[VPN] Ip addresses

[Garry Rees]

I'm a novice, struggling at the moment to configure some laptops (for home
use) with Netscreen remote and a Netscreen 25 firewall.

I have got the connections working.ie I can VPN in to the company network
from home via a ADSL connection, access Windows servers, unix servers, run
programs, download upload etc but am stuck with one thing.

I want to print from a unix box in the company to the home laptop. To do
this I have to print to a specific IP address. I want to be able to give my
laptop at home a specific IP address that can go through my firewall so that
my unix box can print to this IP address. At the moment I can log onto and
ping the unix box from home but cannot ping the home laptop from unix (or
windows) network when on site. I have tried (but don't fully understand)
mapped and dynamic addresses and think I need  policies, on incoming and
outgoing, to route the print data from unix out to the laptop. I can give my
laptop a fixed IP address but cannot ping it from unix or windows even when
I am VPN'd in and logged onto the server.

Any help would be appreciated as to what I am missing (apart from enough
grey cells)

GR



-----Original Message-----
From: vpn-admin at lists.shmoo.com [mailto:vpn-admin at lists.shmoo.com]On
Behalf Of vpn-request at lists.shmoo.com
Sent: 09 April 2003 13:00
To: vpn at lists.shmoo.com
Subject: VPN digest, Vol 1 #151 - 2 msgs


Send VPN mailing list submissions to
	vpn at lists.shmoo.com

To subscribe or unsubscribe via the World Wide Web, visit
	http://lists.shmoo.com/mailman/listinfo/vpn
or, via email, send a message with subject or body 'help' to
	vpn-request at lists.shmoo.com

You can reach the person managing the list at
	vpn-admin at lists.shmoo.com

When replying, please edit your Subject line so it is more specific
than "Re: Contents of VPN digest..."


Today's Topics:

   1. Re: Application timeouts over VPN...HELP! (Alex Pankratov)
   2. VPN help (Michael Burns)

--__--__--

Message: 1
Date: Sat, 05 Apr 2003 17:09:46 -0800
From: Alex Pankratov <alex at cipherica.com>
To: vpn at lists.shmoo.com
Subject: Re: [VPN] Application timeouts over VPN...HELP!



safieradam wrote:
> The 65 seconds in your original method is one thing. Keeping the session
> up and idle for hours is a big difference.  I would whip out the "New"
> security policy and point out to the developers that leaving sessions
> open for hours is bad security and not allowed.

Adam,

can you explain why *exactly* it's a "bad security" ? Especially given
that the TCP connection in question is IPsec'ed in first place.

[snip]

> Adam Safier

[snip]


--__--__--

Message: 2
Date: Tue, 8 Apr 2003 09:41:07 -0700
From: Michael Burns <aquamjb at mac.com>
To: vpn at lists.shmoo.com
Subject: [VPN] VPN help

Hi,

Am looking into to find information to see if there is VPN for the
T-Mobile Sidekick (wireless mobile pager, more in Danger.com). Reason
to have the VPN is that I could use to communicate with my engineers
within the division both in and out of campus. Am deaf and am usually
working with highly senstive projects which would require me to have
secure access to my email or to corporate website. This VPN would
greatly help lot if there is a way to use in the mobile wireless pager
like the Sidekick.

Thanks and hope there is info that would apply to this wireless pager.
Or you might know one who could help me out? Or can contact the
Danger.com group to see what would work.

Michael Burns



--__--__--

_______________________________________________
VPN mailing list
VPN at lists.shmoo.com
http://lists.shmoo.com/mailman/listinfo/vpn


End of VPN Digest

________________________________________________________________________
This e-mail has been scanned for all viruses by Star Internet. The
service is powered by MessageLabs. For more information on a proactive
anti-virus service working around the clock, around the globe, visit:
http://www.star.net.uk
________________________________________________________________________


**************************************************** 
This email and any content are confidential and intended solely for the use of the individual or entity to which it is addressed. Opinions expressed are not necessarily those of Hall & Woodhouse Ltd. Disclosure, copying, distribution or use is prohibited and may be unlawful.
Every endeavour has been made to ensure that this Email and any attachments are virus free, nevertheless any attachments to this Email should be virus checked.
If received in error please notify enquiries at hall-woodhouse.co.uk 
Visit our Websites at: 
www.badgerbrewery.com  www.badgerdirect.com www.tanglefoot.co.uk  www.drinkrio.com and www.pandapops.com 
______________________________________________________________________
This e-mail has been scanned for all viruses by Star Internet. The
service is powered by MessageLabs. For more information on a proactive
anti-virus service working around the clock, around the globe, visit:
http://www.star.net.uk
________________________________________________________________________