VPn Options: stunnel or openvpn or l2tp/ipsec

Joined
May 26, 2016
Messages
11
Reaction score
0
Hello,

I've been reading all i can from this forum on different options of securing remote viewing for blue iris. I'm hoping someone could point me in the right direction of either for or against openvpn, stunnel, or the easiest to setup, using l2tp/ipsec .

My router tp-link archer c9 supports pptp, ipsec, and l2tp passthrough. Nayr mentioned this in one the threads to consider.

https://www.ipcamtalk.com/showthread.php/10040-Connecting-from-external-network?highlight=openvpn




anything you could install DD-WRT, OpenWRT, Tomato would do it.. PPPTP w/IPSec clients are already built into

Windows/OSX/iOS/Android/Linux.. I prefer it to OpenVPN, no apps needed.

Its built into more consumer grade routers today than its not, its going to be defacto for any small business routers and

up... check the spec sheets.

My router archer c9 that is compatible with dd-wrt and the most stable version from the thread is r28598. There is a youtube video on how to do this specifically for version v1. But i am hesitant to re-enter all my ip reservations, devices, macs, etc. Plus there is a chance i could brick it.

https://www.ipcamtalk.com/showthread.php/1143-Network-Security-Primer?highlight=openvpn from the primer it seems openvpn is the ideal choice.

But i saw people mention stunnel as well.

https://www.ipcamtalk.com/showthread.php/2131-stunnel?highlight=tcp+port this seems easier to setup but from reading on the internet it doesnt have logging.

I quickly dropped stunnel because its setup is nontrivial compared to the other two (no logging, no init file...)

http://blog.backslasher.net/ssh-openvpn-tunneling.html



I am on the fence as stunnel seems easy to setup but openvpn on the router seems more secure at the gateway. Would either work well if i plan to seperate the network using a vlan?

Thank you for your advice!
 

nayr

IPCT Contributor
Joined
Jul 16, 2014
Messages
9,329
Reaction score
5,325
Location
Denver, CO
l2tp/ipsec or openvpn will be adequate, shouldn't be a problem w/vlan.. if you already have l2tp/ipsec avilable in your router then set it up..
 
Top