25 Apr
2001
25 Apr
'01
11:17 p.m.
On Wed, 25 Apr 2001, John Kristoff wrote:
Mike Schoenecker wrote:
if one is prone to be paranoia, using both [1] and [2] probably makes sense.
Except that it is currently impractical for many sites since it requires an entirely Cisco end-to-end shop including the Cisco (or Microsoft's) RADIUS server.
Since all these products are bridges, wouldn't it make sense to just have an Open/FreeBSD box at either end with two nics? Both os's can do IPSEC tunnels, and both end nodes will only be bridging a single MAC address. You end up with a "clean" network design (since you've got an actual endpoint or 'router') and you can encrypt your traffic with a bit more confidence than with the WEP stuff... Charles
John