Multi-Path Room Connectivity User Guide

The purpose of this article is to describe the network connectivity provided by a Multi-Path Room.

Overview

'Multi-Path Room' is a short way of referring to a Tehama Room that has network access type 'Multi-Path'.

Find out what your Room's network access type is from the Room's connection page. See section View a Room's network access setting in Room/Desktop Connectivity - Types, Status and Settings for details.

The 'Multi-Path' network access type securely connects the Room to private networks through VPN IPSec connections. Multi-Path Rooms can support many such connections. It also provides access to applications and services in the internet.

With or without connections, a Multi-Path Room is able to connect to the internet, to applications and services in the cloud (constrained by your Room's firewall settings and its DNS Filtering). This is equivalent to the functionality available in an Internet-Only Room, a Room with network access type "Internet-Only".

Add connections to your Room, in order for your Room to access the private network(s) of your Room's connected organization (constrained by your Room's firewall settings and DNS Filtering).

Add DNS resolvers to your Room, in order for your Room to convert domain names from your connected networks to IP addresses.

Construct a Multi-Path Room and connect it to your private network(s):

Here are the actions you can perform within a Multi-Path Room:

Multi-Path Room Requirements and Limitations

Requirements:

• You must have a Tehama organization.
  
  
• If you intend to connect to a private network:
  
  
  • The network must support the IPSec VPN (IKE2) protocol.
    
    
  • You must be willing to open your network's firewall (if you have one set up) to allow communication with your Tehama Room.

Limitations:

• Currently, the Multi-Path network access type is only available in Standard Rooms. If you need a Domain Join Room, you cannot connect to your networks using Multi-Path.
  
  
• While existing Rooms with Tehama Gateway' or 'Internet-Only' network access can be switched to use 'Multi-Path' network access, Rooms with Multi-Path access cannot be switched to use another type of access.

Construct and connect a Multi-Path Room

STEP ONE

First go over the requirements and limitations for Multi-Path Rooms:

• Multi-Path Room Requirements and Limitations

STEP TWO

Either

• Create a new Standard Room and select the network access type 'Multi-Path' during the Room creation process.

or

• Convert one of your existing Rooms with 'Tehama Gateway' or 'Internet-Only' network access to use 'Multi-Path' network access, by following the steps found under the section 'Change a Room's Network Access setting' in the Room/Desktop Connectivity - Types, Status and Settings guide.

STEP THREE

Be sure to finish building your Room's infrastructure, if you stopped the Room creation process before this step.

STEP FOUR

Form VPN IPSec connection(s) between the Room and your private network(s). See steps in Multi-Path Room - Add and Manage Connections.

Note: The installation process includes instructions to open your network firewall to allow access for your Room.

then (optionally) add DNS resolver(s) to your Room. See steps in Multi-Path Room - Add and Manage DNS Resolvers.

STEP FIVE

Configure your Room's firewall rules and DNS Filtering to allow access to the resources and applications you want to be available to your Room's Desktops.

Build a Multi-Path Room's Infrastructure

This option is only available if your Room has 'Network Access' set to 'Multi-Path' and the building of your Room's infrastructure has yet to be triggered. That is, when creating the Room, you stopped the process before building the Room's infrastructure.

You will incur the cost of the Room when the Room's infrastructure begins to build.

Build your 'Multi-Path' Room as follows:

1. Log in to the Tehama Web UI.
2. Click on the ROOMS tab.
3. Click on the name of the Room you want to access. You will see the Room's interface. The tabs you will see depends on the role you have within your organization.
4. Click on the CONNECTION tab.
5. Click on the STATUS sidebar item.
6. Look for the BUILD ROOM INFRASTRUCTURE button at the bottom of the page.
7. If you are willing to accept responsibility for the cost of the Room, click the BUILD ROOM INFRASTRUCTURE button to proceed.

