This August 2000 SANS article does a great job of describing cost-effective methods for implementing IPSec using NIST Cerberus IPSec Reference Implementation. "We experimented with different approaches to provide a cost-effective method of remote logon activities including SSH scripting and S/WAN IPSec implementation but due to the private network we are using for our core business, we have chosen a simple solution provided by NIST Cerberus IPSec and the PlutoPlus IKE software for encapsulation or tunneling between our Linux firewalls and the security console. Also, we are currently using IPv4 and not IPv6. [By the end of August 2000, the Cerberus software will be made available to the public.] We have chosen Cerberus because of its built-in user interface and web-based tester (WIT) for interoperability testing capability. More importantly, NIST Advanced Networking Technologies Division has provided substantial research in IPSec, and has incorporated IPv6 standardization in the Cerberus software. We have come to realize that VPN is the answer or solution to our specific problem. "
The link for this article located at SANS is no longer available.
