{"id":2068,"date":"2021-04-27T19:38:26","date_gmt":"2021-04-27T16:38:26","guid":{"rendered":"https:\/\/upcloud.com\/global\/us\/resources\/tutorials\/secure-access-upcloud-perimeter-81\/"},"modified":"2026-04-23T14:30:16","modified_gmt":"2026-04-23T13:30:16","slug":"secure-access-upcloud-perimeter-81","status":"publish","type":"tutorial","link":"https:\/\/upcloud.com\/global\/resources\/tutorials\/secure-access-upcloud-perimeter-81\/","title":{"rendered":"How to set up secure access to UpCloud with Perimeter 81"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">Perimeter 81 is a Zero Trust Network as a Service that helps you to secure your team\u2019s network, including valuable local and cloud resources. Incorporating the highest standards of Zero Trust Security, Perimeter 81 users can create adaptive least-privilege access policies based on device, identity, role, and location.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Accordingly, authorised employees can be granted access to only the corporate resources they need. IT administrators can more easily monitor activity across the network and implement a full range of network security features that are easy to scale with organisational growth. The combination of this reduced attack surface and cloud-friendly approach makes it that much more difficult for bad actors to breach your network, and also saves significant IT overhead.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">What you\u2019ll need<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Creating a secure Perimeter 81 network to connect to your UpCloud infrastructure, you\u2019ll naturally need accounts on both services. Here is a short description of the requirements on each platform.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Perimeter 81<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>A Perimeter 81 private gateway \u2013 this will establish your Perimeter 81 network which will be converged with your UpCloud VLAN<\/li>\n\n\n\n<li>A user license is needed for each team member that will require access to the converged Perimeter 81 secure network<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">UpCloud<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>A Cloud Server instance with Ubuntu or CentOS on UpCloud \u2013 this will serve as the secure connection point for a site to site tunnel using Perimeter 81\u2019s wireguard connector.<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">Register on Perimeter 81 and create your first network<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">To get started, <a href=\"https:\/\/app.perimeter81.com\/workspace\/create\/email?utm_source=Partner&amp;utm_medium=UpCloud&amp;utm_campaign=Create_Workspace\" target=\"_blank\" rel=\"noopener\">register on Perimeter 81<\/a> to create an account. You will also need to purchase <a href=\"https:\/\/www.perimeter81.com\/pricing?utm_source=Partner&amp;utm_medium=UpCloud&amp;utm_campaign=Perimeter81_Pricing\" target=\"_blank\" rel=\"noopener\">one of the pricing plans<\/a>. All plans will enable setting up secure access to UpCloud but come with different security features and capabilities.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Once a license has been applied to your account, you will be able to deploy a Perimeter 81 network.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">1. Select <strong>Create Network<\/strong> on the Networks tab.<br><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-20790\" src=\"https:\/\/upcloud.com\/media\/perimeter81-networks.png\" alt=\"Perimeter 81 networks\" width=\"1200\" height=\"600\" \/><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">2. Fill in the following:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>\n<ul class=\"wp-block-list\">\n<li><strong>Network Name<\/strong>: A name for the Network you are building. For example, HQ, Finance, or Staging.<\/li>\n\n\n\n<li><strong>Icon<\/strong>: Use the default or select an icon of your choice.<\/li>\n\n\n\n<li><strong>Region<\/strong>: Region is the physical location where the gateway will be deployed. Choose one or more regions from the available regions listed (Europe, North America, East Asia, Australia, and Israel).<\/li>\n\n\n\n<li><strong>Gateways<\/strong>: The number of gateways you want to deploy in a particular region. Having multiple gateways enables high availability and a better load balance. The number of gateways should not exceed the number of available licenses.<\/li>\n\n\n\n<li><strong>Network Tags<\/strong>: Use tags to help identify the different Networks between teams and use cases.<\/li>\n\n\n\n<li><strong>Subnet<\/strong>: Optional. If the subnet is not specified, it will receive a default value of 10.255.0.0\/16.