topic Re: iLO 4 Accessing from external network in Server Management - Remote Server Management

iLO 4 Accessing from external network

RyanKoenigDSI — Wed, 10 Feb 2016 16:57:58 GMT

We have our iLO 4 setup with port forwarding(Not my call, gotta work with it) and we want to access it outside our internal network. Right now, to access it, we have to use our IP plus the port to access it instead of our remote site. For example, to access the iLO now, we have to go to, for example, https://283.12.56.14:732 but we want to access it through https://remote.companyname.com:732.

I'm pretty lost at the moment, even just a nudge in the right direction would be helpful. Thanks

Re: iLO 4 Accessing from external network

Jimmy Vance — Wed, 10 Feb 2016 17:57:23 GMT

remote.companyname.com needs to be registered with a DNS server before the name will resolve to an IP address.

iLO has multiple ports. What is port is port 732 forwarded to?

Secure Shell (SSH) Port 22
Remote Console Port 17990
Web Server Non-SSL Port 80
Web Server SSL Port 443
Virtual Media Port 17988

Re: iLO 4 Accessing from external network

RyanKoenigDSI — Wed, 10 Feb 2016 18:05:41 GMT

Thanks for the reply.

remote.companyname.com is already setup and connects to our remote login. iLO is only accessible using the IP. Do I need to edit the DNS to include the port 732? I'm pretty new to anything involving DNS, so my apologies if my questions make no sense.

On the iLO, the "Web Server SSL Port" is set to 732.

Re: iLO 4 Accessing from external network

Jimmy Vance — Wed, 10 Feb 2016 18:16:28 GMT

@RyanKoenigDSI wrote:
Thanks for the reply.
remote.companyname.com is already setup and connects to our remote login. iLO is only accessible using the IP. Do I need to edit the DNS to include the port 732? I'm pretty new to anything involving DNS, so my apologies if my questions make no sense.

On the iLO, the "Web Server SSL Port" is set to 732.

Connects to what remote login? Whatever IP address you are using to access the iLO must resolve to remotecompanyname.com DNS maps names to IP's, and doesn't really care about port number

Exposing iLO over the Internet is not consider a best practice. You should access the iLO over a vpn, OR ssh tunnel.

Re: iLO 4 Accessing from external network

RyanKoenigDSI — Wed, 10 Feb 2016 18:28:20 GMT

remote.companyname.com connects to the SBS Remote Web Access

https://283.12.56.14 connects to IIS7 splash page

https://283.12.56.14:732 connects to iLO

Pinging remote.companyname.com comes back with the IP 283.12.56.14

I am aware that opening the iLO is bad security, but sadly I am not in charge of that decision. Just trying to work with what I have.

Re: iLO 4 Accessing from external network

Jimmy Vance — Wed, 10 Feb 2016 18:33:15 GMT

if those are valid IP's please remove them

So im going to assume the SBS web access system is not useing the same IP address as what provides the IIS splash page. as those two services both use port 80 or 443 so your going to see one or the other not both

Re: iLO 4 Accessing from external network

Dennis Handly — Sat, 13 Feb 2016 21:07:28 GMT

>if those are valid IPs please remove them

Not with a number > 255. :-)

Re: iLO 4 Accessing from external network

Jimmy Vance — Mon, 15 Feb 2016 01:08:57 GMT

@Dennis Handly wrote:
>if those are valid IPs please remove them

Not with a number > 255. :-)

HAHA, good catch, I didn't pay that close attn