Re: Need advice about VPN

2006-01-19 Thread Rod.. Whitworth
On Thu, 19 Jan 2006 11:28:31 +, Stuart Henderson wrote: >On 2006/01/19 10:39, Simon Slaytor wrote: >> Stuart Henderson wrote: >> >On 2006/01/19 09:38, Simon Slaytor wrote: >> > >> >>When comparing the two vpn solutions for speed, subjectively the OpenVPN >> >>feels slightly faster >> > >> >If

Re: Need advice about VPN

2006-01-19 Thread NetNeanderthal
On 1/18/06, Hans-Joerg Hoexer <[EMAIL PROTECTED]> wrote: > On Wed, Jan 18, 2006 at 11:20:55AM +0100, Joachim Schipper wrote: > Forget about openvpn, there's no need to fiddle around with third > party stuff. OT: OpenVPN has its purposes, though this particular scenario shouldn't be one of them. On

Re: Need advice about VPN

2006-01-19 Thread Joachim Schipper
On Thu, Jan 19, 2006 at 11:28:31AM +, Stuart Henderson wrote: > On 2006/01/19 10:39, Simon Slaytor wrote: > > Stuart Henderson wrote: > > >On 2006/01/19 09:38, Simon Slaytor wrote: > > > > > >>When comparing the two vpn solutions for speed, subjectively the OpenVPN > > >>feels slightly faster

Re: Need advice about VPN

2006-01-19 Thread Stuart Henderson
On 2006/01/19 10:39, Simon Slaytor wrote: > Stuart Henderson wrote: > >On 2006/01/19 09:38, Simon Slaytor wrote: > > > >>When comparing the two vpn solutions for speed, subjectively the OpenVPN > >>feels slightly faster > > > >If you're using compression on OpenVPN but not on IPSEC, that would > >

Re: Need advice about VPN

2006-01-19 Thread Simon Slaytor
Stuart Henderson wrote: >On 2006/01/19 09:38, Simon Slaytor wrote: > > >>When comparing the two vpn solutions for speed, subjectively the OpenVPN >>feels slightly faster >> >> > >If you're using compression on OpenVPN but not on IPSEC, that would >probably explain the speed difference. > >

Re: Need advice about VPN

2006-01-19 Thread Stuart Henderson
On 2006/01/19 09:38, Simon Slaytor wrote: > When comparing the two vpn solutions for speed, subjectively the OpenVPN > feels slightly faster If you're using compression on OpenVPN but not on IPSEC, that would probably explain the speed difference.

Re: Need advice about VPN

2006-01-19 Thread Simon Slaytor
Going to go against the flow here and say go for OpenVPN. This recommendation is based on the following observations: It's easy to implement It's secure It's stable By using the tls-auth option the fact that your firewall is acting as a vpn endpoint becomes invisible to the 'net' It easily han

Re: Need advice about VPN

2006-01-18 Thread Joachim Schipper
On Wed, Jan 18, 2006 at 11:50:38AM +0100, Hans-Joerg Hoexer wrote: > On Wed, Jan 18, 2006 at 11:20:55AM +0100, Joachim Schipper wrote: > > > > Each will work; OpenVPN is slightly easier to set up, but IPsec will > > likely offer better performance. > > Forget about openvpn, there's no need to fid

Re: Need advice about VPN

2006-01-18 Thread Hans-Joerg Hoexer
On Wed, Jan 18, 2006 at 11:20:55AM +0100, Joachim Schipper wrote: > > Each will work; OpenVPN is slightly easier to set up, but IPsec will > likely offer better performance. Forget about openvpn, there's no need to fiddle around with third party stuff. Just make sure to take a look at vpn(8). I

Re: Need advice about VPN

2006-01-18 Thread Joachim Schipper
On Wed, Jan 18, 2006 at 04:14:34PM +1100, Zoong PHAM wrote: > I need some advices about VPN. > > We have 2 offices, each is connected via ADSL to the Internet with a > dynamic IP. > One office uses OpenBSD as the firewall and the other uses the firewall > functions of the ADSL modem. > That can be