running a vpn client

[Chris Carlson]

Depends on what VPN you're running.

If it's IPSec, then network address translation (NAT)
using linux's ip masq will break the protocol and it
won't work!

What VPN product/protocol are you using?

Some IPSec implementations may be configured for
one-to-one static NAT mappings, but your mileage may
vary.  Plus the SysAdmin on the other end may not want
to set up all those maps.

There are other VPN protocols that aren't affected by
NAT:  PPTP, L2TP, L2F (no encryption, though), SSL,
SOCKS, SSH, and other proprietary stuff.

Good luck!

Chris
--

--- steve sproston <ssproston at home.com> wrote:
> Hi.
> 
> Relatively new linux user - just set up firewall
> with ip masq to run
> multiple boxes on a single cable ip address.
> Everything is working great
> except for one thing:
> 
> I need to access a remote vpn server outbound from
> my lan. I can't get a
> connection. i have set an ipfwadm rule to allow
> inbound tcpip from the vpn
> server. It works from the other side of my firewall
> but not from behind it.
> 
> does anyone know how what i need to do to set this
> up? looked around VPN
> stuff for linux but it is all on how to set up
> server side stuff.
> 
> Thanks.
> 
> Steve
> 
>
****************************************************************
> TO POST A MESSAGE on this list, send it to
> vpn at listserv.secnetgroup.com
> 
> The VPN FAQ (under construction) is available at
> http://kubarb.phsx.ukans.edu/~tbird/vpn/FAQ.html
> 
> We are currently experiencing "unsubscribe"
> difficulties.  If you
> wish to unsubscribe, please send a message
> containing the single line
> "unsubscribe vpn your-e-mail-address" to
> owner-vpn at listserv.secnetgroup.com
> 
>
****************************************************************
> 

__________________________________________________
Do You Yahoo!?
Bid and sell for free at http://auctions.yahoo.com

****************************************************************
TO POST A MESSAGE on this list, send it to vpn at listserv.secnetgroup.com

The VPN FAQ (under construction) is available at
http://kubarb.phsx.ukans.edu/~tbird/vpn/FAQ.html

We are currently experiencing "unsubscribe" difficulties.  If you
wish to unsubscribe, please send a message containing the single line
"unsubscribe vpn your-e-mail-address" to owner-vpn at listserv.secnetgroup.com

****************************************************************