How to set up L2TP over IPsec for iDRAC on MS Windows

This article explains step-by-step guides how to connect to iDRAC using a secure L2TP over IPsec VPN connection. It covers how to find your VPN credentials in the Customer Portal, installing the required packages, configure the VPN connection, and add the necessary routes to access the iDRAC network.

Temporary public access

Alternatively, if necessary, you can enable temporary public access to the iDRAC interface, allowing access without a VPN. This can be activated in the Customer Portal on the server details page under the OOB section by selecting Enable public access for 4 hours. Once activated, public access remains enabled for the next four hours, but can be manually disabled at any time.

For security reasons, VPN access remains the preferred method and should be used whenever possible.

Finding VPN credentials

Credentials and instructions for setting up a VPN connection to the OOB network are available in the Customer Portal. To access them:

Navigate to VPN access → VPN to DRAC section
Select the location and click Credentials
In the opened window, you will find the credentials

VPN access credentials dialog showing the VPN server, login, password, and shared secret

Setting up a new VPN connection

Go to Start → Settings
Choose Network & Internet
Navigate to the VPN tab and click Add a VPN connection
In the opened window, enter the following details:
- VPN provider: choose Windows (built-in)
- VPN type: choose L2TP/IPsec with pre-shared key
- Connection name: e.g., VPN iDRAC
- Login credentials obtained from the Customer Portal:
  - Server name or address: VPN server
  - Pre-shared key: shared secret
  - Username: login
  - Password: password
Click Save

Enable additional security protocols

In the VPN tab, click Change adapter options in the Related settings section
Find the adapter with the same name as your VPN connection and click Change settings of this connection
In the connection properties window:
- On the Security tab:
  - Enable Allow these protocols
  - Ensure that only Challenge Handshake Authentication Protocol (CHAP) and Microsoft CHAP Version 2 (MS-CHAP v2) are enabled
- On the Networking tab:
  - Select IPv4 protocol and open its properties using the Properties button
  - Click Advanced, then untick the Use default gateway on remote network checkbox
- Click OK to save settings and close all open windows

Connect to VPN and add routes to iDRAC network

Go to Start → Settings → Network & Internet → VPN
Find your VPN connection and click Connect
Once the VPN connection is established, add the routes to the iDRAC's network:
- Go to Start, type cmd and open Command Prompt as Administrator
- Execute the following command to get the VPN network adapter ID:
```
route print
```
- Scroll to the Interfaces List block and find your VPN adapter and its ID
- Execute the following commands to add routes:
```
route add 198.18.0.0 mask 255.254.0.0 0.0.0.0 if your_adapter_ID
route add 100.64.0.0 mask 255.254.0.0 0.0.0.0 if your_adapter_ID
```
  Replace your_adapter_ID with the actual ID you obtained in the previous step.

Add static routes for the VPN connection using the route add command Now you should be able to connect to iDRAC on your server.

Finding iDRAC credentials

The IP address and credentials for an individual server's iDRAC interface can be found in the Customer Portal:

Navigate to Enterprise Bare Metal and select your server from the list
Scroll down to the OOB section and click Credentials