<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/upcloud.com\/media\/perimeter81-create-network.png\" alt=\"Perimeter 81 creating network\" class=\"wp-image-20785\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">3. When done, click the <strong>Create Network<\/strong> button to confirm.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/upcloud.com\/media\/perimeter81-deploying-network.png\" alt=\"Perimeter 81 deploying network\" class=\"wp-image-20786\" \/><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\">Deploying new Linux Cloud Server<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Next, go ahead and deploy a new Cloud Server with Ubuntu 20.04 or 18.04 by logging in to your <a href=\"https:\/\/hub.upcloud.com\/deploy\" target=\"_blank\" rel=\"noopener\">UpCloud Control Panel<\/a> and clicking Deploy server. If you are new to UpCloud, you can get started with the <a href=\"https:\/\/signup.upcloud.com\/\" target=\"_blank\" rel=\"noopener\">free trial by signing up<\/a>.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The deployment page shows a number of options for customizing your new Cloud Server.<\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li>Choose the server location from the available data centres<\/li>\n\n\n\n<li>Pick a configuration, the $10 per month plan is a good starting point<\/li>\n\n\n\n<li>Select your operating system, e.g. Ubuntu 20.04 or 18.04<\/li>\n\n\n\n<li>Add any SSH keys you want to use<\/li>\n\n\n\n<li>Give your server a hostname and description<\/li>\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">Deploy!<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Configuring the Perimeter 81 connector<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Now that you have a new Cloud Server up and running, continue by setting up a Perimeter 81 connector.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Head over to your <a href=\"https:\/\/app.perimeter81.com\/sign-in\" target=\"_blank\" rel=\"noopener\">Perimeter account<\/a> and follow the steps below.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">1. Under <strong>Networks<\/strong> in the Management Platform on the left side, select the name of the network in which you\u2019d like to set the tunnel. Locate the desired gateway, click the three-dotted menu (\u2026) and select <strong>Add Tunnel<\/strong>.<br><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-20778\" src=\"https:\/\/upcloud.com\/media\/perimeter81-add-tunnel.png\" alt=\"Perimeter 81 adding tunnel\" width=\"1200\" height=\"560\" \/><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">2. Select <strong>Perimeter 81 Connector<\/strong>, then select <strong>Continue<br><\/strong><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-20792\" src=\"https:\/\/upcloud.com\/media\/perimeter81-select-connector.png\" alt=\"Perimeter 81 selecting connector type\" width=\"1200\" height=\"800\" \/><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">3. Make sure you have a Windows Server 2016, Ubuntu 16.04\/18.04\/20.04 LTS, CentOS\/REHL7 or equivalent instance set within your UpCloud Cloud Server, then select <strong>Next<\/strong>.<br><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-20791\" src=\"https:\/\/upcloud.com\/media\/perimeter81-requirements.png\" alt=\"Perimeter81 checking requirements\" width=\"1200\" height=\"800\" \/><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">4. Enter a <strong>Name<\/strong> of your choice, and the <strong>Endpoint<\/strong>, meaning the IP address from which the Linux server in UpCloud is connecting to the internet, accompanied by the correlating <strong>Subnet<\/strong> range (the values in the attached image are for demonstration only).<br><strong>Note<\/strong>: You can query the <strong>Endpoint<\/strong> by executing the following command in the <strong>Linux<\/strong> terminal of your Cloud Server.<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">dig +short myip.opendns.com @resolver1.opendns.com<\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">Then click <strong>Next<br><\/strong><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-20783\" src=\"https:\/\/upcloud.com\/media\/perimeter81-create-connector.png\" alt=\"Perimeter 81 creating connector\" width=\"1200\" height=\"800\" \/><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">5. Select <strong>Confirm<\/strong> and <strong>Apply<br><\/strong><strong><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-20780\" src=\"https:\/\/upcloud.com\/media\/perimeter81-confirm-connector.png\" alt=\"Perimeter 81 confirming connector\" width=\"1200\" height=\"900\" \/><\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">When done, sit back and relax until the deployment is finished. This may take a few minutes.