[Q] Recommendation for VPN Server for home use

[lanwarrior]

I am looking of hosting my own VPN server at home and I am wondering if there is an app or cheap appliance that anyone can recommend.

My setup and requirements are as follow:

1). VPN setup
- PPTP or L2TP (preferable)
- Can run on Windows 7

2). VPN Client
- Need to be able to connect from Mac, Windows (XP and 7), iPhone and Android without requiring client software install, since all of these have built-in VPN support

3). My server
- Windows 7 Home running 24x7
- 8GB of RAM
- 180GB SSD
- Currently running VMWare with Win7 - used for my sandbox

4). My Internet
- AT&T U-verse with 18Mbps down and 3 Mbps up
- Netgear router WNDR3300 with DD-WRT

[Nose Nuggets]

What are you trying to accomplish with this VPN connection? Do you just want access to the server box?

[lanwarrior]

There are 2 purposes:

1). Ability to securely access the server to grab files, control home PC (via RDP) and IP-Cameras

2). Provide secure transmission when connecting to public network (hotel, airport, etc)

I know there are separate solutions to achieve some of the above, such as using LogMeIn to control home PC or using DropBox for accessing files. However, by creating a secure tunnel, I only have to manage one thing (VPN Server).

[Nose Nuggets]

you can do everything in point 1 with just RDP

for point 2, you want to be able to connect to a public network and then direct all internet traffic through your home internet connection over VPN? This dosnt provide any real protection, and all data is still routed to your home internet's public IP, which is traceable. if you wanted anonymity you would need a SSL vpn service that is not linked to you directly, like VyperVPN or the like.

[ibanezfoo]

Any cheap router with DDWRT can run a simple VPN.

[lanwarrior]

With RDP, AFAIK the connection will not be secure, isn't it?

My understanding is that VPN (PPTP or L2TP) will encrypt the connection so that it will prevent (or at least minimize) traffic snooping such as FireSheep. I don't mind about IP traceability.

My vision is to have something like this:
1). Fire up the VPN client - establish secure encrypted connection (PPTP or L2TP)
2). Once connected via VPN, I am basically connected to my entire home network, just as if I am connecting to my home network via Wifi

I looked at VyperVPN, but I am hoping for something that is free (no monthly fee).

[lanwarrior]

Any cheap router with DDWRT can run a simple VPN.

Hmmm, I'll try that. My router is a Netgear WNDR3300 and the DD-WRT firmware has not been stable for this router (there are tons of post on these in DD-WRT website), so I have to check if the build I use support VPN.

[Nose Nuggets]

With RDP, AFAIK the connection will not be secure, isn't it?

My understanding is that VPN (PPTP or L2TP) will encrypt the connection so that it will prevent (or at least minimize) traffic snooping such as FireSheep. I don't mind about IP traceability.

My vision is to have something like this:
1). Fire up the VPN client - establish secure encrypted connection (PPTP or L2TP)
2). Once connected via VPN, I am basically connected to my entire home network, just as if I am connecting to my home network via Wifi

I looked at VyperVPN, but I am hoping for something that is free (no monthly fee).

VyperVPN was a suggestion if IP tracing was something you were trying to avoid.

here is an overview of what is not 128bit encrypted on RDP

http://support.microsoft.com/default.aspx?scid=kb;en-us;275727&FR=1&PA=1&SD=HSCH

A vpn connection would essentially put your machine on your home network when you are outside of the physical network. A lot of home wireless routers have a built in VPN you can configure. Outside of that, i always have used windows server. i dont have enough experience with other 3rd party VPN server solutions to recommend one.

[ibanezfoo]

Hmmm, I'll try that. My router is a Netgear WNDR3300 and the DD-WRT firmware has not been stable for this router (there are tons of post on these in DD-WRT website), so I have to check if the build I use support VPN.

Hmm, could be an issue. I have the 3700 and the firmware was not very stable on it either.

What about something simple like Team Viewer, or do you need to access more than one thing on your network?

Might be able to pick up a cheap Netscreen NS5 firewall off ebay.

[Coded-Dude]

the buffalo routers are great for quick plug and play PPTP VPN access.........you don't need a client as windows has a built in VPN client that works pretty well.

amazon

The cheaper the box the slower the CPU, so if you plan on doing a lot of VPN processing, you may want to get one of the higher end models.

We have a small company and everybody works from home, and this is the solutions I set up. It's worked pretty damn well so far.

Alternatively if you want to spend a little extra look into the Buffalo NAS devices as some of them(not all) have DDWRT built in(but you're going to spend a few hundred bucks) Although you will have all your data in one centralized location.

[ocabj]

My understanding is that VPN (PPTP or L2TP) will encrypt the connection so that it will prevent (or at least minimize) traffic snooping such as FireSheep. I don't mind about IP traceability.

Yes, your traffic will be encrypted from your client to the VPN server. I use my work VPN (Cisco ASA) all the time when on a public wifi network. Even though I use SSL for email and most web services that require auth, I need peace of mind when on an untrusted network.

[speedrrracer]

RDP is a secure protocol

Agreed with the above posters -- you've got all the hardware / software you need to run a vpn (though I'm not sure you need a vpn based on your reqs) -- DD-WRT on your router and you're done.

[brianinca]

No RDP host on "Home" versions of Windows.....that's yet another reason for Pro. That and the built-in VPN server....

Why make this complicated with some low-end router with a $0.95 wall wart that might die at any time. Let the router route, provide your services with real computers.


Regards,
Brian in CA

[the86d]

RDP does secure the connection. For added security you can use and alternate port to prevent against a cheap standard port scan (most used ports). Your provider might be blocking some ports, so port scan when they are not opened, and if they come back as functioning (and you know you didn't open them), then they are being blocked (at least on FiOS this is the case).

Make sure to check the "Drives" box and you can transfer files from within the session, providing that you mod the NTFS permissions (not really easy on Home versions) for the local folder for the drop then use \\tsclient\c from the cli, or "Run". I use it all the time.

If you FWD an alternate port from the external to internal say 8542 => 3398 you use <FQDN-hostname/ip>:8542 from the client connecting via.

Server 2000 was quick and reliable and you don't need an i7 to run it (unlike Server [2003/]2008), nor 4 GB of RAM. I am not sure I never was able to get VPN working form Slackware's cli.

I think you can even up the RDP crypto, but I can't remember how, and don't want to research when I am not the one going to do so...

[chaunbot]

Something like this https://secure.logmein.com/products/hamachi/

You can install that at work and at home and RDP to home machine ( or up to 5 home pcs's I think ) rather than managing an actual VPN server.