From 0361870e829f22741c67a7a05f297c049cdb25d0 Mon Sep 17 00:00:00 2001 From: Mircea Dan Gheorghe Date: Mon, 19 Oct 2026 13:02:54 -0700 Subject: [PATCH 01/21] chore(mgmt): sync dhcpd.conf with live config on mgmt Copy /etc/dhcp/dhcpd.conf from 172.22.0.1 verbatim (2026-10-19) so later changes are reviewable diffs against what is actually running. Signed-off-by: Mircea Dan Gheorghe --- hardware/mgmt/fs/etc/dhcp/dhcpd.conf | 110 ++++++++++++++++++++++++++- 1 file changed, 108 insertions(+), 2 deletions(-) diff --git a/hardware/mgmt/fs/etc/dhcp/dhcpd.conf b/hardware/mgmt/fs/etc/dhcp/dhcpd.conf index 02111f3..6d5ea3e 100644 --- a/hardware/mgmt/fs/etc/dhcp/dhcpd.conf +++ b/hardware/mgmt/fs/etc/dhcp/dhcpd.conf @@ -12,7 +12,8 @@ option domain-name-servers 8.8.8.8, 1.1.1.1; option routers 172.22.0.1; option sztp-redirect-urls code 143 = text; -option sztp-redirect-urls "https://bootstrap:8080/restconf/operations/ietf-sztp-bootstrap-server:get-bootstrapping-data"; +#option sztp-redirect-urls "https://bootstrap:8080/restconf/operations/ietf-sztp-bootstrap-server:get-bootstrapping-data"; +option sztp-redirect-urls "xverse.fusionlayer.com:9090"; default-lease-time 600; max-lease-time 7200; @@ -117,10 +118,11 @@ host dh4idrac { } host dh4dypimc { - hardware ethernet 10:2e:00:01:b4:6f; + hardware ethernet 10:2e:00:01:b5:ff; fixed-address 172.22.4.4; } +# see TBD, maybe ????? # host dh3cn106 { # hardware ethernet zzzzzzzzzzzzzz; # fixed-address 172.22.3.3; @@ -151,6 +153,110 @@ host tor { fixed-address 172.22.1.250; } +# Dell PowerEdge R760xa idrac-7GDGN34 +host dh5idrac { + hardware ethernet a8:3c:a5:38:19:f8; + fixed-address 172.22.2.5; +} + +host dh5 { + hardware ethernet d4:04:e6:d8:0c:70; + fixed-address 172.22.1.5; +} + +# udhcp 1.21.1 +# ASUSTek Computer Inc +# ToR->Et29 based on tor mac table +# DPU Host 9 BMC based on cabling diagram for port eth29 +host dh9bmc { + hardware ethernet a0:36:bc:cb:cf:f7; + fixed-address 172.22.2.9; +} + +host dh9 { + hardware ethernet a0:36:bc:cb:fb:09; + fixed-address 172.22.1.9; +} + +host dh9dpu { + hardware ethernet d4:e5:c9:00:ec:31; + fixed-address 172.22.3.9; +} + +############################################# +####### T B D area ###### +############################################# + +# ToR->Et2 +# marvell cn106 bmc port based on cabling diagram +host TBD01 { + hardware ethernet 02:04:9f:70:8e:be; + fixed-address 172.22.3.3; +} + + +# Senao Networks Inc +host TBD02 { + hardware ethernet d4:e5:c9:00:ec:30; + fixed-address 172.22.4.102; +} + +# ASUSTek COMPUTER INC +host TBD03 { + hardware ethernet a0:36:bc:cb:cf:f8; + fixed-address 172.22.4.103; +} + +# Emerson Network Power, Avocent Division +host TBD04 { + hardware ethernet 00:e0:86:37:59:9c; + fixed-address 172.22.4.104; +} + + +# tor>show mac address-table +# Mac Address Table +# ------------------------------------------------------------------ + +# Vlan Mac Address Type Ports Moves Last Move +# ---- ----------- ---- ----- ----- --------- +# 1 0019.850f.37aa DYNAMIC Et5 1 1:46:34 ago +# 1 0062.0ba2.598e DYNAMIC Et11 1 502 days, 3:16:55 ago +# 1 00e0.8635.b43e DYNAMIC Et4 1 13:03:30 ago +# 1 0204.9f70.8ebe DYNAMIC Et2 1 0:00:08 ago +# 1 0432.0118.ac60 DYNAMIC Et14 1 311 days, 0:49:16 ago +# 1 102e.0001.b5ff DYNAMIC Et27 1 13:10:40 ago +# 1 10ff.e002.4161 DYNAMIC Et6 1 5 days, 20:29:38 ago +# 1 10ff.e002.4162 DYNAMIC Et7 1 15 days, 0:59:32 ago +# 1 14a9.d004.6e04 DYNAMIC Et23 1 22 days, 6:13:56 ago +# 1 14a9.d004.6e05 DYNAMIC Et24 1 2 days, 18:46:42 ago +# 1 2899.3a9c.3964 DYNAMIC Et48 1 502 days, 3:16:49 ago +# 1 444c.a897.b5ce DYNAMIC Et8 1 29 days, 3:44:38 ago +# 1 5ced.8c6b.1141 DYNAMIC Et18 1 13 days, 23:46:54 ago +# 1 5ced.8cb4.41c6 DYNAMIC Et17 1 502 days, 3:16:44 ago +# 1 7cc2.5518.f168 DYNAMIC Et19 1 89 days, 23:47:31 ago +# 1 7cc2.5525.1f9a DYNAMIC Et20 1 34 days, 9:23:50 ago +# 1 887e.25f0.b51f DYNAMIC Et1 1 75 days, 13:34:25 ago +# 1 946d.aeb9.8572 DYNAMIC Et12 1 384 days, 1:32:18 ago +# 1 946d.aeb9.857e DYNAMIC Et12 1 21 days, 0:22:46 ago +# 1 a036.bccb.cff7 DYNAMIC Et29 1 166 days, 4:43:23 ago +# 1 a036.bccb.fb09 DYNAMIC Et28 1 23 days, 0:34:23 ago +# 1 a83c.a538.19f8 DYNAMIC Et16 1 166 days, 4:45:36 ago +# 1 b496.91d1.8050 DYNAMIC Et49/1 1 5 days, 20:30:40 ago +# 1 b83f.d248.ca66 DYNAMIC Et13 1 2 days, 6:32:50 ago +# 1 c45a.b1b9.d045 DYNAMIC Et26 1 7:32:59 ago +# 1 c84b.d6a6.b4cb DYNAMIC Et9 1 316 days, 17:07:26 ago +# 1 cc4e.2478.026b DYNAMIC Et1 1 29 days, 3:36:17 ago +# 1 d404.e62a.b020 DYNAMIC Et25 1 49 days, 13:43:43 ago +# 1 d404.e6d8.0c70 DYNAMIC Et15 1 344 days, 2:46:28 ago +# 1 f4ce.48ef.df15 DYNAMIC Et1 1 22 days, 6:14:25 ago +# 102 2899.3a9c.3965 STATIC Cpu +# 102 5254.0000.0001 DYNAMIC Et54/1 1 29 days, 3:36:33 ago +# 102 5254.0000.0002 DYNAMIC Et54/1 1 29 days, 3:36:31 ago +# 102 5254.0000.0003 DYNAMIC Et54/1 1 29 days, 3:36:31 ago +# 102 5254.0072.0b84 DYNAMIC Et54/1 1 29 days, 3:36:31 ago +# 102 d404.e62a.b021 DYNAMIC Et30 1 49 days, 13:43:43 ago +# Total Mac Addresses for this criterion: 36 From 9441f0d9b49e8b2701fbf51468b85634e2209f51 Mon Sep 17 00:00:00 2001 From: Mircea Dan Gheorghe Date: Mon, 19 Oct 2026 13:03:58 -0700 Subject: [PATCH 02/21] fix(mgmt): correct tor dhcp reservation The tor entry used the VLAN 102 CPU MAC (:65) and 172.22.1.250, which is already reserved for arista100g. Point it at the ToR's Management1 MAC 28:99:3a:9c:39:64 and its real address 172.22.0.5. Signed-off-by: Mircea Dan Gheorghe --- hardware/mgmt/fs/etc/dhcp/dhcpd.conf | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/hardware/mgmt/fs/etc/dhcp/dhcpd.conf b/hardware/mgmt/fs/etc/dhcp/dhcpd.conf index 6d5ea3e..6b315d9 100644 --- a/hardware/mgmt/fs/etc/dhcp/dhcpd.conf +++ b/hardware/mgmt/fs/etc/dhcp/dhcpd.conf @@ -148,9 +148,10 @@ host arista100g { fixed-address 172.22.1.250; } +# Arista DCS-7280TR-48C6-R, SN SSJ18302393, Management1 (cabled into its own Et48) host tor { - hardware ethernet 28:99:3a:9c:39:65; - fixed-address 172.22.1.250; + hardware ethernet 28:99:3a:9c:39:64; + fixed-address 172.22.0.5; } # Dell PowerEdge R760xa idrac-7GDGN34 From 746978145a54487678f0b365df0a819db14ae3ae Mon Sep 17 00:00:00 2001 From: Mircea Dan Gheorghe Date: Mon, 19 Oct 2026 13:04:55 -0700 Subject: [PATCH 03/21] fix(mgmt): drop duplicate empty subnet declaration The empty 172.22.0.0/16 block was a leftover from the ISC sample file and duplicated the real subnet that carries the 172.22.222.0/24 pool. Signed-off-by: Mircea Dan Gheorghe --- hardware/mgmt/fs/etc/dhcp/dhcpd.conf | 8 +------- 1 file changed, 1 insertion(+), 7 deletions(-) diff --git a/hardware/mgmt/fs/etc/dhcp/dhcpd.conf b/hardware/mgmt/fs/etc/dhcp/dhcpd.conf index 6b315d9..959e125 100644 --- a/hardware/mgmt/fs/etc/dhcp/dhcpd.conf +++ b/hardware/mgmt/fs/etc/dhcp/dhcpd.conf @@ -32,13 +32,7 @@ authoritative; # have to hack syslog.conf to complete the redirection). log-facility local7; -# No service will be given on this subnet, but declaring it helps the -# DHCP server to understand the network topology. - -subnet 172.22.0.0 netmask 255.255.0.0 { -} - -# This is a very basic subnet declaration. +# Lab subnet; unknown devices get a lease from 172.22.222.0/24. subnet 172.22.0.0 netmask 255.255.0.0 { range 172.22.222.1 172.22.222.254; From 5b491d556aeec0f3e810a432bbb226fd95d2ad50 Mon Sep 17 00:00:00 2001 From: Mircea Dan Gheorghe Date: Mon, 19 Oct 2026 13:06:17 -0700 Subject: [PATCH 04/21] feat(mgmt): reserve BlueField-3 DPU and BMC addresses BF3 in DH5 (ToR Et36) had no reservation and was leasing 172.22.222.2/.3 from the unknown pool, so 172.22.3.5 and 172.22.4.5 looked down. Pin the Arm OOB (:f4) to 172.22.3.5 and the on-card BMC (:f5) to 172.22.4.5. Signed-off-by: Mircea Dan Gheorghe --- hardware/mgmt/fs/etc/dhcp/dhcpd.conf | 12 ++++++++++++ 1 file changed, 12 insertions(+) diff --git a/hardware/mgmt/fs/etc/dhcp/dhcpd.conf b/hardware/mgmt/fs/etc/dhcp/dhcpd.conf index 959e125..952a6f7 100644 --- a/hardware/mgmt/fs/etc/dhcp/dhcpd.conf +++ b/hardware/mgmt/fs/etc/dhcp/dhcpd.conf @@ -159,6 +159,18 @@ host dh5 { fixed-address 172.22.1.5; } +# Nvidia BlueField-3 in DH5 (R760xa 7GDGN34), ToR Et36. +# One OOB RJ45 shared by the DPU Arm (oob_net0) and the on-card BMC. +host dh5bf3 { + hardware ethernet 9c:63:c0:e4:b7:f4; + fixed-address 172.22.3.5; +} + +host dh5bf3bmc { + hardware ethernet 9c:63:c0:e4:b7:f5; + fixed-address 172.22.4.5; +} + # udhcp 1.21.1 # ASUSTek Computer Inc # ToR->Et29 based on tor mac table From e8dc5402a4e2c2a5ba024d05ab41b5630e4ce411 Mon Sep 17 00:00:00 2001 From: Mircea Dan Gheorghe Date: Mon, 19 Oct 2026 13:06:28 -0700 Subject: [PATCH 05/21] feat(mgmt): move DH9 DPU BMC to 172.22.4.9 TBD02 (Senao OUI d4:e5:c9:00:ec:30, ToR Et34) is the OpenBMC on the DH9 DPU, next to dh9dpu (:31). Name it dh9dpubmc and give it the DPU-BMC address matching its host number. Signed-off-by: Mircea Dan Gheorghe --- hardware/mgmt/fs/etc/dhcp/dhcpd.conf | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/hardware/mgmt/fs/etc/dhcp/dhcpd.conf b/hardware/mgmt/fs/etc/dhcp/dhcpd.conf index 952a6f7..affe6a8 100644 --- a/hardware/mgmt/fs/etc/dhcp/dhcpd.conf +++ b/hardware/mgmt/fs/etc/dhcp/dhcpd.conf @@ -190,6 +190,12 @@ host dh9dpu { fixed-address 172.22.3.9; } +# DH9 DPU on-card BMC (OpenBMC, dropbear), Senao OUI, ToR Et34 shared with dh9dpu +host dh9dpubmc { + hardware ethernet d4:e5:c9:00:ec:30; + fixed-address 172.22.4.9; +} + ############################################# ####### T B D area ###### ############################################# @@ -202,12 +208,6 @@ host TBD01 { } -# Senao Networks Inc -host TBD02 { - hardware ethernet d4:e5:c9:00:ec:30; - fixed-address 172.22.4.102; -} - # ASUSTek COMPUTER INC host TBD03 { hardware ethernet a0:36:bc:cb:cf:f8; From 8470a8f5c3421c3d38ff0e6be5467e2fba0362ff Mon Sep 17 00:00:00 2001 From: Mircea Dan Gheorghe Date: Mon, 19 Oct 2026 13:07:43 -0700 Subject: [PATCH 06/21] feat(mgmt): move DH9 shared-NIC BMC address to 172.22.2.109 TBD03 (a0:36:bc:cb:cf:f8) is DH9's AMI BMC answering through the shared host NIC on ToR Et28 (dedicated port is dh9bmc on Et29). Move it out of the DPU-BMC range into the BMC range as dh9bmcshared. Signed-off-by: Mircea Dan Gheorghe --- hardware/mgmt/fs/etc/dhcp/dhcpd.conf | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/hardware/mgmt/fs/etc/dhcp/dhcpd.conf b/hardware/mgmt/fs/etc/dhcp/dhcpd.conf index affe6a8..a699859 100644 --- a/hardware/mgmt/fs/etc/dhcp/dhcpd.conf +++ b/hardware/mgmt/fs/etc/dhcp/dhcpd.conf @@ -180,6 +180,12 @@ host dh9bmc { fixed-address 172.22.2.9; } +# DH9 BMC reached through the shared (NC-SI) host NIC, ToR Et28 with dh9 +host dh9bmcshared { + hardware ethernet a0:36:bc:cb:cf:f8; + fixed-address 172.22.2.109; +} + host dh9 { hardware ethernet a0:36:bc:cb:fb:09; fixed-address 172.22.1.9; @@ -208,12 +214,6 @@ host TBD01 { } -# ASUSTek COMPUTER INC -host TBD03 { - hardware ethernet a0:36:bc:cb:cf:f8; - fixed-address 172.22.4.103; -} - # Emerson Network Power, Avocent Division host TBD04 { hardware ethernet 00:e0:86:37:59:9c; From 7122586e9965cec72410c1edfc190220bc30f78e Mon Sep 17 00:00:00 2001 From: Mircea Dan Gheorghe Date: Mon, 19 Oct 2026 13:08:00 -0700 Subject: [PATCH 07/21] feat(mgmt): enable terminal server reservation at 172.22.0.30 TBD04 (Avocent OUI 00:e0:86:37:59:9c, ToR Et3 = TS port on the cabling diagram) is the ACS8000. Give it its planned 172.22.0.30 address and drop the old commented ts entry whose MAC was never seen on the ToR. Signed-off-by: Mircea Dan Gheorghe --- hardware/mgmt/fs/etc/dhcp/dhcpd.conf | 16 ++++++---------- 1 file changed, 6 insertions(+), 10 deletions(-) diff --git a/hardware/mgmt/fs/etc/dhcp/dhcpd.conf b/hardware/mgmt/fs/etc/dhcp/dhcpd.conf index a699859..59b7dd9 100644 --- a/hardware/mgmt/fs/etc/dhcp/dhcpd.conf +++ b/hardware/mgmt/fs/etc/dhcp/dhcpd.conf @@ -50,11 +50,12 @@ host kvm { fixed-address 172.22.0.20; } -# do not enable this yet -# host ts { -# hardware ethernet 00:e0:86:35:b8:56; -# fixed-address 172.22.0.30; -# } +# Vertiv Avocent ACS8000 terminal server, ToR Et3 +# (previously documented MAC 00:e0:86:35:b8:56 never appeared on the ToR) +host ts { + hardware ethernet 00:e0:86:37:59:9c; + fixed-address 172.22.0.30; +} host dh1 { hardware ethernet 04:32:01:18:ac:60; @@ -214,11 +215,6 @@ host TBD01 { } -# Emerson Network Power, Avocent Division -host TBD04 { - hardware ethernet 00:e0:86:37:59:9c; - fixed-address 172.22.4.104; -} # tor>show mac address-table From b9507de9cd6d39a45a7ef60c6cf7a1c263edf20f Mon Sep 17 00:00:00 2001 From: Mircea Dan Gheorghe Date: Mon, 19 Oct 2026 13:19:07 -0700 Subject: [PATCH 08/21] fix(mgmt): give CN106 MCU its real MAC at 172.22.4.3 TBD01 (02:04:9f:70:8e:be, ToR Et2) is the CN106 management MCU (Zephyr, 'net iface' on DH3 /dev/ttyUSB1), not the DPU OS. Replace the placeholder MAC in dh3cn106mcu with it and drop TBD01. The CN106 Linux has no OOB link and is reached on DH3 /dev/ttyUSB0. Signed-off-by: Mircea Dan Gheorghe --- hardware/mgmt/fs/etc/dhcp/dhcpd.conf | 17 ++++------------- 1 file changed, 4 insertions(+), 13 deletions(-) diff --git a/hardware/mgmt/fs/etc/dhcp/dhcpd.conf b/hardware/mgmt/fs/etc/dhcp/dhcpd.conf index 59b7dd9..290380c 100644 --- a/hardware/mgmt/fs/etc/dhcp/dhcpd.conf +++ b/hardware/mgmt/fs/etc/dhcp/dhcpd.conf @@ -117,14 +117,11 @@ host dh4dypimc { fixed-address 172.22.4.4; } -# see TBD, maybe ????? -# host dh3cn106 { -# hardware ethernet zzzzzzzzzzzzzz; -# fixed-address 172.22.3.3; -# } - +# Marvell CN106 in DH3. Its Linux (Buildroot) has no OOB link; console is +# DH3 /dev/ttyUSB0 (CP2105 if0). 172.22.3.3 stays reserved for it. +# The MCU (Zephyr, console DH3 /dev/ttyUSB1) owns the RJ45 on ToR Et2. host dh3cn106mcu { - hardware ethernet 02:04:9F:00:00:00; + hardware ethernet 02:04:9f:70:8e:be; fixed-address 172.22.4.3; } @@ -207,12 +204,6 @@ host dh9dpubmc { ####### T B D area ###### ############################################# -# ToR->Et2 -# marvell cn106 bmc port based on cabling diagram -host TBD01 { - hardware ethernet 02:04:9f:70:8e:be; - fixed-address 172.22.3.3; -} From 360084d5cba0859da8744cfcc9c4aeaa5e131298 Mon Sep 17 00:00:00 2001 From: Mircea Dan Gheorghe Date: Mon, 19 Oct 2026 13:20:28 -0700 Subject: [PATCH 09/21] fix(mgmt): update Intel IPU IMC MAC in dh4dypimc The DH4 IPU E2100 IMC now presents 10:2e:00:00:fe:fe and was leasing 172.22.222.4, which broke the ansible jump host (root@172.22.4.4) for mev. Point the reservation at the new MAC and record the MAC history. Signed-off-by: Mircea Dan Gheorghe --- hardware/mgmt/fs/etc/dhcp/dhcpd.conf | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/hardware/mgmt/fs/etc/dhcp/dhcpd.conf b/hardware/mgmt/fs/etc/dhcp/dhcpd.conf index 290380c..0b549b0 100644 --- a/hardware/mgmt/fs/etc/dhcp/dhcpd.conf +++ b/hardware/mgmt/fs/etc/dhcp/dhcpd.conf @@ -112,8 +112,11 @@ host dh4idrac { fixed-address 172.22.2.4; } +# Intel IPU E2100 (Mount Evans) IMC in DH4, ToR Et27, vendor-class "Intel_E2100". +# MAC is firmware-assigned and changes on reflash: 10:2e:00:01:b4:6f -> +# 10:2e:00:01:b5:ff (2026-10-05) -> 10:2e:00:00:fe:fe (2026-10-19). host dh4dypimc { - hardware ethernet 10:2e:00:01:b5:ff; + hardware ethernet 10:2e:00:00:fe:fe; fixed-address 172.22.4.4; } From f915095464d99d467067568acd272b914e8546ce Mon Sep 17 00:00:00 2001 From: Mircea Dan Gheorghe Date: Mon, 19 Oct 2026 13:22:40 -0700 Subject: [PATCH 10/21] feat(dh4): stop DHCP on second onboard port eno12409np1 (d4:04:e6:2a:b0:21, ToR Et30) was leasing 172.22.222.1 on the same /16 as eno12399np0, giving two default routes and ARP flux. Add a netplan override (sorts after 50-cloud-init.yaml so cloud-init cannot undo it). Applied on DH4 2026-10-19; netplan apply alone kept the old lease, 'networkctl reconfigure eno12409np1' removed it. Signed-off-by: Mircea Dan Gheorghe --- hardware/dh4/fs/etc/netplan/60-opilab-dh4-port2.yaml | 8 ++++++++ 1 file changed, 8 insertions(+) create mode 100644 hardware/dh4/fs/etc/netplan/60-opilab-dh4-port2.yaml diff --git a/hardware/dh4/fs/etc/netplan/60-opilab-dh4-port2.yaml b/hardware/dh4/fs/etc/netplan/60-opilab-dh4-port2.yaml new file mode 100644 index 0000000..f0cb3e0 --- /dev/null +++ b/hardware/dh4/fs/etc/netplan/60-opilab-dh4-port2.yaml @@ -0,0 +1,8 @@ +# OPI lab: DH4 second onboard port (Et30) must not DHCP on the lab /16; +# dual-homing on the same subnet causes ARP flux / asymmetric routing. +network: + version: 2 + ethernets: + eno12409np1: + dhcp4: false + dhcp6: false From d96c22f274ba7afca653c55dac0dc1cdc698d966 Mon Sep 17 00:00:00 2001 From: Mircea Dan Gheorghe Date: Mon, 19 Oct 2026 13:23:28 -0700 Subject: [PATCH 11/21] fix(mgmt): correct DH4 IPU to MacKay Peak E2100, Mount Evans to DH9 Correct the dh4 IMC comment from 00715dc: DH4 carries an Intel IPU Adapter E2100-CCQDA2HL (MacKay Peak), and the Mount Evans (DYP) card was moved to DH9, so the old MACs predate a card swap. Rename dh4dypimc to dh4e2100imc and label the DH9 DPU entries. Signed-off-by: Mircea Dan Gheorghe --- hardware/mgmt/fs/etc/dhcp/dhcpd.conf | 9 +++++---- 1 file changed, 5 insertions(+), 4 deletions(-) diff --git a/hardware/mgmt/fs/etc/dhcp/dhcpd.conf b/hardware/mgmt/fs/etc/dhcp/dhcpd.conf index 0b549b0..ae230d8 100644 --- a/hardware/mgmt/fs/etc/dhcp/dhcpd.conf +++ b/hardware/mgmt/fs/etc/dhcp/dhcpd.conf @@ -112,10 +112,10 @@ host dh4idrac { fixed-address 172.22.2.4; } -# Intel IPU E2100 (Mount Evans) IMC in DH4, ToR Et27, vendor-class "Intel_E2100". -# MAC is firmware-assigned and changes on reflash: 10:2e:00:01:b4:6f -> -# 10:2e:00:01:b5:ff (2026-10-05) -> 10:2e:00:00:fe:fe (2026-10-19). -host dh4dypimc { +# Intel IPU Adapter E2100-CCQDA2HL (MacKay Peak, 99CKVV) IMC in DH4, ToR Et27, +# vendor-class "Intel_E2100". Previous MACs 10:2e:00:01:b4:6f and +# 10:2e:00:01:b5:ff predate the swap that moved the Mount Evans (DYP) card to DH9. +host dh4e2100imc { hardware ethernet 10:2e:00:00:fe:fe; fixed-address 172.22.4.4; } @@ -192,6 +192,7 @@ host dh9 { fixed-address 172.22.1.9; } +# Intel Mount Evans (DYP) DPU in DH9, ToR Et34 (moved from DH4; not yet logged in to verify) host dh9dpu { hardware ethernet d4:e5:c9:00:ec:31; fixed-address 172.22.3.9; From d36f881fcb8df147758007d6e94d5ffe8ae3eb41 Mon Sep 17 00:00:00 2001 From: Mircea Dan Gheorghe Date: Mon, 19 Oct 2026 13:41:37 -0700 Subject: [PATCH 12/21] fix(tor): sync arista.config with the live running-config The repo copy predated the EOS 4.32.0F upgrade and was missing VLANs 100/102/200, the Et24/Et32 trunks to the BIG-IP pair and the Et54/1 VLAN 102 link to the A100G. Signed-off-by: Mircea Dan Gheorghe --- hardware/ToR/arista.config | 36 ++++++++++++++++++++++++------------ 1 file changed, 24 insertions(+), 12 deletions(-) diff --git a/hardware/ToR/arista.config b/hardware/ToR/arista.config index 836cb10..af0052c 100644 --- a/hardware/ToR/arista.config +++ b/hardware/ToR/arista.config @@ -1,21 +1,34 @@ ! Command: show running-config -! device: tor (DCS-7280TR-48C6, EOS-4.22.3M) +! device: tor (DCS-7280TR-48C6, EOS-4.32.0F) ! -! boot system flash:/EOS-4.22.3M.swi +! boot system flash:/EOS-4.32.0F.swi +! +enable password sha512 +no aaa root +! +username admin privilege 15 role network-admin secret sha512 +username arista secret sha512 ! dhcp server ! transceiver qsfp default-mode 4x10G ! +service routing protocols model multi-agent +! hostname tor ! spanning-tree mode mstp ! -enable password sha512 -no aaa root +system l1 + unsupported speed action error + unsupported error-correction action error ! -username admin privilege 15 role network-admin secret sha512 -username arista secret sha512 +vlan 100,102,200 +! +management api gnmi + transport grpc openmgmt + port 5900 + provider eos-native ! interface Ethernet1 speed forced 1000full @@ -88,6 +101,7 @@ interface Ethernet23 ! interface Ethernet24 speed forced 1000full + switchport mode trunk ! interface Ethernet25 speed forced 1000full @@ -112,6 +126,7 @@ interface Ethernet31 ! interface Ethernet32 speed forced 1000full + switchport mode trunk ! interface Ethernet33 speed forced 1000full @@ -177,19 +192,16 @@ interface Ethernet53/1 speed forced 100gfull ! interface Ethernet54/1 - shutdown speed forced 100gfull + switchport access vlan 102 ! interface Management1 ip address 172.22.0.5/16 ! -ip route 0.0.0.0/0 172.22.0.1 +interface Vlan102 ! no ip routing ! -management api gnmi - transport grpc openmgmt - port 5900 - provider eos-native +ip route 0.0.0.0/0 172.22.0.1 ! end From 78c8fca05782b6d22e2ceb6ec3e357cb8960c37c Mon Sep 17 00:00:00 2001 From: Mircea Dan Gheorghe Date: Mon, 19 Oct 2026 13:55:50 -0700 Subject: [PATCH 