Re: VPN: SSH or IPSec???
Felipe Martínez Hermo, 2003-Apr-16 18:23 +0100:
>
> So far, I also prefer IPSec because it seems to be the most
> standard-compliant implementation, but I want to know my options.
> I have just bought Kolesnikov's book, but I have not started with it yet.
> One last thing: shold I set up a router (and so start with Adv-router-HOWTO)
> or should I go directly to FreeSwan Documentation?
>
> I am a little puzzled and I don't know what to start with.
>
> Thanks for your help
Be careful in assuming that IPSec is "standard-compliant". It's more
of a reference model for implimentors to use. Interoperability
between different implimenations is sketchy and usaully only works in
a very basic configuration, such as Main Mode (as opposed to Agressive
Mode) and with Pre-shared keys (as opposed to certificates).
Since you have Windows PC's on the road, be sure that there are
available clients that interoperate with FreeSwan.
jc
--
Jeff Coppock Systems Engineer
Diggin' Debian Admin and User
Reply to: