[c-nsp] (no subject)

Tim Franklin tim at colt.net
Tue Apr 12 11:31:38 EDT 2005


> Are you using the RedHat system as a router (IPSEC tunneling for 3rd
> parties)?  Or is the RedHat system a "standalone" machine, 
> trying to run
> Cisco IPSEC VPN client?

If you're doing the latter, you don't need to go anywhere near Racoon, KAME
et al.  The Unity client brings its own kernel module that does everything
IPSec-related, so you don't need to get "regular" Linux IPSec working.

If host-to-router is all you need, it's quite simple and seems to work quite
well (Debian, with a 2.4 kernel, YMMV).

Regards,
Tim.

-- 
____________   Tim Franklin                 e: tim at colt.net 
\C/\O/\L/\T/   Product Engineering Manager  w: www.colt.net 
 V  V  V  V    Managed Data Services        t: +44 20 7863 5714 
                                            f: +44 20 7863 5876 



More information about the cisco-nsp mailing list