FibreCloud Customer Portal User Guide Customer Portal User Guide Version 1.4 2 ©WTT HK Limited 2017...

FibreCloud Customer Portal User Guide

(Version 1.4)


Version 1.4 2 ©WTT HK Limited 2017

Table of Contents

1 Introduction ....................................................................................................................... 6

2 Getting Start ....................................................................................................................... 7

2.1 Customer Portal Layout ..................................................................................... 7

2.2 Login ................................................................................................................... 8

2.3 Logout .............................................................................................................. 11

2.4 Forgot Password .............................................................................................. 11

2.5 Change Password ............................................................................................. 15

3 Virtual Machine (VM) Management and Value-Added Service Configuration ............... 17

3.1 Virtual Machines .............................................................................................. 17

3.1.1 List Virtual Machines ................................................................................ 17

3.1.2 VM Operations ......................................................................................... 18

3.1.3 Console Access ......................................................................................... 21

3.1.4 Remote Access ......................................................................................... 23

3.1.5 View VM Details ....................................................................................... 24

3.1.6 Edit VM Description ................................................................................. 26

3.2 Auto-Scale Up................................................................................................... 28

3.2.1 List VMs subscribed with Auto Scale Up service ..................................... 28

3.2.2 View & Configure setting of Auto Scale Up ............................................. 29

3.2.3 View & Configure setting of Scale Down Notification ............................. 34

3.2.4 Manual Scale Down VM Resources ......................................................... 38

3.3 Auto-Scale Out ................................................................................................. 39

3.3.1 List VMs subscribed with Auto Scale Out service .................................... 40

3.3.2 View & Configure setting of Auto Scale Out ............................................ 40

3.3.3 View & Configure setting of Scale In Notification ................................... 45

3.3.4 Manual Scale In VM (Delete Scaled-out VM)........................................... 49



3.4 Network Address Translation (NAT) Service (formerly Public IP Service) ....... 50

3.4.1 List NAT rules ........................................................................................... 51

3.4.2 Add Public IP Mapping ............................................................................. 51

3.4.3 Add Source NAT (SNAT) Rules .................................................................. 54

3.4.4 Add Destination NAT (DNAT) Rules ......................................................... 56

3.4.5 Delete NAT rules ...................................................................................... 57

3.5 Firewall ............................................................................................................. 59

3.5.1 List Firewall Rules ..................................................................................... 59

3.5.2 Add Firewall Rule ..................................................................................... 60

3.5.3 Edit Firewall Rule ..................................................................................... 62

3.5.4 Delete Firewall Rule ................................................................................. 64

3.5.5 Change Firewall Rule Priority ................................................................... 65

3.6 Load Balancer ................................................................................................... 67

3.6.1 List Load Balancer .................................................................................... 67

3.6.2 Edit Load Balancer Description ................................................................ 68

3.6.3 Enable/Disable Load Balancer ................................................................. 69

3.6.4 View Load Balancer Details ...................................................................... 70

3.6.5 Edit Load Balancer Rule ........................................................................... 71

3.7 SSL VPN ............................................................................................................ 75

3.7.1 List SSL VPN Users .................................................................................... 75

3.7.2 Add SSL VPN User .................................................................................... 76

3.7.3 Delete SSL VPN User ................................................................................ 77

3.8 IPSec VPN ......................................................................................................... 78

3.8.1 List IPSec VPN configuration .................................................................... 79

3.8.2 Add IPSec VPN configuration ................................................................... 80

3.8.3 Edit IPSec VPN configuration ................................................................... 82

3.8.4 Delete IPSec VPN configuration ............................................................... 84



3.8.5 Enable/ Disable IPSec VPN configuration ................................................ 85

3.9 VM Image-based Backup & Restoration .......................................................... 86

3.9.1 List VM subscribed with Image Backup service ....................................... 87

3.9.2 Restore an Image ..................................................................................... 87

3.9.3 Email Notification ..................................................................................... 89

4 Resource Usage Reporting ............................................................................................... 91

4.1 Usage Report .................................................................................................... 91

4.1.1 List Generated Reports ............................................................................ 91

4.1.2 Create Report ........................................................................................... 92

4.1.3 View and Export Report ........................................................................... 96

4.2 Audit Log .......................................................................................................... 97

4.2.1 Download VM Scaling Audit Log .............................................................. 97

5 User Administration ....................................................................................................... 100

5.1 User Management ......................................................................................... 100

5.1.1 List User Accounts .................................................................................. 100

5.1.2 Add User Accounts ................................................................................. 101

5.1.3 Edit User Accounts ................................................................................. 104

5.1.4 Delete User Accounts ............................................................................. 105

5.1.5 Disable/Enable User Accounts ............................................................... 106

5.2 Group Management....................................................................................... 107

5.2.1 List User Groups ..................................................................................... 108

5.2.2 Add User Groups .................................................................................... 108

5.2.3 Edit User Groups .................................................................................... 110

5.2.4 Delete User Groups ................................................................................ 111

5.2.5 Assign User Accounts ............................................................................. 111

5.3 Role Management .......................................................................................... 113

5.3.1 List User Roles ........................................................................................ 113



5.3.2 Add User Roles ....................................................................................... 114

5.3.3 Edit User Roles ....................................................................................... 116

5.3.4 Delete User Groups ................................................................................ 117

5.3.5 Assign User Accounts ............................................................................. 118

5.4 Two-Factor Authentication (2FA) .................................................................. 120

5.4.1 View 2FA user accounts ......................................................................... 120

5.4.2 Assign 2FA feature to user accounts...................................................... 121

5.4.3 Revoke 2FA feature from user accounts................................................ 123

5.5 VM Assignment .............................................................................................. 124

5.5.1 List VM Assignment ................................................................................ 124

5.5.2 Edit VM Assignment ............................................................................... 125

Appendix ................................................................................................................................ 127

A. Install Remote Console Plug-in ........................... Error! Bookmark not defined.

B. Enable RDP for MS Windows Server Virtual Machine ................................... 130

C. Enable SSH for Linux Virtual Machine ............................................................ 131

D. Allows RDP or SSH in Firewall ........................................................................ 132

E. Install SSH VPN client ..................................................................................... 134

F. How to connect to FibreCloud with SSL VPN client ....................................... 137

G. How to activate Two-Factor Authentication token ....................................... 139



1 INTRODUCTION

WTT FibreCloud Customer Portal is a web-based portal for managing WTT public cloud

service - FibreCloud. The customer portal provides an intuitive user interface for

performing system operation tasks, such as enquire, operate or access virtual machines,

manage network security policies, configure load balancing and auto scale up, and even

restore a VM from backup.

Customer portal acts as the single central point of management; customer can easily

manage and control everything at fingertips anytime anywhere through customer portal.

This documentation aims as user guide of using customer portal.



2 GETTING START

2.1 Customer Portal Layout

Customer portal interface is divided into 3 main components:

Top menu: Users may see their company name, account no., their login user

name and [Logout] link

Feature Menu: Users may see the menu of system features of FibreCloud in the

left-handed side of the screen

Feature Content Page: Users may see the content page of the feature they have

chosen to manage in the righ-handed side of the screen

User may also access help and documentation by clicking the icon below.



