2 ms·
Back when boards kept the IPMI on a separate interface it was easy to isolate them, including shutting down all port to port traffic on a switch. Now, on many
by nullc 9y ago
Back when boards kept the IPMI on a separate interface it was easy to isolate them, including shutting down all port to port traffic on a switch.
Now, on many motherboards the BMC stuff will aggressively talk in-band even if you think you've disabled that.
- angry_octet 9y agoAnd even if all the dedicated IPMI ports are on a separate switch, if you have root on one box, you can attack another via the IPMI network. You have to put ACLs on the switch to prevent traffic except to the admin node.