Products > Networking & Wireless

Simple & good VPN router?

(1/3) > >>

nctnico:
I inherited some more tasks and one of them is getting VPN links up & running. I hope to offload this task ASAP but for now  :'(

Anyway, the system is setup using a central VPN server running OpenVPN. What I would like to know is what is the absolute simplest router to add client networks. Currently routers from Mikrotik are being used and while these look great, they have way too many settings and way too many ways to shoot yourself in the foot. For example: I examined one of the configured routers and it turns out that some ports allow to get onto the network at the side which connects to internet.

What I'm looking for is a router which has 1 'WAN' port and 1 (or more; if it has an internal switch) VPN client ports but all client ports must adhere to the same security settings so connecting something to the other ports makes no difference. Any suggestions?

2N3055:
In my opinion Mikrotik is simplest and cheapest equipment that isn't toy.
But my network knowledge is quite advanced so I understand it can be a bit much if you're not ready or interested to spend some time learning it to some level.

Mikrotik has Quick Set page in Winbox. There you can basically set up all of the stuff you need.
Start by reseting router to factory settings (if it is not a new one).

On that page you can set one port (by default Eth1) ot be wan port and it's ip config (for Internet).
Then you set local network subnet and if needed DHCP.
Enable NAT (now you have all internal traffic to WAN nated and firewalled)

And enable VPN acces.
That will enable basic username/password based VPN (for more advanced security you need to go deeper) and also give you DynamicDNS host name to connect to.

And that is it.
You can go now and take a look in details what it have set up and to get a feeling what is needed.

PKTKS:

--- Quote from: 2N3055 on October 01, 2021, 09:09:46 pm ---In my opinion Mikrotik is simplest and cheapest equipment that isn't toy.
(..)

--- End quote ---

1+ Mikrotik.

That is TRUE and being a customized Linux all networking goodies are ready to deploy.
Their console interface is easy to adapt and hardware very affordable.

Best option besides very expensive CISCO stuff

Paul

nctnico:

--- Quote from: 2N3055 on October 01, 2021, 09:09:46 pm ---In my opinion Mikrotik is simplest and cheapest equipment that isn't toy.
But my network knowledge is quite advanced so I understand it can be a bit much if you're not ready or interested to spend some time learning it to some level.

--- End quote ---
Well, I used to setup this kind of networking gear but lost interest in doing this sort of work a long time ago. Nowadays I want something that just works quickly & easy. I guess I have to dig a bit deeper into the Mikrotik then and see if there is a guided way to get it to do what I want (keys, routes, physical ports, firewall, etc). BTW: I don't need to setup a VPN server, I need to setup a VPN client in the form of a router which uses keys to access a (fixed IP) VPN server.

PKTKS:
Check their site for demos or trials of new firmware kernels..

They used to have very good demos that can be tested inside any decent vm like qemu

I may be outdated on these but that used to be quite a good test before deploy new stuff

Paul

Navigation

[0] Message Index

[#] Next page