|
|
|
|
|
|
|
|
 |
 |
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] RE: [FW1] VPN server behind Firewall-1
The VPN server is running Win2k and I am planning to run the tests using L2TP and possibly only IPSEC for tunnelling. Some pointers on how to set up the VPN box behind the firewall without using NAT would be greatly appreciated. -----Original Message----- From: Milliken, Larry [mailto:[email protected]] Sent: March 28, 2001 11:30 AM To: 'Dias, Mario (Bolton)' Subject: RE: [FW1] VPN server behind Firewall-1 NAT on the firewall is not necessary..Since on the VPN server you can setup a pool of ip addresses to assign to remote users..I assume the VPN server is win2k..If not, I highly recommend it...As for the firewall, setup a rule to allow the PPTP protocols to the VPN server's ip address & you should be set.. -----Original Message----- From: Dias, Mario (Bolton) [mailto:[email protected]] Sent: Wednesday, March 28, 2001 11:20 AM To: '[email protected]' Subject: [FW1] VPN server behind Firewall-1 > Hi all, > > I am thinking of placing a Microsoft VPN server behind a Checkpoint > firewall for testing purposes. Mainly for the benefit that traffic going > to/from the VPN box will be logged by the firewall. > > I guess my questions are: > > Would anyone recommend placing a VPN server behind a firewall? > > Is it possible to place the VPN server behind the firewall without using > NAT? Not using NAT meaning that the VPN server, being dual-homed, has 1 > nic that has a valid Internet address, and is protected behind the > firewall. The other nic has an ip address for the LAN. > > Your opinions are more than welcome! Thanks. > > Mario > ============================================================================ ==== To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ============================================================================ ==== ================================================================================ To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================================================
|
||||||||||
 |
 |
 |
 |
 |
 |
 |
 |
 |
|
