Support VPN

Starting with IP Fabric 1.0.3, you can establish remote SSL VPN to IP Fabric’s DC. Support VPN uses OpenVPN.

Support VPN requires access to remote.ipfabric.io remote port 443/tcp. The IP Fabric appliance must be also configured with a functional DNS server.

Allowlisting FQDNs

In your firewall, please allowlist FQDNs instead of IP addresses, as IP addresses are subject to change.

Connection through proxy servers should work, but it is not guaranteed.

How to Establish Support VPN

Security Info

VPN is always established and teared down by you. VPN connection cannot be triggered externally.

From GUI

1. Click Support in the top-right corner of the IP Fabric GUI.

2. Select Remote support VPN:

   

3. On the newly opened page, click Connect:

   

4. VPN status should change to connected and you should also see the assigned IP address.

From CLI

1. Connect to the IP Fabric appliance via SSH with the osadmin user:

   ssh osadmin@<ip_or_fqdn>
   

2. Switch to root:

   sudo su -
   

3. Now run the VPN command:

   sudo -u autoboss nimpee-support-vpn start
   

   

How to Tear Down Support VPN

From GUI

1. Repeat steps 1 and 2 from the How To Establish Support VPN section above.

2. On the newly opened page, click Disconnect:

   

3. VPN status should change to disconnected.

From CLI

1. Repeat steps 1 and 2 from the How To Establish Support VPN section above if you logged out, skip this step if you didn’t.

2. Now run the VPN command:

   sudo -u autoboss nimpee-support-vpn stop