RE: VPN as AS/400 data line

[Chris Bipes <chris.bipes@xxxxxxxxxxxxxxx>]

You specify a default route to your internet router.  <WARNING> ** this puts
you AS400 on the internet directly, especially if it has a valid internet
IP.</WARNING>  If you have a firewall, the router IP would be the IP address
of the firewall.  If your AS400 does not have an internet IP you must use
NAT to be able to use the internet.  A static NAT is necessary if people are
coming in from the internet.

Location A subnet = 10.10.1.0 mask 255.255.255.0
Internet router = 10.10.1.254 (or firewall)
VPN server = 10.10.1.100
Add following routes:
destination 10.10.2.0 destination mask 255.255.255.0 router IP 10.10.1.100
destination *DFTROUTE destination mask *none or blank? router IP 10.10.1.254


Location B subnet = 10.10.2.0 mask 255.255.255.0
Internet router = 10.10.2.254  (or firewall)
VPN server = 10.10.2.100
Add following routes:
destination 10.10.1.0 destination mask 255.255.255.0 router IP 10.10.2.100
destination *DFTROUTE destination mask *none or blank? router IP 10.10.2.254

-----Original Message-----
From: Art Tostaine, Jr. [mailto:art@link400.com]
Sent: Tuesday, August 21, 2001 5:28 PM
To: midrange-l@midrange.com
Subject: RE: VPN as AS/400 data line


This is interesting to me.  If I put a VPN in front of my As/400, then give
my employees the VPN client, we'll all have the same
access as we do now, plus we'll see each others PC's just like when we are
all in the office.

Problem is, how does my Iseries FTP and TELNET, etc, to other internet hosts
that are not VPN?