Smoothwall S9+

[DarkMaster]

we have just had a new S9+ installed to replace the old S8 we had. Went smoothly till we tried to use the SSL VPN, Smoothwall have subsequently fixed this for the windows application but it doesn't work for Open VPN. they have said installing Maiden will fix the problem but we use radius accounting on the box and Microsoft AD directories for our Unifi wifi which maiden doesn't support. has any body upgraded to maiden and got radius and ms authentication working as i have a job open with smoothwall but they are very lacklustre. this is only affecting our mac users but is a real pain.

[tom_newton]

Maiden does support radius accounting - someone has given you a bad steer there, it no longer supports getting groups from radius

 

[tom_newton]

Can you PM me your deets so I can look into this?

[DarkMaster]

Cheers Tom, just had that same reply from support. But do I need to upgread the four child boxes to maiden first or can I just upgrade the parent that has the issue?

[tom_newton]

Generally we say upgrade the children first (so they dont get pushed a config they dont understand) 

[DarkMaster]

Yep support beat you too it again, also will the smoothwall client still work with maiden or do we need everyone to use open vpn

[tom_newton]

Bloody support, too fast

The old client... I would avoid it, I think it will still work, but openvpn is better.

[DarkMaster]

upgraded all boxes to maiden, openvpn connect connects but it doesnt pass the dns or domain info so cant remote to anything on the network but the original smoothwall vpn client works fine so still wont work for Macs, phones or ipads which we were tyring to fix

[ChrisC]

23 hours ago, DarkMaster said:

upgraded all boxes to maiden, openvpn connect connects but it doesnt pass the dns or domain info so cant remote to anything on the network but the original smoothwall vpn client works fine so still wont work for Macs, phones or ipads which we were tyring to fix

 

I recently configured a VPN and had the same (or similar) issue.

I had to open up the profile and add the following lines:

 

dhcp-option ADAPTER_DOMAIN_SUFFIX <SEARCH_DOMAIN>

 

dhcp-option DNS <IP address of DNS server> (repeat this line for multiple servers)

 

I haven't got the profile to hand, but from memory I think that's all that was required to get it to work. I'll check on Tuesday.

 

 

[ChrisC]

Actually it was one or both of these:

 

dhcp-option DOMAIN <Domain>
dhcp-option ADAPTER_DOMAIN_SUFFIX <Domain>

 

Hope that helps!

[DarkMaster]

dhcp-option ADAPTER_DOMAIN_SUFFIX <Domain> worked a treat, thank you