From owner-freebsd-questions Mon Jun 19 23:35:23 2000 Delivered-To: freebsd-questions@freebsd.org Received: from fedde.littleton.co.us (fedde.littleton.co.us [216.17.174.44]) by hub.freebsd.org (Postfix) with ESMTP id D491637BB4A for ; Mon, 19 Jun 2000 23:35:18 -0700 (PDT) (envelope-from cfedde@fedde.littleton.co.us) Received: from fedde.littleton.co.us (localhost [127.0.0.1]) by fedde.littleton.co.us (8.10.0/8.10.0) with ESMTP id e5K6ZF196469; Tue, 20 Jun 2000 00:35:15 -0600 (MDT) Message-Id: <200006200635.e5K6ZF196469@fedde.littleton.co.us> To: Harry Woodward-Clarke Cc: FreeBSD Questions , lol@ficsgrp.com Subject: Re: advice sought - ISDN & VPN In-Reply-To: <394EFC25.8207FB2@S1.com> From: Chris Fedde Date: Tue, 20 Jun 2000 00:35:15 -0600 Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG On Tue, 20 Jun 2000 05:07:49 +0000 Harry Woodward-Clarke wrote: +------------------ | Hi guys, | | So, to recap: | | - multiple ShivaVPN Client PCs using Windows9x/NT4/2K | - ISDN modem connected to the Internet via Telstra BigPond Direct | - ShivaVPN Server in the USA | | To the experienced FreeBSD SysAdmins: how would you do this? What sort | of configuration, both hardware and software, would you include in this | mix? Would IPfilter be useful here? Perhaps a Firewall product? | | Any comments, suggestions gratefully taken on board. | | Thanks and kind regards, | | Harry +------------------ You could certenly use FreeBSD as a router at the client end. With the right TA it can easily provide the on demand connection at the local ISP and act as a reasonable packet filter and NAT router. But there are many ISDN dial routers that can do all this functionality on their own. Also FreeBSD will not support ShivaVPN unless this is really some version of a standard VPN technology such as PPTP. There may not be a good argument to deploy FreeBSD in this mix unless there are other needs beyond simply protecting a Windows lan with a packet filter. I'd want more info about budget constraints and other restrictions before finalizing on a solution. -- Chris Fedde 303 773 9134 To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message