13/21] feat(tor): put the he.net public /27 on its own VLAN 10 Et1 (he.net uplink), Et6 (mgmt public NIC), Et7 (mgmt BMC) and Et23/Et31 (BIG-IP external) move to VLAN 10. Lab VLAN 1 no longer shares an L2 domain with the internet. The BIG-IP trunks Et24/Et32 are pinned to VLANs 1,100,102,200 so VLAN 10 never reaches them. Signed-off-by: Mircea Dan Gheorghe --- hardware/ToR/arista.config | 10 ++++++++++ 1 file changed, 10 insertions(+) diff --git a/hardware/ToR/arista.config b/hardware/ToR/arista.config index af0052c..78545ba 100644 --- a/hardware/ToR/arista.config +++ b/hardware/ToR/arista.config @@ -23,6 +23,9 @@ system l1 unsupported speed action error unsupported error-correction action error ! +vlan 10 + name public-he-net +! vlan 100,102,200 ! management api gnmi @@ -32,6 +35,7 @@ management api gnmi ! interface Ethernet1 speed forced 1000full + switchport access vlan 10 ! interface Ethernet2 speed forced 1000full @@ -47,9 +51,11 @@ interface Ethernet5 ! interface Ethernet6 speed forced 1000full + switchport access vlan 10 ! interface Ethernet7 speed forced 1000full + switchport access vlan 10 ! interface Ethernet8 speed forced 1000full @@ -98,9 +104,11 @@ interface Ethernet22 ! interface Ethernet23 speed forced 1000full + switchport access vlan 10 ! interface Ethernet24 speed forced 1000full + switchport trunk allowed vlan 1,100,102,200 switchport mode trunk ! interface Ethernet25 @@ -123,9 +131,11 @@ interface Ethernet30 ! interface Ethernet31 speed forced 1000full + switchport access vlan 10 ! interface Ethernet32 speed forced 1000full + switchport trunk allowed vlan 1,100,102,200 switchport mode trunk ! interface Ethernet33 From b6fcff6a903523c526201d3e5c6444769ab40641 Mon Sep 17 00:00:00 2001 From: Mircea Dan Gheorghe Date: Mon, 19 Oct 2026 13:55:50 -0700 Subject: [PATCH 14/21] feat(mgmt): bind isc-dhcp-server to the lab NIC only INTERFACESv4 was empty, so dhcpd listened on every interface including the public one. Restrict it to enp1s0f0np0 (172.22.0.1/16). Signed-off-by: Mircea Dan Gheorghe --- hardware/mgmt/fs/etc/default/isc-dhcp-server | 18 ++++++++++++++++++ 1 file changed, 18 insertions(+) create mode 100644 hardware/mgmt/fs/etc/default/isc-dhcp-server diff --git a/hardware/mgmt/fs/etc/default/isc-dhcp-server b/hardware/mgmt/fs/etc/default/isc-dhcp-server new file mode 100644 index 0000000..9452f24 --- /dev/null +++ b/hardware/mgmt/fs/etc/default/isc-dhcp-server @@ -0,0 +1,18 @@ +# Defaults for isc-dhcp-server (sourced by /etc/init.d/isc-dhcp-server) + +# Path to dhcpd's config file (default: /etc/dhcp/dhcpd.conf). +#DHCPDv4_CONF=/etc/dhcp/dhcpd.conf +#DHCPDv6_CONF=/etc/dhcp/dhcpd6.conf + +# Path to dhcpd's PID file (default: /var/run/dhcpd.pid). +#DHCPDv4_PID=/var/run/dhcpd.pid +#DHCPDv6_PID=/var/run/dhcpd6.pid + +# Additional options to start dhcpd with. +# Don't use options -cf or -pf here; use DHCPD_CONF/ DHCPD_PID instead +#OPTIONS="" + +# On what interfaces should the DHCP server (dhcpd) serve DHCP requests? +# Separate multiple interfaces with spaces, e.g. "eth0 eth1". +INTERFACESv4="enp1s0f0np0" +INTERFACESv6="" From cf445cc45673e2c4f8f8f3ca19cd6d3f8d554ddc Mon Sep 17 00:00:00 2001 From: Mircea Dan Gheorghe Date: Mon, 19 Oct 2026 14:13:58 -0700 Subject: [PATCH 15/21] feat(tor): filter internet access to the mgmt BMC on Et1 Ingress ACL PUBLIC-IN on the he.net uplink: from the internet the mgmt BMC (216.218.200.249) only accepts HTTPS, replies to its own sessions, NTP/DNS answers and ICMP. SSH and IPMI (623) from the internet are dropped. Lab and VPN users still reach it through mgmt on VLAN 10, which does not cross Et1. Signed-off-by: Mircea Dan Gheorghe --- hardware/ToR/arista.config | 10 ++++++++++ 1 file changed, 10 insertions(+) diff --git a/hardware/ToR/arista.config b/hardware/ToR/arista.config index 78545ba..3e7c4cf 100644 --- a/hardware/ToR/arista.config +++ b/hardware/ToR/arista.config @@ -36,6 +36,7 @@ management api gnmi interface Ethernet1 speed forced 1000full switchport access vlan 10 + ip access-group PUBLIC-IN in ! interface Ethernet2 speed forced 1000full @@ -210,6 +211,15 @@ interface Management1 ! interface Vlan102 ! +ip access-list PUBLIC-IN + 10 permit tcp any host 216.218.200.249 eq https + 20 permit tcp any host 216.218.200.249 established + 30 permit udp any eq ntp host 216.218.200.249 + 40 permit udp any eq domain host 216.218.200.249 + 50 permit icmp any host 216.218.200.249 + 60 deny ip any host 216.218.200.249 + 1000 permit ip any any +! no ip routing ! ip route 0.0.0.0/0 172.22.0.1 From e86db25d6f816186b638a6c114ebe2398e2439da Mon Sep 17 00:00:00 2001 From: Mircea Dan Gheorghe Date: Mon, 19 Oct 2026 14:13:58 -0700 Subject: [PATCH 16/21] feat(mgmt): add fail2ban sshd jail mgmt sshd on the public IP saw ~17k failed root logins a day. Ban for 1h after 5 failures in 10 min; lab, WireGuard, BIG-IP management and the public /27 are never banned. Signed-off-by: Mircea Dan Gheorghe --- hardware/mgmt/fs/etc/fail2ban/jail.d/opilab.local | 10 ++++++++++ 1 file changed, 10 insertions(+) create mode 100644 hardware/mgmt/fs/etc/fail2ban/jail.d/opilab.local diff --git a/hardware/mgmt/fs/etc/fail2ban/jail.d/opilab.local b/hardware/mgmt/fs/etc/fail2ban/jail.d/opilab.local new file mode 100644 index 0000000..9c0b871 --- /dev/null +++ b/hardware/mgmt/fs/etc/fail2ban/jail.d/opilab.local @@ -0,0 +1,10 @@ +[DEFAULT] +ignoreip = 127.0.0.1/8 ::1 172.22.0.0/16 10.10.0.0/24 192.168.0.0/24 216.218.200.224/27 +bantime = 1h +findtime = 10m +maxretry = 5 +backend = systemd +banaction = nftables-multiport + +[sshd] +enabled = true From 7ee801ad1a368ad114c19f8c1b9aa252bf1e43aa Mon Sep 17 00:00:00 2001 From: Mircea Dan Gheorghe Date: Mon, 19 Oct 2026 14:28:57 -0700 Subject: [PATCH 17/21] docs(inventory): refresh ips.md and ansible inventory from the 2026-10-19 sweep Fix the F5 internal addresses (.227 F5A, .228 F5B, .229 floating), add the dhcpd host names, the CN106 MCU, the DH4 E2100 IMC, the DH9 BMC (dedicated and shared) and the Mount Evans card now in DH9. Keep the mev/mevbmc inventory names, which telegraf and Grafana depend on, and add the DH9 DPU commented out until its credentials are known. Signed-off-by: Mircea Dan Gheorghe --- Documentation/ips.md | 124 +++++++++++++++++++++++++------------------ ansible/inventory | 13 ++++- 2 files changed, 83 insertions(+), 54 deletions(-) diff --git a/Documentation/ips.md b/Documentation/ips.md index cfa349a..e321a5c 100644 --- a/Documentation/ips.md +++ b/Documentation/ips.md @@ -1,63 +1,83 @@ # IP Allocations -Proposal is to use 172.22.0.0/16 network for all ip addresing in the lab, and have 1 gateway that will handle internet access and be entry point for access in the lab. +All lab addressing uses the 172.22.0.0/16 network. One gateway (mgmt, 172.22.0.1) handles +internet access (NAT) and is the entry point into the lab (VPN). Public addressing is kept +in the private lab repo. + +Last verified 2026-10-19 (ARP sweep from mgmt, ToR MAC table, DHCP leases). ## Code duplication -:exclamation: with [ansible inventory](../ansible/inventory) +:exclamation: with [ansible inventory](../ansible/inventory) and +[dhcpd.conf](../hardware/mgmt/fs/etc/dhcp/dhcpd.conf) (the `dhcpd host` column below) ## Device types ip allocation -| IR Range | Purpose | -| --------------- | --------------------------------------------------------- | -| 172.22.0.0/24 | All management devices like, gateway, kvm, ts, pdu, ... | -| 172.22.1.0/24 | All servers, dpu hosts, test, ... | -| 172.22.2.0/24 | All iDRAC, iLO, BMC... | -| 172.22.3.0/24 | All DPUs | -| 172.22.4.0/24 | All BMC of the DPU | -| 172.22.222.0/24 | dhcp allocated to any unknown device | -| 172.22.254.0/24 | VPN Lease Pool -- IPs dynamically assigned to VPN clients | +| IP Range | Purpose | +|----------------- |--------------------------------------------------------- | +| 172.22.0.0/24 | All management devices like, gateway, kvm, ts, pdu, ... | +| 172.22.1.0/24 | All servers, dpu hosts, test, ... | +| 172.22.2.0/24 | All iDRAC, iLO, BMC... | +| 172.22.3.0/24 | All DPUs | +| 172.22.4.0/24 | All BMC of the DPU | +| 172.22.222.0/24 | dhcp allocated to any unknown device | +| 172.22.254.0/24 | VPN Lease Pool -- IPs dynamically assigned to VPN clients | ## Per Device IP allocation -| IPv4 | IPv6 | DEVICE | Helpful URLs | -| ---------------------- | ---- | ----------------- | ------------------------------------------------------- | -| public ip / 172.22.0.1 | | gateway/mgmt | and | -| 172.22.0.5 | | ToR | | -| 172.22.0.10 | | Network PDU | | -| 172.22.0.20 | | KVM | | -| 172.22.0.30 | | TS | | -| 172.22.0.226 | | F5 VPN Floating | | -| 172.22.0.227 | | F5 BIG-IP-01 | | -| 172.22.0.228 | | F5 VPN Floating | | -| | | | | -| 172.22.1.1 | | DPU Host 1 | | -| 172.22.2.1 | | DH1 iDRAC | | -| 172.22.3.1 | | AMD DSC200 | | -| | | | | -| 172.22.1.2 | | DPU Host 2 | | -| 172.22.2.2 | | DH2 iLO | | -| 172.22.3.2 | | Nvidia BF2 | | -| 172.22.4.2 | | Nvidia BF2 bmc | | -| | | | | -| 172.22.1.3 | | DPU Host 3 | | -| 172.22.2.3 | | DH3 iLO | | -| 172.22.3.3 | | Marvell CN106 | | -| 172.22.4.3 | | Marvell CN106 bmc | | -| | | | | -| 172.22.1.4 | | DPU Host 4 | | -| 172.22.2.4 | | DH4 iDRAC | | -| 172.22.4.4 | | Intel DYP imc | | -| | | | | -| 172.22.1.5 | | DPU Host 5 | | -| 172.22.2.5 | | DH5 iDRAC | | -| 172.22.3.5 | | Nvidia BF3 | | -| 172.22.4.5 | | Nvidia BF3 bmc | | -| | | | | -| 172.22.1.9 | | DPU Host 9 | | -| 172.22.2.9 | | DH9 ??? | | -| | | | | -| 172.22.1.100 | | Tgen1 | | -| 172.22.2.100 | | Tgen1 bmc | | -| | | | | -| 172.22.1.250 | | Arista 100G | | +| IPv4 | IPv6 | DEVICE | dhcpd host | Helpful URLs | +|--------------------------- |------ |----------------------------------------- |--------------- |----------------| +| public ip / 172.22.0.1 | | gateway/mgmt | (static) | and | +| 172.22.0.5 | | ToR, Arista DCS-7280TR-48C6-R | tor | | +| 172.22.0.10 | | Network PDU | npdu | | +| 172.22.0.20 | | KVM | kvm | | +| 172.22.0.30 | | TS, Vertiv Avocent ACS8000 | ts | | +| 172.22.0.227 | | F5 BIG-IP-01 (F5A), internal | (static) | | +| 172.22.0.228 | | F5 BIG-IP-02 (F5B), internal | (static) | | +| 172.22.0.229 | | F5 BIG-IP floating, internal | (static) | | +| | | | | | +| 172.22.1.1 | | DPU Host 1 | dh1 | | +| 172.22.2.1 | | DH1 iDRAC | dh1idrac | | +| 172.22.3.1 | | AMD DSC200 | (none yet) | | +| | | | | | +| 172.22.1.2 | | DPU Host 2 | dh2 | | +| 172.22.2.2 | | DH2 iLO | dh2ilo | | +| 172.22.3.2 | | Nvidia BF2 | dh2bf2 | | +| 172.22.4.2 | | Nvidia BF2 bmc | dh2bf2bmc | | +| | | | | | +| 172.22.1.3 | | DPU Host 3 | dh3 | | +| 172.22.2.3 | | DH3 iLO | dh3ilo | | +| 172.22.3.3 | | Marvell CN106 (reserved, see note 1) | (none) | | +| 172.22.4.3 | | Marvell CN106 MCU (Zephyr) | dh3cn106mcu | | +| | | | | | +| 172.22.1.4 | | DPU Host 4 | dh4 | | +| 172.22.2.4 | | DH4 iDRAC | dh4idrac | | +| 172.22.4.4 | | Intel IPU E2100 (MacKay Peak) IMC, see note 2 | dh4e2100imc | | +| | | | | | +| 172.22.1.5 | | DPU Host 5 | dh5 | | +| 172.22.2.5 | | DH5 iDRAC | dh5idrac | | +| 172.22.3.5 | | Nvidia BF3, see note 3 | dh5bf3 | | +| 172.22.4.5 | | Nvidia BF3 bmc | dh5bf3bmc | | +| | | | | | +| 172.22.1.9 | | DPU Host 9 | dh9 | | +| 172.22.2.9 | | DH9 BMC, dedicated port | dh9bmc | | +| 172.22.2.109 | | DH9 BMC, shared host NIC (NC-SI) | dh9bmcshared | | +| 172.22.3.9 | | Intel Mount Evans (DYP), see note 4 | dh9dpu | | +| 172.22.4.9 | | Intel Mount Evans on-card BMC | dh9dpubmc | | +| | | | | | +| 172.22.1.100 | | Tgen1 | tgen1 | | +| 172.22.2.100 | | Tgen1 bmc | tgen1bmc | | +| | | | | | +| 172.22.1.250 | | Arista 100G | arista100g | | + +Notes: + +1. The CN106 Linux has no out-of-band link; use its console on DH3 `/dev/ttyUSB0`. The + RJ45 on the card belongs to the MCU, whose console is DH3 `/dev/ttyUSB1`. +2. DH4 was listed with an "Intel DYP" card; it now holds the E2100. Its ACC is reached + through the IMC at 192.168.0.2 (see `mev` in the ansible inventory). +3. The BF3 Arm (`oob_net0`) and its BMC share one RJ45. +4. Moved from DH4 to DH9. Not yet logged in to verify. + +The F5 BIG-IP management ports are on 192.168.0.227 (F5A) and 192.168.0.228 (F5B), +reachable from mgmt (192.168.0.230). diff --git a/ansible/inventory b/ansible/inventory index 5d48350..ce16571 100644 --- a/ansible/inventory +++ b/ansible/inventory @@ -1,4 +1,4 @@ -# from https://github.com/opiproject/opi-poc/blob/main/lab/ips.md +# keep in sync with ../Documentation/ips.md and ../hardware/mgmt/fs/etc/dhcp/dhcpd.conf [hostservers] dh1 ansible_host=172.22.1.1 ansible_connection=ssh ansible_user=root @@ -18,15 +18,24 @@ dh9bmc ansible_host=172.22.2.9 ansible_connection=local ansible_user=root [DPUs] amd ansible_host=172.22.3.1 ansible_connection=ssh ansible_user=root bf2 ansible_host=172.22.3.2 ansible_connection=ssh ansible_user=root +# Marvell CN106 in DH3: its Linux has no OOB link, only a console (DH3 /dev/ttyUSB0) mrv ansible_host=172.22.3.3 ansible_connection=ssh ansible_user=root -mev ansible_host=192.168.0.2 ansible_connection=ssh ansible_user=root ansible_ssh_common_args='-J root@172.22.4.4' proxy_env="{'http_proxy': 'http://192.168.0.1:3128', 'https_proxy': 'http://192.168.0.1:3128'}" +# Intel IPU E2100 (MacKay Peak) in DH4. Name kept as mev for telegraf.d/telegraf.conf.mev, +# firmware.yml and the Grafana series; the Mount Evans card itself is now dh9dpu. +mev ansible_host=192.168.0.2 ansible_connection=ssh ansible_user=root ansible_ssh_common_args='-J root@172.22.4.4' proxy_env="{'http_proxy': 'http://192.168.0.1:3128', 'https_proxy': 'http://192.168.0.1:3128'}" bf3 ansible_host=172.22.3.5 ansible_connection=ssh ansible_user=root +# Intel Mount Evans (DYP) in DH9, credentials not yet known +#dh9dpu ansible_host=172.22.3.9 ansible_connection=ssh ansible_user=root [dpubmcs] bf2bmc ansible_host=172.22.4.2 ansible_connection=local ansible_user=root +# CN106 MCU (Zephyr shell, no ssh) mrvbmc ansible_host=172.22.4.3 ansible_connection=local ansible_user=root +# E2100 IMC in DH4 mevbmc ansible_host=172.22.4.4 ansible_connection=ssh ansible_user=root bf3bmc ansible_host=172.22.4.5 ansible_connection=local ansible_user=root +# Mount Evans on-card BMC in DH9 (OpenBMC, dropbear), credentials not yet known +#dh9dpubmc ansible_host=172.22.4.9 ansible_connection=local ansible_user=root [tgens] tgen1 ansible_host=172.22.1.100 ansible_connection=ssh ansible_user=root From 68f7b06645382dd6ce9b1bd2775da5405ddb4a39 Mon Sep 17 00:00:00 2001 From: Mircea Dan Gheorghe Date: Mon, 19 Oct 2026 14:34:04 -0700 Subject: [PATCH 18/21] chore: shorten comments and drop the pasted MAC table from dhcpd.conf Signed-off-by: Mircea Dan Gheorghe --- ansible/inventory | 11 ++- .../fs/etc/netplan/60-opilab-dh4-port2.yaml | 3 +- hardware/mgmt/fs/etc/dhcp/dhcpd.conf | 79 ++----------------- 3 files changed, 14 insertions(+), 79 deletions(-) diff --git a/ansible/inventory b/ansible/inventory index ce16571..8376b00 100644 --- a/ansible/inventory +++ b/ansible/inventory @@ -18,13 +18,12 @@ dh9bmc ansible_host=172.22.2.9 ansible_connection=local ansible_user=root [DPUs] amd ansible_host=172.22.3.1 ansible_connection=ssh ansible_user=root bf2 ansible_host=172.22.3.2 ansible_connection=ssh ansible_user=root -# Marvell CN106 in DH3: its Linux has no OOB link, only a console (DH3 /dev/ttyUSB0) +# CN106 in DH3: no OOB link, console only mrv ansible_host=172.22.3.3 ansible_connection=ssh ansible_user=root -# Intel IPU E2100 (MacKay Peak) in DH4. Name kept as mev for telegraf.d/telegraf.conf.mev, -# firmware.yml and the Grafana series; the Mount Evans card itself is now dh9dpu. -mev ansible_host=192.168.0.2 ansible_connection=ssh ansible_user=root ansible_ssh_common_args='-J root@172.22.4.4' proxy_env="{'http_proxy': 'http://192.168.0.1:3128', 'https_proxy': 'http://192.168.0.1:3128'}" +# DH4 Intel E2100; name mev kept for telegraf and Grafana +mev ansible_host=192.168.0.2 ansible_connection=ssh ansible_user=root ansible_ssh_common_args='-J root@172.22.4.4' proxy_env="{'http_proxy': 'http://192.168.0.1:3128', 'https_proxy': 'http://192.168.0.1:3128'}" bf3 ansible_host=172.22.3.5 ansible_connection=ssh ansible_user=root -# Intel Mount Evans (DYP) in DH9, credentials not yet known +# DH9 Mount Evans, credentials unknown #dh9dpu ansible_host=172.22.3.9 ansible_connection=ssh ansible_user=root [dpubmcs] @@ -34,7 +33,7 @@ mrvbmc ansible_host=172.22.4.3 ansible_connection=local ansible_user=root # E2100 IMC in DH4 mevbmc ansible_host=172.22.4.4 ansible_connection=ssh ansible_user=root bf3bmc ansible_host=172.22.4.5 ansible_connection=local ansible_user=root -# Mount Evans on-card BMC in DH9 (OpenBMC, dropbear), credentials not yet known +# DH9 Mount Evans BMC, credentials unknown #dh9dpubmc ansible_host=172.22.4.9 ansible_connection=local ansible_user=root [tgens] diff --git a/hardware/dh4/fs/etc/netplan/60-opilab-dh4-port2.yaml b/hardware/dh4/fs/etc/netplan/60-opilab-dh4-port2.yaml index f0cb3e0..e51cb28 100644 --- a/hardware/dh4/fs/etc/netplan/60-opilab-dh4-port2.yaml +++ b/hardware/dh4/fs/etc/netplan/60-opilab-dh4-port2.yaml @@ -1,5 +1,4 @@ -# OPI lab: DH4 second onboard port (Et30) must not DHCP on the lab /16; -# dual-homing on the same subnet causes ARP flux / asymmetric routing. +# DH4 port 2 (Et30): no DHCP, a second lab /16 address causes ARP flux network: version: 2 ethernets: diff --git a/hardware/mgmt/fs/etc/dhcp/dhcpd.conf b/hardware/mgmt/fs/etc/dhcp/dhcpd.conf index ae230d8..c49b043 100644 --- a/hardware/mgmt/fs/etc/dhcp/dhcpd.conf +++ b/hardware/mgmt/fs/etc/dhcp/dhcpd.conf @@ -51,7 +51,6 @@ host kvm { } # Vertiv Avocent ACS8000 terminal server, ToR Et3 -# (previously documented MAC 00:e0:86:35:b8:56 never appeared on the ToR) host ts { hardware ethernet 00:e0:86:37:59:9c; fixed-address 172.22.0.30; @@ -112,17 +111,13 @@ host dh4idrac { fixed-address 172.22.2.4; } -# Intel IPU Adapter E2100-CCQDA2HL (MacKay Peak, 99CKVV) IMC in DH4, ToR Et27, -# vendor-class "Intel_E2100". Previous MACs 10:2e:00:01:b4:6f and -# 10:2e:00:01:b5:ff predate the swap that moved the Mount Evans (DYP) card to DH9. +# Intel IPU E2100 (MacKay Peak) IMC in DH4, ToR Et27 host dh4e2100imc { hardware ethernet 10:2e:00:00:fe:fe; fixed-address 172.22.4.4; } -# Marvell CN106 in DH3. Its Linux (Buildroot) has no OOB link; console is -# DH3 /dev/ttyUSB0 (CP2105 if0). 172.22.3.3 stays reserved for it. -# The MCU (Zephyr, console DH3 /dev/ttyUSB1) owns the RJ45 on ToR Et2. +# Marvell CN106 MCU in DH3, ToR Et2 (CN106 Linux is console-only) host dh3cn106mcu { hardware ethernet 02:04:9f:70:8e:be; fixed-address 172.22.4.3; @@ -143,7 +138,7 @@ host arista100g { fixed-address 172.22.1.250; } -# Arista DCS-7280TR-48C6-R, SN SSJ18302393, Management1 (cabled into its own Et48) +# ToR Management1, cabled into its own Et48 host tor { hardware ethernet 28:99:3a:9c:39:64; fixed-address 172.22.0.5; @@ -160,8 +155,7 @@ host dh5 { fixed-address 172.22.1.5; } -# Nvidia BlueField-3 in DH5 (R760xa 7GDGN34), ToR Et36. -# One OOB RJ45 shared by the DPU Arm (oob_net0) and the on-card BMC. +# Nvidia BF3 in DH5, ToR Et36; Arm and BMC share one RJ45 host dh5bf3 { hardware ethernet 9c:63:c0:e4:b7:f4; fixed-address 172.22.3.5; @@ -172,16 +166,13 @@ host dh5bf3bmc { fixed-address 172.22.4.5; } -# udhcp 1.21.1 -# ASUSTek Computer Inc -# ToR->Et29 based on tor mac table -# DPU Host 9 BMC based on cabling diagram for port eth29 +# DH9 BMC dedicated port, ToR Et29 host dh9bmc { hardware ethernet a0:36:bc:cb:cf:f7; fixed-address 172.22.2.9; } -# DH9 BMC reached through the shared (NC-SI) host NIC, ToR Et28 with dh9 +# DH9 BMC via the shared host NIC (NC-SI), ToR Et28 host dh9bmcshared { hardware ethernet a0:36:bc:cb:cf:f8; fixed-address 172.22.2.109; @@ -192,72 +183,18 @@ host dh9 { fixed-address 172.22.1.9; } -# Intel Mount Evans (DYP) DPU in DH9, ToR Et34 (moved from DH4; not yet logged in to verify) +# Intel Mount Evans (DYP) in DH9, ToR Et34, not yet verified host dh9dpu { hardware ethernet d4:e5:c9:00:ec:31; fixed-address 172.22.3.9; } -# DH9 DPU on-card BMC (OpenBMC, dropbear), Senao OUI, ToR Et34 shared with dh9dpu +# Mount Evans on-card BMC in DH9, ToR Et34 host dh9dpubmc { hardware ethernet d4:e5:c9:00:ec:30; fixed-address 172.22.4.9; } -############################################# -####### T B D area ###### -############################################# - - - - - -# tor>show mac address-table -# Mac Address Table -# ------------------------------------------------------------------ - -# Vlan Mac Address Type Ports Moves Last Move -# ---- ----------- ---- ----- ----- --------- -# 1 0019.850f.37aa