Howdy, Stranger!

It looks like you're new here. If you want to get involved, click one of these buttons!


AsrockRack X470D4U and X470D4U2-2T BMC Firmware update problems
New on LowEndTalk? Please Register and read our Community Rules.

All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.

AsrockRack X470D4U and X470D4U2-2T BMC Firmware update problems

emreemre Member, LIR

All these Black Friday Nonsense... Which makes no sense to me.

Turkish Lira went down %20 in one day. No more buying new stuff for me. So time to stick with stuff in hand.

Anyways,

I've got several Ryzen Boxes with AsrockRack X470D4U and X470D4U2-2T Mainboards,

I know a lot of providers here using these exact mainboards here with their Ryzen offerrings, So maybe some help here:

My problem is after updating the latest official BMC Firmware updates,
Here https://www.asrockrack.com/general/productdetail.asp?Model=X470D4U#Download and Here https://www.asrockrack.com/general/productdetail.asp?Model=X470D4U2-2T#Download

Each and every mainboards BMC IPMI interface is now not responding to pings or accessible over LAN.

I can send commands using ipmitool application from linux command line.

But no matter what I do, I can't be able to access to BMC IPMI over LAN.

Only info I can find from AsRock side is this thread from their forum:

https://forum.asrock.com/forum_posts.asp?TID=19681&KW=X470D4U&title=asrock-x470d4u-after-update-to-bmc-03-02-00-ipmi-g

But also this has got no official updates from AsRock.

Somebody mentioned https://www.asrockrack.com/support/faq.asp?id=40 this solution in that thread , but I also don't have the luxury to reboot and flash old version of firmware as all these boxes are production boxes with several virtual servers on them.

Anybody using these mainboards have any clue about what to do to regain access to BMC IPMI Web interface?

As I said I can get response using IPMITOOL from command line. And everything seems to be working.

Please help..

root@ryzen5:~# ipmitool lan print 1
Set in Progress : Set Complete
Auth Type Support : MD5
Auth Type Enable : Callback : MD5
: User : MD5
: Operator : MD5
: Admin : MD5
: OEM : MD5
IP Address Source : Static Address
IP Address : 192.168.100.25
Subnet Mask : 255.255.255.0
MAC Address : a9:a2:60:67:d3:ea
SNMP Community String : AMI
IP Header : TTL=0x40 Flags=0x40 Precedence=0x00 TOS=0x10
BMC ARP Control : ARP Responses Enabled, Gratuitous ARP Disabled
Gratituous ARP Intrvl : 0.0 seconds
Default Gateway IP : 192.168.100.1
Default Gateway MAC : 00:0a:53:70:e0:00
Backup Gateway IP : 0.0.0.0
Backup Gateway MAC : 00:00:00:00:00:00
802.1q VLAN ID : Disabled
802.1q VLAN Priority : 0
RMCP+ Cipher Suites : 0,1,2,3,6,7,8,11,12,15,16,17
Cipher Suite Priv Max : caaaaaaaaaaaXXX
: X=Cipher Suite Unused
: c=CALLBACK
: u=USER
: o=OPERATOR
: a=ADMIN
: O=OEM
Bad Password Threshold : 0
Invalid password disable: no
Attempt Count Reset Int.: 0
User Lockout Interval : 0

Comments

  • DataIdeas-JoshDataIdeas-Josh Member, Patron Provider

    @MrRadic or @Francisco might have an idea. I know they use asrockrack board.

  • FranciscoFrancisco Top Host, Host Rep, Veteran

    Are you using the shared port settings or have a dedicated IPMI link?

    Francisco

  • emreemre Member, LIR

    @Francisco said: Are you using the shared port settings or have a dedicated IPMI link?

    it is shared port.

  • Mahfuz_SS_EHLMahfuz_SS_EHL Host Rep, Veteran

    Which Processor are you using ?

  • emreemre Member, LIR

    @Mahfuz_SS_EHL said: Which Processor are you using ?

    >

    what does the processor got to do with ipmi?

    Ryzen 9 3900X btw...

  • Just had this happen on my X470D4U2-2T. I was able to reset them without taking the server down. Grab the Supermicro IPMICFG tools (https://www.supermicro.com/SwDownload/SwSelect_Free.aspx?cat=IPMI) and check to see if the config is present. ipmicfg -m should show IP.

    Mine was blank, had to reconfig IP, username/password. After all was configured, I did an ipmicfg -r to reboot the IPMI and after 5 minutes I was able to hit web interface again.

