Soekris 5501 and pfSense with VPN

[Kenneth Fribert]

Hi All

 

Being brand new to the world of soekris, I'm sort of stumbling around in the dark, and I hope somebody can enlighten me :-)

 

I'm considering 5501-70 board for use here in Lynge at our mainsite.

We in the IT department would probably like to have a VPN connection to the site.

So the question is, will the 5501-70 be tough enough to handle a few VPN connections, or do we need to add the vpn1411, and will the vpn1411 even work with VPN in pfSense (IPsec, OpenVPN)?

 

Best regards

Kenneth

 

_______________________________________________
Soekris-tech mailing list
Soekris-tech@...
http://lists.soekris.com/mailman/listinfo/soekris-tech

[Marc Balmer-2]

* Kenneth Fribert wrote:
> Hi All
>  
> Being brand new to the world of soekris, I'm sort of stumbling around in the dark, and I hope somebody can enlighten me :-)
>  
> I'm considering 5501-70 board for use here in Lynge at our mainsite.
> We in the IT department would probably like to have a VPN connection to the site.
> So the question is, will the 5501-70 be tough enough to handle a few VPN connections, or do we need to add the vpn1411, and will the vpn1411 even work with VPN in pfSense (IPsec ( http://en.wikipedia.org/wiki/IPsec ), OpenVPN ( http://openvpn.net/ ))?

With an AMD Geode LX and OpenBSD we measured an IPsec throughput of
roughly 20 MBit/s.  Note that the chip has an AES-128 accelerator onboard
already.

- Marc

_______________________________________________
Soekris-tech mailing list
Soekris-tech@...
http://lists.soekris.com/mailman/listinfo/soekris-tech

[Nils Vogels-2]

A lot depends on the bandwidth you are planning on using inside the VPN. I'm using a 4801 with pfsense, running openvpn, and a few tunnels to access some RDP sessions while I am away from home work great.

Sustained network traffic of a couple of MBit/s is a bit more troublesome, in my experience.

Greets,

Nils

On Fri, Jul 11, 2008 at 1:22 PM, Kenneth Fribert <KEF@...> wrote:

Hi All

 

Being brand new to the world of soekris, I'm sort of stumbling around in the dark, and I hope somebody can enlighten me :-)

 

I'm considering 5501-70 board for use here in Lynge at our mainsite.

We in the IT department would probably like to have a VPN connection to the site.

So the question is, will the 5501-70 be tough enough to handle a few VPN connections, or do we need to add the vpn1411, and will the vpn1411 even work with VPN in pfSense (IPsec, OpenVPN)?

 

Best regards

Kenneth

 

_______________________________________________
Soekris-tech mailing list
Soekris-tech@...
http://lists.soekris.com/mailman/listinfo/soekris-tech

--
Simple guidelines to happiness:
Work like you don't need the money,
Love like your heart has never been broken and
Dance like no one can see you.
_______________________________________________
Soekris-tech mailing list
Soekris-tech@...
http://lists.soekris.com/mailman/listinfo/soekris-tech

[Brian A. Seklecki]

> So the question is, will the 5501-70 be tough enough to handle a few VPN
> connections, or do we need to add the vpn1411, and will the vpn1411 even
> work with VPN in pfSense (IPsec,

IPSec is the way to fly.

What speed WAN?  Above 1024kbps?

~BAS
_______________________________________________
Soekris-tech mailing list
Soekris-tech@...
http://lists.soekris.com/mailman/listinfo/soekris-tech

[Kenneth Fribert]

Hi Guys

 

Thanks for the fast and very informative feedback.

 

We have a 10mbit fiber here which will be the one used for VPN connections.

 

We provide services for our employees through our Citrix solution, but the IT department (specifically ME :-), and a few external consultants) could need some VPN access for debugging.

 

And I guess the vpn1411 is out, to much trouble with that.

 

IPSec is recommended? Is that the VPN client native for Windoze? It would be nice to not require a special client for the consultants...

 

/Kenneth

>>> On 11. July 2008 at 13:22, in message <48775E95.4F05.0007.0@...>, "Kenneth Fribert" <KEF@...> wrote:

Hi All

 

Being brand new to the world of soekris, I'm sort of stumbling around in the dark, and I hope somebody can enlighten me :-)

 

I'm considering 5501-70 board for use here in Lynge at our mainsite.

We in the IT department would probably like to have a VPN connection to the site.

So the question is, will the 5501-70 be tough enough to handle a few VPN connections, or do we need to add the vpn1411, and will the vpn1411 even work with VPN in pfSense (IPsec, OpenVPN)?

 

Best regards

Kenneth

 

_______________________________________________
Soekris-tech mailing list
Soekris-tech@...
http://lists.soekris.com/mailman/listinfo/soekris-tech

[Joao Pedras]

Kenneth,

I use it either with OpenBSD+IPSec or OpenBSD+OpenVPN with no issues. My
experiences are similar to the ones described by others in this thread.

I would just like to add that with OpenVPN you can setup load balancing
of connections in order to try to spread those connections through
several boxes. The decision about which server to connect to is made on
OpenVPN's client side though, from what I recall. With authentication in
LDAP works like a charm. The only inconvenience is syncing user
certificates and configs (when needed) and defining/maintaining a method
to supply configs/installs to users.

My 2 cents...

Joao

Kenneth Fribert wrote:

> Hi Guys
>  
> Thanks for the fast and very informative feedback.
>  
> We have a 10mbit fiber here which will be the one used for VPN connections.
>  
> We provide services for our employees through our Citrix solution, but
> the IT department (specifically ME :-), and a few external consultants)
> could need some VPN access for debugging.
>  
> And I guess the vpn1411 is out, to much trouble with that.
>  
> IPSec is recommended? Is that the VPN client native for Windoze? It
> would be nice to not require a special client for the consultants...
>  
> /Kenneth
>
>
>  >>> On 11. July 2008 at 13:22, in message
> <48775E95.4F05.0007.0@...>, "Kenneth Fribert"
> <KEF@...> wrote:
> Hi All
>  
> Being brand new to the world of soekris, I'm sort of stumbling around in
> the dark, and I hope somebody can enlighten me :-)
>  
> I'm considering 5501-70 board for use here in Lynge at our mainsite.
> We in the IT department would probably like to have a VPN connection to
> the site.
> So the question is, will the 5501-70 be tough enough to handle a few VPN
> connections, or do we need to add the vpn1411, and will the vpn1411 even
> work with VPN in pfSense (IPsec <http://en.wikipedia.org/wiki/IPsec>,
> OpenVPN <http://openvpn.net/>)?
>  
> Best regards
> Kenneth
>  
>
>
> ------------------------------------------------------------------------
>
> _______________________________________________
> Soekris-tech mailing list
> Soekris-tech@...
> http://lists.soekris.com/mailman/listinfo/soekris-tech

_______________________________________________
Soekris-tech mailing list
Soekris-tech@...
http://lists.soekris.com/mailman/listinfo/soekris-tech