Article View: comp.security.firewalls
Article #484Re: ipsec-fbsd-MS
From: pat
Date: Wed, 05 Jun 2002 21:22
Date: Wed, 05 Jun 2002 21:22
75 lines
3764 bytes
3764 bytes
Thx, I'll give it a shot "x y" <jamescagney90210@excite.com> wrote in message news:uQc3nHMDCHA.1980@tkmsftngp04... > I do think there is a way to do that by finding a windows vpn client that is > compatable with your bsd vpn server or a bsd vpn server that is compatable > with your windows 2000 vpn client. With VPN, you should be assigned an IP > address on the internal network that should allow you to reach your home > network, although you will probably want to log into windows either using a > cached domain ID and password or a local account, instead of trying to > authenticate on your remote DC. Domain-wide login is I think a frequent > problem with many VPN implementations and I often have to authenticate with > each server separately and also run the login script myself. I also > understand that Windows 9x and maybe ME may have problems with trying to use > one login ID to log into your local machine and a different login ID to log > into remote servers. > > I am told that OpenSSH from www.networksimplicity.com also allows a VPN-like > encrypted tunnel using a free client and server. > > "pat" <hobo@speakeasy.net> wrote in message > news:ufsgmhlsune7b2@corp.supernews.com... > > Hi, > > I have a small home network, a dsl connection and 1 static ip. At times I > go > > out of town and would like to get to my windoz boxes from over the > internet > > using ipsec. I could use win2000 svr easyly as a gateway but would prefer > > not to. I have a fbsd 4.5 as a ipf/nat gw. Is it possible to tunnel from a > > ms client to my fbsd gateway with ipsec. If so how would my remote ms box > > login to my domain from the fbsd box. I understand the issues of nat and > > ipsec. I do not understand how to design a physical structure that will > > work. I am willing to move the nat service to another box and dedicate my > gw > > as a ipf/ipsec box however I do not understand how my ms client box will > > find the DC to login in. How do you setup a > > > > remote Win2000 client > > ipsec tunnel starting point > > | > > | > > Internet > > | > > | > > Freebsd gw > > ipf/ipsec tunnel end point > > | > > | > > Nat service > > | > > | > > Win2000 Domain login server > > > > So when I am on the road that my client box can log onto my home win2000 > > domain. I am not asking for detailed technical info but generalize info. > > Such as if this is possible , physical lay outs, programs to use and any > > thing you are willing to share. > > > > Thx > > > > > >
Technical Details
Message-ID:
<uft08jg91rbg73@corp.supernews.com>Path:
arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!sn-xit-02!sn-post-01!supernews.com!corp.supernews.com!not-for-mailReferences:
<ufsgmhlsune7b2@corp.supernews.com> <uQc3nHMDCHA.1980@tkmsftngp04>Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit X-Google-Thread: f922c,19c23fa3f8e2181e X-Google-Attributes: gidf922c,public X-Google-Thread: fda0e,19c23fa3f8e2181e X-Google-Attributes: gidfda0e,public X-Google-Thread: 10eb3b,19c23fa3f8e2181e X-Google-Attributes: gid10eb3b,public X-Google-Thread: 102e85,19c23fa3f8e2181e X-Google-Attributes: gid102e85,public X-Google-ArrivalTime: 2002-06-05 14:22:28 PST Path: arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!sn-xit-02!sn-post-01!supernews.com!corp.supernews.com!not-for-mail From: "pat" <hobo@speakeasy.net> Newsgroups: comp.security.firewalls,comp.unix.bsd.freebsd.misc,fa.firewall,microsoft.public.win2000.security Subject: Re: ipsec-fbsd-MS Date: Wed, 5 Jun 2002 17:22:26 -0400 Organization: Posted via Supernews, http://www.supernews.com Message-ID: <uft08jg91rbg73@corp.supernews.com> References: <ufsgmhlsune7b2@corp.supernews.com> <uQc3nHMDCHA.1980@tkmsftngp04> X-Priority: 3 X-MSMail-Priority: Normal X-Newsreader: Microsoft Outlook Express 5.50.4522.1200 X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4522.1200 X-Complaints-To: newsabuse@supernews.com Lines: 77