[c-nsp] L2TP/IPSEC VPN for MS Windows PCs

[Church, Charles]

I haven't used the L2TP, but have used the PPTP before.  Assuming
they've got the same functionality, I believe this is what you'd be
missing by not using the Cisco client:

Ability to display a banner
Ability to do split tunneling (some subnets are reachable over VPN,
everything else doesn't use VPN)
Better DNS resolution options
Ability to allow/disallow saving of password
Encryption algorithms other than DES

This is all from memory from a couple years ago.  Not sure if anything
has changed.  But I remember trying the MS way for a week, and gave up.


Chuck Church
Principal Network Engineer, CCIE #8776
Harris Information Technology Services
EDS Contractor - Navy Marine Corps Intranet (NMCI)
1210 N. Parker Rd. | Greenville, SC 29609 
Office: 864-335-9473 | Cell: 864-266-3978


-----Original Message-----
From: cisco-nsp-bounces at puck.nether.net
[mailto:cisco-nsp-bounces at puck.nether.net] On Behalf Of Felix Nkansah
Sent: Wednesday, January 16, 2008 11:01 AM
To: cisco-nsp at puck.nether.net
Subject: [c-nsp] L2TP/IPSEC VPN for MS Windows PCs


Hi,

I need to build a remote-access vpn solution for my company.

The preference is to use the microsoft windows xp built-in dialup vpn
client, rather than having to install additional software (such as the
Cisco
VPN client).

Has anyone deployed this solution for some clients (L2TP/IPSEC)?

I would be terminating the connections on an IOS router. The
configuration
guides I have found from cisco.com dont seem to help me.

Should be glad that you share your experiences, suggestions, and helpful
links with me.

Regards,

Felix
_______________________________________________
cisco-nsp mailing list  cisco-nsp at puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/