[NTLUG:Discuss] OpenVPN

jeremyb@univista.com jeremyb at univista.com
Fri Oct 31 11:29:34 CST 2003


I'm with you on that, Jay.  From a business perspective, spending time
getting a full open source Linux VPN solution in place is just plain
wasteful unless you already know exactly what needs to be done.  If you want
to have a Linux VPN solution as a matter of principal or for an educational
experience then by all means do it.  If your time is equally valuable as
your capitol then buy hardware VPN devices wherever possible and mess with
VPN clients as needed.  Just my $.02 and I'm sure some of you will disagree.


-Jeremy


-----Original Message-----
From: Jay Urish [mailto:j at unixwolf.net] 
Sent: Friday, October 31, 2003 8:28 AM
To: NTLUG Discussion List
Subject: Re: [NTLUG:Discuss] OpenVPN

Whenever you get tired of trying to make that work, I have a
recommendation..


I gave up on linux firewalls a few years ago because the price and 
functionality of the hardware firewalls made it impossible to make money 
setting them up.

For less than 15 users I use the netgear FVS-318. For more than that I spec 
out the Netgear FVL-328. Both do box-to-box vpn as well as IPsec vpn for 
external users...





At 08:14 AM 10/31/2003 -0600, you wrote:
>severian at pobox.com wrote:
>>Howdy,
>>   I think I've given up on FreeSWAN.  Has anyone here tried OpenVPN?  It 
>> looks like the one I'll try next.  Any comments?  If I can't get it 
>> going this weekend, I may be looking to hire someone for a few hours who 
>> can help.  That's not close to a full time job, so I am not sure if that 
>> posting should go here or in the NTLUG jobs list.  But, I'll worry about 
>> that this weekend, if I need it.
>>Good day,
>>Ralph
>
>
>What problems are you having with FreeSWAN??  I'm about to tackle that 
>myself, but first I have to gen a new kernel and apply the patches that it 
>needs, so I'm still at the planning phase at this point.
>
>Been looking at FreeSWAN vs OpenVPN and OpenVPN looks to be a more user 
>friendly setup that runs in user space instead of OS space.  Plus, it 
>looks like the Windows side is easier to set up.
>
>Someone care to share personal experience with either one?
>
>My goals are (different right/left channels):
>   1) dev-to-net so we can let road-warrior developers in
>   2) user-to-net so we can let road-warrior users in
>   3) subnet-to-subnet so we can share with a sister company
>
>So security and isolation are parts of my goals.  FreeSWAN has multiple 
>channels in one config, and I'm not seeing that on OpenVPN.  Maybe I'm 
>missing a part.
>
>...Ken
>
>
>_______________________________________________
>https://ntlug.org/mailman/listinfo/discuss

Jay Urish       W5GM            Systems/Network Engineer
Unixwolf Enterprises    972.691.0125    972.965.6229

http://www.unixwolf.net         AIM:jayurish 



_______________________________________________
https://ntlug.org/mailman/listinfo/discuss



More information about the Discuss mailing list