"Reckhard, Tobias" wrote:

...

...

The only IPSec implementation that we tested on W2K was its native IPSec support. Which, basically, didn't work. W2K professional doesn't support tunnel mode

-snip-

be a patch to FreeS/WAN to make it ignore that bit), since the use of W2K Server on the road warriors was out of the question.

Hello, we have done some tests running SSH Sentinel 1.2 on a W2K road warrior, it works pretty _good_ with freeSwan 1.9 from SuSE 7.2, including X.509 certs from openssh. BUT freeSwan is broken on 7.2, and you need to install the patch from http://www.suse.de/~garloff/linux/FreeSWAN/ or recompile ipsec by yourself. AND the Sentinel docs need some updates for freeSwan. You might have given a look at the freeSwan mailing list too. Cheers, -- Denis.