RE: Can't ping AS400 through a VPN

I am the Firewall tech

The network is setup with the as400 on the same network as a few client
computers.  The router/firewall is a redhat box, running freeswan so we
can give remote access

Honestly, I try to avoid working with the as400 at all, but sometimes I
just have to.  The as400 is not behind a firewall for local users, but
it is for net access.  That is the point of the Freeswan vpn.

Like I said in my post, I can ping just fine from any local computer, as
well as access it, incluyding while I am in an ssh session to the
router/gateway.  In theory, I should be able to do this from a computer
connected via the VPN, I can access the network printer, any pc, etc on
the same network, just not the as400.

> -----Original Message-----
> From: midrange-l-admin@midrange.com
> [mailto:midrange-l-admin@midrange.com] On Behalf Of Jeff Silberberg
> Sent: Monday, August 19, 2002 10:13 PM
> To: midrange-l@midrange.com
> Subject: Re: Can't ping AS400 through a VPN
>
>
> Well,
>
>         Tell your Firewall tech THANK YOU for knowing what
> they are doing, as they most probably closed the ICMP path as
> well as many other services that can be security risks...
>
>         JMS..
>
> ----- Original Message -----
> From: "Rosewood" <rosewood@gmx.de>
> To: <midrange-l@midrange.com>
> Sent: Monday, August 19, 2002 10:27 PM
> Subject: Help: Can't ping AS400 through a VPN
>
>
> > Ive ran into a strange problem.  I can not access/ping an
> AS400 when
> > connecting through a VPN.  Every PC on the local network can ping,
> > including the router.  However, when I connect through a
> VPN (Freeswan
> > IPSec) I  can not ping or access the AS400 at all.  I can ping and
> > access every other network recourse just fine, but not the AS400.
> >
> > Is there something about this I need to set up on the AS400?  I
> > thought it was just a simple TCPIP telnet session, but
> aparently no.
> > Is there any way to get this working?  What settings do I need to
> > change and where?
> >
> > Thanks yall, once again
> >
> > _______________________________________________
> > This is the Midrange Systems Technical Discussion
> (MIDRANGE-L) mailing
> list
> > To post a message email: MIDRANGE-L@midrange.com
> > To subscribe, unsubscribe, or change list options,
> > visit: http://lists.midrange.com/cgi-bin/listinfo/midrange-l
> > or email: MIDRANGE-L-request@midrange.com
> > Before posting, please take a moment to review the archives at
> > http://archive.midrange.com/midrange-l.
> >
> >
>
> _______________________________________________
> This is the Midrange Systems Technical Discussion
> (MIDRANGE-L) mailing list To post a message email:
> MIDRANGE-L@midrange.com To subscribe, unsubscribe, or change
> list options,
> visit: http://lists.midrange.com/cgi-bin/listinfo/midrange-l
> or email: MIDRANGE-L-request@midrange.com
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/midrange-l.
>