Connect from Windows VPN Client to the VPN RA Libreswan on OCI

November 1, 2019 | 3 minute read
Catalin Andrei
Master Principal Cloud Architect
Text Size 100%:
In the previous article I talked about the configuration of a Remote Access VPN (VPN-RA) server in OCI. In the following article i will use a laptop with Widows 10 and I will connect it to that VPN-RA server.
  1. Open the "VPN Settings" and create a new VPN:
    b0500f83317167400eb06f194856eebf
  2.  Populate the values that you configured on the VPN RA server:
  3. On the left side select "Change adapter options":
    0e4942e1a63a730235095555386078a6
  4. Navigate to the Properties of your VPN connection:

  5. Navigate to the security tab and select "Allow these protocols":
    9c62a5f708302a8f0c4565d04477b81c
  6. Activate NATT in windows by editing the registries:

    Computer\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\PolicyAgent (https://support.microsoft.com/en-us/help/926179/how-to-configure-an-l2tp-ipsec-server-behind-a-nat-t-device-in-windows)


    0181d1db44f37ff0cf9384251d127d3a
  7. Add routes for the VCN CIDR space and enabe split tunnel in PowerShell:
    Add-VpnConnectionRoute -ConnectionName "vpn-ra-oci" -DestinationPrefix 192.168.12.0/24
    Set-VpnConnection -Name "vpn-ra-oci"  -SplitTunneling $True
    

    ConnectionName is the name that you setup for the VPN and the DestinationPrefix is the ip address space from the VCN.

Next, navigate to the VPN connection and click on "Connect":

On the VPN-RA server i captured the packets during the connection. You can clearly see the Phase1 packets and the Phase2 and after that the ESP packets:

I demonstrated the successful connection from a Windows 10 laptop to the Remote Access VPN in OCI.

Catalin Andrei

Master Principal Cloud Architect


Previous Post

Developing SaaS Extensions using VBCS and Helidon Micro-services Part 1

Angelo Santagata | 8 min read

Next Post


Deploying Oracle Analytics Cloud Remote Data Gateway in a Private Subnet

Dayne Carley | 8 min read