VPN for VPC

[temujin9]

The StrongSwan setup works fine for Linux to Linux, but is not accessible to OSX "road-warrior" clients (e.g. - single machine connecting directly to the VPN, rather than network-to-network bridge). We need to either:

• Set up network-to-network and accept that most employees won't be able to access these networks outside of the office, or
• Debug the xl2tpd setup (or a RSA-based solution) so that it works with recent-model Macs.

We'll also need to work on getting Cisco set up to connect to the VPN, instead of the bastion-host they currently use, which is likely to be a hairy affair.

Caveat

VPN is very fiddly. Clients will probably have specific needs, which we won't be able to easily anticipate, that will require further tweaking/expansion of the strongswan setup.

[temujin9]

Like the initial setup, debugging xl2tpd seems like a good task to give to Jerry.

[UncleTallest]

I'll need temporary use of a Mac or an iPhone (or both, if available) to test this; but yeah, I can do this if asked.