Re: [LARTC] VPN Solution

Re: [LARTC] VPN Solution

[Grant Taylor]

On 11/21/06 00:20, Rangi Biddle wrote:
> What I want to do is have a VPN (PPTP/IPSEC/CIPE/etc) server, but it 
> must support more than one simultaneous connection.
> 
> I currently have a PPTP VPN server setup that has port 1723 and protocol 
> 47 DNAT’d through to the internal IP address of the VPN server and I 
> have not been able to have more than one connection at a time.  I am 
> considering setting up the VPN server as a gateway (for lack of a better 
> word) and instead of DNATing the connections through to the internal IP 
> I would setup a DMZ with the VPN server as the only host.  My only 
> concern in doing so is that if it does not work what other options do I 
> have besides getting a different connection type such as fibre?  I’m 
> trying to do this as cheaply as possible.

Can / will you provide some more information such as what type of client 
will be connecting to the VPN concentrator?

I believe the 1 concurrent connection you are referring to is a limitation 
of IPTables match extension for PPTP tunnels.  If you put the VPN 
Concentrator such that it is directly routable you should have better luck.

Beyond PPTP, you can look in to IPSec or SSLTunnel, or any number of other 
products.  However to be able to determine which of the products is best 
suited to your situation, we need to know more about your situation.



Grant. . . .
_______________________________________________
LARTC mailing list
LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc

[LARTC] VPN Solution

[Rangi Biddle]

[-- Attachment #1.1: Type: text/plain, Size: 924 bytes --]

Greetings List Members,

 

I'll firstly apologise if this isn't the place that I should be posting this
message but here goes.

 

What I want to do is have a VPN (PPTP/IPSEC/CIPE/etc) server, but it must
support more than one simultaneous connection.

 

I currently have a PPTP VPN server setup that has port 1723 and protocol 47
DNAT'd through to the internal IP address of the VPN server and I have not
been able to have more than one connection at a time.  I am considering
setting up the VPN server as a gateway (for lack of a better word) and
instead of DNATing the connections through to the internal IP I would setup
a DMZ with the VPN server as the only host.  My only concern in doing so is
that if it does not work what other options do I have besides getting a
different connection type such as fibre?  I'm trying to do this as cheaply
as possible.

 

Any and all comments/suggestions are welcome.

 

Rangi


[-- Attachment #1.2: Type: text/html, Size: 3462 bytes --]

[-- Attachment #2: Type: text/plain, Size: 143 bytes --]

_______________________________________________
LARTC mailing list
LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc

[LARTC] VPN Solution

[Nyamul Hassaan]

[-- Attachment #1.1: Type: text/plain, Size: 938 bytes --]

Greeting List Members,

I'm not sure if what I want to do is possible at all.  I have an office network (ONet) with 3 uplinks.  Each of these ISPs give me a block of /26 to /29 IP addresses, as my needs / demands are.

Now, I have a remote server (RS) hosted in a data center, which communicates between several hosts in my office.  What we want to do is encrypt the data being transferred between RS and ONet.

We already established a IPSEC tunnel between RS and ONet through 1 of the uplinks.  Is it possible to have 3 different IPSEC tunnels through the 3 uplinks, and then have a load balancing between the 3?

We have also taken a /26 block from the data center provider, and have routed the /26 through the IPSEC to our ONet.  Can we have the same /26 use the 3 uplinks configured as IPSEC tunnels and load balance between them?

If you need any more explanation, I would be happy to provide that.

Regards
HASSAAN


[-- Attachment #1.2: Type: text/html, Size: 1949 bytes --]

[-- Attachment #2: Type: text/plain, Size: 143 bytes --]

_______________________________________________
LARTC mailing list
LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc