CPUG: The Check Point User Group

Resources for the Check Point Community, by the Check Point Community.


First, I hope you're all well and staying safe.
Second, I want to give a "heads up" that you should see more activity here shortly, and maybe a few cosmetic changes.
I'll post more details to the "Announcements" forum soon, so be on the lookout. -E

 

Page 2 of 2 FirstFirst 12
Results 21 to 26 of 26

Thread: SMART-1 (not so smart)

  1. #21
    Join Date
    2014-09-02
    Posts
    377
    Rep Power
    10

    Default Re: SMART-1 (not so smart)

    Quote Originally Posted by jflemingeds View Post
    yeah, thats the real question. I'd like to hear if the ipmitool command can see the psu status. It worked on my open server but that doesn't mean it will work on a smart-1.
    Aha, didn't realize you'd run that on open server (again, shame on me for skimming - trying to respond while also teaching this week). Very possible that your hardware/drivers give info that the Smart-1 25 just can't. I'll have to try and dig out a device to look, but I'm guessing there's just a single header going from the dual power module to the motherboard. That would definitely be a hardware limitation, like PhoneBoy said. All just speculation by me at this point - I hate that.

    -E


    Not that I love referencing SK here, but I just checked and sk91903 mentions the lack of RAID monitoring on 25, 50 and 150. sk42426 references/lists cp_monitor directives - notably present on Smart-1 25B and lacking on Smart-1 25 is the one for "StandbyV", likely showing, as per PhoneBoy, no standby power monitoring.
    Last edited by EricAnderson; 2014-10-21 at 14:51. Reason: Added SK references

  2. #22
    Join Date
    2007-05-25
    Posts
    207
    Rep Power
    18

    Default Re: SMART-1 (not so smart)

    I get this when running the ipmtool command.


    [Expert@sscpsmart02:0]# ipmitool sdr list full 2>/dev/null | egrep -i '^PSU.*watt'
    [Expert@sscpsmart02:0]# ipmitool sdr
    Could not open device at /dev/ipmi0 or /dev/ipmi/0: No such file or directory
    Error obtaining SDR info
    Unable to open SDR for reading
    [Expert@sscpsmart02:0]# ipmitool
    No command provided!
    ipmitool version 1.8.1

    usage: ipmitool [options...] <command>

    -h This help
    -V Show version information
    -v Verbose (can use multiple times)
    -c Display output in comma separated format
    -I intf Interface to use
    -H hostname Remote host name for LAN interface
    -p port Remote RMCP port [default=623]
    -U username Remote session username
    -f file Read remote session password from file
    -C ciphersuite Cipher suite to be used by lanplus interface
    -L level Remote session privilege level [default=USER]
    -A authtype Force use of auth type NONE, PASSWORD, MD2, MD5 or OEM
    -P password Remote session password
    -a Prompt for remote password
    -E Read password from IPMI_PASSWORD environment variable
    -m address Set local IPMB address
    -t address Bridge request to remote target address
    -o oemtype Setup for OEM (use 'list' to see available OEM types)

    Interfaces:
    open Linux OpenIPMI Interface [default]
    imb Intel IMB Interface
    lan IPMI v1.5 LAN Interface
    lanplus IPMI v2.0 RMCP+ LAN Interface

    Commands:
    raw Send a RAW IPMI request and print response
    lan Configure LAN Channels
    chassis Get chassis status and set power state
    event Send pre-defined events to MC
    mc Management Controller status and global enables
    sdr Print Sensor Data Repository entries and readings
    sensor Print detailed sensor information
    fru Print built-in FRU and scan SDR for FRU locators
    sel Print System Event Log (SEL)
    pef Configure Platform Event Filtering (PEF)
    sol Configure IPMIv2.0 Serial-over-LAN
    isol Configure IPMIv1.5 Serial-over-LAN
    user Configure Management Controller users
    channel Configure Management Controller channels
    session Print session information
    exec Run list of commands from file
    set Set runtime variable for shell and exec

    [[Expert@sscpsmart02:0]# ipmitool chassis
    Chassis Commands: status, power, identify, policy, restart_cause, poh, bootdev
    [Expert@sscpsmart02:0]#
    [Expert@sscpsmart02:0]# ipmitool chassis power
    chassis power Commands: status, on, off, cycle, reset, diag, soft
    [Expert@sscpsmart02:0]# ipmitool chassis power status
    Could not open device at /dev/ipmi0 or /dev/ipmi/0: No such file or directory
    Unable to get Chassis Power Status
    [Expert@sscpsmart02:0]#




    -pat

  3. #23
    Join Date
    2011-08-02
    Location
    http://spikefishsolutions.com
    Posts
    1,668
    Rep Power
    15

    Default Re: SMART-1 (not so smart)

    Quote Originally Posted by pat13b View Post
    I get this when running the ipmtool command.


