VPNs

• VPNs
  Posted by Squarewave on 30 Nov, 2023 19:43
• If I were to set up a VPN to get into my home network from the outside, which protocol am I best to use?
  
  Options on the desktop settings I see are;
  
  PPTP
  L2TP over IPSec
  IKEv2 EAP
  IPSec Tunnel
  SSL VPN Tunnel
  
  Mobile client lists;
  
  SSL
  OpenVPN
  
  I wonder which is best to choose?
  
  Thanks.
• #1 Reply
  Posted by madires on 30 Nov, 2023 21:07
• PPTP is an absolute no-go. L2TP over IPsec doesn't make much sense as you could use IPsec directly. IKEv2 EAP is not a VPN, it's used for authentication to establish an IPsec connection. The best options from the ones listed are IPsec or SSL VPN. OpenVPN is an SSL VPN. BTW, another good option is WireGuard.
• #2 Reply
  Posted by Halcyon on 30 Nov, 2023 23:15
• OpenVPN or Wireguard.
  
  I currently use OpenVPN, but I'm also testing Wireguard for site-to-site... I like its simplicity.
  
  With OpenVPN, don't use any of the encryption or digest algorithms that have been deprecated in later versions of OpenSSL, see: https://docs.netgate.com/pfsense/en/latest/releases/23-09.html#weak-certificate-digests-such-as-sha1-are-deprecated