How did we setup the SWAP?


Secure Wireless Access Point (SWAP)

All you need is OpenBSD and a supported Wireless card that you can run in hostap mode, i.e. as an Access Point.  However, hostap mode is not requirement for this solution.

We did nothing to the OpenBSD installation or configuration when installing OpenBSD on Servers or Workstations.  You will have to define your firewall rule set to enforce your security policy and know how to setup ISAKMP but that's all.

We used Commell EMB-564 embedded hardware because the CPU was fast enough to handle IPsec traffic.  They came with four NICs, mini-PCI for the wireless card and a fairly good Serial BIOS.  There are no moving parts.  OpenBSD runs off of a 512 MB Flash Card.