Re: [PCTECH] Re: VPN questions

["Adam Lang" <aalang@xxxxxxxxxxxxxxxxxxxx>]

You just confused me. If I do not explain what you are asking, let me know,
I am guessing here. :p

For a VPN, one box is the server and the other is the client.  The client
initiates the connection with the server.  So, if the AS/400 is the server,
the client needs to know how to find it, ie a public ip address that the
firewall port forwards to the private ip address of the as/400.

Now, if the AS/400 is acting as a client and VPNing to another server, the
OTHER server needs to have the same sort of setup, but the client AS/400
doesn't.  It gets to the Internet via NAT.
----- Original Message ----- 
From: "Vern Hamberg" <vhamberg@xxxxxxxxxxxxxxxxxxxxxxxxx>
To: "PC Technical Discussion for iSeries Users" <pctech@xxxxxxxxxxxx>
Sent: Monday, August 09, 2004 10:49 AM
Subject: Re: [PCTECH] Re: VPN questions


> Have you made this work by pointing the 400 that is inside the router at a
> non-400 outside the router - there has to be something out there with the
> VPN connection, I believe.
>
> At 08:09 AM 8/9/2004, you wrote:
> >Yes, you would have to have some sort of port forwarding at a minimum,
but
> >you can forward just the ports necessary to handle the VPN connection.
> >----- Original Message -----
> >From: "Vern Hamberg" <vhamberg@xxxxxxxxxxxxxxxxxxxxxxxxx>
> >To: "PC Technical Discussion for iSeries Users" <pctech@xxxxxxxxxxxx>
> >Sent: Saturday, August 07, 2004 3:14 PM
> >Subject: Re: [PCTECH] Re: VPN questions
> >
> >
> > > Doesn't the 400 have to be exposed to the Internet for this VPN to
work?
> >Or
> > > at least through some router that gets it to another 400 in a DMZ or
> >something?
> > >
> > > Vern
> > >
> > > At 07:41 PM 8/6/2004, you wrote:
> > >
> > > -snip-
> > >
> > > >Note that the native VPN support under OS/400 adheres more to
Microsoft
> > > >VPN concepts rather than, say, Cisco. In such a case, there is no
> > > >necessary VPN/firewall appliance involved.
> > >
> > > -snip-
> > >
> > >
> > > --
> > > This is the PC Technical Discussion for iSeries Users (PcTech) mailing
> >list
> > > To post a message email: PcTech@xxxxxxxxxxxx
> > > To subscribe, unsubscribe, or change list options,
> > > visit: http://lists.midrange.com/mailman/listinfo/pctech
> > > or email: PcTech-request@xxxxxxxxxxxx
> > > Before posting, please take a moment to review the archives
> > > at http://archive.midrange.com/pctech.
> >
> >--
> >This is the PC Technical Discussion for iSeries Users (PcTech) mailing
list
> >To post a message email: PcTech@xxxxxxxxxxxx
> >To subscribe, unsubscribe, or change list options,
> >visit: http://lists.midrange.com/mailman/listinfo/pctech
> >or email: PcTech-request@xxxxxxxxxxxx
> >Before posting, please take a moment to review the archives
> >at http://archive.midrange.com/pctech.
>
>
> --
> This is the PC Technical Discussion for iSeries Users (PcTech) mailing
list
> To post a message email: PcTech@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/pctech
> or email: PcTech-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/pctech.