FreeBSD as a VPN Client Gateway ...

From: Matthew Grooms <mgrooms@xxxxxxxxx>
Date: Wed, 22 Mar 2006 16:17:23 -0600

All,

If anyone would like to use FreeBSD as a VPN gateway but have the usual Win2K/XP clients to support, here is a free software product that may be of interest ...

http://www.shrew.net/download

The VPN Client was designed to work with ipsec-tools + FreeBSD as the gateway but others such as NetBSD have been tested. Features include multiple XAuth user authentication modes, automatic client network configuration, remote network topology download, NAT Traversal, IKE fragmentation and transport pre-fragmentation ( ala NetBSD 3.0 ). The latter three are useful for clients behind NAT devices or broken DSL/Cable routers that drop large or fragmented UDP packets.

If you are interested in using NAT-T, you should have a look at Yvans kernel patch which offers everything but transport pre-fragmentation support ...

http://ipsec-tools.sf.net/freebsd6-natt.diff

Feedback and bug reports are appreciated ( off this list ).

-Matthew
_______________________________________________
freebsd-net@xxxxxxxxxxx mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "freebsd-net-unsubscribe@xxxxxxxxxxx"

Follow-Ups:
- Re: FreeBSD as a VPN Client Gateway ...
  - From: Eric Masson
- Re: FreeBSD as a VPN Client Gateway ...
  - From: David Rhodus
- Re: FreeBSD as a VPN Client Gateway ...
  - From: Bruce M Simpson

Prev by Date: RE: requests for mbufs denied
Next by Date: Loopback problem
Previous by thread: requests for mbufs denied
Next by thread: Re: FreeBSD as a VPN Client Gateway ...
Index(es):
- Date
- Thread

Relevant Pages

RE: Dynamic LINQ ITable
... Microsoft MSDN Online Support Lead ... where an initial response from the community
or a Microsoft Support ... Subject: Dynamic LINQ ITable ... We enable our
clients to create custom fields they wish to ... (microsoft.public.dotnet.languages.csharp)
RE: OWA spell check problem
... Does this problem only occur on Windows XP clients? ... 825430 Overview of the
spelling checker in Outlook Web Access for Exchange ... Click Settings next to Anonymous
Access & Authentication Settings ... Microsoft Online Partner Support ...
(microsoft.public.exchange2000.general)
Re: Change the RID Pool on a DC
... sure we ship each server with unique SID... ... Our problematic occurs when
one of our clients backups ... The datas are secured through their security descriptor,
... >fully responsible for all issues of support? ... (microsoft.public.windows.server.active_directory)
challenge, response, ssh, and a proposal
... cryptocard, one first gets the challenge, then enters the response as ... ports
with non-standard clients. ... The session password effectively becomes your system
... This solves the problem of "no support in the client", ... (FreeBSD-Security)
Re: monthly support plans
... support plans that I offer at this time. ... per month for this and is optional
for my clients. ... Scope of Services for Maintenance Contract: ... Typically
the purpose of selling support plans is: ... (microsoft.public.windows.server.sbs)