IP-IPX Gateway and VPN question
Steve Watkins
to use it to connect a branch office, which runs a 3.2 server, to our main
office, where we have 4.11 servers. Due to some legacy applications, it is
essential that IPX pass over the VPN. I already have a BM VPN which works
well in another location. However, the same BM solution is not an option
here. Several vendors have told me that their solution will work, that the
IPX just needs to be encapsulated into IP for the transport. They also told
me that there are several products that will do this and that the Novell
IP/IPX Gateway will do the trick. Is this true? If so, could someone give
me a brief overview of the process. I currently use an IP/IPX Gateway for
Internet access at another location, so I am somewhat familiar with it. I
did not realize that it was possible to put one on either end of a
connection and make it work in the manner these VPN vendors described. Any
help in this direction would be greatly appreciated.
Steve Watkins
Craig Johnson
The 'Novell IPX/IP Gateway' covers a lot of ground. First of all, that
is not going to be an option with NetWare 3.x. You would need at least
NetWare 4.11 to use one of the various revisions of IPX/IP gateway.
3.x did have an IP Tunnel solution that *might* work well enough to be
used. NetWare 4.11 has an SCMD module which might be used to gateway
IPX traffic over an IP WAN link, but you need 4.11 on both ends of the
WAN link. Other than that, you are talking about BorderManager, but
the IPX/IP Gateway there is strictly IPX clients going to the BMgr
server, but from the BMgr server on out is only IP. Not going to work
to go over a WAN link where the IP packets have to again make an IPX
transition.
If you have a 4.11 or 5.x server on each end of the WAN link, I suggest
you look into the SCMD option.
Craig Johnson
Novell Support Connection SysOp
See http://nscsysop.hypermart.net for a book on configuring
BorderManager packet filter exceptions, and some hints, tips and files
for BorderManager.
CSL
Hi Steve,
> They also told
> me that there are several products that will do this and that the Novell
> IP/IPX Gateway will do the trick. Is this true?
No. THe IPX/IP gateway doesn't encapsulates IPX packets in IP. You cannot
address an IPX device through the IPX/IP gateway. Inother words, the IPX/IP
gateway works like an interpreter of the winsock calls made by the ipx clients
and directed to IP devices (like in the case of internet access).
What you really need is SCMD, but in this case you will need to upgrade your NW3
server to NW4.11.
These are some references for documentation on SCMD:
TID 2944065, that contains the list of papers published by
novell on this (updated to June 1999)
TID 2949484, 2941142, 10014705, 10014566.
And the appnotes:
http://developer.novell.com/research/appnotes/1999/april/04/index.htm
http://developer.novell.com/research/appnotes/1998/march/02/03.htm
http://developer.novell.com/research/appnotes/1998/septembe/03/03.htm
http://developer.novell.com/research/appnotes/1998/septembe/04/index.htm
--
Cat
Novell Support Connection Volunteer
Steve Watkins
Gateway was a "two-way street" but I wanted to hear it from someone more
knowledgeable!
CSL <No. THe IPX/IP gateway doesn't encapsulates IPX packets in IP. You
CSL
you are welcome! Let usknow id you need further infos.