PPTP and Debian

On Wed, 2003-09-10 at 13:11, elemint@cox.net wrote:
> At this piont we do not have ipsec enabled on the pix firewall. Typically there are MS clients making pptp connections, but I wanted to use Linux.
>
> So I was interested in the most straightfoward way in making a PPTP connection from my linux box debian to to pix firewall, which then I would be able to access that network.
>
>
> Jim
> >
> > From: Craig White <craigwhite@azapple.com>
> > Date: 2003/09/10 Wed PM 03:58:19 EDT
> > To: plug-discuss@lists.plug.phoenix.az.us
> > Subject: Re: PPTP and Debian
> >
> > On Wed, 2003-09-10 at 12:20, elemint@cox.net wrote:
> > > I have found a few how to's on PPTP and Debian although is it necessary to install kernel-patch-mppe package?
> > > as mentioned in http://www.chiark.greenend.org.uk/~owend/free/pptp-debian.html
> > >
> > >
> > > Here is another how to I found http://pptpclient.sourceforge.net/howto-debian.phtml#kernel
> > > and it is mentioned if not connecting to a MS VPN server than the MPPE patch should not be required the VPN I am connecting to is from a linux box to a Cisco PIX firewall. after I followed the instructions I got errors about ppp not being enbaled in the kernel, if I do enable it in the kernel than what parts of PPP need to be enabled in the kernel there are several.
> > >
> > > Does anyone else have any good information on connecting from a linux box to a PIX firewall for a VPN connection. I am not sure what needs to be done.
> > >
> > ---
> > You are asking a lot of questions here.
> >
> > I would suggest that if the intent is to create a VPN connection between
> > a PIX & Linux, that you install FreeSWAN on the Linux box and use IPSEC
> > to create the VPN. I'm guessing that you want to access a network from a
> > home connection to office and the Linux box is a router for home.
> >
> > Cisco 1720 VPN isn't all that expensive and can be used for that purpose
> > but you will still have to learn IPSEC either way and the Linux box
> > route will provide a great education into the VPN process.
> >
> > The Microsoft PPTP is really to enable Microsoft Clients to connect and
> > so I would tend to use it only if there Windows users from home that
> > wanted to connect in and you wouldn't put in a Linux router or Cisco
> > router at each house.
> >
-----
that's too bad that IPSEC isn't set up on the PIX - it isn't trivial to
do so and it would be very instructive (and a lot more secure) to use
IPSEC instead of PPTP
but...
If you want the easiest route, it likely would be PPTP and yes, you
would have to install PPP if it isn't already installed, MPPE (for
Microsoft authentication) and the PPTP program, most likely have to
re-compile the kernel to make it all work and no, there isn't any pill
to make it easier - except there are many many "how-to's" already.

Craig