internetvpn [Virtual Private Network, VPN] APN

Further Information

>Hmmm, not sure I am understanding you correctly there, but I will hazard a >guess, with 3G/GPRS your client PCs are using the 3G/GPRS modem to >connect to the Internet, so they wouldn't be dialing/calling up your RAS >server, they would be calling up Vodacom & connecting via Vodacom's >network to the Internet...

Correct - they would be calling up Vodacom and connecting via Vodacom's network to the Internet and then over the Internet to our server. They don't dial our server directly.

>The client PCs would however be able to use VPN via the Internet to get to >your VPN server...

Correct - they would call Vodacom's network (I understand you can chose Vodacom's VPN option over their open option for better performance) and then create a VPN connection between themselves and a private APN
 
Vortext, does your VPN client only allow either access to the VPN, or to the open Internet. My Cisco VPN client software, which is running as I am busy typing this, allows access at the same time to my company's network and to the open internet. I do not know a lot about VPN, but I suspect it simply picks the right channel (connection) based on the IP address the connection is going too or something like that. Note, I am not using GPRS/3G - yet. But I cannot see how the way I am connecting to the internet itself would make a difference.
 
Only VPN

Thanks for the info GKM and ic - much appreciated.

GKM, your thinking is probably correct, my worry was that as 3G has said in another posting to use a VPN you should call 082 155 and ask them to switch you from:

"'internetvpn' APN, from your current 'internet' APN"
http://www.mybroadband.co.za/vb/showthread.php?p=171601

So it was more about: Can one switch from APN to APN depending on whether you want to do a VPN session or connect to the open internet? In our case if the user uses Application A it connects via internetvpn and if the user uses Application B it connects via 'internet' APN.

I'm going to get a 3G card to test anyway (before we buy 50 of them!).
 
Like IC, I also understood from that post that the vpn APN was just to change your routing to get less hassles with stuff like NAT. I cannot imagine that it would prevent you from using the normal internet, as that would make the connection fairly useless in my opinion.
 
Also, if you have an always on connection like 3G, you will probably only want to establish the VPN tunnel once per day or week or whatever, rather than 100+ times per day, if possible. You would need to test, but I suspect it would use less bandwidth not to create and destroy the VPN tunnel so often. And less overhead on your RADIUS server etc.
 
vortext, your pc's can connect once and stay connected to the internet all day (via any connection method you choose be it dialup modem, ADSL, 3G etc). They can then open a VPN connection to your own server as required, use it and then close it again (if required) without disconnecting the internet connection.

The only requirement is that when connected to the internet, for the VPN to work you need a real live internet address. Unlike traditional ISPs, cell networks do not assign these automatically and you have to ask specifically. With Vodacom you have to enable the internetvpn APN. This is a one time configuration setting on their network and your PC configuration.

If your PCs are windows xp, the vpn client software is built in, so long as you have a compatible router/server on the other end.
 
asmith's post pretty much describes it.

There's no need to do anything complex. All you need is to be provisioned for the internetvpn APN. You can then set up a VPN connection to your corporate server and connect to the internet at the same time.

Not to sure the reason for wanting to switch bearers (have a few suspicions though!) but this gets you into custom client software. Not to sure if you want to go that way.
 
Asmith, the VPN software I use can traverse NAT, so my PC does not have an true internet address. My router has the internet address. However, I do not know if Windows XP VPN can traverse NAT.
 
I am using OpenVPN (www.openvpn.org) on a linux box (and a windows box for that matter), sitting on a dynamic IP at the end of an ADSL line (so I use dynamic DNS). I am on the normal APN, and it works like a charm running the OpenVPN client on Windows.

As someone else said. I can access normal internet and the VPN sites simultaneously, no need to connect and disconnect.

My only gripe is that the 3G card, albeit fast for downloads, only uploads at 64k. For my needs, which I guess may not always be normal, I need faster uploads and I send alot of files from my laptop to the office.

I have/am looking into VPN options with Vodacom for a client in a similar situation, i.e. multiple connections from various sites per day. My comments on this matter which were not sufficently addressed in my opinion, is that they want to charge the same rate (R2/meg) for internet traffic and direct VPN traffic. In my opinion, direct VPN traffic should be cheaper (especially if all local) cause the traffic would never leave Vodacom's network (i.e. no peering costs)

v3g, if you have a dedicated APN, can you limit port use on that APN? in other words only let the clients use one port, which would be the VPN port? Other thing holding things up at the moment is the cost of a static legal IP on the 3G network, allowing us to connect the clients to the server without using an actual dedicated APN.
 
Last edited:
Harley79 said:
I have/am looking into VPN options with Vodacom for a client in a similar situation, i.e. multiple connections from various sites per day. My comments on this matter which were not sufficently addressed in my opinion, is that they want to charge the same rate (R2/meg) for internet traffic and direct VPN traffic. In my opinion, direct VPN traffic should be cheaper (especially if all local) cause the traffic would never leave Vodacom's network (i.e. no peering costs)

v3g, if you have a dedicated APN, can you limit port use on that APN? in other words only let the clients use one port, which would be the VPN port? Other thing holding things up at the moment is the cost of a static legal IP on the 3G network, allowing us to connect the clients to the server without using an actual dedicated APN.
Click to expand...

I did escalate your concerns around the pricing. Will check up.

Not to sure if I understand the port question fully. Maybe mail me with a more detailed description.
 
Vortex - if i was in your situation, I would get my own APN provisioned on Vodacoms network (mycompanyapn.co.za or similar). that way you will get a secure connection back to your corporate network, and use your existing corporate link to access the internet when required. Much safer/securer this way, and much easier to configure on the access device... Keep it simple :D
 
Using 3g as a part of a VPN

I need some help, I want to find out if there is anyone out there who works for Vodacom or that can tell me about 3G. I have 10 Branches and need to connect them all over a VPN network but I want to use 3G. I need to know if that is possible.
 
Yes it is and I do it everyday. You need to have Vodacom switch your 3G account to the internetvpn APN.
 
moe said:
I need some help, I want to find out if there is anyone out there who works for Vodacom or that can tell me about 3G. I have 10 Branches and need to connect them all over a VPN network but I want to use 3G. I need to know if that is possible.
Click to expand...

moe, it is very feasible and there are actually corporate/SME products structured for these kind of environments.

Although the internetvpn APN will work, depending on your requirements, a dedicated APN might be a better option.

Won't you please PM me your contact details? The best bet would be for one of the Vodacom corporate sales guys to come and sit with you and draw up a proposal.
 
thanks for the help guys, but i do not have an existing 3g account, so I need to know also who to talk to about sorting out the contracts and most importantly findinng out the costs involved
 
Thanks alot vodacom3g I highly appreciate what you have done or are doing for me. If there's anything you need lemme know thanks again
 
Thanks everyone for all your help just to let you know Vodacon has been in touch with me and we have sorted out the situation and now we just need to implement the solution which vodacom has so gracefully offered us.
 
You must log in or register to reply here.
Back
Top
Sign up to the MyBroadband newsletter
X