
3. To enable the user blocking or IP blocking feature, in the Login Lockout Policy section, select Lockout by User
Name or Lockout by IP Address (IPV4) .
The options to set the other login lockout policy attributes are activated.
4. Enter the required values for login lockout policy attributes in the activated fields — Lockout Fail Count, Lockout
Fail Window , and Lockout Penalty Time. For more information, see the
CMC Online Help
.
5. To save these settings, click Apply.
Configuring Login Lockout Policy Attributes Using RACADM
You can use RACADM to configure the Login lockout policy attributes for the following features:
• User blocking
• IP address blocking
• Number of login attempts allowed
• Timespan for the lockout failure counts to occur
• Lockout penalty time
• To enable user blocking feature, use:
racadm config -g cfgRacTuning -o cfgRacTuneUserBlkEnable <0|1>
• To enable IP blocking feature, use:
racadm config –g cfgRacTuning –o cfgRacTuneIPBlkEnable <0|1>
• To specify the number of login attempts, use:
racadm config –g cfgRacTuning –o cfgRacTuneIpBlkFailCount
• To specify the time span within which, lockout fail count failures must occur, use:
racadm config –g cfgRacTuning –o cfgRacTuneIpBlkFailWindow
• To specify value for lockout penalty time, use:
racadm config –g cfgRacTuning –o cfgRacTuneIpBlkPenaltyTime
For more information about these objects, see the
RACADM Command Line Reference Guide for iDRAC7 and CMC
available at dell.com/support/manuals.
Understanding Redundant CMC Environment
You can install a standby CMC that takes over if your active CMC fails. The redundant CMC may be pre-installed or can
be installed later. It is important that CMC network is properly cabled to ensure full redundancy or best performance.
Failovers can occur when you:
• Run the RACADM cmcchangeover command. (See the cmcchangeover command section in the
RACADM Command
Line Reference Guide for iDRAC7 and CMC)
.
• Run the RACADM racreset command on the active CMC. (See the racreset command section in the
RACADM
Command Line Reference Guide for iDRAC6 and CMC)
.
• Reset the active CMC from Web interface. (See the Reset CMC option for Power Control Operations that is described
in Executing Power Control Operations.)
• Remove the network cable from the active CMC.
• Remove the active CMC from the chassis.
• Initiate a CMC firmware flash on the active CMC.
• Have an active CMC that is no longer functional.
NOTE: In the event of a CMC failover, all iDRAC connections and all active CMC sessions are lost. Users with
lost sessions must reconnect to the new active CMC.
39
Comentarios a estos manuales