DYNAMIC Et5 1 1:46:34 ago -# 1 0062.0ba2.598e DYNAMIC Et11 1 502 days, 3:16:55 ago -# 1 00e0.8635.b43e DYNAMIC Et4 1 13:03:30 ago -# 1 0204.9f70.8ebe DYNAMIC Et2 1 0:00:08 ago -# 1 0432.0118.ac60 DYNAMIC Et14 1 311 days, 0:49:16 ago -# 1 102e.0001.b5ff DYNAMIC Et27 1 13:10:40 ago -# 1 10ff.e002.4161 DYNAMIC Et6 1 5 days, 20:29:38 ago -# 1 10ff.e002.4162 DYNAMIC Et7 1 15 days, 0:59:32 ago -# 1 14a9.d004.6e04 DYNAMIC Et23 1 22 days, 6:13:56 ago -# 1 14a9.d004.6e05 DYNAMIC Et24 1 2 days, 18:46:42 ago -# 1 2899.3a9c.3964 DYNAMIC Et48 1 502 days, 3:16:49 ago -# 1 444c.a897.b5ce DYNAMIC Et8 1 29 days, 3:44:38 ago -# 1 5ced.8c6b.1141 DYNAMIC Et18 1 13 days, 23:46:54 ago -# 1 5ced.8cb4.41c6 DYNAMIC Et17 1 502 days, 3:16:44 ago -# 1 7cc2.5518.f168 DYNAMIC Et19 1 89 days, 23:47:31 ago -# 1 7cc2.5525.1f9a DYNAMIC Et20 1 34 days, 9:23:50 ago -# 1 887e.25f0.b51f DYNAMIC Et1 1 75 days, 13:34:25 ago -# 1 946d.aeb9.8572 DYNAMIC Et12 1 384 days, 1:32:18 ago -# 1 946d.aeb9.857e DYNAMIC Et12 1 21 days, 0:22:46 ago -# 1 a036.bccb.cff7 DYNAMIC Et29 1 166 days, 4:43:23 ago -# 1 a036.bccb.fb09 DYNAMIC Et28 1 23 days, 0:34:23 ago -# 1 a83c.a538.19f8 DYNAMIC Et16 1 166 days, 4:45:36 ago -# 1 b496.91d1.8050 DYNAMIC Et49/1 1 5 days, 20:30:40 ago -# 1 b83f.d248.ca66 DYNAMIC Et13 1 2 days, 6:32:50 ago -# 1 c45a.b1b9.d045 DYNAMIC Et26 1 7:32:59 ago -# 1 c84b.d6a6.b4cb DYNAMIC Et9 1 316 days, 17:07:26 ago -# 1 cc4e.2478.026b DYNAMIC Et1 1 29 days, 3:36:17 ago -# 1 d404.e62a.b020 DYNAMIC Et25 1 49 days, 13:43:43 ago -# 1 d404.e6d8.0c70 DYNAMIC Et15 1 344 days, 2:46:28 ago -# 1 f4ce.48ef.df15 DYNAMIC Et1 1 22 days, 6:14:25 ago -# 102 2899.3a9c.3965 STATIC Cpu -# 102 5254.0000.0001 DYNAMIC Et54/1 1 29 days, 3:36:33 ago -# 102 5254.0000.0002 DYNAMIC Et54/1 1 29 days, 3:36:31 ago -# 102 5254.0000.0003 DYNAMIC Et54/1 1 29 days, 3:36:31 ago -# 102 5254.0072.0b84 DYNAMIC Et54/1 1 29 days, 3:36:31 ago -# 102 d404.e62a.b021 DYNAMIC Et30 1 49 days, 13:43:43 ago -# Total Mac Addresses for this criterion: 36 - - - # PXE BOOT # allow booting; # allow bootp; From f8b5f25a8ba6f18c7b68a8a6818643b535b7959e Mon Sep 17 00:00:00 2001 From: Mircea Dan Gheorghe Date: Mon, 19 Oct 2026 14:34:04 -0700 Subject: [PATCH 19/21] docs(ips): align tables for markdownlint MD060 Signed-off-by: Mircea Dan Gheorghe --- Documentation/ips.md | 125 +++++++++++++++++++++---------------------- 1 file changed, 60 insertions(+), 65 deletions(-) diff --git a/Documentation/ips.md b/Documentation/ips.md index e321a5c..d00314a 100644 --- a/Documentation/ips.md +++ b/Documentation/ips.md @@ -1,10 +1,8 @@ # IP Allocations -All lab addressing uses the 172.22.0.0/16 network. One gateway (mgmt, 172.22.0.1) handles -internet access (NAT) and is the entry point into the lab (VPN). Public addressing is kept -in the private lab repo. +The lab uses 172.22.0.0/16; mgmt (172.22.0.1) is the NAT gateway and VPN entry point. -Last verified 2026-10-19 (ARP sweep from mgmt, ToR MAC table, DHCP leases). +Last verified 2026-10-19. ## Code duplication @@ -13,71 +11,68 @@ Last verified 2026-10-19 (ARP sweep from mgmt, ToR MAC table, DHCP leases). ## Device types ip allocation -| IP Range | Purpose | -|----------------- |--------------------------------------------------------- | -| 172.22.0.0/24 | All management devices like, gateway, kvm, ts, pdu, ... | -| 172.22.1.0/24 | All servers, dpu hosts, test, ... | -| 172.22.2.0/24 | All iDRAC, iLO, BMC... | -| 172.22.3.0/24 | All DPUs | -| 172.22.4.0/24 | All BMC of the DPU | -| 172.22.222.0/24 | dhcp allocated to any unknown device | -| 172.22.254.0/24 | VPN Lease Pool -- IPs dynamically assigned to VPN clients | +| IP Range | Purpose | +| --------------- | --------------------------------------------------------- | +| 172.22.0.0/24 | All management devices like, gateway, kvm, ts, pdu, ... | +| 172.22.1.0/24 | All servers, dpu hosts, test, ... | +| 172.22.2.0/24 | All iDRAC, iLO, BMC... | +| 172.22.3.0/24 | All DPUs | +| 172.22.4.0/24 | All BMC of the DPU | +| 172.22.222.0/24 | dhcp allocated to any unknown device | +| 172.22.254.0/24 | VPN Lease Pool -- IPs dynamically assigned to VPN clients | ## Per Device IP allocation -| IPv4 | IPv6 | DEVICE | dhcpd host | Helpful URLs | -|--------------------------- |------ |----------------------------------------- |--------------- |----------------| -| public ip / 172.22.0.1 | | gateway/mgmt | (static) | and | -| 172.22.0.5 | | ToR, Arista DCS-7280TR-48C6-R | tor | | -| 172.22.0.10 | | Network PDU | npdu | | -| 172.22.0.20 | | KVM | kvm | | -| 172.22.0.30 | | TS, Vertiv Avocent ACS8000 | ts | | -| 172.22.0.227 | | F5 BIG-IP-01 (F5A), internal | (static) | | -| 172.22.0.228 | | F5 BIG-IP-02 (F5B), internal | (static) | | -| 172.22.0.229 | | F5 BIG-IP floating, internal | (static) | | -| | | | | | -| 172.22.1.1 | | DPU Host 1 | dh1 | | -| 172.22.2.1 | | DH1 iDRAC | dh1idrac | | -| 172.22.3.1 | | AMD DSC200 | (none yet) | | -| | | | | | -| 172.22.1.2 | | DPU Host 2 | dh2 | | -| 172.22.2.2 | | DH2 iLO | dh2ilo | | -| 172.22.3.2 | | Nvidia BF2 | dh2bf2 | | -| 172.22.4.2 | | Nvidia BF2 bmc | dh2bf2bmc | | -| | | | | | -| 172.22.1.3 | | DPU Host 3 | dh3 | | -| 172.22.2.3 | | DH3 iLO | dh3ilo | | -| 172.22.3.3 | | Marvell CN106 (reserved, see note 1) | (none) | | -| 172.22.4.3 | | Marvell CN106 MCU (Zephyr) | dh3cn106mcu | | -| | | | | | -| 172.22.1.4 | | DPU Host 4 | dh4 | | -| 172.22.2.4 | | DH4 iDRAC | dh4idrac | | -| 172.22.4.4 | | Intel IPU E2100 (MacKay Peak) IMC, see note 2 | dh4e2100imc | | -| | | | | | -| 172.22.1.5 | | DPU Host 5 | dh5 | | -| 172.22.2.5 | | DH5 iDRAC | dh5idrac | | -| 172.22.3.5 | | Nvidia BF3, see note 3 | dh5bf3 | | -| 172.22.4.5 | | Nvidia BF3 bmc | dh5bf3bmc | | -| | | | | | -| 172.22.1.9 | | DPU Host 9 | dh9 | | -| 172.22.2.9 | | DH9 BMC, dedicated port | dh9bmc | | -| 172.22.2.109 | | DH9 BMC, shared host NIC (NC-SI) | dh9bmcshared | | -| 172.22.3.9 | | Intel Mount Evans (DYP), see note 4 | dh9dpu | | -| 172.22.4.9 | | Intel Mount Evans on-card BMC | dh9dpubmc | | -| | | | | | -| 172.22.1.100 | | Tgen1 | tgen1 | | -| 172.22.2.100 | | Tgen1 bmc | tgen1bmc | | -| | | | | | -| 172.22.1.250 | | Arista 100G | arista100g | | +| IPv4 | IPv6 | DEVICE | dhcpd host | Helpful URLs | +| ---------------------- | ---- | --------------------------------------------- | ------------ | ------------------------------------------------------- | +| public ip / 172.22.0.1 | | gateway/mgmt | (static) | and | +| 172.22.0.5 | | ToR, Arista DCS-7280TR-48C6-R | tor | | +| 172.22.0.10 | | Network PDU | npdu | | +| 172.22.0.20 | | KVM | kvm | | +| 172.22.0.30 | | TS, Vertiv Avocent ACS8000 | ts | | +| 172.22.0.227 | | F5 BIG-IP-01 (F5A), internal | (static) | | +| 172.22.0.228 | | F5 BIG-IP-02 (F5B), internal | (static) | | +| 172.22.0.229 | | F5 BIG-IP floating, internal | (static) | | +| | | | | | +| 172.22.1.1 | | DPU Host 1 | dh1 | | +| 172.22.2.1 | | DH1 iDRAC | dh1idrac | | +| 172.22.3.1 | | AMD DSC200 | (none yet) | | +| | | | | | +| 172.22.1.2 | | DPU Host 2 | dh2 | | +| 172.22.2.2 | | DH2 iLO | dh2ilo | | +| 172.22.3.2 | | Nvidia BF2 | dh2bf2 | | +| 172.22.4.2 | | Nvidia BF2 bmc | dh2bf2bmc | | +| | | | | | +| 172.22.1.3 | | DPU Host 3 | dh3 | | +| 172.22.2.3 | | DH3 iLO | dh3ilo | | +| 172.22.3.3 | | Marvell CN106 (reserved, see note 1) | (none) | | +| 172.22.4.3 | | Marvell CN106 MCU (Zephyr) | dh3cn106mcu | | +| | | | | | +| 172.22.1.4 | | DPU Host 4 | dh4 | | +| 172.22.2.4 | | DH4 iDRAC | dh4idrac | | +| 172.22.4.4 | | Intel IPU E2100 (MacKay Peak) IMC, see note 2 | dh4e2100imc | | +| | | | | | +| 172.22.1.5 | | DPU Host 5 | dh5 | | +| 172.22.2.5 | | DH5 iDRAC | dh5idrac | | +| 172.22.3.5 | | Nvidia BF3, see note 3 | dh5bf3 | | +| 172.22.4.5 | | Nvidia BF3 bmc | dh5bf3bmc | | +| | | | | | +| 172.22.1.9 | | DPU Host 9 | dh9 | | +| 172.22.2.9 | | DH9 BMC, dedicated port | dh9bmc | | +| 172.22.2.109 | | DH9 BMC, shared host NIC (NC-SI) | dh9bmcshared | | +| 172.22.3.9 | | Intel Mount Evans (DYP), see note 4 | dh9dpu | | +| 172.22.4.9 | | Intel Mount Evans on-card BMC | dh9dpubmc | | +| | | | | | +| 172.22.1.100 | | Tgen1 | tgen1 | | +| 172.22.2.100 | | Tgen1 bmc | tgen1bmc | | +| | | | | | +| 172.22.1.250 | | Arista 100G | arista100g | | Notes: -1. The CN106 Linux has no out-of-band link; use its console on DH3 `/dev/ttyUSB0`. The - RJ45 on the card belongs to the MCU, whose console is DH3 `/dev/ttyUSB1`. -2. DH4 was listed with an "Intel DYP" card; it now holds the E2100. Its ACC is reached - through the IMC at 192.168.0.2 (see `mev` in the ansible inventory). -3. The BF3 Arm (`oob_net0`) and its BMC share one RJ45. -4. Moved from DH4 to DH9. Not yet logged in to verify. +1. CN106 Linux has no OOB link: console on DH3 `/dev/ttyUSB0`, MCU on `/dev/ttyUSB1`. +2. ACC reached through the IMC at 192.168.0.2 (`mev` in the ansible inventory). +3. BF3 Arm and BMC share one RJ45. +4. Moved from DH4; not yet verified. -The F5 BIG-IP management ports are on 192.168.0.227 (F5A) and 192.168.0.228 (F5B), -reachable from mgmt (192.168.0.230). +F5 management: 192.168.0.227 (F5A) and 192.168.0.228 (F5B), reached from mgmt. From eb21486482ffbdcb0f36225b5d8a5e064e451378 Mon Sep 17 00:00:00 2001 From: Mircea Dan Gheorghe Date: Mon, 19 Oct 2026 16:13:13 -0700 Subject: [PATCH 20/21] docs(diagram): update rack drawing and TS console map from the 2026-10-19 sweep - move DH9 to the bottom group (U37-40, above DH5) - relabel DH4 DPU as Intel IPU E2100 (MacKay Peak), IMC 172.22.4.4 - add DH9 Mount Evans 172.22.3.9 / BMC 172.22.4.9, fix DH5 title and host IP - fix F5 model typo, add BIG-IP-01/02 names; drop the bogus mgmt IPMI 172.22.2.0 - rewire TS consoles: 1 PDU, 2 A100G, 4 F5B, 5 ToR, 7 F5A; label TS 172.22.4.104 - hardware/TS: ACS8032 model, firmware, SSH access and the port table - ips.md: TS answers on 172.22.4.104 Signed-off-by: Mircea Dan Gheorghe --- Documentation/ips.md | 3 ++- hardware/TS/README.md | 24 +++++++++++++++++------- images/opi-lab-cabling.drawio.svg | 2 +- 3 files changed, 20 insertions(+), 9 deletions(-) diff --git a/Documentation/ips.md b/Documentation/ips.md index d00314a..2236659 100644 --- a/Documentation/ips.md +++ b/Documentation/ips.md @@ -29,7 +29,7 @@ Last verified 2026-10-19. | 172.22.0.5 | | ToR, Arista DCS-7280TR-48C6-R | tor | | | 172.22.0.10 | | Network PDU | npdu | | | 172.22.0.20 | | KVM | kvm | | -| 172.22.0.30 | | TS, Vertiv Avocent ACS8000 | ts | | +| 172.22.4.104 | | TS, Vertiv Avocent ACS8032, see note 5 | ts | | | 172.22.0.227 | | F5 BIG-IP-01 (F5A), internal | (static) | | | 172.22.0.228 | | F5 BIG-IP-02 (F5B), internal | (static) | | | 172.22.0.229 | | F5 BIG-IP floating, internal | (static) | | @@ -74,5 +74,6 @@ Notes: 2. ACC reached through the IMC at 192.168.0.2 (`mev` in the ansible inventory). 