Tonight Justin and I started testing the SunRay’s at home with out a VPN. I never got a good response back from Linksys. (In fact they responded to my question with something that was not even related to my question. They tried to say you could not have two routers connected together. Now some this just made me laugh more than anything. Do they assume that there is only one router in the world?) Anyways, I scraped the idea of using the Cisco 831 routers instead I am going the route of exploiting the new features in version 3.1. So I created my 2 dns entries of “sunray-config-servers” and “sunray-servers” and then configured my local LinkSys router to hand off the proper domain name to the SunRay. Once that was done I made sure that the IP’s from our home cable modems where opened completely to the SunRay server so that nothing would block us. We then plugged in the SunRay’s and up popped the Solaris 10 login screen (after we put our Java Cards in, before we did that the screen shows the 26B code.)

So everything seems to work ok, with the exception of using removable media (probably a port issue that I have not worked with yet. So next up was to tighten the security on the server, with ipfilter. Currently this is what is in the ipf.conf for the sunray servers:

#SunRay Services
pass in quick on ge0 proto tcp from any to any port = 7007 flags S keep state
pass in quick on ge0 proto tcp from any to any port = 7008 flags S keep state
pass in quick on ge0 proto tcp from any to any port = 7009 flags S keep state
pass in quick on ge0 proto udp from any to any port = 7009 flags S keep state
pass in quick on ge0 proto tcp from any to any port = 7010 flags S keep state
pass in quick on ge0 proto tcp from any to any port = 7011 flags S keep state
pass in quick on ge0 proto tcp from any to any port = 7012 flags S keep state
pass in quick on ge0 proto tcp from any to any port = 7013 flags S keep state
pass in quick on ge0 proto udp from any to any port = 7013 flags S keep state
pass in quick on ge0 proto udp from any to any port 40000 >< 42000 flags S keep state
pass out quick on ge0 all keep state
block in log on ge0 all

What is intresting is I ran a utcapture while we were using the sunrays and here is the output (over a couple minute period). There are two remote sunrays (Mine and Justin’s) and one local to the server. Overall we were experiencing around a 60 ms latency on our remote ones. But we were able to do work and it appears almost the same as being at the office. The only time there were real lag problems was when we tried to stream an MP3 while we were doing work with StarOffice and Firefox.

