On Mon, 18 Mar 2013, Morgan Blackthorne wrote:
We have around 40 or so users (looking to expand to more but not above 100 any time soon). Right now we've got a Netgear UCS device which we got because we wanted something with integrated IPSec VPN. Except that Netgear's implementation isn't exactly standard and you can't use it with the native OSX/Windows clients, you have to use Netgear's client (or the company they bought it from), which bypasses the original goal of being able to set it up natively.At this point, I'd be fine with something that ran OpenVPN, which is what we have running on a Linux box. Being able to nail the connections up onto the router directly would be preferable and one more back office machine that I can shut down. Barring that, I'd prefer something that works natively with OSX and Windows and works with Ubuntu in some fashion (not concerned about our Ubuntu users needing to install something, as long as the client is reliable). We have an Apple wireless network setup so it doesn't need to do anything like that. Support for two+ WAN links is preferable in case we ever expand again or add a failover link back into the picture (one thing the Netgear line has spoiled us with). Solid DHCP is a must as well, something that has not been the case with the Netgear (sigh). Only needs to have one LAN link as we have an array of switches. Not in any urgent rush to pick this up, I just figured I'd ask around and see if folks had recommendations, and if it could simplify my workflow and stabilize things a bit, then I can pitch it upwards. The last Netgear was picked by the former director of engineering and really was no better than what we had before, and actually less stable. However, he's moved on so I doubt I'll get any static about replacing it at this point.
With as few users as you have, unless you have a lot of remote work on a high speed connection, I think you should take a look at running openwrt on a linksys access point (such as teh 3800 or 4500)
It will give you a full Linux system, with all the tested servers for DHCP openvpn etc.
If nothing else, it's a cheap thing to try and you can easily measure if you are running out of CPU to support your users.
David Lang
_______________________________________________ Discuss mailing list [email protected] https://lists.lopsa.org/cgi-bin/mailman/listinfo/discuss This list provided by the League of Professional System Administrators http://lopsa.org/
_______________________________________________ Discuss mailing list [email protected] https://lists.lopsa.org/cgi-bin/mailman/listinfo/discuss This list provided by the League of Professional System Administrators http://lopsa.org/
