Skip to content

Redcentric

Source: Redcentric HSCN VPN Client (TRIB 19401211927)

Overview

Redcentric is the UK ISP that provides HSCN network connectivity for RaaS. They act as the gateway between the HSCN private WAN and our AWS infrastructure via AWS Direct Connect.

Redcentric manages:

  • The HSCN firewall (change requests via their SMAX portal — see Firewall Rules)
  • The HSCN VPN client access for Rhapsody engineers (Cisco AnyConnect)
  • The Direct Connect circuit between HSCN and the AWS management account

Cisco AnyConnect — HSCN VPN Client

The Cisco AnyConnect client allows engineers to connect to the HSCN network for testing and verification purposes. This is used when verifying a new VPN tunnel or diagnosing customer connectivity issues from the HSCN network side.

Getting Access

  1. Contact Franck Dakpogan to be set up as a user in the Redcentric portal.
  2. Franck will configure your user account and arrange for MobilePass to be installed on your mobile device for MFA.
  3. Password-protected installation packages will be provided by Redcentric.

Installation — Mac

  1. Download the Mac package: Redcentric-Mac-Anyconnect-v1-npg.zip (password-protected — ask Franck Dakpogan for the password)
  2. Install: anyconnect-macos-4.8.01090-predeploy-k9.dmg
  3. Run the config script: redcentic-anyconnect-MAC-config-v1-npg.zip

If you get an installation error, uninstall first: 

sudo /opt/cisco/vpn/bin/vpn_uninstall.sh

Installation — Windows

  1. Download: redcentric-anyconnect-v1-npg2.zip (password-protected — ask Franck Dakpogan)
  2. Follow the included instructions.

HSCN Testing IPs

Once connected via AnyConnect, you can test HSCN connectivity using the VPN loadbalanced IPs:

IP Notes
195.104.34.164/32 Primary
195.104.35.164/32 Secondary

Portal Access

  • URL: serviceportal.redcentricplc.com
  • Purpose: Raising firewall change requests, viewing network status
  • Credentials: Your portal account (set up by Franck Dakpogan)

For instructions on raising firewall changes, see Firewall Rules.

Firewall Technical Reference

Source: Redcentric HSCN Firewall (TRIB 19543164137)

Hardware

Property Value
Firewall model FortiGate 1500D
Default interface MTU 1500 bytes
MTU override Disabled (mtu-override disable)
Drop fragment Disabled (drop-fragment disable)

Key Interfaces

Interface Name Purpose
18972-HSCN HSCN-facing interface
18972-AWS AWS-facing interface (toward RaaS VPN endpoints)

MTU Considerations

With DF (Don't Fragment) disabled and default MTU of 1500, IPSec tunnels traversing the Redcentric firewall should not encounter fragmentation issues in normal operation. If you observe packet drops on VPN tunnels, check for:

  1. Path MTU mismatch on the customer side
  2. TCP MSS clamping not configured
  3. Customer firewall DF bit set (contact Redcentric to verify)

For any firewall changes, raise a request via the Redcentric Service Portal.