Koozali.org: home of the SME Server

software update tonight, now no network

Offline Jean-Philippe Pialasse

  • *
  • 2,746
  • +11/-0
  • aka Unnilennium
    • http://smeserver.pialasse.com
Re: software update tonight, now no network
« Reply #15 on: November 22, 2021, 07:25:22 PM »
Not sure you can run bridged AND routed at the same time.

But bridged will probably be the one that causes the issue

JP will comment but he's a busy boy the next few weeks so be patient while he saves lives.

you can run the 3 openvpn contribs on the same server.  i do !

bridge and s2s are the less intrusive as they do not require bridging which is the delicate operation. 

Offline ReetP

  • *
  • 3,722
  • +5/-0
Re: software update tonight, now no network
« Reply #16 on: November 22, 2021, 08:05:33 PM »
Cool.

So openvpn bridge is not the same as smeserver bridge, and they're not rrally dependent. Hence uninstalling the openvpn contribs won't remove it.

Nonetheless I imagine it's still where the issue lies.

Did you really want a bridged network device? Or just after openvpn and installed by mistake?
...
1. Read the Manual
2. Read the Wiki
3. Don't ask for support on Unsupported versions of software
4. I have a job, wife, and kids and do this in my spare time. If you want something fixed, please help.

Bugs are easier than you think: http://wiki.contribs.org/Bugzilla_Help

If you love SME and don't want to lose it, join in: http://wiki.contribs.org/Koozali_Foundation

Offline robf355

  • *
  • 70
  • +0/-0
Re: software update tonight, now no network
« Reply #17 on: November 22, 2021, 09:54:25 PM »
I had bridged and routed on 9.2. I actually used the routed for tablet to server connection when at customers. The bridge section was installed because it keeps the certificates up to date. Though I also had the bridge service started on 9.2 so I could use Windows to connect to my cifs shares on the odd occasion when away from the office.
I didn't ever try and install the actual openvpn from a non sme package. Both mine were from contribs as far as I was aware.
To be honest the 9.2 versions worked really well both with iPhone and android

Offline Jean-Philippe Pialasse

  • *
  • 2,746
  • +11/-0
  • aka Unnilennium
    • http://smeserver.pialasse.com
Re: software update tonight, now no network
« Reply #18 on: November 22, 2021, 10:28:33 PM »
smeserver-bridge is also needed for softethernet and for different needs.

so while openvpn-bridge needs it they are two things.


routed is needed for ios things because bridge is mot supported. 
bridge is to be prefered for laptop and android.


try wireguard for the tablet.  you will love it. 

Offline TerryF

  • grumpy old man
  • *
  • 1,821
  • +6/-0
Re: software update tonight, now no network
« Reply #19 on: November 23, 2021, 12:59:01 AM »
try wireguard for the tablet.  you will love it.

Yep, a tick for this..
--
qui scribit bis legit

Offline robf355

  • *
  • 70
  • +0/-0
Re: software update tonight, now no network
« Reply #20 on: November 24, 2021, 04:18:27 PM »

try wireguard for the tablet.  you will love it.
Installed - so easy to setup, is it as secure as open vpn?

Offline ReetP

  • *
  • 3,722
  • +5/-0
Re: software update tonight, now no network
« Reply #21 on: November 24, 2021, 07:57:41 PM »
Installed - so easy to setup, is it as secure as open vpn?

Possibly. There are a lot of sites where you can compare between Ipsec v2, OpenVPN, and Wireguard (forget Ipsec v1/L2TP/PPP)

Each has benefits and drawbacks.

OpenVPN and Ipsec have been around a long time, and are well known and tested. They can both use certificates which can enhance your security considerably, but are not so easy to set up.

It will depend on your needs.

For home use defintitely try Wireguard as it is simple to install and use. But you need an app so consider your privacy there.

For more business orientated work you may want to look at OpenVPN or IPsec. They might not be quite as 'quick', but they are the industry standards and used by governments and business globally.

OpenVPN needs an app for a mobile - but clearly privacy is involved - and certificates.

Ipsec can be used on mobiles natively so that is a bit less overhead and better privacy. It can be used with just passwords, or with RSA signatures, or certificates.

Wireguard and OpenVPN have Koozali implementations. I have had an ipsec implementation for years which I need to finish upgrading for v10 and plus better mobile support. yet another job :-(

I'd have a good read around so you really understand the differences, pros and cons.

YMMV... :-)
...
1. Read the Manual
2. Read the Wiki
3. Don't ask for support on Unsupported versions of software
4. I have a job, wife, and kids and do this in my spare time. If you want something fixed, please help.

Bugs are easier than you think: http://wiki.contribs.org/Bugzilla_Help

If you love SME and don't want to lose it, join in: http://wiki.contribs.org/Koozali_Foundation