Enable remote access to your VPN

Christopher Dakin

After you have completed the initial Setup Wizard in the UI, you are presented with a login screen.

Log in as your admin account that was created during the Setup Wizard.

LogonBox VPN should now guide you through getting an initial VPN configuration working, which is presented as a popup on every login until you untick the option for Show this help screen again.

If you need to get these hints back after dismissing them, navigate to the Dashboard page and click Help me to get started.

 

The first area to review is Enable Remote Access.

Note: This is optional if you set the External Discovery options in the setup wizard and are okay to use the default subnet of 172.16.1.0/24 for your clients.

 

1. Enable Remote Access

You first need to ensure that your incoming VPN connections are being forwarded to the correct ports, which are TCP/443 and UDP/51820.

The LogonBox server will try to set this up automatically for you if possible (i.e via UPnP), but it's not always possible to do this as you may have to manually configure this on your router or external firewall.

 

Clicking the Configure link on this section will take you to the System Configuration->VPN setting where you should be able to see the External address discovery method settings.

If you chose to set up the external address later whilst in the setup wizard, it is here where you can set the address by changing the External address discovery method to MANUAL and entering an External address.

The default setting should work in most cases though.

The options available here are Web (we use a web service to determine what public IP connections from your system come from), UPNP (Using the UPnP functionality of a router to get the address) and Manual (you define a static IP yourself).

 

For Global Address Pool, you define a network address for the pool from which IP addresses will be handed out to clients. Set a Global Address Pool Start and a Pool Prefix Length.

i.e 192.168.2.0 with a prefix of 24 will give a pool with addresses from 192.168.2.1-192.168.2.254.

Set a suitable Global Address Pool End. If you are using a single subnet, this can be the same as the Pool Start, but if you have a paid license and are using multiple tenancy you can define a different subnet to end on.

For example, in the below screenshot the configuration will set up to 248 separate subnets than can be assigned to different tenants.

 

NOTE: Ensure that you have enough subnets configured to give at least one more than you require. The first subnet in the range will be used as a central subnet for the server. The second subnet will be the one assigned to clients on your main tenant.

Click Apply to save any changes. You can also set the address pool ranges for your clients here. Again the defaults should work in a lot of cases so you may not need to configure anything here.