The HPE iLO (Remote Management port) is used for remote management of the server by the Support Team in serious failure scenarios.
You need to specify an IP address which allows the HPE iLO to be accessed over the Internet. (If you have a HA Cluster, you will need to give an IP address for the HPE iLO on both servers.)
The IP address can be a public or private IP address. If its behind a firewall you need to ensure that these ports are open inbound: TCP 20022, TCP 20080, TCP 20443, TCP 20988, TCP 20990. (you can change these ports if necessary)
Step 1: Select HPE iLO
From within the Commissioning Console, click on the HPE iLO (Remote Management Port) tab
Step 2: Select the Configuration Type
Choose the Configuration Type from the pull down menu. The different options are described below:
We strongly recommend that you configure the iLO to be connected all the time, by selecting the option of Public IP or Private IP behind firewall as described below.
Option 1: Public IP
This option allows you to specify a public IP address for the iLO. All you need to do is enter in the public IP address, Subnet Mask and Default Gateway.
You can also change what ports are used, but we recommend keeping the default ports which are: TCP: 20022, 20080, 20443, 20988, 20990
If the server will sit behind a firewall on the customer network and you are entering a private IP address for the iLO, use the option Private IP behind firewall, as described below.
Option 2: Private IP behind firewall
Use this option if you want to give the iLO a private IP address, and have it behind a firewall. All you need to do is enter in the private IP address, Subnet Mask, Default Gateway and External IP address. The External IP address is the public (WAN side) IP address of the upstream firewall which is NAT'd to the Private IP address of the iLO. The default gateway of the iLO is the private (LAN side) of the upstream firewall.
You also need to configure your firewall to forward the ports through to the Private IP address of the iLO. The ports are listed on this page in the Commissioning Console, and you can change them if you wish.
The default TCP ports which need to be open through your existing firewall are: TCP: 20022, 20080, 20443, 20988, 20990
Option 3: Air Gap (iLO IP same as WAN port)
If you choose this approach, the iLO port will be configured with the same IP address as the WAN port. You will need to ensure that the iLO port is NOT permanently connected and is only connected at the instruction of the Support Team when iLO access is required following a serious server failure (noting that the need to use the iLO to access the server is not a frequent occurrence).
If the Support Team does need remote access using the iLO, a request will be made to move the WAN cable from the WAN port to the iLO port. You will need to ensure that there is someone on the premises where the server is located who is able to do this for the Support Team. The WAN port IP address is configured during the installation process using the Installation Console.
Please note: If the Air Gap option is chosen, the Support Team cannot guarantee to meet the availabilty and response time commitments in the Service Level Agreement. This is because the Support Team is no longer in control of the speed with which it can access the server in the event of a serious failure. This is the key reason why we strongly recommend a permanent connection.
Option 4: Crossover
This option is only available with HA clusters. This option should only be used if you don't have any spare public IP addresses (for the option Public IP), and don't have an external firewall device (for the option Private IP behind firewall. The iLO gets an IP address on the LAN network via DHCP, from the DHCP server running on the server
This option requires you to plug in the iLO into the other server in the clusters LAN. Each server is therefore connected into the other servers LAN port. To cable up the iLo for this option, you need to connect the iLO port into the network port on your other server, which is labelled 4.
Step 3: Configure the iLO ports
If you need to change the ports used for the different functions of the iLO, you can change them to your preferred port numbers. We recommend leaving them as the default.
Step 4: Save
When complete, click Save.
Now please read the article Active Directory Configuration