Article View: comp.security.firewalls
Article #483Re: ipsec-fbsd-MS
From: x y
Date: Wed, 05 Jun 2002 18:44
Date: Wed, 05 Jun 2002 18:44
57 lines
3482 bytes
3482 bytes
I do think there is a way to do that by finding a windows vpn client that is compatable with your bsd vpn server or a bsd vpn server that is compatable with your windows 2000 vpn client. With VPN, you should be assigned an IP address on the internal network that should allow you to reach your home network, although you will probably want to log into windows either using a cached domain ID and password or a local account, instead of trying to authenticate on your remote DC. Domain-wide login is I think a frequent problem with many VPN implementations and I often have to authenticate with each server separately and also run the login script myself. I also understand that Windows 9x and maybe ME may have problems with trying to use one login ID to log into your local machine and a different login ID to log into remote servers. I am told that OpenSSH from www.networksimplicity.com also allows a VPN-like encrypted tunnel using a free client and server. "pat" <hobo@speakeasy.net> wrote in message news:ufsgmhlsune7b2@corp.supernews.com... > Hi, > I have a small home network, a dsl connection and 1 static ip. At times I go > out of town and would like to get to my windoz boxes from over the internet > using ipsec. I could use win2000 svr easyly as a gateway but would prefer > not to. I have a fbsd 4.5 as a ipf/nat gw. Is it possible to tunnel from a > ms client to my fbsd gateway with ipsec. If so how would my remote ms box > login to my domain from the fbsd box. I understand the issues of nat and > ipsec. I do not understand how to design a physical structure that will > work. I am willing to move the nat service to another box and dedicate my gw > as a ipf/ipsec box however I do not understand how my ms client box will > find the DC to login in. How do you setup a > > remote Win2000 client > ipsec tunnel starting point > | > | > Internet > | > | > Freebsd gw > ipf/ipsec tunnel end point > | > | > Nat service > | > | > Win2000 Domain login server > > So when I am on the road that my client box can log onto my home win2000 > domain. I am not asking for detailed technical info but generalize info. > Such as if this is possible , physical lay outs, programs to use and any > thing you are willing to share. > > Thx > >
Technical Details
Message-ID:
<uQc3nHMDCHA.1980@tkmsftngp04>Path:
arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!newsfeed.stanford.edu!news-spur1.maxwell.syr.edu!news.maxwell.syr.edu!newsfeed00.sul.t-online.de!t-online.de!tkmsftngp01!tkmsftngp04References:
<ufsgmhlsune7b2@corp.supernews.com>Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit X-Google-Thread: f922c,19c23fa3f8e2181e X-Google-Attributes: gidf922c,public X-Google-Thread: 10eb3b,19c23fa3f8e2181e X-Google-Attributes: gid10eb3b,public X-Google-Thread: 102e85,19c23fa3f8e2181e X-Google-Attributes: gid102e85,public X-Google-Thread: fda0e,19c23fa3f8e2181e X-Google-Attributes: gidfda0e,public X-Google-ArrivalTime: 2002-06-05 11:53:50 PST From: "x y" <jamescagney90210@excite.com> References: <ufsgmhlsune7b2@corp.supernews.com> Subject: Re: ipsec-fbsd-MS Date: Wed, 5 Jun 2002 14:44:46 -0400 Lines: 59 X-Priority: 3 X-MSMail-Priority: Normal X-Newsreader: Microsoft Outlook Express 6.00.2600.0000 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000 Message-ID: <uQc3nHMDCHA.1980@tkmsftngp04> Newsgroups: comp.security.firewalls,comp.unix.bsd.freebsd.misc,fa.firewall,microsoft.public.win2000.security NNTP-Posting-Host: 216.174.25.58 Path: arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!newsfeed.stanford.edu!news-spur1.maxwell.syr.edu!news.maxwell.syr.edu!newsfeed00.sul.t-online.de!t-online.de!tkmsftngp01!tkmsftngp04