Optimal choice for IPsec site-to-site VPN through preshared key

This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.

Optimal choice for IPsec site-to-site VPN through preshared key

This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.
Optimal choice for IPsec site-to-site VPN through preshared key
Optimal choice for IPsec site-to-site VPN through preshared key
2018-02-19 23:35:57 - last edited 2021-04-20 12:05:41
Model :

Hardware Version :

Firmware Version :

ISP :

Dear All,
asking for help with optimal choice (get lost though wide models range). Need stable router for small business - 5 hosts.

I need site-to-site IPsec VPN though pre-shared key support from router with requirements below:

IKE Policy Encryption/Authentication/Diffie-Hellman Group:
AES-256/SHA1/Group2
Phase 1 Mode: Main [/FONT]

[FONT=sans-serif]IPSec ESP Encryption/ESP Authentication: AES-256/SHA1
[/FONT]
[FONT=sans-serif]PFS enabled
[/FONT]
[FONT=sans-serif]Diffie-Hellman Group: 2

I also need firewall with at least DDoS protection and NAT with possibility to route single port from WAN to LAN (example :8888 -> :80 or :6666 -> :3389)

Thanks in advnace.
  0      
  0      
#1
Options
5 Reply
Re:Optimal choice for IPsec site-to-site VPN through preshared key
2018-02-24 15:46:58 - last edited 2021-04-20 12:05:41
Hi,I have several TL-R600VPN routers in my topology. With them I establish IPsec lan to lan VPN connections and they runs pretty well. It's a NAT router of course. For DDoS, I find a option " Block WinNuke attack". I always check this option for security issue.
  0  
  0  
#2
Options
Re:Optimal choice for IPsec site-to-site VPN through preshared key
2018-02-24 15:49:53 - last edited 2021-04-20 12:05:41

fearthebeard wrote

Hi,I have several TL-R600VPN routers in my topology. With them I establish IPsec lan to lan VPN connections and they runs pretty well. It's a NAT router of course. For DDoS, I find a option " Block WinNuke attack". I always check this option for security issue.


ps. Mine this topology has 12 clients for combination of both two sites.
  0  
  0  
#3
Options
Re:Optimal choice for IPsec site-to-site VPN through preshared key
2018-02-24 21:58:40 - last edited 2021-04-20 12:05:41
Thanks. And how about stability? I read many reports about everyday freezes and necessity to reboot reg. that model.
  0  
  0  
#4
Options
Re:Optimal choice for IPsec site-to-site VPN through preshared key
2018-02-26 11:39:00 - last edited 2021-04-20 12:05:41
I have lots of R600 v3 and a few v4. They runs well till now for me. I plan to purchase more v4 in the future.
  0  
  0  
#5
Options
Re:Optimal choice for IPsec site-to-site VPN through preshared key
2018-02-26 11:40:44 - last edited 2021-04-20 12:05:41

Lanter wrote

Thanks. And how about stability? I read many reports about everyday freezes and necessity to reboot reg. that model.

I have lots of R600 v3 and a few v4. They runs well till now for me. I plan to purchase more v4 in the future.
  0  
  0  
#6
Options