From owner-freebsd-questions  Mon Sep  3  7: 0:11 2001
Delivered-To: freebsd-questions@freebsd.org
Received: from ranger.argus-systems.com (ranger.argus-systems.com [206.221.232.80])
	by hub.freebsd.org (Postfix) with ESMTP id 4309937B401
	for <freebsd-questions@freebsd.org>; Mon,  3 Sep 2001 07:00:08 -0700 (PDT)
Received: from dedog.argus-systems.co.uk (host62-6-123-137.host.btclick.com [62.6.123.137])
	by ranger.argus-systems.com (8.9.3/8.9.3) with SMTP id JAA03521
	for <freebsd-questions@freebsd.org>; Mon, 3 Sep 2001 09:00:05 -0500 (CDT)
Received: by dedog.argus-systems.co.uk (sSMTP sendmail emulation); Mon, 3 Sep 2001 15:03:02 +0100
Date: Mon, 3 Sep 2001 15:03:02 +0100
From: Fergus Cameron <tofergus@yahoo.co.uk>
To: freebsd-questions@freebsd.org
Subject: Re: What VPN would you recommend?
Message-ID: <20010903150301.C314@dedog.argus-systems.co.uk>
Mail-Followup-To: freebsd-questions@freebsd.org
References: <001801c13473$68e66ea0$0f69a7cb@8189779819>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <001801c13473$68e66ea0$0f69a7cb@8189779819>; from rmardo@yahoo.com on Mon, Sep 03, 2001 at 06:46:57PM +0800
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-questions.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-questions>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-questions>
X-Loop: FreeBSD.ORG

we're working on this for our se's who are roaming in europe.  i'm not
familiar with cisco's vpn client (windows?) but we are going to use PGP
once it's tested (so far i'm not impressed with the stability of 7.0.1).

i'm guessing the clients are very similar.

it's pretty simple to initiate (theoretically) & you should have no trouble
using any protocol as the clients are just IPsec implmentations.  the problem
is that you then have to open up your servers VPN config to the whole world
(or at least everyone on your providers network) & hope your key integrity
holds out.

that bit i don't like 'cause if someone hacks the laptops then they are in
as PGP doesn't store the keys encrypted.

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message