Differences

This shows you the differences between two versions of the page.

--- tips:vpn:univr [2022/05/25 15:36] – sscipioni
+++ tips:vpn:univr [2023/04/12 09:18] (current) – [network manager] sscipioni
@@ Line 15: / Line 15: @@
 ====== network manager ======
+<code>
+yay -S networkmanager-vpnc
+</code>
 add VPN cisco compatible from network manager:
@@ Line 27: / Line 31: @@
 {{:tips:vpn:vpn2.png?400|}}
+or create /etc/NetworkManager/system-connections/univr.nmconnection (chmod 600 and owned by root)
+<code>
+[connection]
+id=univr
+uuid=234f1f79-0a96-4be0-991e-75622ead54d0
+type=vpn
+autoconnect=false
+permissions=user:scipio:;
+timestamp=1630335537
+[vpn]
+IKE DH Group=dh2
+IPSec ID=univr
+IPSec gateway=remote.univr.it
+IPSec secret-flags=0
+Local Port=0
+NAT Traversal Mode=natt
+Perfect Forward Secrecy=server
+Vendor=cisco
+Xauth password-flags=0
+Xauth username=xxx
+ipsec-secret-type=save
+xauth-password-type=save
+service-type=org.freedesktop.NetworkManager.vpnc
+[vpn-secrets]
+IPSec secret=univr
+Xauth password=xxx
+[ipv4]
+method=auto
+[ipv6]
+addr-gen-mode=stable-privacy
+method=auto
+[proxy]
+</code>
@@ Line 33: / Line 77: @@
 {{ :tips:vpn:mfa.jpg |}}
-<code|ssh config>
+~/.ssh/config
+<code>
 Host umfa
-        Hostname mfa-ssh-srv.univr.it
+  Hostname mfa-ssh-srv.univr.it
-        User 01scpsfn29
+  User 01scpsfn29
+  ForwardAgent yes
 Host ucd
-        Hostname cd-www-srv.univr.it
+  Hostname cd-www-srv.univr.it
+  User 01scpsfn29
+  ProxyJump umfa
+Host ustage
+  Hostname stage-dev.univr.it
+  User 01scpsfn29
+  ProxyJump umfa
 </code>
+Oppure, al posto di google auth, si può usare keepassxc utilizzando totp e la "secret key"
+{{:tips:vpn:totp.png?400|}}