User may see the [Action Gear] icon always in Customer Portal and actions menu would

be displayed for that particular object by clicking [Action Gear] icon.

2.2 Login

User can access the customer portal with the following URL:

https://www.wttfibrecloud.com

To access the customer portal login page, clicks [Portal Login].

To login,

1. Input the information below:

User Name

Password

CAPTCHA code

https://www.wttfibrecloud.com/wttcloudportal/



2. Clicks [Login] button to login

If the login user account is enabled with 2-Factor authentication,

3. System would prompt user for authentication code and open the authenticator

[MobilePASS] in your mobile device to get the one-time passcode.



4. Enters the one-time passcode in the [MobilePASS] authenticator and clicks [Submit]

button.



2.3 Logout

User may logout from customer portal by clicking the [Logout] link on the right-handed

corner of the top menu bar.

2.4 Forgot Password

In case of forgetting password, user may re-gain access by resetting his/her own

password.

To reset password:

1. Clicks the [Forgot Password?] link in the login page and you would be diverted to

Forgot Password Page.



2. In Forgot Password page, inputs information below:

User Name – the user name of an existing user

Email – the registered email address of the user account

CAPTCHA code

3. Clicks [Submit] button



4. Below message would be prompted and the system would send reset password

instructions to user by email

5. Email with reset password instruction would be sent and below is a sample email.



6. To access the reset password page, clicks the link in the email and the link is valid for 2

days.

7. Inputs the new password and re-confirm the new password, also inputs the CAPTCHA

code.

Note that the password must follow the rules below:

At least 8 characters

Allowed characters: combination of alphanumeric and printable symbols

(e.g. !$@#)

At least 1 alphabet and 1 numeric character

Password should not contain user name or part of user’s full name that exceed two

consecutive characters

8. Clicks [Send] button



2.5 Change Password

User may change password by his/her own anytime and it is highly recommended to

change user’s password regularly with strong password.

To change password:

1. Clicks [Admin] -> [Change Password] in the feature menu

2. Inputs existing password, new password and re-confirm the new password.



3. Clicks the [Submit] button


At least 8 characters long


(e.g. !$@#)

Contains at least 1 alphabet and 1 numeric character



Password history is 5, i.e. new password should be different from past 5 passwords



3 VIRTUAL MACHINE (VM) MANAGEMENT AND

VALUE-ADDED SERVICE CONFIGURATION

3.1 Virtual Machines

User may enquire, operate or access virtual machines in the content page of [Virtual

Machines] under [Resources].

3.1.1 List Virtual Machines

In the content page of [Virtual Machines], administrator may see all subscribed virtual

machines (VMs) of the tenant while user may only see the virtual machines that are

assigned to access by administrator.

In the overview list of [Virtual Machines], each virtual machine would be shown with the

following information:

VM Name – Name of the VM

Description – Description of the VM; if its length is over 30 characters long, only

the first 30 characters are shown



OS Type – Type of Operation System software

CPU (Core) – No. of vCPU

Memory (MB) – Size of RAM in MB

Storage (MB) – Size of storage in MB

Status – Status of the VM (Powered On / Powered Off)

3.1.2 VM Operations

User may perform VM operations remotely via Customer Portal and the following

operations may be performed:

Start a stopped VM

Stop a started VM

Power Off a started VM

Reboot a VM

3.1.2.1 Start VM

To start up powered off VM:

1. Clicks the [Action Gear] icon and then clicks [Start] button



2. Confirms to start up the VM by clicking [OK] button when prompt

3.1.2.2 Gracefully shutdown VM

To shutdown VM gracefully:

1. Clicks the [Action Gear] icon and then clicks [Shutdown] button

2. Confirms to shut down the VM gracefully by clicking [OK] button when prompt



Please note that the best practices to shut down the VM gracefully are to initiate

shutdown command from Guest OS via console instead.

3.1.2.3 Force shutdown VM

To force shutdown VM:

1. Clicks the [Action Gear] icon and then clicks [Power Off] button

2. Confirms to force shutdown the VM by clicking [OK] button when prompt



Remarks: Occasionally, force shutdown VM may lead to Guest OS corruption. It is

highly recommend initiating shutdown command from Guest OS via console instead.

3.1.2.4 Reboot VM

To reboot VM:

1. Clicks the [Action Gear] icon and then clicks [Reboot] button

2. Confirms to reboot the VM by clicking [OK] button when prompt

3.1.3 Console Access

User may gain access to the console of the VM as if user is just like sitting in front of the

virtual machine.

To gain access to the VM console:

1. Clicks the [Action Gear] icon and then clicks [Console] button



2. The HTML5- based console windows would be pop up as below:

Remarks:

User may release keyboard and mouse control by pressing Ctrl+Alt

If your web browser doesn’t support HTML5, console plug-ins can also be supported

and please follow the below instruction to install VMRC plug-in:

1. Click the [Switch to VMRC] button at the top of the pop-up window to switch to

console plug-ins version and three links of remote console plug-ins can be found:

Windows Plug-in

Linux (32-bit) Plug-in




2. Click and download the remote console plug-in based on the OS of your PC.

3. After plug-in download completion, logout FibreCloud Customer Portal and close

your Web browser.

4. Run and install the remote console plug-in you just downloaded. Please follow the

instructions of the installation wizard to complete the installation.

3.1.4 Remote Access

To view the information for remote access to VM:

1. Clicks the [Action Gear] icon and then clicks [Remote] button



2. Information for remote connection to VM would be prompted

SSH – for Unix/Linux VMs via a URL ssh://<VM_IP_Address>

Remote Desktop– for Windows based VMs via a RDP (Remote Desktop Protocol) file

generated from the portal. User may download this file and double click to bring

up the VM Remote Desktop.

Remarks:

1. For MS Windows server, Remote Desktop service is disabled by default and user has to

enable Remote Desktop service in the server first so that Remote Desktop access is

allowed. Please refer to Appendix B for related instruction.

2. For Linux server, it is required to enable SSH for allowing remote access. Please refer

to Appendix C for related instruction.

3. For tenant who has subscribed for dedicated firewall service of FibreCloud, all

inbound/outbound network traffic is denied and tenant has to add related firewall

rules to allow traffic of RDP & SSH, please refer to Appendix D for the instruction.

3.1.5 View VM Details

To view details of the VM:

1. Clicks the VM name



2. Pop-up window would be shown with details of VM and the detail of the VM contains

information below:

VM Name

Computer Name

VM ID

Description

OS Type

Status

Initial Password (Default it’s masked, clicks the “Show / Hide” checkbox to

unmask)

Resources – CPU, Memory, Storage, Storage Profile

Private Network – Private IP address, Netmask, Gateway

Public Network – Public IP address, Full Qualified Domain Name (FQDN)



3.1.6 Edit VM Description

To edit description of the VM:

1. Clicks the VM name

2. Pop-up window would be shown with details of VM and edits the text in the textbox

of [Description] field



Note that the maximum length of description is 256 characters and it should be

alphanumeric, but not contain any symbol like “ / [ ] : ; | - , +. * ? < >

3. Clicks [OK] button to save



3.2 Auto-Scale Up

User may enquire the condition of triggering VM to Auto Scale Up computer resource

vCPU and/or RAM in the content page of [Auto Scale Up] under [Resources] and

administrator may configure utilization threshold and duration for Auto Scale Up.