  • FranciscoFrancisco Top Host, Host Rep, Veteran

    @emre said:

    @Francisco said: Are you using the shared port settings or have a dedicated IPMI link?

    it is shared port.

    I'm not sure, I haven't played with the shared/bridge port mode at all.

    If you can I'd plugin the dedicated IPMI just to login so you can confirm the bridge settings are OK.

    Francisco

  • oplinkoplink Member, Patron Provider

    You need to make sure your not bonding the ports in the IPMI. Keep IPMI dedicated

  • maybe @terrahost could give a hint :)

  • oplinkoplink Member, Patron Provider

    Just uncheck bonding under settings > network

  • emreemre Member, LIR

    @zorker said: Just had this happen on my X470D4U2-2T. I was able to reset them without taking the server down. Grab the Supermicro IPMICFG tools (https://www.supermicro.com/SwDownload/SwSelect_Free.aspx?cat=IPMI) and check to see if the config is present. ipmicfg -m should show IP.

    Mine was blank, had to reconfig IP, username/password. After all was configured, I did an ipmicfg -r to reboot the IPMI and after 5 minutes I was able to hit web interface again.

    I tested both ipmicfg and ipmitool my ip address / mac address all setup all correct.

    still no webinterface...

  • emreemre Member, LIR

    @Francisco said: I'm not sure, I haven't played with the shared/bridge port mode at all.

    If you can I'd plugin the dedicated IPMI just to login so you can confirm the bridge settings are OK.

    I read that Dedicated ipmi port and Shared one are backups of each other.

    If there is link on Dedicated port IPMI BMC will use it as default on boot , but if there is no link it will use the shared one.

    Thank you for your comments

    I guess these AsrockRack mainboards are defacto standard for Ryzen builds.

    I know Supermicro have one model for ryzens but I wonder why not other big mainboard manufacturers manufacture boards just for this use case.

    There is sure a market for this application of ryzen cpu's.

  • emreemre Member, LIR

    @oplink said: Just uncheck bonding under settings > network

    I don't have any kind of access to webinterface.

    I wil now check if I can edit this setting using ipmitool / ipmicfg.

    Thank you for your answer.

  • ferefientferefient Member
    edited November 2021

    @emre said: but I wonder why not other big mainboard manufacturers manufacture boards just for this use case.

    Ryzen isn't meant for enterprise/server usage. This is why we have a lot of fried node incidents [( @Francisco )]. EPYC, though, is 100% fine.

  • @ferefient the processor might be designed for the desktop market, but those mobos and chassis that the usual reputable Ryzen web hosting provider use, are 100% enterprise grade. I can't debate you on your opinion about Ryzen, but certainly there is a market for it in the hosting market, specially the low end market, which by definition is "try to get as much performance as possible paying as less as possible" from the customer perspective.

    Ryzen supports ECC and these server grade asrock boards also support ECC.

    Overall yes, not suitable for a big enterprise that is spending a few hundreds K in server and infra. But otherwise Ryzen do the job.

    Is a love and hate relationship.

  • @Hxxx said: But otherwise Ryzen do the job.

    Yes, make sure it's using a $30 PSU that's 1000W, and make sure it's all capped out with 10-year-old NOS Taiwanese caps.

  • HxxxHxxx Member
    edited November 2021

    @ferefient said:

    @Hxxx said: But otherwise Ryzen do the job.

    Yes, make sure it's using a $30 PSU that's 1000W, and make sure it's all capped out with 10-year-old NOS Taiwanese caps.

    Are you sure you know what you are talking ?

  • Mahfuz_SS_EHLMahfuz_SS_EHL Host Rep, Veteran

    @emre said:

    @Mahfuz_SS_EHL said: Which Processor are you using ?

    >

    what does the processor got to do with ipmi?

    Ryzen 9 3900X btw...

    You can't figure out what else do they have problem with ;) By the way, I'm using the same model (5 Units), no issue like this but some other issues. I have the contact of their tech team, if you want you can directly communicate.

  • emreemre Member, LIR

    Updates on this matter:

    1- After tons / hours of brain thinkering and google searches I figure out that the most sensible way is to downgrade the bmc firmware to a "working" one.

    2- I then needed ASPEED socflash utility v 1.2 linux version - which is very hard to get - Aspeed was providing it from their website but no more - After some google foo I found it. If anybody needs socflash utility v1.2 linux version, you are free to contact me.

