Linux/Mac IPsec into Contivity?

[Golder, Fred]

FreeS/Wan doesn't support 56 bit DES with out modifying the code.  The
FreeS/Wan folks feel that 56 bit DES isn't secure so they don't have it as
an option.  Last I knew (about 4 weeks ago) you could modify the C Code to
enable 56 bit DES.  FreeS/Wan has been tested with the Nortel Contivity
Switch, but not by myself personally yet.

-Fred Golder

-----Original Message-----
From: Chris Carlson [mailto:carlsonmail at yahoo.com]
Sent: Thursday, November 18, 1999 10:55 AM
To: Chen, Ken C; vpn at listserv.secnetgroup.com
Subject: RE: Linux/Mac IPsec into Contivity?


Ken,

Yes, the Linux Free S/WAN is IPSec.  It definately
supports 56-bit DES, not sure about 168-bit 3-DES.

Chris
--

--- "Chen, Ken C" <ken.c.chen at lmco.com> wrote:
> Does the Linux client create an IPsec tunnel?
> 
> 
> -----Original Message-----
> From: Chris Carlson [mailto:carlsonmail at yahoo.com]
> Sent: Tuesday, November 09, 1999 4:37 PM
> To: David Mostardi; vpn at listserv.secnetgroup.com
> Subject: Re: Linux/Mac IPsec into Contivity?
> 
> 
> David,
> 
> You have a couple of (limited) options:
> 
> 1) Use a PPTP or L2TP client for Macintosh.  Network
> Telesystems (www.nts.com) makes such a client.
> 
> 2) Linux can use Free S/WAN to tunnel to the
> Contivity, but it creates a branch office tunnel,
> and
> not an end-user tunnel.  I think you must turn off
> Perfect Forward Secrecy on Contivity v2.50 for this
> to
> work.
> 
> 
> Hope this helps!
> Chris
> --
> 
> --- David Mostardi <davidm at mdli.com> wrote:
> > I've got a BayNetworks/Nortel Contivity 1500 box.
> > The IPsec client that comes with it only supports
> > Win95/Win98/WinNT.  I've got users who want to get
> > in
> > through Linux or Macintosh.  Has anyone
> successfully
> > gotten into Contivity over these platforms?
> > 
> > TIA,
> >
>
------------------------------------------------------------------------
> > David Mostardi                                
> Web:
> > http://www.mdli.com
> > Unix Systems Manager                        
> Email:
> > davidm at mdli.com
> > MDL Information Systems, Inc.               
> Voice:
> > (510) 357-2222 x1420
> > 14600 Catalina St., San Leandro CA 94577      
> Fax:
> > (510) 352-2870
> > 
> >       -- "When in danger or in doubt, run in
> > circles, scream and shout"
> > 
> 
> =====
> 
> __________________________________________________
> Do You Yahoo!?
> Bid and sell for free at http://auctions.yahoo.com
> 
>
****************************************************************
> TO POST A MESSAGE on this list, send it to
> vpn at listserv.secnetgroup.com
> 
> The VPN FAQ (under construction) is available at
> http://kubarb.phsx.ukans.edu/~tbird/vpn/FAQ.html
> 
> We are currently experiencing "unsubscribe"
> difficulties.  If you
> wish to unsubscribe, please send a message
> containing the single line
> "unsubscribe vpn your-e-mail-address" to
> owner-vpn at listserv.secnetgroup.com
> 
>
****************************************************************
> 
>
****************************************************************
> TO POST A MESSAGE on this list, send it to
> vpn at listserv.secnetgroup.com
> 
> The VPN FAQ (under construction) is available at
> http://kubarb.phsx.ukans.edu/~tbird/vpn/FAQ.html
> 
> We are currently experiencing "unsubscribe"
> difficulties.  If you
> wish to unsubscribe, please send a message
> containing the single line
> "unsubscribe vpn your-e-mail-address" to
> owner-vpn at listserv.secnetgroup.com
> 
>
****************************************************************
> 

__________________________________________________
Do You Yahoo!?
Bid and sell for free at http://auctions.yahoo.com

****************************************************************
TO POST A MESSAGE on this list, send it to vpn at listserv.secnetgroup.com

The VPN FAQ (under construction) is available at
http://kubarb.phsx.ukans.edu/~tbird/vpn/FAQ.html

We are currently experiencing "unsubscribe" difficulties.  If you
wish to unsubscribe, please send a message containing the single line
"unsubscribe vpn your-e-mail-address" to owner-vpn at listserv.secnetgroup.com

****************************************************************
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.shmoo.com/pipermail/vpn/attachments/19991118/e2a5a818/attachment.htm