Re: vpn under linux

[Tony Earnshaw <tonye@billy.demon.nl>]

lør, 10.04.2004 kl. 14.30 skrev John A. Sullivan III:
[...]

> The closest solution we could find to rival the commercial offerings on
> such a large scale is netfilter + freeS/WAN + iproute2 + ISC DHCP +
> StrongSec DHCP Relay + OpenCA.  There are reasonable alternatives to
> OpenCA.
> 
> The FreeS/WAN code is alive and healthy.  Two major cooperative forks
> are available.  One is at www.openswan.org and the other is at
> www.strongswan.org.  Both are well supported and helpful.
>
> There a fairly complete although slightly dated slide shows on tying all
> these technologies together (other than OpenCA) in the training section
> of http://iscs.sourceforge.net.
> 
> The only major missing piece right now to make this combination a
> full-fledged competitor to the largest and most expensive commercial
> players is a sophisticated management front end such as those offered by
> Solsoft, SmartPipes, NetScreen, Checkpoint, etc.  That is the hole I am
> trying to fill with the ISCS project.  It is the last piece that we need
> before we can do with open source tools what we have previously only
> been able to do with commercial tools to achieve the scale and
> complexity we need. If anyone wants to help, it is a huge project and I
> can use all the help I can get!

This was an enormously valuable precis and greatly appreciated. I wish I
could help, but don't have access to a lab. If there's anything a single
user set-up can do, let me know *at my sig below*.

--Tonni

-- 
Kattekots op de vloer
na de moeë thuiskomst
weinig walg
getrouw als kind
de kat heet welkom.

mail: billy - at - billy.demon.nl
http://www.billy.demon.nl