654747 - [Paris office] Create a VPN server for the Paris office

Status: RESOLVED FIXED

(Infrastructure & Operations Graveyard :: NetOps, task)

Description

[Mounir Lamouri (:mounir)]

It would be nice to have access to the Paris office infrastructure (like my 8-core desktop) from everywhere.

Comment 1

[matthew zeier [:mrz]]

@netops, can the SRX handle this?  Or setup an SA?

Comment 2

[Arzhel Younsi [:XioNoX]]

There is already an openVPN instance on admin1.par1. We need to build an LDAP slave for authentification.

Comment 3

[matthew zeier [:mrz]]

openvpn isn't very user friendly.  If the SRX can't do it, let's get an SA out there.  Thoughts?

Comment 4

[Mounir Lamouri (:mounir)]

Any update?

Comment 5

[Ravi Pina [:ravi]]

We do not currently have a standardized VPN solution for any of the remote offices.  Once we pick a solution this will be implemented at or about the time it is Paris's turn to have its new internet services installed along with supporting infrastructure.  There is no current date for this, but I expect it to be late summer.

Comment 6

[matthew zeier [:mrz]]

I have an email to get pricing on a small Juniper SSL VPN box.

Comment 7

[Mounir Lamouri (:mounir)]

Any news about that?

Comment 8

[Arzhel Younsi [:XioNoX]]

VPN is ready since today, it only needs a DNS name. The configuration is the same as the Mountain View VPN. If it's urgent, you can use the IP 195.5.253.101. Also if your LDAP password got updated recently, it may not works. This should be fixed tomorrow.

Comment 9

[Arzhel Younsi [:XioNoX]]

Ready!
Follow the instructions on that page : https://intranet.mozilla.org/VPN#OpenVPN

With the hostname vpn.par1.mozilla.com

Feel free to reopen is something is wrong.

Comment 10

[Pascal Chevrel (relman team) -> :pascalc]

It works, thanks!

Comment 11

[Tristan Nitot]

Could someone update the document on the Intranet to reflect this new VPN? Thanks.

Comment 12

[Ravi Pina [:ravi]]

Once we are ready to open this to all vs. a case by case basis we will.