Changes between Version 4 and Version 5 of User Guide/Remote Access/VPN


Ignore:
Timestamp:
Feb 28, 2020, 1:49:20 PM (5 years ago)
Author:
seskar
Comment:

—

Legend:

Unmodified
Added
Removed
Modified

  • User Guide/Remote Access/VPN

    v4 v5  
    1 === External connections to ORBIT / COSMOS ===
     1== External VPN connections to COSMOS ==
    22
    3 We maintain point to point connections to link various resources to the testbed, mostly at layer 2 for networking experiments.
     3We maintain point to point connections to link various resources to the testbed, mostly at layer 2 for networking experiments. This consists of dialable links over internet2, as well as tunnels over the public internet.
    44
    5 This consists of dialable links over internet2, as well as tunnels over the public internet.
     5=== User VPN Service ===
    66
    7 === User access ===
     7Connect to the following endpoints using your COSMOS username and password. This will only be active during your reservation.
    88
    9 ==== SSH tunneling ====
    10 This will allow you to connect to anything that the console can
     9 ||   Server                  ||  Subnet         ||  Description        ||
     10 || vpn.bed.cosmos-lab.org    ||  10.110.0.0/16  ||  COSMOS Main Testbed ||
     11 || vpn.sb1.cosmos-lab.org    ||  10.113.0.0/16  ||  COSMOS SB1 ||
     12 || vpn.sb2.cosmos-lab.org    ||  10.116.0.0/16  ||  COSMOS SB2 ||
    1113
    1214
    13 ==== IKEv2 VPN
     15[[CollapsibleStart(Windows)]]
    1416
    15 Connect to the following endpoints using your orbit/cosmos username and password. This will only be active during your reservation.
     17Windows !PowerShell commands:
    1618
    17 || server                    || domain         || Subnet        || Description        ||
    18 || vpn.bed.cosmos-lab.org    || cosmos-lab.org || 10.110.0.0/16  || sb1.cosmos control ||
    19 || vpn.sb1.cosmos-lab.org    || cosmos-lab.org || 10.113.0.0/16  || sb1.cosmos control ||
    20 || vpn.sb2.cosmos-lab.org    || cosmos-lab.org || 10.116.0.0/16  || sb1.cosmos control ||
    21 || vpn.grid.orbit-lab.org    || orbit-lab.org  || 10.10.0.0/16   ||            control ||
    22 || vpn.outdoor.orbit-lab.org || orbit-lab.org  || 10.40.0.0/16   ||            control ||
    23 || vpn.sb1.orbit-lab.org     || orbit-lab.org  || 10.11.0.0/16   ||            control ||
    24 || vpn.sb2.orbit-lab.org     || orbit-lab.org  || 10.12.0.0/16   ||            control ||
    25 || vpn.sb3.orbit-lab.org     || orbit-lab.org  || 10.13.0.0/16   ||            control ||
    26 || vpn.sb4.orbit-lab.org     || orbit-lab.org  || 10.14.0.0/16   ||            control ||
    27 || vpn.sb5.orbit-lab.org     || orbit-lab.org  || 10.15.0.0/16   ||            control ||
    28 || vpn.sb6.orbit-lab.org     || orbit-lab.org  || 10.16.0.0/16   ||            control ||
    29 || vpn.sb7.orbit-lab.org     || orbit-lab.org  || 10.17.0.0/16   ||            control ||
    30 || vpn.sb8.orbit-lab.org     || orbit-lab.org  || 10.18.0.0/16   ||            control ||
    31 || vpn.sb9.orbit-lab.org     || orbit-lab.org  || 10.19.0.0/16   ||            control ||
    32 || vpn.sb10.orbit-lab.org    || orbit-lab.org  || 10.30.0.0/16   ||            control ||
