Hi folks,
I'm trying to sort out in my mind my options for VPN access. I have my
simple home LAN (2 Windows boxes behind a Bering 1.2 box) that needs to
access other Windows based LANs via VPN using IPSec (not PPTP), one of
the LANs is behind a Cisco router and the other behind a Windows ISA
server. I see Tom's documentation clearly says:

If IPSEC is being used then only one system may connect to the remote
gateway and there are firewall
configuration requirements as follows:

ACTION  SOURCE          DESTINATION     PROTOCOL        PORT
CLIENTPORT              ORIGINALDEST
DNAT            net:192.0.2.224         loc:192.168.1.12           50
DNAT            net:192.0.2.224         loc:192.168.1.12    udp
500

If you want to be able to give access to all of your local systems to
the remote network, you should
consider running a VPN client on your firewall. As starting points, see
http://www.shorewall.net/Documentation.htm#Tunnels or
http://www.shorewall.net/PPTP.htm.

Here's my question:

Both of the boxes on my LAN need VPN access to the remote LANS, but not
at the same time, necessarily. Is there any reason (advantages /
disadvantages) I would want to implement a VPN client on my Bering
firewall -vs- Toms simple configuration. If I set up the VPN client on
Bering, do you anticipate any obscure configuration "issues" since my
LAN connection point would be my Bering box and the other side would be
a Cisco router or Windows ISA server? Your comments and suggestions are
most welcomed! Thank you...have a great weekend.

Craig




-------------------------------------------------------
This SF.net email is sponsored by: VM Ware
With VMware you can run multiple operating systems on a single machine.
WITHOUT REBOOTING! Mix Linux / Windows / Novell virtual machines at the
same time. Free trial click here: http://www.vmware.com/wl/offer/345/0
------------------------------------------------------------------------
leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html

Reply via email to