Can anyone recommend one to run under CentOS?
Dnk
Sent from my iPhone
On 19-Dec-08, at 1:09 PM, Adam Tauno Williams awilliam@whitemice.org wrote:
On Fri, 2008-12-19 at 13:02 -0800, Dnk wrote:
Can anyone recommend one to run under CentOS?
OpenVPN?
CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
That is what I am currently using. One of our vp's had a "web" based one at his last job. But to connect, they go to a web page, login, and they gain VPN access. Then there are No client software to install either. I know some sonic wall, barracuda, etc devices do this.
Dnk wrote:
That is what I am currently using. One of our vp's had a "web" based one at his last job. But to connect, they go to a web page, login, and they gain VPN access. Then there are No client software to install either. I know some sonic wall, barracuda, etc devices do this.
Well, there IS client software, its just installed auto-magically via the web interface, using either a Java (for firefox clients) or ActiveX (for MSIE on Windows) client stack. The Juniper SSLVPN we use at my work functions this way for end user -> WAN VPNs (but LAN -> WAN VPNs instead use an appliance router)
sadly, my experience with these is that the MSIE ActiveX Windows client stack seems to be a lot more robust than the Java client stacks, at least for VPN routing (aka Network Connect). the Java stuff is OK for remote access (X windows, RDP clients, Citrix client, file transfer) via the web interface, but thats not really a VPN in my book, its just a remote application portal.
Dnk wrote:
Can anyone recommend one to run under CentOS?
I'd recommend OpenVPN as /the/ VPN to use with a Linux VPN server... but, web based? its SSL based. the only 'web based' stuff I'm aware of is when the VPN client is embedded in a client side web 'object' like ActiveX, the VPN itself isn't actually webbased, it just APPEARS that way to the user.
OpenVPN has a nice unobtrusive openvpnGUI client you can distribte to your Windows users, along with the appropriate PKI keys. The specifics of how you want to do your PKI key management are left up to the system administrator as an exercise, but it uses OpenSSL keys, so anyone familiar with those should have no problems.
-
Adam Tauno Williams -
Dnk -
John R Pierce