Differences
This shows you the differences between two versions of the page.
|
sred:lab9 [2022/01/22 01:19] horia.stoenescu [e1. Tunnel split [5p]] |
sred:lab9 [2023/01/13 17:04] (current) horia.stoenescu [e2. Remote authentication [5p]] |
||
|---|---|---|---|
| Line 12: | Line 12: | ||
| Topology: | Topology: | ||
| - | {{{:sred:lab10.png?800|}} | + | {{:sred:sred_lab10_2022.png?800|}} |
| - | **Note**: keep the configuration already made on the latest lab (with HA on both firewalls - the local one should be primary). | + | **Note**: you can keep the configuration already made on the latest lab (with IPSec tunnels on both firewalls). |
| ===== Exercises ===== | ===== Exercises ===== | ||
| Line 200: | Line 200: | ||
| </code> | </code> | ||
| - | An issue identified on this log file is the following: | + | Known issues that are identified based on logs: |
| + | |||
| + | 1. The agent's user interface does not properly work (the workaround is described above on step e1.9): | ||
| + | <code> | ||
| + | 20220122 20:00:56.765 [sslvpn:INFO] main:370 Load profile: SslVpnToHQ | ||
| + | 20220122 20:00:56.807 [sslvpn:INFO] main:118 Get DBUS session bus address | ||
| + | 20220122 20:00:57.844 [sslvpn:INFO] main:162 DBUS session bus address not found | ||
| + | </code> | ||
| + | |||
| + | 2. Wrong subnet used for vpn clients: | ||
| <code> | <code> | ||
| 20220122 00:13:56.765 [sslvpn:INFO] sslvpn:739 Login successful | 20220122 00:13:56.765 [sslvpn:INFO] sslvpn:739 Login successful | ||
| Line 217: | Line 226: | ||
| As in our topology clients from both branches do not have Internet access, we are going to use a new Linux node (same config as above, but mac address will be **50:00:00:byte_2_eveng_ip:byte3_eveng_ip+4:byte4_eveng_ip**) that is also connected to Cloud0 network. | As in our topology clients from both branches do not have Internet access, we are going to use a new Linux node (same config as above, but mac address will be **50:00:00:byte_2_eveng_ip:byte3_eveng_ip+4:byte4_eveng_ip**) that is also connected to Cloud0 network. | ||
| - | {{:sred:ex2_topology.png?800|}} | + | {{:sred:sred_lab10_2022_2.png?900|}} |
| e2.1: Go to radius_server device and install + configure freeradius: | e2.1: Go to radius_server device and install + configure freeradius: | ||
