<html><head><meta http-equiv="Content-Type" content="text/html charset=windows-1252"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">Good afternoon Hao,<div><br></div><div>I think it's pretty nice Openstack guys to have selected OpenVPN as cloudpipe vpn server… basically unless IMHO it's of the best vpn servers… I would trust on it for securing any connection…. have you ever played with it??</div><div><br></div><div>Regards,</div><div><br><div><div><div>El 23/10/2012, a las 02:06, Hao Wang <<a href="mailto:hao.1.wang@gmail.com">hao.1.wang@gmail.com</a>> escribió:</div><br class="Apple-interchange-newline"><blockquote type="cite"><span style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:13px;background-color:rgb(255,255,255)">Hi guys,</span><div style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:13px;background-color:rgb(255,255,255)">
<br></div><div style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:13px;background-color:rgb(255,255,255)">I didn't see the mail after I sent it out. This may be lost somewhere in the mailgroup before.</div>
<div style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:13px;background-color:rgb(255,255,255)"><br></div><div style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:13px;background-color:rgb(255,255,255)">
I've noticed there is a discussion regarding if the community should purchase public MAC OUI to provide vpn service incase the private sites have the default MAC assignments. I googled but didn't reach out any useful material to address my concern. Have you got the similar question ever on your mind? </div>
<div style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:13px;background-color:rgb(255,255,255)"><br></div><div style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:13px;background-color:rgb(255,255,255)">
First, why we use openvpn? I know it's kind of arch question, like how to choose a right opensource software. On the other way, please let me know your point why we don't choose IPSEC or other VPNs.</div><div style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:13px;background-color:rgb(255,255,255)">
<br></div><div style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:13px;background-color:rgb(255,255,255)">Secondly, what the scenario is it to avoid assigning the default MAC addresses? Is it site-to-site or for an alone PC to access back to private LAN?</div>
<div style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:13px;background-color:rgb(255,255,255)"><br></div><div style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:13px;background-color:rgb(255,255,255)">
Thirdly, if default MAC assignment only influences L2 VPN in terms of site-to-site access, what about IPSEC or SSL VPN? To my understanding, the packets unencapped at the edge of destination network, they are going to face the similar issue no mather what kind of VPN is, source and dest MAC addresses are on the same network and it makes network devices confused.</div>
<div style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:13px;background-color:rgb(255,255,255)"><br></div><div style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:13px;background-color:rgb(255,255,255)">
Really appreciate your any input.</div><div style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:13px;background-color:rgb(255,255,255)"><br></div><div style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:13px;background-color:rgb(255,255,255)">
Thanks,</div><div style="color:rgb(34,34,34);font-family:arial,sans-serif;font-size:13px;background-color:rgb(255,255,255)">Howard</div>
_______________________________________________<br>Mailing list: <a href="https://launchpad.net/~openstack">https://launchpad.net/~openstack</a><br>Post to : <a href="mailto:openstack@lists.launchpad.net">openstack@lists.launchpad.net</a><br>Unsubscribe : <a href="https://launchpad.net/~openstack">https://launchpad.net/~openstack</a><br>More help : <a href="https://help.launchpad.net/ListHelp">https://help.launchpad.net/ListHelp</a><br></blockquote></div><br></div></div></body></html>