wireless router and VPN server

Hello,

I am looking for a cheap wireless router that could be setup as a VPN
server for DSL cable broadband (Virgin in UK). Any suggestion?

Regards

"mans" <(myname_here)_(E-Mail Removed)> hath wroth:

> I am looking for a cheap wireless router that could be setup as a VPN
>server for DSL cable broadband (Virgin in UK). Any suggestion?

What kind of VPN server? PPTP, IPSec, L2TP, or proprietary.

I've been using DD-WRT firmware on various supported routers:
<http://www.dd-wrt.com/wiki/index.php/Supported_Devices>
with PPTP. I mostly use it between two routers to form a common
network, but also for logging in from remote locations:
<http://www.dd-wrt.com/wiki/index.php/Static_PPTP_VPN_Client>
<http://www.dd-wrt.com/wiki/index.php/PPTP_Server_Configuration>
Configuration can be fairly trivial, or can be seriously ugly
depending on what you want to do.

Cheap would be about $50-$70 retail for the router. The new firmware
is free.

--
Jeff Liebermann (E-Mail Removed)
150 Felker St #D http://www.LearnByDestroying.com
Santa Cruz CA 95060 http://802.11junk.com
Skype: JeffLiebermann AE6KS 831-336-2558

On Tue, 14 Aug 2007 10:26:21 -0700, Jeff Liebermann <(E-Mail Removed)>
wrote in <(E-Mail Removed)>:

>I've been using DD-WRT firmware on various supported routers:
><http://www.dd-wrt.com/wiki/index.php/Supported_Devices>
>with PPTP. I mostly use it between two routers to form a common
>network, but also for logging in from remote locations:
>...

PPTP is seriously flawed and shouldn't be used if possible.
Use OpenVPN (SSL based) or IPSec instead. See:
* http://www.schneier.com/pptp-faq.html
* http://asleap.sourceforge.net/
* http://pptpclient.sourceforge.net/pr...security.phtml

--
Best regards, FAQ for Wireless Internet: <http://Wireless.wikia.com>
John Navas FAQ for Wi-Fi: <http://wireless.wikia.com/wiki/Wi-Fi>
Wi-Fi How To: <http://wireless.wikia.com/wiki/Wi-Fi_HowTo>
Fixes to Wi-Fi Problems: <http://wireless.wikia.com/wiki/Wi-Fi_Fixes>

John Navas <(E-Mail Removed)> hath wroth:

>On Tue, 14 Aug 2007 10:26:21 -0700, Jeff Liebermann <(E-Mail Removed)>
>wrote in <(E-Mail Removed)>:
>
>>I've been using DD-WRT firmware on various supported routers:
>><http://www.dd-wrt.com/wiki/index.php/Supported_Devices>
>>with PPTP. I mostly use it between two routers to form a common
>>network, but also for logging in from remote locations:
>>...
>
>PPTP is seriously flawed and shouldn't be used if possible.
>Use OpenVPN (SSL based) or IPSec instead. See:
>* http://www.schneier.com/pptp-faq.html
>* http://asleap.sourceforge.net/
>* http://pptpclient.sourceforge.net/pr...security.phtml

Y'er right, but PPTP is good enough for my tinkering. To break into
my router to router PPTP VPN, one would need to sniff the traffic,
capture MSCHAP tokens, and decrypt the 128 bit encryption in one's
spare time. That can be done, but not easily, as none of the link is
wireless. It's also fairly tedious.

What I should have suggested is the VPN version of DD-WRT, which
includes OpenVPN:
<http://www.dd-wrt.com/wiki/index.php/OpenVPN>
I must admit that I've only tried this version once, and then only
briefly. (Yet another project).

--
Jeff Liebermann (E-Mail Removed)
150 Felker St #D http://www.LearnByDestroying.com
Santa Cruz CA 95060 http://802.11junk.com
Skype: JeffLiebermann AE6KS 831-336-2558

On Tue, 14 Aug 2007 11:43:42 -0700, Jeff Liebermann <(E-Mail Removed)>
wrote in <(E-Mail Removed)>:

>John Navas <(E-Mail Removed)> hath wroth:

>>PPTP is seriously flawed and shouldn't be used if possible.
>>Use OpenVPN (SSL based) or IPSec instead. See:
>>* http://www.schneier.com/pptp-faq.html
>>* http://asleap.sourceforge.net/
>>* http://pptpclient.sourceforge.net/pr...security.phtml
>
>Y'er right, but PPTP is good enough for my tinkering. To break into
>my router to router PPTP VPN, one would need to sniff the traffic,
>capture MSCHAP tokens, and decrypt the 128 bit encryption in one's
>spare time. That can be done, but not easily, as none of the link is
>wireless. It's also fairly tedious.

Dangerous assumption -- today's tedious often becomes tomorrow's easy
and fast, and you really have no way of knowing that tomorrow hasn't
already happened.

>What I should have suggested is the VPN version of DD-WRT, which
>includes OpenVPN:

Yep.

--
Best regards, FAQ for Wireless Internet: <http://Wireless.wikia.com>
John Navas FAQ for Wi-Fi: <http://wireless.wikia.com/wiki/Wi-Fi>
Wi-Fi How To: <http://wireless.wikia.com/wiki/Wi-Fi_HowTo>
Fixes to Wi-Fi Problems: <http://wireless.wikia.com/wiki/Wi-Fi_Fixes>