Greetings,
A newbie having an ERLite-3 at home, I seek recommandations on which type of VPN (IPSec, OpenVPN) and certificates to use in order to setup a site to site VPN between a small branch office and the main campus of our small university.
The branch office has a 30Mbps Internet access for the 4 employees, no local server, and all of its trafic is to be hauled back to the main campus, and I thought about buying a pair of ERLite-3. I would love to optimize HW offload on the ERLite-3 so bandwidth could be later increased moderately (say, to 50 or 100Mbps if feasible).
I plan to use firmware v1.9.0 on the two ERLite-3, unless otherwise advised. Don't know yet whether I should use TAP or TUN VPN interfaces. The branch ERLite-3 may also run a DHCP server and the firewall.
So, can you point me in the right direction and offer some pointers and advices for what is a secure, efficient site to site VPN implementation to run on the latest release of the ERLite-3 FW ?
Cheers !