Nsync setup/config

[rgil]

does anyone have any help for config of nsync..,

i dont want to bump older posts, and i have already mailed thecus directly on 3 seperate occasions (no reply) about this so finally i must post here.

I have setup and configured my 2 n5200 units so they were working correctly with a nightly sync over a LAN. all fine,

whats the procedure for configuring firewalls/ports and ip addresses to allow this to happen from one LAN site to another over the net?

any help greatfully received

Ron

[peterfu]

Nsync from one N5200 to another N5200 use openvpn to build up a vpn first - the standard port for openvpn (from version 2.0 on) is 1194/UDP. So if You open port 1194 for UDP on your target firewall and forward this port to your target N5200 it should work.If it does not work, then may be You can check the logs of Your target firewall to identify the port which is used.
br
Peter

PS : I have no idea what openvpn version is used in the N5200

[rgil]

That sounds promising,
i have openvpn working from remote site to main office already,
though is the openvpn client and server for this directly on the n5200 or do i have to configure openvpn on two pc's to enable the network accross the net, then configure nsync.
i'll head off, google and follow this up,
thanks peterfu

[peterfu]

The client and server is already on the N5200 - the Nsync source is the client and the nsync target is the server - So You just have to be sure that the connection between the two can be established.
br
Peter

[rgil]

so openvpn is 'internal' to nsync and i just need to allow the port info through from the lan on the source to the routers address and setup port forwarding to allow data to get to the n5200 on the target box.

silly question then
my config is source n5200 :-
wan n.n.n.11 (actually on the lan at head office)
gateway n.n.n.3 (router ip)
ipsharing - off
link agg - disable

lan not connected

when i point the target server ip address (nsync setup) to the external ip address of the site where remote target n5200 is, and test connection,
there arent any logs in the firewall of the source n5200 trying to access the internet...


a bad start for configuring..
thats where it all started

[peterfu]

I'm not sure what the "test" button realy does (if You nsync to a legacy ftp server, then it simply checks if an ftp session can be opened). But may be the used port is already open and/or the included openvpn uses another port as the 1194.
Do You have SSH access to the box, then may be You can check the scripts ?
br
Peter

[rgil]

i could setup ssh, but i really dont know much/anything about linux so checking scripts is probably beyond me at the moment.

anywhere i could get info on the scripts or how to retrieve them via ssh?

[peterfu]

I have checked the scripts and found no hint for any change of the standard port. The version of the used openvpn is:

root@127.0.0.1:/# /opt/bin/openvpn --version
OpenVPN 2.0.7 i686-pc-linux [SSL] [LZO] built on Jun 29 2006
Developed by James Yonan
Copyright (C) 2002-2005 OpenVPN Solutions LLC <info@openvpn.net>

If You are interested in the start commands:

Client:
/opt/bin/openvpn --dev tun --persist-tun --persist-key --proto tcp-client \
--keepalive 10 60 --writepid "$pidf" --verb 0 \
--client --comp-lzo --remote "$2" \
--ca /app/bin/openvpn/keys/tmp-ca.crt --cert /app/bin/openvpn/keys/client.crt \
--key /app/bin/openvpn/keys/client.key \
--auth-user-pass "$userf" --persist-local-ip --persist-remote-ip --resolv-retry 3 \
--route-up "/app/bin/openvpn/route_up.sh \"$gwf\" " --daemon

Server:
/opt/bin/openvpn --dev tun --persist-tun --persist-key --proto tcp-server \
--keepalive 10 60 --verb 0 --writepid $pidf \
--client-cert-not-required --username-as-common-name \
--mode server --comp-lzo \
--server $1 $2 --duplicate-cn \
--auth-user-pass-verify /app/bin/openvpn/auth.sh via-env \
--tls-server --dh /app/bin/openvpn/keys/dh1024.pem --ca /app/bin/openvpn/keys/tmp-ca.crt \
--cert /app/bin/openvpn/keys/server.crt --key /app/bin/openvpn/keys/server.key --daemon

br
Peter

[rgil]

Magic,
a bit of fiddling with the firewall at remote office and leaving it to run the nsync,
and it works

thanks for the help peter..

just need to update our ADSL as the sync is sooo slow at the moment..

[peterfu]

congratulations - glad to hear that it worked
br
Peter