    3- flashed old bmc firmware with socflash linux utilty

    root@r5:~/socflash/SOCFLASH# ./socflash.sh X470D4U_P2.20.00.ima X470D4U_calismayan.ima 
    ASPEED SOC Flash Utility v.1.20.00 
    Warning:
    SoCflash utility is only for engineers to update the firmware in lab,
    it is not a commercialized software product,
    ASPEED has not done compatibility/reliability stress test for SoCflash.
    Please do not use this utility for any mass production purpose.
    Press y to continue if you are agree ....
    y
    Find ASPEED Device 1a03:2000 on 22:0.0 
    MMIO Virtual Address: a364e000 
    Relocate IO Base: f000 
    Found ASPEED Device 1a03:2500 rev. 41 
    Static Memory Controller Information: 
    CS0 Flash Type is SPI 
    CS1 Flash Type is SPI 
    CS2 Flash Type is SPI 
    CS3 Flash Type is NOR 
    CS4 Flash Type is NOR 
    Boot CS is 0 
    Option Information: 
    CS: 0 
    Flash Type: SPI 
    [Warning] Don't AC OFF or Reboot System During BMC Firmware Update!! 
    [SOCFLASH] Flash ID : 1940ef 
    Find Flash Chip #1: WinbondW25Q256/257 
    Backup Flash Chip O.K.                 
    Update Flash Chip #1 O.K.            
    Update Flash Chip O.K.         
    root@r5:~/socflash/SOCFLASH# 
    

    4- After firmware downgrade:

    root@r5:~/socflash/SOCFLASH# ipmitool mc info
    Device ID                 : 32
    Device Revision           : 1
    Firmware Revision         : 2.20
    IPMI Version              : 2.0
    Manufacturer ID           : 49622
    Manufacturer Name         : Unknown (0xC1D6)
    Product ID                : 514 (0x0202)
    Product Name              : Unknown (0x202)
    Device Available          : yes
    Provides Device SDRs      : no
    Additional Device Support :
        Sensor Device
        SDR Repository Device
        SEL Device
        FRU Inventory Device
        IPMB Event Receiver
        IPMB Event Generator
        Chassis Device
    Aux Firmware Rev Info     : 
        0x00
        0x00
        0x00
        0x00
    root@r5:~/socflash/SOCFLASH# ipmitool lan print 1
    MAC Address             : a8:a1:59:86:f3:ec
    SNMP Community String   : AMI
    IP Header               : TTL=0x40 Flags=0x40 Precedence=0x00 TOS=0x10
    BMC ARP Control         : ARP Responses Enabled, Gratuitous ARP Disabled
    Gratituous ARP Intrvl   : 0.0 seconds
    Default Gateway IP      : 0.0.0.0
    Default Gateway MAC     : 00:00:00:00:00:00
    Backup Gateway IP       : 0.0.0.0
    Backup Gateway MAC      : 00:00:00:00:00:00
    802.1q VLAN ID          : Disabled
    802.1q VLAN Priority    : 0
    RMCP+ Cipher Suites     : 0,1,2,3,6,7,8,11,12,15,16,17
    Cipher Suite Priv Max   : caaaaaaaaaaaXXX
                            :     X=Cipher Suite Unused
                            :     c=CALLBACK
                            :     u=USER
                            :     o=OPERATOR
                            :     a=ADMIN
                            :     O=OEM
    Bad Password Threshold  : 0
    Invalid password disable: no
    Attempt Count Reset Int.: 0
    User Lockout Interval   : 0
    root@r5:~/socflash/SOCFLASH# 
    

    5- Now it's time to Enter the usual ip address / gateway of the IPMI

    LAN Configuration
    
    ipmitool lan set 1 ipsrc static
    ipmitool lan set 1 ipaddr 192.168.1.211
    ipmitool lan set 1 netmask 255.255.255.0
    ipmitool lan set 1 defgw ipaddr 192.168.1.254
    ipmitool lan set 1 defgw macaddr 00:0e:0c:aa:8e:13
    ipmitool lan set 1 arp respond on
    ipmitool lan set 1 auth ADMIN MD5
    ipmitool lan set 1 access on
    
    User Configuration
    A user will now be setup with admin rights.
    ipmitool user set name 2 admin
    ipmitool user set password 2
    Password for user 2: 
    Password for user 2: 
    ipmitool channel setaccess 1 2 link=on ipmi=on callin=on privilege=4
    ipmitool user enable 2
     
    

    6- WEB INTERFACE WORKS NOW!!!

    7- Time to upgrade to latest version of BMC firmware now :smile:

    Thank you for all your answers!

    Thanked by 2Tim_kwakman thijs_a
Sign In or Register to comment.