[olug] Home network, firewall, vpn design..

Tue Feb 17 12:53:09 UTC 2004

Or save yourself a whole lotta headaches and get yourself a cisco 2611.
That router can terminate VPNs, run DHCP, do NAT, static NAT or port
forwarding.  All in a nice 1U box that never has to have it's hardware
upgraded :-)

Nate

-----Original Message-----
From: olug-bounces at olug.org [mailto:olug-bounces at olug.org] On Behalf Of Phil
Brutsche
Sent: Tuesday, February 17, 2004 1:16 AM
To: Omaha Linux User Group
Subject: Re: [olug] Home network, firewall, vpn design..

Ken wrote:

> Cable Modem / Internet (Cox)
>          |
>          |
> OpenBSD (P100,32MB) - pf, nat/dhcp
>          |	
>          |
> Linksys Switch 8 port -----------------
>          |                             |
>          |                Compaq Switch/Router 4port + 802.11b
>          |                             (dhcp disabled)
>          |                             |
>          |-- Linux (P3,750MHz,192MB)   |-- Laptop (WinXP, wifi)
>          |       * VPN, FreeS/WAN?     |-- iPAQ PocketPC (wifi)
                           ^^^^^^^^^
Depending on how you have things set up you're setting yourself up for 
nothing but pain.  IPsec does not always like being passed through a 
firewall.  Your best best would be to beef up the OpenBSD box a bit and 
put IPsec on that.

-- 

Phil Brutsche
phil at brutsche.us
_______________________________________________
OLUG mailing list
OLUG at olug.org
http://lists.olug.org/mailman/listinfo/olug