Deploying Virtual Private Edge

For Virtual Private Edge (VPE), you must deploy and register VPE Nodes, which are the on-premises instances that make up the VPE platform.

Downloading the VPE Image

First, you must download the VPE image from the Netskope UI. Note that the time it takes to download the image depends on the network speed between your environment and the Netskope Management Plane (MP).

To download the image:

1. Allez à Settings > Security Cloud Platform > On-Premises Infrastructure.
2. Cliquez sur l'onglet Next-Gen .
3. Sur la page Next-Gen , cliquez sur Download Image.
   
4. In the Get VM Image window, download the appropriate image.

Deploying the VPE Image

After downloading the image, deploy the VPE Node in your environment with standard hypervisor deployment steps. For examples of similar instructions, see Install the Virtual Appliance on VMware ESX 6.5 or Later or Install the Virtual Appliance on Linux KVM.

Registering the VPE Node

After you successfully deploy the VPE Node, you must configure and then register it in your Netskope tenant.

Configuring the VPE Node

To configure the VPE Node:

1. Log in to the VPE CLI via SSH with the default username nsadmin and password nsappliance.
2. Use the command show version-info to confirm that the software version of the VPE Node is correct.
3. Use the command auth change-password nsadmin to update the default password. A password must have a minimum length of 14 characters and include at least one number, one uppercase letter, one lowercase letter, and one special character or symbol.
4. You must set up the network interface for the VPE Node. Use the command configure to enter configuration mode.
5. Pour la configuration DNS, utilisez la commande set dns primary <Primary DNS Server IP>.
6. The default interface (dp2) is used for management and the dataplane. You can use DHCP configuration for the dp2 interface. Use the command set interface dp2 v4 enable true to configure DHCP.
7. (Optional) Alternatively, you can configure a static IP address for the dp2 interface instead.
   • If DHCP is already enabled, use the show route interface command to see the IP, gateway, and netmask assigned to the interface.
   • Avant de définir l’adresse IP statique, vous devez utiliser la commande suivante pour désactiver le DHCP : set interface dp2 v4 enable false.
   • Use the following commands to set the static IP:

     set interface dp2 v4 static ip <IP address>
     set interface dp2 v4 static netmask <netmask>
     set interface dp2 v4 static gw <gateway>
     set interface dp2 v4 static enable true

   • Netskope recommande de mettre à jour le nom d'hôte du nœud VPE pour une identification locale. Par exemple, l'interface utilisateur de Netskope affiche ce nom d'hôte lors du processus d'enregistrement. Utilisez la commande suivante pour mettre à jour le nom d'hôte : set system hostname <new hostname>.

Creating a Registration Token

After you configure the VPE Node, you must create a one-time registration token for VPE in the Netskope UI.

1. Allez sur Settings > Security Cloud Platform > On-Premises Infrastructure.
2. Cliquez sur l'onglet Next-Gen.
3. Sur la page Next-Gen , cliquez sur Registration Tokens.
   
4. In the Registered Tokens window, click Create Token and then the number of tokens you wish to create. You can create up to 10 tokens at a time.
5. Passez la souris sur le jeton que vous avez créé puis cliquez sur Copy ou Download.
   

Saving the Registration Token

Après avoir créé le jeton, revenez à la CLI VPE pour l'enregistrer et l'associer au nœud VPE, ce qui complète le processus d'enregistrement. Utilisez les commandes suivantes pour définir le jeton :

configure
set dns primary <vpc-resolver-ip>
set system registrationkey <token>
save
exit

Verifying VPE Node Registration

You can verify the success of the VPE Node registration from the Netskope UI and the VPE CLI. In the Netskope UI, the VPE Node is displayed on the Next-Gen page with the VPE Node hostname and serial number.
In the VPE CLI, use the command status tethering to verify the VPE Node serial number.