[NTLUG:Discuss] OpenVPN

[Cameron, Thomas]

I'll pipe up, too.  I have been highly impressed with the NetGear VPN stuff (and NetGear in general).  

It is very intuitive and *cheap* compared to Cisco and even Linux when setup time is factored in.  I fought for quite a while with vtun and FreeS/WAN, and my time is valuable.

--
Thomas Cameron, RHCE, CNE, MCSE, MCT
Assistant Vice President
Linux Design and Engineering
Bank of America
(972) 997-9641

The opinions expressed in this message are mine alone and do not necessarily reflect the opinions of my employer, Bank of America.

> -----Original Message-----
> From: jeremyb at univista.com [mailto:jeremyb at univista.com]
> Sent: Friday, October 31, 2003 11:30 AM
> To: discuss at ntlug.org
> Subject: RE: [NTLUG:Discuss] OpenVPN
> 
> 
> I'm with you on that, Jay.  From a business perspective, spending time
> getting a full open source Linux VPN solution in place is just plain
> wasteful unless you already know exactly what needs to be 
> done.  If you want
> to have a Linux VPN solution as a matter of principal or for 
> an educational
> experience then by all means do it.  If your time is equally 
> valuable as
> your capitol then buy hardware VPN devices wherever possible 
> and mess with
> VPN clients as needed.  Just my $.02 and I'm sure some of you 
> will disagree.
> 
> 
> -Jeremy
> 
> 
> -----Original Message-----
> From: Jay Urish [mailto:j at unixwolf.net] 
> Sent: Friday, October 31, 2003 8:28 AM
> To: NTLUG Discussion List
> Subject: Re: [NTLUG:Discuss] OpenVPN
> 
> Whenever you get tired of trying to make that work, I have a
> recommendation..
> 
> 
> I gave up on linux firewalls a few years ago because the price and 
> functionality of the hardware firewalls made it impossible to 
> make money 
> setting them up.
> 
> For less than 15 users I use the netgear FVS-318. For more 
> than that I spec 
> out the Netgear FVL-328. Both do box-to-box vpn as well as 
> IPsec vpn for 
> external users...
> 
> 
> 
> 
> 
> At 08:14 AM 10/31/2003 -0600, you wrote:
> >severian at pobox.com wrote:
> >>Howdy,
> >>   I think I've given up on FreeSWAN.  Has anyone here 
> tried OpenVPN?  It 
> >> looks like the one I'll try next.  Any comments?  If I 
> can't get it 
> >> going this weekend, I may be looking to hire someone for a 
> few hours who 
> >> can help.  That's not close to a full time job, so I am 
> not sure if that 
> >> posting should go here or in the NTLUG jobs list.  But, 
> I'll worry about 
> >> that this weekend, if I need it.
> >>Good day,
> >>Ralph
> >
> >
> >What problems are you having with FreeSWAN??  I'm about to 
> tackle that 
> >myself, but first I have to gen a new kernel and apply the 
> patches that it 
> >needs, so I'm still at the planning phase at this point.
> >
> >Been looking at FreeSWAN vs OpenVPN and OpenVPN looks to be 
> a more user 
> >friendly setup that runs in user space instead of OS space.  
> Plus, it 
> >looks like the Windows side is easier to set up.
> >
> >Someone care to share personal experience with either one?
> >
> >My goals are (different right/left channels):
> >   1) dev-to-net so we can let road-warrior developers in
> >   2) user-to-net so we can let road-warrior users in
> >   3) subnet-to-subnet so we can share with a sister company
> >
> >So security and isolation are parts of my goals.  FreeSWAN 
> has multiple 
> >channels in one config, and I'm not seeing that on OpenVPN.  
> Maybe I'm 
> >missing a part.
> >
> >...Ken
> >
> >
> >_______________________________________________
> >https://ntlug.org/mailman/listinfo/discuss
> 
> Jay Urish       W5GM            Systems/Network Engineer
> Unixwolf Enterprises    972.691.0125    972.965.6229
> 
> http://www.unixwolf.net         AIM:jayurish 
> 
> 
> 
> _______________________________________________
> https://ntlug.org/mailman/listinfo/discuss
> 
> _______________________________________________
> https://ntlug.org/mailman/listinfo/discuss
>