21 Feb
2019
21 Feb
'19
3:40 p.m.
It will be more difficult and painful to support both IPIP and
OpenVPN.
Since this is a new installation, requiring the users to use OpenVPN
or equivalent software is probably a better idea. IPIP is a legacy
protocol, not secure, and not easy to administrate. You should not
use it if you don't absolutely have to.
If you *do* have to use IPIP, you should talk to someone who is
already doing this. I think PE1CHL Rob may be able to offer advice,
if he has time. I suspect you will have to build your own tools to
manage the IPIP configuration at the server.
OpenVPN will deal with dynamic client addresses.
Since each home gateway will get a small piece of the subnet, routing
is automatic and handled by the OpenVPN server.
There is other VPN server software than OpenVPN. Perhaps you would
prefer one of them.
- Brian
On Thu, Feb 21, 2019 at 03:27:21PM +0000, R P via 44Net wrote:
Thank U Brian
What system in the data center will deal the problem of the end users gateways that uses
Dynamic IP that do IPIP to it ? (like UCSD deal with it today )and spread the updated
routing tables ?
Part of the users probably use VPN and with that the IP address change is not a problem
but part of them also will use IPIP ...