Add VPN configuration tools and agent documentation
Created comprehensive VPN setup tooling for Peaceful Spirit L2TP/IPsec connection and enhanced agent documentation framework. VPN Configuration (PST-NW-VPN): - Setup-PST-L2TP-VPN.ps1: Automated L2TP/IPsec setup with split-tunnel and DNS - Connect-PST-VPN.ps1: Connection helper with PPP adapter detection, DNS (192.168.0.2), and route config (192.168.0.0/24) - Connect-PST-VPN-Standalone.ps1: Self-contained connection script for remote deployment - Fix-PST-VPN-Auth.ps1: Authentication troubleshooting for CHAP/MSChapv2 - Diagnose-VPN-Interface.ps1: Comprehensive VPN interface and routing diagnostic - Quick-Test-VPN.ps1: Fast connectivity verification (DNS/router/routes) - Add-PST-VPN-Route-Manual.ps1: Manual route configuration helper - vpn-connect.bat, vpn-disconnect.bat: Simple batch file shortcuts - OpenVPN config files (Windows-compatible, abandoned for L2TP) Key VPN Implementation Details: - L2TP creates PPP adapter with connection name as interface description - UniFi auto-configures DNS (192.168.0.2) but requires manual route to 192.168.0.0/24 - Split-tunnel enabled (only remote traffic through VPN) - All-user connection for pre-login auto-connect via scheduled task - Authentication: CHAP + MSChapv2 for UniFi compatibility Agent Documentation: - AGENT_QUICK_REFERENCE.md: Quick reference for all specialized agents - documentation-squire.md: Documentation and task management specialist agent - Updated all agent markdown files with standardized formatting Project Organization: - Moved conversation logs to dedicated directories (guru-connect-conversation-logs, guru-rmm-conversation-logs) - Cleaned up old session JSONL files from projects/msp-tools/ - Added guru-connect infrastructure (agent, dashboard, proto, scripts, .gitea workflows) - Added guru-rmm server components and deployment configs Technical Notes: - VPN IP pool: 192.168.4.x (client gets 192.168.4.6) - Remote network: 192.168.0.0/24 (router at 192.168.0.10) - PSK: rrClvnmUeXEFo90Ol+z7tfsAZHeSK6w7 - Credentials: pst-admin / 24Hearts$ Files: 15 VPN scripts, 2 agent docs, conversation log reorganization, guru-connect/guru-rmm infrastructure additions Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
This commit is contained in:
83
Quick-Test-VPN.ps1
Normal file
83
Quick-Test-VPN.ps1
Normal file
@@ -0,0 +1,83 @@
|
||||
# Quick VPN connectivity test
|
||||
# Run this after connecting to VPN
|
||||
|
||||
Write-Host "Quick VPN Test" -ForegroundColor Cyan
|
||||
Write-Host "==============" -ForegroundColor Cyan
|
||||
Write-Host ""
|
||||
|
||||
# Test 1: Check VPN is connected
|
||||
Write-Host "[1] Checking VPN connection..." -ForegroundColor Yellow
|
||||
$connected = rasdial | Select-String "PST-NW-VPN"
|
||||
|
||||
if ($connected) {
|
||||
Write-Host "[OK] VPN is connected" -ForegroundColor Green
|
||||
}
|
||||
else {
|
||||
Write-Host "[ERROR] VPN not connected!" -ForegroundColor Red
|
||||
Write-Host "Run: rasdial `"PST-NW-VPN`" pst-admin `"24Hearts$`"" -ForegroundColor Yellow
|
||||
exit 1
|
||||
}
|
||||
|
||||
# Test 2: DNS server
|
||||
Write-Host "`n[2] Testing DNS server (192.168.0.2)..." -ForegroundColor Yellow
|
||||
$dns = Test-Connection -ComputerName 192.168.0.2 -Count 2 -Quiet
|
||||
|
||||
if ($dns) {
|
||||
Write-Host "[OK] DNS server reachable" -ForegroundColor Green
|
||||
}
|
||||
else {
|
||||
Write-Host "[FAIL] DNS server not reachable" -ForegroundColor Red
|
||||
}
|
||||
|
||||
# Test 3: Router
|
||||
Write-Host "`n[3] Testing router (192.168.0.10)..." -ForegroundColor Yellow
|
||||
$router = Test-Connection -ComputerName 192.168.0.10 -Count 2 -Quiet
|
||||
|
||||
if ($router) {
|
||||
Write-Host "[OK] Router reachable" -ForegroundColor Green
|
||||
}
|
||||
else {
|
||||
Write-Host "[FAIL] Router not reachable" -ForegroundColor Red
|
||||
}
|
||||
|
||||
# Test 4: Check for route
|
||||
Write-Host "`n[4] Checking routing table..." -ForegroundColor Yellow
|
||||
$route = route print | Select-String "192.168.0.0"
|
||||
|
||||
if ($route) {
|
||||
Write-Host "[OK] Route to 192.168.0.0 exists" -ForegroundColor Green
|
||||
Write-Host $route -ForegroundColor Gray
|
||||
}
|
||||
else {
|
||||
Write-Host "[INFO] No explicit route to 192.168.0.0 found" -ForegroundColor Yellow
|
||||
}
|
||||
|
||||
# Summary
|
||||
Write-Host "`n=== SUMMARY ===" -ForegroundColor Cyan
|
||||
|
||||
if ($dns -and $router) {
|
||||
Write-Host "[SUCCESS] VPN is fully functional!" -ForegroundColor Green
|
||||
Write-Host "You can access the remote network at 192.168.0.x" -ForegroundColor Green
|
||||
}
|
||||
elseif ($dns -or $router) {
|
||||
Write-Host "[PARTIAL] VPN connected but some hosts unreachable" -ForegroundColor Yellow
|
||||
if (-not $route) {
|
||||
Write-Host "Try adding route manually:" -ForegroundColor Yellow
|
||||
Write-Host ' $vpn = Get-NetAdapter | Where-Object { $_.Status -eq "Up" -and $_.InterfaceDescription -like "*WAN*" }' -ForegroundColor Gray
|
||||
Write-Host ' route add 192.168.0.0 mask 255.255.255.0 0.0.0.0 if $($vpn.InterfaceIndex) metric 1' -ForegroundColor Gray
|
||||
}
|
||||
}
|
||||
else {
|
||||
Write-Host "[PROBLEM] Remote network not reachable" -ForegroundColor Red
|
||||
Write-Host "Possible issues:" -ForegroundColor Yellow
|
||||
Write-Host " 1. Route not configured (most common with UniFi L2TP)" -ForegroundColor Gray
|
||||
Write-Host " 2. Remote firewall blocking ICMP" -ForegroundColor Gray
|
||||
Write-Host " 3. VPN server not routing traffic" -ForegroundColor Gray
|
||||
Write-Host ""
|
||||
Write-Host "Next steps:" -ForegroundColor Cyan
|
||||
Write-Host " 1. Run Diagnose-VPN-Interface.ps1 for detailed info" -ForegroundColor Gray
|
||||
Write-Host " 2. Try manually adding route (see above)" -ForegroundColor Gray
|
||||
Write-Host " 3. Check UniFi controller VPN settings" -ForegroundColor Gray
|
||||
}
|
||||
|
||||
Write-Host ""
|
||||
Reference in New Issue
Block a user