The VPN connection enables you to access your machine as if you are on-site. The VPN connection between your computer and your edge gateway can be seen as two separate VPN connections:

Your edge gateway's VPN connection to IXON Cloud is, by default, always enabled. However, you can disable it for moments you don't need it and then enable it again for moments that you do need it.

You can toggle the VPN connection in different ways:

• Remotely, using the IXON Cloud
• Locally, using the edge gateway's digital input
• Locally, using the SecureEdge / SecureEdge Pro's touchscreen
• Locally, using the IXagent's command line

Remotely, using the IXON Cloud

You can easily disable and enable a device's VPN connection using the IXON Cloud.

• Go to the IXON Cloud Fleet Manager app, which is accessible from the Apps menu in the top right corner if you are currently in a different IXON Cloud app.
• Open the main menu , go to Devices  , and select the concerning device.
• Expand the Network  options and go to [VPN].
• Toggle [Use VPN] in the VPN access section.

Locally, using the edge gateway's digital input

The end user may want to have local control over the VPN connection. This is possible using the edge gateway's digital input (DI). It enables you to locally disable/enable the VPN connection with the use of a switch (giving a high/low signal to the DI).

When the edge gateway's VPN connection is turned off locally, you are not able to turn it back on remotely. This can only be done locally.

• Electrical details
• Configuration

Electrical details

Configuration

The digital input can only be configured locally with the use of a configuration file and cannot be remotely changed through the IXON Cloud.

If you have never created a configuration file before, make sure to first view one of our "Connect your edge gateway to the IXON Cloud"-guides. Tip: if you have a SecureEdge or SecureEdge Pro, this setting can also be configured on the screen at Network > Local VPN control.

• Go to the IXON Cloud Fleet Manager app, which is accessible from the Apps menu in the top right corner if you are currently in a different IXON Cloud app.
• Open the main menu , go to Tools , and click [Start configuration] in the "Router config-file"-section.
• Follow the steps and make sure you use the same settings as the edge gateway's current settings.
• At the "Internet"-step, expand the "Local control over remote accessibility"-option and select to disable the VPN connection when the digital input is either high or low.
• Continue following the steps and make sure you use the same settings as the edge gateway's current settings.
• At the last step, click [Download file] to download the generated file, called ixrouter.conf, and save the file to the root directory of a USB flash drive. You may exit the configuration tool by clicking the X in the upper left corner.

• Insert the USB stick into the edge gateway and power it on.

Locally, using the SecureEdge / SecureEdge Pro's touchscreen

The end user may want to have local control over the VPN connection. This is possible using the SecureEdge / SecureEdge Pro's digital input (DI). It enables you to locally disable/enable the VPN connection with the use of a switch (giving a high/low signal to the DI).

When the SecureEdge / SecureEdge Pro's VPN connection is turned off locally, you are not able to turn it back on remotely. This can only be done locally.

• Electrical details
• Configuration

Electrical details

Please see the SecureEdge / SecureEdge Pro's installation manual for the digital input's electrical specifications.

Configuration

The digital input can only be configured locally on the screen and cannot be remotely changed through the IXON Cloud.

1. Tap the screen of the deviceand swipe left  to open the device info and settings.
2. Tap on Network, then on Local VPN control. and select the desired option:

   Option	Description
   DI low: VPN off	The VPN connection will be disabled so long as the digital input is low/off.
   DI high: VPN off	The VPN connection will be disabled so long as the digital input is high/on.
   Disabled	The signal on the digital input does not affect the VPN connection.

Locally, using the IXagent's command line

You can control the VPN connection in the IXON Cloud, but you can also disable the VPN connection directly by sending a command to the IXagent's localhost.

Please use the following commands to start or end the VPN connection between the IXagent and the IXON Cloud. 

• Start a VPN connection between the the IXagent and the IXON Cloud:

  echo -en "CMD openvpn connect\r\n" | nc localhost 9240

• End a VPN connection between the the IXagent and the IXON Cloud:

  echo -en "CMD openvpn disconnect\r\n" | nc localhost 9240

Additionally, you can choose whether you want to start a VPN connection automatically when you start the IXagent. Please use the following commands for allowing or disallowing automatic start for the IXagent's VPN connection.

• Allow the IXagent to automatically set up a VPN connection when it starts:

  echo -en "CMD openvpn \"autoconnect on"\r\n" | nc localhost 9240

• Disallow the IXagent to automatically set up a VPN connection when it starts:

  echo -en "CMD openvpn \"autoconnect off"\r\n" | nc localhost 9240