FreeBSD as a VPN Server/Router
Eric Schuele
e.schuele at computer.org
Wed Aug 9 18:18:44 UTC 2006
On 08/09/2006 12:33, Odhiambo Washington wrote:
> I am going to venture into the field of the security gurus so help me
> God! It looks like I am gonna get stuck in wet cement, I can feel it;)
>
> I have two sites, siteA and siteB. Each site has a horde of Windows PCs
> behind a FreeBSD box, which acts as a firewall/router/proxy/everything:)
> Each site has got a dedicated connection to an ISP. At the moment it's
> the same ISP, if that matters, but my thinking is that it can be any
> ISP.
>
> I have a challenge of establishing a WAN between the two sites. They
> are geographically apart. In this scenario, siteA has several
> applications running on several windows servers which are behind the
> FreeBSD box.
> The challenge is to allow siteB to access these applications securely
> via the WAN setup. VPN comes straight to mind, but this is a new area
> to me.
>
> The boxes are both FreeBSD 5.5-STABLE.
>
> I am looking for pointers/clues on how to do the setup in a clean way,
> while adhering to K.I.S.S as closely as possible.
The FreeBSD Handbook has a chapter on this:
http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/ipsec.html
HTH.
>
> If extra hardware (other than the FreeBSD boxes) is required so that
> the WAN is efficient, I'd be happy to know.
>
> I am very optimistic on pulling this one off, since I belong to a
> community full of security experts (FreeBSD users).
>
> PS: I am already googling, perhaps with the wrong keywords:-)
>
> -Wash
>
> http://www.netmeister.org/news/learn2quote.html
>
> DISCLAIMER: See http://www.wananchi.com/bms/terms.php
>
> --
> +======================================================================+
> |\ _,,,---,,_ | Odhiambo Washington <wash at wananchi.com>
> Zzz /,`.-'`' -. ;-;;,_ | Wananchi Online Ltd. www.wananchi.com
> |,4- ) )-,_. ,\ ( `'-'| Tel: +254 20 313985-9 +254 20 313922
> '---''(_/--' `-'\_) | GSM: +254 722 743223 +254 733 744121
> +======================================================================+
>
> Who messed with my anti-paranoia shot?
> _______________________________________________
> freebsd-questions at freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "freebsd-questions-unsubscribe at freebsd.org"
>
--
Regards,
Eric
More information about the freebsd-questions
mailing list