¶ How To Allow a Root system to connect to a Tenant as a Site
Warning: Adding this rule will allow tenants to connect on the DMZ network. By default we disable this for security reasons.
The Sites feature was designed to connect two VergeOS sites together. The root system already has a list of tenants and can manage them from the tenant screen. If you wish to use the Sites features for your Tenants, a special rule is required on the Root system's External Network. This rule will translate outgoing traffic from the DMZ Interface network to use the Router IP. Without this the request will get blocked. Here is how to add the rule:
- In the Root System, click on Networks then External Networks.
- Double-click on the External network.
- In the Left menu, click on Rules.
- Before adding the rule, check that it doesn't exist already.
- Click New on the Left menu.
- Enter the following details:
- Name: Enter a descriptive name like "Allow Tenant to Root"
- Action: Translate
- Protocol: ANY
- Direction: Outgoing
- Interface: DMZ
- Source: Other Network Address: DMZ
- Destination: Any/None
- Target: My Router IP
- Click Submit.
- Click on Apply Rules at the top or Left Menu.
After this rule is applied, you should now be able to connect to the Tenant Site from the Root system.
¶ Testing Rule
To test is this works, follow the instructions below:
- From the Home screen, Click System on the Left menu.
- Click on Nodes on the Left menu.
- Double-Click on Node1 or Select Node1 and click View on the Left menu.
- Click on Diagnostics on the Left menu.
- Change the Query to TCP Connection Test.
- Set Host to the UI IP/Host of the Tenant system.
- Set Port to 443.
- Click Send.
The Response should say Connection successful. If it doesn't, double check the rule for accuracy. Note that the Interface is set to DMZ instead of the normal Auto. Make sure there are not any block rules.
Need more Help? Email support@verge.io or call us at (855) 855-8300