Re: Link level security with static arp tables

[Bennett Todd <bet () rahul net>]

I think the current picture is that LEAP isn't believed terribly
strong, and yet it's the closest to an inter-vendor standard
portable choice available. Ick.

IPSec is definitely the way to go if your requirements include
confidentiality of traffic and inter-vendor interop.

If you drop the requirement that your transport layer be completely
protected from sniffing, and care only for reasonably strong auth, I
think ppp-over-ethernet (pppoe) is worth looking at. In fact, I
think that's why some broadband vendors like to insist that their
customers run it. Way, way lighter-weight and simpler than IPSec,
but still has decent auth.

-Bennett

Attachment: _bin
Description: