[ previous ] [ next ] [ threads ]
 From:  Christiaens Joachim <jchristi at oce dot be>
 To:  "'Vincent FLEURANCEAU'" <v dot fleuranceau at parc dash landes dash de dash gascogne dot fr>, m0n0wall at lists dot m0n0 dot ch
 Subject:  RE: [m0n0wall] Corporate VPN (multiple tunnels) - Feedback nedeed
 Date:  Thu, 1 Apr 2004 16:30:08 +0200
> -----Original Message-----
> From: Vincent FLEURANCEAU
> [mailto:v dot fleuranceau at parc dash landes dash de dash gascogne dot fr]
> Sent: donderdag 1 april 2004 9:46
> To: m0n0wall at lists dot m0n0 dot ch
> Subject: [m0n0wall] Corporate VPN (multiple tunnels) - Feedback nedeed
> Hi all!
> I'm looking for people who use m0n0wall in a corporate 
> environment, for 
> their customers or for their own needs.
> I'm about to set up a VPN (with multiple tunnels) between our main 
> office and our 4 "satellite" offices.
> My situation (in France):
> - Many VPN "dealers" only consider MPLS technology and don't 
> trust IPsec 
> at all.
> - Other who dare to use IPsec simply ignore software solutions, i.e. 
> don't trust Linux or even don't know anything about the BSD family :-(
> - It seems no one has been told about Soekris platforms...
> ... so that:
> - They want to sell me 5 or their favorite DSL routers (up to $1,000 
> each ;-)
> - I'll have to deal with very expensive MPLS-based VPN 
> "packages" sold 
> by ISP.
> So, it would be very nice if someone (preferably French 
> people so that I 
> can call them at their office) could give me feedback on her/his own 
> experience in designing a similar configuration.
> I'm very confident with m0n0wall, but I have to gather arguments and 
> facts to convince my boss to let me go on for it.  So, please let me 
> know how you managed to set it up!
> More, I plan to use m0n0wall on Soekris hardware, so I have 2 other 
> questions:
> - Does the 4501 (basic) model suit for all 5 gateways?
> - Is the VPN add-on card useful (or even needed) for all 5 gateways?
> Thanks a lot in advance,
> -- Vincent

Sorry, I'm Belgian and don't use the IPSec functionality yet...

What I can tell you is that the net4501 will be powerfull enough for the
central unit, and certainly for the sattelite-offices.
It might be better to use the hardware accelerator, but that depends on the
speed you will be needing (and getting over your DSL's)...


Oce enables its customers to manage their documents efficiently and
effectively by offering innovative print and document management products
and services for professional environments.

This e-mail message and any attachment are intended for the sole use of the
recipient(s) named above and may contain information which is confidential
and/or protected by intellectual property rights.
Any use of the information contained herein (including, but not limited to,
total or partial reproduction, communication or distribution in any form) by
other persons than the designated recipient(s) is prohibited.

If you have received this e-mail in error, please notify the sender either
by telephone (0032-2-729.48.11) or by e-mail and delete the material from
any computer.
Oce-Belgium/Oce-Interservices is nor responsible for the correct and
complete transfer of the contents of the sent e-mail, neither for the
receipt on due time.  This e-mail message does not bring about a contractual
obligation for Oce-Belgium/Oce-Interservices.

Thank you for your cooperation.

For further information about Oce-Belgium/Oce-Interservices please see our
website at www.oce.be