Always On Vpn with Smoothwall

[Andycat]

Has anyone successfully setup up AoVPN using Smoothwall? We currently have Direct Access .

[ibpalle]

For client VPN, our OpenVPN client could be run at startup with saved credentials but there is no specific always on functionality in the client as such.

[3s-gtech]

When you say ‘using Smoothwall’, do you mean ‘while also using Smoothwall’?

 

If so, yes. I followed the usual guides, and didn’t need to do anything on my SW.

[Andycat]

When you say ‘using Smoothwall’, do you mean ‘while also using Smoothwall’?

 

If so, yes. I followed the usual guides, and didn’t need to do anything on my SW.

 

Yes, that's what we mean. My NM seems to be struggling with the DMZ bits

[CHiLL]

I set up our Microsoft Always-On VPN while we had Smoothwall, though this was back in 2018/2019. We're no longer using Smoothwall and I can't remember the steps I'd taken. Though I'm pretty sure that it was relatively simple, like ensuring the TCP and UDP ports are open from the WAN to your VPN server's NIC. I have two NICs on the VPN server, one on the server internal VLAN and the other on our firewall VLAN. The Smoothwall firewall rule directed the traffic from outside to the firewall NIC.

[slugshead]

I'm still running DA, literally no reason to go to always on yet.

[Andycat]

I'm still running DA, literally no reason to go to always on yet.

 

Well, we sort of think that, but it's not really supported anymore apparently.

[meakjoe]

Yes I set it up this year and a couple of year ago on another network, both using Smoothwall.

 

I did it a bit differently and had 2 VLANs both terminating on the Smoothwall, one 'External' and the other 'Internal'. That way you can set up firewall rules on the Smoothwall to be more granular and only allow access to certain internal servers/services. The port forward then forwards the 2 ports on the external side to the server IP for external connectivity. All seems to work pretty well so far.

[slugshead]

Well, we sort of think that, but it's not really supported anymore apparently.

 

It's not going to be supported beyond server 2019, which is in extended support until 2029, I'm okay with that

[verysmartbenn]

I know a permenant fix, get rid of smoothwall. It's horrible and will cause you nothing but issues. iBoss or anything BUT smoothwall. I remember we had it for a couple of months and just had to chuck it, causes so many issues more than good.