Secure Edge Access FAQs

Products

• VMware VeloCloud SD-WAN

Issue/Introduction

Secure Edge Access feature provided from Release 5.0.0. Both the Edge and the Orchestrator must be using Release 5.0.0 or later for this feature to be available.
This article answers FAQs related to Secure Edge Access.

Environment

Velocloud SD-WAN, Velocloud, Velocloud SDWAN, Velocloud Secure Edge Access

Resolution

Q1. How can we enable Secure Edge Access?

A1. Secure Edge Access is enabled the following step.

Step1.Configure User Account details

Configure User Account Details

Step2. Enable Secure Edge Access for an Enterprise (Please inquiry to Technical Support because only Operator users can enable secure Edge access for an Enterprise)

 

Step3. Configure Firewall -> Edge Access -> Support Access. The IP address of device which performs an SSH connection must be added on "Allow the following IPs".

If customer enables Stateful Firewall, please add the following firewall rule.

IP Version: IPv4 or IPv6
Source: Define->Interface And IP Address
Interface: blank
IP address: SSH source IP address
CIDR Prefix: 32
Ports: blank
Destination: Any
Application: Any
Firewall：Allow

Step4.Use the Pem file generated in Step 1 to establish an SSH connection.

   For example on Linux

chmod 400 <pemfile>
ssh -i <pemfile> <SSH User Name>@<Edge IP address>

You will be asked to "Enter passphrase for key", so please enter the passphrase you set at step1

*You can check your SSH User name in My Account.

Q2. Are there any differences between Basic and Privilege access level?

A2. There are differences the command to be able to execute. 

Basic vs Privileged Access

 

Q3. Can customer use the Privilege access level?

A3. Customer must choose Basic access level for the user as described in the following documents.

Configure User Account Details

When a privileged level Secure Edge Access user is provisioned, the root account is completely blocked. So it will cause issue 107994 regarding High Availability. For more information, please refer to the release notes for 5.0.1.x.

 

Q4. Is there any traffic impact when enable Secure Edge Access for an Enterprise?

A4. Customer traffic is not affected.