[ale] VPN connections at Emory

[Brian MacLeod]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

On 1/17/13 12:28 PM, arxaaron wrote:
> On 2013/01/17, at 11:41 , Jim Kinney wrote:
> 
>> What was the final consensus on VPN usage from the ALE-Central
>> meeting space? I would MUCH prefer to show real virtualization
>> rather than screen shots.
> 
> My understanding is that the podium hardwire connection does not
> have any firewall restrictions.
> 
> Perhaps Brian McLeod (cc) could weigh in on this as I think he was
> using VPN in one of his recent presentations.


Sorry about the late response, I have been on a ship the past few days.

Emory Guest allegedly allows VPN connectivity, but using Cisco
AnyConnect and its ilk yields at best a 10 minute usable connection
before termination. I have not seen an out of the box configuration of
any VPN product work on the Emory Guest network.

However, using OpenVPN on TCP 443 does work, and while this is less
than optimal for OpenVPN, it works without interruption.  The
filtering on Emory's wireless sees SSL traffic occurring on 443, and
that's just fine with the rules in place.

I have been using this the last couple times I have been at a meeting
using VPSs (virtual private servers) that cost me a few dollars a
year.  By doing that I don't make it as obvious I am doing something
"bad" by directly connecting to a host Emory could figure out is a
home connection, and, I get better uptime and connection speeds with
the VPS anyway.

It would not surprise me that the podium connection is unfiltered.  It
will also probably not surprise you that I would recommend NOT
connecting anything with Windows on it to that connection.  Unfiltered
means it is unfiltered both ways, and I seem to remember Emory hands
out non-NAT'ed IPs on those connections.  You get the picture.

Brian

-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0.18 (Darwin)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

iQE4BAEBCAAiBQJQ/rgkGxhoa3A6Ly9rZXlzZXJ2ZXIudWJ1bnR1LmNvbQAKCRD5
XCJY/q4Y6LQbCACR1brk2jFbecf1gHIBGOfBmcta8c/jKpEerH5v69W4+XUXhIii
A2DE6jPRBkzqC8GuPHWKyWhYk1NJZJzbtS8ufsxuLbctbry821eqRJ7jblwUEcWs
0HJYafcs+YNNAXXO50/CgD+z2JPX8McVqRg9fPzY0Xab6jUa0KEwyzgAG/yCqOzE
8lnYmh/3CA4Y0/HzdR7Z8oq6yy0XbVejk98JQbFjgXnCblC6ro2/b3ab15hTtrQQ
2MYB5Q5M5ZnGDsBmTKi8BG7c1VvEUGXqWJ2l9s21toTYM29K6VFRRBnqKQG4GXV+
5ukNqIBqailxLgzuD2i1A+orGm98//nSI+PN
=cYRH
-----END PGP SIGNATURE-----