Re: VPN --Hardware/software confusion

Walden H. Leverich wrote:

Yes ...that is exactly what we want ot do. VPN from the remotes
back to the Iseries..

Of course, that probably isn't what you want to do. I assume (Bad idea,
I know. <G>) that what you're talking about is having each of these
remote locations establish a tunnel _from_ the remote location _to_ your
central location. If so, the telco guy has it backward.

There will be NO internet on these remote locations... Just
basic terminal emulation and or twinax devices via a Bosanova controller.

You want a router at each remote location that can establish a VPN
tunnel into your location. At it's simplest, the router starts the
tunnel and then looks at each packet and decides if this request go out
to the net (www.cnn.com) or be forwarded to corporate over the VPN
tunnel (5250 to i5). Of course, then you add in security concerns about
split-tunnel VPNs and you might decide to route everything to corporate
and then out to the internet from there.

If no pc's are used, will I still need a VPN server at the host site ?

In either case, you need a VPN server setup in your central location. Do
you have one now? If so, the remote routers will have to talk to it
which might limit your options on the remote end. If you have nothing
you can buy to match on both ends.