Cap needs some networking help

[captain]

OK folks... here it goes....

I need to set up a VPN from an XP machine to an xp machine...

I have a PPTP VPN connection set up now and I am using MPPE with 128bit but it does not meet the security I need.

I need to run this VPN with two factor authentication which means a username and pass and a certificate... Not just any certificate I need it to be a self approved cert not a paid one....

Anyone out there have a config like this? At the end of the day I need this:

Windows XP to Windows XP using L2tp or IPSEC with a certificate or key, no passphrase......

Uggg

 

[thrasherfox]

Nope, my VPN's suck. All I use is hardware crypto.

Ever thought about going with a general dynamics fastlane KG-75 to KG-75?

Product Details - FASTLANE® ATM Encryptor - Overview


Here are a some of hardware encryptors on ebay.

encryptor, Computers Networking, Home Garden items on eBay.com

 

[captain]

Yeah I have to roll this solution out to 5000 locations.... Sooooo purchasing is out of teh question... I could throw hardware at it all day but I need a Apollo 13 solution here...

Ok boys can we make this fit into this to do that

 

[dadofthree]

???

 

[outtahand]

Hey Ron, are you familiar with Cisco boxes?
I have a Cisco 1720 laying around... I'm too lazy to pull a book off the shelf to see if that can be implemented on just a 1720.

Captain, if this box will work for you, I'm happy to donate it.

From
Cisco 1721 and Cisco 1720 Modular Access Routers [Cisco 1700 ...

Security—The Cisco 1721 supports hardware-assisted wire-speed Triple Digital Encryption Standard IP Security (3DES IPSec) VPN encryption (using optional VPN module), a Cisco IOS Software-based stateful inspection firewall, and an intrusion detection system (IDS) that allows customers to keep their data safe.

 

[txbikerdude]

cap, pm me your number if you want. im a systems mgr and can have my network\vpn guy call you tomorrow if you want

 

[WWJD]

5000?? Ew! Don't know how you would license that. I've not tried these, but heard of them:
|MG| Securepoint Personal Firewall & VPN Client 3.7.1
dunno bout this one:
|MG| Outpost Firewall Free 1.0.1817
I know there is more out there...

I've found the XP built in VPN "good enough" in most cases, but I fear your requirement of meeting your security and needing 5000 clients cancel out any GOOD free options.
Would an additional free firewall help? Like Zonelabs or something?

 

[WWJD]

Setting Up the Windows XP PPTP and L2TP/IPSec client

maybe you tired this setup already

 

[captain]

Setting Up the Windows XP PPTP and L2TP/IPSec client

maybe you tired this setup already

Yeah I read that one today, the problem is the management of creating all the certs and deploying them.... Im just in a cruddy situation

 

[thrasherfox]

Cap let me look into it a little further. if it is 5000 then yeah, a hardware solution would be very expensive..

 

[WWJD]

That's a lot of users. The windows XP VPN won't work for you? What about having ONE sign on for everyone? Will that VPN sync with Active Directory reducing managment load? How are all those people on the network?

 

[captain]

They are 5000 smaller networks not one big one... there will be 5000 vpns

 

[WWJD]

any more details on this project? there are smaller, free VPNs out there for gamers and such that might work

 

[Mr Bogus]

They are 5000 smaller networks not one big one... there will be 5000 vpns

how is it you land these outrageous projects? Windows VPN has never been very robust in the first place..

 

[mrninja9]

wtf!!!!!

 

[captain]

how is it you land these outrageous projects? Windows VPN has never been very robust in the first place..

Yeah, it's what I do.....

Your gonna like this one....

So to use l2tp or EAP you have to have a cert right, well since Xp doesnt make certs I would have to make them on a 2003 server machine then import them... what a pain, then i would have to do this same thing every year.

OR

I could install something like Freesshd and set up a session of PUTTY to that XP machine and tunnel RDP through the SSH session. I configured two networks this way today and it was flawless.

There is an application out there that can bolt on to a terminal server (XP is not) that will make RDP secured but it doesnt work on XP so I ended up doing the above....

On a better note I bought 1500 copies of Redhat ES5 today!

 

[Cblast]

OK folks... here it goes....

I need to set up a VPN from an XP machine to an xp machine...

I have a PPTP VPN connection set up now and I am using MPPE with 128bit but it does not meet the security I need.

I need to run this VPN with two factor authentication which means a username and pass and a certificate... Not just any certificate I need it to be a self approved cert not a paid one....

Anyone out there have a config like this? At the end of the day I need this:

Windows XP to Windows XP using L2tp or IPSEC with a certificate or key, no passphrase......

Uggg

What is that? German?!?
My total expertise amounts to hitting the "more" button to get more smileys! I know, pointless, but I just had to :2cents: I know, I need to quit:40__s:

 

[Mr Bogus]

Linux does this but I think it is through my third party back end.. keys only, no passwords.. Still requires the key be distributed however..

I can do a little checking on it if you like.. The penguin does do some things well..

 

[captain]

Linux does this but I think it is through my third party back end.. keys only, no passwords.. Still requires the key be distributed however..

I can do a little checking on it if you like.. The penguin does do some things well..

I could do it in seconds with a linux box but I have an existing base of 5000 locations that already have XP... Moving OS's is not an option...

 

[Wrath]

I have used in the past Waste. Quite a handy tool.
SourceForge.net: WASTE