VPN ThaiLIS

1
???????? VPN ?????????????? ThaiLIS??????????????
???????????

• ???????? ??????????
• ????????????????

2
VPN

• ?????????????? Intranet ??? Internet
• IP Address Limited
• ?????????????? ThaiLIS
• Solution VPN

3
VPN

• VPN ????????????????????? BUU-Net ??? OpenVPN
• ???????????????? OpenVPN
• Opensource Software
• ?????????????
• ????????????????????? VPN ????
• ???????????????? Server ??? Client
• ????????????????????? ???? LDAP , AD

4
VPN

• Virtual Private Network
• ????????????????????????
• ??????? ??????????????????????????????????????????
  ?????????? ???????????????????????????????????????
  ??????????????????????? ??????????????????????????
  ???? ????????????????????????????????????????????
  ????????????????????????????????????????
  ????????????????????????? ????????????????????????
  ?????????????????????????????????????????

5
?????? VPN

• VPN ?? 3 ?????? ?????????????????????????
• Access VPN (Host-to-Net VPN)
• Intranet VPN (Site-to-Site VPN)
• Extranet VPN

6
VPN Tunneling Protocol

• PPTP (Point to Point Tunneling Protocol)
• L2TP (Layer 2 Tunneling Protocol)
• IPSec (IP Security) ????????????????????? Layer 3
• SSL/TLS ????????????????????? Layer 4
  ??????????????? SSL

7
Network Diagram
User
125.27.65.223
202.28.0.0
BUU
UniNet
ThaiLIS
8
Network Diagram
User
VPN
125.27.65.223
202.28.0.0
BUU
VPN Client
UniNet
202.28.11.11
VPN Server
ThaiLIS
9
OpenVPN

• OpenVPN ???? OpenSource SSL VPN
  ??????????????????????????????????????????????????
  ???? Remote Access , Site-to-Site , Wi-Fi
  Security ????????????????????????? ???????
  ??????????????????????????? ??????? OpenVPN
  ??????????????????????????????????????
  ???????????? UDP ( User Datagram Protocol )

10
OpenVPN

• ??????????????????
• Ethernet Bridging (tap)
• Routing (tun)

11
BUU-VPN

• VPN Server (For Student)
• VPN Server (For Staff)
• VPN Client (Student)
• WWW , SSH
• VPN Client (Staff)
• WWW, SSH, Remote Desktop, File Sharing

12
Make VPN Server

• CPU Intel Pentium 4 1.8 GHz
• RAM 1 GB
• NIC 10/100 Mbps
• Hard disk 1 SCSI 36 GB
• OS Linux CentOS 5.0
• Software openvpn-2.0.9-1.el5.rf.i386.rpm
• PAM Authentication (AD and OpenLDAP)

13
Make VPN Client

• OS Microsoft Windows XP SP2
• OpenVPN Client
• nsis205.exe
• openvpn_install_source-2.0.9-gui-1.0.3.zip
• ca.crt , client.crt , client.key , client.ovpn
• student-vpn-buu.exe

14
Make VPN Client
openvpn_install_source-2.0.9-gui-1.0.3.zip
ca.crt , client.crt , client.key , client.ovpn
nsis205.exe
student-vpn-buu.exe
15
??????????????????? VPN Client

• http//vpn.buu.ac.th

16
??????????????????? VPN Client

• ??????????????? VPN ??????????????????????????????
  ??????????????????????????????????
  ?????????????????? VPN ???????????????????????????
  ??????????????????????????????????????????
• ???????????? VPN ?????????????????????????????????
  ???????????????????? ???? ????????????????????????
  ????????????????????????????? , ???????????? ???
  Download ????????????????? ??????????? ,
  ??????????????????????? E-Journal ???????
• ??????????????????????????????????????????????????
  ???????????????????? (Username and Password)
  ????????????????????????? ????????????????

17
??????????????????? VPN Client

• ??????? VPN ?????????????????????????????????
  Windows XP SP2 ????????
• ????????????????????????????????????? Windows XP
  SP2 ??????????????????????????????? Administrator
  ??????????????????????????
• ???????????????????????????????? VPN
  ??????????????????????????????????????????????????
  ???????
• ??????????????????????????????????????????????????
  ??????????????????????????????????????????????????
  ??????? ?????????????????????? ???????????????????
  ????????????????????? ??????????????
  ???????????????? ???????????????? E-mail
  vpn_at_buu.ac.th

18
??????????????????? VPN Client

• ???????????? http//vpn.buu.ac.th
• ????????????????????????????? http//vpn.buu.ac.th
  /download/student-vpn-buu.exe
• ?????????????????????????????????????????
  http//vpn.buu.ac.th/download/staff-vpn-buu.exe
• ???????? Save File ???????????????????????????

19
????????????? VPN
20
????????????? VPN

• http//whatismyip.com

21
????????????? VPN

• http//dcms.thailis.or.th/dcms

22
????????????? VPN
23
???????????????? VPN
24
???????????????? VPN
25
???????????????? VPN
26
???????????????

• Password Expired
• OS Client
• ???????????????????????????????? VPN
  ??????????????????
• Firewall ????????? ???? Personal Firewall

27
??????????????

• Use for all OS client
• Easy Install for all OS client
• User Report Munin
• QoS Support

28
??????????jettanan_at_buu.ac.th