---
title: Adding a Built-in VPN Connector
slug: kronpam-reference-guide-3-8-0/adding-a-built-in-vpn-connector
docTags: 
createdAt: 2024-03-20T10:59:04.277Z
---

Tenants who do not have an OpenVPN license and want to use Kron PAM’s secure connection can use its Built-in VPN option (either outbound or inbound).  

The outbound connection refers to the path that begins from Kron PAM and ends at the Connector. If the outbound connection option is selected, the connector located at the customer site must be accessed through a UDP port via its external IP address.

The Inbound Built-in VPN option refers to the connection established from the remote connector node to Kron PAM.

Connector installation packages are uploaded to Kron PAM’s Filerepo. The Kron support team can provide the required information to access installation files. Please refer to the Tenant Connector Reference Guide.

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/Wwj7qL21pKjCV5S93ZFY4_image.png "The Connector Type Selection Screen")

To create an Outbound Built-In VPN Connection:

1. Navigate to **Tenant Connector.**
2. Open the **Connector Sites **tab.
3. Click the **Add** button, enter the remote site name and description, and click **Save.**
4. Open the **Connector Node** tab.
5. Click the **Add** button and select the **Outbound** Built-In VPN option.
6. Select the remote site name, enter the node name, tunnel port, connection port, connector node external IP, and the SSH RSA Key created during the connector node installation, and click **Save.**

::Image[]{src="https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/XA1a1Brklq4Ttf-sfCSuY_image.png" size="72" width="945" height="909" position="center" caption="Outbound Built-In VPN Configuration Screen" showCaption="true"}

To create an Inbound Built-In VPN Connection:

1. Navigate to **Tenant Connector.**
2. Open the **Connector Sites **tab.
3. Click the +**Add **button, enter the remote site name and description, and click **Save.**
4. Open the **Connector Node** tab.
5. Click the **Add **button and select the **Inbound** Built-In VPN option.
6. Select the remote site name, enter the node name, tunnel port, and Kron PAM Instance External IP, and click **Save.**

::Image[]{src="https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/-UkibtYbqt-be-hR7yxXo_image.png" size="70" width="908" height="636" position="center" caption="Inbound Built-In VPN Configuration Screen (first step)" showCaption="true"}

- After the node is added to the GUI, a configuration file is created.
- The user can download the tunnel configuration file. The tunnel creation script on the connector node (connector\_node\_setup.sh) gets the tunnel\_setup.txt file as input and creates a tunnel between the connector and Kron PAM.

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/cMtaSVk3vfWdVrDkArRIM_image.png "Download the Tunnel Setup File (second step) ")