VPN - is it so simple??

lifesaver

New Member
Joined
May 24, 2004
Messages
6
Reaction score
0
Location
.
I'm scared to fork out the monthly costs for a VPN solution cause you never know when the provider closes down, so i found this hardware solution on the net, anyone knowing about this product or smethign similar please advise.

I'm willing to fork out the R6000 and live with 3gig cap but all this technical details makes my head hurt

----------------------------------------

Using a Snapgear 530 or 550 router you can easily create a VPN using dynamic IP's by making use of www.tzo.com DNS service.

The DNS facilities are already built into the router and everything gets basically done for you.

It updates everything for you and aparently it works very nice

Local supplier is www.galix.com and although pricey, you can get it at half the price in the states.
-------------------------
Specifications

VPN Most VPN Routers offer the standard IPSec VPN technology,
and SnapGear is no exception with full standards compliance. But did
you know that only SnapGear products also fully support PPTP – the
standard VPN technology available in Microsoft Windows! You don’t
need to spend extra money on 3r d-party software for all of your
computers – just use the standard Windows VPN client.



VPN - IPsec
VPNC-certified interoperability
Peer-to-peer (initiate and terminate)
ESP and AH payloads
Supports aggressive mode
Dead peer detection
Compression (deflate / gzip type algorithm)
DES 56-bit, 3DES 168-bit, AES 256-bit encryption
Hashes HMAC - MD5 and SHA-1 authentication
IKE/ISAKMP Diffie-Hellman key exchange
Diffie-Hellman Groups (1,2,5) and Oakley Groups (14,15,16) to 4096-bits
X.509 certificates DER, PEM formats
Pre-shared secrets
Dynamic IP address end-points
Dynamic DNS IPsec support
Authentication up to 2048-bit for RSA key signatures
Multiple subnets
NAT traversal
Up to 250 IPsec tunnels
Up to 3 Mbps IPsec 3DES throughput
Up to 8 Mbps IPsec AES 128-bit throughput
Up to 7 Mbps IPsec AES 192-bit throughput
Up to 6 Mbps IPsec AES 256-bit throughput
VPN - L2TP
IPsec config Wizard
L2TP over IPsec
Autonomous L2TP
Client: NAT, default route via L2TP
Server: specify client IP address range
VPN - PPTP v2 client and server
Pass-through mode also
MPPE 40 to 128-bit RC4 encryption
PAP/CHAP/MS CHAPv2 authentication
L2TP & GRE tunneling extensions
Up to 10 PPTP client tunnels
Up to 20 PPTP server tunnels
Up to 5 Mbps RC4 throughput
ICSA-certified dynamic firewall Routing
DHCP - client and server
PPPoE (for ADSL support)
NAT - static and dynamic
NAPT/PAT - port forwarding
Connection sharing
Anti-intrusion Logging (local and remote)
Traffic shaping (QoS)
IP aliases
NTP client and server
Web management
CLI (Telnet) management
Initial setup via either static IP address or dynamic IP address (DHCP client)
Bridging (802.1d)
Administration user accounts
RADIUS / TACACS+
DNS enhanced caching, masquerading, proxy, multiple DNS server proxying
RAS (dial-in)
Fail-over / high availability
Dial on demand
RIP, RIPv2
35 Mbps routed throughput
30 Mbps PPPoE throughput
35 Mbps firewall performance
Status LEDs
WAN port - 1x10/100BaseT
LAN port - 1x10/100BaseT
------------------------------------
Thx in advance
 
Or you could just do it for free with OpenVPN...

- Colin Alston
colin at alston dot za dot org

"Getting traffic shaping right is easy and can be summed up in one word: Dont." -- George Barnett
 
Sorry Karnaugh but what if it has to run on 2 NT4 servers, it is very sensitive data and i don't want to take any chances, also the software that we use is only compatible with NT4, dunno why, but we will leave it at that, I have read the posts regarding OpenVPN and would love to implement it.

Thx anyway
 
Hmmm

What stops you from using OpenVPN? Its compatible with nearly every OS (except maybe Plan9)

You can connect win2k, win 98, linux, solaris, even Mac OS with ethernet bridging over OpenVPN and I dont see any problem with 2048bit key encryption.

It doesnt scale with Window's built in VPN software, or any other VPN software. But why does it need to if it has its own software ported to nearly any OS?

- Colin Alston
colin at alston dot za dot org

"Getting traffic shaping right is easy and can be summed up in one word: Dont." -- George Barnett
 
Hi there ...

has anyone had problems with OPENSWAN lately all of a sudden mine won't connect ... I have a site to site vpn...

Regards
Gareth Slaven
 
Top
Sign up to the MyBroadband newsletter
X