Great info, I'll check it out, thanks!
--
Thomas Cameron, RHCE, CNE, MCSE, MCT
Cameron Technical Services, Inc.
http://www.camerontech.com/
(512) 454-3200
----- Original Message ----- 
From: "Robert Ambrose" <rna@muttsoft.com>
To: <plug-discuss@lists.plug.phoenix.az.us>
Sent: Thursday, August 21, 2003 7:02 PM
Subject: Re: Looking for a good VPN solution


>
> There is a variant of FreeS/WAN called SuperFreeSwan.  I'm using it at
> several of my customer's sites and it works very well.  I also use it to
> secure my 802.11 network.  They are using both Linux <-> Linux
> configurations (for LAN to LAN VPNs) and Windows <-> Linux (for Road
> Warriors) using SSH Sentinel.
>
> The main detail is in order to allow dynamic IP clients, X.509 certificate
> authentication should be used.
>
> One of the really handy features is that I use the same IP address on my
> laptop when it is connected via wireline, wireless or external (like at a
> customer's site).  The clients also work from behind a NAT'ed firewall
> (again, as when I'm onsite).  I can actually unplug the Ethernet PCMCIA
> card and plug in the 802.11 card, and the established connections continue
> to work.
>
> rna
>
> On Thu, 21 Aug 2003, Thomas Cameron wrote:
>
> > All -
> >
> > I have a client who has three offices.  The main one has static IP
> > addresses.  The two others have dynamic IP addresses (RoadRunner).  I
need
> > all three to be able to access resources on each of the other networks.
We
> > are currently using Windows 2000 PPTP tunnels and not liking it at all.
> >
> > I am looking at NetGear VPN routers, but I can't get a clear answer as
to
> > whether they would allow the two dynamically addressed sites to see each
> > other.
> >
> > I see the $50 PCs at Discount Electronics, and I am thinking a FreeS/WAN
> > solution might be the way to go.  However, I've never used FreeS/WAN
before
> > and the preliminary look I've taken isn't reassuring.
> >
> > Any VPN gurus out there who have done anything like this before and can
make
> > recommendations?  I need something which will be easy to set up and
> > maintain, which is why the NetGear solution looks pretty good.
> >
> > Thanks,
> > Thomas
> >
> > ---------------------------------------------------
> > PLUG-discuss mailing list - PLUG-discuss@lists.plug.phoenix.az.us
> > To subscribe, unsubscribe, or to change  you mail settings:
> > http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss
> >
>
>
> ---------------------------------------------------
> PLUG-discuss mailing list - PLUG-discuss@lists.plug.phoenix.az.us
> To subscribe, unsubscribe, or to change  you mail settings:
> http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss
>