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Configuring the connector on your Cloud Server<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Make sure the machine that will be hosting the connector meets the following requirements:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Ubuntu<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Please see attached the prerequisites for the machine<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Your kernel is up to date<\/li>\n\n\n\n<li>The following packages are installed:<br><pre>sudo apt install curl dig software-properties-common<\/pre><\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>CentOS\/REHL<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Please see attached the prerequisites for the machine<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Your kernel is up to date<\/li>\n\n\n\n<li>The following packages are installed:<br><pre>sudo yum install curl bind-utils<\/pre><\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Note that whenever you upgrade your kernel, make sure to reboot the server afterwards.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Now, granted your Cloud Server meets the requirements, setting up the Perimeter 81 connector is a simple task.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">1. First, check that you can see the connector under the <strong>Network<\/strong> section. Select the three-dotted menu (\u2026) besides its icon, then select <strong>Configure<\/strong>.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/upcloud.com\/media\/perimeter81-configure-tunnel.png\" alt=\"Perimeter 81 configuring tunnel\" class=\"wp-image-20779\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">A similar window will open (the displayed command varies from connector to connector)<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">2. Copy the command.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/upcloud.com\/media\/perimeter81-tunnel-script.png\" alt=\"Perimeter 81 tunnel script\" class=\"wp-image-20794\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">3. Open the <a href=\"https:\/\/upcloud.com\/global\/docs\/guides\/connecting-to-your-server\/\" target=\"_blank\" rel=\"noopener\">Linux Terminal as Root user using SSH<\/a> and run the copied command (select Yes at Stage 4 for access-only or No for ). The command underneath is only an example, make sure you use the command displayed at your Perimeter tunnel configuration.<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">curl -s https:\/\/api.perimeter81.com\/api\/networks\/rChF1Qow2W\/tunnels\/1t4pcLDhC4\/wireguard-config\/&lt;key&gt; | sudo bash<\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">4. Then follow the instructions during the connector installation. Below is an example of the install command and the steps in the installation script.<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">PROCEED? [y\/N]\n\n1. Detect environment\n &gt; Detected Ubuntu OS: Ubuntu 20.04.1 LTS \n\n2. Install wireguard\n &gt; Repository configured    \n &gt; Successfully installed wireguard\n\n3. Configure connector                            \n &gt; Provide interface name for wireguard connector [wg0]: \n &gt; Interface will be created\n\n4. Choose operation mode\n   Connector can be configured in the accessor mode in which it will allow \n    devices to access in the local network remotely without deploying on a router. \n   This is the default.\n &gt; Do you want to enable accessor mode? [Y\/n] \n\n &gt; The following IPs are configured on usable interfaces: \n 1. 94.237.125.107\/23\n 2. 172.16.1.2\/24\n &gt; Provide source ip address to use for accessor mode (0 for manual input) [1]: \n\n5. Start and enable connector\nCongratulations! Wireguard connector has been successfully configured and is up and running!<\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">Your Cloud Server should now be connected to your Perimeter 81 network. To check you might need to reload the Perimeter control panel to update the status icons.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/upcloud.com\/media\/perimeter81-connection-up.png\" alt=\"Perimeter 81 tunnel connected\" class=\"wp-image-20782\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Afterwards, you will likely want to try connecting your Cloud Server through the Perimeter network. Continue to the next section for how to do just that.