=\/wp\/v2\/posts\/255198\/revisions\/255609"}],"wp:attachment":[{"href":"https:\/\/blog.zhenglei.net\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=255198"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.zhenglei.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=255198"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.zhenglei.net\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=255198"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}