3. BF3 Arm and BMC share one RJ45. 4. Moved from DH4; not yet verified. +5. TS is static at 172.22.4.104, not its dhcpd address 172.22.0.30; consoles in [hardware/TS](../hardware/TS/README.md). F5 management: 192.168.0.227 (F5A) and 192.168.0.228 (F5B), reached from mgmt. diff --git a/hardware/TS/README.md b/hardware/TS/README.md index 3f913bf..c147d02 100644 --- a/hardware/TS/README.md +++ b/hardware/TS/README.md @@ -1,16 +1,18 @@ # Serial Consoles IP to serial switch for remote access to the devices serial port -ACS8000 48-port unit dual AC power supply +ACS8032 32-port unit, internal modem, dual AC power supply ## HW spec -- Part Number: ACS8048DAC-400 -- Firmware: 2.26.1.5874+902+37+17 (Nov 7 2023 - 11:53:23) +- Model: ACS8032 with internal modem and dual power supply +- Firmware: 2.30.2.6525+920+41+18 (Jul 9 2025 - 20:45:03) ## Management -- 1G ethernet management port +- 1G ethernet management port, ToR Et3, 172.22.4.104 (static; dhcpd reserves 172.22.0.30) +- Security profile "Secure": SSH and HTTPS only, no telnet, no ping +- Serial port N: `ssh -p $((8000+N)) admin@172.22.4.104`, hot key `^Z` ## Docs @@ -18,9 +20,17 @@ ACS8000 48-port unit dual AC power supply ## Devices connected -- Network PDU -- 100G Switch -- KVM +Checked 2026-10-19 by opening each port. + +| Port | Name | Device | Speed | +|------|-------------|--------------------------------|--------| +| 1 | Network-PDU | Vertiv Geist rack PDU | 115200 | +| 2 | A100G | Arista DCS-7280CR-48-F (A100G) | 9600 | +| 3 | | unknown, no output | 19200 | +| 4 | BIG-IP-02 | F5B, BIG-IP i4000 | 19200 | +| 5 | ToR | Arista DCS-7280TR-48C6-R | 9600 | +| 6 | | unknown, no output at any rate | 19200 | +| 7 | BIG-IP-01 | F5A, BIG-IP i4000 | 19200 | ## Pictures diff --git a/images/opi-lab-cabling.drawio.svg b/images/opi-lab-cabling.drawio.svg index b70db14..1fc3404 100644 --- a/images/opi-lab-cabling.drawio.svg +++ b/images/opi-lab-cabling.drawio.svg @@ -1,4 +1,4 @@ -
IP
IP
VGA
VGA
USB
USB
USB
USB
P1
P1
P2
P2
NIC
NIC
SERVER MGMT
SERVER MGMT
172.22.0.1
172.22.0.1
IPMI
IPMI
mgmt
mgmt
172.22.2.0
172.22.2.0
RAX QH4-11E4
RAX QH4-11E4
IP
IP
VGA
VGA
USB
USB
USB
USB
P1
P1
P2
P2
NIC1
NIC1
SW TGEN 1
SW TGEN 1
RAX XS4-11S3-10G
RAX XS4-11S3-10G
IPMI
IPMI
P1
P1
P2
P2
NIC2
NIC2
tgen1
tgen1
172.22.1.100
172.22.1.100
172.22.2.100
172.22.2.100
18
18
IP
IP
IP
IP
13
13
15
15
17
17
19
19
21
21
23
23
14
14
16
16
20
20
22
22
24
24
1
1
3
3
5
5
7
7
2
2
4
4
6
6
8
8
9
9
11
11
10
10
12
12
29
29
31
31
30
30
32
32
25
25
27
27
26
26
28
28
TS
TS
18
18
IP
IP
COM
COM
13
13
15
15
17
17
19
19
21
21
23
23
14
14
16
16
20
20
22
22
24
24
1
1
3
3
5
5
7
7
2
2
4
4
6
6
8
8
9
9
11
11
10
10
12
12
ToR
ToR
KVM
KVM
DO NOT USE, RESERVED FOR AIRFLOW
DO NOT USE, RESERVED FOR AIRFLOW
1
1
2
2
3
3
4
4
5
5
6
6
7
7
8
8
9
9
10
10
11
11
12
12
EMPTY
EMPTY
13
13
EMPTY
EMPTY
14
14
15
15
16
16
17
17
18
18
19
19
20
20
21
21
DO NOT USE, RESERVED FOR AIRFLOW
DO NOT USE, RESERVED FOR AIRFLOW
22
22
DO NOT USE, RESERVED FOR AIRFLOW
DO NOT USE, RESERVED FOR AIRFLOW
23
23
24
24
EMPTY
EMPTY
25
25
EMPTY
EMPTY
26
26
EMPTY
EMPTY
27
27
EMPTY
EMPTY
28
28
EMPTY
EMPTY
29
29
EMPTY
EMPTY
30
30
EMPTY
EMPTY
31
31
EMPTY
EMPTY
32
32
EMPTY
EMPTY
33
33
EMPTY
EMPTY
34
34
EMPTY
EMPTY
35
35
EMPTY
EMPTY
36
36
EMPTY
EMPTY
37
37
EMPTY
EMPTY
38
38
EMPTY
EMPTY
39
39
EMPTY
EMPTY
40
40
41
41
42
42
DO NOT USE, RESERVED FOR AIRFLOW
DO NOT USE, RESERVED FOR AIRFLOW
43
43
DO NOT USE, RESERVED FOR AIRFLOW
DO NOT USE, RESERVED FOR AIRFLOW
44
44
NETWORK PDU
NETWORK PDU
COM
COM
IP
IP
53
53
54
54
25
25
26
26
27
27
28
28
29
29
30
30
31
31
32
32
33
33
34
34
35
35
36
36
37
37
38
38
39
39
40
40
41
41
42
42
43
43
44
44
45
45
46
46
47
47
48
48
55
55
56
56
49
49
50
50
1
1
2
2
3
3
4
4
5
5
6
6
7
7
8
8
9
9
10
10
11
11
12
12
13
13
14
14
15
15
16
16
17
17
18
18
19
19
20
20
21
21
22
22
23
23
24
24
51
51
52
52
Arista DCS-7280CR-48-F
Arista DCS-7280CR-48-F
172.22.1.250
172.22.1.250
IP
SFP28
IP...
VGA
VGA
USB
USB
USB
USB
P1
P1
P2
P2
DPU
DPU
IP
IP
SERVER DPU HOST 1
SERVER DPU HOST 1
IP
SFP28
IP...
VGA
VGA
USB
USB
USB
USB
P1
P1
P2
P2
DPU
DPU
IP
IP
SERVER DPU HOST 2
SERVER DPU HOST 2
IP
SFP28
IP...
VGA
VGA
USB
USB
USB
USB
SERVER DPU HOST 3
SERVER DPU HOST 3
Vertiv Avocent 8032DAC
Vertiv Avocent 8032DAC
Vertiv Avocent ACS8000
Vertiv Avocent ACS8000
18
18
13
13
15
15
17
17
19
19
21
21
23
23
14
14
16
16
20
20
22
22
24
24
1
1
3
3
5
5
7
7
2
2
4
4
6
6
8
8
9
9
11
11
10
10
12
12
29
29
31
31
30
30
32
32
25
25
27
27
26
26
28
28
IP
IP
IP
IP
COM
COM
USB
USB
USB
USB
LAN 2
LAN 2
LAN 1
LAN 1
MOD
MOD
SETUP
SETUP
PDU1
PDU1
PDU2
PDU2
inf
inf
USB
USB
USB
USB
USB
USB
USB
USB
VGA
VGA
COM
COM
IP
IP
AMD/Pensando DSC2-100
AMD/Pensando DSC2-100
Nvidia BlueField2
Nvidia BlueField2
24
24
23
23
22
22
21
21
20
20
19
19
18
18
17
17
16
16
15
15
14
14
13
13
12
12
11
11
10
10
9
9
8
8
7
7
6
6
5
5
4
4
3
3
2
2
1
1
.
.
172.22.0.20
172.22.0.20
Vertiv Geist GU2 rack PDU VP7N3001
Vertiv Geist GU2 rack PDU VP7N3001
172.22.0.10
172.22.0.10
172.22.1.1
172.22.1.1
172.22.1.2
172.22.1.2
172.22.1.3
172.22.1.3
172.22.3.1
172.22.3.1
172.22.3.2
172.22.3.2
iDRAC
iDRAC
iLO
iLO
iLO
iLO
dh1
dh1
dh2
dh2
dh3
dh3
18
18
COM
COM
IP
IP
13
13
15
15
17
17
19
19
21
21
23
23
14
14
16
16
20
20
22
22
24
24
1
1
3
3
5
5
7
7
2
2
4
4
6
6
8
8
9
9
11
11
10
10
12
12
old ToR unconnected
old ToR...
49
49
50
50
51
51
52
52
53
53
54
54
42
42
37
37
39
39
41
41
43
43
45
45
47
47
38
38
40
40
44
44
46
46
48
48
25
25
27
27
29
29
31
31
26
26
28
28
30
30
32
32
33
33
35
35
34
34
36
36
CON
CON
FAIL
FAIL
IP
IP
IP
IP
MGMT
MGMT
USB
USB
IP
IP
IP
IP
IP
IP
IP
IP
IP
IP
IP
IP
IP
IP
IP
IP
IP
IP
IP
IP
CON
CON
FAIL
FAIL
IP
IP
IP
IP
MGMT
MGMT
USB
USB
IP
IP
IP
IP
IP
IP
IP
IP
IP
IP
IP
IP
IP
IP
IP
IP
IP
IP
IP
IP
F5A
F5A
F5B
F5B
.
.
.
.
.
.
F5 BIGI-IP i4000
F5 BIGI-IP i4000
F5 BIGI-IP i4000
F5 BIGI-IP i4000
DCS-7280TR-48C6-R
DCS-7280TR-48C6-R
172.22.0.5
172.22.0.5
P1
P1
DPU
DPU
IP
IP
Marvell CN106
Marvell CN106
USB
USB
USB
USB
USB
USB
172.22.3.3
172.22.3.3
internet
internet
IP
IP
VGA
VGA
USB
USB
USB
USB
SERVER DPU HOST 4
SERVER DPU HOST 4
Dell R760
Dell R760
172.22.1.4
172.22.1.4
iDRAC
iDRAC
dh4
dh4
P1
P1
DPU
DPU
IP
IP
Intel DYP
Intel DYP
USB
USB
172.22.3.4
172.22.3.4
P2
P2
172.22.2.2
172.22.2.2
172.22.2.1
172.22.2.1
Dell PowerEdge R650
Dell PowerEdge R650
HPE DL360 Gen10+
HPE DL360 Gen10+
172.22.2.3
172.22.2.3
172.22.2.4
172.22.2.4
HP RL300 Gen11
HP RL300 Gen11
IP
IP
VGA
VGA
USB
USB
USB
USB
SERVER DPU HOST 9
SERVER DPU HOST 9
ASUS ESC8000A-E12P
ASUS ESC8000A-E12P
172.22.1.9
172.22.1.9
BMC
BMC
dh9
dh9
172.22.2.9
172.22.2.9
IP
IP
VGA
VGA
USB
USB
USB
USB
SERVER DPU HOST ?
SERVER DPU HOST ?
Dell R760xa
Dell R760xa
172.22.1.4
172.22.1.4
iDRAC
iDRAC
dh5
dh5
P1
P1
DPU
DPU
IP
IP
Nvidia BlueField3
Nvidia BlueField3
USB
USB
172.22.3.5
172.22.3.5
P2
P2
172.22.2.5
172.22.2.5
P1
P1
DPU
DPU
IP
IP
P2
P2
EMPTY
EMPTY
EMPTY
EMPTY
EMPTY
EMPTY
EMPTY
EMPTY
EMPTY
EMPTY
EMPTY
EMPTY
EMPTY
EMPTY \ No newline at end of file +
IP
IP
VGA
VGA
USB
USB
USB
USB
P1
P1
P2
P2
NIC
NIC
SERVER MGMT
SERVER MGMT
172.22.0.1
172.22.0.1
IPMI
IPMI
mgmt
mgmt
BMC: public /27
BMC: public /27
RAX QH4-11E4
RAX QH4-11E4
IP
IP
VGA
VGA
USB
USB
USB
USB
P1
P1
P2
P2
NIC1
NIC1
SW TGEN 1
SW TGEN 1
RAX XS4-11S3-10G
RAX XS4-11S3-10G
IPMI
IPMI
P1
P1
P2
P2
NIC2
NIC2
tgen1
tgen1
172.22.1.100
172.22.1.100
172.22.2.100
172.22.2.100
18
18
IP
IP
IP
IP
13
13
15
15
17
17
19
19
21
21
23
23
14
14
16
16
20
20
22
22
24
24
1
1
3
3
5
5
7
7
2
2
4
4
6
6
8
8
9
9
11
11
10
10
12
12
29
29
31
31
30
30
32
32
25
25
27
27
26
26
28
28
TS
TS
18
18
IP
IP
COM
COM
13
13
15
15
17
17
19
19
21
21
23
23
14
14
16
16
20
20
22
22
24
24
1
1
3
3
5
5
7
7
2
2
4
4
6
6
8
8
9
9
11
11
10
10
12
12
ToR
ToR
KVM
KVM
DO NOT USE, RESERVED FOR AIRFLOW
DO NOT USE, RESERVED FOR AIRFLOW
1
1
2
2
3
3
4
4
5
5
6
6
7
7
8
8
9
9
10
10
11
11
12
12
EMPTY
EMPTY
13
13
EMPTY
EMPTY
14
14
15
15
16
16
17
17
18
18
19
19
20
20
21
21
DO NOT USE, RESERVED FOR AIRFLOW
DO NOT USE, RESERVED FOR AIRFLOW
22
22
DO NOT USE, RESERVED FOR AIRFLOW
DO NOT USE, RESERVED FOR AIRFLOW
23
23
24
24
EMPTY
EMPTY
25
25
EMPTY
EMPTY
26
26
EMPTY
EMPTY
27
27
EMPTY
EMPTY
28
28
EMPTY
EMPTY
29
29
EMPTY
EMPTY
30
30
EMPTY
EMPTY
31
31
EMPTY
EMPTY
32
32
EMPTY
EMPTY
33
33
EMPTY
EMPTY
34
34
EMPTY
EMPTY
35
35
EMPTY
EMPTY
36
36
EMPTY
EMPTY
37
37
EMPTY
EMPTY
38
38
EMPTY
EMPTY
39
39
EMPTY
EMPTY
40
40
41
41
42
42
DO NOT USE, RESERVED FOR AIRFLOW
DO NOT USE, RESERVED FOR AIRFLOW
43
43
DO NOT USE, RESERVED FOR AIRFLOW
DO NOT USE, RESERVED FOR AIRFLOW
44
44
NETWORK PDU
NETWORK PDU
COM
COM
IP
IP
53
53
54
54
25
25
26
26
27
27
28
28
29
29
30
30
31
31
32
32
33
33
34
34
35
35
36
36
37
37
38
38
39
39
40
40
41
41
42
42
43
43
44
44
45
45
46
46
47
47
48
48
55
55
56
56
49
49
50
50
1
1
2
2
3
3
4
4
5
5
6
6
7
7
8
8
9
9
10
10
11
11
12
12
13
13
14
14
15
15
16
16
17
17
18
18
19
19
20
20
21
21
22
22
23
23
24
24
51
51
52
52
Arista DCS-7280CR-48-F
Arista DCS-7280CR-48-F
172.22.1.250
172.22.1.250
IP
SFP28
IP SFP28
VGA
VGA
USB
USB
USB
USB
P1
P1
P2
P2
DPU
DPU
IP
IP
SERVER DPU HOST 1
SERVER DPU HOST 1
IP
SFP28
IP SFP28
VGA
VGA
USB
USB
USB
USB
P1
P1
P2
P2
DPU
DPU
IP
IP
SERVER DPU HOST 2
SERVER DPU HOST 2
IP
SFP28
IP SFP28
VGA
VGA
USB
USB
USB
USB
SERVER DPU HOST 3
SERVER DPU HOST 3
Vertiv Avocent 8032DAC
Vertiv Avocent 8032DAC
Vertiv Avocent ACS8000
Vertiv Avocent ACS8000
18
18
13
13
15
15
17
17
19
19
21
21
23
23
14
14
16
16
20
20
22
22
24
24
1
1
3
3
5
5
7
7
2
2
4
4
6
6
8
8
9
9
11
11
10
10
12
12
29
29
31
31
30
30
32
32
25
25
27
27
26
26
28
28
IP
IP
IP
IP
COM
COM
USB
USB
USB
USB
LAN 2
LAN 2
LAN 1
LAN 1
MOD
MOD
SETUP
SETUP
PDU1
PDU1
PDU2
PDU2
inf
inf
USB
USB
USB
USB
USB
USB
USB
USB
VGA
VGA
COM
COM
IP
IP
AMD/Pensando DSC2-100
AMD/Pensando DSC2-100
Nvidia BlueField2
Nvidia BlueField2
24
24
23
23
22
22
21
21
20
20
19
19
18
18
17
17
16
16
15
15
14
14
13
13
12
12
11
11
10
10
9
9
8
8
7
7
6
6
5
5
4
4
3
3
2
2
1
1
.
