Skip to main content

Check out Interactive Visual Stories to gain hands-on experience with the SSE product features. Click here.

Skyhigh Security

Use the Remote Management Module for Monitoring

The Remote Management Module (RMM) is a tool for monitoring the Web Gateway appliance hardware. To set it up, you can use a command line utility.
 

Command line utility for the Remote Management Module

The rmm-enable command line utility allows you enable the Remote Management Module without restarting an appliance and accessing the BIOS setup.

The utility uses the OpenIPMI and ipmitool programs to perform the setup. Use of these programs can lead to conflicts when the SNMP Subagent (SNMPSA) is accessing the hardware at the same time.

The utility therefore includes functions for disabling this other tool during the setup and for restarting it again.

The rmm-disable command line utility allows you to disable the module by deactivating access to it.

User name for running the Remote Management Module

Beginning with the model E appliances, the default user name after running the rmm-enable command is mwg. With this user name, you have administrator rights.

For the WBG-4500-E appliance, you need to complete the following extra steps to access KVM and VMedia resources.

  • In the user interface for the utility, select Settings | User Management.
  • Submit mwg as user name, then select KVM access and VMedia access.

Remote Management Module configuration parameters

The following table lists the parameters that can be configured when using the command line utility to set up the Remote Management Module.

Parameter Description
LAN channel Selects a network interface card (NIC) on an appliance as the channel for LAN communication.

The following parameter values can be configured.
  • onboard Selects the first of the onboard NICs.
  • rmm — Selects the out-of-band RMM NIC.
LAN IP address Specifies the IP address of the selected LAN channel.
LAN subnet mask Specifies the subnet mask for the selected LAN channel.
LAN default gateway IP Specifies the IP address of the default gateway for the selected LAN channel.
RMM user password Sets a password for IPMI over LAN and HTTP or HTTPS.

NOTE:  When working with a WBG-4500-E appliance, the required minimum length for this password is 8 characters.

Enable the Remote Management Module with a utility

Enable the Remote Management Module (RMM) with the command line utility that is provided for this task.

  1. Connect to the Web Gateway appliance that you want to run the utility on from a system console.

    You can use a local system console, which is directly connected to the appliance, or connect from a remote system console using SSH.
     
  2. On the command line of the system console, enter the rmm-enable command and suitable settings as you are prompted for them.

    The sample lines below show the console prompts and your input for the command and settings.

    If the SNMPSA tool is also running, the command line utility prompts you to stop this tool after you have entered the command name. Enter yes (or y) to respond to the prompt.

For the WBG-4500 E appliance, only the dedicated RMM port is supported, but not the shared onboard LAN. This means that you must select rmm here when working with this appliance model.

# rmm-enable
Enter LAN Channel (onboard|rmm)     rmm
LAN IP Address <x>.<x>.<x>.<x>     10.0.0.42
LAN Subnet Mask <x>.<x>.<x>.<x>     255.255.255.0
LAN Default Gateway IP <x>.<x>.<x>.<x>     10.0.0.1
RMM User Name     mwg
RMM Root Password     <not shown>
RMM Root Password     <confirmation not shown>

The command line utility displays the settings that were entered and asks whether they are correct.

LAN Channel             rmm
LAN IP Address          10.0.0.42
LAN Subnet Mask         255.255.255.0
LAN Default Gateway IP  10.0.0.1
RMM User Name     mwg

Is the above configuration correct?
  1. Enter yes (or y ) after the question if you want to configure these settings. If you enter no (or n), the command line utility prompts you again.

    After you have entered y(es), the command line utility processes the settings and displays the steps that it takes.
Setting RMM Root Password
Setting LAN IP Address to 10.0.0.42
Setting LAN Subnet Mask to 255.255.255.0
Setting LAN Default Gateway IP to 10.0.0.1
Setting User Name to mwg

Disable the Remote Management Module with a utility

Disable the Remote Management Module with the command line utility that is provided for this task.

To disable the Remote Management Module, the utility deactivates the LAN channel that is configured for access to the module.

  1. Connect to the Web Gateway appliance that you want to run the utility on from a system console.

    You can use a local system console, which is directly connected to the appliance, or connect from a remote system console using SSH.
     
  2. On the command line of the system console, enter the rmm-disable command and specify the LAN channel that you selected for access to the Remote Management Module.

    The following sample lines show the console prompts and your input for the command and the LAN channel.
# rmm-disable
Enter LAN Channel (onboard|rmm) onboard

The command line utility deactivates the LAN channel by setting the relevant IP addresses to zero without asking for further confirmation, displaying the steps that it takes.

Setting LAN IP Address to 0.0.0.0
Setting LAN Subnet Mask to 0.0.0.0
Setting LAN Default Gateway IP to 0.0.0.0
  • Was this article helpful?