Steve, We've spun up a centos instance for each tenant requiring both and installed openvpn, http://openvpn.net/
Attaching an instance to a vpc tier for L2L vpn and then another isolated network for RA VPN worked, but you had to maintain local route tables on instances to route traffic back to RA VPN clients via the nic attached to the isolated network. so far, open vpn has been working very well for us. Brandon Arms Network Engineer DSS ba...@dsscorp.com Website | Data Center | Twitter | Facebook | LinkedIn -----Original Message----- From: Steve Searles [mailto:ssear...@zimcom.net] Sent: Monday, November 11, 2013 11:23 PM To: users@cloudstack.apache.org Subject: RE: Site to Site and RA VPN? Anyone? Steve Searles Director, Network Operations Zimcom Internet Solutions, Inc. http://www.zimcom.net Phone. (513)231-9500 Fax. (513)624-3909 Toll Free. (888)624-3910 -----Original Message----- From: Steve Searles [mailto:ssear...@zimcom.net] Sent: Friday, November 8, 2013 11:24 PM To: users@cloudstack.apache.org Subject: Site to Site and RA VPN? In CS 4.2 remote access VPN's are not supported inside a VPC; likewise site to site is not supported in a non VPC isolated network. (Advanced Zone). What is the best practice/suggestion if both are required? A small Linux instance inside the VPC to serve as a vpn endpoint for the remote users? I am looking for what has worked well for others in this situation. Steve Searles Director, Network Operations Zimcom Internet Solutions, Inc. http://www.zimcom.net Phone. (513)231-9500 Fax. (513)624-3909 Toll Free. (888)624-3910
