Re: RE: IPSec VPN

[Rcca <rcca@laurel.hu>]

I'm sure freeswan can accept dynamic connections, with variable IP address. FreeSwan has a Road Warrior mode, but it has some limitations. 
Yous don't set the Road warrior side, you set only the IP address to 0.0.0.0., and set the keys. In this case the Road Warrior will initiate the 
connection.

Idézve: Dátum: 2002/8/14 12:55:18. Feladó: Johan Segernas <johan.segernas@foretagsuniversitetet.se>.
>
>
>  Feladó: Johan Segernas <johan.segernas@foretagsuniversitetet.se>
>
>  Címzett:'Jeff' <jcoppock1@attbi.com>, debian-security@lists.debian.org
>  Tárgy:  RE: IPSec VPN
>  Dátum:  Wed, 14 Aug 2002 12:55:18 +0200
>
>
>
>
>  > > - If so which is compatible? Is FreeSWan compatible?
>
>  >
>  > FreeSWan is compatible, but only as a "Branch Office" tunnel, not as a
>  > dynamic Client tunnel.  Check with the administrator of the Contivity
>  > VPN Switch on whether he/she is willing to set it up.
>
>
>  I didn't read this from the beginning, but you can make FreeSWan use SSL
>  and then get it to handle dynamic tunnels.
>
>
>  I have one FW at work with FreeSWan and i have some different clients which
>  both have static and dynamic IPs, and the one with dynamic I use x.509-auth.
>
>
>  But maybe that wasn't what you meant by dynamic client tunnel..?