.
172.22.0.20
172.22.0.20
Vertiv Geist GU2 rack PDU VP7N3001
Vertiv Geist GU2 rack PDU VP7N3001
172.22.0.10
172.22.0.10
172.22.1.1
172.22.1.1
172.22.1.2
172.22.1.2
172.22.1.3
172.22.1.3
172.22.3.1
172.22.3.1
172.22.3.2
172.22.3.2
iDRAC
iDRAC
iLO
iLO
iLO
iLO
dh1
dh1
dh2
dh2
dh3
dh3
18
18
COM
COM
IP
IP
13
13
15
15
17
17
19
19
21
21
23
23
14
14
16
16
20
20
22
22
24
24
1
1
3
3
5
5
7
7
2
2
4
4
6
6
8
8
9
9
11
11
10
10
12
12
old ToR unconnected
old ToR unconnected
49
49
50
50
51
51
52
52
53
53
54
54
42
42
37
37
39
39
41
41
43
43
45
45
47
47
38
38
40
40
44
44
46
46
48
48
25
25
27
27
29
29
31
31
26
26
28
28
30
30
32
32
33
33
35
35
34
34
36
36
CON
CON
FAIL
FAIL
IP
IP
IP
IP
MGMT
MGMT
USB
USB
IP
IP
IP
IP
IP
IP
IP
IP
IP
IP
IP
IP
IP
IP
IP
IP
IP
IP
IP
IP
CON
CON
FAIL
FAIL
IP
IP
IP
IP
MGMT
MGMT
USB
USB
IP
IP
IP
IP
IP
IP
IP
IP
IP
IP
IP
IP
IP
IP
IP
IP
IP
IP
IP
IP
F5A
F5A
F5B
F5B
.
.
.
.
.
.
F5 BIG-IP i4000
F5 BIG-IP i4000
F5 BIG-IP i4000
F5 BIG-IP i4000
DCS-7280TR-48C6-R
DCS-7280TR-48C6-R
172.22.0.5
172.22.0.5
P1
P1
DPU
DPU
IP
IP
Marvell CN106
Marvell CN106
USB
USB
USB
USB
USB
USB
172.22.3.3
172.22.3.3
internet
internet
IP
IP
VGA
VGA
USB
USB
USB
USB
SERVER DPU HOST 4
SERVER DPU HOST 4
Dell R760
Dell R760
172.22.1.4
172.22.1.4
iDRAC
iDRAC
dh4
dh4
P1
P1
DPU
DPU
IP
IP
Intel IPU E2100 (MacKay Peak)
Intel IPU E2100 (MacKay Peak)
USB
USB
IMC 172.22.4.4
IMC 172.22.4.4
P2
P2
172.22.2.2
172.22.2.2
172.22.2.1
172.22.2.1
Dell PowerEdge R650
Dell PowerEdge R650
HPE DL360 Gen10+
HPE DL360 Gen10+
172.22.2.3
172.22.2.3
172.22.2.4
172.22.2.4
HP RL300 Gen11
HP RL300 Gen11
IP
IP
VGA
VGA
USB
USB
USB
USB
SERVER DPU HOST 9
SERVER DPU HOST 9
ASUS ESC8000A-E12P
ASUS ESC8000A-E12P
172.22.1.9
172.22.1.9
BMC
BMC
dh9
dh9
172.22.2.9
172.22.2.9
IP
IP
VGA
VGA
USB
USB
USB
USB
SERVER DPU HOST 5
SERVER DPU HOST 5
Dell R760xa
Dell R760xa
172.22.1.5
172.22.1.5
iDRAC
iDRAC
dh5
dh5
P1
P1
DPU
DPU
IP
IP
Nvidia BlueField3
Nvidia BlueField3
USB
USB
172.22.3.5
172.22.3.5
P2
P2
172.22.2.5
172.22.2.5
P1
P1
DPU
DPU
IP
IP
P2
P2
EMPTY
EMPTY
EMPTY
EMPTY
EMPTY
EMPTY
EMPTY
EMPTY
EMPTY
EMPTY
EMPTY
EMPTY
EMPTY
EMPTY
BIG-IP-01
172.22.0.227
BIG-IP-01 172.22.0.227
BIG-IP-02
172.22.0.228
BIG-IP-02 172.22.0.228
172.22.4.104
172.22.4.104
TS 172.22.4.104, port N = ssh -p 8000+N
1 Network-PDU (115200, cisco pinout)
2 A100G
3 unknown, silent
4 BIG-IP-02 (F5B)
5 ToR
6 unknown, silent at all speeds
7 BIG-IP-01 (F5A)
TS 172.22.4.104 , port N = ssh -p 8000+N...
DPU Intel Mount Evans (DYP) 172.22.3.9, BMC 172.22.4.9 (not verified)
DPU Intel Mount Evans (DYP) 172.22.3.9, ...Text is not SVG - cannot display \ No newline at end of file From 696f6e03506cdf581c4e788c89c76ca457d48779 Mon Sep 17 00:00:00 2001 From: Mircea Dan Gheorghe Date: Wed, 21 Oct 2026 15:29:31 -0700 Subject: [PATCH 21/21] fix(diagram): white background and terminal server at 172.22.0.30 The cabling drawing had a transparent background, so the black lines and labels vanished on GitHub's dark theme. Give it a white background (dark in dark mode, the draw.io default). The terminal server now gets 172.22.0.30 from Kea; the drawing still showed 172.22.4.104. Signed-off-by: Mircea Dan Gheorghe --- images/opi-lab-cabling.drawio.svg | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/images/opi-lab-cabling.drawio.svg b/images/opi-lab-cabling.drawio.svg index 1fc3404..334098e 100644 --- a/images/opi-lab-cabling.drawio.svg +++ b/images/opi-lab-cabling.drawio.svg @@ -1,4 +1,4 @@ -
IP
IP
VGA
VGA
USB
USB
USB
USB
P1
P1
P2
P2
NIC
NIC
SERVER MGMT
SERVER MGMT
172.22.0.1
172.22.0.1
IPMI
IPMI
mgmt
mgmt
BMC: public /27
BMC: public /27
RAX QH4-11E4
RAX QH4-11E4
IP
IP
VGA
VGA
USB
USB
USB
USB
P1
P1
P2
P2
NIC1
NIC1
SW TGEN 1
SW TGEN 1
RAX XS4-11S3-10G
RAX XS4-11S3-10G
IPMI
IPMI
P1
P1
P2
P2
NIC2
NIC2
tgen1
tgen1
172.22.1.100
172.22.1.100
172.22.2.100
172.22.2.100
18
18
IP
IP
IP
IP
13
13
15
15
17
17
19
19
21
21
23
23
14
14
16
16
20
20
22
22
24
24
1
1
3
3
5
5
7
7
2
2
4
4
6
6
8
8
9
9
11
11
10
10
12
12
29
29
31
31
30
30
32
32
25
25
27
27
26
26
28
28
TS
TS
18
18
IP
IP
COM
COM
13
13
15
15
17
17
19
19
21
21
23
23
14
14
16
16
20
20
22
22
24
24
1
1
3
3
5
5
7
7
2
2
4
4
6
6
8
8
9
9
11
11
10
10
12
12
ToR
ToR
KVM
KVM
DO NOT USE, RESERVED FOR AIRFLOW
DO NOT USE, RESERVED FOR AIRFLOW
1
1
2
2
3
3
4
4
5
5
6
6
7
7
8
8
9
9
10
10
11
11
12
12
EMPTY
EMPTY
13
13
EMPTY
EMPTY
14
14
15
15
16
16
17
17
18
18
19
19
20
20
21
21
DO NOT USE, RESERVED FOR AIRFLOW
DO NOT USE, RESERVED FOR AIRFLOW
22
22
DO NOT USE, RESERVED FOR AIRFLOW
DO NOT USE, RESERVED FOR AIRFLOW
23
23
24
24
EMPTY
EMPTY
25
25
EMPTY
EMPTY
26
26
EMPTY
EMPTY
27
27
EMPTY
EMPTY
28
28
EMPTY
EMPTY
29
29
EMPTY
EMPTY
30
30
EMPTY
EMPTY
31
31
EMPTY
EMPTY
32
32
EMPTY
EMPTY
33
33
EMPTY
EMPTY
34
34
EMPTY
EMPTY
35
35
EMPTY
EMPTY
36
36
EMPTY
EMPTY
37
37
EMPTY
EMPTY
38
38
EMPTY
EMPTY
39
39
EMPTY
EMPTY
40
40
41
41
42
42
DO NOT USE, RESERVED FOR AIRFLOW
DO NOT USE, RESERVED FOR AIRFLOW
43
43
DO NOT USE, RESERVED FOR AIRFLOW
DO NOT USE, RESERVED FOR AIRFLOW
44
44
NETWORK PDU
NETWORK PDU
COM
COM
IP
IP
53
53
54
54
25
25
26
26
27
27
28
28
29
29
30
30
31
31
32
32
33
33
34
34
35
35
36
36
37
37
38
38
39
39
40
40
41
41
42
42
43
43
44
44
45
45
46
46
47
47
48
48
55
55
56
56
49
49
50
50
1
1
2
2
3
3
4
4
5
5
6
6
7
7
8
8
9
9
10
10
11
11
12
12
13
13
14
14
15
15
16
16
17
17
18
18
19
19
20
20
21
21
22
22
23
23
24
24
51
51
52
52
Arista DCS-7280CR-48-F
Arista DCS-7280CR-48-F
172.22.1.250
172.22.1.250
IP
SFP28
IP SFP28
VGA
VGA
USB
USB
USB
USB
P1
P1
P2
P2
DPU
DPU
IP
IP
SERVER DPU HOST 1
SERVER DPU HOST 1
IP
SFP28
IP SFP28
VGA
VGA
USB
USB
USB
USB
P1
P1
P2
P2
DPU
DPU
IP
IP
SERVER DPU HOST 2
SERVER DPU HOST 2
IP
SFP28
IP SFP28
VGA
VGA
USB
USB
USB
USB
SERVER DPU HOST 3
SERVER DPU HOST 3
Vertiv Avocent 8032DAC
Vertiv Avocent 8032DAC
Vertiv Avocent ACS8000
Vertiv Avocent ACS8000
18
18
13
13
15
15
17
17
19
19
21
21
23
23
14
14
16
16
20
20
22
22
24
24
1
1
3
3
5
5
7
7
2
2
4
4
6
6
8
8
9
9
11
11
10
10
12
12
29
29
31
31
30
30
32
32
25
25
27
27
26
26
28
28
IP
IP
IP
IP
COM
COM
USB
USB
USB
USB
LAN 2
LAN 2
LAN 1
LAN 1
MOD
MOD
SETUP
SETUP
PDU1
PDU1
PDU2
PDU2
inf
inf
USB
USB
USB
USB
USB
USB
USB
USB
VGA
VGA
COM
COM
IP
IP
AMD/Pensando DSC2-100
AMD/Pensando DSC2-100
Nvidia BlueField2
Nvidia BlueField2
24
24
23
23
22
22
21
21
20
20
19
19
18
18
17
17
16
16
15
15
14
14
13
13
12
12
11
11
10
10
9
9
8
8
7
7
6
6
5
5
4
4
3
3
2
2
1
1
.
.
