Configure Okta Advanced Server Access and Okta Privileged Access With Multiple IP Addresses on the Target Host

When the environment is complex, or Internet Protocol (IP) addresses frequently change, Okta Advanced Server Access (ASA) or Okta Privileged Access (OPA) can use the interface name instead of a specific IP address. Specify the AccessInterface configuration option in the sftd.yaml file instead of the AccessAddress option during the agent installation.

• Okta Identity Engine (OIE)
• Okta Classic Engine
• Advanced Server Access (ASA)
• Okta Privileged Access (OPA)

How is the interface configured for hosts with multiple IP addresses?

Configure the interface for hosts with multiple IP addresses or unknown IP addresses by reviewing the documentation and specifying the interface name.

1. Review the Okta Advanced Server Access AccessInterface documentation or the Okta Privileged Access AccessInterface documentation to understand how the configuration parameter specifies the interface that clients use when connecting to the host.
2. Use the AccessInterface configuration parameter when installing the agent to specify which interface connects via ASA or OPA.
3. Name the interface so that ASA or OPA uses a string match to locate the existing interface on the target host.