Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I have a set of remote servers, assigned to a small IP address pool. I would like to control access to some services on some servers via ip address, rather than login/password.

However, I would like to access these services from wifi hotspots, etc, so I would like to create a VPN which I would log in to (via a username/password), which would be assigned one of the IP addresses in the server's pool.

I would like to use built in clients on Windows and Mac OS X to access the VPN, which I believe rules out the commonly advocated ssh solutions.

What packages should I look into and configure on debian/linux to achieve this setup?

share|improve this question
1  
I am a bit curious about why you are ruling out SSH? –  Zoredache May 1 '09 at 19:22
    
For the stated reason - I want to know what my options are to use the built in clients. I will probably give access to this VPN to people who I can't insist install particular software on their PCs –  John McAleely May 1 '09 at 23:40
    
I should perhaps observe that I have looked at OpenVPN, and it is obviously a good solution to many VPN problems. Just not the one I wish to solve in this question. –  John McAleely May 1 '09 at 23:44
1  
@John: personally I believe that the ease and flexibility of OpenVPN outweighs the hassles that IPSec or similar solutions have. –  David Schmitt May 4 '09 at 7:41
add comment

4 Answers 4

up vote 5 down vote accepted

xl2tpd is in Debian. It's a server for L2TP IPSec VPN. Windows supports L2TP natively. Alternatively, you can use OpenSwan (also in Debian) to set up IPSec.

I know you want to focus on built-in clients, but take a look at OpenVPN just the same. It's cross-platform and easy to set up and deploy. It's also extremely secure and flexible at the same time. I tried to set up xl2tpd and went with OpenVPN instead.

share|improve this answer
add comment

It looks like Poptop will do the job for you. If you look in Debians package management tool you should see it.

Apparently works for Windows and Mac OS X clients (>= 10.2) although as this this article points out, you might be compromising your network security using it.

share|improve this answer
add comment

What services are you providing? If the services support it, you should simply consider enabling SSL, or adding SSL via something like stunnel.

OpenVPN is one of the best packages you could install in my opinion.

share|improve this answer
add comment

'Built in clients' is your limiting factor here. You likely need a PPTP or IPSec solution.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.