nanog mailing list archives

Re: VPN recommendations?


From: David Bass <davidbass570 () gmail com>
Date: Thu, 10 Feb 2022 13:44:58 -0500

If you want something gui driven I’d do something like Meraki…you can do
the same with just regular old Cisco routers using DMVPN as well.  It’s a
pretty common use case and well established.

On Thu, Feb 10, 2022 at 1:03 PM William Herrin <bill () herrin us> wrote:

Hi folks,

Do you have any recommendations for VPN appliances? Specifically: I need
to build a site to site VPNs at speeds between 100mpbs and 1 gbit where all
but one of the sites are behind an IPv4 NAT gateway with dynamic public IP
addresses.

Normally I'd throw OpenVPN on a couple of Linux boxes and be happy but my
customer insists on a network appliance. Site to site VPNs using IPSec and
static IP addresses on the plaintext side are a dime a dozen but traversing
NAT and dynamic IP addresses (and automatically re-establishing when the
service goes out and comes back up with different addresses) is a hard
requirement.

Thanks in advance,
Bill Herrin


--
William Herrin
bill () herrin us
<https://bill.herrin.us/>
https://bill.herrin.us/


Current thread: