Open vpn multiple site to site S2S vs SSL/TLS

yaboc · Sep 4, 2015, 8:31 PM

currently i'm using IPSEC for site to site (10 tunnels) but I saw a faster performance when I tried to switch one over to OpenVPN (P2P shared key).

If i need to add more OpenVPN S2S can i continue using shared key and just add clients at the rest of the locations connecting to the main site? Or create a new server for each client ? Or do i need to switch to P2P SSL\TLS for openVPN multisite ?

When I tried to just add more clients connecting to the site using SharedKey connections weren't that stable.

Can someone shed some light on how to approach this ?

Thank you,

y

jimp · Sep 10, 2015, 2:27 PM

Shared Key is 1:1 – One client to one Server

SSL/TLS can work either way. If you want only one server process and multiple clients, it must be SSL/TLS.

That style of setup is explained at https://doc.pfsense.org/index.php/OpenVPN_Site-to-Site_PKI_%28SSL%29 -- be careful to follow everything, especially the parts about client specific overrides and iroutes.

yaboc · Sep 11, 2015, 7:16 PM

thanks jimp. i will go with SSL/TLS method. appreciate the link.