OSA Setup

IP change (Optional)

If we wish to assign a fixed IP to our (virtual) machine, we need to elevate ourselves to root (superuser) with sudo -i or su - root and run the network manager tool nmtui (if provided with the appliance)

This opens a semi-graphic form with which we can set network parameters that normally require editing of files within the operating system such as IP Address, Gateway, DNS…

After that, we can restart the network card always from the mntui semigraphic interface we restart the network card

Now verifying that our system has a fixed ip assigned with ip a eg: 192.168.1.9, we can continue the configuration from any ssh console:


ssh administrator@<the-ip-address>

First configuration Management Console and Password Delegate

To configure the root credentials of the Management Console it is necessary to open the graphical utility by typing:


sudo -i
oplonsetup

Now we configure:

Management Address: i.e. the address where the Management interface listens
Root password: used to access the interface
Delegate password: used for multi-node Oplon Secure Access instances.

<Save and Exit> and then:


oplonrestart

to restart the Oplon Secure Access services.

Access to Dashboard

To access the services Oplon Global Distributed Gateway type: https://x.x.x.x:4444 (Where x.x.x.x is any address of the system if you have not changed the address 0.0.0.0 or the address you have chosen with oplonsetup).

Login: root (or the one chosen during configuration)
Password: The one chosen during configuration

⚠️

If a license has been inserted, you must recreate the node (settings -> nodes and create a new node here)

Configuring Oplon Secure Access

Copy of the Rewrite Header Rules

Rewrite Header Rules Research we check the Templates view and search for the string secure in search.

Rewrite Header Rules Copy we copy the Templates in our A10_LBLGoPlatform Platform

Summary Video Rewrite Header Rules Research and Copy

Copy of the Rewrite Body Rules

Rewrite Body Rules Research we check the Templates view and search in search for the string secure

Rewrite Body Rules Copy we copy the Templates in our platform A10_LBLGoPlatform

Summary Video Rewrite Body Rules Research and Copy

Copy of the Endpoints Grouping

Accessing the section Grouping from ADC Settings we copy the group from templates

Endpoints Grouping Research we check the Templates view and search for the string secure in search

Endpoints Grouping Copy we copy the templates in our platform A10_LBLGoPlatform

Summary Video Endpoints Grouping Research and Copy

Copy Of The Listener

at this point we can put a listener in Listener with associated OSA group we will proceed, as in the previous examples, to a copy from the templates inside our platform

Listeners Research: we check the Templates view and search for the string secure in search

Listeners Copy: we copy the templates in our platform A10_LBLGoPlatform

Listener Customization: according to our needs we proceed to give our listener a name, an ip address where it will be connected and an a port where it will be listening. To this we assign the right Endpoint Grouping previously copied.
endPointsGrouping: SecureAccess

Summary Video Listener Research and Copy

Starting Modules for Osa

To use Oplon Secure Access, if you are installing it for the first time, you need to start these three modules:

R00_DesktopBridge
R00_SshBridge
R10_Remote Access Gateway

To do this you need:

go to Modules > All Modules and search in the search bar for R00_. From here, press the two green Play buttons:
go to Modules > All Modules and search in the search bar for R10_. From here, press the green Play button:

It is also possible, and indeed recommended, to configure all three modules to start automatically. To do this, for each of the three modules, simply click on the small blue edit icon of all three modules, and set the Module Start field to “automatic” from the General Start Parameter menu.

Saving Changes

Now we can save the changes made and reinit.

Recap Configuration Steps

A video that specifies the checks to be done in order to be sure that we did correctly all the previous steps