---
title: Adding a Built-in VPN Connector
slug: kronpam-reference-guide-3-9-0/adding-a-built-in-vpn-connector
docTags: 
createdAt: 2026-10-11T12:24:57.623Z
---

Tenants can use Kron PAM’s Built-in VPN Connector (either outbound or inbound option) to access their secure remote data center via Kron PAM.

The outbound connection refers to the path that begins with the Kron PAM server and ends with the Kron PAM Connector. If the outbound connection option is selected, the Kron PAM connector located at the customer site is accessed through a UDP port utilizing the external IP address.

The Inbound Built-in VPN option refers to the connection established from the remote Kron PAM Connector node to Kron PAM server.

Kron PAM Connector installation packages are uploaded to Kron PAM’s Filerepo. The Kron support team provides the required information to access installation files.  

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/iHv4NEbgHM5IGFxu3X04Y_image.png "Figure - The Kron PAM Connector Type Selection Screen")

To create an **Outbound** **Built-In VPN Connection:**

1. Navigate to **Tenant Connector.**
2. Open the **Connector Sites** tab.
3. Click the +**Add **, enter the remote site name and description, and click **Save.**

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/WoY8FOQcAkkdr2dDDjaPH_image.png "Figure – Connector Sites tab")

4. Open the **Connector Node** tab.
5. Click the +**Add**  and select the **Outbound** Built-In VPN option.
6. Select the remote site name, enter the node name, tunnel port, connection port, connector node external IP, and the SSH RSA Key created during the connector node installation. 
7. Click** Save.**

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/uCeBAJMqBBn2KLlTrLLcp_image.png "Figure – Outbound Built-In VPN Configuration Screen")

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/Lk5OVa_1iqwGFMFV1aPMh_image.png)

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/L0QNXy0kJ4ltS2aMxKKGz_image.png "Figure – Outbound Built-In VPN Connector Node List")

To create an Inbound Built-In VPN Connection: 

1.      Navigate to **Tenant Connector. **

2.      Open the **Connector Sites** tab. 

3.      Click the +**Add** button, enter the remote site name and description, and click **Save**. 

4.      Open the **Connector Node** tab. 

5.      Click the** +Add** button and select the **Inbound Built-In VPN** option. 

6.      Select the remote site name, enter the node name, tunnel port and Kron PAM Instance **External IP**, and click **Save.** 

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/T_BLb4HxXtAqYj4blkOn5_image.png "Figure – Inbound Built-In VPN Configuration Screen (first step)")

7.      After the node is added to the GUI, a configuration file is created.

8.      The user can download the tunnel configuration file. The tunnel creation script on the connector node (connector\_node\_setup.sh) gets tunnel\_setup.txt file as an input and creates tunnel between the connector and Kron PAM.

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/9X1c_WoZF8U3k3FJF_dIN_image.png "Figure - Download the Tunnel Setup File (second step) ")

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/TpdNBhoPbX0_WLETqky6l_image.png)

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/I9uaFelti3hahx63e3VtN_image.png "Figure – Inbound Built-In VPN Connector Node List")

:::hint{type="info"}
After changing the port number on either inbound or outbound installation, a message pops us and says "The Tunnel Port (UDP) has been changed to $\{new-value-of-port}. Please update the wireguard configurations/firewall allowances with the new port value on the connector device!"
:::