...

1. Set the variable batm.vpn-skip to true in the file /batm/config/gate.properties

   1. Disables This change disables VPN distribution via the gate Gate service.

   2. See: https://generalbytes.atlassian.net/wiki/x/CYBtz

2. Connect your BATMs to the hardware VPN.

3. Connect your hardware VPN to your CAS server (or server-side VPN).

...

• the Gate service on the port 7741, and

• the Master service on the port 7741.

• The Gate and Master services use their specific IP addresses, and

• the Gate service must be able to communicate with the Master service (via port 7747).

...

Notes

Gate service

The Gate service listens for your terminals' pairing requests. After a successful pairing, the gate Gate service sends the terminal the VPN configuration, including information on how to connect to the master Master service.

• Prior to pairing, the terminal's VPN configuration must (normally) already have been generated.

  • See: https://generalbytes.atlassian.net/wiki/spaces/ESD/pages/948961405/batm-manage+the+CAS+CLI+Toolkit#vpn-generate-serialno1-serialno2

The Gate service uses the batmgate unix user, which is a member of the batm group. The Gate service listens on port 7741. The master Master service uses the same port - but on a different interface.

...

• The Master service uses batmmaster unix user, which is a member of the batm group.

• The Master service listens on port 7741.

  • Please note that the same port uses gate Gate service but on a different interface.

...