I am working on an article about VPN and Remote Access right now but I thought I would post what I have so far and then I will combine this entry with the rest of the article when it is finished.
I have been setting up a VPN connection on a NET4090 router with m0n0wall v1.11 in order to allow users to access files on our server. Originally I was going to use a Windows 2008 server with Routing and Remote Access Services to facilitate the VPN, but there is an issue with the PPTP redirect and I eventually conceded to using the built in PPTP server. I set the encryption at 128-bit, but it was the authentication I was concerned about. The m0n0wall documentation makes no mention of the authentication protocol used. Neither does Google(at least not the first 4-5 pages of search results for several different search terms). So, in order to find out, I opened Wireshark and started capturing on my laptop's wireless interface. I then made the VPN connection. It seems that m0n0wall version 1.11 uses CHAP(Challenge Authentication Protocol), not PAP(Password Authentication Protocol). There are better authentication methods, but CHAP is far better than PAP. You can redirect authentication to a RADIUS server, but that's an overly complex solution for our network at this time.
Saturday, August 21, 2010
Subscribe to:
Posts (Atom)
