Building to Building Security

[andyirving]

I am looking to implement a point to multipoint wireless bridge network. Security is of high importance and I am looking at ways of providing security to 802.11b. Is IPSec the way forward or should I be looking at 802.1x LEAP as a viable alternative. If IPSec how should I bring the remote sites in to the VPN (assuming I use a VPN Concentrator on the main site). Should I use another VPN Concentrator or is client software the best practise. Any advice on this subject would be great.

[scottmac]

Client software would be sufficient. If the users are sensitive to "extra steps to connect" you may want to consider something like a PIX 501 feeding the bridge and acting as the remote VPN endpoint.

LEAP has been compromised in some way in recent history but I haven't read the reports, and I do not know if it's a genuine issue. You may want to search around and see for yourself.

Good Luck

Scott