From owner-freebsd-questions@FreeBSD.ORG Wed Jan 25 01:18:10 2006 Return-Path: X-Original-To: freebsd-questions@freebsd.org Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id EF6CD16A41F; Wed, 25 Jan 2006 01:18:10 +0000 (GMT) (envelope-from julian@elischer.org) Received: from a50.ironport.com (a50.ironport.com [63.251.108.112]) by mx1.FreeBSD.org (Postfix) with ESMTP id 9942A43D49; Wed, 25 Jan 2006 01:18:06 +0000 (GMT) (envelope-from julian@elischer.org) Received: from unknown (HELO [10.251.17.229]) ([10.251.17.229]) by a50.ironport.com with ESMTP; 24 Jan 2006 17:18:04 -0800 Message-ID: <43D6D1CD.5060504@elischer.org> Date: Tue, 24 Jan 2006 17:18:05 -0800 From: Julian Elischer User-Agent: Mozilla/5.0 (Macintosh; U; PPC Mac OS X Mach-O; en-US; rv:1.7.11) Gecko/20050727 X-Accept-Language: en-us, en MIME-Version: 1.0 To: gahn References: <20060124235945.92438.qmail@web52114.mail.yahoo.com> In-Reply-To: <20060124235945.92438.qmail@web52114.mail.yahoo.com> Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit Cc: freebsd-security@freebsd.org, freebsd-questions@freebsd.org Subject: Re: IPsec, VPN and FreeBSD X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 25 Jan 2006 01:18:11 -0000 gahn wrote: >Hi: > >We intend to build IPSec based VPN server on FreeBSD >platform so that we can access internal network of a >lab. The remote side will use VPN client and could be >from anywhere of the Internet, or may be from the >another site of the company. From the hnadbook, I saw >the sample of site-to-site configurations and we do >have one FreeBSD firewall (running ipfw) on both site >and another one on another site (both have firewalls >on them), can we do that? Also what about the >client-server model? What kind of clients do we need >in order to connect to the FreeBSD/IPsec/VPN? Any >tips/information for the configuration of the >clients/server model on internet? > >Any help will be greatly appreciated. > > there are almost too many options to mention.. however you should be able to implement pptp tunnels (as used on windows) using mpd (in ports) alternatively there is always ssh or ipsec. (or a combination of them) If as you suggest, both ends are freebsd, then I've used mpd over ssh with great effect. use the 'tcp transport' option of mpd and connect it through an ssh tunnel. is the 'client' roaming or at a fixed address? if a fixed address then ipsec becomes easier. >Thanks > > > >__________________________________________________ >Do You Yahoo!? >Tired of spam? Yahoo! Mail has the best spam protection around >http://mail.yahoo.com >_______________________________________________ >freebsd-security@freebsd.org mailing list >http://lists.freebsd.org/mailman/listinfo/freebsd-security >To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.org" > >