An EdgeRouter firmware update from 1.8.5 to 1.9 broke my L2TP based VPN. After the update my l2tp connection to local subnets was no longer working. Note that I have a load balancing setup with eth0 and eth1 being the load balanced WAN interfaces. It seems that due to the changes done for the l2tp… Read More: EdgeRouter: Force add the default routes to the load balanced… »
After seting up Security Onion as my home data center IDS (see https://blog.voina.org/data-center-ids-solution-using-security-onion/) I started to integrate monitoring of other resources to it. The first idea was to add the monitoring of my EdgeMax routers. Security Onion has a syslog-ng service that is able to receive client syslog data. Then we can visualize this data… Read More: Data Center: Add EdgeRouter logs to Security Onion »
An enterprise environment has to be monitored for external threats. There are a lot of very expensive IDS (Intrusion Detection System) that do this for you but you can set up in a production environment a very good solution for zero cost. The strength of an IDS is given by the IDS threats database, a… Read More: Data Center: IDS solution using Security Onion »
Because the number of my systems increased moving all my stuff to a rack was the right decision to avoid cable spaghetti and administration hell. But when you have a rack you need to have an administration console for it. Looking on the market (the deals market) the cheapest console I could find was some… Read More: Server Rack: Create your own low-cost rack console »
Open Shortest Path First (OSPF) is a routing protocol for Internet Protocol (IP) networks. Because I have site-to-site OpenVPN and IPSEC tunnels between my primary and remote sites I ended up defining lots of static routes. The environment started to be complex enough to justify the use of OSPF that is supported by EdgeRouter. The… Read More: EdgeRouter: Routing through OpenVPN and IPSEC with OSPF »
The following are the steps I used to perform to set up an IPSEC VPN with a vti (virtual tunnel interface). The advantage is that using a vti gives us a route-able interface so making it easy to work with the IPSEC tunnel. The current setup looks like: Primary Site: ER-8 (with load-balancing WAN1 and… Read More: EdgeRouter: IPSEC site-to-site with Virtual Tunnel Interface »
Trying to fix my OpenVPN site-to-site link and due to the environment update I had to do some changes. The initial setup of the OpenVPN is here https://blog.voina.org/edgerouter-dual-wan-hair-pin-multiple-networks-openvpn-site-to-site-vpn/ First of all there is a new EdgeRouter ER-8 that is directly linked to the main ISP I got this from Amazon.de see Ubiquiti ER-8 Netzwerk/Router .… Read More: EdgeRouter: Policy Based Routing for OpenVPN when Load Balancing dual… »
Very important information about the SafeNet software and licences. I get all the time very puzzled clients that find it difficult to understand how to see the license validity and how to install the e-token support. In order to obtain the software and to be able to monitor your licences you need an account with… Read More: SafeNet(Gemalto) Licence and software client »
In the following I will try to show how to generate user certificates on e-tokens by using the Windows CA. This tokens can be used after that for secure user authentication or signing. Prerequisites: – Install the Windows CA service. This comes a standard feature in Windows Server 2012. – Internet Explorer 9 and up… Read More: Secure authentication using SafeNet(Gemalto) security tokens and Windows CA »
My setup becomes more and more complicated bellow there are the updated steps of my configurations with references to the original posts containing the partial configurations. STEP 1 EdgeRouter : Dual WAN with Hair Pin Initially I started with a dual-wan configuration with some extra setting to exclude from load balancing the hair pin connections:… Read More: EdgeRouter: Dual WAN + Hair Pin+ Multiple networks + OpenVPN… »