# /opt/SUNWut/sbin/utcapture -r
# TERMINALID      TIMESTAMP TOTAL PACKET   TOTAL LOSS   BYTES SENT PERCENT LOSS      LATENCY
LocalSunRay1 20060127212032       415630            1     55007774        0.000        3.099
RemoteRay001 20060127212032          293            2       177202        0.000       60.321
LocalSunRay1 20060127212047       415640            1     55008674        0.000        5.685
RemoteRay001 20060127212047         2275          106      2605968        5.247       60.759
LocalSunRay1 20060127212102       415650            1     55009574        0.000        2.867
RemoteRay001 20060127212102         2275          106      2605968        0.000       60.759
LocalSunRay1 20060127212117       415660            1     55010474        0.000        3.008
RemoteRay001 20060127212117         3726          318      4246494       14.611      162.577
LocalSunRay1 20060127212132       415669            1     55011284        0.000        2.911
RemoteRay001 20060127212132         7744          492      8446402        4.331       60.114
LocalSunRay1 20060127212147       415669            1     55011284        0.000        2.911
RemoteRay001 20060127212147         7744          492      8446402        0.000       60.114
LocalSunRay1 20060127212202       415679            1     55012184        0.000        3.252
RemoteRay001 20060127212202         8544          492      9319590        0.000       65.008
LocalSunRay1 20060127212217       415689            1     55013084        0.000        2.661
LocalSunRay1 20060127212232       415699            1     55013984        0.000        3.202
RemoteRay001 20060127212232          150            0        55268        0.000       65.251
LocalSunRay1 20060127212247       415699            1     55013984        0.000        3.202
RemoteRay001 20060127212247          150            0        55268        0.000       65.251
LocalSunRay1 20060127212302       415708            1     55014794        0.000        8.556
RemoteRay001 20060127212302          384            0       183444        0.000      211.021
LocalSunRay1 20060127212317       415718            1     55015694        0.000        3.084
RemoteRay001 20060127212317          519            0       240422        0.000       70.828
LocalSunRay1 20060127212332       415728            1     55016594        0.000        2.895
RemoteRay001 20060127212332          703            0       325290        0.000       66.071
LocalSunRay1 20060127212347       415728            1     55016594        0.000        2.895
RemoteRay001 20060127212347          703            0       325290        0.000       66.071
LocalSunRay1 20060127212402       415737            1     55017404        0.000        2.925
RemoteRay001 20060127212402          917            1       426688        0.467       60.672
LocalSunRay1 20060127212417       415747            1     55018304        0.000        2.729
RemoteRay001 20060127212417         1115            3       498688        1.010       66.997
LocalSunRay1 20060127212432       415757            1     55019204        0.000        2.849
RemoteRay001 20060127212432         1303            4       543746        0.532       61.344
LocalSunRay1 20060127212447       415757            1     55019204        0.000        2.849
RemoteRay001 20060127212447         1303            4       543746        0.000       61.344
LocalSunRay1 20060127212502       415767            1     55020104        0.000        2.581
RemoteRay001 20060127212502         1495            7       582708        1.562     1559.543
LocalSunRay1 20060127212517       415776            1     55020914        0.000        2.641
RemoteRay001 20060127212517         1656            9       613218        1.242       60.368
LocalSunRay1 20060127212532       415786            1     55021814        0.000        2.763
RemoteRay001 20060127212532         1826           13       644554        2.353       66.937
LocalSunRay1 20060127212547       415786            1     55021814        0.000        2.763
RemoteRay001 20060127212547         1826           13       644554        0.000       66.937
LocalSunRay1 20060127212602       415796            1     55022714        0.000        2.566
RemoteRay001 20060127212602         1978           13       672190        0.000       61.018
LocalSunRay1 20060127212617       415806            1     55023614        0.000        2.521
RemoteRay001 20060127212617         2145           17       702136        2.395       64.240
RemoteRay002 20060127212617            0            0            0        0.000       -1.000
LocalSunRay1 20060127212632       415815            1     55024424        0.000        2.967
RemoteRay001 20060127212632         2299           19       733300        1.299       63.950
RemoteRay002 20060127212632          198            0       118228        0.000    17245.461
LocalSunRay1 20060127212647       415815            1     55024424        0.000        2.967
RemoteRay001 20060127212647         2299           19       733300        0.000       63.950
RemoteRay002 20060127212647          198            0       118228        0.000    17245.461
LocalSunRay1 20060127212702       415825            1     55025324        0.000        3.460
RemoteRay001 20060127212702         2453           19       764404        0.000       60.885
RemoteRay002 20060127212702          461            2       297160        0.760       55.686
LocalSunRay1 20060127212717       415835            1     55026224        0.000        2.547
RemoteRay001 20060127212717         2643           21       808484        1.053       74.242
RemoteRay002 20060127212717          499            2       300908        0.000       56.162
LocalSunRay1 20060127212732       415845            1     55027124        0.000        2.839
RemoteRay001 20060127212732         2810           22       843784        0.599       63.110
RemoteRay002 20060127212732         1100            3       933680        0.166       56.513
LocalSunRay1 20060127212747       415845            1     55027124        0.000        2.839
RemoteRay001 20060127212747         2810           22       843784        0.000       63.110
RemoteRay002 20060127212747         1100            3       933680        0.000       56.513