3.2.1 List VMs subscribed with Auto Scale Up service

In the content page of [Auto Scale Up], administrator may see all subscribed virtual

machines (VMs) subscribed with Auto Scale Up service of the tenant while user may only

see the VMs that are assigned with Auto Scale Up service.



In the overview list of [Auto Scale Up] service, each VM subscribed with Auto Scale Up

service would be shown with the following information:

VM Name

Description

CPU (Core)

Memory (MB)

Storage(MB)

3.2.2 View & Configure setting of Auto Scale Up

Virtual machine can be configured to scale up to meet unanticipated resource demand to

maintain performance. Administrator may specify thresholds for utilization of CPU and

Memory and duration to trigger Auto Scale Up.

To view Auto Scale Up configuration:

1. Clicks the [Action Gear] icon of the VM and then clicks [Auto Scale Up] button



When Auto Scale Up is triggered, system would automatically add extra CPU and/or

Memory to the virtual machine. For example, administrator set threshold for CPU

utilization to 90%, duration threshold to 10 minutes, if the selected virtual machine CPU

loading is always keeping above 90% for 10 consecutive minutes, scale up will be

triggered automatically and system would add additional CPU and/or Memory.

Remarks: Currently, system would only step up resource once and maximum added

resource would be 100% of the subscribed resource.

3.2.2.1 Auto Scale for CPU

To set Auto Scale Up for CPU:




2. Checks the checkbox [Enable] in [CPU Configuration] section and fills in step up size,

maximum No. of CPU allowed, usage threshold (%) and duration threshold (mins).

Email notification may also be configured so that system would send notification

email to the configured email addresses when Auto Scale Up event is triggered.

Remarks:

The valid range of Step Up Size (Core) is 1 to 100% of the original no. of CPU

The valid range of maximum No. of CPU is 1 to 100% more of the original no. of CPU.

The valid range of Usage Threshold (%) is 1-99.

The valid range of Duration Threshold (mins) is 1-60.

Multiple email addresses may be configured for notification and email addresses

have to be separated by comma.

3. Clicks [OK] button



3.2.2.2 Auto Scale for Memory

To set Auto Scale Up for Memory:


2. Checks the checkbox [Enable] in [Memory Configuration] and fills in step up size,

maximum memory size, usage threshold (%) and duration threshold (mins). Email

notification may also be configured so that system would send notification email to

the configured email addresses when Auto Scale Up event is triggered.



Remarks:

The valid range of Step Up Size (Core) is 1 to 100% of the original memory size

The valid range of maximum memory size is 1 to 100% more of the original no. of

CPU.








3.2.3 View & Configure setting of Scale Down Notification

After the virtual machine is scaled up and unanticipated resource demand is fulfilled,

extra compute resource would be consumed and this may introduce extra service cost.

When the utilization of the virtual machine is dropped and no longer required those

scaled up resource, it is recommended to scale down the virtual machine to release

un-necessary resource and save the cost.

Administrator may specify thresholds for utilization of CPU and Memory and duration to

trigger Scale Down notification, then administrator may scale down the virtual machine

manually via customer portal

To view Scale Down notification configuration:

1. Clicks the [Action Gear] icon of the VM and then clicks [Scale Down] button



When Scale Up notification event is triggered, system would automatically send a

notification email to configured email addresses. For example, administrator set

threshold for CPU utilization to 20%, duration threshold to 20 minutes, if the selected

virtual machine CPU loading is always keeping at 20% for 20 consecutive minutes, scale

down notification will be triggered automatically and system would send notification

email.

3.2.3.1 Scale Down Notification for CPU

To edit Scale Down notification configuration:

1. Clicks the [Action Gear] icon of the VM and then clicks [Scale Down] button

2. Checks the checkbox [Enable] in [CPU Configuration] section and fills in usage

threshold (%) and duration threshold (mins). Email notification may also be configured

so that system would send notification email to the configured email addresses when

Scale Down notification event is triggered.



Remarks:








3.2.3.2 Scale Down Notification for Memory

To edit Scale Down notification configuration:

1. Clicks the [Action Gear] icon of the VM and clicks [Scale Down] button

2. Checks the checkbox [Enable] in [Memory Configuration] section and fills in usage




Remarks:








3.2.4 Manual Scale Down VM Resources

To manual Scale Down virtual machine:

1. Ensure the scaled-up virtual machine has shut down gracefully.

2. Clicks the [Action Gear] icon of the VM and clicks [Scale Down VM] button

3. Change the value for CPU and Memory (GB)



Remarks:

Only scaled-up virtual machine can be scaled down.

The scaled-up virtual machine cannot be scaled down to value less than the original

provisioned size.


3.3 Auto-Scale Out



User may enquire the condition of triggering VM to Auto Scale Out another VM in the

content page of [Auto Scale Out] under [Resources] and administrator may configure

utilization threshold and duration for Auto Scale Out.

3.3.1 List VMs subscribed with Auto Scale Out service

In the content page of [Auto Scale Out], administrator may see all subscribed virtual

machines (VMs) subscribed with Auto Scale Out service of the tenant while user may only

see the VMs that are assigned with Auto Scale Out service.

In the overview list of [Auto Scale Out] service, each VM subscribed with Auto Scale Out


VM Name

Description

CPU (Core)

Memory (MB)

Storage(MB)

3.3.2 View & Configure setting of Auto Scale Out

Auto Scale Out leverages load balancer feature and it allows instant clone new VM and

distribute network traffic among original VM and cloned VM when the virtual machine

utilization reaches a pre-defined threshold level. Virtual machine can be configured to

scale out to meet unanticipated resource demand to maintain performance.




trigger Auto Scale Out.

To view Auto Scale Out configuration:

1. Clicks the [Action Gear] icon of the VM and then clicks [Auto Scale Out] button

When Auto Scale Out is triggered, system would automatically clone extra virtual machine

and place it in the server pool of the load balancer that the virtual machine belongs to

and then network traffic can be distributed among the original virtual machine and the

scaled-out virtual machine.

For example, administrator set threshold for CPU utilization to 90%, duration threshold to

10 minutes, if the selected virtual machine CPU loading is always keeping above 90% for

10 consecutive minutes, scale up will be triggered automatically and system would clone

additional virtual machine.

Remarks:



The scaled-out virtual machine is using the same configuration as of the original

virtual machine.

Load balancer is required to subscribe for network traffic distribution occurred and

the server pool is configured to include the virtual machine that subscribed with

Auto Scale Out.

3.3.2.1 Auto Scale Out for CPU threshold

To set Auto Scale Out for CPU threshold:





Auto Scale Out event is triggered.



Remarks:






3.3.2.2 Auto Scale Out for Memory threshold

To set Auto Scale Out for Memory threshold:





Auto Scale Out event is triggered.



