On Thu, Jan 3, 2013 at 8:31 AM, Mohan Sundaram <[email protected]> wrote: > Salient advantages: > a) Can use key based logins to secure site-site VPNs. > b) Works on UDP and is completely NAT friendly for negotiated port > applications. No ALGs needed. > c) Works well for both Road Warrior and Site-Site VPNs. > d) Well supported on various OSes. > > Way better than IPSec for ease of installation, support/maintenance > and supporting variety of client OSes.
I agree. But IPsec has its place. Long ago a Chennai based company in the usual arrogance I see very often in India without any technical knowledge was telling me that without certificates and VPN you cannot do remote support. And he did not even invite me inside to discuss an OEM deal. Even for a product negotiation of the tune of 20k we talk inside right? This is a company in West Mambalam. And the other Indian attitude he showed was that he was not interested in dealing with players like me with an international face. People in India refuse to give credit to other fellow Indians who are globally competitive; in other words refusal to accept his defeat in front of someone superior. Anyway the point was that technically he was wrong on two accounts: 1) A certificate is not needed for VPN unless you use OpenVPN 2) He could have solved his problem using ssh port forwarding I could have given him a much more scalable and stable solution using IPsec. But as I often see in India, people refuse to acknowledge the greatness of somebody else. Even in ILUGC In my tenure since 2006 August I am yet to find someone who did not call my projects "a mere effort". I thought I had found someone who was humble but I was sadly mistaken. I still have hope. Without humility nothing great can be achieved. Basic thumb rule. -Girish -- Gayatri Hitech http://gayatri-hitech.com _______________________________________________ ILUGC Mailing List: http://www.ae.iitm.ac.in/mailman/listinfo/ilugc
