Have recently done some experimenting with the Cyberoam PPTP VPN for road warrior connections. We were having a LOT of instability issues with L2TP VPN. The biggest reason for using L2TP is security as it encrypts all traffic, but if your user’s apps and everything are encrypted anyway, this can cause a bottleneck.
Another issue that comes up with Cyberoam L2TP VPN is that it’s not easy to use their Windows Domain login, or even LDAP login so far as I’ve tested. This isn’t a problem with any OS before Windows 7, but Windows 7 doesn’t always send the correct credentials to the domain. This will cause password dialog boxes to pop up all over the place, many times for no reason.
Set Up Cyberoam PPTP VPN
I have run PPTP and L2TP VPN at the same time but never had much chance to see if they didn’t conflict with each other if people are connecting to both. I think as long as the IP addresses it gives out are different it’s likely not a problem.
Step 1 – Go to the VPN section in the GUI and Click on PPTP. Fill in the form. You’ll want to select a LAN port for the local IP address. You will also need to provide an IP address range, these need to be IP addresses on your local network that won’t be used for anything else.
Fill in your local DNS servers here, not your ISP’s so your users can get access to things on the local network easier.
Step 2 – Go ahead and click OK and then click “Add Members” and select which users you want to be able to use the PPTP VPN connection. These CAN be Windows users from AD. It works fine.
Step 3 – Set up your VPN client. I ran the VPN wizard in windows Vista and the only thing I had to change in the settings to get this to work right was I selected “Optional Encryption” under the security settings. I also made sure the “Unencrypted password (PAP)” was selected under the “Allow these protocols” section at the bottom.
Keep in mind this method will not encrypt traffic. So you may be blasting login information over the internet. This is a good method to use if you need to connect to already secure services on your network. If it’s encrypted on your LAN it’s encrypted over your PPTP connection too.
Personally I would only use this for a highly locked down username with no access to anything but local network. This is also not a terrible way to connect back to your phone system for VOIP service.