Welcome guest. Before posting on our computer help forum, you must register. Click here it's easy and free.

Author Topic: Vyatta Newbie  (Read 6455 times)

0 Members and 1 Guest are viewing this topic.

..::Merlyn::..

  • Guest
Vyatta Newbie
« on: September 14, 2011, 03:41:46 PM »
I have a small dilemma.

I have Vyatta 6.1 and I have NO IDEA how to use it.

I have to use it to complete an assessment so it's vital that i use it.

I am running on VirtualBox 4.1.0

I have got:

Ser 1: Active Directory 1
Ser2: Active Directory 2
(Ser 1 and 2 replicate)
Ser 3: Radius 1
Ser 4: Radius 2
Ser 5: IIS (Web Server)
(All servers are Windows Server 2008 R1 x84)
Vyatta
Windows 7 WS (Windows 7 x64)

These are all Virtual Machines

What I need is VPN from WS1 to DMZ Radius Server 1 or 2
Then from Radius server 1 or 2 authenticate against the Active Directory. But not authenticate on the AD server itself, (Confusing i know).
Is there any way to replicate Radius server 1 and 2?
DNS is installed on AD1 and AD2


The image that is attached is a very rough copy of what i need.

I need to configure Vyatta to allow traffic from the Radius servers to the AD servers to authenticate
i need to also configure the ports that are open on Vyatta.

Any help would be greatly appreciated.

Thanks

..::Merlyn::..





[regaining space - attachment deleted by admin]

..::Merlyn::..

  • Guest
Re: Vyatta Newbie
« Reply #1 on: September 14, 2011, 04:09:43 PM »
BUMP

..::Merlyn::..

  • Guest
Re: Vyatta Newbie
« Reply #2 on: September 14, 2011, 04:23:53 PM »
IP addresses are as follows:

Active Directory 1: 192.168.1.1
Active Directory 2: 192.168.1.2
Radius 1: 192.168.2.1
Radius 2: 192.168.2.2
IIS: 192.168.2.8
Vyatta (Eth0) - 192.168.1.5/24
           (Eth1) - 192.168.2.5/24
Windows 7: 192.168.1.11

Rob Pomeroy



    Prodigy

  • Systems Architect
  • Thanked: 124
    • Me
  • Experience: Expert
  • OS: Other
Re: Vyatta Newbie
« Reply #3 on: September 15, 2011, 01:15:13 AM »
Wow, Vyatta.  I had a play with that a couple of years ago.  Very impressive.  Cisco-like command line interface.

If I recall correctly, the beta I used didn't yet have the web interface ready.  If I were you, I would look to get the web interface up and running, assuming it's available in 6.1.  What previews I saw of the web interface, it looked much more intuitive (if you're familiar with application firewall admin) than the command line.

Just curious: why have you been put in the position of having to use a tool you've not been trained to use?
Only able to visit the forums sporadically, sorry.

Geek & Dummy - honest news, reviews and howtos