[ale] WiFi at Emory meeting building?

[Michael H. Warfield]

On Thu, 2012-08-16 at 10:22 -0400, Brian MacLeod wrote:
> On 8/16/12 9:45 AM, Michael H. Warfield wrote:
> > 
> > If that's the case, an SSL/TLS based VPN will almost certainly work.  A
> > DTLS (SSL/TLS over UDP) such as Cisco Anyconnect / Openconnect may or
> > may not work depending on port.  OpenVPN - probably a crap shoot, again,
> > depending on the port you use.
> > 
> > I strong have my doubts you would be able to get away with an IPSec /
> > Openswan / StrongSWAN / vpnc VPN.  All of those would require port
> > 500/udp and then either protocol 50/51 or 4500/udp to work.  That might
> > be a bit much to ask for out of guest access.

> I can add my anecdotal evidence to the pile.  Emory Guest Access does
> not allow for reliable Cisco AnyConnect/IpSec connections.  It will let
> you establish, but invariably, within 10 minutes, that connection will
> get dropped.  I have been meaning to get one of my VPS boxes set up with
> OpenVPN on port 443 and I keep forgetting to do that so i can test how
> that works.  I bet not really, but it doesn't hurt too much to try.

Be sure you do that in tcp mode, not udp mode (default).  The
performance in tcp mode is going to suck, but it should work.  I'm
playing with iodine now and almost have my iodine server up and running.
I needed an excuse to play with this nasty anyways.  :-P  I'll also drop
an OpenVPN server on port 53/udp on a different IP and see if that can
work as well.

> Maybe I can get some time today and get that working...

> Brian

Regards,
Mike
-- 
Michael H. Warfield (AI4NB) | (770) 985-6132 |  mhw at WittsEnd.com
   /\/\|=mhw=|\/\/          | (678) 463-0932 |  http://www.wittsend.com/mhw/
   NIC whois: MHW9          | An optimist believes we live in the best of all
 PGP Key: 0x674627FF        | possible worlds.  A pessimist is sure of it!
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 482 bytes
Desc: This is a digitally signed message part
Url : http://mail.ale.org/pipermail/ale/attachments/20120816/a7ad2c6a/attachment-0001.bin