[OpenVPN home] [Date Prev] [Date Index] [Date Next]
[OpenVPN mailing lists] [Thread Prev] [Thread Index] [Thread Next]
Google
 
Web openvpn.net

Re: [Openvpn-users] VPN Server ?


  • Subject: Re: [Openvpn-users] VPN Server ?
  • From: "Mathias Sundman" <Mathias.Sundman@xxxxxxxxxx>
  • Date: Wed, 17 Sep 2003 13:34:49 +0200

Hi!

Yes, ipsec can do that, and is probably a bit easier to configure for so
many users.

I´ve used SuperFreeS/WAN on Linux to handle multiple windows users.
It works great, however, it can not bridge the connections, so you have
to use a seperate ip subnet for your wireless clients.

And... The build-in support for ipsec in Win2K/XP is really a mess to
configure, so I recommend a commersial VPN client like SSH Sentinell.

I havn´t read anything about what is the practical maximum of bridged
openvpn users. Theoretically I think it should work with 50 users. Just
create 50 tap interfaces and bridge them with eth1, and start 50 instances
of openvpn, with one config file for each.

I think it would be really interesting to here how well that work. I´m
currently
running such a setup, but with only 5 users and that works great.

A good thing with such a config is that you can have independent
iptables rules for each user as the traffic comes from a pre-defined
tap interface.

/Mathias


                                                                                                                                       
                      f.visconte@wesfor                                                                                                
                      d.fr                     To:       Mathias Sundman <Mathias.Sundman@xxxxxxxxxx>                                  
                                               cc:                                                                                     
                      2003-09-17 13:11         Subject:  Re: [Openvpn-users] VPN Server ?                                              
                                                                                                                                       
                                                                                                                                       




Thank you for your help.
Is ipsec can do that ? if not , is there a simple solution to secure a wlan
with many workstation (~ 50 ) connected througt wireless ( more secure than
WEP )?

>
> > The problem is that i can't manage put multiple connection on the tap0
> > interface of the linux router.
> > Is it possible to manage multiple VPN connection throught one tap
> > interface  ?
>
> No, it is not (currently atleast) possible to handle multiple
> connections on one tap interface.
>
> Use one tap interface per user, and bridge them all.
>
> /Mathias
>
>
>










____________________________________________
Openvpn-users mailing list
Openvpn-users@xxxxxxxxxxxxxxxxxxxxx
https://lists.sourceforge.net/lists/listinfo/openvpn-users