On Sunday 14 July 2002 17:32, Craig wrote:
> Hi folks,
> Please correct me where I'm wrong (I'm trying to figure out this
> FreeS/WAN VPN concept in my mind)- FreeS/WAN uses "opportunistic"
> encryption which means if I set up a "road-warrior" scenario, the
> computer that I'm trying to connect from CAN initiate and set-up a
> VPN with the firewall...

I don't know of anyone that has setup an "opportunistic" connection with
present LEAF ipsec package. I use a "host-to-subnet" type connection
with my road-warriors.

See:
http://leaf.sourceforge.net/devel/guitarlynn/ipsec.txt

>but if my "road" computer is NOT set-up as a
> VPN, my firewall will still allow my access to my internal LAN. 

Not unless you setup the firewall and routing to allow this. This could
not be easily done with a non-static ip road-warrior without allowing
access to the entire internet. 

> Is that an accurate interpretation??? I want to set up secure, remote
> access to my LAN and the FreeS/WAN seems like the best way to go.
> Comments, suggestions???

IPSec is available to do just that.
-- 

~Lynn Avants
aka Guitarlynn

guitarlynn at users.sourceforge.net
http://leaf.sourceforge.net

If linux isn't the answer, you've probably got the wrong question!


-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
------------------------------------------------------------------------
leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html

Reply via email to