     19  ||  Domain  ||  Windows !PowerShell Commands  ||
     20  || SB1    || {{{ Add-VpnConnection -Name "COSMOS SB1" -ServerAddress vpn.sb1.cosmos-lab.org -DnsSuffix sb1.cosmos-lab.org -TunnelType IKEv2 -EncryptionLevel Required -AuthenticationMethod EAP -SplitTunneling -RememberCredential -PassThru}}} [[BR]]{{{ Add-VpnConnectionRoute -ConnectionName "COSMOS SB1" -DestinationPrefix 10.113.0.0/16 -PassThru}}} ||
     21  || SB2    || {{{ Add-VpnConnection -Name "COSMOS SB2" -ServerAddress vpn.sb2.cosmos-lab.org -DnsSuffix cosmos-lab.org -TunnelType IKEv2 -EncryptionLevel Required -AuthenticationMethod EAP -SplitTunneling -RememberCredential -PassThru }}} [[BR]]{{{ Add-VpnConnectionRoute -ConnectionName "COSMOS SB2" -DestinationPrefix 10.116.0.0/16 -PassThru}}}  ||
     22  || Main Testbed || {{{ Add-VpnConnection -Name "COSMOS Main Testbed" -ServerAddress vpn.bed.cosmos-lab.org -DnsSuffix cosmos-lab.org -TunnelType IKEv2 -EncryptionLevel Required -AuthenticationMethod EAP -SplitTunneling -RememberCredential -PassThru }}} [[BR]]{{{ Add-VpnConnectionRoute -ConnectionName "COSMOS Main Testbed" -DestinationPrefix 10.110.0.0/16 -PassThru}}}  ||
    3323
    34 ===== Instructions
     24Open the !PowerShell command window as administrator
    3525
    36 Windows commands:
    37 * {{{ Add-VpnConnection -Name vpn.sb1.cosmos-lab.org -ServerAddress vpn.sb1.cosmos-lab.org -DnsSuffix cosmos-lab.org -TunnelType IKEv2 -EncryptionLevel Required -AuthenticationMethod EAP -SplitTunneling -RememberCredential -PassThru }}}
    38 * {{{ Add-VpnConnection -Name vpn.sb2.cosmos-lab.org -ServerAddress vpn.sb2.cosmos-lab.org -DnsSuffix cosmos-lab.org -TunnelType IKEv2 -EncryptionLevel Required -AuthenticationMethod EAP -SplitTunneling -RememberCredential -PassThru }}}
    39 * {{{ Add-VpnConnection -Name vpn.bed.cosmos-lab.org -ServerAddress vpn.bed.cosmos-lab.org -DnsSuffix cosmos-lab.org -TunnelType IKEv2 -EncryptionLevel Required -AuthenticationMethod EAP -SplitTunneling -RememberCredential -PassThru }}}
    40 * {{{ Add-VpnConnection -Name vpn.grid.orbit-lab.org -ServerAddress vpn.grid.orbit-lab.org -DnsSuffix orbit-lab.org -TunnelType IKEv2 -EncryptionLevel Required -AuthenticationMethod EAP -SplitTunneling -RememberCredential -PassThru }}}
    41 * {{{ Add-VpnConnection -Name vpn.outdoor.orbit-lab.org -ServerAddress vpn.outdoor.orbit-lab.org -DnsSuffix orbit-lab.org -TunnelType IKEv2 -EncryptionLevel Required -AuthenticationMethod EAP -SplitTunneling -RememberCredential -PassThru }}}
    42 * {{{ Add-VpnConnection -Name vpn.sb1.orbit-lab.org -ServerAddress vpn.sb1.orbit-lab.org -DnsSuffix orbit-lab.org -TunnelType IKEv2 -EncryptionLevel Required -AuthenticationMethod EAP -SplitTunneling -RememberCredential -PassThru }}}
    43 * {{{ Add-VpnConnection -Name vpn.sb2.orbit-lab.org -ServerAddress vpn.sb2.orbit-lab.org -DnsSuffix orbit-lab.org -TunnelType IKEv2 -EncryptionLevel Required -AuthenticationMethod EAP -SplitTunneling -RememberCredential -PassThru }}}
    44 * {{{ Add-VpnConnection -Name vpn.sb3.orbit-lab.org -ServerAddress vpn.sb3.orbit-lab.org -DnsSuffix orbit-lab.org -TunnelType IKEv2 -EncryptionLevel Required -AuthenticationMethod EAP -SplitTunneling -RememberCredential -PassThru }}}
