VPN Clients

Missing ...

• hostname & Port for each connection
• test on volker's laptop partly ... 
• why is it not working with Cynet & Zscaler?
• .... more? 

Windows

VPN-Server WireGuard

• WireGuard: ok

VPN-Server OpenConnect

• OpenConnect VPN: ok
  
• Cisco Secure Client 5.1 (internal, MS-Store) VPN: ok
• Cisco AnyConnect 4.10 (external Cisco Installation) VPN: ok
• Cisco Secure Client 5.1 (external Cisco Installation) VPN:ok

VPN-Server SoftEther

• SoftEther VPN: ok (Port 5555)
  
• OpenVPN: ok
• SSTP VPN: ok (Require encryption, EAP-MSCHAP v2) - Secure Socket Tunneling Protocol (User: <user>@RAS-VPN-Serverhub !!!)
• L2TP VPN: ok (Require encryption, EAP-MSCHAP v2) - Layer 2 Tunneling Protocol with IPsec (L2TP/IPsec) - Requires port 500 & 4500 udp ONLY! (User: <user>@RAS-VPN-Serverhub !!!)
  

iOS

• Cisco Secure Client 5.1 VPN App: ok
• WireGuard: ok
• OpenVPN: ok (ovpn file on "vg download" - with description how to import on iOS ...)
  
• L2TP VPN: ok - Layer 2 Tunneling Protocol with IPsec (L2TP/IPsec)
  - Requires port 500 & 4500 udp ONLY! (User: <user>@RAS-VPN-Serverhub !!!)
• IPsec VPN: no - "server not found" 
• IKEv2: not implemented in SoftEther?
  

Detailed Information

• Squid Proxy on port 61923 => all web traffic gets routed via linux-volker (pi-hole - block commercial)
• Easy, just with a user and setup Proxy in Web-Browser or WiFi 
• OpenConnect / Cisco AnyConnect / Cisco Secure Client on port 443 (ssl, https) - Google DNS … => commercial
• OpenConnect VPN Client - https://gui.openconnect-vpn.net/download/ 
• Windows VPN App Cisco AnyConnect is working good (License information)
• iOS App CiscoAnyConnect/SecureClient is working as well - stable
• Windows Cisco AnyConnect Version 4 is working good - License?
• Windows Cisco Secure Client is NOT working (Version 5) 
• Wireguard with "normal" DNS on port 51001
• Special user for Wireguard, 8.8.8.8 used as DNS-Server, Wireguard Ports are required UDP & TCP 51001 (often blocked in hotels or company WiFis)
• Wireguard with DNS linux-volker on port 51001 (pi-hole - block commercial)
• Same user for Wireguard can be used, we just use the IP 45.89.127.31 as DNS-Server, Wireguard Ports are required UDP & TCP 51001 (often blocked in hotels or company WiFis) 
• OpenVPN on port 1194 via Softether - User: pi-hole-dns-only (pi-hole - block commercial)
• (often blocked in hotels or company WiFis) 
• Softether on port 5555 

 

( ubuntu cisco anyconnect secure client openconnect wireguard openvpn open vpn open-vpn )

#