Category: Vyatta

Vyatta VPN User Management

January 12, 2014

Here are the basic commands needed for managing VPN users on the Brocade Vyatta vRouter available in RackSpace Cloud. Add New User

config
set vpn l2tp remote-access authentication local-users \
username [USERNAME] password [PASSWORD]
commit
save
exit

config

set vpn l2tp remote-access authentication local-users \

username [USERNAME] password [PASSWORD]

commit

save

exit

Remove A User

config
delete vpn pptp remote-access authentication local-users username [USERNAME]
commit
save
exit

config

delete vpn pptp remote-access authentication local-users username [USERNAME]

commit

save

exit

Change User Password Same as adding a new user.

config
set vpn l2tp remote-access authentication local-users \
username [USERNAME] password [PASSWORD]
commit
save
exit

config

set vpn l2tp remote-access authentication local-users \

username [USERNAME] password [PASSWORD]

commit

save

exit

Error 850 When Connecting to Vyatta VPN With Windows 8

January 12, 2014

While setting up a Windows 8 workstation to connect to a Brocade Vyatta firewall on RackSpace Cloud, I got the following error: Error 850: The Extensible Authentication Protocol type required for authentication of the remote access connection is not installed on your computer. Turns out the fix is pretty simple – on the Connections Properties -> Security tab we need to explicitly set the authentication protocols as shown in this image: Credit goes to Brendan at SysadminSpot for providing this solution: Error Connecting to VPN – Error 850: The Extensible Authentication Protocol type required for authentication…

Configure Vyatta To Allow Incoming MySQL Connections

November 14, 2013

This article demonstrates how to configure a Vyatta firewall to allow incoming requests from a group of clients to an internal MySQL server. Assuming that you have three external MySQL clients with IPv4 addresses: [A:y.y.y.y] [B:y.y.y.y] [C:y.y.y.y] We’ll put these addresses in a group called [clientgroup]. You can name the group appropriately for your installation. The external address of the firewall is [x.x.x.x] and the internal address of the MySQL server is [z.z.z.z].

# enter config mode
config

# create address group
set firewall group address-group [clientgroup] address [A:y.y.y.y]
set firewall group address-group [clientgroup] address [B:y.y.y.y]
set firewall group address-group [clientgroup] address [C:y.y.y.y]

# select "untrusted" firewall - this it firewall rule set that controls
# traffic passing through the device
edit firewall name untrusted

# allow the mysql traffic from the source address group
set rule 505 action accept
set rule 505 destination port '3306'
set rule 505 protocol 'tcp'
set rule 505 source group address-group [clientgroup]

# add nat rules
set nat destination rule 15 inbound-interface eth0
set nat destination rule 15 destination address [x.x.x.x]
set nat destination rule 15 destination port mysql
set nat destination rule 15 protocol tcp
set nat destination rule 15 translation address [z.z.z.z]

# enter config mode

config

# create address group

set firewall group address-group [clientgroup] address [A:y.y.y.y]

set firewall group address-group [clientgroup] address [B:y.y.y.y]

set firewall group address-group [clientgroup] address [C:y.y.y.y]

# select "untrusted" firewall - this it firewall rule set that controls

# traffic passing through the device

edit firewall name untrusted

# allow the mysql traffic from the source address group

set rule 505 action accept

set rule 505 destination port '3306'

set rule 505 protocol 'tcp'

set rule 505 source group address-group [clientgroup]

# add nat rules

set nat destination rule 15 inbound-interface eth0

set nat destination rule 15 destination address [x.x.x.x]

set nat destination rule 15 destination port mysql

set nat destination rule 15 protocol tcp

set nat destination rule 15 translation address [z.z.z.z]

Secure Hosting On RackSpace Cloud

August 23, 2013

We’re going to build a highly secure hosting environment on RackSpace Cloud using Cloud Networks and the new Brocade Vyatta vRouter image. The diagrams shows the target configuration: There are 4 networks: Public – this is the RackSpace Public Cloud/Internet network. The vRouter connects via eth0 to this network with public address of 1.1.1.1 LocalPrivate – this is a private Cloud Network that connects the vRouter and the servers. This network uses the private 192.168.3.0/24 subnet. DBPrivate – this is a private Cloud Network that connects the web and database servers. This network uses the private 192.168.4.0/24 subnet. Service – this is RackSpaces multi-tenent management network. This network is not being used and is not shown in the diagram. On these networks are three servers: Brocade Vyatta vRouter – this device provides a router, firewall and VPN termination point Web Server – provides hosting for the web application. Database Server – provides

Windows L2TP/IPSec Client Config

August 22, 2013

Here’s the procedure to configure a Windows client to connect to a L2TP/IPsec VPN server. You’ll need to know: VPN Server Address IPSec Pre-shared Secret Username Password To get started: 1. Open the “Start” menu, enter “setup a vpn” in the search box and hit Enter. The “Create a VPN connection” dialog will open. You can also get to this dialog by going to: Start -> Control Panel -> Network and Sharing Center -> “Setup a new connection or network” -> “Connect to a workplace” -> Next -> “Use my Internet connection (VPN)” 2. Enter the VPN Server Address in the “Internet Address” field. Enter a name for the VPN connection like “My VPN” in the “Destination Name” field. Click the “Don’t connect now…” checkbox. Click the Next button. 3. Enter the username and password. Click the Create button. Click the Close button. 4. Open the network connections dialog by

Reliable Penguin provides managed web hosting, systems administration, website and server migrations, and expert consulting.

Recent Updates

Fixing WP‑CLI “eval()’d code” Parse Errors on PHP 8.4 During “wp db import”

Force a 404 With a CloudFront Function (Always)

HTTP Basic Auth Is Dead

WordPress 6.8 Speculative Loading Can Break HTTP Basic Auth

Zero‑Trust for WordPress Admin with Cloudflare Access (Email One‑Time Codes)

Category: Vyatta

Vyatta VPN User Management

Error 850 When Connecting to Vyatta VPN With Windows 8

Configure Vyatta To Allow Incoming MySQL Connections

Secure Hosting On RackSpace Cloud

Windows L2TP/IPSec Client Config

Recent Updates

Categories

Get a free consultation from Reliable Penguin