Multi-State Family Networking?

Valley Redneck asks: "The last few members of my extended family just entered the 20th century and went to broadband. Now that we're all on-line with small home LANs in place, we'd like to start sharing stuff via a VPN. The only problem is I'm the only marginally tech savvy one in the bunch, and I'd rather not have to hop a plane to configure everyone's box. Any recommendations for a broadband router that supports VPN to use on the mother-ship network that will play nice with all versions of Windows XP SP 2 (Pro, Home and Media Center) and its VPN client?"

Comments

Do it in software

[Cyberglich]

Hardware can be trickey use software Hamachi is a very easy to use very powerfull very secure and it supports windows mac and linux. www.hamachi.cc

hamachi

[schwal]

just install, and give em a password to your network. even has chat.

Cool. But why?

[peacefinder]

You may not need to bother with hardware VPN devices. There are some reasonable software solutions that can run right on the endpoint computers.

I've heard good things about Hamachi, but I haven't used it myself. I have used OpenVPN, and I love it. It's pretty simple to set up, even using certificate-based authentication and encryption. You can have everyone download and install it themselves, then you can send them configuration files.

Before you do all this, though, there's an important question to ask: Is a VPN worth the additional risks? If all the machines are in a pseudo-local network over the VPN and someone gets a worm, you could all go down together. Unless you're planning to do something which actually requires pseudo-local network access, you might be better off to make whatever you're planning to do be web-based.

Re:Cool. But why?

[ckulpa]

Check out the Security Now Podcast or transcript http://www.grc.com/securitynow.htm http://www.grc.com/sn/SN-018.htm Episode 18 and 19 is about Hamachi.

Just entered the 20th century??

[imperious_rex]

The last few members of my extended family just entered the 20th century and went to broadband.
I'm confused. Is this the 21st century, or are your kin time travelers?

Froget VPN - Go Web

[pjay_dml]

If you're the only one with technical expertise, then forget VPN completely, and think about a web based solution. Just set up a site, that only family members have access to, and provide them with web apps that fulfill your "sharing needs" (e.g. Galleria for displaying and sharing photos).

Though, no matter what you will do, I can garentee you "support-headaches", I know from experience ...

Re:Use..

[wolrahnaes]

gah, no sveasoft!

We've been through this quite a few times here, but for the benefit of those who missed the great Sveasoft debates, here's a quick summary:

1. Linksys releases GPL code for WRT54G routers
2. People start modifying this code
3. Sveasoft forms a community around a particulat "distro"
4. Sveasoft starts charging
5. Sveasoft gets pissed that people are exercising their legal right to share the GPLed software for free
6. Sveasoft cuts back on source releases, bans anyone who even mentions the GPL on their forums
7. Sveasoft stops source releases entirely for "test" versions (a.k.a. current, release is the old outdated version)
8. DD-WRT project starts as fork of last Sveasoft source releases
9. Sveasoft threatens DD-WRT, calls it a ripoff of their product
10. DD-WRT developers and community collectively laugh, continue developing and releasing both binaries and source regularly
11. Sveasoft crawls back in to a hole

Basically, don't use Sveasoft, and definately don't pay for it. They are repeat GPL violators and do not in any way support the WRT community. Use HyperWRT for basic features, DD-WRT for a fully-featured mega-distro, and OpenWRT for a top-end complete custom build.

Personally, I run DD-WRT v23 SP1 VoIP edition, and it does an excellent job of both connecting my Xbox to XLink Kai and handling QoS for my IP phones, not to mention all the neat wireless tricks.