[NTLUG:Discuss] OpenVPN

[Kenneth Loafman]

Will look into Netgear.  We already have a Linux firewall machine, so 
I'm wondering if I want to do away with that.  Don't know much about 
Netgear, except that their 4-port hubs were not compatible with a couple 
of laptop builtin NICs.

...Ken


Cameron, Thomas wrote:
> I'll pipe up, too.  I have been highly impressed with the NetGear VPN stuff (and NetGear in general).  
> 
> It is very intuitive and *cheap* compared to Cisco and even Linux when setup time is factored in.  I fought for quite a while with vtun and FreeS/WAN, and my time is valuable.
> 
> --
> Thomas Cameron, RHCE, CNE, MCSE, MCT
> Assistant Vice President
> Linux Design and Engineering
> Bank of America
> (972) 997-9641
> 
> The opinions expressed in this message are mine alone and do not necessarily reflect the opinions of my employer, Bank of America.
> 
> 
>>-----Original Message-----
>>From: jeremyb at univista.com [mailto:jeremyb at univista.com]
>>Sent: Friday, October 31, 2003 11:30 AM
>>To: discuss at ntlug.org
>>Subject: RE: [NTLUG:Discuss] OpenVPN
>>
>>
>>I'm with you on that, Jay.  From a business perspective, spending time
>>getting a full open source Linux VPN solution in place is just plain
>>wasteful unless you already know exactly what needs to be 
>>done.  If you want
>>to have a Linux VPN solution as a matter of principal or for 
>>an educational
>>experience then by all means do it.  If your time is equally 
>>valuable as
>>your capitol then buy hardware VPN devices wherever possible 
>>and mess with
>>VPN clients as needed.  Just my $.02 and I'm sure some of you 
>>will disagree.
>>
>>
>>-Jeremy
>>
>>
>>-----Original Message-----
>>From: Jay Urish [mailto:j at unixwolf.net] 
>>Sent: Friday, October 31, 2003 8:28 AM
>>To: NTLUG Discussion List
>>Subject: Re: [NTLUG:Discuss] OpenVPN
>>
>>Whenever you get tired of trying to make that work, I have a
>>recommendation..
>>
>>
>>I gave up on linux firewalls a few years ago because the price and 
>>functionality of the hardware firewalls made it impossible to 
>>make money 
>>setting them up.
>>
>>For less than 15 users I use the netgear FVS-318. For more 
>>than that I spec 
>>out the Netgear FVL-328. Both do box-to-box vpn as well as 
>>IPsec vpn for 
>>external users...
>>
>>
>>
>>
>>
>>At 08:14 AM 10/31/2003 -0600, you wrote:
>>
>>>severian at pobox.com wrote:
>>>
>>>>Howdy,
>>>>  I think I've given up on FreeSWAN.  Has anyone here 
>>>
>>tried OpenVPN?  It 
>>
>>>>looks like the one I'll try next.  Any comments?  If I 
>>>
>>can't get it 
>>
>>>>going this weekend, I may be looking to hire someone for a 
>>>
>>few hours who 
>>
>>>>can help.  That's not close to a full time job, so I am 
>>>
>>not sure if that 
>>
>>>>posting should go here or in the NTLUG jobs list.  But, 
>>>
>>I'll worry about 
>>
>>>>that this weekend, if I need it.
>>>>Good day,
>>>>Ralph
>>>
>>>
>>>What problems are you having with FreeSWAN??  I'm about to 
>>
>>tackle that 
>>
>>>myself, but first I have to gen a new kernel and apply the 
>>
>>patches that it 
>>
>>>needs, so I'm still at the planning phase at this point.
>>>
>>>Been looking at FreeSWAN vs OpenVPN and OpenVPN looks to be 
>>
>>a more user 
>>
>>>friendly setup that runs in user space instead of OS space.  
>>
>>Plus, it 
>>
>>>looks like the Windows side is easier to set up.
>>>
>>>Someone care to share personal experience with either one?
>>>
>>>My goals are (different right/left channels):
>>>  1) dev-to-net so we can let road-warrior developers in
>>>  2) user-to-net so we can let road-warrior users in
>>>  3) subnet-to-subnet so we can share with a sister company
>>>
>>>So security and isolation are parts of my goals.  FreeSWAN 
>>
>>has multiple 
>>
>>>channels in one config, and I'm not seeing that on OpenVPN.  
>>
>>Maybe I'm 
>>
>>>missing a part.
>>>
>>>...Ken
>>>
>>>
>>>_______________________________________________
>>>https://ntlug.org/mailman/listinfo/discuss
>>
>>Jay Urish       W5GM            Systems/Network Engineer
>>Unixwolf Enterprises    972.691.0125    972.965.6229
>>
>>http://www.unixwolf.net         AIM:jayurish 
>>
>>
>>
>>_______________________________________________
>>https://ntlug.org/mailman/listinfo/discuss
>>
>>_______________________________________________
>>https://ntlug.org/mailman/listinfo/discuss
>>
> 
> 
> _______________________________________________
> https://ntlug.org/mailman/listinfo/discuss