Login or Register to Ask a Question and Join Our Community

Sponsored Content
Full Discussion: VNC over SSH on a reversible tunnel
Top Forums UNIX for Advanced & Expert Users VNC over SSH on a reversible tunnel Post 302591452 by chebarbudo on Thursday 19th of January 2012 01:35:29 PM
Old 01-19-2012
Hi Corona688,

And thanks so much for the idea. It sounds fantastic!
I'm now thinking of using this idea on a standard basis with all my clients.
I tried to get started with VPN in general.
And if I understand well, I can create sort of a global private network among all my customer's offices and mine. All controled by a VPN server that I'll choose to host public rather than behind my box.

Image

I got a few questions if you don't mind:

The public VPN server.
  • I will host it on a dedicated server at OVH.
  • It will have a public IP address (say 83.84.85.86).
  • Does it need to have a second NIC for the VPN address or is it just a setting in the service configuration.
  • Can I set it to route all traffic between my office and my customers and to route all traffic between my customers and me but not between my custmers?

All the network boxes.
  • If I understand well, there's nothing I need to configure given that the connection will be outgoing (from each network server to the VPN server). Is that correct?

All the network Debian servers.
  • I will install OpenVPN and set it to connect to the VPN server (83.84.85.86). That's it?
  • They usually just have one NIC. Do I just need to set them with a VPN compatible IP address?
  • At that point, will my Debian server be able to SSH connect to any client Debian server ?

All the network workstations.
  • I'd like to not set anything there. Just DHCP.
  • If I tell them the gateway is their local Debian server. And then if I tell the server to route requests through the VPN.
  • Will all the workstation look like they are in the same network?

This project seems very exciting!
I can't wait for another hint!
I know it's a lot of questions to ask so don't feel pressured and just answer whatever you have time for.

Thank you SOO much for your brilliant idea.

Santiago
 

10 More Discussions You Might Find Interesting

1. UNIX for Dummies Questions & Answers

vnc over an ssh tunnel Linux to Linux to Windows

I *think* what I want to do is not only possible but easy, but as a "dummy" :) I can't figure it out. Here's what I have: Linux (Ubuntu 10.04) laptop that is not in my house, but has an Internet connection. Linux (Ubuntu 9.04) computer in my house that has unfettered access to the... (6 Replies)
Discussion started by: WesleyC
6 Replies

2. UNIX for Advanced & Expert Users

ssh decipher a tunnel

Two question here, but it's only one on the protocol point of view. If two persons use the same key to connect to a SSH server is there a risk they can decipher the other tunnel. In other terms is that less safe than if they have two separate keys. Same question if two persons use the same user... (2 Replies)
Discussion started by: moi
2 Replies

3. UNIX for Advanced & Expert Users

Stopping SSH tunnel

I have initiated a tunnel for vncserver. now i want to stop it. is there any way except sleep option? (2 Replies)
Discussion started by: majid.merkava
2 Replies

4. Cybersecurity

RDP over SSH Tunnel

Hi all, I'm trying have an alternative way of connecting into a Corporate network. Mostly in case the VPN down as I cannot also change the security policy. I want to expose windows RDP over ssh tunnel. I have 3 hosts in my scenario 1- Host a : Windows 2k8 has no internet access just only an... (3 Replies)
Discussion started by: h@foorsa.biz
3 Replies

5. UNIX for Dummies Questions & Answers

SSH tunnel working for ssh but not for sshfs

I'm trying to setup a link between my home pc (work-machine) and a server at work (tar-machine) that is behind a gateway (hop-machine) and not directly accessible. my actions: work-machine$ ssh -L 1234:tar-machine:22 hop-machine work-machine$ ssh -p 1234 user@127.0.0.1 - shh access on... (1 Reply)
Discussion started by: Vathau
1 Replies

6. IP Networking

Help with SSH tunnel?

I have a Java web app on machine (X) that needs to talk to an LDAP server (Y) on :636, but the LDAP server is only accessible on a particular network. I can login to a machine (Z) on that network from X, and this machine can talk to the LDAP server on :636. How can I tunnel so that X can... (2 Replies)
Discussion started by: spacegoose
2 Replies

7. UNIX for Advanced & Expert Users

Ssh tunnel question

Hi all I have a suite of scripts that ssh to remote servers within a cluster and run some tests. This is done from a central server so that all of the test results can be captured in one location. Problem is I now have 509 tests and the number is growing. The scripts work by establishing a... (2 Replies)
Discussion started by: steadyonabix
2 Replies

8. Proxy Server

WebSocket over SSH tunnel - is it possible?

Hello, I have a video streaming application that utilizes a WebSocket for the server <-> client communication. My goal is to make the video streaming service available over the internet in the cases where neither the server nor client have public IPs. One way to do this is over a VPN... (8 Replies)
Discussion started by: Vladislav
8 Replies

9. Solaris

Tunnel X over ssh for 11.3

Hello Solaris experts: Trying to bring the 11.3 gdm screen over ssh to a Linux Box: I did the following: 1. made chanes to /etc/ssh/sshd_config & bounced ssh daemon: # X11 tunneling options X11Forwarding yes X11DisplayOffset 10 X11UseLocalhost yes 2. From the remote Linux box: ... (6 Replies)
Discussion started by: delphys
6 Replies

10. UNIX for Advanced & Expert Users

Tunnel using SSH

I am not clear with the part of concept of Tunneling using ssh. ssh -f -N -L 1029 192.168.1.47:25 james@192.168.1.47 I found out that above code works for me . but didn't quite well understood how ti works and need to ask you guys some questions. since we are using tunnel through ssh ... (2 Replies)
Discussion started by: lobsang
2 Replies

LEARN ABOUT DEBIAN

l2tpipsecvpn

L2tpIPsecVpn(1) 					      General Commands Manual						   L2tpIPsecVpn(1)

NAME

       L2tpIPsecVpn - L2tp over IPsec VPN Manager applet for the GNOME Desktop

SYNOPSIS

       L2tpIPsecVpn [options]

DESCRIPTION

       This  GUI is not a network manager plugin. However, it provides a systray icon in the indicator applet from which a non privileged user can
       establish and bring down L2TP over IPsec VPN connections.

       From there the user can add, remove and edit vpn connections.

       Editing allows configuring various options for IPsec, L2TP and PPP.

       Among others, the user can configure eg. the gateway, the use of either PSK or a certificate for authentication, various  L2TP  options	as
       redial-	timeout and attempts and of course all important PPP options. It also allows you to configure PPP for tunnel splitting because you
       can add routes as you want.

       When applying your settings, all necessary configuration files are written accordingly (ipsec.conf, xl2tp.conf, options.xl2tpd, opensc.conf
       up and down scripts ...).

       It relies on Openswan and xl2tp packages as the underlying protocol handlers.

       You  can  also  use  certificates  on your local machine or, if e.g. OpenSC is installed and configured, even on a smart card to handle PPP
       authentication.

       The GUI automatically detects when network interfaces are going up or down and can (if so configured) automatically establish or close  VPN
       connections.

OPTIONS

       startConnectionEditor
	      Starts the connection editor dialog.

       applySettings
	      Write  configuration  files  according  to  the connection settings, must be started with root privileges, ie use gksudo as non root
	      user.

       deleteAllConfFiles
	      Delete all configuration files, must be started with root privileges, ie use gksudo as non root user.

AUTHORS

       Werner Jaeger

version 1.0.9							    11 Oct 2012 						   L2tpIPsecVpn(1)
All times are GMT -4. The time now is 03:31 PM.
Unix & Linux Forums Content Copyright 1993-2022. All Rights Reserved.
Privacy Policy