Mike Swanson
6c316aa701
Created comprehensive VPN setup tooling for Peaceful Spirit L2TP/IPsec connection and enhanced agent documentation framework. VPN Configuration (PST-NW-VPN): - Setup-PST-L2TP-VPN.ps1: Automated L2TP/IPsec setup with split-tunnel and DNS - Connect-PST-VPN.ps1: Connection helper with PPP adapter detection, DNS (192.168.0.2), and route config (192.168.0.0/24) - Connect-PST-VPN-Standalone.ps1: Self-contained connection script for remote deployment - Fix-PST-VPN-Auth.ps1: Authentication troubleshooting for CHAP/MSChapv2 - Diagnose-VPN-Interface.ps1: Comprehensive VPN interface and routing diagnostic - Quick-Test-VPN.ps1: Fast connectivity verification (DNS/router/routes) - Add-PST-VPN-Route-Manual.ps1: Manual route configuration helper - vpn-connect.bat, vpn-disconnect.bat: Simple batch file shortcuts - OpenVPN config files (Windows-compatible, abandoned for L2TP) Key VPN Implementation Details: - L2TP creates PPP adapter with connection name as interface description - UniFi auto-configures DNS (192.168.0.2) but requires manual route to 192.168.0.0/24 - Split-tunnel enabled (only remote traffic through VPN) - All-user connection for pre-login auto-connect via scheduled task - Authentication: CHAP + MSChapv2 for UniFi compatibility Agent Documentation: - AGENT_QUICK_REFERENCE.md: Quick reference for all specialized agents - documentation-squire.md: Documentation and task management specialist agent - Updated all agent markdown files with standardized formatting Project Organization: - Moved conversation logs to dedicated directories (guru-connect-conversation-logs, guru-rmm-conversation-logs) - Cleaned up old session JSONL files from projects/msp-tools/ - Added guru-connect infrastructure (agent, dashboard, proto, scripts, .gitea workflows) - Added guru-rmm server components and deployment configs Technical Notes: - VPN IP pool: 192.168.4.x (client gets 192.168.4.6) - Remote network: 192.168.0.0/24 (router at 192.168.0.10) - PSK: rrClvnmUeXEFo90Ol+z7tfsAZHeSK6w7 - Credentials: pst-admin / 24Hearts$ Files: 15 VPN scripts, 2 agent docs, conversation log reorganization, guru-connect/guru-rmm infrastructure additions Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
56 lines
2.2 KiB
PowerShell
56 lines
2.2 KiB
PowerShell
# Manual route configuration for PST VPN
|
|
# Run this if auto-route setup fails or after manual rasdial connection
|
|
|
|
$remoteNetwork = "192.168.0.0"
|
|
$subnetMask = "255.255.255.0"
|
|
|
|
Write-Host "Finding VPN interface..." -ForegroundColor Cyan
|
|
|
|
# Find the L2TP VPN interface (appears as PPP adapter)
|
|
$vpnInterface = Get-NetAdapter | Where-Object {
|
|
($_.InterfaceAlias -eq "PST-NW-VPN" -or
|
|
$_.InterfaceDescription -eq "PST-NW-VPN" -or
|
|
$_.InterfaceDescription -like "*PPP*") -and
|
|
$_.Status -eq "Up"
|
|
} | Select-Object -First 1
|
|
|
|
if (-not $vpnInterface) {
|
|
Write-Host "[ERROR] VPN interface not found!" -ForegroundColor Red
|
|
Write-Host "Make sure you're connected to the VPN first:" -ForegroundColor Yellow
|
|
Write-Host ' rasdial "PST-NW-VPN"' -ForegroundColor Gray
|
|
exit 1
|
|
}
|
|
|
|
Write-Host "[OK] Found VPN interface: $($vpnInterface.InterfaceAlias) (Index: $($vpnInterface.InterfaceIndex))" -ForegroundColor Green
|
|
|
|
# Remove existing route (if any)
|
|
Write-Host "Removing old route (if exists)..." -ForegroundColor Cyan
|
|
route delete $remoteNetwork 2>$null | Out-Null
|
|
|
|
# Add new route
|
|
Write-Host "Adding route: $remoteNetwork mask $subnetMask" -ForegroundColor Cyan
|
|
|
|
$routeCmd = "route add $remoteNetwork mask $subnetMask 0.0.0.0 if $($vpnInterface.InterfaceIndex) metric 1"
|
|
cmd /c $routeCmd
|
|
|
|
if ($LASTEXITCODE -eq 0) {
|
|
Write-Host "[OK] Route added successfully!" -ForegroundColor Green
|
|
|
|
# Show the route
|
|
Write-Host "`nRoute details:" -ForegroundColor Cyan
|
|
route print | Select-String $remoteNetwork
|
|
|
|
# Test connectivity
|
|
Write-Host "`nTesting connectivity to remote network..." -ForegroundColor Cyan
|
|
Write-Host "Pinging 192.168.0.2..." -ForegroundColor Gray
|
|
ping 192.168.0.2 -n 2
|
|
}
|
|
else {
|
|
Write-Host "[ERROR] Failed to add route!" -ForegroundColor Red
|
|
Write-Host "Try running as Administrator" -ForegroundColor Yellow
|
|
}
|
|
|
|
Write-Host "`nTo make this route persistent across reboots:" -ForegroundColor Yellow
|
|
Write-Host " route add $remoteNetwork mask $subnetMask 0.0.0.0 if $($vpnInterface.InterfaceIndex) metric 1 -p" -ForegroundColor Gray
|
|
Write-Host "`nNote: For VPN connections, auto-route on connect is better than persistent routes." -ForegroundColor Gray
|