Skip to main content

How to configure IAP in GCP

 Create a firewall rule To allow IAP to connect to your VM instances, 

create a firewall rule that: applies to all VM instances that you want to be accessible by using IAP. allows ingress traffic from the IP range 35.235.240.0/20. 

This range contains all IP addresses that IAP uses for TCP forwarding. allows connections to all ports that you want to be accessible by using IAP TCP forwarding, for example, port 22 for SSH and port 3389 for RDP.


Command:


Firewall for IAP

gcloud compute firewall-rules create allow-rdp-ingress-from-iap \
  --direction=INGRESS \
  --action=allow \
  --rules=tcp:3389 \
  --source-ranges=35.235.240.0/20


Tunnel Command

gcloud compute start-iap-tunnel INSTANCE_NAME 3389 \
    --local-host-port=localhost:LOCAL_PORT \
    --zone=ZONE


gcloud compute start-iap-tunnel nshcloudlabs-instance-group-1-9v0v 3389 --local-host-port=localhost:3389 --zone=us-central1-a     


Permissions for user:

roles/iap.tunnelResourceAccessor




References:

https://cloud.google.com/iap/docs/using-tcp-forwarding





Labels:

Comments

Post a Comment

Popular posts from this blog

Troubleshooting WAF, CDN, and Load balancer

 Troubleshooting issues involving a Web Application Firewall (WAF), Content Delivery Network (CDN), and Load Balancer (LB) can be complex. Here is a step-by-step guide, including testing methods and relevant commands to isolate problems at each level. ### Step 1: Check Basic Connectivity 1. **Ping the Website**:    ```sh    ping example.com    ``` 2. **Check DNS Resolution**:    ```sh    nslookup example.com    ``` ### Step 2: Verify Load Balancer 1. **Direct Access to Load Balancer**:    Modify `/etc/hosts` to bypass CDN and WAF, pointing directly to the load balancer’s IP.    ```sh    sudo nano /etc/hosts    ```    Add the line:    ```    LB_IP example.com    ```     2. **Test HTTP Response**:    ```sh    curl -I http://example.com    ```    Check headers and status code to verify the load bal...
Post a Comment
Read more

Soal dan pembahasan LKSN ITNSA

Berikut adalah koleksi soal-soal ITNSA dan beberapa website yang memberikan pembahasan pada event perlombaaan LKS SMK Nasional bidang lomba IT Network Systems Administration. 2014 Palembang Di tahun ini ada 1 soal packet tracer. Di website dibawah ini diberikan juga cara pembahasannya. https://agussas.wordpress.com/2015/04/02/review-soal-lks-nasional-it-network-23-packet-tracer-challenge/ Semua soal:  https://www.dropbox.com/sh/l90zyke2ib5msgv/AAA3kPOFo-zEn4wPOW4a3iMwa?dl=0 dan https://drive.google.com/file/d/18lDhtMjAnPAhkfOJ6uFHsC5j6ycg3K4I/view Pembahasan juga dalam bentuk video di youtube:  https://www.youtube.com/watch?v=8QML594nQBU 2015 Banten Pembahasan:   https://www.youtube.com/watch?v=quDbpC2xSfQ Soal:  https://drive.google.com/file/d/1B09IYfdoGENBL3txSQodpptG1zdQxBWI/view 2016 Malang Soal:   https://drive.google.com/file/d/13-2bRtb5IXO9vxAhLfhghZbDXeUzD0FI/view Pembahasan:   https://www.youtube.com/watch?v=zmUSUZguH24 20...
2 comments
Read more

Daftar juara ITNSA LKS Nasional SMK

Daftar juara ITNSA LKSN SMK *List juara 1: 2008 Jawa Tengah 2009 Banten 2010 DKI Jakarta 2011 Jawa Barat 2012 DI Yogyakarta 2013 Jawa Tengah 2014 Banten 2015 Bali 2016 Kalimantan Selatan 2017 Jawa Barat 2018 Banten 2019 Kepulauan Riau 2020 Banten 2021 Jawa Barat 2022 Banten 2023 Banten 2024 Banten 2025 Banten *Data diatas dikumpulan dari hasil browsing di google
Post a Comment
Read more