[aklug] Re: OT(?): Remote Access VPN

This should go without saying, but be sure you change the admin password on
that. The ubiquities I have had experience with (end points specifically in
this case) have SSH on and default password. Didn't realize it and didn't
reset the password right away. By the time I reset the password it had been
compromised and was poisoning DNS and other nasty stuff, and I am only
talking a couple days.

     ___ _______
    | | |
    | | _ |
    | | |_| |
 ___| | ___|
| | |
|_______|___|

*JP (Jesse Perry)*
voice/txt: 907-748-2200
email: jp@jptechnical.com
web: http://jptechnical.com
support: helpdesk@jptechnical.com

On Wed, Oct 21, 2015 at 6:45 PM, David M. Syzdek <david@syzdek.net> wrote:

> I've had good luck deploying Ubiquiti's EdgeRouter Lite for a few of my
> friends. A few of it's benefits include:
>
> * $100 per unit
> * Supports L2TP over IPSec (and I believe OpenVPN as well)
> * Off the shelf solution
> * 3x Gig Ports
> * Junos like CLI
> * WebUI for easy access
> * Based on Vyatta software router with ties to VyOS open source
> software router.
>
> https://www.ubnt.com/edgemax/edgerouter-lite/
>
> The community is not as large as the community for PFSense, however it
> does perform better than most small boards at routing traffic.
>
> Ubiquiti also has 5 port version with POE, however it runs more in the
> $150 - $200 range on Amazon.
>
>
>
>
> On Tue, Oct 20, 2015 at 11:18 AM, Christopher Howard <
> christopher.howard.asi@gmail.com> wrote:
>
>> Hey guys... so I took up a job at a small business which is basically a
>> Windows shop (hey, gotta eat...) and I wanted to set up a simple Remote
>> Access VPN so the boss could access the network files while abroad. They've
>> got a WS2008 running their AD and DHCP on the intranet (but it isn't the
>> gateway). So, my first thought was to see if it had built in VPN
>> functionality. It does, but I ran into some trouble -- apparently in WS2008
>> the remote access VPN functionality is tied into the IP routing
>> functionality (which were aren't using). So, when I activated the RRAS,
>> there was some strange conflict with DHCP and it instantly disconnected
>> everyone's access to the network storage shares! Fortunately, I was able to
>> reverse things before causing too much pandemonium, but obviously now I'm a
>> bit nervous...
>>
>> So, now I am trying to figure out if it is worth monkeying around with
>> this some more to get it working, or if I should look at some other
>> approach. Maybe just put a small Linux box on the network and run a FOSS
>> VPN server from it? (I'm imagining complications down the rI'vtionality.
>>
>> Any sage advice from the seasoned admins?
>>
>> ---
>> This email has been checked for viruses by Avast antivirus software.
>> https://www.avast.com/antivirus
>>
>> ---------
>> To unsubscribe, send email to <aklug-request@aklug.org>
>> with 'unsubscribe' in the message body.
>>
>>
>
>
> --
> "I'm religious but not spiritual."
> --Cardinal Francis George, O.M.I.
>

---------
To unsubscribe, send email to <aklug-request@aklug.org>
with 'unsubscribe' in the message body.
Received on Fri Oct 23 16:14:26 2015