DRAC4 and Firewall

Question

Hi All,   I have not seen any documentation on what ports need to be open or what traffic must be allowed to pass in order for the DRAC4 console to be visible (and permit a remote shutdown) from external networks.   Does this information exist somewhere or can it only be culled from user experience? Either way, I appreciate any help.   Thanks

cvandusen · Answer

More info:

I am successfully able to access the DRAC4 homepage for my server, but when I go to Console and attempt to open the console, I am prompted a couple of times for certificates and applets, then the console redirect screen opens and I get a dialog box 'Connection Failed' with a message 'Unable to connect to vKVM, press OK to exit.

Any ideas?

Charlie

BBoysza · Answer

For my purposes, I forwarded ports 80, 443 (for web ui) 5900 (for Remote console, which is actually a web VNC client) and then 3668 for vitual media.

Below is from the Dell™ Remote Access Controller 4 User's Guide

in the DRAC 4 Overview section

__________________________________

DRAC 4 Ports

Table 1-2 identifies the ports used by the DRAC 4. This information is required when opening firewalls for remote access to a DRAC 4.

Table 1-2. DRAC 4 Port Numbers

DRAC 4 Port Number

Used For

Ports on DRAC 4 listening for connection (server):

23 Telnet (configurable)

80 HTTP (configurable)

161 SNMP Agent (not configurable)

443 HTTPS (configurable)

3668 Virtual Media server (configurable)

5869 Remote racadm spcmp server (not configurable)

5900 Console Redirection (configurable)

Ports that DRAC 4 uses as a client:

25 SMTP (not configurable)

69 TFTP (not configurable)

162 SNMP trap (not configurable)

53 DNS

636 LDAP

3269 LDAP for global catalog (GC)

Message Edited by BBoysza on 05-24-200609:28 AM

BBoysza · Answer

What firewall are you using?

cvandusen · Answer

Yes it works on a local machine no problem, but if I am remote I get the error

BBoysza · Answer

Ah - well you're not trying to forward 5900 to x.x.x.1 AND x.x.x.2 are you? :)

To test TCP port forwarding I always just telnet to the IP and port to see it it's working. If you get a blank screen, you're connected - if not, it's not. :) I don't remember with that model if you can view sessions or not - if you can, then telnet and then check the 1811 to see if your traffic is using the right policy.

telnet 1.1.1.1 5900

Ben

cvandusen · Answer

Thanks for the reply, I guess I missed that in the Documentation. Anyway, Ive got 5900 open but I still get this 'vKVM' error.   any ideas?

cvandusen · Answer

Hi Ben,   Well I dunno if the configuration I had before was faulty or not (since my firewall was restarted and I had not saved the config). Anyway, I re-configured and it is working now.   Thanks for your help

BBoysza · Answer

I've gotten that error. I think it had to do with security settings in IE. Test it with a machine on the same local network as the DRAC first to be sure your firewall is configured properly.

cvandusen · Answer

The firewall is the firewall feature of cisco 1811. I use VNC regularly to access the server itself (rather than the DRAC), so I think I have it set up correctly

qqreite · Answer

Does anyone know if the telnet port on the drac is turned off by default? I am getting a connection refused when I try to connect to port 23.

victor_pascual · Answer

The problem isn't  the firewall, the problem is the java on the explorer...you need install the last version of java on the client   Regards

PowerEdge OS Forum

DRAC4 and Firewall

Was this post helpful?