Steps to "Reload" "privateAccessPeersConfig.json" file:


  • Create an AWS bucket and place on it the "privateAccessPeersConfig.json" file. See Examples below.
  • Download the file to the CSC. Run Command "AWS-RunShellScript" on the CSC and do command:
wget <Your bucket file URL> -O /usr/local/etc/mhb-csc/privateAccessPeersConfig.json
  •  Run Document "MHB-CSC-Reload-Private-Access-JSON-file" to apply the changes.

Example:


{

    "peers": [

        {

            "nodeName": "ns-cgc00001",

            "description": "Node on VMware Server 1",

            "location": "HQ",

            "publicKey": "yAnz5TF+lXXJte14tji3zlMNq+hd2rYUIgJBgB3fBmk=",

            "publicIpAndUdpPort": "200.1.1.1:51821",

            "privateCirdIp": "192.168.7.1/24",

            "persistentKeepAlive": "no",

            "networks": ["10.1.1.0/24", "10.1.2.0/24" ],

            "privateApps": [

                {

                    "description": "Allow all traffic to this site",

                    "ipProtocol": "all",

                    "sourceCirdIp": [ "0.0.0.0/0" ],

                    "destinationCirdIp": [ "10.1.1.0/24", "10.1.2.0/24" ],

                    "destinationSinglePorts": [ "" ],

                    "destinationPortRange": {  "fromPort": "", "toPort": "" }

                }

            ]

        },

        {

            "nodeName": "ns-cgc00002",

            "description": "Node on VMware Server 2",

            "location": "Datacentre 2",

            "publicKey": "xTIBA5rboUvnH4htodjb6e697QjLERt1NAB4mZqp8Dg=",

            "publicIpAndUdpPort": "200.1.1.2:51821",

            "privateCirdIp": "192.168.7.2/24",

            "persistentKeepAlive": "no",

            "networks": [ "10.2.1.0/24",  "10.2.2.0/24" ],

            "privateApps": [

                {

                    "description": "Allow all traffic to this site",

                    "ipProtocol": "all",

                    "sourceCirdIp": [ "0.0.0.0/0" ],

                    "destinationCirdIp": [ "10.2.1.0/24", "10.2.2.0/24" ],

                    "destinationSinglePorts": [ "" ],

                    "destinationPortRange": {  "fromPort": "",  "toPort": "" }

                }

            ]

        },

        {

            "nodeName": "ns-cgc00003",

            "description": "Node on VMware Server 3",

            "location": "Branch",

            "publicKey": "TrMvSoP4jYQlY6RIzBgbssQqY3vxI2Pi+y71lOWWXX0=",

            "publicIpAndUdpPort": "200.1.1.3:51821",

            "privateCirdIp": "192.168.7.3/24",

            "persistentKeepAlive": "no",

            "networks": [ "10.3.1.0/24", "10.3.2.0/24" ],

            "privateApps": [

                {

                    "description": "Allow all traffic to this site",

                    "ipProtocol": "all",

                    "sourceCirdIp": [ "0.0.0.0/0" ],

                    "destinationCirdIp": [ "10.3.1.0/24", "10.3.2.0/24" ],

                    "destinationSinglePorts": [ "" ],

                    "destinationPortRange": { "fromPort": "",  "toPort": "" }

                }

            ]

        }

    ]

}