[nylug-talk] Clean Slate Remote Office Connectivity

[H. G.]

On 4/21/07, Eric <etamme at optonline.net> wrote:
>
> alex at pilosoft.com wrote:
> > On Fri, 20 Apr 2007, H. G. wrote:
> >
> >> On 4/20/07, Marco Romeny <marco.romeny at gmail.com> wrote:
> >>> I second openvpn. Not only good for this kind of setup, it's actually
> >>> pretty easy to do roadwarrior configurations without static
> >>> ip-addresses.
> >>>
> >>> But I think getting enough bandwidth is the biggest issue as
> >>> always....
> >> Heres a third vote for OpenVPN.  It might be your cheapest option, if
> >> you already have a Linux or BSD box as your office's gateway. By
> >> installing OpenVPN, you won't have to splurge for an appliance or
> >> something in that vein.
> > F openvpn.
> >
> > Get with the times, and run proper ipsec and windows ipsec clients.
> >
> > there are times when the ghetto fabulous solutions you would want at
> home
> > make no sense in a corporate environment, which has to be supported even
> > after you quit or are fired.
> >
> > -alex
>
> I dont know why you refer to OpenVPN as a "ghetto fabulous" solution.
> It's not some ssh/netfilter hack.  It is a robust solution that works,
> and works well across many platforms.
>
> IPSEC is a notoriously finicky beast with many different implementations
> that would be more complex to support after you are gone or fired.
>
> Have you ever even used OpenVPN alex?
>
> -Eric
>

I also completely fail to see how OpenVPN is "ghetto fabulous".

The man seeks a simple robust solution to support a small office
environment.
You suggest to him something thats likely liable to start him balding early.

I'd be happy to be proven wrong.  You should describe how simple IPSEC is to
set up,
give some pointers, and demonstrate why something like OpenVPN is a crappy
choice.

We're waiting.