Solaris 10 VPN server/gateway setup

Hi all,
I have a V20z running Solaris 10 at home, and I would like to set it up as a VPN server. The Solaris 10 is behind a router with a reserved private IP assigned by DHCP and port forwarding set up for only SSH at the moment. The router has a static external IP.
I'm not exactly sure what the terms are for what I'm trying to do, but this is basically it:
When I am out of town or overseas, I want to be able to connect from my laptop running OS X or Linux to my Solaris 10 server at home, and have the S10 server act as a proxy(?) (gateway?) for all the traffic from my laptop; for example, if I was in a place where nytimes.com was blocked and wanted to be able to browse from my laptop by having the Solaris 10 server proxy (transparently) my requests and forward the responses back to me. I hope I'm explaining this ok...
I have searched a lot online for how to do this, and I have found a lot of info, but nothing that really ties it all together. I'm pretty comfortable working in the shell and doing config stuff, but it would be a huge help if anyone could explain all the pieces I need to snap together to get this working.
These are my questions:
1. What is what I have described called? Just "VPN" or "VPN router," or "VPN gateway"?
2. What software do I need on my Solaris 10 server to do this?
A lot of what I read pointed me to OpenVPN, but I am not clear if OpenVPN alone would enable me to use the public web via the VPN.
If not, then what would I need to have on the server to enable incoming requests over the VPN connection to be rerouted to the public internet?
3. I'm sure I can figure this out if I can just get the server VPN working, but if anyone happens to know, I'd appreciate it:
Built into OS X Networking Prefs I have the ability to add a VPN interface of either of these 2 types:
"PPTP"
"L2TP over IPsec"
From what I have read so far, it seems like IPsec is likely the only reasonable choice, but the option of "L2TP over IPsec" confuses me since I haven't read that they are required to be used together.
Will this option work for connecting to my Solaris VPN server or will I need a 3rd-party app?
Any guidance would be a tremendous help.
Thanks guys!
Jamie

Mobile IP???
Assuming that you had the right security in place you could have the "Home" box export it's display back to the "Roving" box and then just run a web browser over X. Something like SSH with X forwarding.
alan

Similar Messages

VPN server on 2nd IP

I have a 10.4.11 server with VPN server (L2TP) setup properly with clients being able to connect to main 192.168.1.111 IP
For routing purposes i had to add a second IP for the same interface 192.168.1.112 but VPN server doesn't work on this IP, clients fail to connect to it. Any idea what to do to allow clients to connect to second IP on same interface?
Message was edited by: costicladop

check this thread for something that may work for you.
http://discussions.apple.com/thread.jspa?threadID=1310804&tstart=0

10.8 Server (VPN Secure Internet Gateway) setup question

I am running Mountain Lion 10.8.4 with Server 2.2.1
I am attempting to setup the server to allow connection to my internal/Private LAN
I have the source (External Internet access) setup as #1 in the service order (en0)
and the Private network as the secondary (en4)
I followed the steps on http://macminicolo.net/mountainlionvpn and input my own IP's when needed
I am able to connect and authenticate to the vpn and able to get internet access through the vpn
unfortunatly I am unable to reach anything on my private LAN
this is my settings in my customNATRules:
nat on en4 from 10.0.0.0/24 to any -> (en4)
pass from {lo0, 10.0.0.0/24} to any keep state
i have the sysctl.conf setup with
net.inet.ip.forwarding=1
I also changed the com.apple in pf.anchors to reflect the instructions above
Network Settings
(en0) My external ip is 192.168.168.4 to my firewall (not giving you my full outside)
and the DNS Server is pointing to itelf via 127.0.0.1
(en4) My Private LAN is set with the DNS to my private DNS servers
VLAN is setup with the same settings as the instructions state in the link above and I have the DNS set as 127.0.0.1
DNS Server Settings
I have my DNS server configured with my local hostname with the Vlan, internal ip, and external ip pointing back to the hostname.
i have the forwarding DNS servers configured to my private DNS servers for the private lan and as the 3rd I have 8.8.8.8 for general internet
VPN Server settings
I have the host name and shared secret set
I have 10 IP's for client addresses with the same IP segment as the VLAN
DNS settings i have routed back to the gateway of the vlan
I have one route configured i am using in my private lan to be routed private
is there anything I am missing or setting up incorrectly? I am struggling at this point and need some help.
if you need any more info please let me know

The instructions on that web page aren't applicable to your case. Don't follow them.

