avm

Side2Side VPN connection between OpenStack VPNaaS and AVM Fritz!Box

FRITZBOX_WAN_IP=111.1.2.3
FRITZBOX_CIDR=192.168.178.0/24
PSK=PASS1234
 
openstack vpn ike policy create ikepolicy \
  --encryption-algorithm aes-256 \
  --auth-algorithm sha512 \
  --pfs group2
 
openstack vpn ipsec policy create ipsecpolicy \
  --encryption-algorithm aes-256 \
  --auth-algorithm sha512 \
  --pfs group2
 
ROUTER_ID=$(openstack router list -c ID -f value)
openstack vpn service create vpn \
  --router ${ROUTER_ID}
 
SUBNET_ID=$(openstack subnet list -c ID -f value)
openstack vpn endpoint group create ep_subnet \
  --type subnet \
  --value ${SUBNET_ID}
 
openstack vpn endpoint group create ep_cidr \
  --type cidr \
  --value ${FRITZBOX_CIDR}
 
openstack vpn ipsec site connection create conn \
  --vpnservice vpn \
  --ikepolicy ikepolicy \
  --ipsecpolicy ipsecpolicy \
  --peer-address ${FRITZBOX_WAN_IP} \
  --peer-id ${FRITZBOX_WAN_IP} \
  --psk ${PSK} \
  --local-endpoint-group ep_subnet \
  --peer-endpoint-group ep_cidr

Add ingress ssh security rule

openstack security group rule create default \
  --protocol tcp \
  --dst-port 22 \
  --remote-ip 192.168.178.0/24

Create S2S VPN connection on Fritz!Box

AVM Fritz!Box

Fritz!Box NAS
https://service.avm.de/help/de/FRITZ-Box-7360-v2-avme/016/hilfe_speicher_einstellungen_samba

Format USB pen

mkfs.ext3 -L usb8gb /dev/sdc1

Fallback IP

# set router to lan
ip r add 169.254.0.0/16 dev enp7s0
 
ping 169.254.1.1
http://169.254.1.1/

Nautilus

smb://fritz.nas
ftp://fritz.nas

Fix smaba v1 share access
# /etc/samba/smb.conf
[global]
client min protocol = CORE

Speed test
http://avm.de/nc/service/zack-der-speedtest-fuer-ihre-breitbandverbindung/
https:/192.168.178.1/support.lua

# from Linux
iperf -c 192.168.178.1 -p 4711 -t 60 -i 10
 
# from Windows
iperf.exe -c 192.168.178.1 -p 4712 -u -t 60 -i 10 -b 1000M

Fix 1h VPN timeout

CONNECTION=CON1
while true
do
	[ "$(nmcli con show ${CONNECTION} | grep STATUS)" ] || nmcli con up id ${CONNECTION}
	sleep 10
done

FRITZ!Box
https://freetz.github.io/wiki/