I am using OpenVPN in a production environment. It has various advantages as well as disadvantages over PPTP:
Advantages: -Since you're comparing it to PPTP - SECURITY is 10 times better with OpenVPN - whereas it is unsecured in PPTP. -Super easy config (if you read well, you can set one up in 10 minutes, and configure it to your needs within 1 hour) -1 big advantage which you don't come to know about unless you've run both types of VPN - with OpenVPN the client's internet connection does not get routed through the VPN while it always does through PPTP / real VPN. -Ability to pass static routes back to the client (very useful) -Ability to push custom DNS server / other DHCP parameters to the client (might be possible with PPTP also but here it is as easy as adding a line to the server config) -It comes with an open source client with binary release for every operating system (Windows, Linux, Mac, Solaris, etc.) -Since it is SSL-based, it even works through a proxy -You can setup load balancing / multiple failover servers in the client config file (not possible with real VPN) - no need for setting up an LVS or anything. -Easily setup routing between VPN clients -Easily create a bridged or tunnel based VPN -Super easy to configure LDAP support -Easily setup access policies - e.g. provide different IP ranges to different groups of people, allow them to access different parts of the network with varied access levels -Works using UDP or TCP Disadvantages: -Requires installing the OpenVPN client on the client machines, whereas PPTP works with the browser's in built VPN support (this one is a major let down for e.g. - for letting iPhones or mobile devices accessing the VPN, but don't think it matters much unless you really need that support). And, even if you don't choose OpenVPN for whatever reason, I'd suggest not looking at PPTP at all. It is too unsecure. Look at options like L2TP / IPSec (the best) based VPN solutions on a hardened linux box. HTH, Angad Singh Senior Software Engineer Oxylabs Networks On Wed, Oct 27, 2010 at 5:41 PM, Sagar Belure <[email protected]>wrote: > Hi all, > > Many people suggests to use OpenVPN over PPTP server. > What is so special about OpenVPN server? > > Any good/bad experiences configuring openvpn on ubuntu? > > -- > Thanks, > Sagar Belure > Security Analyst > Secfence Technologies > www.secfence.com > _______________________________________________ > Ilugd mailing list > [email protected] > http://frodo.hserus.net/mailman/listinfo/ilugd > _______________________________________________ Ilugd mailing list [email protected] http://frodo.hserus.net/mailman/listinfo/ilugd
