Smoothwall S8 VPN

[ozydave]

Need to setup our Smoothwall S8 to act as our VPN.

But where do I start?

 

I’ve read the KB articles but beyond that, I’m a bit lost.

Need to set it up for about 15 users to connect into our network. We have a couple of permanent remote workers.

 

Anyone got any pointers? Be gentle with me.

[ibpalle]

Setup an AD connection if you are using AD, if not, setup local users in the directories section.

 

Add a firewall rule to allow traffic from the SSL VPN interface into the LAN

 

Go to the VPN section in networking and create a CA and a certificate in the 2 certificate sections.

 

Go to the global page in VPN and set the certificate you created as the one to use. Then scroll down to the SSL VPN section.

 

Select a subnet that is suitable for your network - this is the subnet users will get their IP address on when they connect.

 

Use UDP 1194 for the protocol since users are connecting from home mainly.

 

Use the button at the bottom to export the Windows client and the ovpn file.

 

Install the client and use the import ovpn to create a connection.

 

The ovpn file can be used by other OS clients.

[ozydave]

Cheers,

 

So as my internet connection goes through my local authority's firewall, I assume I will need them to open ports 443 and 1194 to my smoothwall?

[ibpalle]

UDP port 1194 or tcp port 443, depending on what you select on the global options.

 

Also, you will need to fill in the 'SSL VPN client gateway(s):' field with the external IP you have been allocated on the local authority's firewall.

[ibpalle]

Forgot to add - when troubleshooting, the reports - realtime - system logs can be handy - select SSL VPN in the section dropdown.

[browolf]

what is this section asking for "SSL VPN network address:"

 

There's an error in the log if I give it a free address on our internal network.

[Aprice]

what is this section asking for "SSL VPN network address:"

 

There's an error in the log if I give it a free address on our internal network.

 

That is the subnet that VPN clients get their addresses from, not your 'main' subnet. Smoothwall should take care of this subnet for you.

 

For example we use 10.110.0.0 with the subnet mask 255.255.255.0

 

Edited November 7, 2022 by Aprice

[browolf]

That is the subnet that VPN clients get their addresses from, not your 'main' subnet. Smoothwall should take care of this subnet for you.

 

For example we use 10.110.0.0 with the subnet mask 255.255.255.0

 

[ATTACH=CONFIG]67003[/ATTACH]

 

So that's a private network between the smoothwall and the outside clients. is it meant to be a subnet of the main network or totally separate unconnected?

[ibpalle]

So that's a private network between the smoothwall and the outside clients. is it meant to be a subnet of the main network or totally separate unconnected?

 

A separate subnet from what is already in use.

[browolf]

A separate subnet from what is already in use.

 

It's working in that I brought a laptop home and the client says connected but only the w: mapping to the pupil server works.

 

I can ping the pupil server and the dev server but no domain controllers or the sims server 🤔

 

What is the problem here?

[ibpalle]

It's working in that I brought a laptop home and the client says connected but only the w: mapping to the pupil server works.

 

I can ping the pupil server and the dev server but no domain controllers or the sims server 🤔

 

What is the problem here?

 

 

Ping by IP, hostname or host and domain name? It may be that IP and host.domain.name works but hostname does not.