VPN thru NT to the AS/400

["William Corbett" <corbett@xxxxxxxxxxxxxxx>]

I have been asked to investigate the setup of VPN to access a company
AS/400.

We've been using RAS thru an NT server to access the corporate Lan, then CA
to work with the AS/400.  This gives pretty good security, since the dial-up
is a one-to-one connection.  Due to increasing usage and more and more
programmers and employees with high-speed internet access, management would
like to set up a VPN for programmers and users to access the AS/400.

I have a fairly good idea of how to set this up, if the NT box were not in
between the internet and the AS/400, but the NT server adds an element of
"the unknown" into the mix. (at least unknown to me)

Is this an entirely NT solution we're talking about, or has something got to
be done on the AS/400 side?  In other words, is it VPN to the Lan, the
normal stuff to get from there to the AS/400?
Does this give a secure access method to the AS/400, at least as as far as
telnet normally transferring userids and passwords "in the clear"?
Should we set up SSL on the 400?
Any VPN configuration to do on the AS/400?
Any other special considerations on the 400 side?

AS/Resources, Inc.
William A.(Tony) Corbett
IBM Certified Specialist - AS/400 Developer
http://www.asresources.com
corbett@asresources.com


+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---