Skip to main content

Step 3: Configure the Conductor

This step configures the authority-level settings on the conductor: the authority name, conductor address, corporate tenant, and internet service. These objects are shared across all routers managed by this conductor.

All steps are performed from the Conductor GUI at https://<conductor-public-ip> unless otherwise noted.

1. Assign the Conductor's Asset ID​

Take this opportunity to log into the Conductor GUI to complete the following operations. This provides validation that the installation was successful, and familiarizes you with GUI operations.

Assign the Conductor's Asset​

  1. Select the Conductor from the Authority menu on the left side of the GUI.

  2. In the Node panel, select the Configure icon.

Conductor Configuration Icon

  1. In the Node Basic Information panel, under Associated Asset ID, enter the hostname for the conductor.

Asset ID

  1. Validate and Commit the changes to the configuration.

2. Set the Authority Name​

The authority represents the complete set of all SSRs managed under a single organizational entity.

  1. Return to the Authority level - either select Authority from the configuration menu on the left side of the GUI, or select the up arrow next to Node at the top of the screen.

    Up arrow

  2. Select the Authority tile.

Authority Settings

  1. Under Basic Information, enter the new Authority name.

Basic Information

note

Use your organization's name as the authority name (for example, Authority128). The authority name cannot be changed after routers have been provisioned without re-onboarding them.

3. Set the Conductor Address​

The conductor address is the IP that managed routers use to reach this conductor. For Azure deployments, use the public IP address assigned to the conductor VM so that routers outside the Azure VNet can also reach it.

note

If all managed routers reside in the same Azure VNet and communicate over private addressing, you may use the conductor's private IP (10.0.0.10 in this guide) instead.

  1. Under Authority Settings, scroll down to Conductor Addresses and select ADD.
  2. In the New Conductor Address window, enter the conductor public IP address, 192.168.100.10.

Conductor Address

  1. Select VALIDATE then COMMIT. Warnings will appear, advising you of the change.

The steps during initialization setup the management IP. The conductor IP address is the public IP address to which the managed routers connect. It is not necessary to manually associate this IP address with a network interface; the interactions between the SSR software and Linux will identify and assign the IP address to the network interface.

4. Create the Corporate Tenant​

Tenants logically partition the network. The corp tenant represents corporate LAN users and is referenced by the LAN interface configuration on each managed router.

  1. Under Configuration in the left panel, select Authority.

Select Authority

  1. Scroll to Tenants and select ADD.

Add Tenant

  1. Enter the name corp and select SAVE.

Name Tenant

  1. Select VALIDATE then COMMIT.
info

Tenants are authority-wide. A single corp tenant definition applies to all routers that assign it to a LAN interface.

5. Create the Internet-Traffic Service​

The service configuration element defines the IP destinations that the SSR routes. This step creates a single service representing all internet-bound traffic from corporate LAN users.

  1. Under Configuration in the left panel, select Authority.

Select Authority

  1. Scroll to Services and select ADD.

Add Service

  1. Enter the name Internet-Traffic and select SAVE.

Add Internet Traffic Service

  1. Verify Enabled is set to true.

Internet Traffic Service True

  1. Scroll to Service Addresses and select ADD.

Select Service Addresses

  1. Enter 0.0.0.0/0 and select SAVE.

Address IP

  1. Scroll to Access Policies and select ADD.

Add Access policy

  • Set Source to corp.

Corp Access Policy

  • Select SAVE.
  1. Select VALIDATE then COMMIT.

What Was Configured​

At the end of this step your authority contains:

NameValueDescription
AuthorityAuthority128SSR organizational authority name
Conductor Address<auto-assigned>Azure-assigned public IP — used for SSH, GUI, and as the conductor address
TenantcorpLAN-side user population
ServiceInternet-Traffic0.0.0.0/0, access from corp

The conductor is now ready to accept router onboarding.

Next Step​

Congratulations, your Azure Conductor is deployed. The next step is to deploy your router(s) and onboard them to the conductor. See the appropriate router deployment guide for your needs.