    45 * {{{ Add-VpnConnection -Name vpn.sb4.orbit-lab.org -ServerAddress vpn.sb4.orbit-lab.org -DnsSuffix orbit-lab.org -TunnelType IKEv2 -EncryptionLevel Required -AuthenticationMethod EAP -SplitTunneling -RememberCredential -PassThru }}}
    46 * {{{ Add-VpnConnection -Name vpn.sb5.orbit-lab.org -ServerAddress vpn.sb5.orbit-lab.org -DnsSuffix orbit-lab.org -TunnelType IKEv2 -EncryptionLevel Required -AuthenticationMethod EAP -SplitTunneling -RememberCredential -PassThru }}}
    47 * {{{ Add-VpnConnection -Name vpn.sb6.orbit-lab.org -ServerAddress vpn.sb6.orbit-lab.org -DnsSuffix orbit-lab.org -TunnelType IKEv2 -EncryptionLevel Required -AuthenticationMethod EAP -SplitTunneling -RememberCredential -PassThru }}}
    48 * {{{ Add-VpnConnection -Name vpn.sb7.orbit-lab.org -ServerAddress vpn.sb7.orbit-lab.org -DnsSuffix orbit-lab.org -TunnelType IKEv2 -EncryptionLevel Required -AuthenticationMethod EAP -SplitTunneling -RememberCredential -PassThru }}}
    49 * {{{ Add-VpnConnection -Name vpn.sb8.orbit-lab.org -ServerAddress vpn.sb8.orbit-lab.org -DnsSuffix orbit-lab.org -TunnelType IKEv2 -EncryptionLevel Required -AuthenticationMethod EAP -SplitTunneling -RememberCredential -PassThru }}}
    50 * {{{ Add-VpnConnection -Name vpn.sb9.orbit-lab.org -ServerAddress vpn.sb9.orbit-lab.org -DnsSuffix orbit-lab.org -TunnelType IKEv2 -EncryptionLevel Required -AuthenticationMethod EAP -SplitTunneling -RememberCredential -PassThru }}}
    51 * {{{ Add-VpnConnection -Name vpn.sb10.orbit-lab.org -ServerAddress vpn.sb10.orbit-lab.org -DnsSuffix orbit-lab.org -TunnelType IKEv2 -EncryptionLevel Required -AuthenticationMethod EAP -SplitTunneling -RememberCredential -PassThru }}}
     26[[Image(PowerShell1.png, 600px)]]
     27
     28Cut and paste the pair of commands into the !PowerShell window as show in figure below:
     29
     30[[Image(PowerShell2.png, 600px)]]
     31
     32Alternatively, [download the Windows !PowerShell script] to your local machine, right-click on it and run it as administrator.
     33
     34Once VPN connection(s) are created, you will be able to bring the connection menu up by left mouse click on the network icon on the Windows task bar:
     35
     36[[Image(VPN1.png), 300px)]]
     37
     38Select the appropriate connection (for which you must have current reservation) which will prompt you for your username and password (only the very first time you activate that particular VPN connection):
    5239
    5340
    54 Replace $SERVER with the server fqdn above, replace $SUBNET with the subnet above
     41[[Image(VPN2.png, 300px)]]
    5542
    56 * Windows
    57  1. {{{ Add-VpnConnection -Name $SERVER -ServerAddress $SERVER -DnsSuffix $DOMAIN -TunnelType IKEv2 -EncryptionLevel Required -AuthenticationMethod EAP -SplitTunneling  -RememberCredential -PassThru }}}
    58  1. {{{ Add-VpnConnectionRoute -ConnectionName "$SERVER -DestinationPrefix $SUBNET -PassThru }}}
     43[[CollapsibleEnd]]
     44
     45[[BR]]
     46
     47[[CollapsibleStart(Linux)]]
     48 Comming soon
     49[[CollapsibleEnd]]
     50
     51[[BR]]
     52
     53[[CollapsibleStart(MacOS)]]
     54 Comming soon
     55[[CollapsibleEnd]]
     56
     57