-
VPN and OS-X 10.x
Hi –
I just tied into a company from my MAC using VPN instead of iChat or logmein. I was shown “every step of the way” and I was the client.Could someone please tell me (in simple lingo) how to setup a VPN on the server side, so I can remotely connect using the built in VPN that is built into OS-X 10.5.x and OS-X 10.6. Server would be a MAC product, and NO, there is no Cisco anything involved. Just cheap stuff. Connection should be via L2TP or PPTP, so NOTHING should have to be downloaded ( I think – but what the hell do I know !).
Thanks –
Bob Zelin -
15 Replies
-
Bob is the server a simple server or advanced?
ie with vpn setup do you get a box like sys prefs time machine or do you have the full admin application ?
make a big diff.
Will run through steps when in office for an advanced server install.
It’s all pretty simple.
s
-
the server is not even a server. It’s a dedicated MAC Pro that acts as a server for one of these shared storage systems. I want to know how to set it up for VPN, so I can “break thru” firewalls in offices that won’t let me use iChat to remote into a computer. The client side is easy (System Preferences>Nework>+>VPN, and the couple of settings. Now, what do you do on the server side ?
Thanks –
Bob Zelin -
Ours is a macpro also.
What I meant was are you running OSX Server ?
We have a macpro running osx server. setup is easy for vpn through the admin app.
on the non osx server side I think you’l be installing something extra such as below.
https://www.macserve.org.uk/projects/ivpn/
lemme know if you need any more help
s
-
Bob,
You may want to try using Open VPN. https://www.openvpn.net/
We have that here in our office, use it to connect to Mac and Windows systems.
It’s very easy to configure on the client, and I’m sure the implementation on the server is fairly simple as well.
-
You sorted Bob ?
-
Hi Simon,
no, I am not sorted out. I need a FREE server application – let me explain. We currently use Apple iChat, which is free, and works quite well. RealVNC is a free download for server AND client, but free only for Win XP servers – not MAC (it’s about $50 US). If you use OS-X Server, this includes a free VNC server, but I do not use OS-X server, I just use regular OS-X (non server) for these simple servers. So far, the easy answer is “well, just spend the 50 bucks, and shut up already” – but I would have to tack this onto the cost of every system – and since iChat is free, and works on all systems except where I have secure locations (that block things like AIM, and iChat) – I am looking for a VNC solution. So my real question is what is a FREE VNC server application that I can load, if I DONT have OS-X Server on the MAC computer that is acting as a server.As I write this, it is sounding very stupid (because I would be the very person who would write back SPEND THE 50 bucks and SHUT UP).
bob Zelin
-
What! you want something for free!.. with no support!.. There’s a reason why… etc..etc.. 😉
ok so iVpn is £14.99 whats that.. 30 bucks?
Surely you can tack that on the quote?
If someones spending 5>30k on a appliance from you whats 30 bucks?
also if the purchased serial is for you, and for your uses on installs then dont see anything about a per computer license.
s
-
I think there is some confusion here from using the terms “VPN” and “VNC” interchangeably. They are definitely not synonymous.
VPN is Virtual Private Network, which allows remote computers to connect to a host and then have access to the host’s network as if the remote computer were part of the host’s local network. This is what Bob’s original post was referring to (L2TP, no Cisco, etc.) so I’ll assume that’s the kind of access he’s after here.
VNC is Virtual Network Computing. It’s essentially a remote access protocol for viewing and interacting with remote computers as if one had physical access to the computer. To most, it is simply another screen sharing protocol (which is mostly true).
Every version of OS X (client or server) has shipped with a VNC server since, I believe, Tiger (10.4). It might have even been present in 10.3 but I’m not certain. Doesn’t matter. All you need to know is that every modern Mac has VNC capability already built-in by Apple and it is only a check-box away to enable it (10.5 Leopard: System Preferences > Sharing > Remote Management). This enables a VNC server that you can use most VNC clients to connect to and control the Mac’s screen. That VNC client software can be running on another Mac, Linux or Windows as long as it supports the protocol.
VPN, on the other hand, is bundled with every Mac client, but only as client software (i.e. the software portion that lets you connect to VPN hosts/servers). To host a VPN server, you need additional software for OS X client (like the aforementioned iVPN) or you can use OS X Server, which has a VPN server built-in and works quite well. And it is very secure, which is important when dealing with remote access.
So, I think what you really want here, Bob, is to have a combination of both. You want VPN to allow you access to your client’s network and then you want to use VNC to control their screens (very Orwellian!). However, if they are blocking iChat/AIM with a firewall then I highly doubt they are going to let VPN traffic through, either. And yes, setting up a VPN behind a firewall requires certain ports to be forwarded to get through the firewall, which probably involves getting their IT people involved. Opening up a VNC port directly to a computer is a very bad idea as VNC is not encrypted by itself, so it would be unsafe. However, using VPN in conjunction with VNC should make you safe but, like I mentioned, it does take more work that just installing something and pressing the big green GO button.
There are other things you can do as well, such as ssh tunnels. The ssh protocol is very, very flexible and allows you to get into all sorts of situations that drive network administrators nuts. SSH on your client’s side can even be used to circumvent their firewall, which would be good for you but would freak out any competent network admin (the idea of bypassing a security device such as a firewall by making an outgoing tunnel to some person on the Internet should be a cause for concern, if not a full-on geek tantrum).
So, I guess what I’m saying is that you tried a VPN setup once and liked it. It apparently worked pretty seamlessly for you BECAUSE someone on the other end made it easy to use. It just didn’t fall out of the box that way. VPNs require setup, but if it is something you need then it is worth the investment in time and money. Getting your clients to cooperate and share your vision in needing this kind of access to their networks is probably a bigger challenge than setting up the software.
-Matt
PS–OpenVPN might help, but unless I’m mistaken I didn’t see an OS X binary for it. A server running OpenVPN would, I believe, require a different VPN client than what is built into OS X, so that’s another piece of the puzzle to deal with if you go that route.
-
I have secure firewall in the office.
I VPN in
run ScreenShare built into osx but hidden in /System/Library/CoreServices
type in the ip of the remote machine and voila. controlling from internally just like you do via finder.
I actually ad a list of ips to host file so fore the server in the office in screenshare i just type officeserver , hate numbers.
Nice post btw Matt.
S
-
Hey —
Thanks for clearing that all up!
I checked and OpenVPN doesn’t have a OSX download for Server. It’s only a Client VPN OSX download that I’m using.
I guess we have OpenVPN installed on our firewall, and that’s what allows us access to the Apple’s once inside our network.
Bob – Not sure how that differs from what you want to do?
Thanks all — just doing my part to try and help out 🙂
Matt
Reply to this Discussion! Login or Sign Up