I also installed Freeswan, while testing.  It installed and runs 
fine, but does not support X509 certificates.  Needs a kernel patch 
to gain this functionality, as I understand it. (See 
http://www.natecarlson.com/include/showpage.php?cat=linux&page=ipsec-x
509)

Now, I'm not using RH7.3, so perhaps (ray of hope) the default RH 
Kernel now supports X509 out of the box?

Chris Midkiff
DataCapture Technologies, INC.
Chris@datacaptech.com

On Thu, 19 Sep 2002 12:53:30 -0500 (CDT), Tony Zafiropoulos wrote:
>
>
>Have successfully installed freeswan...
>
>http://www.freeswan.org/
>
>You do not have to compile your own kernels...
>
>Use: http://rpms.steamballoon.com/freeswan/
>
>I have installed RH7.3 then the steamballoon rpms and freeswan now
>just
>needs to be configured (reduces the time spent learning the
>compiling)
>
>Tony
>
>
>On Thu, 19 Sep 2002, Chris Midkiff wrote:
>
>>I need to set up a VPN server, so that our people can connect from
>>their Win2k clients at home.  At this point, I'm just doing the
>>research, and would love to hear some ideas.  I've use VPN Clients
>>before, but don't know much about the server side of things.
>>
>>Has anyone ever done this?  The VPN Howto that I found talks about
>>patching (which I have not done) and building (which I have done) a
>>
>>new kernel, with X25 support.  This howto also show setting up a
>>valid IP Address for people to connect from.  Most of these people
>>are dial-up users, and I have no idea what their address will be.
>>
>>There are several special purpose distro's that have support for
>>VPN
>>and X25, such as SmoothWall linux.  Anyone have any experience with
>>
>>one of these packages?
>>
>>Also, we use a SpeedStream DSL Router that lists SecureVPN as an
>>optional component.  Might that be worth looking into?
>>
>>Chris Midkiff
>>DataCapture Technologies, INC.
>>Chris@datacaptech.com
>>
>>
>>
>>
>>
>>
>>majordomo@kclug.org
>>