ibm-cloud-docs / iaas-vpn Goto Github PK

As of MacOS Catalina (ie. 10.15.x and up) NPAPI support is no longer available in ANY BROWSER on the Mac and the new Version of MotionPro+ is a disaster and doesn't work either (it is a 32bit app and Catalina and Windows 10 both no longer support 32 bit apps). What are we now supposed to use? By the way, this is also true of Windows 10.

Hi,

Every time i use the motionpro client and connect the vpn my wifi connection disconnects.

VPN docs currently use headline-style caps for topic titles and headings. These need to be updated to use sentence-style caps per IBM Cloud content guidelines.

Hi, the URL of South America, Sao Paulo VPN is wrong.
Greetings

@sheltons , I got tapped about a VPN connection issue and, upon further investigation, I believe this content resides in your About VPN infrastructure content. I created a work item, initially, with the following description:

Investigate where/how to document VPN connection with Ubuntu

Determine how to handle this. Is it a one-off? or does it get added? The DM from Landon Flores:

The follow-up note from Landon:

SoftLayer had documented the process: https://knowledgelayer.softlayer.com/procedure/ssl-vpn-linux

A customer then created their own doc, which, understandably, our support team does not want to point our customers to: https://www.faridrener.com/2018/04/10/Softlayer-SSL-VPN-Ubuntu.html
Related to Customer-portal: Investigate addressing holes in VPN information from Usabilla comment

Other customers are having trouble with this as well and have opened support tickets: ttps://internal.softlayer.com/Ticket/ticketPreview/59275105

The instructions provided to access the virtual server via VPN do not work. Please advise.

We have an angry customer who needs an update for the list of datacenters in this file:

https://github.com/IBM-Bluemix-Docs/iaas-vpn/blob/master/set-up-pptp-for-osx.md

The customer points out that the Chennai DC is not listed, for one.

Can someone on the engineering or operations side, or the OM side, help us?? ASAP is appreciated.

@lorozco @JillTempelmeyer Can you help me locate the correct person to ask for help?

https://cloud.ibm.com/docs/iaas-vpn?topic=iaas-vpn-available-vpn-endpoints

vpn.fra02.softlayer.com was down the last week so I would like to initiate to check the docs/whether the VPN endpoint still exists.

Hello, we have MIlan DC that should be added to the list of VPN endpoint.
https://vpn.mil01.softlayer.com/prx/000/http/localhost/login

I am on Mac OS Monterey (version 12.6) and using MotionPro Version 1.2.17, built on Jul 7 2022.

I can connect to IBM Cloud SSL VPN successfully but I can not access resources, it seems that traffic is not routed trough connected VPN.

Does anyone knows what to do here?

I have been reading https://cloud.ibm.com/docs/iaas-vpn?topic=iaas-vpn-standalone-vpn-clients and at the end of post it is written:
If the tunnel isn't directing traffic correctly, you might need to [add routes manually](https://discussions.apple.com/thread/2735376)

But that post on apple discussion is from 2011 and no help from it.

PS

Same VPN setup works with e.g. Windows Client.

I have downloaded VPN client from:

• https://support.arraynetworks.net/prx/001/http/supportportal.arraynetworks.net/downloads/downloads.html

Tried all version both client and web and it fails
https://support.arraynetworks.net/prx/001/http/supportportal.arraynetworks.net/downloads/downloads.html

Cannot use the Motion Pro client in the app store as its not compatible as per info

https://cloud.ibm.com/docs/iaas-vpn?topic=iaas-vpn-standalone-vpn-clients#manually-installed-motionpro-clients
The MotionPro Plus clients, located in the Apple Store, are not supported.

Tried several of these endpoints, cannot connect because of Motion Pro not compatible.
https://cloud.ibm.com/docs/iaas-vpn?topic=iaas-vpn-available-vpn-endpoints

Tried the steps, but to no availab
Any workaround or solution to this problem

Since Java plugins have been deprecated for a while (https://www.theverge.com/2016/1/28/10858250/oracle-java-plugin-deprecation-jdk-9) and since the PPTP option will be removed soon (https://console.bluemix.net/docs/infrastructure/iaas-vpn/pptp-deprecation.html#pptp-vpn-deprecation-june-12-2018), please provide new and up to date information on creating VPN connections with SSL without using Java plugins.

For example, using openvpn on Ubuntu, I am missing information on where to find a CA certificate for the chosen host in order to create a "password" connection. In addition, settings regarding virtual device type and TCP would be helpful.

https://cloud.ibm.com/docs/iaas-vpn?topic=iaas-vpn-connect-ssl-vpn-mac-osx mentioned MotionPro Plus as the vpn client for IBM Cloud vpn access. It does not work.

https://cloud.ibm.com/docs/iaas-vpn?topic=iaas-vpn-connect-ssl-vpn-mac-osx

https://cloud.ibm.com/docs/infrastructure/iaas-vpn?topic=VPN-standalone-vpn-clients
does not work for Japanese language nor fallback to English page is not working.

