Switchboard com free

In this page you find:The Switchboard ArchitectureAccessing the SwitchboardDashboardConnectionsMapUsersUsersUserGroupsPermissionsAdditional user informationProvisioningGroupsGroupMembersDevicesDevicesGatewayGroupsEndpointsPermissionsProvisioningPort ForwardingLocationGroupsGroupMembersPermissionsApplicationsApplicationsApplicationAdvanced parametersProfilesOrganizationsOrganizationsNetworkPortalProvisioningStatisticsOrganizationsUsersDevicesSettingsSettingsNetworkPortalProvisioningLogsManagement CenterDevicesDetailsVPNPackagesUpdatesProcessesJobsHardwareProfilesProfileDevicesGold gatewayBulk actionsDevicesClient DownloadSwitchboard APIThis section describes the Endian Switchboard and the functionalities itprovides, including management options for the devices, the users, andtheir access rights.New in version 5.0.5: The Endian Management Center.The Switchboard Architecture¶The Endian Switchboard is a VPN-based solution that allows to controland manage complex infrastructures by providing a seamless connectionof diverse remote devices, called endpoints, to acentralised server through gateways. Remote gateways andendpoints can be centrally managed directly from the switchboard orusing the Endian ConnectApp, a desktop application that provides thesame functionalities of the Switchboard. Devices can be accessed andmanaged by users, that are also created and managed on theswitchboard, and can have different access levels to thegateways and endpoints. Endpoints can be accessed from remoteworkstations using application profiles.Gateways can be added to the Switchboard literally in minutes by takingadvantage of the Plug & Connect / Autoregistrationprocedure, that will take care of registering the gateway to Endian Networkand of configuring the Green Zone and the VPN tunnel to the Switchboard.After the Plug & Connect procedure hasbeen successfully completed, the gateway will be immediately availableto the Switchboard users.More in detail, here follows the description of the various actorsinvolved in the architecture.An example switchboard installation with most of the possibleinvolved actors shown.¶SwitchboardThe Switchboard is the heart of the whole infrastructure. It storesall the configuration data about gateways and users, the log files,the access policies, and keeps track of the connections. It can beaccessed in two ways:By using a browser that points to the URL in which GREENIPis the IP Address of the appliance it is installed on.By installing the ConnectApp on a workstation that accessesremotely to the appliance on which the Switchboard is installed.EndpointAn endpoint can be in principle any kind of equipment that canconnect via Internet, so they can be any kind of industrialmachinery, as well as remote workstation, servers and so on. Eachendpoint has its own IP address and may connect to the localnetwork and/or to the Internet by means other than the gateway. Theonly requirement is that the endpoint be reachable by the gateway.Each endpoint can be connected to only one gateway and receives anunique IP address (called virtual IP in the architecture) thatfalls within the GREEN network of the gateway. The endpoint’svirtual IP may change when the size of the network needs to beaccommodated, for example with the addition of new endpoints to

The default model ofnew-added gateways.New in version 5.0.5.Statistics¶This page is divided into three tabs, presenting statistics about theOrganizations, the Users, and theDevices respectively, that exist on the Switchboard. Each tabcontains a table, with a filter bar above it, that allow to searchwithin the elements in the table:Filter: a research string.Organization: select from the drop-down menu the Organization inwhich to search.From, To: select the time interval in which tolook up. To select a given day, select it in both the From and Tofields.Organizations¶This page shows a table containing the list of currently definedorganizations, with a number of information. This tab does not appearif Organizations are not enabled on the Switchboard.NoteThe numbers in parenthesis are the values of the childorganizations.Organization. The name of the organization, along with its ID andits path from the root organization.Users. The number of users that belong to the organization.Devices. The number of devices, which are grouped in threecategories: Gateways, Endpoints, and Endian Appliances.Nodes. Two values associated with the nodes: Countednodes - the number of nodes the organization has, and Nodelimit - The maximum number of nodes allowed.Traffic. The amount of traffic Sent from orReceived by the organization.Users¶This page shows a table containing the list of the users that haveconnected through the Switchboard.User. The account name and the organization it belongs to.Organization. The name of the organization, along with its ID andits path from the root organization.NoteThis column appears only if Organizations are enabled onthe Switchboard.Connections. To Switchboard is the number of connectionsto the switchboard made by the user, while To devices thenumber of connections to devices.Connections Time. To Switchboard is the amount of timespent by the user on the switchboard, while To devices thetime spent on the devices.Traffic. The amount of traffic that has been made by the user,divided into Sent by the user and Received fromthe user.Devices¶This page shows a table containing the list of devices connected tothe Switchboard and a number of information about them.Device. The name of the device and the organization it belongs to.Organization. The name of the organization, along with its ID andits path from the root organization.NoteThis column appears only if Organizations are enabled onthe Switchboard.Connections. To Switchboard is the number of connectionsto the switchboard made by the device, By users shows howmany users have connected to the device.Connections Time. To Switchboard is the amount of timeduring which the device has been connected to the switchboard, whileBy users is the amount

Thenetwork.GatewayA gateway is the door through which the Switchboard can manage andallow connections to endpoints. It can be easily configured andactivated using gateway provisioning. Gateways are directlyconnected to the Switchboard by means of a VPN tunnel and takes careof routing connections between the Switchboard and the endpoints.Gateways can be organised in groups and are usually in “normal”modality: they connect to the endpoints they control using theirGREEN interface, and to the Internet using the RED interface. Insome specific setups, gateways can be setup with an unique zone forboth the uplink and the network. The GREEN subnet can beaccommodated in size when the number of endpoints grows.DeviceWith device it is intended either an endpoint or a gateway.UserA user is anyone who can in some way access and interact witheither the Switchboard, a gateway, or an endpoint. Users can bearranged in user groups, in which a user can play two roles,either be a member or an administrator of the group. In thelatter case, he can manage the members of the group.Application profileAn application is one method to remotely access to an endpoint froma remote workstation and is defined by a path on the workstation tothe program executable and by optional command argument. Sincethere are several possibilities to connect to an endpoint,application can be grouped together in applicationprofiles, that encompass all possibilities to access the same typeof endpoint. Each endpoint has one application profile attached,that defines all the possibilities to reach it.Access policyThe basic access policy on the Switchboard is that a user can haveaccess to one or more gateways and to all the endpoints managed bythese gateways.More advanced permissions can be granted to a user, including theability to manage users, devices, applications, organizations anduse the API.Exclusive AccessThe Endian Switchboard implements an additional access policy calledExclusive access, that can be granted at endpoint, gateway, ororganization level. When this policy is enabled, only one user at atime can connect to that component, no one else can connect to it:When another user tries to access it, the switchboard prevents theconnection. The rationale behind this policy is that when a useroperates on a critical part of the infrastructure, like for examplea gateway controlling several sensible endpoints, nobody else caninterfere.This policy is set globally: In the same Switchboard installation,there cannot be some organizations (resp. gateways, endpoints) thatallow exclusive access and some that do not. Moreover, thepolicy is propagated downwards the hierarchy: If an organization isset to exclusive access,

