VPN FAQ

可通过哪些方式使用 SSL VPN?

此带外安全网关将允许您通过专用网络访问服务器。常见用途包括:

1. 在不使用公用带宽的情况下将文件上载/下载到服务器
2. 连接到服务器专用 IP 地址 10.x.x.x 以访问 SSH 或 RDC
3. 连接到 IPMI 卡以访问远程控制台/进行访问/进行监视
4. 在 Web 上通过 VPN 隧道安全地传输文件和信息
5. 为方便起见,在住宅/办公室 PC 上的 Windows 或 Red Hat 操作系统中安装驱动器
6. 使用分配的公用带宽将服务器备份到远程位置
7. 关闭数据库服务器上的公共接口,并通过专用网络进行管理。
8. 在第一次设置服务器时关闭公共接口。
9. 在执行紧急安全性更新期间关闭公共接口。
10. 在发生安全违规期间关闭公共接口,并通过专用网络解决问题。

是否可以通过 SSL VPN 网关从远程位置安装 NAS/FTP 服务器?

不,您只能从 SSL VPN 网关访问自己的专用 VLAN 和服务器。如果想要从 NAS/FTP 云硬盘下载数据,必须先将数据移到服务器,然后再通过 VPN 将数据传输到远程位置。

为安全起见,只允许数据中心内的服务器访问用于提供服务(DNS、Update、NAS 或 Lockbox)的服务器。

由哪个供应商创建 SSL VPN 以及 SSL VPN 如何工作?

我们的 SSL VPN 网关是由 Array Networks 提供的一款安全性产品。  此网关本身通过从我们的客户门户网站运行 RADIUS 来更新用户和密码。如果您希望添加用户并向用户授予 SSL VPN 访问权,请在客户门户网站中创建一个新用户,并启用 SSL VPN 许可权。

什么是 SoftLayer VPN?

SoftLayer 的 VPN 访问旨在供用户用来通过 SoftLayer 专用网络安全地远程管理所有服务器。  通过建立从您的位置到专用网络的 VPN 连接,便可以使用加密的 VPN 隧道进行无限制的文件传输、带外管理和服务器急救。  通过 VPN 访问,您可以:

  • 通过 SSL、PPTP 或 IPSEC 建立与专用网络的 VPN 连接
  • 通过 SSH 或 RDP 以利用服务器专用 10.x.x.x IP 地址来访问服务器
  • 连接到服务器的 IPMI IP 地址以满足其他服务器管理或急救需求。

 

 

SSL 与 PPTP VPN 有何差别?

SSL VPN 允许用户创建从远程桌面到 SoftLayer 专用网络的安全隧道。它与多种操作系统兼容。

PPTP VPN 允许使用相同的安全隧道,但要使用用户台式机或专用设备上的专业客户端软件进行连接。对于无法使用 SSL 连接的用户而言,PPTP VPN 是一个强大的解决方案。

SSL VPN 是否还执行 PPTP、IPSEC 或其他 VPN 协议?

SSL VPN 网关目前使用基于浏览器的 SSL VPN 插件或专有客户端来创建连接。我们将继续提供更多的用于连接专用网络的 VPN 连接选项。为便于使用并实现兼容,已选择 SSL VPN。

在连接到 PPTP VPN 时,其指示“Error 691: Access was denied because the username and/or password is invalid.”。如何纠正此问题?
所有用户都能连接到 PPTP VPN,但必须拥有通过客户门户网站进行登录的许可权。可以快速轻松地验证和更新 PPTP VPN 许可权。请参阅激活或取消激活 PPTP VPN 访问,以了解更多信息。
为何不能为 PPTP VPN 添加更多用户?

PPTP VPN 可在所有帐户上使用,但它最初配置为每次只允许一位用户访问。要请求在不收取额外费用的情况下为帐户启用无限制的 PPTP,请使用以下信息以及可能需要的任何其他详细信息来创建问题单

  • 主题:PPTP VPN 请求
  • 文本:我当前将 PPTP 限制为每次只供一位用户访问。请为我的帐户启用无限制的 PPTP VPN 访问。

支持代理程序将更新此帐户以启用无限制的 PPTP 访问,此服务将不收取额外费用。如果需要任何其他信息,那么将更新此问题单。

为何不能为 PPTP VPN 添加更多用户?

