how to share internet-connection over vpn

Hallo,

first, sorry for my bad english...


i have a mac mini 2011 with os x mavericks and os x server.

i use a vpn connection for my mobile clients. these clients need to connect to the internet with the same connection as the server.


how do i share the connection for my vpn clients?


thx

cgwaldt

Mac mini, OS X Server

Posted on Feb 16, 2014 11:55 PM

Reply
7 replies

Feb 19, 2014 8:48 AM in response to cgwaldt

Mr. cgwaldt:


I just ran some tests and confirmed the method. To mask your ip address via your vpn do the following.


1. Create a vpn connection to your server.


2. Use Finder to start your ScreenSharing.app. This app is located at /System/Library/CoreServices/ScreenShare


3. When you start the app, it will ask you for the ip address of the network computer. Enter the ip address of your server.


4. Log in with a registered account on that server.


5. Do all your work through the shared screen.


I have taken a screen shot. You will see two browsers in the screen shot. One is open on my local computer, and the other is open on the ShareScreen app. The one in the ShareScreen app shows the static IP address of my office. The one that is on my local machine shows the dynamic IP address provided by my mobile internet provider. Note, my advice in a previous post was not entirely correct; I am forcing all traffic through the VPN tunnel in this picture, and I expected my local machine to have the static ip address that is the same as the one in the ShareScreen app. Even with all network traffic going back to my home server, I run into the problem that you spoke of, but the solution is to use that connection to work from a home computer, and then the problem is solved.


Any work you do on your server using the ShareScreen app will use internet packets marked with your static IP address. The connection was not nearly as slow as I had thought it would be. There is a delay between the typing of text and the appearing of the text on the screen, but if you are good at typing, this should not slow you down.


User uploaded file

In this example, the webpage that is showing 173.198.104.130 would be the one that you would use for your billing. That IP address is the static IP of my office, which is where the "Mavericks1" computer is located.


For this test, I used a mobile hotspot on an Android Ice Cream Sandwhich operating system running on an HTC Rizound celular phone. The connection speed is mediocre, and the delay was not bad. If you are working in a hotel or have access to a much better wireless connection, then the delay will probably be minimal at best.


I hope this helps.


-Jared

Feb 17, 2014 8:26 AM in response to cgwaldt

Mr. cgwaldt:


I need more information. Why does your VPN client need to use the same internet connection as your server?


The benefit of VPN is to create a fake local network when computers are attached to different Internet connections. Using VPN will allow you to use your computer in California, USA with the same local-network feel as you would if you were using your computer in London, England, or your own home.


VPN connects your computer through the public Internet to your home Server. Then it discusses and creates a secure encryption plan. After verifying your autentications, the server then assigns you a local ip address (192.168.x.x/16) and this gives you access to all of the things that you have at home over a secure signal that does not let people read your data.


When you are using VPN, many setups automatically send all network traffic through this encrypted signal (called a tunnel) to your server, and then your server determines how to distribute the signal from there. This will do two things: 1) it will slow down your internet connection on your client machine for the benefit of security, 2) it will allow you to use the tunnel-ip address (that 192.168.x.x number) for all communications.


When you turn your VPN off, you will notice that your signal delay decreases, and you will also notice that you no longer have access to any of your personal files where the your server sits.


Kind regards,


Jared Clemence

Feb 18, 2014 12:52 AM in response to Jared Clemence

Thx for answer.


I have a software for patients and i get my mony from the insurence. For that i have a spezial software and a static ip. The insurence only accept my bills from this ip. But i don't want to stay in the office to check every bill. At home in garden or something else is much better.


Last year i had an windows server 2003 with vpn and it works fine, now i am only able to access the local net, but not the connection to the internet.

Feb 18, 2014 5:00 PM in response to cgwaldt

Mr. cgwaldt:


With that additional information, the situation becomes more clear.


You should use either the ShareScreen.app across your vpn, or a program such as LogMeIn. I do not know if ShareScreen can be set up for use outside of your private network (in other words, when not using a vpn), but I would not recommend this. If you have set up your vpn and you have ShareScreen enabled, you can use your computer in the office as if you were sitting in the chair in front of it. Any bill submissions from that computer will be sent from the office IP, just like if you were sitting at the desk.


I suggest software such as LogMeIn, because LogMeIn is free for small numbers of computers, and is much faster than most default VPN connections. They have encryption which protects you, and you can log in from any internet browser. It is also very easy to use.


Much like the ShareScreen.app, LogMeIn will allow you to use the office computer in the same way as though you were sitting in front of it. Any person sitting in the office will see the mouse moving and will see the work you are doing (unless you disconnect the monitor), and all billing information will have the ip address of your office.


You can use the VPN to do this as well, without using a remote screen sharing application. However, you will likely have problems with connection speeds. The solution with using VPN only is to set your computer to direct all network traffic through the VPN tunnel. This forces all network requests through to your office network first and then sends it out to the public Internet. It should result in your static IP appearing on the data packets as a result of your routers NAT systems, but this also will result in much longer delays and a much slower internet connection for you, because now ALL network traffic is being directed through the tunnel. This setting can be changed in your Mac's Network preferences under the VPN connection.


Again, the simplest solution is to use a program such as LogMeIn.


Does this solve your problem? Do you have any questions I can answer?


Kind regards,


Jared Clemence

Feb 19, 2014 7:52 AM in response to Jared Clemence

First, thank you for your help


i know, that i can use software from 3rd companies (teamviewer, logmein...), but i think the speed is not important and i had to protect my network and so i had to use vpn.


how do i config my vpn server to allow the clients to access my internet-connection? in network-settings (on my server) i don't find vpn, only in the server-app. but there i find no settings to control this.


are youu able to help me in this way?

Feb 19, 2014 11:08 PM in response to Jared Clemence

With shared screen it is possible to manage my server and the server app from my insurence, but my clients have a client software, which is not installed on the server. I need a real vpn connection to solf the problem. My vpn client need an connection to my office, so that everything works like i am there (only slower)


I think i need to config the vpn server in the os server app, but i don't know how.


I'm really sorry for that complicated problem to solve

Feb 24, 2014 8:48 AM in response to cgwaldt

If it was not complicated, it would not be a problem. If I find a solution to your problem, I will post again. Until that time, I will let other people in the community take a stab at this. I have not found a way to use VPN to force traffic to have the IP address of the remote location during my tests. I am sorry I could not provide more help at this time.


-Jared

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

how to share internet-connection over vpn

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.