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Verifying the connector is up<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The Perimeter 81 enables users to securely connect to their cloud resources with minimal effort. All you need is to install one of their client applications on the local device of your choice and log in.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">1. Start by downloading the Perimeter 81 client from the <strong>Devices &gt; Download<\/strong> section at your Perimeter management panel.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/upcloud.com\/media\/perimeter81-download-client.png\" alt=\"Perimeter 81 downloading client\" class=\"wp-image-20788\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">2. Once you\u2019ve installed the Perimeter 81 client, enter your workspace URL and then use your email and password to sign in.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/upcloud.com\/media\/perimeter81-desktop-client.png\" alt=\"Perimeter 81 desktop client\" class=\"wp-image-20787\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/upcloud.com\/media\/perimeter81-sign-in-1.png\" alt=\"Perimeter 81 signing in\" class=\"wp-image-20808\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">3. Connect to your Perimeter 81 Network with the designated app. You can do it on any machine.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/upcloud.com\/media\/perimeter81-connect-gateway.png\" alt=\"Perimeter 81 connecting to network\" class=\"wp-image-20781\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/upcloud.com\/media\/perimeter81-network-connected.png\" alt=\"Perimeter 81 network connected\" class=\"wp-image-20789\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">4. Then with the Perimeter network connected, open a Terminal and try pinging your Cloud Server. Use any of the IP addresses on your Cloud Server you connected to your Perimeter network.<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">ping &lt;cloud-server-ip-address&gt;<\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">In this configuration, all network traffic is routed through your Perimeter 81 gateway.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">If the ping command fails, please make sure that port UDP\/8000 is not blocked in your firewall\/router, and that you went through all the steps.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">If the issue persists, please contact our support services attaching the logs. These can be found at the following paths:<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">##Configuration file\n\/etc\/wireguard\/wg0.conf<\/pre>\n\n\n\n<pre class=\"wp-block-preformatted\">##Connection logs\n\/tmp\/p81-wg-connector.log<\/pre>\n\n\n\n<pre class=\"wp-block-preformatted\">systemctl status wg-quick@wg0<\/pre>\n\n\n\n<h2 class=\"wp-block-heading\">Summary<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Congratulations, you should now have a fully functional secure network between your local system and cloud resources up and running. Feel free to explore the Perimeter management panel further to learn the ins and outs of the services and connect all of your Cloud Servers.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Perimeter 81 makes securing the connection to remote resources extremely easy. Simply setting up a connector for your Cloud Servers and running the Perimeter 81 client, you can create the network access policies just right for your company.<\/p>\n","protected":false},"author":54,"featured_media":20778,"comment_status":"open","ping_status":"closed","template":"","community-category":[223,259,253],"class_list":["post-2068","tutorial","type-tutorial","status-publish","has-post-thumbnail","hentry"],"acf":[],"_links":{"self":[{"href":"https:\/\/upcloud.com\/global\/wp-json\/wp\/v2\/tutorial\/2068","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/upcloud.com\/global\/wp-json\/wp\/v2\/tutorial"}],"about":[{"href":"https:\/\/upcloud.com\/global\/wp-json\/wp\/v2\/types\/tutorial"}],"author":[{"embeddable":true,"href":"https:\/\/upcloud.com\/global\/wp-json\/wp\/v2\/users\/54"}],"replies":[{"embeddable":true,"href":"https:\/\/upcloud.com\/global\/wp-json\/wp\/v2\/comments?post=2068"}],"version-history":[{"count":2,"href":"https:\/\/upcloud.com\/global\/wp-json\/wp\/v2\/tutorial\/2068\/revisions"}],"predecessor-version":[{"id":6471,"href":"https:\/\/upcloud.com\/global\/wp-json\/wp\/v2\/tutorial\/2068\/revisions\/6471"}],"wp:attachment":[{"href":"https:\/\/upcloud.com\/global\/wp-json\/wp\/v2\/media?parent=2068"}],"wp:term":[{"taxonomy":"community-category","embeddable":true,"href":"https:\/\/upcloud.com\/global\/wp-json\/wp\/v2\/community-category?post=2068"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}