Remote User Access Settings For FusionHub

[Kenny]

We are working on Remote User Access on FusionHub, it is expected to be available in next firmware.
You can message me if you want to beta test this feature.

[WeiMing]

@Kenny, we have a similar request from another post.

Configure Remote User Access using OpenVPN

Thanks WeiMing. Certainly. Enterprises need remote access for employees on the road, working from home, or in disaster recovery/BCP scenarios. Any Enterprise hosting their IT infrastructure in Azure or AWS will need to establish a Point-2-Site VPN client VPN aggregator for this purpose. If they are already using a FusionHub then it would be a perfect device to use for their Point-2-Site VPNs. We would use it ourselves at Onwave for our BCP/DR scenario. We have numerous customers who would u…

[Kenny]

Here is beta firmware for Remote User Access support in FusionHub (L2TP/PPTP/OpenVPN):
https://download.peplink.com/firmware/fusionhub/fw-fusionhub-8.0.0b047-build1599.bin

Please note: DHCP server on “SpeedFusion” setting page is also for Remote User Access.

[mldowling]

Hello @Kenny,
When we attempt to push this out from InControl2 for testing on one of our systems, we are receiving an error message.

PM me if you need more details.
Happy to Help,
Marcus

[TK_Liew]

@mldowling, please find the screenshot below.

I don’t have any problem to upgrade the FusionHub from 8.0.0 to 8.0.0b047. Please ensure the Upgrade only is unchecked on the firmware management page. Please open ticket if you still encounter the issue.

[mldowling]

Hello @TK_Liew,
All sorted, there was a typo in the initially posted URL, @Kenny has updated the thread with the corrected URL now.
Happy to Help,
Marcus

[Venn]

Hello @TK_Liew & @Kenny ,

No luck for me until now connecting on a FusionHub using OpenVPN.

Does it need to have a LAN interface?

Kr,

[TK_Liew]

@Venn, please refer to the knowledgebase below.

Configure Remote User Access using OpenVPN

[image] Available from firmware version 8.0 Introduction Besides being able to use PPTP and L2TP with IPsec you can now also use OpenVPN for Remote User Access to your LAN. This article describes how to configure your Peplink router and a Windows 10 client for remote User Access using OpenVPN. Configuring your Peplink router Log on to the web admin interface of the Peplink router. On Balance models, navigate to Network > Remote User Access. On MAX models, navigate to Advanced > Remote U…

I have no problem to establish the OpenVPN with FusionHub (1 WAN only).

Question:

1. Have you put the OpenVPN client profile (.ovpn) into the correct file path as per knowledgebase?

2. Have you enable the DHCP Server at Network > SpeedFusion > DHCP Server For NAT Mode Profile?

[Venn]

It works with L2TP but not with OpenVPN

I’m using Sophos SSL client on Windows which seems to be a fork of OpenVPN ( installing the sophos client after OpenVPN overwrites it) and the source of the issue. I’ll try to make them coexist and see if it solves the issue.

Thanks

[Kenny]

Hi Venn, can you try: https://download.peplink.com/firmware/fusionhub/fw-fusionhub-8.0.0b047-build1600.bin , improved compatibility with Windows OpenVPN client.

[Kenny]

Remote User Access is official supported in 8.0.1 beta 2.
Please note: DHCP server setting also apply to Remote User Access.

[vronp]

I am also having trouble connecting to Fusionhub via OpenVPN. A port checker took indicates nothing is responding on port 1194.

8.0.2 build 1656

[sitloongs]

@vronp

I have reply your question via the following post :

Accessing device behind BR1 using FusionHub

@vronp Not sure you have opened a ticket for this. If you want to verify whether the OpenVPN traffics reaching to the FusionHub, you can actually perform packet capture at the FusionHub Web Admin support.cgi page and open the captured files using WiredShark application to verify any traffics for port 1194 reaching to the Fusionhub WAN. If you did not to see any traffics for the captured logs, that mean the traffics is being blocked at the network level. [image]

Please help to perform packet capture at the Fusionhub end and verify whether the OpenVPN traffics generate from the client is reaching to the FusionHub. If you found the traffics is reaching to the FusionHub please follow up that using a support ticket.

[Venn]

Hello,

Can someone confirm this is working for FHub hosted on AWS, I’m getting issues configuring this even with all ports open.

Thanks!

[Kenny]

Which VPN service you are using?

for OpenVPN, the Server IP address in the ovpn file is set to FusionHub’s private IP address, you need to modify the ovpn file to set server IP address to FusionHub’s public IP address. We will improve this in future release.

[Venn]

I tried OpenVPN and LT2P over IPSEC.

That would explain for OpenVPN, I’ll try editing the file.

For the L2TP, any idea?

[Kenny]

L2TP works out of the box in our test.

[Venn]

With 8.1 firmware ?

[Kenny]

tested L2TP with 8.0.2 and 8.1.0, both work fine.

[Venn]

I confirm it works with OpenVPN with a better client (sophos one was failing).

No luck for L2TP, I probably made a mistake somewhere.

Thanks !