Re: vpn encryption

[Chris Hedemark <chris@yonderway.com>]

On Wed, 2002-06-05 at 03:35, taproot420 wrote:
> I was wondering if its possible to use full strength Rijndael as the vpn
> tunnel encryption instead of 3-des in openbsd? A co-worker is testing a
> product in the lab called open-vpn or something and he is using Rijndael
> as his tunnel encryption. I was just wanting to know if this is
> possible? By the way has anybody here used the open-vpn or know if its
> any good? I hear its not attached to the tcp/ip stack like traditional
> ipsec vpn, and runs entirely from udp-500 therefore getting past the nat
> issues that plague current vpn.

I am using OpenVPN to attach two private networks to my home network.

Two of the three gateways are on DHCP-based broadband providers.

It's very easy to set up, much easier than the OpenBSD native IPSec
stuff.  I've only been using it a little while and my main complaint
right now is it doesn't handle disruptions gracefully (i.e. one hour
outage of one end of the connection, or change of IP address on one end,
etc.)

Since it displaces something built into OpenBSD, I'd expect the peanut
gallery here to be hostile towards its use.  All I can say is do what
makes the best sense for you, and ignore the heckling and other
non-constructive responses.

[demime 0.98d removed an attachment of type application/pgp-signature which had a name of signature.asc]