@dave247 said in Looking for solutions to allow remote users access to their internal psychical computers:

@JaredBusch said in Looking for solutions to allow remote users access to their internal psychical computers:

@dave247 said in Looking for solutions to allow remote users access to their internal psychical computers:

@JaredBusch said in Looking for solutions to allow remote users access to their internal psychical computers:

@dave247 said in Looking for solutions to allow remote users access to their internal psychical computers:

I know this topic is all the buzz right now..

Currently we are having our users remotely access their internal computers by using secured laptops as "dumb terminals" as they establish an SSLVPN connection to our firewall/security appliance and then RDP from said laptop into their workstation. It works ok but the user experience is clunky with multiple logins and we have had various issues/concerns and hope to eventually get something in place that works better.

I was looking at Citrix and VMware Horizon 7 and they have some "remote to PC" options that are included with each of their main packages. It would obviously be a waste to purchase an expensive product for the purpose of using one single side-feature that lets remote users access their internal company computers. So I wanted to see if you guys could provide any suggestions.

I understand there may be a lot of resistance here against a lot of these products since they are big and expensive and may not be wise business choices, but I am trying to work with what I have and what I know and I know that I don't know much..

If anyone can point to a product/service/mixture of technologies that would help users directly connect to their internal computers while providing a simple and solid user experience, that would be a huge help.

ZeroTier (with Flow rules) + RDP is how I solved this for my clients.

Thanks Jared, I will check that out now. Do you have any sort of latency issues or anything or is it pretty snappy through and through?

It is point to point, so as fast as the network segments can be

Gravy. I'm assuming you're referring to zerotier.com?

Yes. See this recent thread for flow rules.

@dave247 said in Looking for solutions to allow remote users access to their internal psychical computers:

@JaredBusch said in Looking for solutions to allow remote users access to their internal psychical computers:

@dave247 said in Looking for solutions to allow remote users access to their internal psychical computers:

I know this topic is all the buzz right now..

Currently we are having our users remotely access their internal computers by using secured laptops as "dumb terminals" as they establish an SSLVPN connection to our firewall/security appliance and then RDP from said laptop into their workstation. It works ok but the user experience is clunky with multiple logins and we have had various issues/concerns and hope to eventually get something in place that works better.

I was looking at Citrix and VMware Horizon 7 and they have some "remote to PC" options that are included with each of their main packages. It would obviously be a waste to purchase an expensive product for the purpose of using one single side-feature that lets remote users access their internal company computers. So I wanted to see if you guys could provide any suggestions.

I understand there may be a lot of resistance here against a lot of these products since they are big and expensive and may not be wise business choices, but I am trying to work with what I have and what I know and I know that I don't know much..

If anyone can point to a product/service/mixture of technologies that would help users directly connect to their internal computers while providing a simple and solid user experience, that would be a huge help.

ZeroTier (with Flow rules) + RDP is how I solved this for my clients.

Thanks Jared, I will check that out now. Do you have any sort of latency issues or anything or is it pretty snappy through and through?

It is point to point, so as fast as the network segments can be

@WrCombs said in How to set up Unifi Controller For Unrouted Private Network?:

@Dashrender said in How to set up Unifi Controller For Unrouted Private Network?:

@WrCombs said in How to set up Unifi Controller For Unrouted Private Network?:

Weird follow up questions,
What's the reason to put the AP as a Static? is it cause I dont have a DHCP server ?

How else will the UAPs get an IP address if you don't assign one staticly, or have a DHCP server?

Connecting will be the same right? find the SSID and Connect via a password?

Yes or now would have worked just fine,

from a simple connectivity stand point - that is correct. Assuming the UAPs are already configured, once you join their WiFi network, they should just pass the traffic back to the wired network, no different than a dumb switch (at least I assume they will do that - it is possible that they might not simply act as a dumb switch). BUT you wouldn't be able to manage the UAPs, the UAPs would have no way themselves of talking to the controller - unless they use a broadcast protocol, but I'm pretty sure they don't.

Then there's a chance that this AP wont work. I believe the Tablets require Broadcast Protocol to run Aloha, at least that's one of the issues we had with the last site when they setup their own AP's for the Network.

@dave247 said in Looking for solutions to allow remote users access to their internal psychical computers:

I know this topic is all the buzz right now..

Currently we are having our users remotely access their internal computers by using secured laptops as "dumb terminals" as they establish an SSLVPN connection to our firewall/security appliance and then RDP from said laptop into their workstation. It works ok but the user experience is clunky with multiple logins and we have had various issues/concerns and hope to eventually get something in place that works better.

I was looking at Citrix and VMware Horizon 7 and they have some "remote to PC" options that are included with each of their main packages. It would obviously be a waste to purchase an expensive product for the purpose of using one single side-feature that lets remote users access their internal company computers. So I wanted to see if you guys could provide any suggestions.

I understand there may be a lot of resistance here against a lot of these products since they are big and expensive and may not be wise business choices, but I am trying to work with what I have and what I know and I know that I don't know much..

If anyone can point to a product/service/mixture of technologies that would help users directly connect to their internal computers while providing a simple and solid user experience, that would be a huge help.

ZeroTier (with Flow rules) + RDP is how I solved this for my clients.

Without a green screen or other good color to make the base, it sucks though.

@CCWTech On Fedora it is right there when you click settings.

@scottalanmiller said in Zoom meetings on Ubuntu:

Zoom kinda sucks, an agent install for desktop use? Lame.

Assume much? It is not required.

Here is my updated rule set that I use on my personal ZT network.

# Whitelist only IPv4 (/ARP) and IPv6 traffic and allow only ZeroTier-assigned IP addresses
drop                      # drop cannot be overridden by capabilities
  not ethertype ipv4      # frame is not ipv4
  and not ethertype arp   # AND is not ARP
  and not ethertype ipv6  # AND is not ipv6
#  or not chr ipauth      # OR IP addresses are not authenticated (1.2.0+ only!)
;

# Allow SSH, SMTP, HTTP, HTTPS, and Cockpit by allowing all TCP packets (including SYN/!ACK) to these ports
accept
  ipprotocol tcp
  and dport 22 or dport 25 or dport 80 or dport 443 or dport 9090
;

# Drop TCP SYN,!ACK packets (new connections) not explicitly whitelisted above
break                     # break can be overridden by a capability
  chr tcp_syn             # TCP SYN (TCP flags will never match non-TCP packets)
  and not chr tcp_ack     # AND not TCP ACK
;

# Accept other packets
accept;