172.22.0.20
172.22.0.20
Vertiv Geist GU2 rack PDU VP7N3001
Vertiv Geist GU2 rack PDU VP7N3001
172.22.0.10
172.22.0.10
172.22.1.1
172.22.1.1
172.22.1.2
172.22.1.2
172.22.1.3
172.22.1.3
172.22.3.1
172.22.3.1
172.22.3.2
172.22.3.2
iDRAC
iDRAC
iLO
iLO
iLO
iLO
dh1
dh1
dh2
dh2
dh3
dh3
18
18
COM
COM
IP
IP
13
13
15
15
17
17
19
19
21
21
23
23
14
14
16
16
20
20
22
22
24
24
1
1
3
3
5
5
7
7
2
2
4
4
6
6
8
8
9
9
11
11
10
10
12
12
old ToR unconnected
old ToR unconnected
49
49
50
50
51
51
52
52
53
53
54
54
42
42
37
37
39
39
41
41
43
43
45
45
47
47
38
38
40
40
44
44
46
46
48
48
25
25
27
27
29
29
31
31
26
26
28
28
30
30
32
32
33
33
35
35
34
34
36
36
CON
CON
FAIL
FAIL
IP
IP
IP
IP
MGMT
MGMT
USB
USB
IP
IP
IP
IP
IP
IP
IP
IP
IP
IP
IP
IP
IP
IP
IP
IP
IP
IP
IP
IP
CON
CON
FAIL
FAIL
IP
IP
IP
IP
MGMT
MGMT
USB
USB
IP
IP
IP
IP
IP
IP
IP
IP
IP
IP
IP
IP
IP
IP
IP
IP
IP
IP
IP
IP
F5A
F5A
F5B
F5B
.
.
.
.
.
.
F5 BIG-IP i4000
F5 BIG-IP i4000
F5 BIG-IP i4000
F5 BIG-IP i4000
DCS-7280TR-48C6-R
DCS-7280TR-48C6-R
172.22.0.5
172.22.0.5
P1
P1
DPU
DPU
IP
IP
Marvell CN106
Marvell CN106
USB
USB
USB
USB
USB
USB
172.22.3.3
172.22.3.3
internet
internet
IP
IP
VGA
VGA
USB
USB
USB
USB
SERVER DPU HOST 4
SERVER DPU HOST 4
Dell R760
Dell R760
172.22.1.4
172.22.1.4
iDRAC
iDRAC
dh4
dh4
P1
P1
DPU
DPU
IP
IP
Intel IPU E2100 (MacKay Peak)
Intel IPU E2100 (MacKay Peak)
USB
USB
IMC 172.22.4.4
IMC 172.22.4.4
P2
P2
172.22.2.2
172.22.2.2
172.22.2.1
172.22.2.1
Dell PowerEdge R650
Dell PowerEdge R650
HPE DL360 Gen10+
HPE DL360 Gen10+
172.22.2.3
172.22.2.3
172.22.2.4
172.22.2.4
HP RL300 Gen11
HP RL300 Gen11
IP
IP
VGA
VGA
USB
USB
USB
USB
SERVER DPU HOST 9
SERVER DPU HOST 9
ASUS ESC8000A-E12P
ASUS ESC8000A-E12P
172.22.1.9
172.22.1.9
BMC
BMC
dh9
dh9
172.22.2.9
172.22.2.9
IP
IP
VGA
VGA
USB
USB
USB
USB
SERVER DPU HOST 5
SERVER DPU HOST 5
Dell R760xa
Dell R760xa
172.22.1.5
172.22.1.5
iDRAC
iDRAC
dh5
dh5
P1
P1
DPU
DPU
IP
IP
Nvidia BlueField3
Nvidia BlueField3
USB
USB
172.22.3.5
172.22.3.5
P2
P2
172.22.2.5
172.22.2.5
P1
P1
DPU
DPU
IP
IP
P2
P2
EMPTY
EMPTY
EMPTY
EMPTY
EMPTY
EMPTY
EMPTY
EMPTY
EMPTY
EMPTY
EMPTY
EMPTY
EMPTY
EMPTY
BIG-IP-01
172.22.0.227
BIG-IP-01 172.22.0.227
BIG-IP-02
172.22.0.228
BIG-IP-02 172.22.0.228
172.22.4.104
172.22.4.104
TS 172.22.4.104, port N = ssh -p 8000+N
1 Network-PDU (115200, cisco pinout)
2 A100G
3 unknown, silent
4 BIG-IP-02 (F5B)
5 ToR
6 unknown, silent at all speeds
7 BIG-IP-01 (F5A)
TS 172.22.4.104 , port N = ssh -p 8000+N...
DPU Intel Mount Evans (DYP) 172.22.3.9, BMC 172.22.4.9 (not verified)
DPU Intel Mount Evans (DYP) 172.22.3.9, ...Text is not SVG - cannot display \ No newline at end of file +
IP
IP
VGA
VGA
USB
USB
USB
USB
P1
P1
P2
P2
NIC
NIC
SERVER MGMT
SERVER MGMT
172.22.0.1
172.22.0.1
IPMI
IPMI
mgmt
mgmt
BMC: public /27
BMC: public /27
RAX QH4-11E4
RAX QH4-11E4
IP
IP
VGA
VGA
USB
USB
USB
USB
P1
P1
P2
P2
NIC1
NIC1
SW TGEN 1
SW TGEN 1
RAX XS4-11S3-10G
RAX XS4-11S3-10G
IPMI
IPMI
P1
P1
P2
P2
NIC2
NIC2
tgen1
tgen1
172.22.1.100
172.22.1.100
172.22.2.100
172.22.2.100
18
18
IP
IP
IP
IP
13
13
15
15
17
17
19
19
21
21
23
23
14
14
16
16
20
20
22
22
24
24
1
1
3
3
5
5
7
7
2
2
4
4
6
6
8
8
9
9
11
11
10
10
12
12
29
29
31
31
30
30
32
32
25
25
27
27
26
26
28
28
TS
TS
18
18
IP
IP
COM
COM
13
13
15
15
17
17
19
19
21
21
23
23
14
14
16
16
20
20
22
22
24
24
1
1
3
3
5
5
7
7
2
2
4
4
6
6
8
8
9
9
11
11
10
10
12
12
ToR
ToR
KVM
KVM
DO NOT USE, RESERVED FOR AIRFLOW
DO NOT USE, RESERVED FOR AIRFLOW
1
1
2
2
3
3
4
4
5
5
6
6
7
7
8
8
9
9
10
10
11
11
12
12
EMPTY
EMPTY
13
13
EMPTY
EMPTY
14
14
15
15
16
16
17
17
18
18
19
19
20
20
21
21
DO NOT USE, RESERVED FOR AIRFLOW
DO NOT USE, RESERVED FOR AIRFLOW
22
22
DO NOT USE, RESERVED FOR AIRFLOW
DO NOT USE, RESERVED FOR AIRFLOW
23
23
24
24
EMPTY
EMPTY
25
25
EMPTY
EMPTY
26
26
EMPTY
EMPTY
27
27
EMPTY
EMPTY
28
28
EMPTY
EMPTY
29
29
EMPTY
EMPTY
30
30
EMPTY
EMPTY
31
31
EMPTY
EMPTY
32
32
EMPTY
EMPTY
33
33
EMPTY
EMPTY
34
34
EMPTY
EMPTY
35
35
EMPTY
EMPTY
36
36
EMPTY
EMPTY
37
37
EMPTY
EMPTY
38
38
EMPTY
EMPTY
39
39
EMPTY
EMPTY
40
40
41
41
42
42
DO NOT USE, RESERVED FOR AIRFLOW
DO NOT USE, RESERVED FOR AIRFLOW
43
43
DO NOT USE, RESERVED FOR AIRFLOW
DO NOT USE, RESERVED FOR AIRFLOW
44
44
NETWORK PDU
NETWORK PDU
COM
COM
IP
IP
53
53
54
54
25
25
26
26
27
27
28
28
29
29
30
30
31
31
32
32
33
33
34
34
35
35
36
36
37
37
38
38
39
39
40
40
41
41
42
42
43
43
44
44
45
45
46
46
47
47
48
48
55
55
56
56
49
49
50
50
1
1
2
2
3
3
4
4
5
5
6
6
7
7
8
8
9
9
10
10
11
11
12
12
13
13
14
14
15
15
16
16
17
17
18
18
19
19
20
20
21
21
22
22
23
23
24
24
51
51
52
52
Arista DCS-7280CR-48-F
Arista DCS-7280CR-48-F
172.22.1.250
172.22.1.250
IP
SFP28
IP SFP28
VGA
VGA
USB
USB
USB
USB
P1
P1
P2
P2
DPU
DPU
IP
IP
SERVER DPU HOST 1
SERVER DPU HOST 1
IP
SFP28
IP SFP28
VGA
VGA
USB
USB
USB
USB
P1
P1
P2
P2
DPU
DPU
IP
IP
SERVER DPU HOST 2
SERVER DPU HOST 2
IP
SFP28
IP SFP28
VGA
VGA
USB
USB
USB
USB
SERVER DPU HOST 3
SERVER DPU HOST 3
Vertiv Avocent 8032DAC
Vertiv Avocent 8032DAC
Vertiv Avocent ACS8000
Vertiv Avocent ACS8000
18
18
13
13
15
15
17
17
19
19
21
21
23
23
14
14
16
16
20
20
22
22
24
24
1
1
3
3
5
5
7
7
2
2
4
4
6
6
8
8
9
9
11
11
10
10
12
12
29
29
31
31
30
30
32
32
25
25
27
27
26
26
28
28
IP
IP
IP
IP
COM
COM
USB
USB
USB
USB
LAN 2
LAN 2
LAN 1
LAN 1
MOD
MOD
SETUP
SETUP
PDU1
PDU1
PDU2
PDU2
inf
inf
USB
USB
USB
USB
USB
USB
USB
USB
VGA
VGA
COM
COM
IP
IP
AMD/Pensando DSC2-100
AMD/Pensando DSC2-100
Nvidia BlueField2
Nvidia BlueField2
24
24
23
23
22
22
21
21
20
20
19
19
18
18
17
17
16
16
15
15
14
14
13
13
12
12
11
11
10
10
9
9
8
8
7
7
6
6
5
5
4
4
3
3
2
2
1
1
.
.
172.22.0.20
172.22.0.20
Vertiv Geist GU2 rack PDU VP7N3001
Vertiv Geist GU2 rack PDU VP7N3001
172.22.0.10
172.22.0.10
172.22.1.1
172.22.1.1
172.22.1.2
172.22.1.2
172.22.1.3
172.22.1.3
172.22.3.1
172.22.3.1
172.22.3.2
172.22.3.2
iDRAC
iDRAC
iLO
iLO
iLO
iLO
dh1
dh1
dh2
dh2
dh3
dh3
18
18
COM
COM
IP
IP
13
13
15
15
17
17
19
19
21
21
23
23
14
14
16
16
20
20
22
22
24
24
1
1
3
3
5
5
7
7
2
2
4
4
6
6
8
8
9
9
11
11
10
10
12
12
old ToR unconnected
old ToR unconnected
49
49
50
50
51
51
52
52
53
53
54
54
42
42
37
37
39
39
41
41
43
43
45
45
47
47
38
38
40
40
44
44
46
46
48
48
25
25
27
27
29
29
31
31
26
26
28
28
30
30
32
32
33
33
35
35
34
34
36
36
CON
CON
FAIL
FAIL
IP
IP
IP
IP
MGMT
MGMT
USB
USB
IP
IP
IP
IP
IP
IP
IP
IP
IP
IP
IP
IP
IP
IP
IP
IP
IP
IP
IP
IP
CON
CON
FAIL
FAIL
IP
IP
IP
IP
MGMT
MGMT
USB
USB
IP
IP
IP
IP
IP
IP
IP
IP
IP
IP
IP
IP
IP
IP
IP
IP
IP
IP
IP
IP
F5A
F5A
F5B
F5B
.
.
.
.
.
.
F5 BIG-IP i4000
F5 BIG-IP i4000
F5 BIG-IP i4000
F5 BIG-IP i4000
DCS-7280TR-48C6-R
DCS-7280TR-48C6-R
172.22.0.5
172.22.0.5
P1
P1
DPU
DPU
IP
IP
Marvell CN106
Marvell CN106
USB
USB
USB
USB
USB
USB
172.22.3.3
172.22.3.3
internet
internet
IP
IP
VGA
VGA
USB
USB
USB
USB
SERVER DPU HOST 4
SERVER DPU HOST 4
Dell R760
Dell R760
172.22.1.4
172.22.1.4
iDRAC
iDRAC
dh4
dh4
P1
P1
DPU
DPU
IP
IP
Intel IPU E2100 (MacKay Peak)
Intel IPU E2100 (MacKay Peak)
USB
USB
IMC 172.22.4.4
IMC 172.22.4.4
P2
P2
172.22.2.2
172.22.2.2
172.22.2.1
172.22.2.1
Dell PowerEdge R650
Dell PowerEdge R650
HPE DL360 Gen10+
HPE DL360 Gen10+
172.22.2.3
172.22.2.3
172.22.2.4
172.22.2.4
HP RL300 Gen11
HP RL300 Gen11
IP
IP
VGA
VGA
USB
USB
USB
USB
SERVER DPU HOST 9
SERVER DPU HOST 9
ASUS ESC8000A-E12P
ASUS ESC8000A-E12P
172.22.1.9
172.22.1.9
BMC
BMC
dh9
dh9
172.22.2.9
172.22.2.9
IP
IP
VGA
VGA
USB
USB
USB
USB
SERVER DPU HOST 5
SERVER DPU HOST 5
Dell R760xa
Dell R760xa
172.22.1.5
172.22.1.5
iDRAC
iDRAC
dh5
dh5
P1
P1
DPU
DPU
IP
IP
Nvidia BlueField3
Nvidia BlueField3
USB
USB
172.22.3.5
172.22.3.5
P2
P2
172.22.2.5
172.22.2.5
P1
P1
DPU
DPU
IP
IP
P2
P2
EMPTY
EMPTY
EMPTY
EMPTY
EMPTY
EMPTY
EMPTY
EMPTY
EMPTY
EMPTY
EMPTY
EMPTY
EMPTY
EMPTY
BIG-IP-01
172.22.0.227
BIG-IP-01 172.22.0.227
BIG-IP-02
172.22.0.228
BIG-IP-02 172.22.0.228
172.22.0.30
172.22.0.30
TS 172.22.0.30, port N = ssh -p 8000+N
1 Network-PDU (115200, cisco pinout)
2 A100G
3 unknown, silent
4 BIG-IP-02 (F5B)
5 ToR
6 unknown, silent at all speeds
7 BIG-IP-01 (F5A)
TS 172.22.0.30 , port N = ssh -p 8000+N...
DPU Intel Mount Evans (DYP) 172.22.3.9, BMC 172.22.4.9 (not verified)
DPU Intel Mount Evans (DYP) 172.22.3.9, ...Text is not SVG - cannot display \ No newline at end of file