Which VPN Protocol should I use?

By -
I have another assignment on how to create a VPN solution for an corporate company. This company will need VPN for their mobile user, to connecting two of their building, and for their extranet partner solution.

Thinking about IPsec as the solution for mobile user solution, because:
  1. ISA server and Cisco hardware already support this. Now it's depend on which base I will need, hardware of software? Personally I like software much, because if there is a need to upgrade it, I can do it easily. With hardware, sometimes there is a limitation on upgrading the OS.
  2. With IPsec, I will use IKE for the key exchange solution, and AH, ESP for authentication. Not too hard, just need a big understanding on how it will work. Beside these protocols already the best if I'm not wrong
  3. It is easy to have mobile user, with Cisco hardware. They already create the cisco vpn client program so I don't have to deal with the client. Nice ^^ Although I know you can connect using Windows, but hey, less effort means the higher posibility of finishing the assignment early
  4. Easy to setup :D Already built in on Fedora I guess. Using FreeS/wan project.
Now, the problem is how to connect from site to site. I think using IPsec will give too much payload and make the connection slower. For the site to site, speed is the priority. Security is number two, since I plan to get a leased line. The choices will be
  • Point to Point Tunneling Protocol (PPTP)
  • Layer 2 Tunneling Protocol (L2TP)
  • Internet Protocol Security (IPSec) tunnel mode
  • Secure Sockets Layer (SSL)
Ah o.0' Still need to do another research.. LOL...

Comments

Post a Comment

Popular posts from this blog

Hiren can not load the CD ROM Driver

By -
Image
Hiren Boot CD is a superb all in one tools, that helps from regular user to the IT tech guys alot. If you boot this CD, you will find heaps of tools such as: mini windows XP, recovery, backup, partition, and other tools. But the problem is, if your optical drive is using SATA connection, sometimes Hiren's bootCD will required drive emulation as it only support ATA optical drive. The result: it won't be able to loads it's driver. So one way to solve the computer with SATA optical drive is by using Hiren in USB instead. In this post, I'll show you step by step on how I did it (credit goes to hiren.info for the information). Connect a USB Drive (256Mb or more). Right click the USB drive in Windows Explorer, and choose format (this step will destroy all the data inside the USB stick, so make sure you already have backup the data you need). You can tick quick format if you are sure the USB stick is still in a good condition, or just untick it if you afraid you have badsector
Read more

Enable PHP opcache extension on Windows XAMPP

By -
If your XAMPP comes with PHP 5.5+ by default, opcache already included in the bundle, you will just need to enable it. To enable the extension: Open php.ini (by default it should be located here: C:\xampp\php\php.ini). Add this line at the end of the file: zend_extension = "C:\xampp\php\ext\php_opcache.dll" You will need to adjust the path if you installed XAMPP in non default location. Restart Apache server.
Read more

Sunrose USB Fingerprint Reader Driver

By -
Image
Also known as the ELAN Smart-id Fingerprint. Steps to resolve: Download the driver  (Tested on Windows 10) Extract the Zip file Go to device management, find ELAN Fingerprint, right-click and select update driver Locate the driver inside the extracted files Let me know in the comment below if you still have any issue(s)
Read more