cheap point-to-point VPN appliance?

[alfonsmeier]

Hello,

I'm searching for a very cheap point-to-point VPN/router hardware which pretty much works plug and play. While at one site the appliance must be reliable but a very cheap solution - best would be a very little box -, for the other site it could be a CISCO appliance as it will have to manage many of those little vpn boxes.

Does any one know of such little VPN/router appliances? Weight is here on the VPN functionality, not a routing monster.

Thank you very much.

Best Regards,
Alfons Meier

 

[CaptainSTX]

The problem is that a reasonably fast VPN connection requires a powerful processor and lots of memory and that isn't usually cheap.

If speed isn't that important buy some old Linksys 54G routers V4 or older and flash them with DD-WRT and install the VPN client on them. You can buy 54Gs with DD-WRT installed for $30 - $35 on e-Bay.

 

[alfonsmeier]

Hello,

thanks for your insights. To clarify a bit more from my side, it's only for management purposes, therefore hi-speed transfer is not necessary. If the appliance is able to do 20mbit, that's great.

On the other hand, I need a hardware product which is actual and available in a certain quantity, so not from ebay. As I might need to purchase a few throughout the year, so must be a standard.

Thanks for any more tips and hints.

Best Regards,
Alfons Meier

 

[Dreamslacker]

It rather depends on what your idea of cheap is.

If you have a GLP with Cisco or are an IT vendor, you can get ISR-881 K9 for very low cost (should be < US$300).

If you need something really cheap then I suppose the Ubiquiti Edgemax Lite would be your best bet. The caveat being that the VPN offload is only for AES on IPSEC.

 

[stig]

If you need something really cheap then I suppose the Ubiquiti Edgemax Lite would be your best bet. The caveat being that the VPN offload is only for AES on IPSEC.

AES128, AES256, and 3DES. I believe the hashing for sha1 and md5 are also offloaded. This posting shows a user getting 111Mb/sec from his Edgerouter Lite - http://blog.linitx.com/ubiquiti-edgerouter-performance-testing Others have reported over 200Mb/s.

 

[Dreamslacker]

AES128, AES256, and 3DES. I believe the hashing for sha1 and md5 are also offloaded. This posting shows a user getting 111Mb/sec from his Edgerouter Lite - http://blog.linitx.com/ubiquiti-edgerouter-performance-testing Others have reported over 200Mb/s.

Seems like it. I meant to say that the offloading is only for IPSEC at the moment and doesn't extend to other tunnelling like OpenVPN. However, if he's using an ASA as a concentrator then IPSEC is pretty much the way to go.