VPN

[EightySix Four]

We bought some software that has a multi-user liscence and can be used by multiple computers on the same lan. This software is going to need to be used from mulitple locations around the world. So here's my questions.


1. Is a VPN the solution I need to allow it to be used where ever there is a broadband connection?

if so:

2. What all hardware/software do I need to make this feasable for the cheapest I can.


and now the twist:

Both Apple Macintosh's (MacOS X) and Windows machines need to be able to connect to it.


Thx in advance for the help.

 

[Nothinman]

Without knowing how the licensing really works it's impossible to tell if you need a VPN or not.

 

[EightySix Four]

This is the software: http://www.turtlesoft.com/GSDetails/macacct.html
I really need this information....

 

[Nothinman]

I may be missing something, but I don't see on that page how they verify the licensing. Is there a license server? Does it broadcast out looking for duplicate licenses on startup? Does it verify the licenses with their website? Is there no technical verification at all, perhaps you just put in a serial number and you're good.

 

[EightySix Four]

If it did need a VPN, what all would I be looking at to do it, a server and a router, or is there an all in one box?

 

[AkumaBao]

I'd go for a OpenBSD Box for the Concentrator (Server) using ISAKMPD, and any sort of client can connect to it with any free VPN client. At least that's how I run mine, and it runs great. MD5 hashed passphrases, Certs, and Blowfish encryption.

 

[EightySix Four]

What type of hardware would you guys recomend, I don't do any server work except Games, I was thinkin a little mac might be good for the job with OS X being as capable as it is.

 

[Nothinman]

You probably don't need a VPN at all and unless you plan on using it for something else it would be a waste to go through the hassle if setting one up until you find out whether or not you really do need it.

 

[EightySix Four]

I know it has to be on the same network for it to launch properly, and a VPN is the easiest fastest way to do that at this point, at least that i know of. Also this is a planned purchase and if it does turn out that way we want to know all the associated costs.

 

[Woodie]

Basic info for a VPN setup...(which appears is the easiest solution for your application to work)

You'll need:
A Concentrator (or VPN Switch or VPN Server) device, connected to the Internet, preferably behind a firewall, with port 500 open (inbound). Usually port 10001 also (for NAT traversal). VPN is an RFC bound thing, so most clients and server can interoperate, YMMV!

Clients: Each client will need it's own OS specific client. The big vendors (Cisco, Nortel) usually provide their client software for free, and support at least a couple OSes.

So, client software shouldn't be a big deal...try a few, keep the one that's the most stable and supportable for your clients. The concentrator is where the $$ are.

So..pick a VPN switch vendor, or a free-ware version.
Free/SWAN is a linux-based VPN server software
Microsoft has one included with W2K Server and Server 2K3
BSD has one (mentioned earlier).
Hardware/appliances are available from many vendors, including Cisco, Nortel, etc...
There are many appliances available based on the *nix platforms
Some firewalls, such as Smoothwall or IPCop(?), provide VPN server capabilities as well in their "corporate" versions

Pick the switch based on it's fit into your environment, in addition to sizing the switch to the number of concurrent sessions it will need to support.

 

[EightySix Four]

Thanks, exactly what I needed to know.

 

[groovin]

fyi, free s/wan is out of development now (i think). use open s/wan instead for linux.

if u want a quick way to make an old PC into a vpn router, take alook at the m0n0wall project. www.m0n0.ch/wall

 

[bobcpg]

Get the linksys router and flash it to the Seavsoft firmware. Then use the vpn on that router.

look HERE

 

[Nothinman]

Get the linksys router and flash it to the Seavsoft firmware. Then use the vpn on that router.

Right, get a cheap-o piece of hardware and flash it with unsupported firmware for a work project, great idea...

 

[EightySix Four]

Here's the manual about how it is setup to run Multi User http://www.turtlesoft.com/GSStartManual/MUlesson1.htm Am I headed in the right direction with the VPN?

Apparently the way it works is it just needs access to the file, so I could do it without a vpn using a server and allow connections to that server to use that file, correct?

While brainstorming for cheap servers, I came up with an xbox running linux would be perfect for this. This is not a really big company doing this, the server will be run out my house in a closet, and xbox is
a. cheap
b. no hardware needed
c. plenty fast

did I mention cheap?

I can add a few fans to it and it'd be perfect, what do you guys think?

 

[Woodie]

So you're going to make this file (and therefore this application, and the server it runs on) available to anyone on the internet???

I *must* be missing something here.

 

[EightySix Four]

No, it'll be locked up, not sure how yet. And the application is installed on each computer, but the file that has to be edited has to be stored on the server itself.

 

[Woodie]

File to be stored on "the server"...but is it stored/retrieved by NFS or ftp or Windows Shares...etc.... meaning you have to provide a (network) path to get to the server, on the appropriate ports. VPN is a safe solution, and it *may* be overkill, but I doubt it. What's really nice about it, is that once you have it set up, they can get to the next application, and the next, and the next. It's a scalable solution.

It's never appropriate to put make a Windows Server share available to the internet (although I've seen it done, and even gone onto someone else's computer who did that, to leave him a note to STOP DOING THAT!!!!) LOL