Re: VPN thru NT to the AS/400

tony,

the vpn config I use is:
    - as400 connected to ethernet lan
    - pix firewall and cisco routers connect the lan to the internet and
frame relay cloud.
    - my pc is dsl connected to the internet thru a local isp.
    - client access is used on my pc.
    - vpn software called "safeNet/soft-pk" is installed on my pc

SafeNet and Pix firewall are both cisco products.

No config on as400 for vpn or the firewall. Only config on the as400 is an
*ELAN type line.

When I installed the safenet vpn software on my pc I was provided with a
"security policy" to install. This policy matches up with the whatever in
the pix firewall.

Using my dsl line, my response time is GREAT!

I was not much involved in the setup, so I dont have more I can tell you.

Steve Richter

-----Original Message-----
From: William Corbett <corbett@asresources.com>
To: MIDRANGE-L@midrange. com <MIDRANGE-L@midrange.com>
Date: Monday, April 23, 2001 11:13 AM
Subject: VPN thru NT to the AS/400


>I have been asked to investigate the setup of VPN to access a company
>AS/400.
>
>We've been using RAS thru an NT server to access the corporate Lan, then CA
>to work with the AS/400.  This gives pretty good security, since the
dial-up
>is a one-to-one connection.  Due to increasing usage and more and more
>programmers and employees with high-speed internet access, management would
>like to set up a VPN for programmers and users to access the AS/400.
>
>I have a fairly good idea of how to set this up, if the NT box were not in
>between the internet and the AS/400, but the NT server adds an element of
>"the unknown" into the mix. (at least unknown to me)
>
>Is this an entirely NT solution we're talking about, or has something got
to
>be done on the AS/400 side?  In other words, is it VPN to the Lan, the
>normal stuff to get from there to the AS/400?
>Does this give a secure access method to the AS/400, at least as as far as
>telnet normally transferring userids and passwords "in the clear"?
>Should we set up SSL on the 400?
>Any VPN configuration to do on the AS/400?
>Any other special considerations on the 400 side?
>
>AS/Resources, Inc.
>William A.(Tony) Corbett
>IBM Certified Specialist - AS/400 Developer
>http://www.asresources.com
>corbett@asresources.com
>
>
>+---
>| This is the Midrange System Mailing List!
>| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
>| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
>| To unsubscribe from this list send email to
MIDRANGE-L-UNSUB@midrange.com.
>| Questions should be directed to the list owner/operator:
david@midrange.com
>+---
>

+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---