Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I'm trying to set up a fully redundant OpenVPN tunnel, with two routers on each side.

All the tutorials I saw (such as http://dev.vyatta4people.org/highly-available-openvpn-connection-between-two-offices/) mention a site-to-site setting, which doesn't seem to work with OpenVPN on a Linux server (which seems to always require a server and a client).

How can I achieve a similar setup using Linux servers?

share|improve this question

1 Answer 1

up vote 2 down vote accepted

I know it doesn't immediately answer your question, but I'd go for ipsec for site-to-site VPNs. I've been running it between Linux endpoints in production for over a decade, and it's never let me down.

In my experience, it deals much better with temporary failures in the sites' internet connections, lacking as it does any view of one end being a server and the other end being the one to bring the connection up and down; instead, both ends are peers, and either can initiate, terminate, and re-key connections as it sees fit.

It also deals much better with the geometry issue when you add a third site.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.