Due to an IPMI vulnerability, Ribbon recommends not connecting the BMC Ethernet port to an external network unless the network is deemed well-protected.
[Reference: NIST National Vulnerability Database website]
Sonus ships the
To configure BMC for remote access:
Connect your PC/laptop via an Ethernet cable to the Field Service Port (FSP) at the back of
In Windows 7 operating system, Open Control Panel > Network and Sharing Center. The Network and Sharing Center window displays.
Click Local Area Connection link.The Local Area Connection Status screen is displayed.
Click Properties. The LAN Properties screen displays.
Select "Internet Protocol Version 4 (TCP/IPv4)" option and click Properties. The Internet Protocol Version 4 (TCP/IPv4) Properties screen appears.
Select Use the following IP addresses option and input the IP address, Subnet mask, and Default gateway. Click OK.
Type the pre-configured IP address “169.254.77.1” in a web browser (Firefox is the recommended browser. If using Internet Explorer, you must manually add “https://169.254.77.1” as a trusted site), and connect to the BMC web interface.
The SBC 7000 is delivered with sample self-signed X.509 certificates. Please be aware that even though these sample certificates will allow you to use HTTPS to access the SBC 7000 from BMC and EMA interfaces, using this protocol with the sample certificates is not a truly secure access method. If your organization requires a more secure access, refer to Generating PKI Certificates.
Log on to the SBC 7000 BMC GUI. The SBC 7000 BMC main screen is displayed.
Navigate to Configuration > Network tab.
The Network Settings screen is displayed.
Configure the BMC IP Address, Prefix and Default Gateway network settings. Select Enable JViewer and/or Enable SSH options under the “Security” settings depending upon your security requirements. It is recommended to leave the Enable IPMI option disabled.
Click Save. The following pop-up message appears.
Disconnect the PC/Laptop from FSP.
Connect the FSP of SBC 7000 to the Ethernet router on LAN segment using a CAT5 Ethernet cable to access the BMC over the network.
Continue to configure network management interfaces.