This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Access WebAdmin remotely

Perhaps this is a dumb question, or perhaps I've overlooked something in the documentation, but here's what I want to do and can't figure out how (if it's even possible):

I want to access the WebAdmin interface from the WAN.

I don't need a VPN connection to my LAN, or any access to my LAN ... just from the outside world to the WebAdmin interface.

Is that possible? If so, how?

This thread was automatically locked due to age.

0 ClausP over 18 years ago

RTFM -> p.26ff [:)]

Management/WebAdmin Settings/Access Control/Allowed Networks
Cancel
Vote Up 0 Vote Down

Cancel
0 BarryG over 18 years ago in reply to ClausP

Claus, it sounds like nloding wants to have a VPN connection that only tunnels to the EXT interface.

Nloding,
You could set up a tunnel, with the only PF rule allowing access to (any) one of the ASL interfaces.

Barry
Cancel
Vote Up 0 Vote Down

Cancel
0 nloding over 18 years ago in reply to BarryG

I think Claus has it ... I'll try tonight and see what happens.
Cancel
Vote Up 0 Vote Down

Cancel
0 nloding over 18 years ago in reply to nloding

Well, that didn't do it. I have for Allowed Networks: ANY.

What I want to be able to do is ... say I'm at a coffee shop. I want to go to my browser, type https://MY.WAN.IP.ADD:4444/ or whatever and hit the WebAdmin interface. Don't need access to the LAN ... just the WebAdmin interface.
Cancel
Vote Up 0 Vote Down

Cancel
0 Radiohead-79 over 18 years ago in reply to nloding

I would not open my Astaro Interface to the outside world! Use a vpn and then connect from the inside for security sake...
Cancel
Vote Up 0 Vote Down

Cancel
0 BarryG over 18 years ago in reply to nloding

nloding, that should have worked.

Is it possible that the location you were at wasn't allowing traffic on port 4444?

Barry
Cancel
Vote Up 0 Vote Down

Cancel
0 Scott_Klassen over 18 years ago in reply to BarryG

Just to make certain nloding. The Astaro is your perimeter device, right? You don't have any sort of other firewall between it and your WAN?

I believe that the Astaro SSL VPN is based on the OPENVPN project. There's a portable version of the client at http://sourceforge.net/projects/ovpnp/ . If the Astaro VPN config files will work with it, this may be the solution you want so you can get to your webadmin interface from public computers (shudder) by running it from a USB key.

__________________
ACE v8/SCA v9.3

...still have a v5 install disk in a box somewhere.

http://xkcd.com
http://www.tedgoff.com/mb
http://www.projectcartoon.com/cartoon/1
Cancel
Vote Up 0 Vote Down

Cancel
0 nloding over 18 years ago in reply to Scott_Klassen

It's possible that 4444 was blocked, but I don't think so. Is there a way to change that port?

Also, yes, it is a perimeter device ... Cable modem > eth0 on Astaro box ... eth1 > 16-port switch for LAN.
Cancel
Vote Up 0 Vote Down

Cancel
0 Scott_Klassen over 18 years ago in reply to nloding

Yep, the WebAdmin port is easy to change. Management>WebAdmin Settings>General Tab>WebAdmin TCP Port.

OK, the reason that I asked is that alot of DSL providers (not sure about cable) give their customers a combo modem/router/cheap firewall box.

__________________
ACE v8/SCA v9.3

...still have a v5 install disk in a box somewhere.

http://xkcd.com
http://www.tedgoff.com/mb
http://www.projectcartoon.com/cartoon/1
Cancel
Vote Up 0 Vote Down

Cancel
0 nloding over 18 years ago in reply to Scott_Klassen

I tried accessing it from several more ISPs, and it failed. I will change the port and try again. Is there anything that needs to be set except:

Management/WebAdmin Settings/Access Control/Allowed Networks > ANY
Cancel
Vote Up 0 Vote Down

Cancel