Re: Tunneling in NetBSD

2020-11-22 Thread Bodie
On 22.11.2020 15:41, Rhialto wrote: On Mon 16 Nov 2020 at 07:07:15 -0700, Andy Ruhl wrote: Just a general question to this thread: How do clients use OpenVPN? Do you have to install it, and is it widely available? My basic research suggests that most clients will have to install it. And

Re: Tunneling in NetBSD

2020-11-22 Thread Greg Troxel
Rhialto writes: > On Mon 16 Nov 2020 at 07:07:15 -0700, Andy Ruhl wrote: >> How do clients use OpenVPN? Do you have to install it, and is it >> widely available? My basic research suggests that most clients will >> have to install it. > > And is there a way to make it so that only some programs

Re: Tunneling in NetBSD

2020-11-22 Thread Rhialto
On Mon 16 Nov 2020 at 07:07:15 -0700, Andy Ruhl wrote: > Just a general question to this thread: > > How do clients use OpenVPN? Do you have to install it, and is it > widely available? My basic research suggests that most clients will > have to install it. And is there a way to make it so that

Re: Tunneling in NetBSD

2020-11-19 Thread Manuel Bouyer
On Thu, Nov 19, 2020 at 02:18:26PM +1030, Brett Lymn wrote: > On Thu, Nov 19, 2020 at 07:08:38AM +1030, Brett Lymn wrote: > > > > I will dig up the document I wrote about the setup. My fuzzy memory is > > that there > > were no hacks required. > > Little wonder my memory was fuzzy - I did this

Re: Tunneling in NetBSD

2020-11-18 Thread Brett Lymn
On Thu, Nov 19, 2020 at 07:08:38AM +1030, Brett Lymn wrote: > > I will dig up the document I wrote about the setup. My fuzzy memory is that > there > were no hacks required. Little wonder my memory was fuzzy - I did this 13 years ago. I found the documentation. I did use a radius server as

Re: Tunneling in NetBSD

2020-11-18 Thread Brett Lymn
On Wed, Nov 18, 2020 at 10:33:29AM +0100, Manuel Bouyer wrote: > > This is interesting, I need something similar. > Could you share more details on how you did this ? > I though I had to hack raacon for this ... > I will dig up the document I wrote about the setup. My fuzzy memory is that

Re: Tunneling in NetBSD

2020-11-18 Thread Manuel Bouyer
On Wed, Nov 18, 2020 at 07:28:51AM +1030, Brett Lymn wrote: > [...] > > Years ago I used NetBSD to configure a vpn end point for a clint, I used > hybrid > xauth which was a combination of a certificate as well as username/password > that > allowed two classes of access to the network, one

Re: Tunneling in NetBSD

2020-11-17 Thread Brett Lymn
On Tue, Nov 17, 2020 at 10:16:34PM +0100, Bodie wrote: > > Or something way easier? https://www.wireguard.com/ Assuming you are running current... -- Brett Lymn -- Sent from my NetBSD device. "We are were wolves", "You mean werewolves?", "No we were wolves, now we are something else

Re: Tunneling in NetBSD

2020-11-17 Thread Bodie
On 17.11.2020 21:58, Brett Lymn wrote: On Mon, Nov 16, 2020 at 03:50:21PM +0200, Andreas Gustafsson wrote: Greg Troxel wrote: > My suggestion is openvpn. [...] > You do need to set up certificates Not if you use the static key encryption mode. Whilst this is correct the OP did mention

Re: Tunneling in NetBSD

2020-11-17 Thread Brett Lymn
On Mon, Nov 16, 2020 at 03:50:21PM +0200, Andreas Gustafsson wrote: > Greg Troxel wrote: > > My suggestion is openvpn. > [...] > > You do need to set up certificates > > Not if you use the static key encryption mode. Whilst this is correct the OP did mention android which could mean a mobile

Re: Tunneling in NetBSD

2020-11-16 Thread Andy Ruhl
On Mon, Nov 16, 2020 at 7:29 AM Greg Troxel wrote: > There is another big issue lurking, which is how VPN approaches interact > with firefwall traversal. There are a lot of firewalls that block a lot > of things out there. Yes, very much true. I like a layer 4 methods on clients for this

Re: Tunneling in NetBSD

2020-11-16 Thread Greg Troxel
Andy Ruhl writes: > How do clients use OpenVPN? Do you have to install it, and is it > widely available? My basic research suggests that most clients will > have to install it. You are right that most clients need to install something. I installed OpenVPN on Android, available from f-droid

Re: Tunneling in NetBSD

2020-11-16 Thread Vincent DEFERT
Of course, all clients have to install the VPN client of their choice, as well as well as any certificate or complementary authentication SW/HW tools (e.g. smartcard, OTP tokens). In my experience, small companies often use OpenVPN and large ones (e.g. banks) prefer proprietary solutions such

Re: Tunneling in NetBSD

2020-11-16 Thread Andy Ruhl
Just a general question to this thread: How do clients use OpenVPN? Do you have to install it, and is it widely available? My basic research suggests that most clients will have to install it. What about built in VPN clients? Isn't L2TP pretty much standard? Thanks. Andy

Re: Tunneling in NetBSD

2020-11-16 Thread Andreas Gustafsson
Greg Troxel wrote: > My suggestion is openvpn. [...] > You do need to set up certificates Not if you use the static key encryption mode. -- Andreas Gustafsson, g...@gson.org

Re: Tunneling in NetBSD

2020-11-16 Thread Greg Troxel
"Francisco Valladolid H." writes: > I need setup a NetBSD for tunneling (VPN) to my clients, notebooks (windows > or MacBook) maybe cellphone (android). > I’m thinking using L2TP(maybe more standard) or OpenVPN. > > Maybe, ikev2 can be a good choice. Is NetBSD ready

Re: Tunneling in NetBSD

2020-11-16 Thread Francisco Valladolid H.
I had a basic setup, a ARM board. ¿Is OpenVPN suitable for this? Thank you. On Mon 16 Nov 2020 at 6:29 Brad Spencer wrote: > "Francisco Valladolid H." writes: > > > [1:text/plain Hide] > > > > Hi friends. > > > > I need setup a NetBSD for tunne

Tunneling in NetBSD

2020-11-15 Thread Francisco Valladolid H.
Hi friends. I need setup a NetBSD for tunneling (VPN) to my clients, notebooks (windows or MacBook) maybe cellphone (android). I’m thinking using L2TP(maybe more standard) or OpenVPN. Maybe, ikev2 can be a good choice. Is NetBSD ready for ikev2 (aka racoon2) ? Some suggestions for me. Thank