opensafely-core / opensafely-core/sysadmin

Investigate alternative TPP VPN clients

Open
#31 6 comments 0 reactions 1 assignee View on GitHub

@lucyb is already working on this.

Since Mar 22, 2023.

Dominant language
Python
Stars
0
Forks
0
Avg merge
2d 7h
Merged PRs (30d)
3

Description

TPP currently provides a specific Windows x64 client to connect to the their VPN.

This is problematic for our many users who need to connect to the VPN on Mac or Linux, who have to run an x64 windows VM to run the client, which is currently not an option at all on new M1 macs.

TPP have said we can use an alternative client, although they are keen that this client is kept up to date.

The TPP VPN is currently configured to use the IPSec with IKEv1 and a pre-shared key.

On Linux, the strongswan package can do this, based on exploratory testing.

MacOSX doesn't support IKEv1, we would need to find an m1 compatible client.

However, IKEv1 is quite old, and IKEv2 is a) supported OOTB on MacOSX b) the recommended setting for IPSec.

Sonicwall 7 supports IKEv2, and AFAICS so does it's client

So, a possible route to resolve this is to ask TPP to switch the VPN to IKEv2, and then Mac and Linux support is much easier, and we are upgrading the protocol to a better version at the same time. AIUI, uses of the existing client shouldn't be affected at all.

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.