Remarks:








3.3.3 View & Configure setting of Scale In Notification

After the virtual machine is scaled out and unanticipated resource demand is fulfilled,

extra compute resource would be consumed and this may introduce extra service cost.

When the utilization of the virtual machine is dropped and no longer required those

scaled up resource, it is recommended to scale in the cloned scaled-out virtual machine to

release un-necessary resource and save the cost.


trigger Scale In notification, then administrator may scale down the virtual machine

manually via customer portal

To view Scale In notification configuration:

1. Clicks the [Action Gear] icon of the VM and then clicks [Scale In] button

When Scale In notification event is triggered, system would automatically send a

notification email to configured email addresses.



For example, administrator set threshold for CPU utilization to 20%, duration threshold to

20 minutes, if the selected virtual machine CPU loading is always keeping at 20% for 20

consecutive minutes, scale down notification will be triggered automatically and system

would send notification email.

3.3.3.1 Scale In Notification for CPU

To edit Scale In notification configuration:






Remarks:








3.3.3.2 Scale In Notification for Memory

To edit Scale In notification configuration:








Remarks:








3.3.4 Manual Scale In VM (Delete Scaled-out VM)

To manual Scale In virtual machine (Delete Scaled-out VM):

1. Clicks [Resources] -> [Virtual Machines] in the left menu to view the list of virtual

machines

2. Clicks the [Action Gear] icon of the scaled-out virtual machine and then clicks [Delete]

button

3. Confirms for deletion of the scaled-out virtual machine. Please note that the

scaled-out virtual machine is permanently removed from the system and it’s an

unrecoverable action.



3.4 Network Address Translation (NAT) Service (formerly Public IP Service)

Network Address Translation (NAT) enables the ability to translate one set of addresses to

another set of addresses transparently. NAT service enables virtual machine interacting with

the outside world using a static public IP address and allows more complex configuration of

public IP address translation such as port translation and port forwarding. Without

complex configuration work or reliance on technician, administrator may easily add, change



and delete source NAT rules and destination NAT rules anytime anywhere via customer

portal.

3.4.1 List NAT rules

In the content page of [NAT], administrator and user may see all Network Address

Translation (NAT) rules, i.e. Source NAT rules and Destination NAT rules.

In the overview list of [NAT] service, each mapping would be shown with the following

information:

Network Applied On – Assigned public IP address

Type – NAT rule type: SNAT (Source NAT) or DNAT (Destination NAT)

Original IP – Original IP address before translation

Original Port – Original network port before translation

Translated IP – Translated IP address

Translated Port – Translated network port

Protocol – Related network protocol

Status – Status of the NAT rule : Enabled or Disabled

At the top of the overview list, summary of subscription would be shown with the


Subscribed Public IP Addresses – number of public IP addresses subscribed

3.4.2 Add Public IP Mapping

To add public IP mapping:



1. Clicks the [Edit NAT] button

2. NAT page would be entering Edit mode and clicks the [Add IP Mapping] button

3. Chooses the public IP address from the drop-down list of available public IP addresses

4. Chooses the specified VM from the drop-down list of unmapped VM




6. Clicks [Save Changes] button

7. Confirms with the changes

Then the system would automatically add corresponding pair of NAT rules (1 SNAT rules &

1 DNAT rules).

For example, choose Public IP address 202.33.11.45 and virtual machine with private

192.168.100.3

1 SNAT (Source NAT) rule would be added with following configuration:

Parameter Value

Network Applied On WTT-Prod-ExternalNetwork-1

Type SNAT

Original IP 192.168.100.3

Translated IP 202.33.11.45

1 DNAT (Destination NAT) rule would be added with following configuration:

Parameter Value



Network Applied On WTT-Prod-ExternalNetwork-1

Type DNAT

Original IP 202.33.11.45

Original Port Any

Translated IP 192.168.100.3

Translated Port Any

3.4.3 Add Source NAT (SNAT) Rules

To add Source NAT (SNTA) rules:


2. NAT page would be entering Edit mode and clicks [Add SNAT] button

3. Chooses the network that the SNAT rules applied on, fills in original IP address or IP

range and translated IP address or IP range.



Remarks: IP range should be in format similar to 192.168.100.2-192.168.100.5






3.4.4 Add Destination NAT (DNAT) Rules

To add Destination NAT (DNTA) rules:


2. NAT page would be entering Edit mode and clicks [Add DNAT] button

3. Chooses the network that the DNAT rules applied on, fills in original IP address or IP

range, Protocol (TCP, UDP or ICMP), Original Port if TCP or UDP protocol is selected,

ICMP Type if ICMP protocol is selected, translated IP address or IP range and

translated port.

Remarks:

DNAT rules allows port level translation



IP range should be in format similar to 192.168.100.2-192.168.100.5




3.4.5 Delete NAT rules

To delete NAT rule:


2. NAT page would be entering Edit mode. Then, clicks the [Action Gear] icon and

clicks [Delete] button of the specified NAT rule.







3.5 Firewall

Dedicated firewall service fulfills customer’s need of having full control on network

security protection. Without sacrificing stringent security policy, dedicated firewall service

offers easy and flexible way to manage firewall policies via customer portal.

By default, both incoming and outgoing firewall rules are configured as DENY ALL and

administrator may define, modify or delete firewall rules and set the priorities of rules.

3.5.1 List Firewall Rules

In the content page of [Firewall], administrator may see all firewall rules of the VM farm.



In the overview list of [Firewall] service, firewall rules would be shown with the following

information:

Priority

Rule name

Source (Valid IP, Range, CIDR, or keywords “Any”, “Internal”, “External”)

Source Port (Any, FTP, SSH, HTTP, user’s desired port)

Destination (Valid IP, Range, CIDR, or keywords “Any”, “Internal”, “External”)

Destination Port (Any, FTP, SSH, HTTP, user’s desired port)

Protocol (Any, TCP, UDP, TCP & UDP, ICMP)

Action: Allow/Deny

Status: Enabled/Disabled

3.5.2 Add Firewall Rule

To add firewall rule:

1. Clicks the [Edit Firewall Rule] button

2. Firewall page would be entering Edit mode. Then, clicks the [Add Firewall Rule]

button



3. Fills in all the parameters of firewall rule

The parameters of firewall rule are shown as below:

Enabled : checked to enable the firewall rule

Rule Name – mandatory field and it must not exceed 100 characters and should

not contain any symbol like “ / [ ] : ; | - , +. * ? < >

Source – Source IP address / IP address range (CIDR) and keywords “Any”,

“Internal”, “External” are also supported

Source Port - Any, FTP (21), SSH (22), HTTP (80) or user’s desired port

Note: Source Port will be set to Any if Protocol is “Any” or “ICMP”

Destination - Destination IP address / IP address range (CIDR) and keywords “Any”,


Destination Port – Any, FTP (21), SSH (22), HTTP (80) or user’s desired port

Note: Destination Port will be set to Any if Protocol is “Any” or “ICMP”

Protocol – Any, TCP, UDP, TCP & UDP, ICMP



Action - Allow/Deny

Priority




3.5.3 Edit Firewall Rule

To edit firewall rule:




