Hi,
On 26.02.2012 07:10 [email protected] wrote:
I am considering deploying pfSense using OpenVPN (site to site) to
interconnect a dozen offices to a main site. Each remote office will
have fewer than 10 connected IP devices. This setup may replace a
IPSec VPN's. My questions:
3. Each of the remote sites needs to be able to route to each other
but through the main site (hub-spoke). The primary need is because of
VOIP calls between the offices. Possible?
Possible: yes.
I have nearly the same challenge, but we expect to add 2 to 4 new
offices each year. I am testing to solve the f** routing for H323 data
stream by following manner:
Central location gets an dedicated subnet for VOIP; each sublocation
gets a dedicated VLAN for VOIP clients.
An OpenVPN Tunnel will be done in bridged mode between the VOIP subnet
on main location and each sublocation VOIP VLAN.
I my scenario I only have to care about two tunnels and routes in each
sublocation and at adding a new sublocation I do not have to touch all
other firewalls at the other sublocations.
I also can do a clean isolation of VOIP traffic and "standard office"
traffic.
maybe this helps for your further planning
bye
Christoph
_______________________________________________
List mailing list
[email protected]
http://lists.pfsense.org/mailman/listinfo/list