PPTP VPN 可在所有帐户上使用,但它最初配置为每次只允许一位用户访问。要请求在不收取额外费用的情况下为帐户启用无限制的 PPTP,请使用以下信息以及可能需要的任何其他详细信息来创建问题单

  • 主题:PPTP VPN 请求
  • 文本:我当前将 PPTP 限制为每次只供一位用户访问。请为我的帐户启用无限制的 PPTP VPN 访问。

支持代理程序将更新此帐户以启用无限制的 PPTP 访问,此服务将不收取额外费用。如果需要任何其他信息,那么将更新此问题单。

What are some ways to use the SSL VPN?

This out-of-band secure gateway will allow you access to your server over the private network. Common uses are:
 

  1. Upload/download files to your server without using public bandwidth
  2. Connect to your server private IP address 10.x.x.x for SSH or RDC
  3. Connect to your IPMI card for remote console/access/monitoring
  4. Transfer files and information securely through VPN tunnel over the web
  5. Mount drive in Windows or Red Hat from home/work PC for convenience
  6. Shut down public interface on database servers and manage over the private network.
  7. Shut down public interface while setting up the server for the first time.
  8. Shut down public interface during critical security updates.
  9. Shut down public interface during security breach and resolve the issue over the private network.
Can I mount the NAS/FTP server from my remote location over the SSL VPN gateway?

No...you only have access to your private VLAN and servers from the SSL VPN gateway. If you wish to download data from your NAS/FTP volume, you must move the data to your server then out through the VPN to the remote location.

For security reasons, only servers located inside the datacenter are allowed access to the servers providing services (DNS, Update, NAS, Lockbox).

What vendor makes the SSL VPN and how does it work?

Our SSL VPN gateway is a security product from Array Networks.  The gateway itself runs radius to update users and passwords from our Customer Portal. If you wish to add users and give them SSL VPN access, create a new user inside the customer portal and enable SSL VPN permissions.

 

What is SoftLayer VPN?

SoftLayer’s VPN access is designed to allow users to remotely manage all servers securely over SoftLayer’s private network.  A VPN connection from your location to the private network allows for unlimited file transfers, out-of-band management and server rescue through an encrypted VPN tunnel.  With VPN access, you can:

  • Establish a VPN connection to the private network via SSL, PPTP or IPSEC
  • Access your server via its private 10.x.x.x IP address via SSH or RDP
  • Connect to your server’s IPMI IP address for additional server management or rescue needs.

 

 

What is the difference between SSL and PPTP VPN?

SSL VPN allows a user to create a secure tunnel from the remote desktop to SoftLayer's Private Network. It is compatible with a variety of operating systems.

PPTP VPN allows the same secure tunnel but connects using specialized client software on a user's desktop or dedicated device. PPTP VPN is a great solution for users unable to utilize an SSL connection.

Does the SSL VPN also perform PPTP, IPSEC or other VPN protocols?

Currently the SSL VPN gateway uses a browser-based SSL VPN plugin or a proprietary client for creating connections. We will continue to bring more VPN connectivity options to the private network. The SSL VPN was selected for ease of use and compatibility.

When I connect to the PPTP VPN, it states "Error 691: Access was denied because the username and/or password is invalid." How do I fix this problem?

All users have the ability to connect to the PPTP VPN, but must have permission to log in through the Customer Portal.  PPTP VPN permissions are easily verified and updated quickly.  Refer to Activate or Deactivate PPTP VPN Access for more information.

Why am I unable to add additional users for PPTP VPN?

PPTP VPN is available on all accounts, but is initially configured to enable access for one user at a time. To request an account to be enabled for unlimited PPTP at no additional charge, please create a ticket with the following information, along with any additional details that may be desired:

  • Topic: PPTP VPN Request
  • Text: I currently have PPTP limited to one user at a time. Please enable unlimited PPTP VPN access for my account.

A Support agent will update the account to enable unlimited PPTP access, which is available at no additional charge. The ticket will be updated should any additional information be required.