Steps to reproduce the problem:

1. wget https://support.arraynetworks.net/prx/001/http/supportportal.arraynetworks.net/downloads/pkg_9_4_0_273/MP_Linux_1.2.3/MotionPro_Linux_RedHat_x86-64_1.2.3.sh
2. sudo bash MotionPro_Linux_RedHat_x86-64_1.2.3.sh
3. MotionPro --host vpn.wdc04.softlayer.com

Output is:

 MotionPro --host vpn.wdc04.softlayer.com
Only one method: localdb
Input username: [snip]
Input password for localdb:
login successfully!
starting vpn...
current status:0
current status:0
Connect successfully!
Vpn is connected!

nc -vz 10.166.140.143 22
Ncat: Version 7.50 ( https://nmap.org/ncat )
Ncat: Connection timed out.

When I connect using the Windows client, it works:

More details:

cat /etc/os-release
NAME="Red Hat Enterprise Linux Server"
VERSION="7.5 (Maipo)"
ID="rhel"
ID_LIKE="fedora"
VARIANT="Server"
VARIANT_ID="server"
VERSION_ID="7.5"
PRETTY_NAME="Red Hat Enterprise Linux Server 7.5 (Maipo)"
ANSI_COLOR="0;31"
CPE_NAME="cpe:/o:redhat:enterprise_linux:7.5:GA:server"
HOME_URL="https://www.redhat.com/"
BUG_REPORT_URL="https://bugzilla.redhat.com/"

REDHAT_BUGZILLA_PRODUCT="Red Hat Enterprise Linux 7"
REDHAT_BUGZILLA_PRODUCT_VERSION=7.5
REDHAT_SUPPORT_PRODUCT="Red Hat Enterprise Linux"
REDHAT_SUPPORT_PRODUCT_VERSION="7.5"
$

Not listed among the closed options (and I don't have a link to the staging repo yet), but there is software: https://itunes.apple.com/us/app/motionpro-plus/id1218085720?mt=12 that has changed its name since https://cloud.ibm.com/docs/infrastructure/iaas-vpn?topic=VPN-connect-ssl-vpn-mac-osx#connect-ssl-vpn-mac-osx was written.

In addition, the software as it now exists has been criticized, and may have issues preventing it from being useful in this area? Thanks.

Hello,

For this page https://cloud.ibm.com/docs/iaas-vpn?topic=iaas-vpn-available-vpn-endpoints one of the endpoints is incorrect. I think it is vpn.tor01.softlayer.com not vpn.tor.softlayer.com

https://console.bluemix.net/docs/infrastructure/iaas-vpn/standalone-vpn-clients.html
https://github.com/IBM-Bluemix-Docs/iaas-vpn/blob/master/standalone-vpn-clients.md

This page has no sidebar, and is not linked from anywhere.

The steps for using the SSL VPN need to be updated to reflect the cloud.ibm,com portal.

Manage -> Access (IAM) -> Users (this is a tile). Select user, then Classic Infrastructure -> VPN subnets.

https://cloud.ibm.com/docs/infrastructure/iaas-vpn?topic=VPN-standalone-vpn-clients

The following link has the 'Log in to the VPN section: https://console.bluemix.net/docs/infrastructure/iaas-vpn/getting-started.html#getting-started-with-virtual-private-networking-vpn-

Log in to the VPN
Now that the VPN access has been established, you can log in.

To log into the SSL VPN, visit vpn.softlayer.com and select any of the login points. You can use any VPN access point, and you are given the same access permissions to the private network in all the datacenters.
If you have trouble logging into one location, try another location.
Alternatively, you can log in using a standalone client SSL VPN.

However, I couldn't make it work by going to the vpn.softlayer.com and using the antiquated Java login.
I have no clue how you are supposed to log in using a standalone client SSL VPN without knowing the endpoint. Only after I went to https://console.bluemix.net/docs/infrastructure/iaas-vpn/use-ssl-vpn.html#use-ssl-vpn did I discover a different page: https://www.softlayer.com/VPN-Access.

This document is pretty outdate already - I'm running the latest OS yet I only have 3 options:

1. L2TP over IPSec
2. Cisco IPSec
3. IKEv2

There is no "PPTP" option!

It should not be referenced here: https://console.bluemix.net/docs/infrastructure/iaas-vpn/getting-started.html#getting-started-with-virtual-private-networking-vpn-

Hi again, @sheltons,

I had a Usabilla comment awhile back that was asking for more VPN information in my customer portal content. I added links from my files to the big section of VPN information that you own to resolve the issue, assuming that it's all probably extremely well documented. I had also asked the guy who opened the Usabilla issue (Olivier Dupuy d'Uby, an internal IBMer in France) for more information about what he was trying to do and what he was looking for in the information and I'll share his response with you, just in case you see anything you want to add or change in the VPN content. If not, you can just close this work item but here are his comments...

