Site To Site and Road warrior in 2.0RCX

periko · Jul 31, 2011, 2:35 AM

Hi.

With pfsense 1.2.3 I setup my server for a Road-Warrior and work, I remember that I had to user easy-rsa tools to build my files for each client. But now with pfsense 2.0 we have the certificate manager.

For the Road warrior, do we still need the easy-rsa tools or we can use the certificate manager to build the keys for each client?

Last thing, to connect 3 sites(networks) which setup is more strong against attacks:PKI or Shared Key?

The pfsense machines are protect against physical intruders.

Any input will be appreciated, thanks :)

Metu69salemi · Jul 31, 2011, 2:43 PM

It depends where you hold your pki files, but i prefer certificate more than shared secret

periko · Jul 31, 2011, 9:46 PM

Thanks Metu69salemi for your input.

What about the client key's do we still need to use easy-rsa ???

Metu69salemi · Aug 1, 2011, 6:18 AM

you could try out in build certmanager