I would stay away from PPTP as much as possiable, it has a very weak encryption, since you are using w2k, here's the url for x.509 patches. http://www.freeswan.ca/download. You can use CA(x.509), KDC(key distribution center, Kerberos v5) or just use pre-sharedkeys for authentication, IKE can be whatever that are supported, ie: MD5/SHA1/3DES/DES. Also use ESP if you could, AH leaves the header in clear and conflict with NAT.
On Thursday 04 September 2003 12:37 pm, Rob Bootsma wrote: > Aloha, > > What do you guys recommend for a VPN server on RH9? It seems like > FreeS/WAN and Poptop are among the most popular ones. Has anyone had > experience installing either of these? I'm also using shorewall for > iptables/firewall. Its main purpose will be to support Win2k VPN > clients. > > I think I'm going to go with Poptop, but I wanted to see if anyone had > any other suggestions before I take the plunge. > > Thanks, > Rob > _______________________________________________ > LUAU mailing list > [EMAIL PROTECTED] > http://videl.ics.hawaii.edu/mailman/listinfo/luau