LocalSunRay1 20060127212802       415854            1     55027934        0.000        3.203
RemoteRay001 20060127212802         2982           22       883504        0.000       60.873
RemoteRay002 20060127212802         1297            7      1034476        2.030       57.056
LocalSunRay1 20060127212817       415864            1     55028834        0.000        3.114
RemoteRay001 20060127212817         3149           22       918342        0.000     1560.664
RemoteRay002 20060127212817         1756            8      1416534        0.218       82.559
LocalSunRay1 20060127212832       415874            1     55029734        0.000        2.977
RemoteRay001 20060127212832         3321           22       958594        0.000       61.332
RemoteRay002 20060127212832         3566           16      3439790        0.442       56.387
LocalSunRay1 20060127212847       415874            1     55029734        0.000        2.977
RemoteRay001 20060127212847         3321           22       958594        0.000       61.332
RemoteRay002 20060127212847         3566           16      3439790        0.000       56.387
LocalSunRay1 20060127212902       415883            1     55030544        0.000        2.904
RemoteRay001 20060127212902         3488           24       993352        1.198       63.419
RemoteRay002 20060127212902         5383           42      5450500        1.431       58.693
LocalSunRay1 20060127212917       415893            1     55031444        0.000        2.657
RemoteRay001 20060127212917         3663           26      1048334        1.143       60.049
RemoteRay002 20060127212917         7202           55      7473348        0.715       57.001
LocalSunRay1 20060127212932       415903            1     55032344        0.000        3.127
RemoteRay001 20060127212932         3835           28      1085246        1.163       61.622
RemoteRay002 20060127212932         9021           76      9486720        1.154       55.797
LocalSunRay1 20060127212947       415913            1     55033244        0.000        2.933
RemoteRay001 20060127212947         3835           28      1085246        0.000       61.622
RemoteRay002 20060127212947         9021           76      9486720        0.000       55.797
LocalSunRay1 20060127213002       415913            1     55033244        0.000        2.933
RemoteRay001 20060127213002         4001           30      1120086        1.205       59.759
RemoteRay002 20060127213002        10834           97     11499864        1.158       55.693
LocalSunRay1 20060127213017       415922            1     55034054        0.000        3.072
RemoteRay001 20060127213017         4223           31      1217756        0.450     1561.235
RemoteRay002 20060127213017        12638          105     13513512        0.443       54.271
LocalSunRay1 20060127213032       415932            1     55034954        0.000        2.956
RemoteRay001 20060127213032         4913           34      1799792        0.435       62.053
RemoteRay002 20060127213032        14467          129     15540674        1.312       88.139
LocalSunRay1 20060127213048       415942            1     55035854        0.000        2.973
RemoteRay001 20060127213048         4913           34      1799792        0.000       62.053
RemoteRay002 20060127213048        14467          129     15540674        0.000       88.139
LocalSunRay1 20060127213103       415942            1     55035854        0.000        2.973
RemoteRay001 20060127213103         6788           56      3829206        1.173       58.612
RemoteRay002 20060127213103        16277          148     17545888        1.050       56.562
LocalSunRay1 20060127213118       415952            1     55036754        0.000        3.060
RemoteRay001 20060127213118         8296           60      5308802        0.265       63.716
RemoteRay002 20060127213118        18095          162     19567348        0.770       55.829
LocalSunRay1 20060127213133       415961            1     55037564        0.000        3.786
RemoteRay001 20060127213133        10221           80      7349944        1.039       61.901
RemoteRay002 20060127213133        19908          182     21580534        1.103       53.680
LocalSunRay1 20060127213148       415971            1     55038464        0.000        2.939
RemoteRay001 20060127213148        10221           80      7349944        0.000       61.901
RemoteRay002 20060127213148        19908          182     21580534        0.000       53.680
LocalSunRay1 20060127213203       415971            1     55038464        0.000        2.939
RemoteRay001 20060127213203        12141          104      9385032        1.250       69.672
RemoteRay002 20060127213203        21725          182     23618124        0.000       56.509
LocalSunRay1 20060127213218       415981            1     55039364        0.000        2.980
RemoteRay001 20060127213218        13819          112     11132928        0.477       61.087
RemoteRay002 20060127213218        23680          199     25789016        0.870     1555.052
LocalSunRay1 20060127213233       415990            1     55040174        0.000        3.145
RemoteRay001 20060127213233        13819          112     11132928        0.000       61.087
RemoteRay002 20060127213233        25499          216     27809010        0.935       58.646
LocalSunRay1 20060127213248       416000            1     55041074        0.000        2.945
RemoteRay002 20060127213248        25499          216     27809010        0.000       58.646
LocalSunRay1 20060127213303       416000            1     55041074        0.000        2.945
RemoteRay001 20060127213303          428            7       185414        1.299       61.538
RemoteRay002 20060127213303        27241          224     29755664        0.459       56.809
LocalSunRay1 20060127213318       416010            1     55041974        0.000        2.901
RemoteRay001 20060127213318          581            7       214456        0.000       63.445
RemoteRay002 20060127213318        28494          239     31110796        1.197       55.366
LocalSunRay1 20060127213333       416020            1     55042874        0.000        3.279
RemoteRay001 20060127213333          581            7       214456        0.000       63.445
RemoteRay002 20060127213333        28532          239     31113428        0.000       56.449