    [Expert@sscpsmart02:0]# ipmitool sdr list full 2>/dev/null | egrep -i '^PSU.*watt'
    [Expert@sscpsmart02:0]# ipmitool sdr
    Could not open device at /dev/ipmi0 or /dev/ipmi/0: No such file or directory
    Error obtaining SDR info
    Unable to open SDR for reading
    [Expert@sscpsmart02:0]# ipmitool
    No command provided!
    ipmitool version 1.8.1

    usage: ipmitool [options...] <command>

    -h This help
    -V Show version information
    -v Verbose (can use multiple times)
    -c Display output in comma separated format
    -I intf Interface to use
    -H hostname Remote host name for LAN interface
    -p port Remote RMCP port [default=623]
    -U username Remote session username
    -f file Read remote session password from file
    -C ciphersuite Cipher suite to be used by lanplus interface
    -L level Remote session privilege level [default=USER]
    -A authtype Force use of auth type NONE, PASSWORD, MD2, MD5 or OEM
    -P password Remote session password
    -a Prompt for remote password
    -E Read password from IPMI_PASSWORD environment variable
    -m address Set local IPMB address
    -t address Bridge request to remote target address
    -o oemtype Setup for OEM (use 'list' to see available OEM types)

    Interfaces:
    open Linux OpenIPMI Interface [default]
    imb Intel IMB Interface
    lan IPMI v1.5 LAN Interface
    lanplus IPMI v2.0 RMCP+ LAN Interface

    Commands:
    raw Send a RAW IPMI request and print response
    lan Configure LAN Channels
    chassis Get chassis status and set power state
    event Send pre-defined events to MC
    mc Management Controller status and global enables
    sdr Print Sensor Data Repository entries and readings
    sensor Print detailed sensor information
    fru Print built-in FRU and scan SDR for FRU locators
    sel Print System Event Log (SEL)
    pef Configure Platform Event Filtering (PEF)
    sol Configure IPMIv2.0 Serial-over-LAN
    isol Configure IPMIv1.5 Serial-over-LAN
    user Configure Management Controller users
    channel Configure Management Controller channels
    session Print session information
    exec Run list of commands from file
    set Set runtime variable for shell and exec

    [[Expert@sscpsmart02:0]# ipmitool chassis
    Chassis Commands: status, power, identify, policy, restart_cause, poh, bootdev
    [Expert@sscpsmart02:0]#
    [Expert@sscpsmart02:0]# ipmitool chassis power
    chassis power Commands: status, on, off, cycle, reset, diag, soft
    [Expert@sscpsmart02:0]# ipmitool chassis power status
    Could not open device at /dev/ipmi0 or /dev/ipmi/0: No such file or directory
    Unable to get Chassis Power Status
    [Expert@sscpsmart02:0]#




    -pat
    I'm going to guess that is the root cause for not being able to monitor power. You do have a work around for raid. You could always sent a snmp trap evey 5 mins saying "I have at least 1 PSU working!" If you stop getting it you know something bad just happened. :D

  4. #24
    Join Date
    2005-08-14
    Location
    Gig Harbor, WA, USA
    Posts
    2,500
    Rep Power
    22

    Default Re: SMART-1 (not so smart)

    Quote Originally Posted by EricAnderson View Post
    At the risks of sounding like I'm trying to "defend" either PhoneBoy or Check Point (who I don't think need it in this case) and of getting more off-topic, I think you've chosen the wrong post to call him out. Written word is always open to interpretation, but the way I read this, PB is actually admitting to a capability that is lacking in the Smart-1 25 and adding that it was addressed/corrected in the current generation of devices. If you want to fault PhoneBoy for his corporate devotion, I'm sure you could dig up a more biased post. ;)
    Everyone knows where my paycheck comes from at this point, so anything I say could easily be interpreted as "defending Check Point" even when I'm simply bringing some facts into the discussion. :)

    What I find more pertinent is that rather than simply throw a faster CPU and more RAM into the boxes (which would have been easier), Check Point seems to have re-architected (or at least re-selected) the hardware platform at a deeper level. PhoneBoy, any other less prominent, unadvertised, or unspecified improvements we should look for?
    With my Check Point hat on, I can't give you anything more than the speeds and feeds that are listed on the datasheets.

    What I can say is that the original Smart-1 appliances (5, 25, 50, 150) came out in June 2009, the current generation came out in May 2014.
    There's been a lot of changes in terms of the kinds of hardware that are available, the requirements that need to be served, and of course five more years of customer feedback.
    We also provide more information with regards to choosing the appropriate sized appliance.
    http://phoneboy.org
    Unless otherwise noted, views expressed are my own

  5. #25
    Join Date
    2005-08-14
    Location
    Gig Harbor, WA, USA
    Posts
    2,500
    Rep Power
    22

    Default Re: SMART-1 (not so smart)

    Quote Originally Posted by pat13b View Post
    Although we purchased this setup well over a year ago, due to politics, We are just getting around to deploying.
    It seems to me this could be addressed with some sort of tradein for the newer hardware.
    I don't think it will be a zero cost thing, but it will undoubtedly be cheaper than just buying the new Smart-1.
    Work with your sales team to see what's possible.
    http://phoneboy.org
    Unless otherwise noted, views expressed are my own

  6. #26
    Join Date
    2014-09-05
    Location
    Mountain View, CA
    Posts
    5
    Rep Power
    0

    Default Re: SMART-1 (not so smart)

    Did you look at the cpstat command? Run it without parameters and you will see "os" has a few flavors. Play around with them. I know we use that command in our product.
    CEO & Founder of indeni, the network knowledge company

Page 2 of 2 FirstFirst 12

Similar Threads

  1. Smart-1 on VMware
    By gunnahafta in forum Check Point Smart-1 Security Management Appliances
    Replies: 9
    Last Post: 2014-03-10, 05:07
  2. R65 P1 to R75 smart-1 standalone?
    By jmcgrady in forum Provider-1 (Multi-Domain Management)
    Replies: 6
    Last Post: 2011-03-24, 01:44
  3. SMART CONSOLE
    By fauzzi in forum SmartDashboard
    Replies: 3
    Last Post: 2010-10-31, 13:10
  4. Restart Smart-1
    By erkan in forum Check Point Smart-1 Security Management Appliances
    Replies: 1
    Last Post: 2010-05-27, 06:49
  5. No Smart Map
    By switzer in forum SmartDashboard
    Replies: 7
    Last Post: 2008-03-20, 15:32

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •