OSX and OpenVPN

[frater]

Recently Apple killed off the PPTP client access with their release of Sierra.
It didn't bother them that people were actually relying on it to get access to the Microsoft Windows Server of their work.
Yes, I know it's not safe. So are a lot of things and we're still doing it.

There are many possibilities to solve this problem and I wanted to know if the combo

https://tunnelblick.net/ and OpenVPN in Freetz is the easiest to implement and is in practice working reliably.

 

[meiser79]

Just use the VPN access feature included in the official FritzBox image. It's based on IPSec, there're a lot of clients for any operating system.

But yes, Tunnelblick is also working fine (I use it myself).

 

[frater]

Thanks for your answer.
I have the VPN removed for 6 or more years to save a few bytes and because the protocol was proprietary.
I can vaguely remember that there was much more wrong with it at the time.

I tried to setup a SBS to use L2TP, but somehow it doesn't want to connect.

Can I use the native OSX client to connect to the Fritzbox?
If I can't then maybe the AVM-client is good?
Will investigate more tomorrow.

Thanks for your info...

 

[KunterBunter]

Can I use the native OSX client to connect to the Fritzbox?

Yes, of course! Because the protocol IKEv1 (or Cisco IPsec) was never proprietary.
And the VPN must not be removed in the Fritzbox to save a few bytes.

 

[frater]

Because the first client that needs it desperately has a 7360v1 I have been busy a long time before I finally had a flashable firmware.
Í can't have it running without the Zabbix agent.

I'm sure there was something awkward with the VPN a long time ago.
Some strange Windows client maybe?
I believe it can do even a site-to-site VPN.
The only cheap router that could do a site-to-site IPsec VPN was a Netgear FVS318 in 2004.
I think I started using the Fritzbox in 2008.
I don't believe it could be used with standard clients.

Just set it up and have it now working with my Android device.
Will test tomorrow with the MacBook

 

[KunterBunter]

I don't believe it could be used with standard clients.

It only depends which "standard" they support. The biggest problem with standards is: there are so many.

 

[frater]

It works great using the native OSX-client.

Still, out of interest.
I'm convinced that I had valid reasons to dismiss AVM's VPN-solution 6 or more years ago.
What I see now is something different than I can remember.
You don't know what I mean?

Too bad, as I could have used it immediately after that PPTP-client got thrown out of Sierra (or maybe even before).

BTW IPSec needs (or needed) a license fee to be paid to Cisco. EDIT: I tried to find some confirmation of this, but can't find it. I was told this some 10 years ago.

 

[KunterBunter]

This may have been true some 10 years ago.