LocalSunRay1 20060127213348       416029            1     55043684        0.000        3.189
RemoteRay001 20060127213348          738            9       242934        1.274       61.834
RemoteRay002 20060127213348        28532          239     31113428        0.000       56.449
LocalSunRay1 20060127213403       416029            1     55043684        0.000        3.189
RemoteRay001 20060127213403          890           12       270336        1.974       59.571
RemoteRay002 20060127213403        28581          239     31123886        0.000       54.903
LocalSunRay1 20060127213418       416039            1     55044584        0.000        2.930
RemoteRay001 20060127213418         1046           12       299380        0.000       61.425
RemoteRay002 20060127213418        28631          239     31143414        0.000       56.714
LocalSunRay1 20060127213433       416049            1     55045484        0.000        2.865
RemoteRay001 20060127213433         1046           12       299380        0.000       61.425
RemoteRay002 20060127213433        28678          239     31157692        0.000       58.201
LocalSunRay1 20060127213448       416059            1     55046384        0.000        2.968
RemoteRay001 20060127213448         1046           12       299380        0.000       61.425
RemoteRay002 20060127213448        28678          239     31157692        0.000       58.201
LocalSunRay1 20060127213503       416059            1     55046384        0.000        2.968
RemoteRay001 20060127213503         1046           12       299380        0.000       61.425
RemoteRay002 20060127213503        28720          239     31165836        0.000       68.539
LocalSunRay1 20060127213518       416068            1     55047194        0.000        3.244
RemoteRay002 20060127213518        28775          242     31178372        5.455       56.119
LocalSunRay1 20060127213533       416078            1     55048094        0.000        2.819
RemoteRay001 20060127213533            0            0            0        0.000       -1.000
RemoteRay002 20060127213533        28826          243     31194000        1.961       56.887
LocalSunRay1 20060127213548       416088            1     55048994        0.000        3.251
RemoteRay001 20060127213548          222            1       126958        0.450    16443.648
RemoteRay002 20060127213548        28826          243     31194000        0.000       56.887
LocalSunRay1 20060127213603       416088            1     55048994        0.000        3.251
RemoteRay001 20060127213603          372            1       156198        0.000       60.601
RemoteRay002 20060127213603        28875          243     31208638        0.000       85.348
LocalSunRay1 20060127213618       416098            1     55049894        0.000        7.079
RemoteRay001 20060127213618          372            1       156198        0.000       60.601
RemoteRay002 20060127213618        28926          243     31220128        0.000       57.287
LocalSunRay1 20060127213633       416107            1     55050704        0.000        2.721
RemoteRay002 20060127213633        28963          243     31222670        0.000       53.920
LocalSunRay1 20060127213648       416117            1     55051604        0.000        4.412
RemoteRay001 20060127213648          374            0       375244        0.000       -1.000
RemoteRay002 20060127213648        28963          243     31222670        0.000       53.920
LocalSunRay1 20060127213703       416127            1     55052504        0.000        2.919
RemoteRay001 20060127213703          526            1       426594        0.658       61.767
RemoteRay002 20060127213703        29013          243     31238130        0.000       73.850
LocalSunRay1 20060127213718       416127            1     55052504        0.000        2.919
RemoteRay001 20060127213718          526            1       426594        0.000       61.767
RemoteRay002 20060127213718        29054          243     31246176        0.000       56.418
LocalSunRay1 20060127213733       416137            1     55053404        0.000        2.681
RemoteRay001 20060127213733          680            1       478966        0.000       59.486
RemoteRay002 20060127213733        29104          243     31261636        0.000       55.011
LocalSunRay1 20060127213748       416146            1     55054214        0.000        2.694
RemoteRay001 20060127213748          830            3       529146        1.333       65.108
RemoteRay002 20060127213748        29144          243     31274764        0.000       55.642
LocalSunRay1 20060127213803       416156            1     55055114        0.000        2.997
RemoteRay001 20060127213803          984            7       577674        2.597       61.091
RemoteRay002 20060127213803        29144          243     31274764        0.000       55.642
LocalSunRay1 20060127213818       416156            1     55055114        0.000        2.997
RemoteRay001 20060127213818          984            7       577674        0.000       61.091
RemoteRay002 20060127213818        29190          243     31293372        0.000       59.216
LocalSunRay1 20060127213833       416166            1     55056014        0.000        2.561
RemoteRay001 20060127213833         1149            7       635536        0.000     1674.703
RemoteRay002 20060127213833        29232          245     31306500        4.762       54.096
LocalSunRay1 20060127213848       416176            1     55056914        0.000        2.480
RemoteRay001 20060127213848         1304            7       686134        0.000       62.842
RemoteRay002 20060127213848        29262          245     31309400        0.000       54.375
LocalSunRay1 20060127213903       416185            1     55057724        0.000        2.430
RemoteRay001 20060127213903         1456            8       738924        0.658       61.507
RemoteRay002 20060127213903        29262          245     31309400        0.000       54.375
LocalSunRay1 20060127213918       416185            1     55057724        0.000        2.430
RemoteRay001 20060127213918         1456            8       738924        0.000       61.507
RemoteRay002 20060127213918        29443          249     31433822        2.210       56.026

