From owner-freebsd-stable Mon May 21 5:10:43 2001 Delivered-To: freebsd-stable@freebsd.org Received: from ns.asdg.ru (ns.asdg.ru [212.164.69.2]) by hub.freebsd.org (Postfix) with ESMTP id 0BDAE37B422; Mon, 21 May 2001 05:10:36 -0700 (PDT) (envelope-from alex@asdg.ru) Received: from alex ([212.164.69.25]) by ns.asdg.ru (8.11.2/8.11.2) with SMTP id f4LCAe443925; Mon, 21 May 2001 19:10:41 +0700 (NOVST) (envelope-from alex@asdg.ru) Message-ID: <000901c0e1f7$716cc7a0$1945a4d4@asdg.ru> From: "Alex Markov" To: Subject: L2TP and FreeBSD - is it possible? Date: Mon, 21 May 2001 19:10:41 +0600 MIME-Version: 1.0 Content-Type: text/plain; charset="koi8-r" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Fidolook Express 2.000 for MS OE5 Organization: Fidolook Express 2.000 www.fidolook.da.ru Sender: owner-freebsd-stable@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG Hello, FreeBSD community! Firstly, excuse my English! ;-) DESCRIPTION: I have Win2000 server in private network (IP = 192.168.1.1) and FreeBSD box with two netcards (one of them plugged to 192.168.1/24 network, another - in ISP's LAN). On FreeBSD i have "closed"-style firewall and some services (primary DNS, proxy & mail). I have not and even don't plan to install NAT on this box. Now, i want to grant access for our remote users to Win2000 server in internal network through L2TP+IPSec. Latter part doesn't bother me, but former... So, i need a good advice from guru: a) Is L2TP supported by FreeBSD? b) Which way is more "right" - to install L2TP server on Win2000 and divert all VPN traffic to it, or configure FreeBSD box as L2TP server? c) Is there any resources about "L2TP & FreeBSD" (i know, it should be first question)? Please, cc: to my e-mail, 'cos i have not enough time to looking through all freebsd's maillists. Thanks in advance! -- WBR, Alex Markov. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-stable" in the body of the message