Re: IBM Universal Connection and non-Cisco firwalls with NAT? -- MIDRANGE-L

To piggyback more on this - we want VPN and the ability to use Universal Connection instead of phone lines for electronic support. What do any of you recommend? We now have a LinkSys VPN router that allows, in software, up to 70 VPN connections, so it has a dual function. We use either a security policy in XP (hate that setup) or SSH Sentinel VPN client (beautiful!)

Also, prices (approx.) would be helpful. We have 2 analog lines that are handling PM/400 and Service Director and ECS. One of the machines is V5R1, the other V5R2. Can the V5R1 machine use the V5R2 as the conduit, or is there a similar PTF for that release? And any other issues that may pertain?

Or recommendations on who to work with? We're not a big prospect. Around 10 internal hosts right now, less than that would need VPN.

Thanks
Vern

At 08:23 AM 4/21/2004, you wrote:

access-list inside permit udp host x.x.x.x host 207.25.252.196 eq isakmp
access-list inside permit udp host x.x.x.x host 207.25.252.196 eq 4500
access-list inside permit esp host x.x.x.x host 207.25.252.196

The x's will reflect your system's IP address, and you may need to change
the 'inside' to reflect whatever firewall interface your system is attached
to.


These are the commands we needed to use for a Pix 515 to get this working;
the wizard within Ops Nav worked fine for the AS/400 side setup.  I've seen
one of our systems get confused and the VPN setup stopped working-deleting
the universal connection and running the wizard again fixed that.

Hope this helps...

Chad Burrall

AS/400 Administrator

Wheeling-Nisshin, Inc.


|---------+------------------------------->
|         |           "Adam Lang"         |
|         |           <aalang@rutgersinsur|
|         |           ance.com>           |
|         |           Sent by:            |
|         |           midrange-l-bounces@m|
|         |           idrange.com         |
|         |                               |
|         |                               |
|         |           04/21/2004 09:04 AM |
|         |           Please respond to   |
|         |           Midrange Systems    |
|         |           Technical Discussion|
|---------+------------------------------->

>------------------------------------------------------------------------------------------------------------------------------| | | | To: "Midrange Systems Technical Discussion" <midrange-l@xxxxxxxxxxxx> | | cc: | | Subject: Re: IBM Universal Connection and non-Cisco firwalls with NAT? |

>------------------------------------------------------------------------------------------------------------------------------|


If you could, it would be appreciated.  We are getting a new iSeries soon
and it would be nice to set it up that way as opposed to over the phone
line.
----- Original Message -----
From: "Jeff Crosby" <jlcrosby@xxxxxxxxxxxxxxxx>
To: "'Midrange Systems Technical Discussion'" <midrange-l@xxxxxxxxxxxx>
Sent: Wednesday, April 21, 2004 8:11 AM
Subject: RE: IBM Universal Connection and non-Cisco firwalls with NAT?


> > Has anyone actually setup UC with: V5R2, NAT firewall,
> > non-Cisco router, private iSeries address?
>
> We fit that bill _except_ we do have a Cisco router & firewall.  It took
> well over a year to get it set up.  Some of the changes took place on
IBM's
> end.  Now that it's working, it's great.
>
> If you want to know what the router/firewall settings are, I will have to
> contact The Router Guy because I don't know.
>
> --
> Jeff Crosby
> Dilgard Frozen Foods, Inc.
> P.O. Box 13369
> Ft. Wayne, IN 46868-3369
> 260-422-7531
>
> The opinions expressed are my own and not necessarily the opinion of my
> company.  Unless I say so.
>
>
>
> _______________________________________________
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list
> To post a message email: MIDRANGE-L@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/midrange-l.

_______________________________________________
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.

_______________________________________________
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.