| Anchor | ||||
|---|---|---|---|---|
|
| Include Page | ||||
|---|---|---|---|---|
|
...
The key-pair is (optionally) created and then assigned to the Charon cloud instance at first launch. If a new key-pair is created, the private key can be downloaded during creation.
Make sure to store the private key in a safe place. If it is lost, access to the instance may be permanently lost.
| Div | ||
|---|---|---|
| ||
Adapting the SSH Daemon Configuration of the Charon Host System
...
| Linux version | network-scripts method (ifcfg-files) | NetworkManager (nmcli) |
|---|---|---|
| 7.x | Installed by default. NM_CONTROLLED=no forces ifcfg-file use | Installed by default. |
| 8.x | Deprecated but available; | Preferred configuration method. Used by the Charon-SSP Manager starting with Linux 8 |
| 9.x | No longer available. For interface types supported by the ifcfg-rh plugin, ifcfg-files can be used. | Only method with full functionality. Must be used for TAP interfaces. |
| Div | ||
|---|---|---|
| ||
Sample ifcfg-files for CentOS/RHEL 7:
...
| Code Block | ||
|---|---|---|
| ||
nmcli conn add type bridge con-name br_vpn0 ifname br_vpn0 ipv4.method manual ipv4.addresses 192.168.0.10/24 \
ipv6.method disabled
nmcli conn add type tun mode tap autoconnect yes con-name tap0_vpn0 ifname tap0_vpn0 master br_vpn0 |
| Div | ||
|---|---|---|
| ||
Creating a VPN Bridge using the Charon-SSP Manager
...