All the gateway have also the exclusiveaccess set and the endpoints as well.Finally, note that this policy can be disabled, granting concurrentaccess to all the infrastructure to everyone.OrganizationWhen deployed in large and complex scenarios, the management ofusers and devices on the Switchboard can be simplified by dividingall the available resources into small, self-contained units calledorganizations. Organizations can be organised in hierarchies andeach of them consists of users, devices, and applicationprofiles. The root organization retains some peculiar setting,called root node characteristics, see Organizations fordetails, while as a general rule, sub-organization inherit accesspolicies and application profiles, although these can beoverridden.NoteIf Organizations are not enabled on the Switchboard,various options concerning them are not present in the graphicinterface.Accessing the Switchboard¶Any instance of the switchboard can be accessed with differentsecure methods:By accessing via HTTPS the public IP address or hostname of theSwitchboards portal or to a UTM appliance with Switchboard moduleinstalled. This method works from any device, even from tablet andmobile phones, since the only requirements are a browser and anInternet connection.By downloading the ConnectApp, Endian’s dedicated VPN client, fromEndian Network (under Downloads ‣ Endian OpenVPNClient) and configuring an OpenVPN connection to theSwitchboard. This method works only for Windows and Mac OS X desktopplatforms but as a bonus allows to use third-party applications toconnect to devices located behind the Switchboard.Depending on the connection, the Dashboard page changes slightly. Thenext two screenshots highlight the differences: The connection toconnect.endian.com or using the ConnectApp shows more information onthe right-hand side: The number of online and total users, of onlineand total gateways, the total number of endpoints, and a few systeminformation, namely the maximum number of users and gateways.Moreover, the position of the menu-items like Dashboard, Users, and so on,are either on the left-hand side or on top of the window.Dashboard¶This page shows a number of information about the endpoints andgateways that are managed by the Switchboard and is divided into twotabs: Connections and Map. The former contains information aboutthe connections to the devices, while the latter shows them on a worldmap, provided their location has been configured. Moreover, if theMessage of the day under Settings ‣ Portal hasbeen configured, it will appear on top of the page.Connections¶This page contains a table showing all devices configured on theSwitchboard, along with the following information for each of them:The device name, which may contain two different types of objects:Gateways and endpoints , with the latterindented to highlight their roles and the

An application, use the textbox on topof the box. The Add all link can be used as a shortcutfor moving all applications within the profile. An application can be removedfrom the profile by clicking on the - next to theapplication’s name in the right column.Organizations¶An important feature of the Switchboard are Organizationsthat have been introduced to add support for a more granular divisionof complex enterprises into smaller, self-contained units -calledindeed organizations, which can be arranged into hierarchies.NoteOrganizations are not enabled by default on theSwitchboard; they are a feature that must be requested whenpurchasing a Switchboard licence.A Switchboard organization consists of one or more users and of one or moredevices, be it gateways or endpoints. Users and devices within oneorganization can not see, access, or manage users and devices in otherorganizations. A user, a user group, or a device can belong to exactly oneorganization.Within an organization, the default policy is that users can see all otherusers and all the devices in sub-organizations that are lower in thehierarchy.The hierarchy within an organization consists of an unordered treewith a root node and at least one children or descendant, each nodebeing one (sub-)organisation within the organization.From a technical viewpoint, the sub-organisations are a bit differentfrom the root node: Indeed the latter has some properties that thechildren inherit and cannot modify, because they are inherent to thewhole organisation or to the Switchboard installation. These root nodecharacteristics are:OpenVPN: dedicated servers or instances, possibly with a fallback,and public IP address of FQDN.A dedicated IP address pool, with manual or automatic virtual subnetassignment.The possibility to push the entire virtual IP pool to the clientsconnected.A unique Switchboard bind IP address, possibly with fallback.This page initially contains an empty table of the availableorganizations, and some information about each of them:The organization’s name.The path (from the root organization)The available actions on each organization: - Modify the organization. - Remove the organization.A link above the table, Add Organization, allows to definea new organization.In the editor, the options available to create a new organization aregrouped into four tabs, namely Organization,Network, Portal, and Provisioning.Organizations¶Unique Organization IdentifierAn identifier used for the identification of the organization,which must be unique within the instance of the Switchboard. Thisidentifier is mandatory for the new organization.Parent organizationIf this is not the root organization, select from the drop downmenu its parent.Exclusive accessSelect from the drop-down menu whether to enable or disableexclusive access to the whole organization.Max number of nodesDefine the highest