• Administrator overview
• Managing users and permissions
  • User roles and access permissions
  • Creating users
  • Editing users
  • Unlocking a user account
  • Resending a user activation link
  • Deleting or deactivating users
  • Using groups
  • Managing departments
  • Managing passwords and password policies
  • Setting account-wide access policies
  • Changing a resource owner
  • Using Single Sign-On (SSO)
    • Using Single Sign-on (SSO) with Azure Active Directory (AAD)
    • Configuring an ADFS claim rule for SSO
• Managing account-wide settings
  • Adding container registries
• Managing public IP addresses
• Managing WANs
  • Overview: VPNs
    • Creating a VPN
      • VPN configuration parameters
        • AWS VPC: VPN configuration example
        • Azure VPN: VPN configuration example
        • Cisco ASA: VPN configuration example
        • Cisco IOS: VPN configuration example
        • Juniper SRX: VPN configuration example
        • pfSense: VPN configuration example
        • strongSwan: VPN configuration example
  • Overview: Skytap on Azure ExpressRoute connections
    • Creating a Skytap on Azure ExpressRoute connection
    • Creating a customer-managed Skytap on Azure ExpressRoute connection
  • Testing the WAN
    • Troubleshooting VPN test failures
  • Connecting an environment network to a WAN
  • Configuring WAN access controls
  • Editing an existing WAN connection
  • Disable a WAN
• Managing Metered RAM and storage usage
  • How usage is calculated
  • Viewing current usage and enabling pay-as-you-go capacity
  • Reserved capacity for Skytap on Azure
  • Reserved capacity for Skytap on IBM Cloud
  • Setting usage limits
  • Setting up notifications
  • VM pinning
• Reporting overview
  • Viewing and exporting user information
  • Viewing and exporting group information
  • Generating department reports
  • Generating audit reports
    • Configuring the webhook service for audit data
  • Viewing usage data
    • Using labels for in-depth reporting
    • Creating usage label categories
    • Configuring the webhook service for usage data
  • Enabling other users to generate reports
• Security best practices
• Other best practices
• Sharing templates with users in other Skytap accounts
• Finding the source environment from a sharing portal URL
• Including your logo in the Skytap interface

Testing a WAN

After you create a VPN connection or Private Nework Connection with ExpressRoute, test it with the Skytap WAN Test tool.

Before you begin

1. If the WAN connection is enabled in Skytap, disable it.
2. Enable your remote WAN.
3. Enabling logging on the remote WAN to capture any potential error messages.

Test the WAN

To test the WAN

1. Click Test.

2. Enter an IP address and remote port number from a machine on one of the included remote subnets. Ideally, enter the IP address of a machine that can respond to pings.

   If you don’t provide a remote port, Skytap tests the WAN, but skips the TCP port connectivity test.

   

3. Click Test Connection.
4. Skytap performs up to four connectivity tests and displays the results. If Phase 1 and Phase 2 pass, the WAN is properly configured and you should continue to Further VPN testing with Skytap environments. If Phase 1 and Phase 2 fail, see Troubleshooting VPN test failures.

Further WAN testing with Skytap environments

To check that traffic can flow between both local and remote subnets, use a VM to test the various protocols you want to use over the WAN (for example, ping, remote desktop, SSH, SMB):

1. Click Enable to begin sending traffic through the WAN.
2. Connect a Skytap environment to the VPN.
3. Test each protocol with a running machine on one of the included remote subnets. For example, to perform a ping test from Skytap to the machine on the remote network, access the VM command line, and type ping followed by the IP address on the other side of the VPN. You can also ping by hostname if you have an active DNS server as part of your WAN. If the test is successful, a series of replies indicating that packets were sent and received displays.

Test results and meaning

If the tests pass, the WAN is ready to use. If the tests fail, this can indicate several issues including:

• The network routing isn’t properly configured. Review network firewall logs to confirm traffic and routes.
• The VM operating system firewall is blocking traffic. Many Skytap VMs have their firewalls enabled by default; temporarily disable the firewall before continuing, or allow an ICMP echo function through the firewall.
• The service itself may not be responsive. Check if the service is functional by accessing it locally or within the same network.

For more information, see Troubleshooting VPN issues.