RE: Communicate from a laptop -- PCTECH

I'm not sure I follow. Ignore the internet for a moment. Within the
office you have two "group" of machines, those that are hardwired and
those that are wireless. Ignoring security, it would be fine for them to
all be on one big happy subnet, including the iSeries. So far so good?

However, we can't ignore security, right? So what I'm proposing is put
the wireless people on their own subnet and bring up a VPN connection to
the "real" subnet. This way they can access "protected" resources over
the VPN and still be wireless. 

Now, as for the internet, you could either force them to come over the
VPN and then out through the same interface as the hardwired people, or
you could provide another route to the internet for the wireless people.

Make sense, or did I miss something?

-Walden

------------
Walden H Leverich III
President & CEO
Tech Software
(516) 627-3800 x11
WaldenL@xxxxxxxxxxxxxxx
http://www.TechSoftInc.com

Quiquid latine dictum sit altum viditur.
(Whatever is said in Latin seems profound.)
  


-----Original Message-----
From: Gary Kuznitz [mailto:docfxit@xxxxxxxxxxxx] 
Sent: Wednesday, 16 March, 2005 15:09
To: PC Technical Discussion for iSeries Users
Cc: Walden H. Leverich
Subject: RE: Communicate from a laptop

Moved from Midrange List

Hi Walden,

Thanks for your input.  My iimmediate need is to protect the wireless 
transmission in the office.  I can easily setup a VPN tunnel between 
the laptop --> over wireless --> to a remote office.   Which covers 
the wireless part easily.  The problem is when I need to surf the 
internet to other locations. Like when I need to transmit to other 
people that don't have VPN setup.  At these times I'd like to have 
the wireless protected.

Thank you,

Gary Kuznitz

> Gary,
> 
> We use W2K as our VPN server (no surprise there, right? <G>) so what
we
> did in this situation was deploy a second subnet for all wireless
> access. That subnet, while it has a private IP range (10.100.12.x) is
> still considered by us to be a public network, so there's no direct
> connect between the wireless subnet and our internal network. However,
> the VPN server is connected to that subnet. So when you're wireless
you
> need to bring up a VPN connection just as if you were anywhere on the
> internet, and the connection is the same one you'd bring up from home
--
> into the same VPN server you'd access from home. 
> 
> What I'm getting at is, do you need a separate VPN server for the
> wireless stuff, or can you setup your current VPN server to handle
> another subnet?
> 
> -Walden
> 
> 
> ------------
> Walden H Leverich III
> President & CEO
> Tech Software
> (516) 627-3800 x11
> WaldenL@xxxxxxxxxxxxxxx
> http://www.TechSoftInc.com
> 
> Quiquid latine dictum sit altum viditur.
> (Whatever is said in Latin seems profound.)
>