Re: SDM1002 on Service Agent connect via VPN

[Vern Hamberg <vhamberg@xxxxxxxxxxxxxxxxxxxxxxxxx>]

Thanks for the link, Neil. I see that it applies to V5R2, which could help 
us. I don't have all the PTFs. But I tried port forwarding the ports listed 
(500 and 4500). The result was, my Remote Desktop from home failed to 
connect to my XP box behind our router. We are using the LinkSys BEVFS41 
(or whatever) that is a 4-port VPN router. I also don't know whether that 
box will pass the ESP traffic through - it does have IPSec passthrough - 
got no definitive response from LinkSys, but they are not in the same 
league as Cisco, of course.

Anyway, I think we'll stick with the phone connection for now.

Vern

At 04:50 PM 2/10/2004 -0500, you wrote:
> Vern,
>
> One of these two test systems has a 192.168.x.x address behind a router
> running NAT.  The other has a valid public IP address.  No hops though
> other systems.  The VPN works fine - it was set up through the IBM
> Universal Connection wizard as a Direct connection to Internet - something
> you need PTF's for I think - see the end of this article:
> http://www-912.ibm.com/s_dir/slkbase.nsf/1ac66549a21402188625680b0002037e/771d7da65a1f40b486256a5300473ef4
>
> ...Neil
>
> Vern Hamberg <vhamberg@xxxxxxxxxxxxxxxxxxxxxxxxx>
> Subject Re: SDM1002 on Service Agent connect via VPN
>
> Neil, I'm curious - are those systems live on the Internet - i.e., they
> have valid Internet addresses? Or do they hop to an iSeries with a valid IP
> address? I don't believe the VPN method works if you are behind a NAT-type
> router, unless you have an iSeries outside of your protected network.
>
> If the iSeries is a 192.168.x.x type box (or equivalent class A or B), and
> you can get out via VPN, I'd love to know how, without a box to hop to. I
> wondered (but have not tried) whether it'd work with a DMZ-type setting on
> our LinkSys to the iSeries, with port forwarding through the router. Of
> course, both those are not anything I'd want to do with a production box.
>
> Vern