Connecting databases via a VPN

While we recommend you connect your databases using an SSH tunnel, you can also use an encrypted VPN connection to keep things secure. A VPN can be used for any of our database integrations and, to keep things simple, the process is just about the same as setting up an SSH tunnel:

  1. Create an Magento BI database user
  2. Create an Magento BI VPN user
  3. Allow access to the Magento BI IP address
  4. Enter the connection and VPN user info into Magento BI

In addition to database credentials, you'll have to enter credentials for a VPN user to wrap things up. Any VPN user will work, but we recommend you create an Magento BI user - it'll make it easier for you to keep track of the users on your account.

Let’s get started.

Creating a database user for Magento BI

The process for creating a database user will vary depending on the database type you're connecting. To see the instructions for each database type, click the links below.

Creating a VPN user for Magento BI

As we mentioned before, any valid VPN user will work - but we strongly recommend you create a user solely for Magento BI use.

Allow access to the Magento BI IP addresses

For the connection to be successful, your must configure your firewall to allow access from our IP addresses. They are and, but it’s also on the credentials page for any database integration:


Entering the connection and VPN user info into Magento BI

To wrap things up, we need to enter the connection and user info into Magento BI. Did you leave the database credentials page open? If not, go to Manage Data > Connections and click the Add New Data Source button, then the icon for the database you're connecting. Don't forget to toggle the Encrypted button to Yes.

Enter the following info into this page, starting with the Database Connection section:

  • Username: The username for the Magento BI database user
  • Password: The password for the Magento BI database user
  • Port: The database's port on your server. Defaults are:
  • MicrosoftSQL: 1433
  • MongoDB: 27017
  • MySQL: 3306
  • PostgreSQL: 5432
  • Host: By default, this will be localhost (, but it could also be your server's public IP address or a local area network address.
  • Database Name (optional): If you only allowed access to one database (this is specified during the database user creation step), enter the name of that database here.

Under the Encryption Connection section:

  • Encryption Type: Set this to Cisco IPsec VPN
  • Gateway Address: The IP address of the VPN server
  • Group Name: The name of the group used for group authentication
  • Group Secret: The password corresponding to the group.
  • Username: The Magento BI VPN username
  • Password: The Magento BI VPN user password

That's it! When you're finished, click the Save & Test button to complete the setup.