topic Re: How to access iLO from external network? in Server Management - Remote Server Management

How to access iLO from external network?

wuitsung — Wed, 16 Feb 2011 06:40:08 GMT

Inside my network I can just type private ip or the dns name to go the iLO page, but how about if I am not in my network? Do I open ports on firewall? what's the port do i need to open? is there any other secure way of doing this?

Re: How to access iLO from external network?

Johan Guldmyr — Wed, 16 Feb 2011 18:39:35 GMT

I suppose you need to do some NAT as well if iLO is on a private IP.

Re: How to access iLO from external network?

Torsten. — Wed, 16 Feb 2011 21:10:43 GMT

This really depends on your hardware (e.g. blade vs. non-blade) and infrastructure.

You normally access iLO via browser (http/https) or serial or telnet/ssh - so you need top "open" the appropriate ports.

Keep in mind, the iLO is just like a "normal" server from this point of view.

Re: How to access iLO from external network?

Jimmy Vance — Thu, 17 Feb 2011 00:42:53 GMT

You can open the required ports in your firewall, but that's not considered a best practice. The secure way would be to have a VPN connection to your internal network.

Re: How to access iLO from external network?

wuitsung — Thu, 17 Feb 2011 00:56:02 GMT

thank you, if i need to open port, what's the port do i need to open?

And VPN seems secure, but if my pc got virus infected it will also infect the server right? as they are in the same network...

Re: How to access iLO from external network?

Jimmy Vance — Thu, 17 Feb 2011 01:01:31 GMT

get into the web interface of iLO and under the networking section it shows all the required ports (or search the forums, this subject has been discussed many times before)

I wouldn't worry about a virus infectin iLO, but if you expose it on the Internet by opening your firewall it can be attacked.

Re: How to access iLO from external network?

Michael A. McKenney — Thu, 17 Feb 2011 03:20:03 GMT

I would only access them from a SSL VPN. Leave them inside the firewall. Come into your network from a SSL VPN, then access them. I placed mine in a 192.168.100.x subnet and gave DNS entries for each server. I would not allow them visibility to the outside world.

Re: How to access iLO from external network?

wuitsung — Sat, 19 Feb 2011 04:04:46 GMT

how did you setup ssl vpn? do you use a hardware firewall? is it cisco or anything else? so do you need a vpn client on your external workstation or the ssl vpn can be done by going to https site?

Re: How to access iLO from external network?

fwalder48 — Mon, 20 Jan 2020 00:01:06 GMT

It seems no here is answering your question, but is telling you a lot of things you already know. The https port to enable is 443. I do agree that a VPN is a much safer option, which would have SSL built in. The question with your and my situation is how do you access a non-routable IP address from a different broadcast domain with transmission control (layer 3 and 4 respectively)? Your first responder is possibly correct that some sort of NAT is needed, or some type of RAS. Window Server has both option, but I have not been able to configure either correctly. Even my DNS will not work because it is misconfigured. FYI: I'm running Windows Server 2016 Standard on an HP DL380 Gen9.