Page 1 of 1

VPN feature request

Posted: Tue Jun 20, 2017 10:52 am
by brandycoke
Hi there, I'd like to see if you guys are open to the idea of more ways to connect Sonic's VPN, i.e. IPSec or IKEv2, instead of just OpenVPN. Thanks!

Re: VPN feature request

Posted: Tue Jun 20, 2017 12:49 pm
by danielg4
You know, they've always offered Cisco IPsec. The OpenVPN is a relatively recent addition.

Re: VPN feature request

Posted: Tue Jun 20, 2017 3:47 pm
by brandycoke
According to their website, "The Cisco VPN client is being deprecated"

https://wiki.sonic.net/wiki/VPN_Service ... _client.3F

This is all I can tell, not even sure if it's till working.

Actually, I'm looking for a way to keep the connection but use it when I want, with my non-von connections at the same time.

Even with OpenVPN, I believe I can do this if they use "tap" instead of "tun". In this case I can just point my connection to it when needed.

Re: VPN feature request

Posted: Tue Jun 20, 2017 4:28 pm
by danielg4
brandycoke wrote:According to their website, "The Cisco VPN client is being deprecated"

https://wiki.sonic.net/wiki/VPN_Service ... _client.3F

This is all I can tell, not even sure if it's till working.
Just prior to posting the above, I tried it to see whether it still worked, and it did, both Standard and Enhanced.
Actually, I'm looking for a way to keep the connection but use it when I want, with my non-von connections at the same time.

Even with OpenVPN, I believe I can do this if they use "tap" instead of "tun". In this case I can just point my connection to it when needed.
You have that backwards, because "tap" forwards an entire network interface, not just a connection over it like "tun" does. All modern VPN's use a "tun" device.

Re: VPN feature request

Posted: Tue Jun 20, 2017 5:19 pm
by brandycoke
You have that backwards, because "tap" forwards an entire network interface, not just a connection over it like "tun" does. All modern VPN's use a "tun" device.
Interesting. In my case, I have another VPN service that uses tap and I can keep it connected and use only when I want (i.e. curl --interface tap0 ), but Sonic's connection (tun) takes over entirely. If it's not too much trouble, can you point me how to achieve the same goal using Sonic?

Thanks very much!

Re: VPN feature request

Posted: Tue Jun 20, 2017 6:37 pm
by danielg4
There should be no reason you can't "curl --interface tun0"; just arrange the routing table the way you want:
https://community.openvpn.net/openvpn/w ... ectGateway

Re: VPN feature request

Posted: Tue Jun 20, 2017 6:55 pm
by brandycoke
Adding "route-noexec" seems does the trick. Thanks a lot for your time!