Just answering the "can it be done part" I'm
going to say yes- although I'm running FW-1 4.1 on IPSO and all my Novell
servers are 5.x and above (IP only)... but I think you've hit the nail on the
head- the Win2K would need IPX on the inside card and you have to do
encapsulation.
The other thing you can investigate is using
NetWare/IP on the 4.2 server- an ugly solution, but then the Novell client and
4.2 server will do the encapsulation/decapsulation and all the firewall and
SecuRemote pieces will have to worry about is an IP packet. I think
there's been some threads on this list or phoneboy on this topic, so search the
archives.
In all honesty, a 4.2 to 5.1 upgrade would
be much less painless- and then you'd be in the all-IP world. FTP and all
the IP services work fine in NetWare 5.x and above through the
firewall.
Regards,
-----Original
Message----- From: Mailing list for discussion of Firewall-1
[mailto: [email protected]] On Behalf Of Goran
Jovanovic Sent: Tuesday, April 02, 2002 12:08 AM To:
[email protected]Subject: [FW-1] VPN in to
a NetWare 4.2 server
Hi all,
The simple question is can this be done with a FW-1 NG firewall?
FW-1 NG is running on a Win2K Server. There is a NetWare 4.2 server
behind it. Since it is a NetWare 4.2 server the only way to talk to it is to
talk IPX.
Will the SecuRemote client encapsulate IPX assuming that the Novell
Client is installed on the remote workstation? Obviously the Win2K server must
have IPX installed on the private NIC.
I looked through the documentation and there is nothing that I found
telling me that this is possible or how to set it up.
Anyone out there have any ideas on this?
Thanx
___________________________ Goran Jovanovic The LAN Shoppe
Inc phone:x-2113 cell: e-mail: [email protected]
___________________________
|