Adding a Second Network Interface to Access Anywhere For Administration
Overview
Access Anywhere administrators may wish to add a second network interface to the Access Anywhere appliance so that server management can be done without using with Access Anywhere’s™ application network interface. These notes, which are intended for experienced Linux system administrators who also have a good understanding of Access Anywhere™ system administration, summarize how to do this. Extensive Access Anywhere application knowledge is not needed.
The procedure consists of two parts:
- Changing the Access Anywhere appliance’s configuration so that a specific IP address will be used for all network access to Access Anywhere.
- Establishing a second network interface with its own IP address for server management.
Important Points to Note Before Beginning
- All commands should be executed as root.
- The appliance should be configured with smeconfigserver before executing the steps in this document.
- If smeconfigserver is run after these steps have been performed then the changes made by following these steps may be overwritten and have to be repeated.
These notes refer to two IP addresses:
- IPADDRESS - the IPV4 address of the interface you will use for Access Anywhere™.
- IPADMINADDRESS – the IPV4 or IPV6 address you will use for server management.
Changing Access Anywhere™ Appliance’s Configuration
Apache HTTPD
HTTP Protocol
vi /etc/httpd/conf/httpd.conf
Change Listen directive from:
Listen 80
to:
Listen IPADDRESS:80 Listen 127.0.0.1:80
HTTPS protocol
vi /etc/httpd/conf.d/ssl.conf
Change listen ports from:
Listen 443 https
to:
Listen IPADDRESS:443 https Listen 127.0.0.1:443 https
Restart Apache
systemctl stop httpd systemctl start httpd
FTP* Services
FTP Service
vi /var/www/smestorage/ftpserver/ftpserver.conf
And bind to the IP address:
ftp_server_ip=IPADDRESS
SFTP Service
vi /var/www/smestorage/ftpserver/sftpserver/sftpserver.conf
and replace:
ftp_server_ip=0.0.0.0
with:
ftp_server_ip=IPADDRESS
Restart FTP Services
systemctl stop cloudftp systemctl start cloudftp
Establishing a Second Network Interface
Fabric™ administrators may wish to add a second network interface to Access Anywhere™ appliance so that server management can be done without using with Access Anywhere’s™ application network
SSH IP Binding
vi /etc/ssh/sshd_config
Change Listen IP address
ListenAddress IPADMINADDRESS
Restart service
systemctl restart sshd