Connecting to iDRAC VPN by using L2TP over IPsec on Fedora Linux 30

The integrated out-of-band management platform on Dell servers is called iDRAC. By default, our clients can access iDRAC interface on their servers only by connecting to a VPN. A client can also allow temporary access to the iDRAC of a specific server from the Internet, i.e., without the need for the use of a VPN. Once enabled in the Customer Portal, public access will stay enabled for the next 24 hours, and it can be turned off ahead of schedule.

Credentials and instructions on setting up a VPN connection to the OoB network are available to our clients in the "Profile > Account" section of the Customer Portal. iDRAC credentials for each server can be found on a server's details page in the Customer Portal.

This article will guide you through the steps required to set up an L2TP over IPsec connection to our VPN gateway.

Finding VPN credentials

Credentials for setting up a VPN connection to the OoB network are available in the "Profile > Account" section of the Customer Portal. You can connect to the closest location available to you in the Portal and have access to all of your servers in all of the location:

Press a "Credentials" button to see the credentials for a specific gateway. You will be required to enter one-time password (OTP).

Installing required packages

1. Use the following command to update information on the newest versions of software packages and their dependencies:

sudo dnf update

2. Install the L2TP plugin for NetworkManager:

sudo dnf install network-manager-l2tp network-manager-l2tp-gnome -y

Setting up a new VPN connection

1. Click on the network connection icon in the top right corner of your desktop. Click the "Settings" button in the shortcuts menu:

2. In the settings, choose the "Network" tab on the left, and click "+" button opposite of the "VPN" label to add a new VPN connection:

3. Choose L2TP tunneling protocol:

4. In the VPN connection settings, enter VPN server, username and password which you have got in the Customer Portal earlier.

Click the "user" symbol in the password input box and select "Store the password only for this user".

5. Click on "IPsec Settings..." button to show IPsec settings.

Check the "Enable IPsec tunnel to L2TP host" box. Put the "Shared secret" you have got in the Customer Portal earlier to the "Pre-shared key" input box.

You can manually set "Phase1 Algorithms" to "3des-sha1-modp1024" and "Phase2 Algorithms" to "3des-sha1". Or press the "Legacy Proposals" button to fill this fields automatically. Press OK.

Check "Disable PFS".

6. Go to the "IPv4" tab and scroll down to "Routes". Add a route as shown below:

Save settings by clicking "Apply" button.

7. Make sure your newly created VPN connection is on:

Finding iDRAC credentials

IP address and credential of an individual server's iDRAC interface can be found on that server's management page in the Customer Portal.

Suggested Articles