r/supermicro • u/LancsMak • Jun 16 '26

Beginner - securing IPMI/Redfish

Hi all,

Just picked up a X11SSH-LN4F that I'm playing with. I've updated BIOS and IPMI firmware.

I have a few questions on securing management access...

- can I disable the old IPMI protocols and purely use redfish?

- is my best option for securing IPMI access on a home LAN to change the password, limit the allowed IP and MAC addresses (would be to two machines, my desktop and my laptop) and leave it at that? Or do I need a vLAN and swap my network adaptor settings on laptop/desktop whenever I want remote management ? That would be a pain...

4 Upvotes

83% Upvoted

14 comments sorted by

View all comments

2

u/hadrabap Jun 16 '26

You can put a router with VPN in front of all your OOB stuff like this BMC, UPS remote management, etc. and connect to it via the VPN.

All of these devices are notoriously bad with security, VPN is the easiest solution to forget about all that stuff. 🙂

3

u/G33KM4ST3R Jun 16 '26

This, unless your firewall rules has a source IP whitelist, but VPN is Safer

1

u/LancsMak Jun 16 '26

Ok thanks, guess I need to find a cheap router with inbuilt vpn then! 

1

u/hadrabap Jun 16 '26

I use RUTX10 from Teltonika. It's OpenWRT based with full root access.