https://wiki.apoyar.eu/index.php?action=history&feed=atom&title=Apoyar_Infrastructure_SecurityApoyar Infrastructure Security - Revision history2026-07-21T03:48:02ZRevision history for this page on the wikiMediaWiki 1.41.0https://wiki.apoyar.eu/index.php?title=Apoyar_Infrastructure_Security&diff=165&oldid=prevAdmin: Created page with "We have 2 ESX host, 1 Disk array these provides access to VM’s We have separate server Vcentre, which is a physical server and provides - management over vpshere - access..."2021-04-22T09:07:04Z<p>Created page with "We have 2 ESX host, 1 Disk array these provides access to VM’s We have separate server Vcentre, which is a physical server and provides - management over vpshere - access..."</p>
<p><b>New page</b></p><div>We have 2 ESX host, 1 Disk array these provides access to VM’s<br />
<br />
We have separate server Vcentre, which is a physical server and provides<br />
<br />
- management over vpshere<br />
<br />
- access to VM’s<br />
<br />
<br />
We have firewall called Juniper (2 firewall), if one fails other starts<br />
<br />
Also we have Clavister, which has same level as Juniper. Clavister has better support for different types of VPN <br />
<br />
It supports 3 types of VPN<br />
<br />
- L2TP<br />
<br />
- IPsec (used to connect customer’s)<br />
<br />
- OpenVPN<br />
<br />
<br />
<br />
<br />
Connecting any of Apoyar server<br />
----------------------------------<br />
<br />
<br />
Weather we are connecting through OpenVPN or L2TP, we always getting through Clavister.<br />
<br />
For connecting using OpenVPN, we just need AD logins<br />
<br />
If we are connecting as L2TP user, it uses passphrase<br />
<br />
If we are connecting from any AWS console VM, it uses certificate<br />
<br />
<br />
Certificates on AWS RMG server<br />
-------------------------------<br />
<br />
Login to rmg.aws.apoyar <br />
<br />
• Cd /etc/isakmpd<br />
<br />
• cd ca<br />
<br />
• ls<br />
<br />
ca.crt (this is the certificate authority of mother or father certificate)<br />
<br />
It is only saved on clavister (one copy)<br />
<br />
Also on each AWS console machine, its only get compared not sent<br />
<br />
<br />
<br />
To see certificates<br />
--------------------<br />
<br />
<br />
• openssl x509 –in ca.crt –text –noout<br />
<br />
<br />
To check local certificate<br />
<br />
• Cd ../certs/<br />
<br />
• openssl x509 –in local.crt –text –noout<br />
<br />
<br />
these certificates contain the information related to<br />
<br />
• Issuer<br />
<br />
• Customer<br />
<br />
• Expiry<br />
<br />
• DNS</div>Admin