I've been having alot of luck with openvpn it's ssl based rather than
ipsec.  I have found it to be easier to setup and less confusing and
it has clients for various platforms including windows...which is not
always the easiest platform to use IPSEC with unless you go with a
commercial client.  You will need to setup a certificate authority and
understand the basics of openssl the rest is pretty simple.  It even
works behind a NAT router or firewall.  If the vpn connection is lost
it will re-establish it's connection automatically once it's routable
again.  This works for both dynamic ip clients and even the server as
long as you're using some sort of deamon to update dyndns info.

For the most part, atleast in my area, I find comcast IP's to be very
stable.  My IP hasn't changed in years.  My ip least just gets
renewed.
--
David


On 8/26/05, Michael W. Holdeman <[EMAIL PROTECTED]> wrote:
> OK I have read the vpn howto, and tunneling from the howto, and to be
> truthfull i am totally over my head.
> 
> I have a LAN at the office including a freebsd file server, the server has an
> ip of 192.168.xx.xx, and several other gentoo desktops have the same +1 each.
> I have a linksys cable modem, and wireless router serving through the gateway
> of 192.168.xx.1. dns is fixed with 2 dns servers from comcast. Problem is I
> have a dynamis ip from comcast.
> 
> I want to be able to access a desktop machine, and most importantly the bsd
> file server with my laptop, again with a dynamic assigned ip from remote
> locations.
> 
> What is the best combination, and some sort of howto for dummies would be
> great!!
> 
> Thanks in advance.
> 
> Mike
> --
> 
> Michael W. Holdeman
> 
> 
> ________________________________________
> Powered by Gentoo Linux www.gentoo.org  |
> Kernel 2.6.11-ck8                       |
> Win4Lin 5-1-20 netraverse.com           |
> Win4LinPro 6.1.1-03 win4lin.com         |
> ________________________________________|
> --
> gentoo-user@gentoo.org mailing list
> 
>

-- 
gentoo-user@gentoo.org mailing list

Reply via email to