iDrac webpage not loading when accessing externally - internal works fine

Hello,

Just real fast, I wanted to mention that we don't recommend having the iDRAC connected to a public network, just for security reasons.

That out of the way, it sounds like the web server service might be having some issues. Have you tried connecting by SSH? If you can connect, you might try a racreset to restart the iDRAC.

We have it set to only accept connections from our Office IP address so cannot be accessed publicly.

I have tried SSH and racreset to restart the iDRAC.  I have now noticed that we are having the same issue with another 2 clients iDracs as well - webpage works internal but not external.  Each one is a different company - the only thing they have in common is that they use a Draytek router.

Hi,

is the network card connected to the Draytek, too?

If yes could you connect to the Server from an external device?

Regards Martin

The iDrac network card is connected via an HP switch to the Draytek.

I can SSH no problem and it looks like it is connecting as it gives the browser security certificate warning of an unsafe website but when I click to continue to website the webpage does not load.

Same behaviour on 2 other servers at different client sites.

Hi,

i mean you should do the same physical connection from iDrac and from the network cord from the Server and try to do a remote connection to the server and check if that works.

Regards Martin

Well, with the iDRAC working on the internal network per your first post, I don't expect this to be an iDRAC issue. You might consider referring to the link below to make sure all the necessary ports are open, but I dont think there's much more I could suggest.

https://dell.to/3yakCKz

Tried it and it still not working - I am baffled as to why it is happening.

I have the same problem with R730 servers, iDRAC versions 2.80 and 2.75. FQDN no longer works, only IP.

I also have this issue - since updating firmware on iDrac to latest - unable to reach via external (obviously restricted to single IP as well) All browsers, multiple locations, multiple OS's - all fail to reach the iDrac. We have only updated 1 iDrac - as only 1 iDrac is failing to connect externally. Likely a firmware issue. 

@ITBlendCoffee , What iDRAC FW you have on the server? Can you try with 2.81.81.81

https://www.dell.com/support/home/en-us/drivers/driversdetails?driverid=5hn4r 

@milacek.1 , Can you try with 2.81 firmware which have the fix for FQDN issue. 

https://www.dell.com/support/home/en-us/drivers/driversdetails?driverid=5hn4r 

This release have Host header security issue fix (Link) and launching iDRAC with hostname and FQDN will work by default if hostname/FQDN used is matching with DNS Name and Domain configured on iDRAC. If you are using a different name to launch iDRAC than one configured in iDRAC then you can add the hostname/FQDN used for launching as an exception by using below racadm command to make it work

To add hostname/FQDN as an exception

racadm set idrac.webserver.ManualDNSEntry test.domain.com

You can also disable host header check on iDRAC by running below command. This command will disable security fix of host header check (Link)

racadm set idrac.webserver.HostHeaderCheck Disabled

The iDrac firmware is updated to the latest version. 

Are you able to ping iDRAC IP from the machines where you trying to launch iDRAC? Can you also check SSH to iDRAC from the client and see whether it works?

Hi, you should try to do connection from iDrac and from the network cord from the Server and try to do a remote connection to the server 

I also have this issue.  R730xd.  2.80.80.80 firmware.  No problems from inside on the 192 LAN.  Doesn't work any more with the port forward (Fortinet VIP forward, alternate external port to 443 on the iDrac, 5 whitelisted external management IPs).   Worked without issue for the past 2 years.