The Remote Access Survey Setup Guide
search cancel

The Remote Access Survey Setup Guide

book

Article ID: 386120

calendar_today

Updated On:

Products

VMware VeloCloud SD-WAN

Issue/Introduction

Depending on the issue you have contacted Technical Support about, Technical Support Engineers may need to remote access your Edge device.
This KB describes the setup which customer (or partner) need to change for our remote access.

Environment

Velocloud SDWAN, VMware SDWAN, Remote access, Support Access

Resolution

The following procedure describes how to configure the setup for Remote Access Survey. 
There will be no traffic impact on the Edge service as a result of following this procedure.

 

Case: Edge stateful firewall is DISABLED

  1. Log in to VCO.
  2. Select ‘Configure’ -> ‘Edges’.
  3. Click on the relevant Edge name.
  4. Select the ‘Firewall’ section -> Check the ‘Override’ checkbox on ‘Edge Access’ area.


  5. Select ‘Allow the following IPs’ in Support Access and enter 169.254.129.1.


  6. Click on the ’SAVE CHANGE’ button in the bottom right of the screen.

 

 

Case: Edge stateful firewall is ENABLED

  1. Log in to VCO.
  2. Select ‘Configure’ -> ‘Edges’.
  3. Click on the relevant Edge name.
  4. Select the ‘Firewall’ section -> Check the ‘Override’ checkbox on ‘Edge Accessarea.


  5. Select ‘Allow the following IPs’ in Support Access and enter 169.254.129.1.


  6. Click ’NEW RULE’ on Firewall Rules area


  7. Set the following parameters on the Firewall Rule
    IP Version:   IPv4
    Source:   Define->Interface And IP Address
    Interface:   No need to set
    IP Address:   169.254.129.1
    CIDR Prefix:   32
    Ports:   No need to set
    Destination:   Any
    Application:   Any
    Firewall:   Allow


  8. Click on the ’CREATE’ button in the bottom right of the screen.


  9. Click on the ’SAVE CHANGE’ button in the bottom right of the screen.

 

Case: Edge is Virtual Edge on AWS/Azure/GCP

  1. You need to change one of the following settings.
  2. Please provide the SSH key, which was created when the Virtual Edge was created.
    Technical Support Engineers need an SSH key for remote access.

 

Case: Edge is VeloCloud SD-WAN in Azure Virtual WAN Hub

  1. For VeloCloud SD-WAN in Azure Virtual WAN Hub, Technical Support Engineers manage the SSH key.  
    So you only need to change one of the following settings.