Yes, this is possible. In fact, it is overtly easy.
The freeswan def would look like this, 55.55.55.55 being your public ip
address, and 10.10.10.0/24 being your private network.
conn server_client
authby=secret
left=55.55.55.55
leftsubnet=10.10.10.0/24
right=%any
auto=add
keyingtries=1
In Win2k or WinXP (home or prof), define a security policy with two filters.
One tunnelling to the server ip and one tunnelling to your road warror
(local ip).
Require security on both filters, set the preshared secret, uncheck traffic
mirroring (vital), check perfect forward secrecy, and make sure to have
client for microsoft networks installed. Then assign the security policy
and viola!
Make sure to have the same preshared key set in both the windows policy and
/etc/ipsec.secrets on your server.
If you're using 95, 98, or me, you have issues. Regardless, you would have
to use something like mcafee pgpnet or some other ipsec client.
-g
-----Original Message-----
From: users-admin_at_lists.freeswan.org
[mailto:users-admin_at_lists.freeswan.org]On Behalf Of Eric K Parsons
Sent: Thursday, May 09, 2002 12:14 PM
To: users_at_lists.freeswan.org
Subject: [Users] Client Software
I want to implement a VPN solution that will allow not only for LAN
internetworking but also for remote client access "Road Warriors". Is it
possible to set a Free S/WAN solution to accomplish this is the Remote
clients would be running a version of windows?
Eric Parsons
IT Development
Diversified Technology Services
www.diversifiedts.com
805.928.6392
_______________________________________________
Users mailing list
Users_at_lists.freeswan.org
http://lists.freeswan.org/mailman/listinfo/users
_______________________________________________
Users mailing list
Users_at_lists.freeswan.org
http://lists.freeswan.org/mailman/listinfo/users
This archive was generated by hypermail 2.1.3 : Mon Jul 29 2002 - 05:19:58 CEST