Before Opening

Before opening a ticket related to VPN on Liferay PaaS

Note: please note that Liferay has renamed its Liferay Experience Could offerings to Liferay SaaS (formerly LXC) and Liferay PaaS (formerly LXC-SM).

The following article outlines a short checklist of questions to ask and steps to take before opening a ticket related to VPN on Liferay PaaS. By taking a moment to go through this checklist before opening a request, you are ensuring the fastest possible resolution for your particular issue.

If you can't get a "Connected" status:

  1. Make sure you are using one of the supported protocols: OpenVPN or IPsec (IKEv2).
  2. Are you sure your VPN is Client-to-Site? We do not support a Site-to-Site VPN in shared clusters.
    1. Site-to-Site VPNs are only supported with subscriptions that include a private cluster, and can only be configured with Google Cloud VPN
  3. Can you connect to this VPN server using a Linux VPN client? If you can't, you most likely won't be able to connect to the VPN server using our Liferay Experience Cloud SM client.
  4. Do you have any Firewall role that might prevent the Liferay Experience Cloud SM client from connecting to your VPN server? You can check your firewall log to see if the Liferay PaaS client connection request is getting through. 

If you get a "Connected" status but the VPN still does not seem to be working:

  1. Are you using <vpn:port> instead of <ip_address:port>? After mapping an IP address and port on Liferay Experience Cloud SM, you must refer to it using VPN:mapped_port
    Let's say you have mapped 192.168.0.0:8080 to vpn:8080. After that, if you need to use this IP+port on Liferay DXP, for example, you need to use the VPN:8080 terminology instead of 192.168.0.0:8080.
  2. Do you have any HTTP service running on your private network? If yes, a good test is to map this service into a Liferay Experience Cloud SM port and try to run a curl command from the Liferay Service shell to check the results.
  3. Are you mapping the same IP and port combination to multiple Liferay Experience Cloud SM ports? If so, it is not possible to have a successful result. Each combination IP+port should be mapped into a unique Liferay Experience Cloud SM port. 

Additional Information

 

 

On this page