VPN Server won't route VPN client to gateway

We have a WIndows 7 VPN client that successfully connects with the 2012 VPN server and can access servers and resources on the remote 96.0 LAN; however, the VPN client can not access the 96.1 default gateway and thus no subnets outside of 96.0.
Use default gateway on remote network is NOT checked, but does not work with it checked either.
RRAS on the VPN server does allow for routing IPv4 and is setup to assign addresses via DHCP.

You probably don't need a static route to get the traffic to the other subnets. Is the VPN router also the router for subnets? If it is, the packets should be delivered directly to any client in an attached subnet. You do have the remotes
using their own subnet? If not, Bing of Google off subnet addressing. You need that to be able to route the VPN traffic at the central site.
What you do need is a static route at the router which is the gateway router for the LAN segment to send the traffic to the VPN server, not to your Internet gateway (which would be the default behaviour. Whether the Internet gateway
is the VPN server or another router depends on your network config).
Exactly how you set it up depends on how your local network is configured. I haven't done that sort of thing lately, but you probably have to use the IP address of the VPN demand-dial interface as the target address of the route command rather than
the RRAS internal interface.
Bill

How to setup built-in VPN server on Mountain Lion

Anyone have information on configuring the built-in VPN server in OS X Mountain Lion ?

Update - it works ! At least I can connect to Mountain Lion (not server) from my iPhone using the VPN Server Configurator app.
Here's what I did :
1) download the app and install
2) setup using the help files on the web page : http://www.greenworldsoft.com/product-vpn-server-help.html
3) at the last stage you need to setup port forwardin on your router
4) under Airport Utility 6.0 you cannot setup ports 500 or 4500 due to BTTM conflicts but setup the other 2 ports (1723 TCP and 1701 UDP), update airport extreme
5) download Airport Utility 5.6 from here : download already extracted utility it is in it's extracted form as is necessary under Mtn Lion (thanks to NetUse Monitor for the download - great app by the way)
6) run 5.6 and setup port forwarding (Advanced-Port Mapping) for the other 2 ports (500 and 4500 UDP), update airport extreme
7) that's it, I was able to connect to the VPN from my iPhone !

Windows 8.1 VPN Server Setup - No Network softwaare to choose

Hi Everyone
Windows 8.1
Setting up an incoming VPN Server.
When I try to create a New Incoming Connection via Control Panel > Network and Sharing Center > Change adapter settings > Alt - F > New Incoming Connection.
The wizard appears so I check the User Account > Next > Check Through the Internet > Next bringing up the Allow connections to this computer window where I should be able select Networking software to be enabled and then go on
to click Allow Access button. The networking software to highlight window is blank. Using the Install... button below this window brings up the Select Network Feature Type window where I can highlight a feature (Client, Service or Protocol)
and click Add button . It returns to the Allow connections window which has not changed and nothing is added. Still blank.
How do I get the network software to be there to select?
I have done this on other machines and had no problems at all. It worked the way it should.
After I did an image and reset operating system, the VPN Server Setup worked as it should. Restored image as it is way to much work to rebuild the machine. So any ideas?
Any and all help will be appreciated.
Thanks in advance. Lowell

Hi,
Did you mean you have solved this problem by resetting Windows?
Regarding to current information, this issue can be caused by port settings or corrupted Windows components.
Please check if the VPN port 1723 has been set as allowed in both your Firewall and router settings pages.
Also, we may fix such issue by running following repair command:
NOTE: Please run these commands as administrator.
SFC /SCANNOW
dism /online /cleanup-image /restorehealth
For further help, you can upload %windir%\logs\CBS\cbs.log and %windir%\Logs\DISM\dism.log into Onedrive or similar file service and share the link here for our research.
Kate Li
TechNet Community Support

How setup SPA525 vpn client?How configuration Cisco VPN server?

Hi all,
How setup SPA525 vpn?
How configuration Cisco VPN server for SPA525?
Regards
John

Hi John,
Do you want to setup the SPA525 on the UC300? If so the UC300 does not support any VPN or remote users. If you need configuration help with the UC5XX just let me know.
Thank you,
Jason Nickle

How to setup a vpn server

Can I setup my Time Capule 2TB as a VPN server so I can connect to my network from a remote (out-of-state) location or is there another way?

