Created comprehensive VPN setup tooling for Peaceful Spirit L2TP/IPsec connection and enhanced agent documentation framework. VPN Configuration (PST-NW-VPN): - Setup-PST-L2TP-VPN.ps1: Automated L2TP/IPsec setup with split-tunnel and DNS - Connect-PST-VPN.ps1: Connection helper with PPP adapter detection, DNS (192.168.0.2), and route config (192.168.0.0/24) - Connect-PST-VPN-Standalone.ps1: Self-contained connection script for remote deployment - Fix-PST-VPN-Auth.ps1: Authentication troubleshooting for CHAP/MSChapv2 - Diagnose-VPN-Interface.ps1: Comprehensive VPN interface and routing diagnostic - Quick-Test-VPN.ps1: Fast connectivity verification (DNS/router/routes) - Add-PST-VPN-Route-Manual.ps1: Manual route configuration helper - vpn-connect.bat, vpn-disconnect.bat: Simple batch file shortcuts - OpenVPN config files (Windows-compatible, abandoned for L2TP) Key VPN Implementation Details: - L2TP creates PPP adapter with connection name as interface description - UniFi auto-configures DNS (192.168.0.2) but requires manual route to 192.168.0.0/24 - Split-tunnel enabled (only remote traffic through VPN) - All-user connection for pre-login auto-connect via scheduled task - Authentication: CHAP + MSChapv2 for UniFi compatibility Agent Documentation: - AGENT_QUICK_REFERENCE.md: Quick reference for all specialized agents - documentation-squire.md: Documentation and task management specialist agent - Updated all agent markdown files with standardized formatting Project Organization: - Moved conversation logs to dedicated directories (guru-connect-conversation-logs, guru-rmm-conversation-logs) - Cleaned up old session JSONL files from projects/msp-tools/ - Added guru-connect infrastructure (agent, dashboard, proto, scripts, .gitea workflows) - Added guru-rmm server components and deployment configs Technical Notes: - VPN IP pool: 192.168.4.x (client gets 192.168.4.6) - Remote network: 192.168.0.0/24 (router at 192.168.0.10) - PSK: rrClvnmUeXEFo90Ol+z7tfsAZHeSK6w7 - Credentials: pst-admin / 24Hearts$ Files: 15 VPN scripts, 2 agent docs, conversation log reorganization, guru-connect/guru-rmm infrastructure additions Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
84 lines
3.0 KiB
PowerShell
84 lines
3.0 KiB
PowerShell
# Quick VPN connectivity test
|
|
# Run this after connecting to VPN
|
|
|
|
Write-Host "Quick VPN Test" -ForegroundColor Cyan
|
|
Write-Host "==============" -ForegroundColor Cyan
|
|
Write-Host ""
|
|
|
|
# Test 1: Check VPN is connected
|
|
Write-Host "[1] Checking VPN connection..." -ForegroundColor Yellow
|
|
$connected = rasdial | Select-String "PST-NW-VPN"
|
|
|
|
if ($connected) {
|
|
Write-Host "[OK] VPN is connected" -ForegroundColor Green
|
|
}
|
|
else {
|
|
Write-Host "[ERROR] VPN not connected!" -ForegroundColor Red
|
|
Write-Host "Run: rasdial `"PST-NW-VPN`" pst-admin `"24Hearts$`"" -ForegroundColor Yellow
|
|
exit 1
|
|
}
|
|
|
|
# Test 2: DNS server
|
|
Write-Host "`n[2] Testing DNS server (192.168.0.2)..." -ForegroundColor Yellow
|
|
$dns = Test-Connection -ComputerName 192.168.0.2 -Count 2 -Quiet
|
|
|
|
if ($dns) {
|
|
Write-Host "[OK] DNS server reachable" -ForegroundColor Green
|
|
}
|
|
else {
|
|
Write-Host "[FAIL] DNS server not reachable" -ForegroundColor Red
|
|
}
|
|
|
|
# Test 3: Router
|
|
Write-Host "`n[3] Testing router (192.168.0.10)..." -ForegroundColor Yellow
|
|
$router = Test-Connection -ComputerName 192.168.0.10 -Count 2 -Quiet
|
|
|
|
if ($router) {
|
|
Write-Host "[OK] Router reachable" -ForegroundColor Green
|
|
}
|
|
else {
|
|
Write-Host "[FAIL] Router not reachable" -ForegroundColor Red
|
|
}
|
|
|
|
# Test 4: Check for route
|
|
Write-Host "`n[4] Checking routing table..." -ForegroundColor Yellow
|
|
$route = route print | Select-String "192.168.0.0"
|
|
|
|
if ($route) {
|
|
Write-Host "[OK] Route to 192.168.0.0 exists" -ForegroundColor Green
|
|
Write-Host $route -ForegroundColor Gray
|
|
}
|
|
else {
|
|
Write-Host "[INFO] No explicit route to 192.168.0.0 found" -ForegroundColor Yellow
|
|
}
|
|
|
|
# Summary
|
|
Write-Host "`n=== SUMMARY ===" -ForegroundColor Cyan
|
|
|
|
if ($dns -and $router) {
|
|
Write-Host "[SUCCESS] VPN is fully functional!" -ForegroundColor Green
|
|
Write-Host "You can access the remote network at 192.168.0.x" -ForegroundColor Green
|
|
}
|
|
elseif ($dns -or $router) {
|
|
Write-Host "[PARTIAL] VPN connected but some hosts unreachable" -ForegroundColor Yellow
|
|
if (-not $route) {
|
|
Write-Host "Try adding route manually:" -ForegroundColor Yellow
|
|
Write-Host ' $vpn = Get-NetAdapter | Where-Object { $_.Status -eq "Up" -and $_.InterfaceDescription -like "*WAN*" }' -ForegroundColor Gray
|
|
Write-Host ' route add 192.168.0.0 mask 255.255.255.0 0.0.0.0 if $($vpn.InterfaceIndex) metric 1' -ForegroundColor Gray
|
|
}
|
|
}
|
|
else {
|
|
Write-Host "[PROBLEM] Remote network not reachable" -ForegroundColor Red
|
|
Write-Host "Possible issues:" -ForegroundColor Yellow
|
|
Write-Host " 1. Route not configured (most common with UniFi L2TP)" -ForegroundColor Gray
|
|
Write-Host " 2. Remote firewall blocking ICMP" -ForegroundColor Gray
|
|
Write-Host " 3. VPN server not routing traffic" -ForegroundColor Gray
|
|
Write-Host ""
|
|
Write-Host "Next steps:" -ForegroundColor Cyan
|
|
Write-Host " 1. Run Diagnose-VPN-Interface.ps1 for detailed info" -ForegroundColor Gray
|
|
Write-Host " 2. Try manually adding route (see above)" -ForegroundColor Gray
|
|
Write-Host " 3. Check UniFi controller VPN settings" -ForegroundColor Gray
|
|
}
|
|
|
|
Write-Host ""
|