Re:IPsec Vulnerabilities and Software Security Prediction
by billyhoffman on Tuesday May 19, 2015 @01:05PM
(#9571535)
We use L2TP/IPSec to VPN into our AWS VPC. Amazon's VPN solutions aren't great, and propping up a VPN endpoint on a micro instance and an elastic IP is fairly easy. Also makes it easier to SSH/RDP/MySQL to instances in your private subnet from trusted developer machines at our office. L2TP/IPSec is built in to modern versions of OS X and Windows (though for Windows you have to tweak hidden settings to work with NAT properly)
[ Parent
| on HN ]
Re:IPsec Vulnerabilities and Software Security Prediction
by john_oshea on Tuesday May 19, 2015 @05:03PM
(#9573115)
If you have time to link to somewhere listing those hidden settings, that would be really helpful.
Re:IPsec Vulnerabilities and Software Security Prediction
by billyhoffman on Wednesday May 20, 2015 @09:41AM
(#9576198)
https://support.microsoft.com/en-us/kb/926179
The article mentions Vista and Window Server 2008, but it applies to Windows 7 and Windows 8 as well. There are some Stack Overflow threads as well.
For the VPN setup, I largely followed these instructions:
http://www.stormacq.com/build-a-private-vpn-server-on-amazon...
There are a few typos in the scripts cited in the article especially around saving the iptables rules.
OS X's native VPN client worked out of the box