2. Firewall page would be entering Edit mode. Then, clicks the [Action Gear] icon and

clicks [Edit] button of the specified rule

3. Fills in all the parameters of firewall rule

The parameters of firewall rule are shown as below:

Enabled : checked to enable the firewall rule

Rule Name – mandatory field and it must not exceed 100 characters and should

not contain any symbol like “ / [ ] : ; | - , +. * ? < >

Source – Source IP address / IP address range (CIDR) and keywords “Any”,


Source Port - Any, FTP (21), SSH (22), HTTP (80) or user’s desired port

Note: Source Port will be set to Any if Protocol is “Any” or “ICMP”



Destination - Destination IP address / IP address range (CIDR) and keywords “Any”,


Destination Port – Any, FTP (21), SSH (22), HTTP (80) or user’s desired port

Note: Destination Port will be set to Any if Protocol is “Any” or “ICMP”

Protocol – Any, TCP, UDP, TCP & UDP, ICMP

Action - Allow/Deny

Priority




3.5.4 Delete Firewall Rule

To delete firewall rule:




2. Firewall page would be entering Edit mode. Then, clicks the [Action Gear] icon and

clicks [Delete] button of the specified rule



3.5.5 Change Firewall Rule Priority

To change firewall rule priority:




2. Firewall page would be entering Edit mode. Clicks the arrow button to move firewall

rule up and down for priority





3.6 Load Balancer

To achieve greater fault tolerance in applications, load balancing automatically distributes

incoming application traffic across multiple VM instances. With built-in intelligence,

load balancer detects unhealthy VM within a pool and automatically re-routes traffic to

healthy VM until unhealthy VM has been restored.

Administrator may enquire, enable/disable and configure load balancers to meet

application need and major types of network protocol HTTP, HTTPS, TCP are supported.

3.6.1 List Load Balancer

In the content page of [Load Balancer], administrator may see all subscribed load

balancers.



In the overview list of [Load Balancer] service, all subscribed load balancers would be

shown with the following information:

Load Balancer name – Name of the load balancer

Virtual IP – Virtual IP address of the load balancer

Destination- Description of the load balancer

Instance Count – Number of VM instance defined in the VM pool of the load

balancer

Status: Enabled/Disabled

3.6.2 Edit Load Balancer Description

To edit load balancer description:

1. Clicks the name of the load balancer

2. Fills in the description. Note that description must not exceed 256 characters and

should not contain any symbol like “ / [ ] : ; | - , +. * ? < >.



3. Clicks the [OK] button


3.6.3 Enable/Disable Load Balancer

To Enable/Disable load balancer:

1. Clicks the [Action Gear] icon and then clicks [Enable]/ [Disable] button




3.6.4 View Load Balancer Details

To view the details of one particular load balancer:

1. Clicks the [Action Gear] icon and then clicks [Detail] button

List of all protocols (HTTP, HTTPS, and TCP) configuration of the load balancer would be

shown.



For each load balancer rule of the protocol of load balancer contains the following

information:

Protocol – protocol of the load balancer rule

Load Balancer Port- the network port of the load balancer rule

Balancing Method – the balancing method of the load balancer rule

Persistent – the persistent configuration of the load balancer rule

Status – Enabled or Disabled

3.6.5 Edit Load Balancer Rule

To edit load balancer rule:

1. Clicks the [Action Gear] icon and then clicks [Detail] button

2. Clicks the [Edit] button of the load balancer rule in the details list of load balancer



3. Fills in the parameter of the load balancer rule

The parameters of load balancer rule are shown as below:

Service

Balancing Method – IP_HASH, ROUND_ROBIN, URI, LEAST_CONN

Persistent – drop-down value(s) depends on protocol as shown below.



HTTP HTTPS TCP

NONE

COOKIES

SSL_SESSION_ID

Note: If Persistent is chosen as COOKIE, as captured below, Cookie Mode and

Cookie Name will appear for user to input values.

Cookie Mode (only applicable to protocol HTTP, when Persistent COOKIES is

chosen) – INSERT, PREFIX, APP

Cookie Name (only applicable to protocol HTTP, when Persistent COOKIES is

chosen) - must be equal to or less than 255 characters

Load Balancer Port – must be between 1 and 65535

Instance Port – must be between 1 and 65535

Enabled

Health

Health Check Interval (sec) - cannot be larger than Health Check Timeout

Healthy Threshold – must be between 1 and 10

Unhealthy Threshold – must be between 1 and 10

Health Check Timeout (sec) - cannot be less than Health Check Interval

Monitor/Ping Port – must be between 1 and 65535

Ping Path – only applicable to protocol HTTP, not applicable to HTTPS and

TCP

Assignment – VM Assignment will be effective for all Load Balancer Rules

Available VM Server(s)

Assigned VM Server(s) – at least one VM should be assigned





Note: Changes on assigned VM list will be applied to ALL protocols (HTTP, HTTPS, and

TCP) of the load balancer.



3.7 SSL VPN

SSL VPN helps secure all communication between client machine and organization’s VM

farm. With SSL VPN, customer may establish a secured network over the shared

Internet connection and administrator may grant/revoke SSL VPN access to users.

3.7.1 List SSL VPN Users

In the content page of [SSL VPN], administrator may see all users granted with SSL VPN

access.



In the overview list of [SSL VPN] service, all users granted with SSL VPN access would be


User Name – Login Username of SSL VPN user

Last Name

First Name



Subscribed SSL VPN User A/C – number of SSL VPN user accounts subscribed

Available SSL VPN User A/C – number of available SSL VPN user accounts to assign

Assigned SSL VPN User A/C – number of assigned SSL VPN user accounts

Besides, the URL of the SSL VPN portal would also be shown at the top.

3.7.2 Add SSL VPN User

To grant SSL VPN access to user:

1. Clicks the [Add SSL VPN User] button



2. Chooses the user from the user list box

3. Clicks [Add] button

4. Confirms with the grant

3.7.3 Delete SSL VPN User

To revote SSL VPN access from user:

1. Clicks the [Delete] button of the SSL VPN user



2. Confirms with the revoke

3.8 IPSec VPN

IPSec VPN helps secure all communication between client site and organization’s VM farm.

With IPSec VPN, customer may establish a secured site-to-site network over the shared

Internet connection and administrator may configure IPSec configuration via customer

portal.



3.8.1 List IPSec VPN configuration

In the content page of [IPSec VPN], administrator may see all configured IPSec VPN

tunnel configuration.

In the overview list of [IPSec VPN] service, all configured IPSec VPN tunnels would be


Name – Name of IPSec VPN configuration

Description – Description of IPSec VPN configuration

Local End Point – End Point of Local Network (FibreCloud side)

Peer End Point – End Point of Peer Network (Client site side)

Local Network – Local Network Range

Peer Network(s) – Peer Network Range

Status – Status of IPSec VPN configuration (Enabled / Disabled)

Tunnel Status – Tunnel status of IPSec VPN configuration (Up/ Partially Up/ Down)

Tunnels – No. of configured tunnel in the IPSec VPN configuration



IPSec VPN Tunnels Subscribed – number of IPSec VPN tunnels subscribed

IPSec VPN Tunnels Configured - number of configured SSL VPN tunnels

IPSec VPN Tunnels Available – number of available IPSec VPN tunnels



If not all configured tunnels of the IPSec VPN configuration are up, user may view the

details of tunnel status by clicking on the link in column [Tunnel Status].

