Skip to content

Instantly share code, notes, and snippets.

@stopsopa
Created November 5, 2018 11:58
Show Gist options
  • Save stopsopa/9c81f32866cfcfca9c2635c64948230e to your computer and use it in GitHub Desktop.
Save stopsopa/9c81f32866cfcfca9c2635c64948230e to your computer and use it in GitHub Desktop.
vpn server

Connecting from MAC

Open System Preferences.
Click the Network icon.
Click the + button.
From the Interface drop-down menu, select VPN.
From the VPN Type drop-down menu, select Cisco IPSec.
Type in a service name, then click the Create button. (Whatever you like)
Type vpn.colorado.edu in the Server Address. ...
Enter your CU Login Name and IdentiKey password.

Connecting from Windows

https://github.com/hwdsl2/setup-ipsec-vpn/blob/master/docs/clients-xauth.md#windows   

Problem: It proxy all internet traffic from Windows through VPN instead of creating additional virtual network card

Docker VPN Server

https://mobilejazz.com/blog/setting-up-a-vpn-server-in-5-minutes-with-docker/
    article referes to repository: https://github.com/mobilejazz/docker-ipsec-vpn-server

        git clone https://github.com/mobilejazz/docker-ipsec-vpn-server.git
        cd docker-ipsec-vpn-server
        ./start.sh

    Tip: If vpn container stops then run the same container this way:
        docker start ipsec-vpn-server   
        
Using:
    Our VPN is deployed to falcon machine (xx.xx.xx.xx)
    To manager VPN first login to machine through ssh and then:
        . vpnenter
        
    There is also record in /etc/crontab
        *   *   *   *   *   root    cd /root/vpn/docker-ipsec-vpn-server && docker start ipsec-vpn-server
        
    From this point there if few options:
        /bin/bash adduser.sh [username]
        /bin/bash lsusers.sh
        /bin/bash rmuser.sh [username]
        
    To see existing credentials for existing users:
        cat etc/ppp/chap-secrets
        
    To see current Shared Secret:
        cat etc/ipsec.secrets
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment