Post #13,743
10/17/01 11:08:37 AM
|
VPN info?
We're looking to implement VPN. Any tips, pointers or suggestions?
We are planning to use it with our offsite people and will experiement with my 98 laptop and cable modem. I have a Linksys [link|http://www.linksys.com/products/product.asp?prid=173&grid=5|BEFW11S4] that shares my connection. It supports IPSec Pass-Thru and PPTP.
We'd also like to experiment with our IP phones. Our PC addresses are 64.9.163.X while our phone addresses are 10.1.2.x
Darrell Spice, Jr.
[link|http://home.houston.rr.com/spiceware/|SpiceWare] - We don't do Windows, it's too much of a chore
|
Post #13,748
10/17/01 11:34:20 AM
10/14/02 1:08:59 PM
|
Server Side?
You didn't mention what platform will be serving the VPN connection...
Info on PPTP: [link|http://support.3com.com/infodeli/tools/remote/general/pptp/pptp.htm|Whitepaper]
With a Win98 client, the easiest to implement would be PPTP since Microsoft's VPN package uses it. However, there has been press about it being cracked:
[link|http://www.counterpane.com/pptp.html|Article]
There are Linux versions of PPTP out there as well, for both client and server side.
[link|http://www.sigpipe.org:8080/vpn/pptp.html|Client]
[link|http://pptpclient.sourceforge.net/|Client]
[link|http://poptop.lineo.com/|Server]
IPSEC info:
I haven't done anything with IPSEC, but a quick Google turned this up:
[link|http://www.ipsec.com/|ipsec.com]
[link|http://www.counterpane.com/ipsec.html|counterpane.com] (the same folks who cracked PPTP say IPSEC is the best out there..)
[link|http://www.cisco.com/warp/public/cc/so/neso/sqso/eqso/ipsec_wp.htm|cisco]
[link|http://www.ietf.org/html.charters/ipsec-charter.html|ipsec charter]
-----
Steve
Edited by Steve Lowe
Oct. 14, 2002, 01:08:59 PM EDT
|
Post #13,774
10/17/01 1:11:49 PM
|
Cisco equipment
We currently have a [link|http://www.cisco.com/warp/public/cc/pd/rt/1700/|Series 1700 router].
The plan is to get a [link|http://www.cisco.com/univercd/cc/td/doc/pcat/3000.htm|VPN 3005 Concentrator] and/or a [link|http://www.cisco.com/warp/public/cc/pd/fw/sqfw500/|PIX Firewall].
Darrell Spice, Jr.
[link|http://home.houston.rr.com/spiceware/|SpiceWare] - We don't do Windows, it's too much of a chore
|
Post #13,782
10/17/01 1:39:43 PM
|
I'm working on getting a PIX set up right now w/IPSEC
No CA, though--shared keys only.
I'll try and keep you posted. Should be this week.
"A stupid despot may constrain his slaves with iron chains; but a true politician binds them even more strongly by the chain of their own ideas;...despair and time eat away the bonds of iron and steel, but they are powerless against the habitual union of ideas, they can only tighten it still more; and on the soft fibres of the brain is founded the unshakable base of the soundest of Empires."
Jacques Servan, 1767
|
Post #56,094
10/10/02 10:14:52 PM
|
Steve: please fix the links in this post
The last few links look like this: <a href=>http://...
I'm doing some cleanup in preparation to export the db, and this post turned up. :-)
Regards,
-scott anderson
"Welcome to Rivendell, Mr. Anderson..."
|
Post #56,665
10/14/02 1:10:24 PM
|
Fixed, sorry about that
-----
Steve
|
Post #56,666
10/14/02 1:23:25 PM
|
No problem, thanks.
Regards,
-scott anderson
"Welcome to Rivendell, Mr. Anderson..."
|
Post #56,668
10/14/02 1:27:23 PM
|
Admin question (just curious, nothing vital)
I've seen you ask people to fix links a couple of times. Is this because:
A) It's fater to ask the poster to do it themselves
B) It's better long term for people to know what they goofed and fix it themselves
C) General policy that even admins don't change user content
D) A & B
E) All of the above (but mostly ____)
===
Microsoft offers them the one thing most business people will pay any price for - the ability to say "we had no choice - everyone's doing it that way." -- [link|http://z.iwethey.org/forums/render/content/show?contentid=38978|Andrew Grygus]
|
Post #56,681
10/14/02 1:47:58 PM
|
None of the above
A, B, C, and F, which is "I don't have an edit link (or any admin web controls for that matter) at this point." ;-)
Regards,
-scott anderson
"Welcome to Rivendell, Mr. Anderson..."
|
Post #56,688
10/14/02 2:21:41 PM
|
Ahh, understood
Laziness[1] masquerading as integrity.
[1] Umm .. yeah, sure.
===
Microsoft offers them the one thing most business people will pay any price for - the ability to say "we had no choice - everyone's doing it that way." -- [link|http://z.iwethey.org/forums/render/content/show?contentid=38978|Andrew Grygus]
|
Post #13,756
10/17/01 12:28:19 PM
|
Suggestion
Do not, under any circumstances, get a corporate account with Earthlink for a national ISP. Horrible downtimes. Absolute idiots in support. They are randomly turning off 800 number access for our field staff. It took 3 weeks! to get anyone there to acknowledge this was in fact happening let alone fix it. My research suggests AT&T for the dial up access (we are switching as soon as we can). As far as the VPN itself, we are using Bay Networks Extranet Client. No problems with them at all. We have field staff accross the country (and a few international) who are using this stuff. The only complaints we are getting are about Earthlink.
Don Richards,
Proud recipient of the ABBA.
(the Ashton Brown Brevity Award)
|
Post #13,785
10/17/01 1:52:15 PM
|
We have very good luck with uunet for a provider
gives us local accss almost everywhere but have no idea of the cost.
thanx,
bill
tshirt front "born to die before I get old"
thshirt back "fscked another one didnja?"
|
Post #13,870
10/17/01 8:44:30 PM
|
Luck with uunet may vary by location.
Last year it absolutely sucked in North Carolina. Local lines around Charlotte and Winston-Salem were much oversubscribed (i.e. busy).
Alex
Men never do evil so completely and cheerfully as when they do it from religious conviction. -- Blaise Pascal (1623-1662)
|
