I have been wanting to setup a secure VPN solution on my home network for a while now. Also, one of my "company goals" this year was to evaluate a secure corporate VPN solution for my company. I figured, why not kill two birds with one stone!
So I started looking around at all sorts of options. The first one I tried was called Adito, which is a web-based SSL VPN server based on the old Open Source version of SSL-Explorer that is now no longer free. Adito wasn't really what I was looking for though, as it was more like a Citrix Webapps server. You login to a web page that has plugins that allow you to access your network resources through it. I wanted something a little more transparent, that gave you the feeling that you were literally jacked in at your home or office.Enter OpenVPN. OpenVPN allowed me to connect into my home network using a secure SSL tunnel, and access network resources from outside the network. I could RDP, or SSH into my other computers. I could browse network file shares. You name it!
Here is a description of OpenVPN from their website:
OpenVPN is a full-featured open source SSL VPN solution that accommodates a wide range of configurations, including remote access, site-to-site VPNs, Wi-Fi security, and enterprise-scale remote access solutions with load balancing, failover, and fine-grained access-controls. Starting with the fundamental premise that complexity is the enemy of security, OpenVPN offers a cost-effective, lightweight alternative to other VPN technologies that is well-targeted for the SME and enterprise markets.
If you want to set it up for yourself, there are many tutorials out there. I for one, have it running on Windows 2000 server, and I used this tutorial to set it up: (Win2k OpenVPN). I chose that method because it was the easiest way to do it.
You can also run it on Linux as well. I found this tutorial for running it on Ubuntu, but I found the routing part a little difficult to get working. (Ubuntu OpenVPN Tutorial)
Installation is really easy too. For Windows (Client and Server) you can install the OpenVPN Gui. For Ubuntu, you just run:
sudo apt-get install openvpn
If you are looking for a way to tie OpenVPN into your Active Directory, I found this tutorial on authenticating OpenVPN with AD.
What VPN solution do you use? Do you have a favorite that is easier, or more secure that OpenVPN? Let me know in the comments.