3.8.2 Add IPSec VPN configuration

To add IPSec VPN configuration:

1. Clicks the [Edit IPSec VPN] button

2. IPSec VPN page would be entering Edit mode. Then, clicks the [Add IPSec VPN]

button

3. Fills in all the parameters of IPSec VPN configuration



The parameters of IPSec VPN are shown as below:

Name – mandatory field and it must not exceed 100 characters and should not

contain any symbol like “ / [ ] : ; | - , +. * ? < >

Description – Description of the IPSec VPN configuration

Enabled – checked to enable the IPSec VPN configuration

Local End Point – IP Address of local end point and it is non-editable

Local ID – Unique local network ID and it is non-editable

Local Network – Choose the local networks to apply (Only 1 available for non-VDC

customer)

Peer End Point – IP address of the peer end point

Peer ID – Unique peer network ID and it must not exceed 200 characters and it’s

recommended to set as the same as peer end point

Peer Network(s) – IP address range (CIDR) of peer networks, multiple peer

networks are supported and they should be separated by comma

Encryption – Three type of encryption method supported: AES, AES-256 or 3DES

Shared Key – Shared key of IPSec VPN configuration and checked the checkbox

“Show Key” to see the system generated key or user may defined their own

shared key





3.8.3 Edit IPSec VPN configuration

To edit IPSec VPN configuration:


2. IPSec VPN page would be entering Edit mode. Then, clicks the [Action Gear] icon

and clicks [Edit] button of the specified configuration

3. Fills in all the parameters of IPSec VPN configuration



The parameters of IPSec VPN are shown as below:

Name – Name of the IPSec VPN configuration and it is non-editable

Description – Description of the IPSec VPN configuration

Enabled – checked to enable the IPSec VPN configuration

Local End Point – IP Address of local end point and it is non-editable

Local ID – Unique local network ID and it is non-editable

Local Network – IP address range (CIDR) of local networks and it is non-editable

Peer End Point – IP address of the peer end point

Peer ID – Unique peer network ID and it must not exceed 200 characters and it’s

recommended to set as the same as peer end point

Peer Network(s) – IP address range (CIDR) of peer networks, multiple peer

networks are supported and they should be separated by comma

Encryption – Three type of encryption method supported: AES, AES-256 or 3DES

Shared Key – Shared key of IPSec VPN configuration and checked the checkbox

“Show Key” to see the system generated key or user may defined their own

shared key





3.8.4 Delete IPSec VPN configuration

To delete IPSec VPN configuration:



and clicks [Delete] button of the specified configuration




3.8.5 Enable/ Disable IPSec VPN configuration

To enable/disable IPSec VPN configuration:



and clicks [Disable] button or [Enable] button of the specified configuration




3.9 VM Image-based Backup & Restoration

VM image-based backup addresses the data redundancy concerns of customer.

Customer can subscribe VM image-based backup service with required retention period



and backup frequency of each VM. With list of backup VM images, administrator can

restore VM to particular backup images to the original VM anytime via customer portal.

3.9.1 List VM subscribed with Image Backup service

In the content page of [Restore], administrator may see all VM subscribed with Image

Backup service.

In the overview list of [Restore], all virtual machines subscribed with image backup


VM Name – Name of the VM

Description – Description of the VM

CPU (Core) – Number of vCPU of the VM

Memory (MB) – Size of memory in MB of the VM

Storage (MB) – Size of storage in MB of the VM

Status of VM – Powered On / Powered Off

3.9.2 Restore an Image

To restore a VM:

1. Clicks the [Restore] button



2. Chooses the backup image to restore

3. Fills in the email notification of image restoration. Multiple email addresses are

supported and those should be separated by comma.



Note that Restore can be performed only when the VM is powered off.

4. Clicks the [Restore] button

3.9.3 Email Notification

To setup email notification of image restoration, fills in the email notification of image

restoration. Multiple email addresses are supported and those should be separated by

comma.



Once the image restoration is finished, the system would send out the email notification

to the email addresses configured. The email will indicate the result (COMPLETE or

FAILED) of restore operation, as shown below.



4 RESOURCE USAGE REPORTING

4.1 Usage Report

User may generate usage report on compute resource: Memory & Storage and on

external network traffic via customer portal.

4.1.1 List Generated Reports

In the content page of [Usage Report], user may see all reports created and generated



In the overview list of [Usage Report], all virtual machines subscribed with image backup


Report Name – Name of the report

Description – Description of the report

Report Type – Network / Memory/ Storage

Start Date – start date of report

End Date – end date of report

Created On – the creation date of report

Status – report status : New / Processing / Completed

4.1.2 Create Report

4.1.2.1 Create Resource Report

User may generate usage report on compute resource such as Memory and Storage for

virtual machines.

To create new resource report:

1. Clicks the [Create Report] button

2. Clicks the [Create Resource Report] button



3. Fills in parameters for report creation

The parameters of report creation are shown as below:

Compute Resource – Memory (GB) or Storage (GB)

Virtual Machine – List of selected VM(s) for data capture

Start Date – Start date of the report

End Date – End date of the report


Report Description – Description of the report

4. Clicks the [Create] button



5. Confirms to create the report

Remarks: The status of report would be [New] when the report is generating and clicks

the Refresh button to get the latest status of report generation. When the report

generation is finished, the status of report would be [Completed]

4.1.2.2 Create Network Report

User may generate usage report on external network traffic of the whole VM farm.

To create new network report:

1. Clicks the [Create Report] button

2. Clicks the [Create Network Report] button



3. Fills in parameters for report creation

The parameters of report creation are shown as below:

Network Resource – External Network Transmitted (MB) and/or External Network

Received (MB)

Start Date – Start date of the report

End Date – End date of the report


Report Description – Description of the report




5. Confirms to create the report

Remarks: The status of report would be [New] when the report is generating and clicks

the Refresh button to get the latest status of report generation. When the report

generation is finished, the status of report would be [Completed]

4.1.3 View and Export Report

User may view and export reports with status [Completed].

To view and export report:

1. Clicks the [Action Gear] and then clicks the [View] button

2. The detail of the report would be shown.



3. Clicks the [Download CSV] button to export the breakdown details of the usage

report.

4.2 Audit Log

In order to keep track with compute resources related activities, administrator may

download audit log for auto scaling activity of VM.

4.2.1 Download VM Scaling Audit Log

To download audit log of auto scaling activities of VM

1. Clicks on [VM Scaling Audit Log] under [Report & Log]



2. Chooses the scaling activity of audit log from the drop-down list and then inputs start

date and end date of the activity occurred.

