Hi, I'm going to install a VPN s

[peterve]

Hi,

I'm going to install a VPN solution using Win2K's built-in features (PPTP or L2TP over IPSec)
I already did some testing with PPTP using MS-Chap v2, which works great...
I've done some research and everybody tells me that using a smartcard is the most secure way to log on.
Maybe I don't get it, because all a user needs to know is a pincode to access the smartcard.
And let's face it, a user will write down something... a password or a pincode, it doesn't matter if he has a hard time remembering it.
I can prevent the login name to be displayed, so a hacker has to know both the username and the password to log on... but if a hacker knows the pincode, he has enough information to access the network...

Can somebody explain me why the smartcard is safer ?
Is there a way to log on to the VPN using a smartcard and still having to provide a name&password ?
I don't want to use a 3rd party product...

Thanks


Peter Van Eeckhoutte
peter.ve@pandora.be