nanog mailing list archives

Re: Custom Wireless Solution


From: Charles Sprickman <spork () inch com>
Date: Wed, 25 Apr 2001 23:17:40 -0400 (EDT)


On Wed, 25 Apr 2001, John Kristoff wrote:

Mike Schoenecker wrote:
if one is prone to be paranoia, using both [1] and [2] probably makes sense.

Except that it is currently impractical for many sites since it requires
an entirely Cisco end-to-end shop including the Cisco (or Microsoft's)
RADIUS server.

Since all these products are bridges, wouldn't it make sense to just have
an Open/FreeBSD box at either end with two nics?  Both os's can do IPSEC
tunnels, and both end nodes will only be bridging a single MAC address.

You end up with a "clean" network design (since you've got an actual
endpoint or 'router') and you can encrypt your traffic with a bit more
confidence than with the WEP stuff...

Charles

John




Current thread: