Secure Edge Access feature provided from Release 5.0.0. Both the Edge and the Orchestrator must be using Release 5.0.0 or later for this feature to be available.
This article answers FAQs related to Secure Edge Access.
Velocloud SD-WAN, Velocloud, Velocloud SDWAN, Velocloud Secure Edge Access
Step1.Configure User Account details
Configure User Account Details
Step2. Enable Secure Edge Access for an Enterprise (Please inquiry to Technical Support because only Operator users can enable secure Edge access for an Enterprise)
Step3. Configure Firewall -> Edge Access -> Support Access. The IP address of device which performs an SSH connection must be added on "Allow the following IPs".
If customer enables Stateful Firewall, please add the following firewall rule.
IP Version: IPv4 or IPv6
Source: Define->Interface And IP Address
Interface: blank
IP address: SSH source IP address
CIDR Prefix: 32
Ports: blank
Destination: Any
Application: Any
Firewall:Allow
Step4.Use the Pem file generated in Step 1 to establish an SSH connection.
For example on Linux
chmod 400 <pemfile>
ssh -i <pemfile> <SSH User Name>@<Edge IP address>
You will be asked to "Enter passphrase for key", so please enter the passphrase you set at step1
*You can check your SSH User name in My Account.
Configure User Account Details
When a privileged level Secure Edge Access user is provisioned, the root account is completely blocked. So it will cause issue 107994 regarding High Availability. For more information, please refer to the release notes for 5.0.1.x.