>>>>> "Garrett" == Garrett Wollman <wollmankhavrinen.lcs.mit.edu> writes:

Garrett> <<On Thu, 07 Feb 2002 11:33:47 -0500, "James F. Hranicky"
Garrett> <jfhcise.ufl.edu> said:
>> After reading up on IPSEC, I have one major question: Is it really
>> a good protocol?

Garrett> No, but it's the best one we've got.

I've been keen on IPSec for some time ... I've even had it running
between selections of hosts, but I havn't been able to set up two
scenarios that would make it actually useful to me:

1) Wireless DHCP laptop <-- tunnel mode --> gatewaybox

2) Home box on Cable Modem (DHCP) <-- tunnel mode --> office

The basic blocking point is that none of the HOWTO's written on the
subject say anything about dynamic clients. I would really like to
see a HOWTO (from someone working on this stuff) that assumes the
client is roaming.

Dave.

-- 
============================================================================
|David Gilbert, Velocet Communications.       | Two things can only be     |
|Mail:       dgilbertvelocet.net             |  equal if and only if they |
|http://daveg.ca                              |   are precisely opposite.  |
=========================================================GLO================
To Unsubscribe: send mail to majordomoFreeBSD.org
with "unsubscribe freebsd-security" in the body of the message

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]