[OSX-Users] VPN to soton

[Tim Chown]

> On 15 Feb 2017, at 16:02, Jules Field <Jules at ecs.soton.ac.uk> wrote:
> 
> On 15/02/2017 15:53, Tim Chown wrote:
>> On 15 Feb 2017, at 15:46, Hugh Glaser <hg at ecs.soton.ac.uk> wrote:
>>> It is a real pain, by the way, if you want someone to complain.
>>> My machine at home also serves incoming stuff for web services, and I also want to be able to access it from away from home, either as ssh or various file or screen sharing options and/or VPN(!, yes it runs a VPN server, of course :-) ).
>>> That means I need to ensure that the VPN to Soton is not running when I leave home - and of course that means it closes my ssh connections to the University that had to start under VPN to allow access.
>> Try mosh?
>> 
>> I like using VPN where all traffic is routed, as it's handy to have a UK IP address while overseas.  I have found the Soton VPN often doesn't connect though.
> You need to be able to *choose* whether to have all your traffic routed or not. But yes, perfect for iPlayer while abroad.

Which is where the routing table changes help.

>> Have you checked whether IPv6 is also routed down the VPN or not?  A number of VPN products fail to do so, which can also be handy in some cases.
> Seeing as iSolutions' network still doesn't do IPv6, I somehow doubt that GlobalProtect VPN will. It wouldn't know what to do with the packets if it got them...

Oh, yes, of course. Sigh.

That does mean though that eduroam users on campus, connected to the VPN, will see their traffic to Facebook, Youtube, Google, Netflix, and a variety of other destinations go direct, as it will use IPv6.  Similarly for Soton users on the VPN sat on any IPv6 access network, e.g. Sky broadband users, or many BT users now.  Bit of a policy gap!
  
Tim