On Mon, Mar 18, 2013 at 1:19 PM, Edward Ned Harvey (lopser) <
[email protected]> wrote:

> My personal favorite is OpenVPN, specifically, where the server is running
> on pfsense.  Pfsense gives you the ability to very easily, in their gui,
> create the root CA, create the certs for each user, and deploy openvpn cert
> packages on a per-user basis.


100% Agree.

I currently have pfSense installed on a Soekris net5501[1], supporting an
office of 20-30 people, and we've never even come close to resource
contention on the router, even with multiple active mobile user and L2L VPN
connections. I chose the net5501 due to needing four network interfaces on
the router. If you can deal with two or three interfaces, PCEngines has
some very nice pfSense-compatible boards that can be purchased with case
and power supply for ~150 USD.

I have OpenVPN configured in pfSense, which our users use to connect
remotely from their laptops. Additionally, I have IPSec enabled, which iOS
and Android devices use.

If you haven't used pfSense before, I'd recommend you give it a good
once-over. It's a very nice product, and in case this is an issue for you
or your company, commercial support is available[3].

- Erik


[1] http://soekris.com/products/net5501.html
[2] http://www.pcengines.ch/
[3] https://portal.pfsense.org/index.php/support-subscription
_______________________________________________
Discuss mailing list
[email protected]
https://lists.lopsa.org/cgi-bin/mailman/listinfo/discuss
This list provided by the League of Professional System Administrators
 http://lopsa.org/

Reply via email to