Re: Re: VPN questions -- PCTECH

I think I understand your confusion, and you're repeating my question OK. I just realized that my question is rooted in the configuration for Extreme Support (whatever the current name), for sending PTF requests and Service Director info via the Internet instead of through the phone line. It's probably not really what this thread was about -- sorry. ;-)

Vern

At 10:06 AM 8/9/2004, you wrote:

You just confused me. If I do not explain what you are asking, let me know,
I am guessing here. :p

For a VPN, one box is the server and the other is the client.  The client
initiates the connection with the server.  So, if the AS/400 is the server,
the client needs to know how to find it, ie a public ip address that the
firewall port forwards to the private ip address of the as/400.

Now, if the AS/400 is acting as a client and VPNing to another server, the
OTHER server needs to have the same sort of setup, but the client AS/400
doesn't.  It gets to the Internet via NAT.
----- Original Message -----
From: "Vern Hamberg" <vhamberg@xxxxxxxxxxxxxxxxxxxxxxxxx>
To: "PC Technical Discussion for iSeries Users" <pctech@xxxxxxxxxxxx>
Sent: Monday, August 09, 2004 10:49 AM
Subject: Re: [PCTECH] Re: VPN questions


> Have you made this work by pointing the 400 that is inside the router at a
> non-400 outside the router - there has to be something out there with the
> VPN connection, I believe.
>
> At 08:09 AM 8/9/2004, you wrote:
> >Yes, you would have to have some sort of port forwarding at a minimum,
but
> >you can forward just the ports necessary to handle the VPN connection.
> >----- Original Message -----
> >From: "Vern Hamberg" <vhamberg@xxxxxxxxxxxxxxxxxxxxxxxxx>
> >To: "PC Technical Discussion for iSeries Users" <pctech@xxxxxxxxxxxx>
> >Sent: Saturday, August 07, 2004 3:14 PM
> >Subject: Re: [PCTECH] Re: VPN questions
> >
> >
> > > Doesn't the 400 have to be exposed to the Internet for this VPN to
work?
> >Or
> > > at least through some router that gets it to another 400 in a DMZ or
> >something?
> > >
> > > Vern
> > >
> > > At 07:41 PM 8/6/2004, you wrote:
> > >
> > > -snip-
> > >
> > > >Note that the native VPN support under OS/400 adheres more to
Microsoft
> > > >VPN concepts rather than, say, Cisco. In such a case, there is no
> > > >necessary VPN/firewall appliance involved.
> > >
> > > -snip-
> > >
> > >
> > > --
> > > This is the PC Technical Discussion for iSeries Users (PcTech) mailing
> >list
> > > To post a message email: PcTech@xxxxxxxxxxxx
> > > To subscribe, unsubscribe, or change list options,
> > > visit: http://lists.midrange.com/mailman/listinfo/pctech
> > > or email: PcTech-request@xxxxxxxxxxxx
> > > Before posting, please take a moment to review the archives
> > > at http://archive.midrange.com/pctech.
> >
> >--
> >This is the PC Technical Discussion for iSeries Users (PcTech) mailing
list
> >To post a message email: PcTech@xxxxxxxxxxxx
> >To subscribe, unsubscribe, or change list options,
> >visit: http://lists.midrange.com/mailman/listinfo/pctech
> >or email: PcTech-request@xxxxxxxxxxxx
> >Before posting, please take a moment to review the archives
> >at http://archive.midrange.com/pctech.
>
>
> --
> This is the PC Technical Discussion for iSeries Users (PcTech) mailing
list
> To post a message email: PcTech@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/pctech
> or email: PcTech-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/pctech.

--
This is the PC Technical Discussion for iSeries Users (PcTech) mailing list
To post a message email: PcTech@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/pctech
or email: PcTech-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/pctech.