[NTLUG:Discuss] OpenVPN

[Jay Urish]

Whenever you get tired of trying to make that work, I have a recommendation..


I gave up on linux firewalls a few years ago because the price and 
functionality of the hardware firewalls made it impossible to make money 
setting them up.

For less than 15 users I use the netgear FVS-318. For more than that I spec 
out the Netgear FVL-328. Both do box-to-box vpn as well as IPsec vpn for 
external users...





At 08:14 AM 10/31/2003 -0600, you wrote:
>severian at pobox.com wrote:
>>Howdy,
>>   I think I've given up on FreeSWAN.  Has anyone here tried OpenVPN?  It 
>> looks like the one I'll try next.  Any comments?  If I can't get it 
>> going this weekend, I may be looking to hire someone for a few hours who 
>> can help.  That's not close to a full time job, so I am not sure if that 
>> posting should go here or in the NTLUG jobs list.  But, I'll worry about 
>> that this weekend, if I need it.
>>Good day,
>>Ralph
>
>
>What problems are you having with FreeSWAN??  I'm about to tackle that 
>myself, but first I have to gen a new kernel and apply the patches that it 
>needs, so I'm still at the planning phase at this point.
>
>Been looking at FreeSWAN vs OpenVPN and OpenVPN looks to be a more user 
>friendly setup that runs in user space instead of OS space.  Plus, it 
>looks like the Windows side is easier to set up.
>
>Someone care to share personal experience with either one?
>
>My goals are (different right/left channels):
>   1) dev-to-net so we can let road-warrior developers in
>   2) user-to-net so we can let road-warrior users in
>   3) subnet-to-subnet so we can share with a sister company
>
>So security and isolation are parts of my goals.  FreeSWAN has multiple 
>channels in one config, and I'm not seeing that on OpenVPN.  Maybe I'm 
>missing a part.
>
>...Ken
>
>
>_______________________________________________
>https://ntlug.org/mailman/listinfo/discuss

Jay Urish       W5GM            Systems/Network Engineer
Unixwolf Enterprises    972.691.0125    972.965.6229

http://www.unixwolf.net         AIM:jayurish