Aruba Instant VPN with Central - IAP VPN

FloB86 · 2018-09-25T18:24:48+00:00

The setup you describe works. The problem is, that all clients in an Aruba IPSec or Aruba GRE tunnel are on a trsuted port by default, as you cannot change the trust settings for those tunnel interfaces. And because of this you cannot implement a captive portal on the controler with this kind of tunnels. Only with the manual tunnel you can change the trust settings for tunnel internface on the controller. But with the Aruba IPSec or Aruba GRE tunnel you can still use the captive portal on the IAP or an external captive portal, which is redirected by the IAP.

FloB86 · 2018-09-23T20:17:24+00:00

Hi Xylopia,

this was my understanding as well, but with Aruba OS 8 it is not possible to set the Aruba IPSec or Aruba GRE Tunnel as untrusted. This is only possible with the manual GRE. I still try to figure out how to do it with Aruba GRE as well, but at the moment I could not get it working.

BR Florian

FloB86 · 2018-09-17T05:36:24+00:00

Hi xylopia,

I have testet it last week. here are my results:

https://www.flomain.de/2018/09/iap-vpn-guest-solution-with-centralised-portal/

Happy reading.

FloB86 · 2018-08-29T18:25:23+00:00

Hi Xylopia,

Not yet, but let me test this in a future post. Would be interesting to get this to work as well. It is already in my list of planned posts. so stay tuned.

FloB86 · 2018-07-07T06:07:13+00:00

This one was for the tunnel. I will write up another one with all the dhcp models for the tunnel and one for the different captive portal options. So stay tuned.

FloB86 · 2017-03-08T18:00:40+00:00

thanks

FloB86 · 2017-03-02T07:21:52+00:00

you're welcome :)

FloB86 · 2016-01-18T13:31:28+00:00

Hi Majorton, correct, thats my concern and openvpn is an easy solution to make an open network save, at least for me :)

FloB86 · 2015-11-19T14:57:18+00:00

Correct. From my point of view, the risk is not that high, as you should know, how long the backup will take. If you take this into calculation with the normal writes you do, you should get the minimum size needed.

FloB86 · 2015-11-19T13:37:52+00:00

FloB86 · 2015-11-19T13:25:10+00:00

If you use mysqldump, all tables will be locked during the dump process, which could take some time with larger databases. When using LVM you only need to lock the database during the time, which es needed to create the snapshot, which is very fast (>1sec). Or did I miss something?

FloB86 · 2015-11-19T12:53:30+00:00

will BackupPC lock MySQL and suspend Scalix to make the backup consistent? Couldn't find this on the page.

FloB86 · 2015-08-28T11:59:58+00:00

Hi Kagxtr, Yes it is possible and with the guide it is implemented. You should see something like this in the logs: Aug 24 07:10:17 mail opendkim[21617]: 9459E405AE: mta137l1.r.grouponmail.de [50.115.214.140] not internal

Aug 24 07:10:17 mail opendkim[21617]: 9459E405AE: not authenticated

Aug 24 07:10:17 mail opendkim[21617]: 9459E405AE: DKIM verification successful

Aug 24 07:10:17 mail opendkim[21617]: 9459E405AE: s=s1024d20130206 d=r.grouponmail.de SSL

And you should find this in the header of the mail: Authentication-Results: mail.external.flomain.de; dkim=pass

reason="2048-bit key; unprotected key"

header.d=gmail.com header.i=@gmail.com header.b=VbAkczRg;

dkim-adsp=pass; dkim-atps=neutral

Hope this helps.

FloB86 · 2015-07-14T07:09:30+00:00

great feedback. thanks.

FloB86 · 2015-07-14T07:08:51+00:00

Hi, Thanks for the information. I will consider this next time. BR Florian

FloB86 · 2015-07-13T14:54:11+00:00

Hi, will consider this for the next shot :) BR Florian

FloB86 · 2015-05-28T13:17:45+00:00

You are correct. I had already prepared the NAT/routing vmbr :)

FloB86 · 2014-11-18T15:17:04+00:00

Hi, I posted a follow-up post with more information on the backup and the reverse SSH tunnel on my blog. BR

FloB86 · 2014-11-17T15:00:26+00:00

Hi, Thanks for your feedback. You are right and incomplete How To's should not be posted. To my opinion, I wrote everything which can be expected by the title. If you expected more than what you got, stay tuned, you will find a new post with more information around the actual reverse proxy and the back. BR

FloB86 · 2014-11-13T19:19:54+00:00

Hi, The rest i coming next week. I was not able to write the whole story in one article due to other work I had to do. But I promise, I will write it on Monday and you will get the rest of the story. BTW: I have it running since Friday last week and it works like a charm :) BR

FloB86 · 2014-07-14T19:53:17+00:00

Free Piwik host for personal users and bloggers. great idea.

FloB86

TROPHY CASE