owl-users - Re: *SWAN on Owl?

Openwall Project		/home Owl JtR Pro crypt pam_passwdqc tcb phpass scanlogd popa3d msulogin / Linux BIND / advisories presentations / services donations / wordlists passwords / community lists wiki CVSweb mirrors signatures
bringing security into open environments

Order Openwall GNU/*/Linux 2.0 on a CD with delivery worldwide

[<prev] [next>] [<thread-prev] [thread-next>] [month] [year] [list]

Date: Thu, 1 Feb 2007 12:15:07 +0100 (CET)
From: Bernhard Fischer <fischerb@...cher-ing.de>
To: owl-users@...ts.openwall.com
Subject: Re: *SWAN on Owl?

Hi,

we are currently using openswan-2.4.6 to connect a customers VPN. I
would say it's an cisco concentrator 3000'er series on the other end,
but I really don't know exactly. Openswan is hard to maintain and there
are many pitfalls to trap in. So i would say, I'm not a great fan of
ipsec.

For a single site-to-site connection I prefer OpenVPN. It's easier to
use ... no kernel modules ... simple configuration and there are
ready-to-install packages available. We are using it for years and it
absolutly fits our needs and security issues.

Greetings
Bernhard

Am Do 01.02.2007 11:45 schrieb Andrey V Stolyarov <crocodil@...co.net>:

> 
> Hi all,
> 
> anyone has experience of deploying strongSwan or Openswan on Owl?
> If it matters, what I need is a permanent secure tunnel over
> Internet between two geografically separated offices. Before I
> start, I'd be glad to hear about any experience from anyone (as
> for now, I even don't know which Swan to choose).
> 
> 
> --
> Croco