This workshop will guide you through the GUI based deployment and configuration of the VMware Per App Tunnel and Content Gateway Components on Unified Access Gateway OVF in the vSphere 6.0 Web Client.

The manual provides steps for deploying the front end server in the DMZ, then the

1. Go to https://vc.corp.local
2. Enter username "[email protected]"
3. Enter password "VMware1!"
4. Click Login

1. Click on 'VMs and Templates' icon
2. Right Click on the domain 'vc.corp.local'
3. Select Deploy OVF Template to launch the deployment wizard

1. Select Local File
2. Browse to the UAG Resources folder on your Desktop
3. Select the euc-unified-access-gateway###.OVA file
4. Click Open
5. Click Next

Update Name (e.g. "FrontEndUAG")

Select Nested_Datacenter

Click Next

Select Single NIC

The Dropdown menu includes a short descrtiption of what the funciton for each respective Network Interface is if using more than 1 NIC. Customers who require multiple NICs typically follow this same protocol for other web applicaiton servers  throughout their oganziation.

Update visrtual disk format to Thin Provision

Ensure VM Storage Policy set to Datastore Default

Click Next

Select DMZ_DPortGroup for the Destination of each Source

Click Next

Note: The Protocol settings automatically update when you select a different Destination. These settings are pulled from existing Network Protoocl Profile Settings found in

1. Enter STATICV4 for IPMode
2. Skip forward rules field, not needed for our network configuration
3. Enter 192.168.0.20 for the IPv4 address
4. Scroll down

Enter 192.168.0.2 for DNS Server Address

Skip Overriding Netmask & Overriding IPv6 Prefix fields

Enter 192.168.0.1 for the Default Gateway

Enter a custom name for your UAG Appliance (e.g. UAGDMZ)

Ensure TLS Port 443 Sharing is unchecked

Scroll Down

1. Ensure Join CEIP is unchecked*
2. Enter VMware1! for the root user password
3. Reenter to confirm
4. Enter VMware1! for the admin account password
5. Reenter to confirm
6. Click Next

Note: When deploying AUG for a cusotmer, the Join CEIP otpoin should always be enabled. However, for the lab setup we do not need to collect data from CEIP and thus will uncheck this option so as not to send back information to CEIP for our temporary lab setup.

Review all the settings entered in the Network Mapping and Properties to ensure there are no errors.

Check the box to Power on after deployment

Click Finish

Browse to https://192.168.110.20:9443/admin

Click Show Advanced

Accept Security Excepion and Click Proceed to 192.168.110.20 (unsafe)

1. Enter 'admin' for username
2. Enter 'VMware1!', the password created for the Admin API in Deploy OVF Wizard
3. Click Login

Note: If the login fails, log on to UAG with root accoutn and run the commands below to reset the password. If the commands are not successful, you must redeploy the server and recreate the password. .