From owner-freebsd-questions@FreeBSD.ORG Mon Dec 11 18:15:03 2006 Return-Path: X-Original-To: freebsd-questions@freebsd.org Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 62ADA16A4FF for ; Mon, 11 Dec 2006 18:15:03 +0000 (UTC) (envelope-from perikillo@gmail.com) Received: from ug-out-1314.google.com (ug-out-1314.google.com [66.249.92.173]) by mx1.FreeBSD.org (Postfix) with ESMTP id 0A9EB44253 for ; Mon, 11 Dec 2006 17:44:42 +0000 (GMT) (envelope-from perikillo@gmail.com) Received: by ug-out-1314.google.com with SMTP id o2so1265573uge for ; Mon, 11 Dec 2006 09:46:00 -0800 (PST) DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:to:subject:in-reply-to:mime-version:content-type:references; b=GLd1W+C3GH6jl3sEhWOtUy1L3VV763v+aXnVzWChUXSVZz9WAEK+Bm55D7otOgP7bIXsCKkX6WSOzcU4MP7tz1krYWenXrJKT+HgMxwBnvdwMxLKy9ml0ZvENz5K38a2ZemAgzBEkeMOVNB0nqMOwQ+iGZCIA6C6IdEv8GNIiLg= Received: by 10.82.184.2 with SMTP id h2mr1112306buf.1165859159602; Mon, 11 Dec 2006 09:45:59 -0800 (PST) Received: by 10.82.178.5 with HTTP; Mon, 11 Dec 2006 09:45:59 -0800 (PST) Message-ID: <51d7a5160612110945y5a4b4b92q2d1422678ae2a1b@mail.gmail.com> Date: Mon, 11 Dec 2006 09:45:59 -0800 From: perikillo To: "FreeBSD Mailing List" In-Reply-To: <1165850676.457d783471082@imp4-g19.free.fr> MIME-Version: 1.0 References: <51d7a5160612101528j470f1db9v623c27213a410529@mail.gmail.com> <457D64CB.7050203@wmptl.com> <1165850676.457d783471082@imp4-g19.free.fr> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline X-Content-Filtered-By: Mailman/MimeDel 2.1.5 Subject: Re: VPN Solution for my current Situation. X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 11 Dec 2006 18:15:03 -0000 On 12/11/06, stom@free.fr wrote: > > Hi > > Selon Nathan Vidican : > > > perikillo wrote: > > > Hi people. > > > > > > I want to know which is the best VPN solution i need to my current > > > situation: > > > > > > 2 Offices 1 Mexico-Tijuana 1 E.U.-Otay Mesa(both in the border). > > > > > > In E.U. Offices with have: > > > > > > DNS+Firewall+Proxy Linux > > > Mail Server Linux > > > Samba Linux > > > PBX Altigen Win NT > > > ERP DBA Linux > > > Backup FreeBSD. > > > > > > Mexico > > > PBX Same system > > > Samba > > > ERP DBA(This is the busies from both sites) > > > Backup FreeBSD > > > > > > 65 User 55 Mexico 10 E.U. > > > 40 user in Mexico have mail account && only 15 Internet access > > > all the users in E.U have mail account && Internet access. > > > > > > We share files, E.U. users access the ERP system in Mexico. > > > > > > If the users in Mexico need Internet, they have to reach the proxy in > > > E.U. > > > > > > Both PBX systems have communication for company internal calls, > external > > > calls. > > > > > > All this communication of Voice and Data goes over one private link, > but > > > next year our contract is going to finish, them we need to negotiate > the > > > next contract. > > > > > > Another thing, is that we are planning to start the VoIP solution and > > > see is > > > we can remove our current PBX system with Asterisk. > > > > > > My questions es this: Supposed that we continue with the same Private > > > Line, > > > and we add another public line to do some VPN between both facilities > > > if one > > > link fail the other can continue(backup) or have both sharing the > > > workload, > > > with this workload which VPN solution is the best for my situation: > > > > > > IPsec, OpenVPN, etc? > > > > > > Speaking of FreeBSD, because there is where i want to deploy the VPN > > > solution in Mexico, in E.U. we have there Linux, this can be > problematic? > > > > > > Hope you understand my layout && english, any advice is welcome, > > > thanks all > > > for your time!!! > > > _______________________________________________ > > > freebsd-questions@freebsd.org mailing list > > > http://lists.freebsd.org/mailman/listinfo/freebsd-questions > > > To unsubscribe, send any mail to > > > "freebsd-questions-unsubscribe@freebsd.org" > > > > > > > > mpd for FreeBSD... it just works. > > The choice is "up to you" - We also use OpenVPN for site-to-site VPN SSL > tunnels > and it is also a good and easy solution. Authentication is based on X509 > certificates for cross-authentication - With OpenVPN's multiple and > fine-grained options. > > We have good performance with strong encryption options. > > The protocol (UDP) encapsulation is also a nice feature. > > The Linux<->FreeBSD is not a problem at all. > > > > > > > -- > > Nathan Vidican > > nvidican@wmptl.com > > _______________________________________________ > > freebsd-questions@freebsd.org mailing list > > http://lists.freebsd.org/mailman/listinfo/freebsd-questions > > To unsubscribe, send any mail to " > freebsd-questions-unsubscribe@freebsd.org" > > > > Philippe Laquet. > > I see that OpenVPN is the first choice, i will try this port first && latter continue with other ones. Thanks all for your answer.