RE: VPN thru NT to the AS/400

On our web-site there is a pdf document on how to set up VPN.  It 
located at: http://www.synapse.com/customer/BridgingTheGap/btg12.pdf

You don't have to be a customer of ours; or using our sotware to get to 
this.  So if it will do you any good or you just want to look at it 
your more than welcome.  We've always felt that the VPN connection was 
more secure than SSL plus you don't have to get certificate, etc.

-- Jim
Synapse Communications, Inc.


> I have been asked to investigate the setup of VPN to access a company
> AS/400.
> 
> We've been using RAS thru an NT server to access the corporate Lan, then CA
> to work with the AS/400.  This gives pretty good security, since the dial-up
> is a one-to-one connection.  Due to increasing usage and more and more
> programmers and employees with high-speed internet access, management would
> like to set up a VPN for programmers and users to access the AS/400.
> 
> I have a fairly good idea of how to set this up, if the NT box were not in
> between the internet and the AS/400, but the NT server adds an element of
> "the unknown" into the mix. (at least unknown to me)
> 
> Is this an entirely NT solution we're talking about, or has something got to
> be done on the AS/400 side?  In other words, is it VPN to the Lan, the
> normal stuff to get from there to the AS/400?
> Does this give a secure access method to the AS/400, at least as as far as
> telnet normally transferring userids and passwords "in the clear"?
> Should we set up SSL on the 400?
> Any VPN configuration to do on the AS/400?
> Any other special considerations on the 400 side?
> 
> AS/Resources, Inc.
> William A.(Tony) Corbett
> IBM Certified Specialist - AS/400 Developer
> http://www.asresources.com
> corbett@asresources.com
> 
> 
> +---
> | This is the Midrange System Mailing List!
> | To submit a new message, send your mail to MIDRANGE-L@midrange.com.
> | To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
> | To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
> | Questions should be directed to the list owner/operator:
> david@midrange.com
> +---
> +---
> | This is the Midrange System Mailing List!
> | To submit a new message, send your mail to MIDRANGE-L@midrange.com.
> | To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
> | To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
> | Questions should be directed to the list owner/operator: david@midrange.com
> +---
+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---