Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

We have a need to setup site to site vpn's with several different clients (could be up to 100). The client endpoints have several different models and vendors appliances and we won't be able to dictate any software/hardware on their end. Our cloud provider has suggested us using an OpenSwan Linux server to accomplish this on our end. We have started setting up the first couple of these and have not had great results and we are a little nervous in proceeding in this direction. Does anyone have any experience with this to make us feel this is a good direction?

share|improve this question

I think you will struggle to find a single backend solution to service such a wide variety of clients. The range of possible VPN configurations is very wide and not all implementations of the various protocols involved are always 100% compatible with the standards.

I would suggest to publish a "suggested" or "preferred" VPN configuration or a small set of these, after you have been able to confirm through tests that these actually work across multiple devices.

share|improve this answer
Agreed. With IPSec you can get close, but even then, you'll find many different implementations, some of which are incompatible. – EEAA Jul 7 '11 at 14:34

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.