Install NPS (Network Policy Server) - Radius

Description
The VPN (Virtual Private Network) allows users to connect from the Internet in their company. This connection is encrypted in a tunnel, so that data can not be recovered by a possible pirate.
The authentication procedure may be made either by e-certificate or by account / password. We must therefore choose the method that works for you.

Principle
The client connects to the VPN server, which authenticates with the Radius server (Remote Authentication Dial-In User Service) Central. After authentication, the client received his VPN company IP address, which allows access to company data, as if it were on the site.

Authentication: verification and control of User ID and Password in the Radius Client
This is a protocol used by machines to authenticate an user of a service or providing feedback on this user (traffic volume, connection time, ...). By extension, it is called Radius server or proxy server to tell server or proxy using the Radius protocol to communicate.

RADIUS uses UDP.

On Windows Server 2008R2 service Radius (IAS) was replaced by NPS (Network Policy Server).

Utilisation de ipcalc

Debian users can apt-get install ipcalc

Sinon -->

$ wget http://jodies.de/ipcalc-archive/ipcalc-0.41.tar.gz

$ tar -xvzf ipcalc-0.41.tar.gz

$ cd /ipcalc-0.41

$ ./ipcalc 192.168.1.0/24

-->
Address: 192.168.1.0 11000000.10101000.00000001. 00000000
Netmask: 255.255.255.0 = 24 11111111.11111111.11111111. 00000000
Wildcard: 0.0.0.255 00000000.00000000.00000000. 11111111
=>
Network: 192.168.1.0/24 11000000.10101000.00000001. 00000000
HostMin: 192.168.1.1 11000000.10101000.00000001. 00000001
HostMax: 192.168.1.254 11000000.10101000.00000001. 11111110
Broadcast: 192.168.1.255 11000000.10101000.00000001. 11111111
Hosts/Net: 254 Class C, Private Internet

$ ./ipcalc 192.168.1.0/255.255.255.0
Address: 192.168.1.0 11000000.10101000.01100011. 00000000
Netmask: 255.255.255.0 = 24 11111111.11111111.11111111. 00000000
Wildcard: 0.0.0.255 00000000.00000000.00000000. 11111111
=>
Network: 192.168.1.0/24 11000000.10101000.01100011. 00000000
HostMin: 192.168.1.1 11000000.10101000.01100011. 00000001
HostMax: 192.168.1.254 11000000.10101000.01100011. 11111110
Broadcast: 192.168.1.255 11000000.10101000.01100011. 11111111
Hosts/Net: 254 Class C, Private Internet

Usage: ipcalc [options]

[[/]] [NETMASK]

ipcalc takes an IP address and netmask and calculates the resulting broadcast,
network, Cisco wildcard mask, and host range. By giving a second netmask, you
can design sub- and supernetworks. It is also intended to be a teaching tool
and presents the results as easy-to-understand binary values.

-n --nocolor Don't display ANSI color codes.
-b --nobinary Suppress the bitwise output.
-c --class Just print bit-count-mask of given address.
-h --html Display results as HTML (not finished in this version).
-v --version Print Version.
-s --split n1 n2 n3
Split into networks of size n1, n2, n3.
-r --range Deaggregate address range.
--help Longer help text.

Examples:

ipcalc 192.168.0.1/24
ipcalc 192.168.0.1/255.255.128.0
ipcalc 192.168.0.1 255.255.128.0 255.255.192.0
ipcalc 192.168.0.1 0.0.63.255


ipcalc - deaggregate address range

ipcalc

/ --s a b c
split network to subnets
where a b c fits in.

Enjoy !

Ajouter une route (Linux Debian/Ubuntu) + supprimer une route

Dans le fichier /etc/network/interfaces

sous-réseau à atteindre 192.168.1.0/24 avec pour gateway 172.16.0.14

up route add -net 192.168.1.0 gw 172.16.0.14 netmask 255.255.255.0 dev eth1


Supprimer une route (en l'occurrence la route par défaut)

up route del -net 0.0.0.0 gw 172.16.0.14 dev eth1

Ajouter une route (Windows)

route add xxx.xxx.xxx.xxx mask xxx.xxx.xxx.xxx xxx.xxx.xxx.xxx metric 1

exemple:

sous-réseau à atteindre 172.16.0.0/28 avec pour gateway 192.168.1.200

--> route add 172.16.0.0 mask 255.255.255.240 192.168.1.200 metric 1

route permanente

route -p add 172.16.0.0 mask 255.255.255.240 192.168.1.200 metric 1