Page 1 of 1

[SOLVED: Mostly important UPDATE !!!!] VPN SSL portal?

Posted: Mon Oct 18, 2010 2:14 am
by greeg
Hi world,

I'm interest about building a VPN server at home. I often move from an office to an other, with different security policy and levels. In many times, I cannot access to my home server in SSH (even if running on 443), because many of my customers have now DPI proxy firewall, with NTLM authentication, that forbidden ssh packet... In addition, I have to used customer's Windows, with very restricted right about installing software (like ipsec client that create virtual NIC drivers...).

So, I was thinking about running a VPN SSL Portal, with a clientless connection (I mean, a browser and a certificate and that's all) that should permit me to access to remote desktop, command line of my servers etc. through my SSL Tunnel.

My question is simple, is OpenVPN can do that?

Thanks!
GreeG

Re: VPN SSL portal?

Posted: Mon Oct 18, 2010 10:22 pm
by greeg
Hello,

Maybe I was not clear enough ;)

What I would do:

.Archi:
PC ---- Proxy ----(Net)---- Routeur.home [NAT]---- Serveur.OpenVPN.home

.Tunnel establishement:
PC (https:// Serveur.OpenVPN.home)---Proxy---(Net)---Routeur.home---Serveur

.Established connection:
PC (web browser still opened)----[SSL Tunnel]---Serveur.OpenVPN.home

.Tunnel using:
PC (putty -->> web browser still opened)----[SSL]---Serveur.OpenVPN.home---Serveurs SSH

Is it possible?

Re: VPN SSL portal?

Posted: Tue Oct 26, 2010 2:39 am
by greeg
Well, answering to myself: No it's not possible.

The only VPN stuff that contains portal with browser features I mentioned (actually an java or activeX plugin that handle your NIC and installed a TUN driver) are Juniper and Cisco.

2links to explain what i wanted:
http://cisr.univ-lyon1.fr/guichet/doc/pinsa.pdf
http://www.cict.fr/IMG/pdf/VpnDidactNC.pdf
(once time, it's in French ;))

Thanks!

Re: [SOLVED] VPN SSL portal?

Posted: Mon Nov 15, 2010 3:34 pm
by greeg
Well,

A helpfull user (thk to U rpcblast) bring me the solution: openvpn ALS. It's alive and pretty ready to be use on my server!!

thx,
GreeG