3.1.9. VPNGW

This OpenNAC Enterprise module, allows the remote centralized management of the VPN Gateway nodes and its configuration. It maintains the system update packages and the object base (networks, hosts, protocols, means of authentication, etc.) to distribute among the different VPN Gateways.

It is a mandatory component for the Secure Remote Access 2SRA module, that includes the memory of the solution where all the configuration, assets, and parametrization are saved.

About the VPNGW License

If you have an existing license for VPNGW, this will appear enabled by default, meaning that you will be able to access and use the VPNGW features without any additional setup.

However, if the VPNGW module is disabled on your license, you won’t be able to access the VPN features. The module will not be displayed in the Administration Portal frontend menu, and and API calls will return an error.

If you need to create a new license that includes the VPNGW module, you can use a specific command:

./create_license.php -i {inputPath} -vpngw_mod

However, please note that by default the VPNGW module will be disabled on the new license. So, you will need to enable it manually if you want to use the VPN features.

Before performing any configuration task, it is important to understand the terminology related to the VPNGW module and its corresponding concepts, representing levels of configuration and customization:

• Manage VPNGW: This section allows you to manage the VPN Gateway nodes, configure workers and also manage the OpenVPN, WireGuard and Shorewall protocols.

• CMDB: From this section you can manage your Objects, Radius authentications, Certificate authorities, and Server certificates

• FARM: This section allows you to manage and configure the farms you have previously created in the “Manage VPNGW” section.

• 3.1.9.1. Manage VPNGW
  • 3.1.9.1.1. Creating a new Farm
    • 3.1.9.1.1.1. Update to latest version
    • 3.1.9.1.1.2. Healthcheck configuration
    • 3.1.9.1.1.3. Installing the Node on the ON Core
  • 3.1.9.1.2. Managing options
• 3.1.9.2. CMDB
  • 3.1.9.2.1. Objects
  • 3.1.9.2.2. Radius authentication
  • 3.1.9.2.3. Certificate authorities
    • 3.1.9.2.3.1. Certificate Authorities (CA) configurations
    • 3.1.9.2.3.2. Registering the CA in the VPNGW CMDB
  • 3.1.9.2.4. Server certificates
    • 3.1.9.2.4.1. Registering the Server Certificate in the CMDB
• 3.1.9.3. FARM
  • 3.1.9.3.1. Zones
  • 3.1.9.3.2. Interfaces
  • 3.1.9.3.3. Policies
  • 3.1.9.3.4. Rules
  • 3.1.9.3.5. Hosts
  • 3.1.9.3.6. WireGuard
    • 3.1.9.3.6.1. Farm configuration
    • 3.1.9.3.6.2. Node configuration
    • 3.1.9.3.6.3. Manage users
  • 3.1.9.3.7. OpenVPN
    • 3.1.9.3.7.1. Farm configuration
    • 3.1.9.3.7.2. Node configuration