Remarks:

The activity below could be log for scaling service:

Scale Up event

Scale Down Notification event

Scale In Notification event

Scale Out event



Manual Scale Down

Manual Scale In

Or All of the above activities

3. Clicks [Download CSV] button

4. Confirms for the download



5 USER ADMINISTRATION

5.1 User Management

Administrator may manage user accounts easily via customer portal and user accounts

could be viewed, edited, enabled/disabled by administrator.

5.1.1 List User Accounts

In the content page of [User Management], administrator may see all user accounts

created to access the customer portal.



In the overview list of [User Management], all user accounts would be shown with the


User Name – Login username of the user account

Last Name – Last name of the user

First Name – First name of the user

Email – Email address of the user (system would use this email address for

notification, user activation & user validation)

Role – The user role of the user account: Admin/ User

VPN User – Indicator of SSL VPN access for the user account

5.1.2 Add User Accounts

To add user account:

1. Clicks the [Add User] button

2. Fills in parameter for user creation



The parameters of user creation are shown as below:

User Name – Login username of the user account. Username must be in length

of 8-20 characters and should not contain any symbol like “ / [ ] : ; | - , +. * ? < > or

space

Note: user name must be unique within the whole platform

Last Name – Last name of the user. Last name must be in length of 1-64

characters and should not contain any symbol like “ / [ ] : ; | - , +. * ? < > or space

First Name – First name of the user. First name must be in length of 1-64


Email – Email address of the user. Activation email will be sent to this email

address when user is successfully created.



4. Confirms for the user creation



After user is created successfully, the system would send activation email to the user and

it would be similar as follows:

The newly created user needs to activate the account before they could access the

customer portal with the username. To activate the account, user needs to click the

activation link in the activation email.

User needs to reset the password to activate the account:

User Name – pre-filled by system



Current Password – password on the activation email

New Password

Confirm New Password


At least 8 characters


(e.g. !$@#)

At least 1 alphabet and 1 numeric character



Password history: 5, i.e. new password should be different from past 5 passwords

5.1.3 Edit User Accounts

To edit user account:

1. Clicks the [Action Gear] icon and then clicks the [Edit] button

2. Fills in parameter for user modification



The parameters of user modification are shown as below:

User Name – Login username of the user account. It is not editable.

Last Name – Last name of the user. Last name must be in length of 1-64


First Name – First name of the user. First name must be in length of 1-64


Email – Email address of the user. Activation email will be sent to this email

address when user is successfully created.


3. Confirms for the changes

5.1.4 Delete User Accounts

Administrator may delete user if the user account is not activated.

To delete user account:

1. Clicks the [Action Gear] icon and then clicks the [Delete] button



2. Confirms for the user deletion

5.1.5 Disable/Enable User Accounts

Administrator may enable/disable activated user, to enable/ disable user account:

1. Clicks the [Action Gear] icon and then clicks the [Disable] or [Enable] button

2. Confirms for the action



5.2 Group Management

Administrator may manage user groups easily via customer portal and user groups could

be viewed, edited, assigned user accounts by administrator.



5.2.1 List User Groups

In the content page of [Group Management], administrator may see all user groups

created to access the customer portal.

In the overview list of [Group Management], all user accounts would be shown with the


Group Name – Login username of the user account

Description – Description of user group

Assigned Users – No. of user accounts assigned to the group

5.2.2 Add User Groups

To add user group:

1. Clicks the [Add Group] button

2. Fills in parameter for user group creation



The parameters of user group creation are shown as below:

Group Name – Name of the user group. Group name must be in length of 1-45

alphanumeric characters and should not contain any symbol like “ / [ ] : ; | - , +. * ?

< > or space


Description – Description of the user group. Description must be in length of

1-256 alphanumeric characters and should not contain any symbol like “ / [ ] : ; | - ,

+. * ? < > or space


4. Confirms for the user group creation



5.2.3 Edit User Groups

To edit user group:


2. Fills in parameter for user group modification

The parameters of user group modification are shown as below:



< > or space


Description – Description of the user group. Last name must be in length of


+. * ? < > or space




5.2.4 Delete User Groups

To delete user group:


2. Confirms for the user group deletion

5.2.5 Assign User Accounts

Administrator may assign user accounts to the user group. To assign user account to

user group,

1. Clicks the [Action Gear] icon and then clicks the [Assign] button



2. Chooses the user accounts to assign to the user group and clicks the [OK] button




5.3 Role Management

Administrator may manage user roles easily via customer portal and user roles could be

viewed, edited, assigned user groups to user role by administrator.

5.3.1 List User Roles

In the content page of [Role Management], administrator may see all user roles created

for access control of the customer portal.



In the overview list of [Role Management], all user roles would be shown with the


Role Name – Login username of the user account

Description – Description of user group

Assigned Groups – No. of user groups assigned to the role

Assigned Users – No. of user accounts assigned to the role

5.3.2 Add User Roles

To add user group:

1. Clicks the [Add Role] button

2. Fills in parameter for user role creation



The parameters of user group creation are shown as below:

Role Name – Name of the user role. Role name must be in length of 1-45


< > or space


Description – Description of the user role. Description must be in length of 1-256


< > or space

3. Chooses the access privileges for the role and clicks the [OK] button

4. Confirms for the user role creation



5.3.3 Edit User Roles

To edit user role:


2. Fills in parameter for user group modification

The parameters of user group modification are shown as below:



< > or space




Description – Description of the user group. Last name must be in length of


+. * ? < > or space


5.3.4 Delete User Groups

To delete user group:


2. Confirms for the user group deletion



5.3.5 Assign User Accounts

Administrator may assign user accounts to the user group. To assign user account to

user group,

1. Clicks the [Action Gear] icon and then clicks the [Assign] button

2. Chooses the user accounts to assign to the user group and clicks the [OK] button






5.4 Two-Factor Authentication (2FA)

Two-Factor authentication (2FA) provides secure authentication for access of

management portal by requiring users to identify themselves with a combination of

password and software token. Administrator may assign user accounts to have

Two-Factor Authentication features.

5.4.1 View 2FA user accounts

In the content page of [Two-Factor Auth], administrator may see all user accounts

assigned with 2FA feature.



In the overview list of [Two-Factor Auth] service, all users assigned with 2FA feature

would be shown with the following information:

User Name – Login Username of SSL VPN user

Last Name

First Name



No. of Two-Factor authentication users subscribed – number of 2FA user accounts

subscribed

No. of Two-Factor authentication users available – number of available 2FA user

accounts to assign

No. of Two-Factor authentication users assigned – number of assigned 2FA user

accounts

5.4.2 Assign 2FA feature to user accounts

To assign user account with 2FA feature:

1. Clicks the [Add 2FA User] button



2. Clicks the [Add 2FA User] button and choose user accounts to add 2FA feature.

3. Clicks the [Add] button after selecting a user account.

4. Confirms with the action by clicking the [OK] button.

Remarks:

It would take not more than 30 minutes to synchronize the user enabling 2FA

features and system sends the activation email with instruction of installing and

activating software token application on user’s mobile device. (Refer to Appendix G)



5.4.3 Revoke 2FA feature from user accounts

To revoke 2FA feature from user account:

1. Clicks the [Delete] button of the user account.

2. Confirms for the deletion.



5.5 VM Assignment

Administrator may assign VMs to users so that user may perform VM operation remotely

via the customer portal. This could shift administrative workload from administrator

and user may have better control on VM assigned to them.

