Hacker News Reader

Having static IPs on your management devices on a separate subnet and vlan from your regular host ports should mostly mitigate this.

View on HN

How? The BMC can intercept and inject any ethernet frames that it cares to inject.

What happens to those frames? Will a router configured for a particular VLAN pass through whatever the BMC happens to invent?

Not when you've gone into the BIOS and configured the BMC to only operate on it's dedicated port.

I'm responsible for netsec at my company and I've never seen any indication of the BMC network activity on primary network ports after I've configured the BMC in BIOS to use it's dedicated network port.

Reply on news.ycombinator.com