Users Guide

To configure IP filtering:

1. In iDRAC Web interface, go to Overview → iDRAC Settings → Network → Network.

The Network page is displayed.

2. Click Advanced Settings.

The Network Security page is displayed.

3. Specify the IP filtering settings.

For more information about the options, see iDRAC Online Help.

4. Click Apply to save the settings.

Configuring IP filtering using RACADM

You must have Configure privilege to perform these steps.

To configure IP filtering, use the following RACADM objects in the iDRAC.IPBlocking group:

• RangeEnable

• RangeAddr

• RangeMask

The RangeMask property is applied to both the incoming IP address and to the RangeAddr property. If the results are identical, the

incoming login request is allowed to access iDRAC. Logging in from IP addresses outside this range results in an error.

The login proceeds if the following expression equals zero:

RangeMask & (<incoming-IP-address> ^ RangeAddr)

Bitwise AND of the quantities

Bitwise exclusive-OR

Examples for IP Filtering

The following RACADM commands block all IP addresses except 192.168.0.57:

racadm set iDRAC.IPBlocking.RangeEnable 1

racadm set iDRAC.IPBlocking.RangeAddr 192.168.0.57

racadm set iDRAC.IPBlocking.RangeMask 255.255.255.255

To restrict logins to a set of four adjacent IP addresses (for example, 192.168.0.212 through 192.168.0.215), select all but the lowest

two bits in the mask:

racadm set iDRAC.IPBlocking.RangeEnable 1

racadm set iDRAC.IPBlocking.RangeAddr 192.168.0.212

racadm set iDRAC.IPBlocking.RangeMask 255.255.255.252

The last byte of the range mask is set to 252, the decimal equivalent of 11111100b.

For more information, see the iDRAC RACADM Command Line Reference Guide available at dell.com/idracmanuals.

FIPS mode

FIPS is a computer security standard that United States government agencies and contractors must use. Starting from version

iDRAC 2.40.40.40, iDRAC supports enabling FIPS mode.

iDRAC will be officially certified to support FIPS mode in the future.

Difference between FIPS-mode supported and FIPS-validated

Software that has been validated by completing the Cryptographic Module Validation Program is referred to as FIPS-validated.

Because of the time it takes to complete FIPS-validation, not all versions of iDRAC are validated. For information about the latest

status of FIPS-validation for iDRAC, see the Cryptographic Module Validation Program page on the NIST website.