RE: [Openvpn-users] office-to-office connections

[Brian Leyton <bleyton@xxxxxxxxxxxx>]

Florin Andrei wrote:
> 
> Anyone tried a hybrid approach? I.e. use OpenVPN to connect 
> clients to the office, and use IPSec to connect the offices 
> together. I know, after working with OpenVPN, IPSec is such a 
> pain, but in some cases it might make sense (some offices 
> already use an IPSec-based VPN).

I'm doing that, and it seems to work well.  We already had IPCop firewalls
in all of our offices, so once I upgraded the connections to T1, and dumped
our old Frame Relay network, I used the built-in IPSec VPN capability to
build the office-to-office connections.  This works really well, and was
easy to set up.

I like to think of it as using the right tool for the job.  Since IPSec
works well in a net-to-net configuration, I use it there.  IPSec is a pain
for RoadWarriors, but OpenVPN is much better suited for that, so we use it
there.

I just wish they'd build OpenVPN support right into IPCop (there are some
addons that various people are working on, and though they do work well,
they're not completely integrated into the IPCop base-installation.  I think
we'll probably get there eventually, though.

Brian Leyton
IT Manager
Commercial Petroleum Equipment

____________________________________________
Openvpn-users mailing list
Openvpn-users@xxxxxxxxxxxxxxxxxxxxx
https://lists.sourceforge.net/lists/listinfo/openvpn-users