Up
Previous Next

Sheriff CSM™

Configure a VPN Between Sheriff CSM Systems

To set up a VPN between two Sheriff CSM components, for example, between a Sheriff CSM All-in-One and a Sheriff CSM Sensor (Deputy), or between a Sheriff CSM Server and a Sheriff CSM Logger, you need to configure through the Sheriff Setup menu, on the System Preferences > Configure Network > Setup VPN screen:

AlienVault Setup menu  /> System Preferences > Configure Network > Setup VPN

Note: You must have comhimpleted the Sheriff CSM registration to see the VPN-related configuration options in the Sheriff Setup menu.

If setting up VPN in Sheriff CSM version 5.0 or earlier, you first enable VPN, then configure the VPN server.

If setting up VPN in Sheriff CSM version 5.1 or later, these tasks are reversed, with the VPN server configuration first, then VPN enablement.

When you configure a VPN server, you create the VPN interface by specifying the following parameters:
  • Virtual network IP — 10.67.68
  • VPN network mask IP — 255.255.255.0
  • VPN port — 33800
To configure the VPN server
  1. Log in either locally or remotely to the Sheriff appliance that you want to act as the VPN server.

  2. From the Setup Main menu, go to System Preferences > Configure Network > Setup VPN > Configure VPN server, then press Enter (<OK>).

  3. On the Configure VPN server screen, press Enter (<Yes>) again.

  4. Enter a virtual network IP to use and press Enter (<OK>).

    Note: By default, the network IP is always 10.67.68.

  5. Enter a VPN mask and press Enter (<OK>).

    Note: By default the mask is always 255.255.255.0

  6. Enter a VPN port and press Enter (<OK>).

    Note: By default, it is always 33800.

  7. Use the <Back> option and press Enter until the Sheriff Setup menu reappears.

  8. Go to Apply all Changes and press Enter (<OK>)

    Apply All Changes console for <a class="foswikiNewLink" href="/docs/bin/edit/Sheriff/AlienVault?topicparent=Sheriff.ConfigureAVPNBetweenSheriffCSMSystems" rel="nofollow" title="Create this topic">AlienVault</a> Setup Menu.

  9. Press Enter (<Yes) to confirm. The system applies the changes and restart the services, then console displays: Changes Applied.

  10. Press Enter (<OK>).

To enable the VPN
  1. From the Sheriff Setup Main menu, go to System Preferences > Configure Network > Setup VPN > Enable/Disable VPN, then press Enter (<OK>).

  2. Use the arrow keys to move the asterisk(*) to "yes", press the spacebar to select, and then press Enter (<OK>).

     Enable/Disable VPN

  3. Press Enter (<OK>) again.

  4. Use the <Back> option and press Enter until the Sheriff Setup menu reappears.

  5. Go to Apply all Changes and press Enter (<OK>).

You must complete the following VPN client creation tasks in the order presented:

This task builds a tunnel between the configured VPN server and the node intended to act as the VPN client.

To build a tunnel between the VPN server and a client
  1. Log in either locally or remotely to the VPN server appliance.

  2. From the Setup Main menu, go to System Preferences > Configure Network > Setup VPN > Configure VPN client.

  3. Press Enter (<OK>).

  4. Enter the Administration IP Address of the VPN client, and press Enter (<OK>).

  5. Enter the root password of the remote system, and press Enter (<OK>).

  6. Press Enter (<Yes>) to confirm.

    The system confirms that the VPN client node was successfully contacted:

    VPN creation confirmation console for <a class="foswikiNewLink" href="/docs/bin/edit/Sheriff/AlienVault?topicparent=Sheriff.ConfigureAVPNBetweenSheriffCSMSystems" rel="nofollow" title="Create this topic">AlienVault</a> Setup menu.

    Note: Make note of the VPN IP address, because you will need it for the client configuration task.

  7. To continue, press Enter.

If the tunnel creation process does not finish successfully, the following message appears instead:

no connectivity error when building the VPN tunnel

In this case, see Building a VPN Tunnel Without a Client-Server Connection.

If the VPN client you are configuring is a Sheriff CSM Sensor, you need to finish the configuration by performing an additional step. Click the corresponding link below for details.

Important: Make sure to use the VPN IP address you noted from the output in step 6 in creating the VPN client.
Topic revision: r14 - 21 Jun 2022, SheriffCyberSecurity
Copyright 2020 Sheriff Cyber Security, LLC. All rights reserved.