Enabling SSL VPN on linux

1 minute read

Why?

Many ssl vpn software companies(such as Huawei, Sangfor etc.) do not have Linux client, so we need to use virtual machine to run the windows client and bridge the network to Linux. Ref. this post which is in Chinese(LOL).

How to install windows on qemu hosted on ubuntu18.04

  1. First, make sure you properly install “qume-kvm” and “virt-manager “
  2. Download win installation ISO file and VirtIO IOS file. notice that you must use the last Virtio driver, otherwise there will have a bug that your network will be unstable.
  3. Start Virtual Machine Manager to run GUI installing guide. Like this:Virtual Machine Manager
  4. then following this wiki to install.

Notice: In my test case, Huawei’s VPN software doesn’t work on win7, it only works on win8 or later.

How to bridge

  1. On Linux host add and start a bridge:
sudo ip l add qbr0 type bridge
sudo ip l set qbr0 up
  1. Add this bridge network card(NC) to virtual machine like this1555061415008

  2. set up the VPN NC share to bridge NC on guest machine

  3. start the VPN SSL software on Windows, the windows set you bridge NC ip as 192.168.137.1. show in figure

    1555062668324

  4. so in all, your have to run following before you start your network

    sudo ip l add qbr0 type bridge
    sudo ip l set qbr0 up
    sudo ip a add 192.168.137.9/24 dev qbr0
    sudo ip r add 10.0.0.0/8 via 192.168.137.1 dev qbr0
    
  5. Verify by ip r like this, where 172.xx.xx.xx is my host NC ip, 192.168.122.xx is virtual machine bridge IP for Internet, and 192.168.137.x is for bridge VPN. Oh, my God, how complex it is!!!

    route2

  6. Enjoy it !

    ssh xxx@10.xx.xx.xx

Thanks my friend Stephen helped me debugging this.

Thinks for reading!

Tags:

Updated:

Comments