Re: Can't forward Win2k VPN through NAT

[Jeff McAdams <jeffm@iglou.com>]

[-- Attachment #1: Type: text/plain, Size: 1353 bytes --]

Also Sprach Antony Stone
>On Friday 06 September 2002 5:15 pm, Don Woodruff wrote:
>> Is this really fair? While Windows uses pptp, I believe it is
>> actually RFC 2637. PopTop is a perfectly workable pptp solution for
>> Linux -- so pptp tunelling is not really a "Windows" issue. While I
>> would prefer to use IPSEC where possible, the same issues with NAT
>> still exist (in a similar config).

>I agree that PPTP is an independent standard, and not a M$-developed
>protocol,

No, PPTP is indeed a MS-developed thing.  The RFC for PPTP (and I can't
confirm that 2637 is right, but have no reason to doubt that) is
"Informational", meaning that it hasn't gone through the IETF process of
standard development and can be quite a crappy protocol (which it is,
IMO).  For reference, PPPoE is also an informational protocol, L2TP is a
Standards Track (so it has gone through the IETF process).

>however I consider it to be by far an inferior way to set up
>a VPN than IPsec, and therefore I disapprove of Win2k for having
>provided users with PPTP and not IPsec.

You also might consider IPSec along with L2TP depending on your needs.
-- 
Jeff McAdams                            Email: jeffm@iglou.com
Head Network Administrator              Voice: (502) 966-3848
IgLou Internet Services                        (800) 436-4456

[-- Attachment #2: Type: application/pgp-signature, Size: 232 bytes --]