Oplon Secure Access Setup

Change IP (Optional)

If you want to change the machine’s (virtual) IP address, you can edit Debian’s default network configuration file: /etc/network/interfaces. To proceed, get root privileges and edit the file with your preferred editor (e.g. nano):

sudo -i
nano /etc/network/interfaces

Example static configuration for interface enp0s3:

auto enp0s3
iface enp0s3 inet static
    address 192.168.1.50
    netmask 255.255.255.0
    gateway 192.168.1.1
    dns-nameservers 8.8.8.8 1.1.1.1

Save the file and apply the new configuration by restarting the networking service or bringing the interface down and up:

# restart networking service (common method on Debian)
systemctl restart networking
 
# or bring the specific interface down and up
ifdown enp0s3 && ifup enp0s3

Verify IP and SSH Access

Check that the system has the expected static IP assigned by running:

ip a

Example output consistent with the configuration above:

2: enp0s3: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP group default qlen 1000
    link/ether 08:00:27:12:34:56 brd ff:ff:ff:ff:ff:ff
    inet 192.168.1.50/24 brd 192.168.1.255 scope global enp0s3
       valid_lft forever preferred_lft forever
    inet6 fe80::a00:27ff:fe12:3456/64 scope link
       valid_lft forever preferred_lft forever

For example, if the address is 192.168.1.50, continue configuration from any SSH console:

ssh administrator@192.168.1.50

Initial Management Console Setup and Delegate Password

To configure the root credentials for the Management Console, run the graphical setup utility:

sudo -i
oplonsetup

Here you configure:

• Management Address: the address where the Management interface will listen
• Root password: used to log in to the interface
• Delegate password: used for multi-node Oplon Secure Access instances

After selecting <Save and Exit> run:

oplonrestart

to restart Oplon Secure Access services.

Accessing the Dashboard

Open a browser and navigate to:

https://x.x.x.x:4444

Where x.x.x.x is any IP address assigned to the system (unless you changed the default 0.0.0.0 during oplonsetup).

• Login: root (or the account set during setup)
• Password: the password you chose during setup

License Installation - Unified license (Version >= 11.3.0)

Starting with version 11.3.0 a Unified license is available: a single license file that contains and activates all purchased Oplon products for your instance. If your appliance runs version >= 11.3.0, install the Unified license and you do not need to load module licenses individually.

Steps:

1. Open the top-left menu and click the gear icon to access Settings.
2. Select Install License.
3. Upload the .xml file of the Unified license.
4. Perform Save and Re‑Init to apply changes.

License Installation (Version < 11.3.0)

If you are running a release older than 11.3.0, install individual licenses:

• the Catalog license (Node license)
• and the ADC/module licenses required (e.g. Platform, Standard HA, Enterprise HA)

Ensure that on releases < 11.3.0 you load the Catalog license first, then each module license as needed. After installing licenses perform Save and Re‑Init.

Install Catalog License

1. Open the top-left menu and click the gear icon to access Settings.
2. Select Install License.
3. Upload the Catalog .xml license file.

Install Platform License (or other ADC)

1. Go to Modules > ADC & GLB.
2. Select the target ADC (e.g. Platform) using the arrow next to its name.
3. Click Actions > Install License.
4. Upload the ADC .xml license file.

Quick Setup (Version >= 11.0.0)

1. Go to ADC Settings > Listener
2. Locate the SecureAccess listener (already preconfigured)
3. Enable the listener by clicking the blue icon:

4. Set Enable to true and configure the desired listening IP address
5. Click Save, then Reinit to apply changes

Manual Setup (All Versions)

⚠️ If you’re using Oplon version 11.0.0 or later, it’s recommended to follow the Quick Setup, which automates most of the configuration.

This section is intended for those who:

• are using an older version of Oplon
• or prefer to perform a fully customized and manually controlled setup

Manual Setup walks you through the essential configuration steps — like rewrite rules and listeners — which are automatically applied in the Quick Setup.
This is the recommended method for advanced environments, in-depth testing, or scenarios where default settings must be avoided.

Copy of the Rewrite Header Rules

1. Rewrite Header Rules Research we check the Templates view and search for the string secure in search.

2. Rewrite Header Rules Copy we copy the Templates in our A10_LBLGoPlatform Platform

Summary Video Rewrite Header Rules Research and Copy

Copy of the Rewrite Body Rules

1. Rewrite Body Rules Research we check the Templates view and search in search for the string secure

2. Rewrite Body Rules Copy we copy the Templates in our platform A10_LBLGoPlatform

Summary Video Rewrite Body Rules Research and Copy

Copy of the Endpoints Grouping

Accessing the section Grouping from ADC Settings we copy the group from templates

1. Endpoints Grouping Research we check the Templates view and search for the string secure in search

2. Endpoints Grouping Copy we copy the templates in our platform A10_LBLGoPlatform

Summary Video Endpoints Grouping Research and Copy

Copy Of The Listener

at this point we can put a listener in Listener with associated OSA group we will proceed, as in the previous examples, to a copy from the templates inside our platform

• Listeners Research: we check the Templates view and search for the string secure in search

• Listeners Copy: we copy the templates in our platform A10_LBLGoPlatform

• Listener Customization: according to our needs we proceed to give our listener a name, an ip address where it will be connected and an a port where it will be listening. To this we assign the right Endpoint Grouping previously copied.
• endPointsGrouping: SecureAccess

Summary Video Listener Research and Copy

Automatic Module Startup

If you’re installing Oplon Secure Access for the first time, it’s essential to configure the automatic startup of the following modules:

• R00_DesktopBridge
• R00_SshBridge
• R10_RemoteAccessGateway
• A10_LBLGoPlatform (or alternative ADCs)

In this example, we’ll show how to configure the R10_RemoteAccessGateway module. The process is the same for the other modules.

How to Enable Automatic Startup for the R10_RemoteAccessGateway Module

1. Go to Modules > All Modules and use the search bar to find R10_*. Once you find the module, click the blue button:

   

2. On the module page, open the General Start Parameters menu and set the Module Start field to automatic.

   

Saving the Changes

After applying all the necessary changes, save them and proceed with a reinit to apply:

Verifying Proper Operation

To verify that everything is working correctly, open a browser and enter the following address:

https://<ip_address>:443

Depending on your configuration (with or without MFA), you’ll see one of the following:

• The MFA login screen, with a redirect to super.oplon.cloud.
• The Secure Access screen, which may display various errors due to missing MFA configuration. You can configure MFA from the appropriate section if needed: MFA Setup.