Add and configure a tunnel-type client-access application
Add a tunnel-type client-access application to EAA Client and configure the parameters.
Create a tunnel-type client access application and configure it with the parameters.
- From the top menu bar, click Applications.
- Click Add application.
- In the Add custom apps area, click Client-Access app.
- In the dialog, enter an application name and description. Select Tunnel mode (multiple ports, UDP and TCP) for the Type.
- Click Create app and configure.
- Click Add icon. (optional) Add any icon for your application from the gallery.
In the general tab,
configure the Destination field in the Application
Identity section based on your use case. You can configure
different traffic types (TCP, UDP or both), different domains (wildcard or
specific) or IP based access (with or without subnets), port ranges or specific
ports or combinations of both. To add more destinations, click Add
Destination and configure the next destination, Destination
2 and so on, till you're done with all the network destinations.
Note: If a route for a particular destination already exists, then EAA Client will not add the IP address to the routing table, but will issue an IP route collision alert.
In the Endpoint host
name field enter the cloud endpoint of your application. This
is the cloud endpoint for all communications between the client access
application and Enterprise Application Access (EAA).
Additionally, choose one of these domains:
- Use your
domain. If you use your own custom domain, you must provide
a certificate configured as a complete bundle with all the subordinates
(having the full chain of trust), otherwise you will see a web-socket error.
To use an uploaded certificate, select Use uploaded
certificates and follow the steps in Add a certificate to EAA
- Use Akamai domain. If you use an Akamai domain no certificate is needed.
- Use your domain. If you use your own custom domain, you must provide a certificate configured as a complete bundle with all the subordinates (having the full chain of trust), otherwise you will see a web-socket error. To use an uploaded certificate, select Use uploaded certificates and follow the steps in Add a certificate to EAA
- Select an Akamai Cloud Zone. The cloud zone should be the location closest to the data center where your application server resides. The Akamai Cloud Zone can be of the form Client-* like Client-US-East, Client-US-West, etc closest to the application in the data center.
Associate a connector to the
- Click Add or remove connector and select a connector from the dialog.
- Click Done.
- Click Save and go to Authentication.
- In the Authentication tab, click Assign identity provider. The identity providers that are enabled for the EAA Client appear. Select the identity provider which has the directories and groups who will access this application.
- Click Save and go to Services. The Service tab opens to let you configure these optional services
- Click Save and go to Advanced settings.
- If you are seeing performance issues for TCP applications in tunnel mode, click TCP Optimization, for higher throughput.
Complete the optional Advanced
Settings. See Set up advanced settings for an application.
Note: For a client access application, the Enable websocket support option is enabled by default. This option is required to establish a tunnel from the client to the EAA cloud.
- Click Save and go to Deployment.
- In the Deployment tab, click Deploy Application. This option is only available if all the required fields are completed for the application.