vpn1.png

Introduction

Sometimes it may be necessary for users of QRIScloud to be connected to their home institution's network. This can easily be accomplished using vpn client installed on the cloud server. The following instructions outlines the process.

Normal Usage

Log in from console (see below under "First Use" on how to do this)
sudo vpnc

To disconnect:
sudo killall vpnc

Scripted way

more vpn1.sh

sudo vpnc
TUNIP=`ip \a|grep -i inet|grep tun|awk '{print $2}'|awk -F "/" '{print $1}'`
echo "Griffith IP is: $TUNIP" | mail -S smtp=smtp.griffith.edu.au -s "VPN IP $TUNIP" youremail@griffith.edu.au

This will email the newly assigned IPaddress
Reconnect using the new ipaddress! viola!

First Use

1. Log into the console using the dashboard. It is important to be on the console for reason explained later in this article.

https://dashboard.rc.nectar.org.au

Click on the down arrow beside "Current Project" ==> select a project

Click on "Manage Compute" ==> "Access & Security" ==> Create Security Group

Give it an appropriate name (e.g. vpn)

*_Under Security Groups ==>select the newly created security group (in this case, we named it vpn) and select Edit Rules*_

Click on Add Rules and add the following:
500/udp
1293/tcp
4500/udp

Click on Manage Compute ==> Instances ==> Select the instance Name and Click on the "More" arrow ==> and select security groups and add the newly created security group ==> select save

_Manage Compute ==> instances ==> select the instance name ==> Select Console Tab ==> _

If you do not see the console, click on the "Click here to show only console"

sudo yum install vpnc (only needed if the vpn client is not installed)

sudo vpnc

For security reasons, we have blanked out some of the details but please contact the local QCIF ERA for details.

The ipaddress assigned to tun0 is the vpn ipaddress and can be used to access the qriscloud server. Please note down this IPaddress and use it to access the qriscloud server. Access is now available to all home institution resources (e.g. License server, etc)

Alternatively, populate /etc/vpnc/default.conf appropriately

>>>>>>>/etc/vpnc/default.conf>>>>>>>>>>>
IPSec gateway xxxxxyyyy.griffith.edu.au
IPSec ID yyyyy
IPSec secret xxxxxxx
Xauth username s123456
Xauth password <password>

>>>>>>>><<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<

Reference

1. http://docs.hpcloud.com/compute/vpn-quickstart
2. http://wiki.strongswan.org/projects/strongswan/wiki/AwsVpc
3. http://wiki.seanmadden.net/networking/configure_strongswan_as_an_ipsec_vpn
4. http://www.lullabot.com/blog/article/using-vpnc-command-line-vpn-client