Adding a Second Network Interface to Access Anywhere For Administration

Overview

Access Anywhere administrators may wish to add a second network interface to the Access Anywhere appliance so that server management can be done without using with Access Anywhere’s™ application network interface. These notes, which are intended for experienced Linux system administrators who also have a good understanding of Access Anywhere™ system administration, summarize how to do this. Extensive Access Anywhere application knowledge is not needed.

The procedure consists of two parts:

  1. Changing the Access Anywhere appliance’s configuration so that a specific IP address will be used for all network access to Access Anywhere.
  2. Establishing a second network interface with its own IP address for server management.

Important Points to Note Before Beginning

  1. All commands should be executed as root.
  2. The appliance should be configured with smeconfigserver before executing the steps in this document.
  3. If smeconfigserver is run after these steps have been performed then the changes made by following these steps may be overwritten and have to be repeated.

These notes refer to two IP addresses:

  • IPADDRESS - the IPV4 address of the interface you will use for Access Anywhere™.
  • IPADMINADDRESS – the IPV4 or IPV6 address you will use for server management.

Changing Access Anywhere™ Appliance’s Configuration

Apache HTTPD

HTTP Protocol

vi /etc/httpd/conf/httpd.conf

Change Listen directive from:

Listen 80

to:

Listen IPADDRESS:80
Listen 127.0.0.1:80

HTTPS protocol

vi /etc/httpd/conf.d/ssl.conf Change listen ports from:

Listen 443 https

to:

Listen IPADDRESS:443 https
Listen 127.0.0.1:443 https

Restart Apache

systemctl stop httpd
systemctl start httpd

FTP* Services

FTP Service

vi /var/www/smestorage/ftpserver/ftpserver.conf

And bind to the IP address:

ftp_server_ip=IPADDRESS

SFTP Service

vi /var/www/smestorage/ftpserver/sftpserver/sftpserver.conf

and replace:

ftp_server_ip=0.0.0.0

with:

ftp_server_ip=IPADDRESS

Restart FTP Services

systemctl stop cloudftp
systemctl start cloudftp

Establishing a Second Network Interface

Fabric™ administrators may wish to add a second network interface to Access Anywhere™ appliance so that server management can be done without using with Access Anywhere’s™ application network

SSH IP Binding

vi /etc/ssh/sshd_config

Change Listen IP address

ListenAddress IPADMINADDRESS

Restart service

systemctl restart sshd