There is a variant of FreeS/WAN called SuperFreeSwan.  I'm using it at
several of my customer's sites and it works very well.  I also use it to
secure my 802.11 network.  They are using both Linux <-> Linux
configurations (for LAN to LAN VPNs) and Windows <-> Linux (for Road
Warriors) using SSH Sentinel.

The main detail is in order to allow dynamic IP clients, X.509 certificate
authentication should be used.

One of the really handy features is that I use the same IP address on my
laptop when it is connected via wireline, wireless or external (like at a
customer's site).  The clients also work from behind a NAT'ed firewall
(again, as when I'm onsite).  I can actually unplug the Ethernet PCMCIA
card and plug in the 802.11 card, and the established connections continue
to work.

rna

On Thu, 21 Aug 2003, Thomas Cameron wrote:

> All -
> 
> I have a client who has three offices.  The main one has static IP
> addresses.  The two others have dynamic IP addresses (RoadRunner).  I need
> all three to be able to access resources on each of the other networks.  We
> are currently using Windows 2000 PPTP tunnels and not liking it at all.
> 
> I am looking at NetGear VPN routers, but I can't get a clear answer as to
> whether they would allow the two dynamically addressed sites to see each
> other.
> 
> I see the $50 PCs at Discount Electronics, and I am thinking a FreeS/WAN
> solution might be the way to go.  However, I've never used FreeS/WAN before
> and the preliminary look I've taken isn't reassuring.
> 
> Any VPN gurus out there who have done anything like this before and can make
> recommendations?  I need something which will be easy to set up and
> maintain, which is why the NetGear solution looks pretty good.
> 
> Thanks,
> Thomas
> 
> ---------------------------------------------------
> PLUG-discuss mailing list - PLUG-discuss@lists.plug.phoenix.az.us
> To subscribe, unsubscribe, or to change  you mail settings:
> http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss
>