Yeah, WTF?

Are you connecting a permanent IPSEC tunnel with some other network you do not control?

@Dashrender said in OpenVPN and Andriod Mobiles:

@iroal said in OpenVPN and Andriod Mobiles:

Right now I'm connected to Openvnp, in a Pfsense, and sending you this message all from my android Phone.

I use OpenVnp 0.6.60 for Android.

His problem isn't using OpenVPN from his android device. His issue is split tunneling - or the ability to surf the web through his office network's internet connection.

I mean I connect from a Samsung S5 using OpenVpn App, the OpenVnp server It's the Pfsense.

@martianx said in Modern Open Source Replacement for SSLExplorer:

Update: We prototyped integrating NoVNC with the Hypersocket VPN. It was relatively simple as it hooked straight into our forwarding mechanism that was already using websockets. Will be releasing an update to support this in the next month or so. We will also integrate our client-less SSH terminal at the same time. RDP is a little more complex so will need further research before we can support this.

Very cool, thanks for the update!

@Dashrender said in Pfsense to Meraki Site-Site Ipsec VPN:

At what size network do you normally turn on BGP?

Pretty much any time you have multiple routers & subnets. BGP is to routing what DHCP is to Up addressing (kinda). With static routes every device has to be setup manually with every network which is insane. With BGP and Autonomous system numbers it's automated and less likely to have mistakes.

I think that he skips mentioning that PPP, the Point to Point Protocol is not a VPN protocol. Even in the 1990s it was not considered that as it is not virtually private, as a VPN is. It's useful to have mentioned here and the Network+ might require it and it is certainly good to know and understand, but he lists it along with VPN protocols and I didn't hear him ever point out that it isn't a VPN Protocol even though it was the first one mentioned in the VPN Protocol list.

@RamblingBiped said in SIP Phone registers no audio...:

Here is the guide I followed to get the Yealink T23G to work with OpenVPN: http://www.sunstatetechnology.com/docs/YealinkOpenVPNGuide.pdf

When I disable NAT on the extension the phone is unable to register.

Something is wrong there, that sounds like the VPN is not working as there is no NAT when there is a VPN.

Sounds good. I'm going to give this a shot tonight on my ERX at home so I don't bring down the existing tunnel here in the office.

No problem!

@scottalanmiller

It's ok. That's not my favorite by far, but it's what was in the fridge, so it worked.

@jrc said in OpenVPN and DNS:

Do you know if you can configure OpenVPN to work as a DNS relay (local relayed to remote)?

What would be the local component, in that case?

Tagging @IRJ @WrCombs @Romo

Old post but just had to do this for an implementation we are rolling out. Thanks!

Yep, implemented the same, for a majority of our clients... it's quick n easy to deploy, and manage .. This, along with Thin-clients, has been a winning combo for us .. . works like a charm every time ..

Going a bit off-topic - Earlier, this year , we were contacted by a vendor, pushing these really really dirt cheap China-made thin-clients (They go by the name Thnder-X) ... So, for $18 a pop (only if you buy a minimum of 50 Units), it offers : -

Arm Cortex 1.8ghz CPU
1GB RAM
512MB on-board Flash
100/1000 Network Port
3 USB ports (2xUSB 2.0, 1x USB 3)
1 HDMI Port + 1 VGA Port support upto 1920x1080 / 32 bit colour depth / Dual Display
Audio Port.
7.5W Power consumption
Windows CE

We were rather skeptical at first, so the vendor gave us a unit to demo ... We're using it on a daily basis for around a month.. Worked well for most basic office tasks (Documents, Spreadsheets, Emails, Browsing, Accounting etc) ... Videos didn't do too well, but still, not as bad as we were expecting ..

The only catch is that it comes with a 6 month replacement warranty...

We bought around 10 units, and gifted 4 to a client ... at $18/unit, I don't mind gifting these to 20 MangoLassi users ... you pay for your own shipping ... hehehe

Anyway, the client has been using these in a production environment (on the above setup), for over 6 months, and they've been pretty happy with it, so far ..

Only the other night for me and it was all on one project so I'm not sure what it was, yet.

@scottalanmiller said in Using Pertino with Active Directory:

Originally posted on my Windows Administration blog in 2013 here: http://web.archive.org/web/20130929034913/http://www.scottalanmiller.com/windows/2013/04/05/using-pertino-with-active-directory/

This information is very out of date concerning Pertino itself. But the theory on how this works remains relevant.

IMO, you should put the 'old post' notice at the top of these.

@marcinozga Thanks, but already tried net.inet.ip.fastforwarding in all combinations with TCP and UDP.

@Dashrender you can find OVA on vyos.net