Skip to main content

Custom TCP & LAN Targets

A Remote Service can target the Agent Host itself or another host the Agent can reach.

New host: use Zero-Touch

On the Server run set enrollment zero-touch, select the platform and enter the host name/description. Choose Choose Remote Services and specify each service type, target host and port. Run the generated command on the target; the selected services are automatic. Inspect actual names/endpoints with show remote-services; do not repeat the manual creation below for the same service.

Add to an existing Agent

The manual configuration below is for additional services on an enrolled Agent. First inspect show service-objects on the Server and show remote-services on the Agent; create only missing definitions/services.

Create a Service Object

On the Server:

Create the Remote Service

On the Agent Host:
The Agent Host becomes the Relay Host for that destination.

Boundary

DataRelay Link does not add routes, open the destination firewall, create application users, or disable target authentication. The Agent Host must already have normal network reachability to the selected target.
Last modified on October 29, 2026