[SunRescue] PPTP / VPN stuff

[Christopher Byrne]

Bill,

Okay Al Potter and I are both security architects as I think you know. The
first question  I need to ask is what is their budget? Because PGP sells a
pretty ok security suite that includes a VPN client for about $100 a seat.
That will only work however if they have no firewall, or a firewall that
will allow direct connection to the machines, either of which indicates they
have bigger problems then needing a vpn client.

If they have a somewhat bigger budget I have a netscreen 10 that I'm
selling, and there is a software VPN client for it that supports Windows,
Mac, and now even Linux and solaris.

You could in theory do this using PGPNet and a linux or BSD firewall, but it
requires a license at $79 a seat for commercial purposes. You could also use
opensource software (FreeSwan,etc...) to create point to point VPN's on
linux or BSD boxes, but that would require a linux box at everyones house.

There are lots of options, I'd be happy to spend a bit of time talking with
you, and/or your friends about them

Chris Byrne
Founder
Secure Defense


-----Original Message-----
From: rescue-admin at sunhelp.org [mailto:rescue-admin at sunhelp.org]On
Behalf Of Bill Bradford
Sent: Friday, December 08, 2000 12:11
To: rescue at sunhelp.org
Subject: [SunRescue] PPTP / VPN stuff


I've got a friend who needs to have a VPN solution setup.. so I'm
looking for suggestions of hardware/software with which to implement it.

Their office has a 6 meg dedicated ADSL connection, with a bunch of
Windows boxes using MS File and Printer Sharing in a workgroup
configuration.
All the machines on the LAN are using DHCP, but can be easily moved to
static IPs if needed.

They need to be able to go home, hook up their laptops to their cable
modems, and use a VPN/PPTP client to connect back up to the network
at work and copy files back and forth using the MS windows networking
stuff, *without* having to resort to PC ANywhere.   Basically, they need
to be able to tunnel into the office LAN.

If I can do this with *BSD or Linux somehow, I've got a fairly decent
machine (P166MMX) that I can build up for the task.  Otherwise, I
can ask for a semi-small machine and get it.

I need to do this as *cheaply* as possible...

Suggestions?  I've really only messed with the Microsoft-specific stuff when
doing VPNs, and we *dont* want to have to go that way, due to expenses.

Thanks.

Bill

--
Bill Bradford
mrbill at mrbill.net
Austin, TX
_______________________________________________
Rescue maillist  -  Rescue at sunhelp.org
http://www.sunhelp.org/mailman/listinfo/rescue