From owner-freebsd-net Sat Oct 27 7:49: 4 2001 Delivered-To: freebsd-net@freebsd.org Received: from leviathan.umiacs.umd.edu (leviathan.umiacs.umd.edu [128.8.120.189]) by hub.freebsd.org (Postfix) with ESMTP id 6DB8937B401 for ; Sat, 27 Oct 2001 07:49:02 -0700 (PDT) Received: from leviathan.umiacs.umd.edu (localhost [127.0.0.1]) by leviathan.umiacs.umd.edu (8.9.3/8.9.1) with ESMTP id KAA11184 for ; Sat, 27 Oct 2001 10:49:01 -0400 (EDT) Message-Id: <200110271449.KAA11184@leviathan.umiacs.umd.edu> To: freebsd-net@FreeBSD.ORG Subject: Reply Hazy (Encrypted VPN across FBSD, W2k, RHL, etc...) Date: Sat, 27 Oct 2001 10:49:01 -0400 From: Gary Jackson Sender: owner-freebsd-net@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org I'm looking for the best way to get an encrypted VPN set up that's compatible with FreeBSD (on the permanent end), and clients running Win 2k and RedHat Linux. I'd like to do this without having to buy software from someone. I have a suspicion that the limiting factor here is going to be the Microsoft product. It appears as if it will do encrypted VPNs two ways: 1. PPTP with proprietary MPPE encryption/compression 2. IPSec/l2tp proprietary hybrid I looked in to option (1). It seems to be the easiest, with the exception that apparently I need some proprietary code (as per the following quote from the ng_mppc(4) manual page: The MPPC protocol requires proprietary compression code available from Hi/Fn (formerly STAC). These files must be obtained elsewhere and added to the kernel sources before this node type will compile with the NETGRAPH_MPPC_COMPRESSION option. I haven't been able to find said code freely, for sale, or otherwise. Option (2) looks even less likely. I've only been able to find one implementation of l2tp, and it looks like it's still a pretty flaky piece of software that hasn't been integrated with IPSec. I'd appreciate any help I can get with this. -- Gary Jackson bargle@umiacs.umd.edu To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-net" in the body of the message