nanog mailing list archives

Re: VPN recommendations?


From: William Herrin <bill () herrin us>
Date: Thu, 10 Feb 2022 17:47:06 -0800

Howdy,

I just want to say thank you to everyone who responded. It was very
helpful and I now have a bunch of leads to chase. I'll let you know
what I end up doing. Given the lead times on some of the equipment it
may be a while...

Warm regards,
Bill Herrin


On Thu, Feb 10, 2022 at 10:02 AM William Herrin <bill () herrin us> wrote:
Do you have any recommendations for VPN appliances? Specifically: I need to build a site to site VPNs at speeds 
between 100mpbs and 1 gbit where all but one of the sites are behind an IPv4 NAT gateway with dynamic public IP 
addresses.

Normally I'd throw OpenVPN on a couple of Linux boxes and be happy but my customer insists on a network appliance. 
Site to site VPNs using IPSec and static IP addresses on the plaintext side are a dime a dozen but traversing NAT and 
dynamic IP addresses (and automatically re-establishing when the service goes out and comes back up with different 
addresses) is a hard requirement.

Thanks in advance,
Bill Herrin



-- 
William Herrin
bill () herrin us
https://bill.herrin.us/


Current thread: