Navigation

    Netgate Discussion Forum
    • Register
    • Login
    • Search
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search

    Setup in non-critical environment

    IPsec
    2
    5
    543
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • M
      mrcola last edited by

      Hi I am using site-to-site IPsec VPN to make my place connected to my parents' place. Both side use PPPoE connections with dynamic IPs and DDNS

      I am expecting the IPs will be changed somehow and VPN may be dropped and reconnected. Thankfully it doesn't happen very often.

      Now I am looking for a combination of setup which will utilize low resources and can be reconnected really quickly if it drops

      Please advise if that makes sense to you

      Thank you

      Regards RW

      1 Reply Last reply Reply Quote 0
      • Derelict
        Derelict LAYER 8 Netgate last edited by

        Why IPsec? And please define "really quickly"…

        OpenVPN should connect in a minute or two after DynDNS on the server side is updated and the DNS record TTL has expired.

        Chattanooga, Tennessee, USA
        The pfSense Book is free of charge!
        DO NOT set a source port in a port forward or firewall rule unless you KNOW you need it!
        Do Not Chat For Help! NO_WAN_EGRESS(TM)

        1 Reply Last reply Reply Quote 0
        • M
          mrcola last edited by

          @Derelict:

          Why IPsec? And please define "really quickly"…

          OpenVPN should connect in a minute or two after DynDNS on the server side is updated and the DNS record TTL has expired.

          You are right, OpenVPN is a better choice. however I would like to try to see if IPsec can do what I want.

          Let me re-phrase, what combination of setup will make IPsec care the least of security but the quickest

          Thank you

          1 Reply Last reply Reply Quote 0
          • Derelict
            Derelict LAYER 8 Netgate last edited by

            Huh? Quickest at what?

            Chattanooga, Tennessee, USA
            The pfSense Book is free of charge!
            DO NOT set a source port in a port forward or firewall rule unless you KNOW you need it!
            Do Not Chat For Help! NO_WAN_EGRESS(TM)

            1 Reply Last reply Reply Quote 0
            • M
              mrcola last edited by

              syncing, encryption and decryption

              1 Reply Last reply Reply Quote 0
              • First post
                Last post