VPN Connection
VPN (Virtual Private Network) allows to extend a private network to other networks with an ability to isolate it. It allows remote users to access the network.
MAC36PRO VPN Client Connection
The MAC36PRO supports a connection to a WireGuard VPN network in a client mode. It enables to secure remote access to the controller through an encrypted tunnel. Once the VPN connection is established, the controller's web server, platform, and station can be accessed using the VPN IP address, providing complete remote control of the MAC36PRO controller.
The MAC36PRO acts as a VPN client only. A separate WireGuard infrastructure is required to establish the WireGuard VPN connection with the controller.
Setting Up VPN Server
To configure a VPN server, basic networking knowledge is required, particularly in server administration, security best practices, and deployment contexts such as cloud or on-premises environments. Below are some best practices commonly applied when configuring a VPN server; however, these should not be treated as guidelines, as the responsibility for correct configuration of the VPN environment lies solely with the VPN server administrator.
Initial requirements:
A Ubuntu-based server:
-
with a physical access to Internet and an open port,
-
possibly, a virtual machine (e.g., AWS Amazon, Microsoft Azure, Google Cloud),
There are numerous VPN server solutions available on the market, open-source and subscribed. For the time being, for the MAC36PRO VPN connection, the following VPN servers are recommended:
-
WireGuard VPN standard solution (open-source)
For VPN server setup instructions, please visit: WireGuard installation
-
DefGuard solution (subscribed)
For VPN server setup instructions, please visit: DefGuard installation
VPN Connecting to MAC36PRO
The MAC36PRO supports a connection to a WireGuard VPN network in a client mode. It enables to secure remote access to the controller through an encrypted tunnel. Once the VPN connection is established, the controller's web server, platform, and station can be accessed using the VPN IP address, providing complete remote control of the MAC36PRO controller.
To establish a VPN connection, a valid WireGuard configuration file (.conf) must be provided by the VPN server administrator. This is a standard file, which defines all necessary parameters including:
-
interface private key,
-
VPN server (peer) public key,
-
client IP,
-
VPN server IP (endpoint address),
-
allowed IP ranges.
To set up the WireGuard VPN Client, follow the three step process:
Step 1: Upload configuration
Add the .conf file provided by the VPN server administrator. Use the Choose File button to select the file and Upload button to send it.
The upload window becomes available only if there is no previously uploaded VPN configuration currently on the device. If the configuration file has been uploaded, it must be removed first using the Delete button before uploading a new one.
Step 2: Activate the configuration
After uploading a configuration file, it is required to activate it in order to initiate the VPN connection.
Step 3: Controller reboot
A device restart is required to apply the changes and establish the connection with the WireGuard VPN server. Reboot can be initiated using the button in the top right corner of the web server.
A correctly configured VPN service will display information about the established connection to the WireGuard VPN server.