Bill Marquette wrote:
On 9/28/06, Matthew Grooms <[EMAIL PROTECTED]> wrote:

I think we pretty much support everything that FreeBSD 6.1 supports.
It'd be interesting to know what mode(s) were being requested that we
don't allow though.


Well in this case, it would be features that ipsec tools supports that may or may not be missing. Most notably, modecfg for dynamic client configuration. Racoon has the ability to dole out private ip addresses/netmask, dns, split tunnel network lists, split domain lists, dns server, dns suffix, wins, etc ... Without the modecfg support, roaming clients are very limited or must rely on inflexible static configuration. With modecfg support, pfsense could be close to a drop-in replacement for a cisco vpn concentrator.

Thanks,

-Matthew

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to