Difference between revisions of "Network/VPN"

From Makers Local 256
Jump to: navigation, search
(openconnect gui link)
(update to indicate the current status)
 
(11 intermediate revisions by 2 users not shown)
Line 1: Line 1:
== Info ==
+
We no longer support a traditional VPN. SSH access for those that need it is the way to go.
* We use [http://www.infradead.org/ocserv/ the ocserv VPN server].
+
** This server implements the [http://www.cisco.com/c/en/us/support/security/anyconnect-vpn-client/tsd-products-support-series-home.html Cisco AnyConnect] protocol. You can use either [http://www.infradead.org/openconnect/ the OpenConnect open source client] or Cisco's AnyConnect client to connect. Both AnyConnect and OpenConnect are available on many platforms, including GNU/Linux, Windows, Mac OS X, and Android. On Windows, you might want to try this [https://github.com/openconnect/openconnect-gui/wiki OpenConnect GUI], but I don't know much about it.
+
* All members have the option to use the VPN. Since we have not enabled LDAP authentication just yet, you will need to set a VPN password first.
+
  
== Acquiring access ==
+
== Poor Man's VPN ==
# Request VPN account from [[User:Enabrintain|EnabrinTain]] or [[User:hfuller|hfuller]].
+
You can use ssh to log into the newvpn box:
#* This will need to be done in person, or in a way that the admin can be certain of your identity.
+
# Set your VPN password.
+
  
== Connecting ==
+
<code>ssh hfuller@shop.makerslocal.org</code>
# Start the AnyConnect or OpenConnect client, and supply the address 256.makerslocal.org:876
+
#* On most platforms, you can do "openconnect 256.makerslocal.org:876"
+
# Accept the invalid certificate. (Sorry, I'll install a real one soon.)
+
# Enter your VPN username and continue.
+
# Enter your VPN password and continue.
+
# Accept the terms of use for the VPN.
+
  
Now your connection will be brought online and you can access Maker-exclusive network resources. (Your connection may be announced in IRC.)
+
From there, you could ssh to other resources at the shop, or do whatever else you can do from the command line.
 +
 
 +
You can also use ssh's -L option to forward ports on your local machine to ports on the Makers network, if that's your thing:
 +
 
 +
<code>ssh -L 2222:cascade:22 tylercrumpton@shop.makerslocal.org</code>
 +
 
 +
If I were Tyler, this example would expose port 22 on [[CasCADE]] as port 2222 on my local computer. See <code>man ssh</code> for more help with this.
 +
 
 +
Finally, [https://mosh.mit.edu/ mosh] is also available. As you might guess, you can do this:
 +
 
 +
<code>mosh hfuller@shop.makerslocal.org</code>

Latest revision as of 11:25, 24 October 2022

We no longer support a traditional VPN. SSH access for those that need it is the way to go.

Poor Man's VPN

You can use ssh to log into the newvpn box:

ssh hfuller@shop.makerslocal.org

From there, you could ssh to other resources at the shop, or do whatever else you can do from the command line.

You can also use ssh's -L option to forward ports on your local machine to ports on the Makers network, if that's your thing:

ssh -L 2222:cascade:22 tylercrumpton@shop.makerslocal.org

If I were Tyler, this example would expose port 22 on CasCADE as port 2222 on my local computer. See man ssh for more help with this.

Finally, mosh is also available. As you might guess, you can do this:

mosh hfuller@shop.makerslocal.org