Installation Guides
Tenant Connector

Tenant Connector Inbound Installation

The Tenant Connector Inbound Option
The Tenant Connector Inbound Option


Check the Secure Reboot Enabled before the installation by running mokutil --sb-state command. In case the secure reboot is enabled, it might cause an error during the WireGuard installation. Please disable it to continue the installation!

If server-level firewall rules are desired to be applied, the user must allow the required ports in the Tenant Connector Inbound environment. sudo firewall-cmd --add-port=443/tcp --permanent sudo firewall-cmd --add-port={selected-wireguard-port(e.g., 10000)}/udp --permanent sudo firewall-cmd –reload

The following steps should be read carefully to successfully install Tenant Connector Inbound on the machine:

  • If you install MTC Inbound on Kron PAM v.3.7.0 or earlier versions, you need to update inbound_tunnel_setup.sh file under /pam/gui/netright/scripts/. You can obtain this file from the support team. You can skip this step if you install MTC Inbound on Kron PAM v3.7.0 or later.
  • Download the installation script on the machine that is used for Tenant Connector Inbound. The support team can provide the installation script. After downloading the script, unzip the installation script on the machine. The user can use the unzip command to extract the files from the installation script file.
Linux CLI: [root@ connector ~]# unzip RAP_MTC_ONCLOUD-1.2.0.zip
Unzipping the zipped installation script files
Unzipping the zipped installation script files

  • Navigate to the cloud directory:
Linux CLI: [root@connector~]# cd cloud
Navigating the cloud directory
Navigating the cloud directory

  • Run the configuration script:
Linux CLI: [root@connector~cloud]# sh configure.sh
 Starting the installation script
Starting the installation script


In case you need to set script permissions to execute it, you need to run the chmod +x configure.sh command.

You should have root privileges to run this script.

  • The installation script should be restarted after the forced reboot. The installation script asks the user either: to install MT Outbound Connector on the cloud, or to install MT Inbound Connector, or to install the Secure Remote Access Portal (RAP) module on the cloud. (The last option is not related to MT Connector)
  • To continue with the Tenant Connector Inbound installation, the user should select the second option by entering 2 and pressing the Enter key.
Selecting Install MT Cloud - Inbound
Selecting Install MT Cloud - Inbound

  • The installation script asks the user to upload the tunnel setup config file (tunnel_setup.txt), which can be obtained in the process of adding an inbound connector node on the Web GUI, to the /opt/pam/connector directory on the connector machine. So, without closing the current installation, the user should open a new SSH session and upload the tunnel setup config to /opt/pam/connector directory, return to the first session, and press the Enter key.
Uploading the tunnel setup config file
Uploading the tunnel setup config file

  • Once the Installation is completed, leaving … message is seen on the screen, the installation is finalized.
The end of the installation script
The end of the installation script