• 0 Posts
  • 8 Comments
Joined 1 year ago
cake
Cake day: October 1st, 2023

help-circle
  • I do work for multiple organizations and got tired of having to disconnect/reconnect VPN tunnels each time.

    Solution: Raspberry Pi. It’s got a single Ethernet port on it which makes it perfect. I used Openconnect since it was compatible with Cisco and PulseSecure (at the time). When you establish a tunnel, the routes come in as “kernel routes” assuming you have a split tunnel. I configured IPTables to NAT masquerade out each interface and I set up Quagga, a routing daemon to talk to my main gateway and redistributed my kernel routes into OSPF. That way, any of my devices can now access any networks they need. I did also have to configure my own DNS server since I needed to resolve the different private networks.