Re: Need advice about VPN

2006-01-19 Thread Rod.. Whitworth
On Thu, 19 Jan 2006 11:28:31 +, Stuart Henderson wrote: >On 2006/01/19 10:39, Simon Slaytor wrote: >> Stuart Henderson wrote: >> >On 2006/01/19 09:38, Simon Slaytor wrote: >> > >> >>When comparing the two vpn solutions for speed, subjectively the OpenVPN >> >>feels slightly faster >> > >> >If

Re: Need advice about VPN

2006-01-19 Thread NetNeanderthal
On 1/18/06, Hans-Joerg Hoexer <[EMAIL PROTECTED]> wrote: > On Wed, Jan 18, 2006 at 11:20:55AM +0100, Joachim Schipper wrote: > Forget about openvpn, there's no need to fiddle around with third > party stuff. OT: OpenVPN has its purposes, though this particular scenario shouldn't be one of them. On

Re: Need advice about VPN

2006-01-19 Thread Joachim Schipper
On Thu, Jan 19, 2006 at 11:28:31AM +, Stuart Henderson wrote: > On 2006/01/19 10:39, Simon Slaytor wrote: > > Stuart Henderson wrote: > > >On 2006/01/19 09:38, Simon Slaytor wrote: > > > > > >>When comparing the two vpn solutions for speed, subjectively the OpenVPN > > >>feels slightly faster

Re: Need advice about VPN

2006-01-19 Thread Stuart Henderson
On 2006/01/19 10:39, Simon Slaytor wrote: > Stuart Henderson wrote: > >On 2006/01/19 09:38, Simon Slaytor wrote: > > > >>When comparing the two vpn solutions for speed, subjectively the OpenVPN > >>feels slightly faster > > > >If you're using compression on OpenVPN but not on IPSEC, that would > >

Re: Need advice about VPN

2006-01-19 Thread Simon Slaytor
Stuart Henderson wrote: >On 2006/01/19 09:38, Simon Slaytor wrote: > > >>When comparing the two vpn solutions for speed, subjectively the OpenVPN >>feels slightly faster >> >> > >If you're using compression on OpenVPN but not on IPSEC, that would >probably explain the speed difference. > >

Re: Need advice about VPN

2006-01-19 Thread Stuart Henderson
On 2006/01/19 09:38, Simon Slaytor wrote: > When comparing the two vpn solutions for speed, subjectively the OpenVPN > feels slightly faster If you're using compression on OpenVPN but not on IPSEC, that would probably explain the speed difference.

Re: Need advice about VPN

2006-01-19 Thread Simon Slaytor
Going to go against the flow here and say go for OpenVPN. This recommendation is based on the following observations: It's easy to implement It's secure It's stable By using the tls-auth option the fact that your firewall is acting as a vpn endpoint becomes invisible to the 'net' It easily han

Re: Need advice about VPN

2006-01-18 Thread Joachim Schipper
On Wed, Jan 18, 2006 at 11:50:38AM +0100, Hans-Joerg Hoexer wrote: > On Wed, Jan 18, 2006 at 11:20:55AM +0100, Joachim Schipper wrote: > > > > Each will work; OpenVPN is slightly easier to set up, but IPsec will > > likely offer better performance. > > Forget about openvpn, there's no need to fid

Re: Need advice about VPN

2006-01-18 Thread Hans-Joerg Hoexer
On Wed, Jan 18, 2006 at 11:20:55AM +0100, Joachim Schipper wrote: > > Each will work; OpenVPN is slightly easier to set up, but IPsec will > likely offer better performance. Forget about openvpn, there's no need to fiddle around with third party stuff. Just make sure to take a look at vpn(8). I

Re: Need advice about VPN

2006-01-18 Thread Joachim Schipper
On Wed, Jan 18, 2006 at 04:14:34PM +1100, Zoong PHAM wrote: > I need some advices about VPN. > > We have 2 offices, each is connected via ADSL to the Internet with a > dynamic IP. > One office uses OpenBSD as the firewall and the other uses the firewall > functions of the ADSL modem. > That can be

Need advice about VPN

2006-01-17 Thread Zoong PHAM
I need some advices about VPN. We have 2 offices, each is connected via ADSL to the Internet with a dynamic IP. One office uses OpenBSD as the firewall and the other uses the firewall functions of the ADSL modem. That can be changed so that both offices use OpenBSD for firewalls. We have full acce