Contents

Overview

Charon-SSP Manager provides features to configure the following host system network configuration aspects:

• Configuring host system network interface settings.

• Adding a virtual bridge, i.e., a collection of virtual network tap (TAP) devices that constitute a host-attached virtual LAN. A virtual bridge can be connected to the customer network or be internal to the host system.

• Adding VLAN interfaces to a parent Ethernet interface. This allows the host system to participate in the specified VLAN in the customer network.

To open the network settings window, click on Tools > Network Settings. This will open a window similar to the ones shown below:

Content of the network settings window:

• Left-hand side: list of available host system network interfaces (including bridge and VLAN interfaces created previously).

• Right-hand side: settings of the currently selected interface.

• Apply button: confirms any configuration changes made for the selected interface.

• Add button: opens a submenu where you can select to add a virtual bridge or a VLAN interface.

• Remove button: allows to remove the selected virtual bridge or VLAN interface.

Please refer to the next sections for a detailed description of the network configuration options.

Managing Host System Network Interfaces

Open the network settings window as described above by clicking on Tools > Network Settings. 

Using the network settings window, you can set up the existing host system network interfaces according to your requirements. The window also contains previously created bridge and VLAN interfaces.

First, select the interface that is to be configured.

After selecting an interface, you can then set the following host system network interface parameters:

• IP setting: specify the method used for the IPv4 addressing of the interface. Options are Automatic (DHCP), Manual, and None.

• IP address: if manual addressing is selected, the host IP address can be added in this field. The field is inactive if DHCP or None is selected.

• Netmask: if manual addressing is selected, the netmask for the host IP address can be added in this field. The field is inactive if DHCP or None is selected.

• Gateway: if manual addressing is selected, the default gateway for the host can be added in this field. The field is inactive if DHCP or None is selected.
   Be careful not to select a default gateway not matching the AWS subnet structure. Doing so may cause you to permanently lose access to your instance.
   In some cases when several network interfaces are configured on the Charon host, a second routing table has to be created on the Charon host. This is not supported by the Charon Manager and must be configured from the command-line. See AWS Networking and Charon-SSP for more information.

• DNS server 1 and DNS server 2: if manual addressing is selected, enter the IP address of one or two DNS name servers. Inactive if DHCP or None is selected.

The Apply button confirms any changes made and Close discards them.

Managing Virtual Networks

Creating a Virtual Network

A virtual network can be used to create a virtual bridge on the host system with a number of virtual network interfaces attached to it. The virtual interfaces can be used to provide network interfaces for use by Charon-SSP instances. A virtual network can be connected to the external network using a so-called binding interface, or it can be internal to the host system.

To create a new virtual network, open the network settings window via Tools > Network Settings. Then follow the steps shown below:

Virtual bridge (i.e., virtual network) configuration options:

The virtual network connected to a binding interface consists of

• a bridge device called br_<physical interface>, and

• a series of TAP devices named tapX_<physical interface>.

If the binding interface is disabled, the virtual network consists of

• a bridge called br_<bridgename>, and

• a series of tapX_<bridgename> TAP devices.

If SSH VPN is enabled, the first virtual network created consists of 

• a bridge called br_vpn0,
• a tap0 interface, and
• a series of tapX_vpn0 interfaces

X is a number from 0 up to the number of virtual adapters (0 to configured number minus 1) specified in Number of the virtual adapters. These devices can then be configured for use as virtual Ethernet controllers.

Deleting a Virtual Network

To delete a virtual network, follow the instructions listed below.

1. Follow the menu path Tools > Network Settings to open the network settings window.

2. Select the bridge you want to delete and click on the Remove button. This will open a confirmation window.

3. To delete all virtual network interfaces associated with the selected bridge, click on YES.

Following the instructions above will immediately delete all TAP devices and the bridge.

Resizing a Virtual Network

To resize a virtual network, follow the instructions listed below:

1. Shut down any running guest operating systems and stop all virtual machines connected to the virtual network TAP devices.

2. Delete the current virtual network, using the instructions detailed in Deleting a Virtual Network.

3. Re-create the virtual network using the instructions detailed in Creating a Virtual Network. Make sure to specify the new virtual network size in the Number of the virtual adapters field.

4. Reconfigure the Ethernet configuration of the virtual machines. This step is only necessary if shrinking the virtual network and only if the virtual machines are configured for TAP devices that no longer exist.

5. Start the attached virtual machines.

 Shrinking a virtual network may make it necessary to adjust a number of virtual machine configurations because the name of their virtual Ethernet interface has changed.

Managing VLAN Interfaces

 This option is described for completeness. However, it is normally not relevant for the Charon-SSP AWS product.

Adding a VLAN Interface

VLAN configuration options:

Deleting a VLAN Interface

To delete a VLAN interface, follow the instructions listed below:

1. Follow the menu path Tools > Network Settings to open the network settings window.

2. Select the VLAN interface you want to delete and click on the Remove button. This will open a confirmation window.

3. To delete the VLAN interface, click on YES.

Following the instructions above will immediately delete the VLAN interface.