Which tunnel will connect the offices?

H

Human2016-04-12 16:26:33

openvpn

Human, 2016-04-12 16:26:33

There are 2 offices, in one there is an asterisk server.
In the second one there is a phone and he needs to go to the asterisk (only to him, and the rest of the bolt)
No ball through the Internet is planned, but it would be right to leave such an opportunity in principle.
Is it better to do ipip? (will it work if there are 3 offices?)
or do gre + ipsec?

Reply

Answer the question

In order to leave comments, you need to log in

5 answer(s)

E

Eugene, 2016-04-12
of Humans @tenhi_shadow

If there are many subnets on different sides, then to avoid complex policies, I would (and did) GRE + IPsec.
Otherwise just IPsec.
PS: OpenVPN is slower on average, but it's better to test your hardware. For me, with the same encryption settings, the Mikrotik RB450 gave out 20 Mbps with IPsec and 16 Mbps with OpenVPN. It was almost a year ago, Mikrotik changed a lot of firmware, maybe the picture has changed.

G

Gregory, 2016-04-12
@Maxlinus

here is a good comparison mum.mikrotik.com/presentations/EU16/presentation_2...
I personally needed PPTP and OpenVPN

C

CityCat4, 2016-04-12
@CityCat4

I think it would be best to just IPSec. And to whom where to go - it is destroyed by the rules of the firewall. It will work according to the "star" scheme for any number of offices (on FreeBSD I worked with two dozen), only policies need to be resolved manually and IP addressing should be planned immediately for the entire intended network.

N

nimbo, 2016-04-13
@nimbo

l2tp (possible with ipsec).

H

Human, 2016-04-13
of Humans @tenhi_shadow

I will try nevertheless gre+ipsec.
Another question is, does my device (RB951G-2Hnd) wake up
because it spends its efforts on the Internet via l2tp + on wifi encryption
and which dynamic routing protocol is better to use?