How to set up L2TP over IPsec for iDRAC on Linux Fedora 41

This article explains step-by-step guides how to connect to iDRAC using a secure L2TP over IPsec VPN connection. It covers how to find your VPN credentials in the Customer Portal, installing the required packages, configure the VPN connection, and add the necessary routes to access the iDRAC network.

Temporary public access

Alternatively, if necessary, you can enable temporary public access to the iDRAC interface, allowing access without a VPN. This can be activated in the Customer Portal on the server details page under the OOB section by selecting Enable public access for 4 hours. Once activated, public access remains enabled for the next four hours, but can be manually disabled at any time.

For security reasons, VPN access remains the preferred method and should be used whenever possible.

Finding VPN credentials

Credentials and instructions for setting up a VPN connection to the OOB network are available in the Customer Portal. To access them:

1. Navigate to VPN access → VPN to DRAC section
2. Select the location and click Credentials
3. In the opened window, you will find the credentials

Installing required packages

1. Update the package information to retrieve the latest versions and dependencies:

   sudo dnf update

2. Install the L2TP plugin for NetworkManager:

   sudo dnf install NetworkManager-l2tp NetworkManager-l2tp-gnome -y

3. Restart your system:

   sudo reboot

Setting up a new VPN connection

1. Click the Settings button in the shortcuts menu
2. In the Settings window, navigate to the Network tab and click the + button next to the VPN label to add a new VPN connection
3. Choose Layer 2 Tunneling Protocol (L2TP)
4. In the VPN connection settings, go to the Identity tab and enter the following details:
   • Name (e.g. VPN1)
   • Login credentials obtained from the Customer Portal:
     • Gateway: VPN server
     • User name: login
     • Password: password
   • Click the User symbol in the password input field and select Store the password only for this user
5. In the same tab, click IPsec Settings:
   • Tick Enable IPsec tunnel to L2TP host
   • Enter the Shared secret obtained from the Customer Portal in the Pre-shared key input field
   • Optionally click Advanced and manually specify encryption methods. A full list of supported tunnel options is available.
   • Tick Disable PFS, then click OK
   • Click Apply to save the settings
6. Navigate to the IPv4 tab and scroll down to Routes:
   • Disable automatic route detection by toggling the Automatic switch
   • Add the following routes: 198.18.0.0 and 100.64.0.0
   • Click Apply to save the settings
7. In the Shortcuts menu, turn on your newly created VPN connection and verify in Settings that the VPN connection is active

Finding iDRAC credentials

The IP address and credentials for an individual server's iDRAC interface can be found in the Customer Portal:

1. Navigate to Enterprise Bare Metal and select your server from the list
2. Scroll down to the OOB section and click Credentials