Re: [CentOS] VPN suggestions centos 6, 7

2016-04-19 Thread david
At 08:57 AM 4/19/2016, you wrote: On Tue, 19 Apr 2016, david wrote: At 09:09 AM 4/18/2016, you wrote: On Mon, 18 Apr 2016, david wrote: > FOLLOWUP & REPORT > > I had lots of suggestions, and the most persuasive was to try OpenVPN. I > already had a CA working, so issuing certificates was

Re: [CentOS] VPN suggestions centos 6, 7

2016-04-19 Thread Paul Heinlein
On Tue, 19 Apr 2016, david wrote: At 09:09 AM 4/18/2016, you wrote: On Mon, 18 Apr 2016, david wrote: > FOLLOWUP & REPORT > > I had lots of suggestions, and the most persuasive was to try OpenVPN. I > already had a CA working, so issuing certificates was easy. The HOW-TO > guides were

Re: [CentOS] VPN suggestions centos 6, 7

2016-04-19 Thread david
At 09:09 AM 4/18/2016, you wrote: On Mon, 18 Apr 2016, david wrote: FOLLOWUP & REPORT I had lots of suggestions, and the most persuasive was to try OpenVPN. I already had a CA working, so issuing certificates was easy. The HOW-TO guides were less helpful than I could hope, but comparin

Re: [CentOS] VPN suggestions centos 6, 7

2016-04-18 Thread Paul Heinlein
On Mon, 18 Apr 2016, david wrote: FOLLOWUP & REPORT I had lots of suggestions, and the most persuasive was to try OpenVPN. I already had a CA working, so issuing certificates was easy. The HOW-TO guides were less helpful than I could hope, but comparing several of them, applying common sen

Re: [CentOS] VPN suggestions centos 6, 7

2016-04-18 Thread david
Folks I would like to have my windows 7 laptop communicate with my home server via a VPN, in such a way that it appears to be "inside" my home network. It should not only let me appear to be at home for any external query, but also let me access my computers inside my home. I already ha

Re: [CentOS] VPN suggestions centos 6, 7

2016-04-05 Thread Nux!
Have a look at Openconnect Server (ocserv), it's a free implementation of Cisco AnyConnect. It's the easiest VPN I ever had to setup and it's compatible with most Cisco AnyConnect clients and of course OpenConnect clients (such as NetworkManager-openconnect). http://www.infradead.org/ocserv/

Re: [CentOS] VPN suggestions centos 6, 7

2016-04-05 Thread Lamar Owen
On 04/05/2016 12:30 PM, Gordon Messmer wrote: IPSec is typically encapsulated on UDP port 4500, due to the ubiquity of NAT. OpenVPN doesn't really have an advantage, there. IPSec and OpenVPN (and the others) each have their use cases. I have had experience with IPSec (via SmoothWall's SmoothTu

Re: [CentOS] VPN suggestions centos 6, 7

2016-04-05 Thread Eero Volotinen
Yes, openvpn works on any single udp or tcp port. On many hotels only http, https and dns allowed. So you just can't use ipsec, but openvpn works as it's usually configured to listen https port. -- Eero 2016-04-05 19:30 GMT+03:00 Gordon Messmer : > On 04/05/2016 12:07 AM, Eero Volotinen wrote:

Re: [CentOS] VPN suggestions centos 6, 7

2016-04-05 Thread Gordon Messmer
On 04/05/2016 08:52 AM, Dennis Jacobfeuerborn wrote: For host-to-site setups I prefer OpenVPN since explaining to endusers how to set up an ipsec connection is neigh impossible So, send them a powershell script: Add-VpnConnection -Name "My VPN" -ServerAddress "vpn.example.com" -Authentication

Re: [CentOS] VPN suggestions centos 6, 7

2016-04-05 Thread Gordon Messmer
On 04/05/2016 12:07 AM, Eero Volotinen wrote: IPSec is not recommended solution nowdays. OpenVPN runs top of single udp or tcp port, so it usually works on strictly firewalled places like in hotels and so on. IPSec is typically encapsulated on UDP port 4500, due to the ubiquity of NAT. OpenVP

Re: [CentOS] VPN suggestions centos 6, 7

2016-04-05 Thread Dennis Jacobfeuerborn
How is IPSec "not recommended solution nowdays"? I tend to use IPSec for site-to-site connections i.e. the ones that run 24/7 and only require two experienced people to set up (the admins at both endpoints). For host-to-site setups I prefer OpenVPN since explaining to endusers how to set up an ips

Re: [CentOS] VPN suggestions centos 6, 7

2016-04-05 Thread Eero Volotinen
Well. IPSec might work with site-to-site connections, but usually roadwarrior mode users experience (a lot of) problems. They might be related to hotels that only allow https, http and dns protocols or broken nat implementations and so on. -- Eero 2016-04-05 18:52 GMT+03:00 Dennis Jacobfeuerbo

