Virtualbox and Juniper Network Connect

[walterdp]

Hi all:

I'm using Virtualbox to connect to a Juniper network connect VPN. I would like to use the wireless connection but if I use it NATted, Network Connect gets disconnected very frequently. Is it possible to set a wireless connection on the guest?

Because the wireless connection on the hosts asks for 802.1x authentication so, if I bridge it, I cannot use it.

Thanks

Walter

[martyscholes]

Walter,

I am also interested in VPN issues. Can you clarify a few things?

> I'm using Virtualbox to connect to a Juniper network connect VPN.

Using the host to connect to VPN and have the the guest also use the VPN? Or does the host connect normally and you are using the guest to attach to VPN? Or the host connects to VPN and the guest is using normal networking? The VPN software is on the guest or host? Both? The host is Windows 7? The guest is XP? The VPN software on the host works if VirtualBox is not used?

> I would like to use the wireless connection but if I use it NATted, Network Connect gets disconnected very frequently.
> Is it possible to set a wireless connection on the guest?

The wireless connection on the guest works without VPN on either the host or the guest? Wireless VPN on the host works? A wired connection works but wireless does not?

Thanks,
Marty

[walterdp]

HI Marty:

Let me reply (inline comments start with >>)


I am also interested in VPN issues. Can you clarify a few things?

> I'm using Virtualbox to connect to a Juniper network connect VPN.

Using the host to connect to VPN and have the the guest also use the VPN? Or does the host connect normally and you are using the guest to attach to VPN? Or the host connects to VPN and the guest is using normal networking? The VPN software is on the guest or host? Both?
>> Only guest is connecting thru the VPN. The host connects to normal networking. The idea is to be able to connect to the Network Connect VPN for my client purposes and keep the rest of the connectivity open. The VPN software is only running on the guest.

The host is Windows 7? The guest is XP? The VPN software on the host works if VirtualBox is not used?
>> Host = Windows 7. Guest = XP.
>> If I want to connect only the host to the VPN, it works fine. If I connect only the guest to the VPN thru a bridged LAN connection, it works fine. Problems is
If I connect the guest to the VPN and the guest is connected with NAT

> I would like to use the wireless connection but if I use it NATted, Network Connect gets disconnected very frequently.
> Is it possible to set a wireless connection on the guest?

The wireless connection on the guest works without VPN on either the host or the guest? Wireless VPN on the host works? A wired connection works but wireless does not?

>> I cannot set a wireless connection on the guest. That's my question. Or at least a way to enable 802.1x authentication in the guest.

[martyscholes]

Ah, I think I understand now. I missed the 802.1x part.

Your wireless is on a controlled network where ports are allowed/denied access. Your host has been authorized to connect. When the guest attempts to connect via bridged networking, a new NIC shows up on the controlled network and is not allowed to connect. If I understand you, the bridged guest cannot connect to the 802.1x network regardless of the VPN issue.

To work around that, you set the guest to NAT mode which uses the host's network stack, allowing the guest to ride on the host's authenticated port. This works until you attempt to use the VPN software on the guest, which results in many disconnects.

Do I have that right?

[walterdp]

Hi Marty:

You get it right!

Some comments:

Your wireless is on a controlled network where ports are allowed/denied access. Your host has been authorized to connect. When the guest attempts to connect via bridged networking, a new NIC shows up on the controlled network and is not allowed to connect. If I understand you, the bridged guest cannot connect to the 802.1x network regardless of the VPN issue.

>> Right.

To work around that, you set the guest to NAT mode which uses the host's network stack, allowing the guest to ride on the host's authenticated port. This works until you attempt to use the VPN software on the guest, which results in many disconnects.

>> Right. Only thing is that usually I can connect to the VPN software, but then, after some time, it loses connection.

[martyscholes]

Walter,

I apologize, but I have nothing for you here. I might suggest that if you can, get the guest bridged NIC authorized to connect. I am unsure how to go about that. Failing that, check out the VPN logs (if they exist) or contact the VPN provider to see if that gets you anywhere.

For what it's worth, I work from home via a Checkpoint VPN on an XP guest under Solaris. For QoS purposes on the router I have given that guest a dedicated VNIC (i.e. bridged). I had some initial issues getting the VPN set up, but for the past year it has been working like a champ.

Good luck and let the community know what you learn.

Thanks,
Marty

[BillG]

I can only agree with Marty. To run a VPN connection reliably from a guest, the guest needs to have its own network connection on your local LAN, not a shared one. In VirtualBox, that means using bridged mode. The vm then behaves like a second device on the same network as the host.

If you are on a managed network, your local network admin will need to authorize a connection to the network by your vm. In effect you are trying to connect a "foreign" computer to the network, which is what the network software is there to prevent!

[walterdp]

I can only agree with Marty. To run a VPN connection reliably from a guest, the guest needs to have its own network connection on your local LAN, not a shared one. In VirtualBox, that means using bridged mode. The vm then behaves like a second device on the same network as the host.

If you are on a managed network, your local network admin will need to authorize a connection to the network by your vm. In effect you are trying to connect a "foreign" computer to the network, which is what the network software is there to prevent!

Hi Bill:

Thanks for your answer. I agree with you but even if that is the case and the NOC authorizes the wireless connection from the guest, how can I simulate a wireless connection and / or enable 802.1x in the guest?