VPN Access for Support
This article explains how to enable Exasol support access to your system using VPN.
To enable support access over VPN, you must configure a site-to-site VPN tunnel. This is an IPSec tunnel with two phases:
- Phase 1: AES 256 / SHA-512 / DH Group 21: MODP 2048; Lifetime: 86400 seconds
- Phase 2: AES 256 / SHA-512 / PFS Group 21: MODP 2048; Lifetime: 3600 seconds
Exasol supports both the IKEv1 and IKEv2 protocols.
To enable all maintenance tasks, make the following services/ports accessible on the public IP addresses of the cluster and the LOM (if applicable):
- TCP port 8563 (database access)
- TCP port 20002 (SSH access to cluster nodes)
- TCP port 443 (HTTPS access to Administration API and LOM web interface)
- ICMP ECHO REQUEST/REPLY (ping)
- UDP port 123 (NTP)