Shorewall users - May 2003 - CIPE VPN ?

I have to extend a network via VPN.

The main network has the M$ Win2k PDC server and a RH9 router/Shorewall.
The extended part of the network is a bunch of M$ Win computers, with
another RH9 router/Shorewall at the door.

My first option is to use RedHat''s CIPE built-in solution, as a
permanent
connection,
so I use this Linux solution as the infrastructure.
(the M$ workstations are DHCP''d from the PDC, users must authenticate
on the
same PDC,  and so on).

My questions are:
1) did anybody used CIPE & Shorewall?
2) is this a good option?
3) is there a better solution?

Thanks.
Stefaniu Criste

Hi,

A lot depends on your connection type. Is it a leased line, dsl, cable..
Do you have fixed or dynamic ip''s, etc..

A nice solution in my opinion would be OpenVPN
(openvpn.sourceforge.net), it''s pretty easy to setup, you can use
multiple tunnels, and you don''t have to do kernel patching.. Have a
look
at their website, have a look at Tom''s great documentation and maybe
it''s something for you..

Good luck,
Kristof.

-----Original Message-----
From: shorewall-users-bounces@lists.shorewall.net
[mailto:shorewall-users-bounces@lists.shorewall.net] On Behalf Of Gupi,
Stefaniu Criste
Sent: donderdag 22 mei 2003 7:27
To: ''shorewall-users@lists.shorewall.net''
Subject: [Shorewall-users] CIPE VPN ?


I have to extend a network via VPN.

The main network has the M$ Win2k PDC server and a RH9 router/Shorewall.
The extended part of the network is a bunch of M$ Win computers, with
another RH9 router/Shorewall at the door.

My first option is to use RedHat''s CIPE built-in solution, as a
permanent connection, so I use this Linux solution as the
infrastructure. (the M$ workstations are DHCP''d from the PDC, users
must
authenticate on the same PDC,  and so on).

My questions are:
1) did anybody used CIPE & Shorewall?
2) is this a good option?
3) is there a better solution?

Thanks.
Stefaniu Criste
_______________________________________________
Shorewall-users mailing list
Post: Shorewall-users@lists.shorewall.net
Subscribe/Unsubscribe:
http://lists.shorewall.net/mailman/listinfo/shorewall-users
Support: http://www.shorewall.net/support.htm
FAQ: http://www.shorewall.net/FAQ.htm

On Thu, 22 May 2003 17:23:49 +0200, Kristof Hardy 
<kristof.hardy@catsanddogs.com> wrote:
> Have a look at their website, have a look at Tom''s great
documentation
> and maybe it''s something for you..
In the case of OpenVPN tunnels, it is Simon Mater''s great documentation
:-)

-Tom
-- 
Tom Eastep    \ Shorewall - iptables made easy
Shoreline,     \ http://www.shorewall.net
Washington USA  \ teastep@shorewall.net

Thanks to you all for explanations

Here are some router details:
- both IPs are fixed
- main network has cable modem
- secondary network has radio link
- moderate traffic (Terminal Services)

so shouldn''t be a problem to set the VPN


I will try both solutions
(first CIPE, then OpenVPN, because I have not very much time)

Stefaniu Criste