So here is a list of hardware we have tried this setup with and it appears to work (except for the removeable media):

  1. LinkSys WRT54G v3 Wireless/Router
  2. dlink d-524 router
  3. SunRay 150’s

So Since this works with just normal cheap hardware from your local computer store, we will be ordering 8 SunRay 170’s to give to the other staff to take home.

Here is also a picture of the test setup we did tonight:

SunRay Diagram

So now we are one step closer to maybe being able to work from home for part of the week.

Technorati Tags: , ,

Posted by unixwiz, filed under Solaris, Sun, Sun Ray, VPN. Date: January 28, 2006, 12:04 am | No Comments »

Well it seems that there is something in the LinkSys routers that is stoping the Cisco IPSec VPN Traffic. I spent 2 hours on the phone this evening with Cisco trying to figure out what was wrong. The weird part is the Tunnel will establish, but the SunRay never really connects (when I have it configured as below). But as soon as I remove the Linksys router it works fine. I have gotten it some how to sort of work, but the screen is not painted correctly which usually means a MTU problem, but I have dropped the MTU all the way down to 1000 and it still does not work. So I sent a ticket to Linksys to see if they know what is wrong, and I will try sniffing the sunray traffic tomorrow night. Any one ever seen this? I really need it to work with the Linksys router in there as these devices (Cisco 831 + SunRay) will be put at other people’s house on their own network behind what ever router they happen to have (and most of them have the Linksys one).

Technorati Tags: , ,
SunRay VPN test setup at home

Posted by unixwiz, filed under Sun Ray, VPN. Date: January 24, 2006, 11:47 pm | 1 Comment »

Well before I tried my VPN stuff over the Internet, I set up a little fake internet in my house. It seems that for whatever reason the Cisco 831’s are not using NAT-T (NAT with Transperency). See if you are going to be running an IPSec tunnel you can’t have it behind a NAT because the NAT corrupts the IP headers and therefore the VPN server does not like it. But the Cisco 831’s are supposed to be able to detect if their is a NAT between the client and the server and if there is one, it changes how the IPSec is handled so that it works from behind the NAT. But right now the only thing I get is that the client is DOWN and trying to connect to the server, but I don’t see any traffic at the moment. So I am going to have to talk to Cisco and get some sniffer traces to see what is going on.

Posted by unixwiz, filed under Sun Ray, VPN. Date: January 17, 2006, 9:26 pm | No Comments »