Response from Usabilla issue 2469 reporter Olivier Dupuy d'Uby:

Yes the article you mentioned (https://console.bluemix.net/docs/customer-portal/cpprotectsys.html#cp_bpuseprivnet) points a link where I could find the information.
However, it is not clear at all... I explain why :

Actually I managed to connect to the VPN last week. I landed on https://www.softlayer.com/vpn-access after a Google search, choosing my nearest DC (Paris) showed me the login portal. There, there is a “help” link on the bottom left referencing a page where the VPN client can be downloaded.

After installing the VPN client, I had to guess the hostname (vpn.par01.softlayer.com) taking the same as the previous login portal address.

To my mind, the documentation could be improved, giving in only one place :

• Explanation of the different networks architectures (private / public) and the possibility to connect to the private using a VPN.
• Explanation on how to enable VPN access to a user.
• Links to download the VPN Client
• Explanation on how to configure the VPN client.

I can see that this page does not mention vpn endpoint (https://vpn.mil01.softlayer.com/prx/000/http/localhost/login) for milan region. Kindly update same.

After connecting to VPN through MotionPro Plus, it fails to access other websites.

On Windows, you required ActiveX components which cannot be used any more.

On Linux, you require a Java applet plugin which cannot be used any more.

It's year 2020 and your VPN documentation seems to be stuck in year 2000.

Description:
the. "available VPN endpoints" link on page is redirecting to a wrong page, it is "TEST" environment instead of "CLOUD.IBM.COM"

this the href/page opened with the clink currently -> (https://test.cloud.ibm.com/docs/iaas-vpn?topic=iaas-vpn-available-vpn-endpoints&_gl=1*1cmkxdd*_ga*MTY4MzI4NjA2MS4xNjkwNjUwODcw*_ga_FYECCCS21D*MTY5MTQwOTA4MS4xOS4xLjE2OTE0MDk0NTEuMC4wLjA.).

Current Result: Page opened: https://test.cloud.ibm.com/docs/iaas-vpn?topic=iaas-vpn-available-vpn-endpoints&_gl=1*tdi3t1*_ga*MTY4MzI4NjA2MS4xNjkwNjUwODcw*_ga_FYECCCS21D*MTY5MTQwOTA4MS4xOS4xLjE2OTE0MDk2MjQuMC4wLjA.
Expected: open the page : https://cloud.ibm.com/docs/iaas-vpn?topic=iaas-vpn-available-vpn-endpoints

Hi guys,

My two cents... we should have our own reference for what is VPN, and how to troubleshoot. Referring to MS documentation is not appropriate IMO given they are our direct competitor. I would find vendor-agnostic references if possible. Please reach out to me or Chris Biehle if you need help.

Thanks,
Denis

Per one of my SMEs, Graham Hardy:

Using VPN to access your instance using the documentation here https://cloud.ibm.com/docs/infrastructure/iaas-vpn?topic=iaas-vpn-getting-started is well documented but doesn't work if you follow the steps, which are clearly laid out until you get to the point "Using a Browser".

So straight from the word go, the VPN sites do not support Chrome or Microsoft Edge. In fact if you use a browser like Mozilla Firefox and try to access the login page and attempt a log in, you will be met with the same challenge (the login box is greyed out not allowing you to type anything). This is because these browsers no longer support NPAPI. The VPN website does work with Microsoft Internet Explorer 11 and you can use your VPN credentials to log in. But I would suggest using the MotionPro application.

The only alternative is to use the "Standalone VPN client software". Currently I have tested MotionPro and could not connect to the vpn.fra02.softlayer.com. When I reported this issue to the Helpdesk they confirmed that the Frankfurt Softlayer VPN server had real issues so I pointed the tool instead to vpn.lon02.softlayer.com:443 instead and this worked.
For a list of available VPN Endpoints check the link VPN Endpoints

As from Internet chat rooms concerning cloud and IBM Cloud this has been an issue for 3 years, so I thought I would try and see if this has been resolved, clearly it has not and your only options are Safari, MIE11 or using the standalone MotionPro application.

As an entry level task it would be irresponsible for the Cloud guys to let this continue, especially if the First Impressions on customers creating a sandbox system and test driving the Virtual Server are negative.

Unable to connect to VPN via vpn.tok02.softlayer.com. User tried the following instructions found in https://cloud.ibm.com/docs/infrastructure/iaas-vpn?topic=VPN-connect-ssl-vpn-mac-osx#connect-ssl-vpn-mac-osx. User also tried accessing different end point vpn.seo01.softlayer.com but encountered the same error.

Looking at this page:

https://console.bluemix.net/docs/infrastructure/iaas-vpn/set-up-ssl-vpn-connections.html#set-up-ssl-vpn-connections

No information for MacOS at all, and the linux information references firefox v1.0.4, which is from 2005 if wikipedia is to be believed.

Source is https://github.com/IBM-Bluemix-Docs/iaas-vpn/blob/master/set-up-ssl-vpn-connections.md

Instructions need updating as there is no Classic Infrastructure tab in Manage > Access (IAM)

See step 4 in Enabling SSL VPN Access
https://cloud.ibm.com/docs/iaas-vpn?topic=iaas-vpn-getting-started