Re: Netgear FVS318 VPN connection

[Vern Hamberg <vhamberg@xxxxxxxxxxxxxxxxxxxxxxxxx>]

Peter

You've hit it, AFAIK. Right now, I don't use a router at home between my PC 
and the cable modem -- I know, dumb. In my case, I use the address assigned 
by my ISP, but that could change - hasn't yet, but it could. In your case, 
as you say, you have to have an address known to the outside world, namely 
your router. But I also think that outside address needs to handle the VPN, 
and your router does not do that.

Sooo - replace your LinkSys standard router with a NetGear or LinkSys VPN 
router - then you have no W2K configuration to do - the routers do all the 
work, and what is behind either can talk to what is behind the other.

HTH

Vern

At 10:26 AM 9/29/2003 -0700, you wrote:
> Hi Vern,
>
> What you say makes sense, except that as I noted, my W2K PC does not have an
> internet IP address, only an internal LAN address.  Given that the source &
> destination IP addresses also are internal LAN addresses, how does it ever
> get to the LinkSys?  If you're correct, then if I change the tunnel endpoint
> to be my W2K PC's internal (private) LAN IP address, I'd have to change the
> source & destination IP addresses to the LinkSys's external (public)
> internet IP address, right?
>
> Peter Dow
> Dow Software Services, Inc.
> 909 793-9050 voice
> 909 793-4480 fax
> 909 522-3214 cell
>
> ----- Original Message -----
> From: "Vern Hamberg" <vhamberg@xxxxxxxxxxxxxxxxxxxxxxxxx>
> To: "Midrange Systems Technical Discussion" <midrange-l@xxxxxxxxxxxx>
> Sent: Monday, September 29, 2003 9:18 AM
> Subject: Re: Netgear FVS318 VPN connection
>
>
> > Hi Peter
> >
> > The endpoints are the NetGear router and your W2K machine, which does have
> > an IP address, perhaps assigned by your LinkSys router. Run the ipconfig
> > command from your command prompt to see it. If it's dynamically assigned,
> > you will probably need to change it to a static address in your internal
> > network, because the IP security policy setup cannot use something like
> > "This IP address" - needs to be static. I think this is because W2K wants
> > to be the control point (or whatever) for the rest of your network. I hope
> > someone else can say more or correctly, but this is what I've observed,
> > without formal training.
> >
> > Good luck
> >
> > Vern