Re: [CentOS] VPN suggestions centos 6, 7

2016-04-05 Thread Leon Fauster
Am 05.04.2016 um 12:46 schrieb Francis Mendoza : > OpenVPN is the best opensource VPN for me it can connect to any connection > such as airport, hotel, restaurant, resorts, malls it never let me down. > And configuration is easy on those who have idea on what they want to > achieve. "easy" is qual

Re: [CentOS] VPN suggestions centos 6, 7

2016-04-05 Thread Francis Mendoza
OpenVPN is the best opensource VPN for me it can connect to any connection such as airport, hotel, restaurant, resorts, malls it never let me down. And configuration is easy on those who have idea on what they want to achieve. On Tuesday, 5 April 2016, Eero Volotinen wrote: > IPSec is not recomm

Re: [CentOS] VPN suggestions centos 6, 7

2016-04-05 Thread Eero Volotinen
IPSec is not recommended solution nowdays. OpenVPN runs top of single udp or tcp port, so it usually works on strictly firewalled places like in hotels and so on. -- Eero 2016-04-04 23:18 GMT+03:00 Gordon Messmer : > On 04/04/2016 10:57 AM, david wrote: > >> I have seen discussions of OpenVPN, O

Re: [CentOS] VPN suggestions centos 6, 7

2016-04-04 Thread Waleed Harbi
SoftEther VPN all-in-one solution and cross platform. On Monday, April 4, 2016, Gordon Messmer wrote: > On 04/04/2016 12:11 PM, Jussi Hirvi wrote: > >> This made me google around a little, and I found some good info here. >> They, too, kind of recommend openvpn. >> >> http://www.howtogeek.com/21

Re: [CentOS] VPN suggestions centos 6, 7

2016-04-04 Thread Gordon Messmer
On 04/04/2016 12:11 PM, Jussi Hirvi wrote: This made me google around a little, and I found some good info here. They, too, kind of recommend openvpn. http://www.howtogeek.com/211329/which-is-the-best-vpn-protocol-pptp-vs.-openvpn-vs.-l2tpipsec-vs.-sstp/ This is not good information. In brie

Re: [CentOS] VPN suggestions centos 6, 7

2016-04-04 Thread Alexander Dalloz
Am 04.04.2016 um 19:57 schrieb david: Folks I would like to have my windows 7 laptop communicate with my home server via a VPN, in such a way that it appears to be "inside" my home network. It should not only let me appear to be at home for any external query, but also let me access my computer

Re: [CentOS] VPN suggestions centos 6, 7

2016-04-04 Thread Gordon Messmer
On 04/04/2016 10:57 AM, david wrote: I have seen discussions of OpenVPN, OpenSwan, LibreVPN, StrongSwan (and probably others I haven't noted). I'd be interested in hearing from anyone who wishes to comment about which to use, with the following requirements: I recommend l2tp/ipsec. It's sup

Re: [CentOS] VPN suggestions centos 6, 7

2016-04-04 Thread Paul Heinlein
On Mon, 4 Apr 2016, david wrote: I have seen discussions of OpenVPN, OpenSwan, LibreVPN, StrongSwan (and probably others I haven't noted). I'd be interested in hearing from anyone who wishes to comment about which to use, with the following requirements: 1) As noted, it should be secure (a

Re: [CentOS] VPN suggestions centos 6, 7

2016-04-04 Thread Jussi Hirvi
On 4.4.2016 22.01, Eero Volotinen wrote: And openvpn. Avoid ipsec as it's too complex and pptp is unsecure. This made me google around a little, and I found some good info here. They, too, kind of recommend openvpn. http://www.howtogeek.com/211329/which-is-the-best-vpn-protocol-pptp-vs.-open

Re: [CentOS] VPN suggestions centos 6, 7

2016-04-04 Thread Jussi Hirvi
My partner has been using Openvpn extensively. It looks very reasonable and has been quite trustworthy. It is configured via commandline. The server seems to work on Windows, too ("Vista and later"). There are good tutorials for CentOs, for example https://www.digitalocean.com/community/tutor

Re: [CentOS] VPN suggestions centos 6, 7

2016-04-04 Thread Eero Volotinen
And openvpn. Avoid ipsec as it's too complex and pptp is unsecure. Eero 4.4.2016 9.55 ip. "Richard Zimmerman" kirjoitti: > SoftEther VPN > > Once setup, it just works > > Regards, > > Richard > > > --- > Richard Zimmerman > Systems / Network Administrator > River Bend Hose Specialty, Inc. >

Re: [CentOS] VPN suggestions centos 6, 7

2016-04-04 Thread Richard Zimmerman
SoftEther VPN Once setup, it just works Regards, Richard --- Richard Zimmerman Systems / Network Administrator River Bend Hose Specialty, Inc. S Main Street South Bend, IN 46601-3337 (574) 233-1133 (574) 280-7284 Fax -Original Message- From: centos-boun...@centos.org [mailt