CentOS - Nov 2006 - ipsec-tools with cisco vpn client

Hi,
anybody successfully running win32 client with Cisco vpn client against
 ipsec-tools? I'm looking for elegantly running VPN road warrior solution.

Scenarios are:
- ipsec-tools with Cisco vpn client
- pptpd with Windows XP native client
- OpenVPN with OpenVPN Windows client
- ???

Any hints? Thanks for reply.
David Hrb??

On Sun, 2006-11-12 at 09:50 +0100, David Hrb?? wrote:
> Hi,
> anybody successfully running win32 client with Cisco vpn client against
>  ipsec-tools? I'm looking for elegantly running VPN road warrior
solution.
> 
> Scenarios are:
> - ipsec-tools with Cisco vpn client
> - pptpd with Windows XP native client
> - OpenVPN with OpenVPN Windows client
> - ???
> 
I am using OpenVPN client on Windows and connect via an IPCOP firewall
(with the OpenVPN plugin for IPCOP) for our road warriors.

This solution seems to work OK for me.

I'm sure there are other as well, but since we were already using IPCOP
as our routers, this was the easiest for us to implement.

Thanks,
Johnny Hughes
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
URL:
<http://lists.centos.org/pipermail/centos/attachments/20061113/158762ce/attachment-0002.sig>

> Scenarios are:
> - ipsec-tools with Cisco vpn client
Hmmm... I only run non-graphical servers and ipsec-tools without RH gui
gives me a major headache...
> - pptpd with Windows XP native client
We ran this and it works fine, but throughout it's life had to do lot's
of patching and kernel recompiling. Not sure if that is the case now as
we've moved on. Two other MAJOR issue with this:
1: is that it's password based and if you allow users to pick passwords
then be prepared for compromise.
2: you cannot have more than one connection to the same server from
behind NAT. We'd always run into this with tradeshows ;) all the reps
would stay at the same hotel and only one could use the vpn at a time.
Get ready for a lot of upset reps (of course you may not have this
issue)

> - OpenVPN with OpenVPN Windows client
Very slick, add rpmforge repo, yum install openvpn  and go to town. I
have no major complaints with this system and it's very NAT friendly
compared to the other two options.


My 2 cents,

alex