asterisk users - Jan 2005 - Best VPN server for * and woad warriors using windows?

Hi list!

I'm sure the topic has been discussed but I could not find what I was 
looking for.

What would be the best / easiest VPN software solution. I would like to 
install vpn software on the * server for roadwarriors to connect to with 
laptops running windows. Ideally the vpn solution will not require any 
additional software on the client side but will use IPSEC.
(Ofcourse call quality is important)

There are numerous vpn server daemons around and I found many messages 
about some of them using tcp/udp etc and instead of trying them all out 
hopefully someone can recommend one?

(I guess this would make a useful wiki page too).

Thanks!! Remco

Hi,

Il giorno dom, 23-01-2005 alle 10:33 +0100, Remco Barende ha
scritto:
> What would be the best / easiest VPN software solution. I would like to 
> install vpn software on the * server for roadwarriors to connect to with 
> laptops running windows. Ideally the vpn solution will not require any 
> additional software on the client side but will use IPSEC.
> (Ofcourse call quality is important)
best if ofcourse some ipsec-based solutions, but that leads
to installing a client on winblow machines.
You can use pptp, ok is not secure as ipsec but is built in
in winblow 98,2k,xp... so on the client you must only
create a new VPN connection (under connections manager)
and you're done.

On the linux side, go to http://poptop.sourceforge.net/dox/
to grab the server.

I think that this is the easiest solutions for a decent
encryption ad ease of use, when using m$ clients.
(hoping you don't need to protect millions $$$ value data :> )

of course ipsec is better, but needs more work to set it
up, on client and on server side.

just my 2 cents,
Matteo

On Sun, 23 Jan 2005 10:33:14 +0100 (CET), Remco Barende
<asterisk@barendse.to> wrote:
> I would like to
> install vpn software on the * server for roadwarriors to connect to with
> laptops running windows. 
OK, take a hard look at this before you get too far. Installing VPN
software *on* the Asterisk box is not a good idea. Now, you haven't
explained the volume of users on the box, or the availability needs of
the box, but either way, this is bad practice. The term "roadwarriors'
makes me think this is for a business.
> There are numerous vpn server daemons around and I found many messages
> about some of them using tcp/udp etc and instead of trying them all out
> hopefully someone can recommend one?
If you want IPSec, take a look at OpenWall. If you must run this on
your asterisk box, so be it.

Now, if I were you, I would take this opportunity to install a good
Linux based firewall solution that sits in FRONT of the asterisk
server. I can't stress this enough. Take a look at m0n0wall. It has
vpn support (ipsec and pptp) built in, and it will run on nearly
anything. Put this on a machine by itself.

http://m0n0.ch/wall/
> 
> (I guess this would make a useful wiki page too).
> 
> Thanks!! Remco
>
Hope this helps!

-Chuji

Remco Barende wrote:
> What would be the best / easiest VPN software solution. I would like 
> to install vpn software on the * server for roadwarriors to connect to 
> with laptops running windows. Ideally the vpn solution will not 
> require any additional software on the client side but will use IPSEC.
>
Remco,

I've had very good success with OpenVPN 
http://sourceforge.net/projects/openvpn

Doug