There is no vpn server in the TC so no you cannot use it that way.
If you want to use vpn .. buy a vpn endpoint modem or modem router or router depending on your broadband. Bridge the TC so it is simply a part of the network and all routing functions are handled by the vpn router.
If the TC is directly facing the internet.. ie you get the public IP on the wan interface.. you can connect by checking the remote access and using a decent password. Security is no where near as good as vpn but for occasional connection is probably OK. You can only use AFP protocol. So this must be done from a Mac computer. Just do a google search.. lots of sites.. lots of threads.
If the TC is not getting public IP then you can port forward AFP to the TC.. that is the only protocol still.. SMB is blocked by all ISP as too dangerous as half the computers in the world would be exposed.
There is a final issue.. you need either a static public ip or dynamic dns service. The TC does not have a dyndns client.. mobileme used to provide that service but is being discontinued. Cloud is now the way.. if you need a dyndns service read how to set this up..
http://dyn.com/support/airport-time-capsule-with-dynamic-dns/
You need a personal domain for this to work.. note also the experimental aspect to it.
IMHO vpn with a vpn router is the way to go. All vpn routers have some dyndns client services.

How to setup vpn-server in Mountain Lion 10.8.3?

Before I updated my mac mini server to 10.8.3 I used Server Admin to setup a vpn server. After the update Server Admin isn't supported anymore and my vpn settings are gone. Now i want to setup the server again, but have no clue what settings to enter where.
I suppose it starts with adding two vpn-interfaces: PPTP and LT2P.
But how further? I can't find a tutorial or manual.

I do now :-)
And many thank, that's the application I was looking for. My vpn is back online. Well, the mac-part. I still can't connect with a Win7 system. Connecting to a vpn-server of another company works fine, so it's something in the configuration of de Mini Server.
The error code is 629.
Hopefully someone can help me with this part too?

Can you setup both VPN server and Back to My Mac on Lion Server?

I have been trying to figure out if this is possible for some time. Can you use both Back to My Mac and VPN server services at once on a OS X Server?
So far here is what I have found:
- According to http://support.apple.com/kb/TS1629 Back to My Mac and VPN use the same UDP ports(500,4500)
- I have been able to get my VPN service working by removing all access for Back to My Mac(in System Preferences->iCloud) as well as removing all "Mobile Me" access on our AirPort Extreme.
The moment I try to add an account to access the network via Mobile Me(ie Back to My Mac) on the Airport Extreme, I am no longer able to make a VPN connection.
Checking the Service VPN Logs, no log entry is shown for the failed connection.
So, my questions are:
1. Has anyone been able to get these two working on the same server/network?
2. Is there any way to change the default ports used by the VPN server service on Lion Server?
Thank you to anyone that can provide any suggestions.

Just as FYI....I just started using iCloud and tried the "back to my mac" on a mac server that is my VPN server.
Enabling "back to my Mac" prevents the VPN from being useable.
Disable "back to my mac" and the VPN works again, as verified from both another MAC and an iPhone.

Can not use the Gateway setup assistant

Hello,
I want to use the Gateway setup assistant from NAT service.
My Os X server is in french.
I have a bug, when setting for VPN from the assistant, I can't continue she setup.
I click on the "continue" button but nothing happens !
Is this a bug ? Someone got the same result ?
Thx to help

No answer ?
Perhaps it is a bug in french translation.

10.5.7 Leopard Server - Standard Setup

Im looking to see if the standard setup of leopard server can be configured to use PPTP rather than IPSec.
Also, is it possible to share the ethernet connection of my MacMini (running leopard server) to wifi?
I want to use it as a router for my home.

The built-in VPN server supports both PPTP and L2TP over IPSec.
For sure the Advanced setup can support either, or both simultaneously. I've never run a standard setup, but I don't see why it would be any different.
As for network sharing, you can share any interface with any other interface. It doesn't matter what media the interface uses (e.g. wired or wireless).
I would suggest that you carefully consider your server use before deciding to use it as the gateway to your network. For most people a standard $50 router does just as well, and, in fact, provides better security.

