Slashdot Mirror
IPsec on Mac OS X Panther?
ItsMr.Data wants to take a bite out of this issue: "I just got a new PowerBook with Airport. I wish to use it in the wireless network at the university I attend. The problem is that the university uses BlueSocket to secure the WIFI connections. The BlueSocket gateway is configured for IPsec tunnels. The client tool that BlueSocket provides does not work properly under Panther. I was told by the network department that it would be up to me to find a solution until BlueSocket comes out with an updated client. Being a poor college student, I would like to find a cheap or free solution. I have never worked with VPNs or IPsec. Do any Slashdot readers have any good ideas?"
The IPSec facilities in Panther should be more than sufficient for what you need. In my experience (in very nearly the exact same situation, as well as similar ones at corporation), the hardest part is wrangling the proper information out of your support staff. First you have to find someone who know WTF you're talking about. then they have to find the information. then they (may) have to get approval to give it to you. that generally involves convincing some clueless administrative type that you're not an 3vi1 h4xx0r. and then they have to actually give it to you. and the odds of getting the info right on the first try is not so good.
my biggest bit of advice is find some friendly, knowledgeable admin, find out what she likes to drink, and buy her lots of it.
i speak for myself and those who like what i say.
[sarcasm]I don't know if I'd say Microsoft stuff is proprietary since they're basically THE software company.[/sarcasm]
Bluesocket is based on open industry standards. Many cisco products also support open standards, but they have been known to work in the odd bit of proprietary crap here and there. Cisco more often just do standards a bit early, before they're widely agreed upon, then bring their system in line with the ratified versions of the standards.
I suspect IHBT...
.sig: file not found
Saying that PEAP is a more open standard than LEAP isn't going to help anybody connect to a VPN. WPA, 802.1x authentication and even WEP don't really have anything to do with PPTP or IPSEC VPN's, other than they both use encryption and some of them authenticate by username/password. If this guy's school is using Bluesocket VPN I don't think they're worried about using open standards, they've already dished out the money for this VPN solution and I'm willing to bet they'll stick with it. All that aside, I suppose you are right, LEAP is less proprietary than PEAP, I just don't think it's relevant to this situation.
This "Ask /." is one of the examples of what's great about /.: The author of the relevant software responded.
And he's at (Score:+5, Informative), you kidder.
There are no trails. There are no trees out here.
Not everybody has the time or interest to learn about what ipsec is. A GUI with an IP, username and password should be ALL that's needed to set up an ipsec tunnel. VaporSec, Cisco clients both give you this. If the sysadmin gives you the right info, should take all of 5 minutes to get connected. Less time than reading the first two pages of kame.org. And then on with your real work.
Hence the OP.
You're just jealous because the voices only talk to me.
You would be surprised at how responsive they can be. They typically don't know anything about technology (that's why they hire other people to do that stuff)
Explain to them that while their solution is good, it falls short on what the university should strive to provide. Tell them that universaly WiFi access helps their current students and increases their attractivness to potential students.