Configure the VPN Agent

Acklio VPN Agent works as a Network Binding Agent (NBA) that connects the flow to multiple network interfaces (e.g., private network and/or public network). It allows to filter a part of the traffic to the device by stopping downlink packets.

Download the Agent

Click an IP network in the list of IP networks to display its details, then click Download the VPN agent.

This displays a message box.

Select to download the archive either for x86 or for ARM architecture.

Archive Content

Unzip the archive on your local drive.

The VPN-agent package contains the binary of the network-binding-agent and the relevant certificates to establish a secure connection to Acklio IPCore.

The binary name follows a syntax: ipcore-nw-binding-agent-<arch>.

Using the Binary

Below are commands to use the binary and listen the downlink traffic.

Required Commands

1. Give the executable permission with the following command:

   `chmod +x <binary-name>`

2. Execute the binary with root permission in order to create a tun interface to listen downlink traffic from the application.

   `sudo ./<binary-name> --agent-server-addr=nba.ipcore.acklio.cloud:9995`

Status Information

Control the traffic at flow level in Acklio IPCore by displaying the status information on the IP Network details page.

Optional Advanced Feature

This feature is not necessary in the case of a first use or a Demo. In other words, it is optional and for advanced use only.

In addition, you can filter the traffic destined to specific ports.

Use the command below while running the binary, with the following syntax:

• Use a colon to specify a port Range e.g., "100:200"
• Use a comma to specify port filters in particular e.g., "443,344"

--agent-server-filter-ports="100:200, 443,344"