View a Multi-Path Room's status

NOTE: The Status column in the Rooms list under the ROOMS tab will show a more generic status for each Room - Healthy, Unhealthy, Pending, Impaired, Updating or Archived. The status described here that is found on the Room's status page provides more details.

View your Multi-Path Room's status on its status page as follows:

1. Log in to the Tehama Web UI.
2. Click on the ROOMS tab.
3. Click on the name of the Room you want to access. You will see the Room's interface. The tabs you will see depends on the role you have within your organization.
4. Click on the CONNECTION tab.
5. Click on the STATUS sidebar item.
6. Look at the top of the page. The Room's connection status is displayed in a status box found at the top of the page.

Status values for Multi-Path Rooms:

View a Multi-Path Room's Public IP and Ports

A Multi-Path Room has a public IP address used to establish connectivity in the Room. This address and the ports the Room uses are available through the Room's connection status interface.

View your Multi-Path Room's public IP address as follows:

1. Log in to the Tehama Web UI.
2. Click on the ROOMS tab.
3. Click on the name of the Room you want to access. You will see the Room's interface. The tabs you will see depends on the role you have within your organization.
4. Click on the CONNECTION tab.
5. Click on the STATUS sidebar item.
6. Look for the following fields: IP and Ports
7. You will use the public IP and ports in the course of forming connections to your Room from your private network(s).

View a Multi-Path Room's Subnet

A Multi-Path Room has a subnet used to establish connectivity in the Room. This subnet is available through the Room's connection status interface.

View your Multi-Path Room's subnet as follows:

1. Log in to the Tehama Web UI.
2. Click on the ROOMS tab.
3. Click on the name of the Room you want to access. You will see the Room's interface. The tabs you will see depends on the role you have within your organization.
4. Click on the CONNECTION tab.
5. Click on the STATUS sidebar item.
6. Look for the following field: Subnet
7. You will use the subnet in the course of forming connections to your Room from your private network(s).

View the Connections table for a Multi-Path Room

View the Connections table for your Room as follows:

1. Log in to the Tehama Web UI.
2. Click on the ROOMS tab.
3. Click on the name of the Room you want to access. You will see the Room's interface. The tabs you will see depends on the role you have within your organization.
4. Click on the CONNECTION tab.
5. Click on the STATUS sidebar item.
6. Look for the table of connections midway down the STATUS page. There will be one entry for each VPN IPSec connection you have added to your Room. (If you do not see the table then you do not have permission to see the connection info in this Room - and remember that the table is only visible when 'Network Access' is set to 'Multi-Path'.)

Each entry provides:

Configure a Connection in a Multi-Path Room

There are two parts involved in forming a new connection in a Multi-Path Room:

After forming the new connection be sure to:

Manage a Connection in a Multi-Path Room

The actions to manage a connection are:

• View Connection Details
• Edit a Connection
• Delete a Connection
• Network Firewall Configuration

View the DNS Resolvers table for a Multi-Path Room

View the DNS Resolvers table for your Room as follows:

1. Log in to the Tehama Web UI.
2. Click on the ROOMS tab.
3. Click on the name of the Room you want to access. You will see the Room's interface. The tabs you will see depends on the role you have within your organization.
4. Click on the CONNECTION tab.
5. Click on the STATUS sidebar item.
6. Look for the table of DNS resolvers close to the bottom of the STATUS page. There will be one entry for each DNS resolver you have added to your Room. (If you do not see the table then you do not have permission to see the DNS Resolver info in this Room - and remember that the table is only visible when 'Network Access' is set to 'Multi-Path'.)

Each entry provides:

Add a DNS Resolver in a Multi-Path Room

The instructions to add a new DNS resolver are:

• Add a DNS Resolver

Manage a DNS Resolver in a Multi-Path Room

The actions to manage a DNS resolver are:

• View DNS Resolver Details
• Edit a DNS Resolver
• Delete a Domain from a DNS Resolver
• Delete a DNS Resolver