VPN Router - Recommendations?

[itakey]

I may be using ViceVersa to keep data synchronized between 2 computers in different locations and will need to set up a VPN.

I've used the built in windows VPN and it has dropped the connection at random, so I want to use a hardware VPN.

Anyone know of a VPN router that is under $100 and is good?

 

[bobdole369]

In all likelihood - the reason for the random connection drops will still exist with a hardware VPN.

The least expensive VPN solution that I've found to work well is not under $100. I don't think you'll find anything that you actually want to use at that price point. THe Netgear FVS318 does pretty well, but its not so simple to configure.

http://www.netgear.com/Product...allRouters/FVS318.aspx

 

[itakey]

Thanks for the tip. I did see that firewall in my search, but the NewEgg reviews are so scary, and people say the throughput is highly limited so I dismissed it:
http://www.newegg.com/Product/...x?Item=N82E16833122007

Do you think these people simply weren't configuring it right? What is the hard part about the configurations?

 

[bobdole369]

The poorly translated instructions. It is not clear what is meant by several items in help and the manual is just a joke. If you know what your doing that is much easier to use.

 

[itakey]

I am not a pro or do it for a living, but I am quite technical, understand vpn's and have set them up (Windows pro build in one), understand port forwarding, have built an SSH tunnel in the past, etc. I am not a hard core linux guy or anything, but understand commands but am more of a windows guy (unfortunately).

Do you know if the throughput is hard core limited on the FVS318? I run high speed connections.

Any feedback on the Netgear FVS338? Seems like this allows high speed throughput, although it is in the $160 range. If I had to spend up to $200 for a much better unit, I am willing.

 

[freegeeks]

you can openswan or strongswan to build a linux based VPN solution

 

[Crusty]

If you are going to be spending upwards of $200 I don't see why you wouldn't upgrade to a baseline Cisco, Watchguard, or Sonicwall firewall with VPN stuff built in for just another $150-200. If you're going to be using multiple VPN's you really want to stay away from software solutions as they will lag behind in throughput. I use Cisco ASA5505's here at work for all our VPN needs, usually have anywhere from 4-8 active and it doesn't break a sweat.

 

[itakey]

I definitely want to go with a hardware VPN once all is done and in place. The Cisco looks sweet, but I can't afford over $350+ for that one right now with the scenario I am setting up.

I've considered some of the smaller Sonicwall TZ model's too. Is it more ideal to have 2, one of the firewalls/vpn hosts on each side? Or is just one on the server end ok with a client on the other end?

Added after first response: I don't want to have to manage a linux box that I don't know much about. I considered FreeNAS too, but that may be too involved.

 

[Crusty]

It all depends on the kind of VPN. Most of our tunnels are to hardware VPN devices at other companies, but for remote users SSL VPN or the Cisco VPN Client software work great(except in Vista 64).

I'd only consider a hardware device on the client ends if you need the VPN to be on the network level instead of per computer at the site. Like a branch office, or telecommuter who works exclusively from home.

 

[Aarondeep]

Don't be intimidated by a linux solution.
Ipcop, smoothwall, m0n0wall, & clark connect are all good options. With loads of community support.

You can build a small low-power lowcost machine, or even use older hardware lying around.
This type of solution could considerably save you money, and you aren't limited by license restrictions found on standalone devices like sonicwall, netscreen, & cisco.

I have personally only used IPcop and found it very easy to use. You don't need to know very much about linux to use it. After you install with the ISO its all web-based administration. Only time you would ever need to use the console would be to change the IPs or install addons.

I have ipcop at one of my locations and it even connects to one of my remote sonicwalls.
I also installed a openVPN addon to use my laptop to connect while on the road.

 

[Young Grasshopper]

get a used cisco pix 501 theyre great

 

[JiveMiguel]

Get a Linksys WRT54G, versions 2, 3 or 4, and install DD-WRT on it and use OPEN VPN. Works great for me and I use it personally and have set up a couple clients with it. You can get the router for about $45 on ebay and unlike the FVS318, it's easy to set up and it just WORKS! I'm not knocking the FVS318, I've used one for years until I was turned on to DD-WRT.

Good luck!

 

[Crusty]

Originally posted by: JiveMiguel
Get a Linksys WRT54G, versions 2, 3 or 4, and install DD-WRT on it and use OPEN VPN. Works great for me and I use it personally and have set up a couple clients with it. You can get the router for about $45 on ebay and unlike the FVS318, it's easy to set up and it just WORKS! I'm not knocking the FVS318, I've used one for years until I was turned on to DD-WRT.

Good luck!

That's fine and all... unless you want to run an IPSec VPN. While the OpenVPN package for dd-wrt does support IPSec you have to configure it all by hand(no GUI for it), and then when it's done you might be lucky to get 5mbps of throughput on it.

 

[itakey]

Thanks for all of your replies. What I am trying to do is keep a hard drive and files synchronized to an off site location at home. Seems like a lot of people are telling me that VPN transfering a lot of data is not ideal, even if just a few hundred megs a day, is that true? Using the Speakeasy speed test my speeds are:
Office:
Download Speed: 2086 kbps (260.8 KB/sec transfer rate)
Upload Speed: 2086 kbps (260.8 KB/sec transfer rate)

Home:
Download Speed: 11628 kbps (1453.5 KB/sec transfer rate)
Upload Speed: 2086 kbps (260.8 KB/sec transfer rate)

So my cap between the machines is about 2000kbps.

I've played around with DD-WRT many years ago, and actually have 2 older version Linksys that I've used it on. Truth is, I've always gone back to the Linksys firmware after not having the time to play with the systems. So, with the VPN I don't want something that I am going to have to constantly touch, and adjust to keep working.

The more I research, the more options I am finding and the more difficult it is to make a decision.

 

[RebateMonger]

Originally posted by: itakey
I've used the built in windows VPN and it has dropped the connection at random, so I want to use a hardware VPN.

While I haven't use the built-in VPN in XP for any length of time, I HAVE used the Windows Server VPN extensively. It SHOULD be reliable. We used ViceVersa Pro for years, synchronizing 14 GB of data between a Windows Server and two client PCs over a Windows VPN.

If you are dropping VPN connections, I'd take a look at the Internet connection between sites. When I first set up a VPN from my home to my office, I had frequent VPN disconnections. I later found the problem was a ton of errors on the DSL connection at one end. It wasn't noticeable if you were just web browsing or sending email, but it'd kill VPN connections. You need a reliable Internet connection or any VPN is going to be problematic.

 

[Red Squirrel]

Another option is setting up openvpn. It's much more involved but works nice. I have it setup so I can vpn into my home network from work as I do lot of work related coding and I feel more comfortable doing it on a server that is backed up nightly, then on an office pc that is not backed up, not to mention I have all the tools at my finger tips such as libraries and general setup. (php, mysql etc).

Another option is setup two smoothwall boxes one at each end. It has site to site vpn capabilities. I've never used that feature though so not sure how good it is or if it's even secure.

Stay away from netgear vpn prosafe firewall. It looks very promissing but it fails after a few weeks. I was the victim of it, and based on the research it's an issue with that serries. Maybe they fixed it, I'm not sure. You get what you pay for. That router has sonicwall features but yet costs 150 vs 1500.