Solved Mac Book Air and Ubiquiti VPN
-
@mike-davis said in Mac Book Air and Ubiquiti VPN:
@DustinB3403 thanks for that. I'll be checking it out later today. Do you know if it's normal for the VPN connection to start automatically when wifi is on, or do you have to connect each time?
You have to connect each time.
-
There may be some setting, somewhere to automatically connect, but I would never use it or recommend it. (if it exists)
Doesn't make sense to automatically connect to a VPN every time you're at a specific location, just because the device is on-site.
-
There is no such thing as a Ubiquiti VPN.
What VPN method are you using?
-
@jaredbusch According to Ubiquity they support VPN's on their edge router.
https://help.ubnt.com/hc/en-us/articles/204950294-EdgeRouter-L2TP-IPsec-VPN-Server
-
@kyle said in Mac Book Air and Ubiquiti VPN:
@jaredbusch According to Ubiquity they support VPN's on their edge router.
https://help.ubnt.com/hc/en-us/articles/204950294-EdgeRouter-L2TP-IPsec-VPN-Server
But they don't have their own VPN protocol. . . which is @JaredBusch's point.
-
@kyle said in Mac Book Air and Ubiquiti VPN:
@jaredbusch According to Ubiquity they support VPN's on their edge router.
Can you tell me the protocols and security design of this "Ubiquiti VPN" ? How does it compare to IPSEC or OpenVPN?
-
@mike-davis Under Network in the System Prefrences you can create a VPN with the appropriate settings.
Set the configuration settings
Also tick the option to Show VPN status in Menu Bar
Under the options on the VPN connection you can choose the Verbose logging to identify any issues.
-
This post is deleted! -
@jaredbusch it's L2TP over IPsec
-
@kyle said in Mac Book Air and Ubiquiti VPN:
@jaredbusch it's L2TP over IPsec
I know this. I use it. As well as OpenVPN and IPSEC site to site.
The point is @Mike-Davis did not give anywhere near the correct information to actually get any kind of realistic assistance.
-
@JaredBusch You're right. I set it up with L2TP over IPsec. With SonicWalls, they have their Global VPN connector and others have "Net Extender" and Cisco had their own VPN software. (forgot what it is since I haven't used it in so long.)
So I'm using the built in Mac VPN connector configured to use L2TP over IPsec. The client is never in the office with his laptop, but wants to connect back to his desktop. It would be nice if it connected every time he turned his laptop on. That way he could just launch the RDP connection and log in.
-
@mike-davis said in Mac Book Air and Ubiquiti VPN:
It would be nice if it connected every time he turned his laptop on. That way he could just launch the RDP connection and log in.
It's 2 clicks with the mouse!
-
@dustinb3403 said in Mac Book Air and Ubiquiti VPN:
@mike-davis said in Mac Book Air and Ubiquiti VPN:
It would be nice if it connected every time he turned his laptop on. That way he could just launch the RDP connection and log in.
It's 2 clicks with the mouse!
I know, but before I took over the network, it was no clicks because he was using a Server 2003 as the firewall and his desktop was mapped right through. So now that I made things so cumbersome by putting in a real firewall, I need to make it easy for the owner...
-
@mike-davis said in Mac Book Air and Ubiquiti VPN:
@dustinb3403 said in Mac Book Air and Ubiquiti VPN:
@mike-davis said in Mac Book Air and Ubiquiti VPN:
It would be nice if it connected every time he turned his laptop on. That way he could just launch the RDP connection and log in.
It's 2 clicks with the mouse!
I know, but before I took over the network, it was no clicks because he was using a Server 2003 as the firewall and his desktop was mapped right through. So now that I made things so cumbersome by putting in a real firewall, I need to make it easy for the owner...
It's 2 clicks with the mouse!
-
@dustinb3403 said in Mac Book Air and Ubiquiti VPN:
It's 2 clicks with the mouse!
He owns the company. I'm getting paid to see if I can save him two clicks..
-
@mike-davis said in Mac Book Air and Ubiquiti VPN:
@dustinb3403 said in Mac Book Air and Ubiquiti VPN:
It's 2 clicks with the mouse!
He owns the company. I'm getting paid to see if I can save him two clicks..
So you're billing him by the minute to do research. .
-
@dustinb3403 said in Mac Book Air and Ubiquiti VPN:
So you're billing him by the minute to do research. .
That's pretty much how consulting works... Don't you wish every request from your users had a price tag on it?
OTOH there are days like Monday where I spent all day with a managed contract client waiting for Verizon to get the internet up.
-
@mike-davis said in Mac Book Air and Ubiquiti VPN:
@dustinb3403 said in Mac Book Air and Ubiquiti VPN:
So you're billing him by the minute to do research. .
That's pretty much how consulting works... Don't you wish every request from your users had a price tag on it?
OTOH there are days like Monday where I spent all day with a managed contract client waiting for Verizon to get the internet up.
Just seems scummy. . . no offense, I get it. Time is money, and he's asking you to do this specific research so fair game. I just think I wouldn't heavily research it as I personally have better things to do with my life. .
-
@mike-davis said in Mac Book Air and Ubiquiti VPN:
@JaredBusch You're right. I set it up with L2TP over IPsec. With SonicWalls, they have their Global VPN connector and others have "Net Extender" and Cisco had their own VPN software. (forgot what it is since I haven't used it in so long.)
So I'm using the built in Mac VPN connector configured to use L2TP over IPsec. The client is never in the office with his laptop, but wants to connect back to his desktop. It would be nice if it connected every time he turned his laptop on. That way he could just launch the RDP connection and log in.
Put ZeroTier on his desktop and laptop. Configure RDP to use the ZT IP and you are done. Access from anywhere that allows SSL.
-
@JaredBusch ZeroTier for the win! Once we got the Ubiquiti VPN configured and working, it proved to be unreliable. At first we thought it was the user, but after watching what he was doing and checking the stats on the ER, we found it was nothing he was doing - it just wasn't reliable.
I tried ZeroTier myself and then set it up for the client and it works just like I wanted it to.