VPN client connect to CISCO 887 VPN Server but I can't ping Local LAN

Hi
my scenario is as follows
SERVER1 on lan (192.168.1.4)
|
|
CISCO-887 (192.168.1.254)
|
|
INTERNET
|
|
VPN Cisco client on windows 7 machine
My connection have public ip address assegned by ISP, after ppp login.
I've just configured (with Cisco Configuration Professional) the ADSL connection and VPN Server (Easy VPN).
All the PC on LAN surf internet and remote PC connect to VPN Cisco server via cisco VPN client.
But all remote PC after connection to Cisco VPN server don't ping SERVER1 in lan and therefore don't see SERVER1 and every other resource in LAN. I can't even ping the gateway 192.168.1.254
I'm using Cisco VPN client (V5.0.07) with "IPSec over UDP NAT/PAT".
What is wrong in my attached configuration? (I've alspo tried to bind Virtual-Template1 both to unnambered Dialer0 and to Loopback0 but without luck)
Perhaps ACL problem?
Building configuration...
Current configuration : 4921 bytes
! Last configuration change at 14:33:06 UTC Sun Jan 26 2014 by NetasTest
version 15.2
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
hostname TestLab
boot-start-marker
boot-end-marker
enable secret 4 5ioUNqNjoCPaFZIVNAyYuHFA2e9v8Ivuc7a7UlyQ3Zw
aaa new-model
aaa authentication login default local
aaa authentication login ciscocp_vpn_xauth_ml_1 local
aaa authentication login ciscocp_vpn_xauth_ml_2 local
aaa authorization exec default local
aaa authorization network ciscocp_vpn_group_ml_1 local
aaa authorization network ciscocp_vpn_group_ml_2 local
aaa session-id common
memory-size iomem 10
crypto pki trustpoint TP-self-signed-3013130599
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-3013130599
revocation-check none
rsakeypair TP-self-signed-3013130599
crypto pki certificate chain TP-self-signed-3013130599
certificate self-signed 01
3082022B 30820194 A0030201 02020101 300D0609 2A864886 F70D0101 05050030
31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 33303133 31333035 3939301E 170D3134 30313236 31333333
35305A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649
4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D33 30313331
33303539 3930819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281
8100A873 940DE7B9 112D7C1E CEF53553 ED09B479 24721449 DBD6F559 1B9702B7
9087E94B 50CBB29F 6FE9C3EC A244357F 287E932F 4AB30518 08C2EAC1 1DF0C521
8D0931F7 6E7F7511 7A66FBF1 A355BB2A 26DAD318 5A5A7B0D A261EE22 1FB70FD1
C20F1073 BF055A86 D621F905 E96BD966 A4E87C95 8222F1EE C3627B9A B5963DCE
AE7F0203 010001A3 53305130 0F060355 1D130101 FF040530 030101FF 301F0603
551D2304 18301680 14E37481 4AAFF252 197AC35C A6C1E8E1 E9DF5B35 27301D06
03551D0E 04160414 E374814A AFF25219 7AC35CA6 C1E8E1E9 DF5B3527 300D0609
2A864886 F70D0101 05050003 81810082 FEE61317 43C08637 F840D6F8 E8FA11D5
AA5E49D4 BA720ECB 534D1D6B 1A912547 59FED1B1 2B68296C A28F1CD7 FB697048
B7BF52B8 08827BC6 20B7EA59 E029D785 2E9E11DB 8EAF8FB4 D821C7F5 1AB39B0D
B599ECC1 F38B733A 5E46FFA8 F0920CD8 DBD0984F 2A05B7A0 478A1FC5 952B0DCC
CBB28E7A E91A090D 53DAD1A0 3F66A3
quit
no ip domain lookup
ip cef
no ipv6 cef
license udi pid CISCO887VA-K9 sn ***********
username ******* secret 4 5ioUNqNjoCPaFZIVNAyYuHFA2e9v8Ivuc7a7UlyQ3Zw
username ******* secret 4 Qf/16YMe96arcCpYI46YRa.3.7HcUGTBeJB3ZyRxMtE
controller VDSL 0
crypto isakmp policy 1
encr 3des
authentication pre-share
group 2
crypto isakmp client configuration group EXTERNALS
key NetasTest
dns 8.8.4.4
pool VPN-Pool
acl 120
crypto isakmp profile ciscocp-ike-profile-1
match identity group EXTERNALS
client authentication list ciscocp_vpn_xauth_ml_2
isakmp authorization list ciscocp_vpn_group_ml_2
client configuration address respond
virtual-template 1
crypto ipsec transform-set ESP-3DES-SHA esp-3des esp-sha-hmac
mode tunnel
crypto ipsec transform-set ESP-3DES-SHA1 esp-3des esp-sha-hmac
mode tunnel
crypto ipsec profile CiscoCP_Profile1
set transform-set ESP-3DES-SHA1
set isakmp-profile ciscocp-ike-profile-1
interface Ethernet0
no ip address
shutdown
interface ATM0
no ip address
no atm ilmi-keepalive
hold-queue 224 in
pvc 8/35
pppoe-client dial-pool-number 1
interface FastEthernet0
no ip address
interface FastEthernet1
no ip address
interface FastEthernet2
no ip address
interface FastEthernet3
no ip address
interface Virtual-Template1 type tunnel
ip address 192.168.2.1 255.255.255.0
tunnel mode ipsec ipv4
tunnel protection ipsec profile CiscoCP_Profile1
interface Vlan1
ip address 192.168.1.254 255.255.255.0
ip nat inside
ip virtual-reassembly in
ip tcp adjust-mss 1452
interface Dialer0
ip address negotiated
ip mtu 1452
ip nat outside
ip virtual-reassembly in
encapsulation ppp
dialer pool 1
dialer-group 1
ppp authentication chap pap callin
ppp chap hostname ****
ppp chap password 0 *********
ppp pap sent-username ****** password 0 *******
no cdp enable
ip local pool VPN-Pool 192.168.2.210 192.168.2.215
ip forward-protocol nd
ip http server
ip http authentication local
ip http secure-server
ip http timeout-policy idle 600 life 86400 requests 10000
ip nat inside source list 100 interface Dialer0 overload
ip route 0.0.0.0 0.0.0.0 Dialer0
access-list 100 remark
access-list 100 deny ip 192.168.1.0 0.0.0.255 192.168.2.0 0.0.0.255
access-list 100 remark
access-list 100 permit ip 192.168.1.0 0.0.0.255 any
access-list 120 remark
access-list 120 permit ip 192.168.1.0 0.0.0.255 192.168.2.0 0.0.0.255
line con 0
exec-timeout 5 30
password ******
no modem enable
line aux 0
line vty 0 4
password ******
transport input all
end
Best Regards,

