Re: Masquerade NAT

[Larry Bolhuis <lbolhuis@xxxxxxxxxx>]

Pat,

 For a small number of users I would simply configure a web instance on 
the System i as a Proxy. Then secure the instance so you need to sign in 
to the thing or you can't get out.

 This isn't a great solutions for 100s of users but it works just fine. 
I have customers doing this. Some even create 'limited' proxies which do 
not require authentication but can only go to limited web sites (i.e. 
the weather, certain freight sites, and of course www.frankeni.com :o)

 This will cost you $0 so you can't beat the price.

   - Larry

Pat Barber wrote:
> I got a customer that wants to "let" the folks in the
> office have access to the web for selected applications.
>
> They have a small lan with about 30-35 users. They will
> all be using Access for emulation.
>
> They also want to "limit" some folks to "mail only".
> All will have mail but others would have full access
> to the web.
>
> I tried reading up and found a section in InfoCenter on
> Masquerade Nat or "hiding" existing ethernet addresses.
>
> Is this method what I should be looking at for handling
> this ???
>
> It "sounds" simple but I'm not sure of what I will run into
> with this method.
>
> Can a "smart" router handle some or all of this ???
>
>
>
>