[NTLUG:Discuss] linux vpn question

[Jay Urish]

NO.
Not if you go netgear..

You just set the firewalls up as if they are standalone, making sure 
that you have different LAN networks on each side, i.e 192.168.10.x/24 
on site A and 192.168.11.x/24 on site b


Monty Shinn wrote:
> Thanks to all for the help.
> 
> After some more reading, it appears that I am going to have to have a separate network for all the vpn traffic on both sides of the tunnel.  Is this correct?
> 
> Thanks,
> 
> Monty
> 
> -----Original Message-----
> From: discuss-bounces at ntlug.org [mailto:discuss-bounces at ntlug.org] On Behalf Of joseph beasley
> Sent: Friday, February 09, 2007 11:39 AM
> To: NTLUG Discussion List
> Subject: Re: [NTLUG:Discuss] linux vpn question
> 
> You can load ipsec-tools on both machines. 
> http://www.netbsd.org/Documentation/network/ipsec/ has a few examples setting up manual keys and using IKE.  (Yes it is a netbsd link, but the commands also work in linux.)
> 
> 
> --- Monty Shinn <montys at videopost.com> wrote:
> 
>> Greetings.
>>
>> I am needing to link 2 offices together with a vpn solution.  I would 
>> prefer to use IPCOP, but I am not sure how to implement what I need, 
>> or if it is robust enough.
>>
>> Unfortuantely, I have never implemented a vpn before, and all the 
>> information I have found on the web has not gone deep enough, or 
>> detailed enough to help.
>>
>> Can anyone guide me to a good howto or other explanation on setting up 
>> a vpn, beyond what the ipcop and similar websites have to offer?
>>
>> Basically, I need to know how to set up the routing on both the "left" 
>> and "right" side of the vpn, and if I need any Ipsec software 
>> installed on the client computers.  I am trying to set up a net-to-net 
>> configuration.
>>
>> For instance, the local oracle server sits at ip address >>x.x.x.3<<.
>>  The local (green) ipcop ip address is >>x.x.x.4<<.  On the remote 
>> side, the ipcop local (green) ip address will be >>y.y.y.5<<.  I can't 
>> find any information on how to set up a route where a remote client 
>> computer can point to >>y.y.y.5<< and all ports be seamlessly routed 
>> directly to >>x.x.x.3<< inside an encrypted vpn tunnel.  It doesn't 
>> look like ipcop's port forwarding applies to vpns.
>>
>> I only want the traffic associated with the oracle database (ODBC) and 
>> samba mount to be sent through the vpn tunnel.
>>
>> Please forgive the obvious newbie nature of my questions and examples.
>>
>> Many thanks in advance,
>>
>> Monty
>>
>> _______________________________________________
>> http://www.ntlug.org/mailman/listinfo/discuss
>>
> 
> 
> Joe Beasley
> CNE, CCNP, MCSE, CCNA, AEIOU....
> 
>   AOL Messenger joebeasley3rd
> Yahoo Messenger joe_beasley
> MSN Messenger joebeasley3rd
> 
> 
> 
> 
> 
> 
>  
> ____________________________________________________________________________________
> Need Mail bonding?
> Go to the Yahoo! Mail Q&A for great tips from Yahoo! Answers users.
> http://answers.yahoo.com/dir/?link=list&sid=396546091
> 
> _______________________________________________
> http://www.ntlug.org/mailman/listinfo/discuss
> 
> 
> _______________________________________________
> http://www.ntlug.org/mailman/listinfo/discuss

-- 
Jay Urish CCNA    Network Engineer
http://jay.unixwolf.net
Home)972.691.0125    Cell)972.965.6229