next »

[nutballs]

Sort of. Pf would be the only vm. The stick would maybe have some tools like putty but not really anything else. The main reason is to maintain cert based security, instead of a password based VPN. Passwords freak me out

I suppose the idea of a bootable os on a stick makes sense, but... That only works IF the machine supports USB boot. And you would be suprised how often I am at a place with a non bootable USB machine.

This would all be moot if the iPhone could do cert based auth VPN with ipcop. Not sure about pf sense.

[perkiset]

Oooh Oooh! Completely forgot about the iPhone!

Well, PPTP would be easier I think via pfSense, but as a simple test, I went Googling about and found this, which looks most interesting:

http://www.networkworld.com/community/node/30484

I haven't the time ATM, but I think I will play with that mechanism to see if I can put together an IPSec roadwarrior for the iPhone and IPCop. That and tethering would make for an interesting toolset.

[perkiset]

Ooooh check these out:

http://www.yawarra.com.au/
http://www.yawarra.com.au/catalogue.php
http://www.yawarra.com.au/product.php?productCode=HW-AX23

$385 for a PEO powered, 3NIC pre-pfSense installed little box, all in. That just sounds really sweet.

[nutballs]

tempting...

i wonder if there is a build-it-yourself cheaper kit somewhere?

[perkiset]

I saw a few when I was traveling about, but I'm kind of interested in not having to phuque with the machine. Let's say I could get a kit for $250. So I say $80 - unless I can build the machine in what, like 20 minutes, I'm upside down on the cost of time. Personally I'd rather just say "Can I have it all done please?" - especially for that rate.

But, here's the thread at the ipcops board that I started to ask that very question - some interesting answers / links you will certainly like:
http://www.ipcops.com/phpbb3/viewtopic.php?f=16&t=13216

Worth a peek.

[nutballs]

i just found that PFsense has a list of vendors.

these guys look interesting:  http://www.netgate.com/index.php?cPath=60_85&page=1&sort=4a

in particular this one:  http://www.netgate.com/product_info.php?cPath=60_85&products_id=209
    * ALIX.2D3 System Board with
          o 500 MHz AMD Geode LX800 CPU
          o 3 10/100 Ethernet ports (VIA VT6105M 10/100)
          o 1 miniPCI slot for future expansion (VPN Acceleration, wireless, etc.)
          o 2 USB ports
          o 256 MB DDR DRAM
    * Aluminum ALIX case with Ethernet, USB and antenna cutouts
    * 1GB Sandisk CF Card pre-loaded with m0n0wall or pfSense
    * US Plug Style 120 VAC/DC 15V 1.25A 18W Switching Power Supply
    * Assembled and tested

for $204

[perkiset]

Nice one NBs.

I'm afraid that my long-standing IPCop relationship is in danger. More looks at pfSense are turning my head.

[nutballs]

im really tempted...

get two of them. 1 for rack, 1 for home, add a wifi kit to the home one, and done!

looks like about $470 for that.

[perkiset]

Zactly.

The challenge for me is I have several in-place IPCoppers and I'd need to make sure that I could VPN into them from pfSense, because I don't want to convert my entire network all at once.

I'd IMAGINE that this is no problem, but I'm going to take it slow and see.