# How to set up L2TP over IPsec for iDRAC on Mac OS X (/docs/tutorials/idrac-vpn-access/l2tp-ipsec-idrac-mac-os-x)











The integrated out-of-band management platform on Dell servers is called [iDRAC](https://en.wikipedia.org/wiki/Dell_DRAC). By default, access to the iDRAC interface of your servers is protected behind a VPN to prevent unauthorized access to out-of-band management.

This section contains step-by-step guides for connecting to iDRAC using a secure L2TP over IPsec VPN connection, covering all major operating systems and distributions, including macOS, Windows, and multiple versions of Ubuntu and Fedora Linux. Each guide walks you through finding your VPN credentials in the Customer Portal, installing the required packages, configuring the VPN connection, and adding the necessary routes to reach the iDRAC network.

### Temporary public access

Alternatively, if necessary, you can enable temporary public access to the iDRAC interface, allowing access without a VPN. This can be activated in the [Customer Portal](https://portal.servers.com/login) on the **server details page** under the **OOB** section by selecting **Enable public access for 4 hours**. Once activated, public access remains enabled for the next four hours, but can be manually disabled at any time.

For security reasons, VPN access remains the preferred method and should be used whenever possible.

### Finding VPN credentials

Credentials and instructions for setting up a VPN connection to the OOB network are available in the [Customer Portal](https://portal.servers.com/login). To access them:

1. Navigate to **Networks** → **VPN access** → **VPN to DRAC** section
2. Select the location and click **Credentials**
3. In the opened window, you will find the credentials

<img alt="VPN access credentials dialog showing the VPN server, login, password, and shared secret" src={__img0} />

### Configure VPN connection

1. Go to **System Settings** → **Network**
2. Click **Add VPN Configuration** → **L2TP over IPSec**

<img alt="Adding a VPN configuration in macOS Network settings" src={__img1} />

3. In the opened window, enter the following details:
   * Connection name (e.g. `iDRAC VPN`)
   * Login credentials obtained from the [Customer Portal](https://portal.servers.com/):
     * VPN server: server address
     * Login: account name
     * Password: password
     * Shared Secret: shared secret

<img alt="Enter the coonection details" src={__img2} />

4. Click **Create**
5. Enable the **toggle switch** to connect to the newly created VPN:

<img alt="Enabling the toggle switch to connect to the newly created VPN" src={__img3} />

6. Once the VPN connection is established, add the necessary routes by executing the following command in the Terminal:

   ```
   sudo route -n add 198.18.0.0/15 -interface ppp0  
   sudo route -n add 100.64.0.0/15 -interface ppp0
   ```

   Note: this command must be executed each time you connect to the VPN.

7. To simplify this process, you can create a **bash alias**. To add a bash alias:
   * Add the following line at the end of the `~/.bash_profile` file:
     ```
     alias drac='sudo route -n add 198.18.0.0/15 -interface ppp0 ; sudo route -n add 100.64.0.0/15 -interface ppp0'
     ```
   * Apply the changes:
     ```
     source ~/.bash_profile
     ```

Now, you can simply run the `drac` command to add the required route.

## Finding iDRAC credentials

The IP address and credentials for an individual server's iDRAC interface can be found in the [Customer Portal](https://portal.servers.com/login):

1. Navigate to **Dedicated Servers** → **Manage** → **Your server** → **Details**
2. Scroll to the **OOB** section and click **Credentials**