Skip to content

VPNs

Giga VPN

The gigavpn is an OpenVPN service running on the Firewall and allows access to our whole network (including e.g. the DMZ network).

To be able to use the gigavpn you need a user on the Firewall which is part of the gigavpn access group. This means the credentials for this VPN are:

  • the username of your firewall user account
  • the password of your firewall user account
  • the OpenVPN client certificate (this one must be downloaded from the firewall)

Warning

Since this VPN provides unrestricted access to our whole network the access to this VPN is restricted to a very limited group of persons. For all use-cases which don't need unrestricted network access please use the UserVPN or Tailscale (see below).

User VPN

The uservpn is an OpenVPN service running on the Firewall which allows access to the Obi LAN Kenobi network and a limited subset of services / VMs.

To be able to use the uservpn you need a user on the Firewall. Unlike for the gigavpn your firewall user must not be part of some access group. It can be used with every firewall user by default.

The credentials for this VPN are:

  • the username of your firewall user account
  • the password of your firewall user account
  • the OpenVPN client certificate (this one must be downloaded from the firewall)

Tailscale

Tailscale is some kind of zeroconf Wireguard and is well suited to access your own VMs or other devices located in our hackspace from outside. We host our own Headscale server on vpn.sfz-aalen.space or headscale.sfz-aalen.space which can be used to for creation and authentication of Tailscale networks.

Note

You can only connect to machines you control / administrate using Tailscale.