These days we have VPN from Cisco on both client and server. It works fine, but Cisco VPN client does not support 64bit OS. Cisco is very expensive when it comes to AnyWhere (SSL based) etc.
We need the GROUP function so we can give our customers different dhcp pools based on the group they use.
Are there any other solutions that is not Cisco, and have small, simple client that works on all kind of operating systems? OpenVPN is fine, bu t it does not support different groups.
This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.
Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.
If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.
Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.
Save solutions to your questions, answers you’ve discovered through searching plus helpful articles in your personal knowledgebase for easy future access.
Access the answers to your technology questions today.
30-day free trial. Register in 60 seconds.
Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.
Try it out and discover for yourself.
30-day free trial. Register in 60 seconds.
Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.
Thanks for quick reply.
Currently a ASA5540 is the host.
I have tried cvpn client that works perfect from Ubuntu 9.10. The ncp client is only trialware.
Maybe we will replace the ASA with a Fortigate, but the VPN client on Fortigate includes antivirus and other unnecessary items.
Do you know if OpenVPN supports different groups (that is active simultaneous)? I could not find anything about it in the manual.
I am pretty sure that you can group users into groups with openvpn, based on the security certificate they have. I've not done this for a while, but I do recall about two years ago I was commissioned to install an openvpn solution, and contractors got diffrent dhcp/ip ranges that managment, and consultants.
I'm not sure if this is the type of grouping that you are thinking, but I do know it's possible. Use IRC irc.freenode.org channel #openvpn and also the openvpn mailing list - those resources will help you to solve this quickly.
I wish I could be more help, but my memory has not yet had it's caffiene injection!
*Any spelling mistakes are the result of transmission errors and in no way reflect on the mental stability of the authour of the above text*
You gotta love PC speak! :)
Cisco devices can be used together with the free Shrew VPN Client (www.shrew.net). That client is versatile to connect to "any" other device, too.
However, that AnyConnect pricing is not that expensive.
OpenVPN would support (kind of) grouping if you implement it yourself with login scripts or server-supplied config files (the client-config-dir keyword shows the options available).
Actually, you can run the Cisco IPSec VPN client on 64 bit OS. We upgraded some clients from xp to Windows 7 x64, and followed the directions in this link: http://www.microsoft.com/w
Cisco vpn client to our ASA 5510 works great, AnyConnect as well. --TX
Sorry, that link lists all kinds of stuff. Check out the videos on Windows XP mode and the one about installing apps. Someting in there says that this isn't supported on x64, but I did it anyway and it's worked fine since Windows 7 was first out in Beta, we haven't had any issues at all with it. --TX
It seems like Cisco released a final x64 client for Windows XP/Vista/7 some month ago.
vpnclient-winx64-msi-5.0.0
Release notes: http://www.cisco.com/en/US
Thanks for the tips guys!
I think the best summary is that there are several client solutions - free and commercial. I think the main clients the user wants to look at are Cisco, Shrewsoft and NCP. NCP being the most professional and robust of all but also the most expensive. Cisco and Shrewsoft are unstable and look&feel as well as usability are poor IMHO. I guess you get what you pay for.
Business Accounts
Answer for Membership
by: ikalmarPosted on 2009-11-05 at 01:50:51ID: 25747936
Hi,
What kind of firewall do you have?
Please refer this guide:
http://www.cisco.com/en/US
or
use ncp client on 64 bit os:
http://www.experts-exchang
Best regards,
Istvan