Re: AS/400 Access via the Internet

[Chuck Morehead <cbmorehead@xxxxxxxxxx>]

Chuck,

Can you describe the physical connection for me?  I.e. how does your AS/400
communicate with the Internet?  Is it directly connected to your ISP via a
comm card?

A simple VPN can work as follows:
A VPN/Firewall appliance is placed between your router to the Internet and
the rest of your network.  This requires that you have two static IP's, one
for the router and one for the VPN appliance.

PC's that have Internet access are loaded with a VPN software that will
communiate with the VPN/Firewall appliance.  You configure the software with
secret "keys" as well as the IP address of the VPN appliance.

The PC's can then contact the VPN appliance accross the Internet.  If
authenticated, the PC is granted access to the network.  At authentication
encryption keys are generated and the data moving accross the Internet
(including passwords and sensitive company info) is all encrypted.

If you want to take a look at some VPN appliances you might check out
http://www.sonicwall.com/.  They seem to have a decent small business
solution (SOHO2).

A diagram might look something like this.  (I apologize for my lack of
artistic talent...)

PC w/VPN sftwre.....\
      ...
PC w/VPN sftwre...---(Internet)---...-Router-VPN "box"-Switch/Hub---...The
rest of your network.
      ...
PC w/VPN sftwre...../

Chuck

----- Original Message -----
From: "Chuck Lewis" <clewis@iquest.net>
To: <MIDRANGE-L@midrange.com>
Sent: Monday, August 06, 2001 9:46 AM
Subject: Re: AS/400 Access via the Internet


> Chuck,
>
> We are a small company with no LAN but we do have frame relay. Not to drag
you
> into explanation, but how does a VPN figure into this ? I.E. do I get a
"box" to
> do VPN and then it gets to the AS/400 over the IP "network", etc ?
>
> Thanks,
>
> Chuck
>
> Chuck Morehead wrote:
>
> > Chuck,
> >
> > I echo Bill's comments.  Using a VPN gives your sales staff access to
the
> > entire network in a secure manner.  I am very wary of not using a
> > VPN/Firewall combination for routing to your AS/400.  With a VPN you
must
> > first be authenticated before you can be routed.  Simply setting up
routing
> > on a specific port can lead to security holes easily found by hackers
with
> > port sniffers.
> >
> > If you go the VPN route, here is a tidbit that I struggled with at one
of my
> > clients the first time I set up a VPN.  The AS/400 had to have a route
set
> > up pointing to the VPN appliance even though it was not going to access
the
> > Internet.  I guess this makes sense logically, because it was
communicating
> > with PC's accross the Internet.
> >
> > Chuck
> >
> > ----- Original Message -----
> > From: "Chuck Lewis" <clewis@iquest.net>
> > To: "Midrange-L List" <MIDRANGE-L@midrange.com>
> > Sent: Friday, August 03, 2001 4:22 PM
> > Subject: AS/400 Access via the Internet
> >
> > > Hi Folks,
> > >
> > > We are looking at different ways to access our AS/400 so Sales folks
can
> > > get needed info. Currently we have a communications server running
> > > Synapse software that they dial into.
> > >
> > > We are getting complaints about slow response and I know that this
being
> > > caused by old lines, phone switches, etc. in the areas some of these
> > > folks live in.
> > >
> > > Question was asked if it might be faster via the internet (they are
> > > looking at cable and DSL at home) and I'm not sure.
> > >
> > > Any ideas on this ?
> > >
> > > Thanks !
> > >
> > > Chuck
> > >
> > > +---
> > > | This is the Midrange System Mailing List!
> > > | To submit a new message, send your mail to MIDRANGE-L@midrange.com.
> > > | To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
> > > | To unsubscribe from this list send email to
> > MIDRANGE-L-UNSUB@midrange.com.
> > > | Questions should be directed to the list owner/operator:
> > david@midrange.com
> > > +---
> > >
> >
> > +---
> > | This is the Midrange System Mailing List!
> > | To submit a new message, send your mail to MIDRANGE-L@midrange.com.
> > | To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
> > | To unsubscribe from this list send email to
MIDRANGE-L-UNSUB@midrange.com.
> > | Questions should be directed to the list owner/operator:
david@midrange.com
> > +---
>
> +---
> | This is the Midrange System Mailing List!
> | To submit a new message, send your mail to MIDRANGE-L@midrange.com.
> | To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
> | To unsubscribe from this list send email to
MIDRANGE-L-UNSUB@midrange.com.
> | Questions should be directed to the list owner/operator:
david@midrange.com
> +---
>

+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---