27 Jul
2009
27 Jul
'09
5:44 p.m.
On Mon, Jul 27, 2009 at 1:38 PM, Thomas Bächler<thomas@archlinux.org> wrote:
Ray Kohler schrieb:
I usually recommend strongSwan (which is in AUR) for interoperability with Cisco concentrators. It works quite well, but it's not simple to set up initially. I still believe it to be the best technical solution, but it would be beyond me to explain how to do it, via email, and for an unfamiliar situation.
I was under the impression the only thing that worked with Cisco's proprietary xauth protocol was vpnc. (Apart from authentication, it is only IPSEC IIRC)
strongSwan supports XAUTH, though I've never tested that feature. It also supports certificate-based authentication, which vpnc doesn't, and which I actually do use.