Re: [PCTECH] Re: VPN questions

["Adam Lang" <aalang@xxxxxxxxxxxxxxxxxxxx>]

Yeah, from what I recall, that is a bit different and that specific setup
had additional requirements.
----- Original Message ----- 
From: "Vern Hamberg" <vhamberg@xxxxxxxxxxxxxxxxxxxxxxxxx>
To: "PC Technical Discussion for iSeries Users" <pctech@xxxxxxxxxxxx>
Sent: Monday, August 09, 2004 11:20 AM
Subject: Re: [PCTECH] Re: VPN questions


> I think I understand your confusion, and you're repeating my question OK.
I
> just realized that my question is rooted in the configuration for Extreme
> Support (whatever the current name), for sending PTF requests and Service
> Director info via the Internet instead of through the phone line. It's
> probably not really what this thread was about -- sorry.   ;-)
>
> Vern
>
> At 10:06 AM 8/9/2004, you wrote:
> >You just confused me. If I do not explain what you are asking, let me
know,
> >I am guessing here. :p
> >
> >For a VPN, one box is the server and the other is the client.  The client
> >initiates the connection with the server.  So, if the AS/400 is the
server,
> >the client needs to know how to find it, ie a public ip address that the
> >firewall port forwards to the private ip address of the as/400.
> >
> >Now, if the AS/400 is acting as a client and VPNing to another server,
the
> >OTHER server needs to have the same sort of setup, but the client AS/400
> >doesn't.  It gets to the Internet via NAT.
> >----- Original Message -----
> >From: "Vern Hamberg" <vhamberg@xxxxxxxxxxxxxxxxxxxxxxxxx>
> >To: "PC Technical Discussion for iSeries Users" <pctech@xxxxxxxxxxxx>
> >Sent: Monday, August 09, 2004 10:49 AM
> >Subject: Re: [PCTECH] Re: VPN questions
> >
> >
> > > Have you made this work by pointing the 400 that is inside the router
at a
> > > non-400 outside the router - there has to be something out there with
the
> > > VPN connection, I believe.
> > >
> > > At 08:09 AM 8/9/2004, you wrote:
> > > >Yes, you would have to have some sort of port forwarding at a
minimum,
> >but
> > > >you can forward just the ports necessary to handle the VPN
connection.
> > > >----- Original Message -----
> > > >From: "Vern Hamberg" <vhamberg@xxxxxxxxxxxxxxxxxxxxxxxxx>
> > > >To: "PC Technical Discussion for iSeries Users" <pctech@xxxxxxxxxxxx>
> > > >Sent: Saturday, August 07, 2004 3:14 PM
> > > >Subject: Re: [PCTECH] Re: VPN questions
> > > >
> > > >
> > > > > Doesn't the 400 have to be exposed to the Internet for this VPN to
> >work?
> > > >Or
> > > > > at least through some router that gets it to another 400 in a DMZ
or
> > > >something?
> > > > >
> > > > > Vern
> > > > >
> > > > > At 07:41 PM 8/6/2004, you wrote:
> > > > >
> > > > > -snip-
> > > > >
> > > > > >Note that the native VPN support under OS/400 adheres more to
> >Microsoft
> > > > > >VPN concepts rather than, say, Cisco. In such a case, there is no
> > > > > >necessary VPN/firewall appliance involved.
> > > > >
> > > > > -snip-
> > > > >
> > > > >
> > > > > --
> > > > > This is the PC Technical Discussion for iSeries Users (PcTech)
mailing
> > > >list
> > > > > To post a message email: PcTech@xxxxxxxxxxxx
> > > > > To subscribe, unsubscribe, or change list options,
> > > > > visit: http://lists.midrange.com/mailman/listinfo/pctech
> > > > > or email: PcTech-request@xxxxxxxxxxxx
> > > > > Before posting, please take a moment to review the archives
> > > > > at http://archive.midrange.com/pctech.
> > > >
> > > >--
> > > >This is the PC Technical Discussion for iSeries Users (PcTech)
mailing
> >list
> > > >To post a message email: PcTech@xxxxxxxxxxxx
> > > >To subscribe, unsubscribe, or change list options,
> > > >visit: http://lists.midrange.com/mailman/listinfo/pctech
> > > >or email: PcTech-request@xxxxxxxxxxxx
> > > >Before posting, please take a moment to review the archives
> > > >at http://archive.midrange.com/pctech.
> > >
> > >
> > > --
> > > This is the PC Technical Discussion for iSeries Users (PcTech) mailing
> >list
> > > To post a message email: PcTech@xxxxxxxxxxxx
> > > To subscribe, unsubscribe, or change list options,
> > > visit: http://lists.midrange.com/mailman/listinfo/pctech
> > > or email: PcTech-request@xxxxxxxxxxxx
> > > Before posting, please take a moment to review the archives
> > > at http://archive.midrange.com/pctech.
> >
> >--
> >This is the PC Technical Discussion for iSeries Users (PcTech) mailing
list
> >To post a message email: PcTech@xxxxxxxxxxxx
> >To subscribe, unsubscribe, or change list options,
> >visit: http://lists.midrange.com/mailman/listinfo/pctech
> >or email: PcTech-request@xxxxxxxxxxxx
> >Before posting, please take a moment to review the archives
> >at http://archive.midrange.com/pctech.
>
>
> --
> This is the PC Technical Discussion for iSeries Users (PcTech) mailing
list
> To post a message email: PcTech@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/pctech
> or email: PcTech-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/pctech.