5.5.1 List VM Assignment

In the content page of [VM Assignment], administrator may see all VM assignment to

user.



In the overview list of [VM Assignment], all VMs with assignment information would be

shown:

VM Name – Name of VM

Description – Description of VM

CPU (Core) – Number of vCPU of VM

Memory (MB) – Size of Memory in MB of VM

Storage (MB) – Size of Storage in MB of VM

Number of Assigned Users– Number of users assigned to the VM

5.5.2 Edit VM Assignment

To edit the VM assignment:

1. Clicks the [Edit] button



2. Select and clicks the arrow key to move users from /away user accounts in the

assigned users list box.


4. Confirms for the assignment



APPENDIX

A. A. Access Remote Console Access of your virtual machine

Before accessing your subscribed virtual machines via Remote Desktop (RDP), SSH or other

remote access protocols, you need to access the remote console of your virtual machine

first. Please follow the steps below to access your virtual machine remote console:

1. Logon FibreCloud Customer Portal.

2. On the left menu, clicks [Resources] [Virtual Machines]. Then your subscribed

virtual machines will be displayed on the right panel.

3. Clicks the [Action Gear] icon of any one of your subscribed virtual machines.

4. Clicks [Console] button. And then a pop-up window will be displayed. **Please make

sure your Web browser allow pop-up for FibreCloud Customer Portal

5. In the pop-up window, a HTML5 remote console viewer would be shown and you may

access remote console of your virtual machine



6. If your browser doesn’t support HTML5, then you may need to install the Remote

Console plug-in for remote console access. Please follow the steps below to install the

plug-in:

7. An the top of the pop-up windows, click [Switch to VMRC] button.

8. At the top of the pop-up window, three links of remote console plug-ins can be found:

Windows Plug-in





9. Clicks and download the remote console plug-in based on the OS of your PC.

10. After plug-in download completion, logout FibreCloud Customer Portal and close your

Web browser.

11. Runs and installs the remote console plug-in you just downloaded. Please follow the

instructions of the installation wizard to complete the installation.



B. Enable RDP for MS Windows Server Virtual Machine

1. After completing the remote console plug-in installation, logon FibreCloud Customer

Portal again.

2. On the left menu, clicks [Resources] [Virtual Machines]. Then clicks the [Action

Gear] icon of the Windows Server virtual machine.

3. Clicks [Console] button to launch the pop-up window of remote console.

4. When you see the Windows sign-in page in the remote console, clicks [Ctrl+Alt+Delete]

button to logon.

5. For your first time to sign-in as administrator user, you are required to change the

password. Please change the password for your virtual machine.

6. By default, Remote Desktop of Windows Server is disabled and Windows firewall is

enabled. Please enable Remote Desktop and make sure that the corresponding firewall

rule allows inbound RDP connection. Reference link for instructions:

https://technet.microsoft.com/en-us/library/cc794832(v=ws.10).aspx

https://technet.microsoft.com/en-us/library/cc794832(v=ws.10).aspx



C. Enable SSH for Linux Virtual Machine

1. After completing the remote console plug-in installation, logon FibreCloud Customer

Portal again.

2. On the left menu, clicks [Resources] [Virtual Machines]. Then clicks the [Action

Gear] icon of the Linux Server virtual machine.

3. Clicks [Console] button to launch the pop-up window of remote console.

4. When you see the logon prompt in the remote console, please logon as root user with

the initial password provided in the Welcome Letter.

5. For your first time to logon, you are required to change the root password.

6. By default, root is not allowed for remote access via SSH. For security reason, you are

suggested to create a new user and use this user for SSH access.



D. Allows RDP or SSH in Firewall

If you subscribe Firewall service of FibreCloud, you also need to add a firewall rule to

allow inbound RDP or SSH connections from external/anywhere. Please follow the steps

below to add the firewall rule:

1. Logon FibreCloud Customer Portal.

2. On the left menu, clicks [Networking] [Firewall]. Then clicks [Edit Firewall Rule]

button on the left panel.

3. Clicks [Add Firewall Rule] button and fills in the rule information.

4. Here is an example to illustrate how to add a rule for RDP access. Assume that the

public IP mapped to your virtual machine is 103.227.192.100 and you want to allow

RDP access from Internet to your virtual machine:

Enabled: checked

*Rule Name: Allow inbound RDP connection

*Source: external

*Source Port: Any

*Destination: 103.227.192.100

*Destination Port: 3389 (standard RDP port)

*Protocol: TCP

Action: Allow

Priority: Set as First



5. Clicks [OK] button to finish.

6. Clicks [Save Changes] button to commit the change.

7. After the firewall update completion, the virtual machine could be connected using

RDP from Internet.



E. Install SSH VPN client

If you subscribe SSL VPN service of FibreCloud, you also need install SSH VPN client to

establish SSH VPN tunnel between your client machine and FibreCloud VM farm. Please

follow the steps below to install SSL VPN client:

1. Logon SSL VPN Portal using your username and password. Please note that your user

account has to be granted with SSL VPN feature to gain access to the SSL VPN Portal.

Remarks: You may get the URL for the SSL VPN Portal in SSL VPN Overview page of

FibreCloud Customer Portal:

In the left menu of FibreCloud Customer Portal, clicks [Networking] [SSL VPN] and you

would see the URL for SSL VPN Portal.



2. Download the SSL VPN client by clicking on the link “XXXXXX-VPN” while XXXXXX is your

account number and then clicking on the link “click here”



3. After download completion, execute the downloaded file and follow the instruction to

install the SSL VPN client.



F. How to connect to FibreCloud with SSL VPN client

After installation of SSL VPN client, you may now establish SSL VPN network tunnel

between your client machine and your VM farm of FibreCloud.

To connect to FibreCloud with SSL VPN client:

1. Double-clicks the desktop icon of [VMwareTray] to launch the SSL VPN client

2. Clicks [Login] button

3. Fills in your username and password, then clicks [OK] button



4. You would be prompted that SSL VPN connection established.

5. You could now access VMs in your VM farm of FibreCloud using the private IP address

of VMs.



G. How to activate Two-Factor Authentication token

1. You would receive token enrollment email subjected as [WTT Two-Factors

Authentication Service Self-enrollment] similar as below:



2. Open the email in your mobile device and tips the URL in token enrollment email.



3. Tips on the [MobilePASS] icon to install the mobile apps.



4. After installation of the SafeNet MobilePASS apps, go back to the email and tips on

[Enroll your MobilePASS token] to create new token.



5. Fills in the token name, e.g. FibreCloud, and tips on [Activate] button. Then configures

your personal 4-char PIN to access the token.



6. After key in your personal PIN and clicks [Continue] button. Then, the token is

successfully setup.

Date post:	01-May-2018
Category:	Documents
Upload:	trinhnhan
View:	217 times
Download:	1 times

FibreCloud Customer Portal User Guide Customer Portal User Guide Version 1.4 2 ©WTT HK Limited 2017...

Documents