VPN with DSL and NAT router???

[tj]

Hi all,

We just got a DSl line and I'm looking to set up a VPN to allow remote
access to some of our users. These users will all be using Windows 95/98
machines and either have DSL or dial-up internet connections. Our network
is currently setup such that the DSL line connects to a Cayman router that
uses NAT and is then connected to a hub in our network. We then have a NT
server (yuck) that handles DHCP services for the workstations on our
network. My question is can I use a Linux box between the router and the
rest of the network to implement a VPN? Or should we discard this router
and use a Linux box to handle IP masquerading and VPN? We also need a
firewall in there too ... any tips on that?

thanks in advance,
tom

ps your help might get this part-time clown a full-time job if I can pull
this off ;)

------------------ Posted via CNET Linux Help ------------------
http://www.searchlinux.com

[John Hardin]

tj wrote...

>My question is can I use a Linux box between the router and the
>rest of the network to implement a VPN? Or should we discard this router
>and use a Linux box to handle IP masquerading and VPN? We also need a
>firewall in there too ... any tips on that?

You may need to discard the router unless you can get a definite answer
that it does support NAT for your VPN protocol.

Take a look at the VPN Masq HOWTO at
ftp://ftp.rubyriver.com/pub/jhardin/masquerade/ip_masq_vpn.html - it should
answer your questions.

--
John Hardin KA7OHZ jha...@wolfenet.com
pgpk -a finger://gonzo.wolfenet.com/jhardin PGP key ID: 0x41EA94F5
PGP key fingerprint: A3 0C 5B C2 EF 0D 2C E5 E9 BF C8 33 A7 A9 CE 76
-----------------------------------------------------------------------
In the Lion
the Mighty Lion
the Zebra sleeps tonight...
Dee de-ee-ee-ee-ee de de de we um umma way!

[William Devine, II]

I'm setting up two firewalls for a customer and the SDSL provider gives
them 1 usable, truly routed, IP# (/30 block) to use on their firewall.
I have it doing masq'ing, inbound portfw for their internal webserver
and email server, and installed the PPTPD on the machine. I'm finishing
the testing of it before completing the install next week but I can use
Win95 with DUN1.2 or higher, or Win98 or NT4.0 clients and do PPTP
directly to the Linux box and gain access to the inside of my test
network at the office. I'm starting to use the PPTP with CHAP required
for VPN's for other clients after this. Free and cheap VPN
(basically.) For what they're using it for (TN3270 to an AS/400 inside
their network and connection to exchange server) it looks like it'll do
the job.

William Devine, II
Smart Guys
281-477-6563
http://www.smartguys.net/

tj wrote:
>
> Hi all,
>
> We just got a DSl line and I'm looking to set up a VPN to allow remote
> access to some of our users. These users will all be using Windows 95/98
> machines and either have DSL or dial-up internet connections. Our network
> is currently setup such that the DSL line connects to a Cayman router that
> uses NAT and is then connected to a hub in our network. We then have a NT
> server (yuck) that handles DHCP services for the workstations on our

> network. My question is can I use a Linux box between the router and the

> rest of the network to implement a VPN? Or should we discard this router
> and use a Linux box to handle IP masquerading and VPN? We also need a
> firewall in there too ... any tips on that?
>