7.6. The VPN on the Network
There is some debate about the best place to terminate a VPN. Part of the debate originates from the fact that there are so many devices available for VPN termination. There are three common termination points for VPNs: router, firewall, and dedicated VPN device.
Each one has advantages and disadvantages. The right method of VPN termination is largely dependent on available resources, network design, and comfort level.
7.6.1. Terminating the VPN on the Router
Terminating the VPN on the router is not very common for enterprise networks. As already demonstrated, routers have notoriously bad logging facilities, and rely on external logging sources to log information. Adding the burden of encrypting and decrypting VPN ...