We are currently using a Microsoft RAS server, using PPTP for people to VPN into the office network. Its not particularly secure as peoples usernames are predictable, and many of the users are not choosing secure passwords. Any attempt to enforce moderate security in passwords faces internal rebellion.
Im considering setting up the VPN to use IPSEC, and to authenticate with certificates. What i need is advice on suitable IPSEC server configurations, managing the certificates, and managing the deployment of certificates - particularly from people who have done exactly this. I have experience managing Windows, Linux and to a much lesser extent OpenBSD Operating systems.
Finally, i've seen comments about XP proffessional machines not being able to make adhoc IPSEC connections when their IP address is not fixed? Is this a genuine problem?
Thanks in advance for your help,