SSR and Conductor on AWS
- Jean-luc KRIKER
Service: Destination ( IP/protocol/port )
Tenant: Source ( Endpoint )
WayPoint = Public/WAN Interface IP@ + dual-NAT encapsulation
Traffic tunneled traffic = NATed port of the end-user-traffic
Documentation: https://docs.128technology.com/docs/intro_installation_aws
Basic Configuration: https://docs.128technology.com/docs/intro_basic_router_config/
128 Technology Conductor | https://aws.amazon.com/marketplace/seller-profile?id=9f7a8f2b-c239-4c66-b6a8-7f79e772f23c https://aws.amazon.com/marketplace/search/results?searchTerms=Juniper+Networks https://aws.amazon.com/marketplace/search?searchTerms=128+technology |
|---|---|
 | |
| 1- With Cloud formation | |
using the Cloudformation Template |
|
| |
| |
| |
>>> Then click LAUNCH |
|
| |
| |
 | |
| |
10. Go to the "Outputs" tab and copy the "InstanceIPAddress" and use it to access the Router GUI from Google Chrome with URL "https://xxx.xxx.xxx.xxx". 11. Because the certificate is self-signed, you will have to accept the certificate. With Google Chrome, type "thisisunsafe". 12. When the login screen for the 128T GUI appears the default username is "admin" and the default password is the Instance ID. |
|
Conductor Login:username: admin Password: instance ID: i-0489910xxxxxxxxx or |
|
| If the password does not work | 1- log using SSH ( and the KeyPair ) 2- change the passwords with sudo passwd admin >> enter a new password |
| Upgrade | |
| install the username / token | install128t repo authenticate -u <user> -t <token> |
1-List repository: sudo install128t repo list 2- add beta repo: sudo install128t repo enable beta ( or alpha or both ) 3- add plugins: sudo install128t repo enable plugins-beta | |
| Upgrade the installer ( if needed ) | sudo dnf upgrade 128T-installer |
repo list [centos@ip-172-31-110-205 ~]$ sudo install128t repo list Installer will run in non-interactive mode Preferences are valid Current Installer version: 3.1.2-1 Repository | ID | Enabled | Credentials Valid ---------------------+-------------------------------------+---------+------------------- 128tech-local-saved | 128tech-local-saved | True | N/A app-data-release | 128t-authenticated-app-data-release | True | True beta | 128t-authenticated-beta | True | True legacy-certificate | 128tech-release | True | N/A legacy-release | 128t-authenticated-legacy-release | True | True plugins-beta | 128t-authenticated-plugins-beta | True | True plugins-release | 128t-authenticated-plugins-release | True | True release | 128t-authenticated-release | True | True Installer complete [centos@ip-172-31-110-205 ~]$ | |
| Upgrade from the GUO ( or PCLI ) | |
| Public IP address | Auto-assign Public IP: Enable |
| SG | Create a new security group: Enable HTTPS in the security group |
