vpn on vSwitch

[darkdragon001]

I want to connect different Servers over internet like they were in one physical network. I think VPN is a good solution.

So my question:

Like you can add a port group for VMs, is it possible to add another port group via VPN?

If not, do you plan to add this? I would really like this and I think that many companies will find this very useful.

I think it's a bit complicated and not very resource friendly to add a VM on which you install a VPN server and so on...

Or are there already other alternatives?

[weinstein5]

I do not think you will see this built in to the virtual switch but there is a way to do this by utlizing a virtual firewall and set up a site to site vpn using these virtualized firewalls allowing you to securely to link one set vms to the other

If you find this or any other answer useful please consider awarding points by marking the answer correct or helpful

[darkdragon001]

Thanks for your reply.

But why do you think vmware will never add this?

These firewalls are VMs which just don't need much resources?

Do you have any experience with these firewalls? Can you suggest me a good one? Or can you tell me those I should never use?

[weinstein5]

I do not htink they will do it because it is going to add a layer of complexity - your might see it coming form Cisco and their Nexus 1000v switch -

FOr the software I have had good luck with IPcop - http://sourceforge.net/apps/trac/ipcop/wiki/Documentation

If you find this or any other answer useful please consider awarding points by marking the answer correct or helpful

[darkdragon001]

Did you install it yourself? When yes with OS did you use?

Or did you use a preinstalled VM like: http://www.vmware.com/appliances/directory/391 ?

[golddiggie]

Depending on what you're looking to do, you could also opt for something much simpler. On test (or home) labs, you can use RAdmin (server on the target system, such as vCenter Server, or your home computer) or set up a secure RDP connection to the target. Just be sure to ONLY run it when you know you'll need it. If you have little (or no) funds for this, then you'll be severely limited for options (RAdmin is about $30 per server license, clients are free). There are a handful of free VPN appliances in the VA Marketplace. You can also look at the software used on those, to see if there are newer releases (such as for OpenVPN or OpenOTP... It all boils down to how much work you want to put into the configuration, what you really want/need to be able to do, and if there's any kind of budget in place for the solution. I have set up an on-demand (needs to be set up while I'm at home) remote RDP connection configuration to my vCenter Server. I use it only when I'm not going to be back home within 18-24 hours of leaving. Otherwise, I can always take care of things when I get back home. Or if I know I'll want to be able to demonstrate something I have in place in my home lab, I enable the configuration/settings. I do use strong passwords, have an AD domain in place (for authentication too) and only open the port when needed (otherwise it's closed)... So far, it does what I need without going overboard.. If I end up being remote for an extended period, I'll probably have to go with something even more secure than this.

VMware VCP4

Consider awarding points for "helpful" and/or "correct" answers.

[febsa]

Hello,

I'm building a virtual firewall & VPN server and the solution thay i've selected is vyatta + openvpn.

Regards