Linux/Mac IPsec into Contivity?

[Ronald Ng]

Additionally, the upcoming RFCs require a minimum of 3DES.  It makes
more sense to go towards the 3DES requirement.

> "Golder, Fred" wrote:
> 
> FreeS/Wan doesn't support 56 bit DES with out modifying the code.  The
> FreeS/Wan folks feel that 56 bit DES isn't secure so they don't have
> it as an option.  Last I knew (about 4 weeks ago) you could modify the
> C Code to enable 56 bit DES.  FreeS/Wan has been tested with the
> Nortel Contivity Switch, but not by myself personally yet.
> 
> -Fred Golder
> 
> -----Original Message-----
> From: Chris Carlson [mailto:carlsonmail at yahoo.com]
> Sent: Thursday, November 18, 1999 10:55 AM
> To: Chen, Ken C; vpn at listserv.secnetgroup.com
> Subject: RE: Linux/Mac IPsec into Contivity?
> 
> Ken,
> 
> Yes, the Linux Free S/WAN is IPSec.  It definately
> supports 56-bit DES, not sure about 168-bit 3-DES.
> 
> Chris
> --
> 
> --- "Chen, Ken C" <ken.c.chen at lmco.com> wrote:
> > Does the Linux client create an IPsec tunnel?
> >
> >
> > -----Original Message-----
> > From: Chris Carlson [mailto:carlsonmail at yahoo.com]
> > Sent: Tuesday, November 09, 1999 4:37 PM
> > To: David Mostardi; vpn at listserv.secnetgroup.com
> > Subject: Re: Linux/Mac IPsec into Contivity?
> >
> >
> > David,
> >
> > You have a couple of (limited) options:
> >
> > 1) Use a PPTP or L2TP client for Macintosh.  Network
> > Telesystems (www.nts.com) makes such a client.
> >
> > 2) Linux can use Free S/WAN to tunnel to the
> > Contivity, but it creates a branch office tunnel,
> > and
> > not an end-user tunnel.  I think you must turn off
> > Perfect Forward Secrecy on Contivity v2.50 for this
> > to
> > work.
> >
> >
> > Hope this helps!
> > Chris
> > --
> >
> > --- David Mostardi <davidm at mdli.com> wrote:
> > > I've got a BayNetworks/Nortel Contivity 1500 box.
> > > The IPsec client that comes with it only supports
> > > Win95/Win98/WinNT.  I've got users who want to get
> > > in
> > > through Linux or Macintosh.  Has anyone
> > successfully
> > > gotten into Contivity over these platforms?
> > >
> > > TIA,
> > >
> >
> ------------------------------------------------------------------------
> 
> > > David Mostardi
> > Web:
> > > http://www.mdli.com
> > > Unix Systems Manager
> > Email:
> > > davidm at mdli.com
> > > MDL Information Systems, Inc.
> > Voice:
> > > (510) 357-2222 x1420
> > > 14600 Catalina St., San Leandro CA 94577
> > Fax:
> > > (510) 352-2870
> > >
> > >       -- "When in danger or in doubt, run in
> > > circles, scream and shout"
> > >
> >
> > =====
> >
> > __________________________________________________
> > Do You Yahoo!?
> > Bid and sell for free at http://auctions.yahoo.com
> >
> >
> ****************************************************************
> > TO POST A MESSAGE on this list, send it to
> > vpn at listserv.secnetgroup.com
> >
> > The VPN FAQ (under construction) is available at
> > http://kubarb.phsx.ukans.edu/~tbird/vpn/FAQ.html
> >
> > We are currently experiencing "unsubscribe"
> > difficulties.  If you
> > wish to unsubscribe, please send a message
> > containing the single line
> > "unsubscribe vpn your-e-mail-address" to
> > owner-vpn at listserv.secnetgroup.com
> >
> >
> ****************************************************************
> >
> >
> ****************************************************************
> > TO POST A MESSAGE on this list, send it to
> > vpn at listserv.secnetgroup.com
> >
> > The VPN FAQ (under construction) is available at
> > http://kubarb.phsx.ukans.edu/~tbird/vpn/FAQ.html
> >
> > We are currently experiencing "unsubscribe"
> > difficulties.  If you
> > wish to unsubscribe, please send a message
> > containing the single line
> > "unsubscribe vpn your-e-mail-address" to
> > owner-vpn at listserv.secnetgroup.com
> >
> >
> ****************************************************************
> >
> 
> __________________________________________________
> Do You Yahoo!?
> Bid and sell for free at http://auctions.yahoo.com
> 
> ****************************************************************
> TO POST A MESSAGE on this list, send it to
> vpn at listserv.secnetgroup.com
> 
> The VPN FAQ (under construction) is available at
> http://kubarb.phsx.ukans.edu/~tbird/vpn/FAQ.html
> 
> We are currently experiencing "unsubscribe" difficulties.  If you
> wish to unsubscribe, please send a message containing the single line
> "unsubscribe vpn your-e-mail-address" to
> owner-vpn at listserv.secnetgroup.com
> 
> ****************************************************************

-- 
Ronald Ng
rng at netscreen.com

****************************************************************
TO POST A MESSAGE on this list, send it to vpn at listserv.secnetgroup.com

The VPN FAQ (under construction) is available at
http://kubarb.phsx.ukans.edu/~tbird/vpn/FAQ.html

We are currently experiencing "unsubscribe" difficulties.  If you
wish to unsubscribe, please send a message containing the single line
"unsubscribe vpn your-e-mail-address" to owner-vpn at listserv.secnetgroup.com

****************************************************************