I've updated ios to c870-advipservicesk9-mz.124-24.T8.bin and tried to ping from rv320 to 871 and vice versa. Ping stil not working.
router#sh crypto session detail
Crypto session current status
Code: C - IKE Configuration mode, D - Dead Peer Detection
K - Keepalives, N - NAT-traversal, T - cTCP encapsulation
X - IKE Extended Authentication, F - IKE Fragmentation
Interface: Dialer0
Uptime: 00:40:37
Session status: UP-ACTIVE
Peer: 93.190.178.205 port 500 fvrf: (none) ivrf: (none)
Phase1_id: 192.168.1.100
Desc: (none)
IKE SA: local 93.190.177.103/500 remote 93.190.178.205/500 Active
Capabilities:(none) connid:2001 lifetime:07:19:22
IPSEC FLOW: permit ip 10.1.1.0/255.255.255.0 10.1.2.0/255.255.255.0
Active SAs: 4, origin: dynamic crypto map
Inbound: #pkts dec'ed 0 drop 30 life (KB/Sec) 4500544/1162
Outbound: #pkts enc'ed 5 drop 0 life (KB/Sec) 4500549/1162

OSX 10.8 server Set VPN server in Local net, How to restrict the Local some IP connect to the VPN server?(noob,so need clearly)

the tittle is my question. I am noob , so I hope i can make my question clear. Now i 'd like to tell you more about my question:
My aim is to set a VPN server in Local lan, then ppl can connect to the VPN server, But I dont wanna all of the Local lan IP cant connet to it. So I neet to set a rule to restrick some local Ip to connect failure, just like banning so IP in a rule.such as: just like the "192.168.4.3~192.168.4.20 ; 192.168.7.3~192.168.7.20 " IPs can connect . the IPs which outside the rules can not do.
my step is following:
1) install server app
2)and then i set a VPN server , finally the VPN server can be connected successfully by local lan computer(PC or Mac)
3)But i found no restrict IP founction in Server app panel.
4)then i down load workgroup manager, and found nothing there about such a founction about IP restriction.
so can you tell me how to aproach my aim?
Please tell me in a clear detail,I am noob
thank you

Won't the password restrict everyone from connecting unless they know the password?
I have never worked with a VPN server, so I can't really add any suggestions. Below are links to Apple support articles, but I'm not sure they will help you:
VPN - Set up Connection
VPN - Advanced Setup
VPN - Connect
VPN - Connect Automatically

Win 8.1 running HyperV as VPN server

Hello,
I have a PC running WIN 8.1, I'm running HyperV on it (for win8phone development)
On this PC, I want to set up a VPN server. When I set up incoming connection, it says, that there's no interface for incoming connections. What shall I do so?

Hi,
As Microsoft suggest, you need add two virtual NIC, then attache the NIC to the different vSwitch, one vNIC for the internal another one for the external.
The simlar third party article:
Setup a Windows Server 2012 VPN
http://www.sysads.co.uk/2013/02/setup-windows-server-2012-vpn-part1/2/
Hope this helps.
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

Solaris 10 VPN server/gateway setup

Similar Messages

Maybe you are looking for