Re: Use IBM i VPN

For your specific use case, I think telnet SSL and SSH might be good

enough.

For the most part I agree. But I have neglected to use ACS 5250 because I
wasn't sure if opening the various ports ACS needs to the internet was a
good idea.

Is the built in VPN IPSec, L2ptp or something else? Then see if PCs and

macs support that.

I see reference to both IPSec and L2ptp in the documentation. Probably
time for me to just try it out and see if I can get it working.

Aaron Bartell
litmis.com - Services for open source on IBM i


On Thu, Jul 28, 2016 at 5:00 AM, Justin Dearing <zippy1981@xxxxxxxxx>
wrote:

Aaron,

For your specific use case, I think telnet SSL and SSH might be good
enough. Actually the two factor authentication methods openssh provides
might be more secure in practice than a VPN.

Is the built in VPN IPSec, L2ptp or something else? Then see if PCs and
macs support that.

Justin


On Wed, Jul 27, 2016 at 8:08 PM Bdietz400 <bdietz400@xxxxxxxxx> wrote:

Why not just setup a ssh tunnel. I've had better luck with that then

the

VPN.

--
Bryan Dietz

On Jul 27, 2016, at 3:44 PM, Aaron Bartell <aaronbartell@xxxxxxxxx>

wrote:

I've been reading up on the VPN included with IBM i(n1) and am

curious

if

anyone has made it work in a scenario similar to the following:

Can the IBM i VPN be setup to allow standard VPN software on

Windows/Mac

to

connect to it for 5250 and SSH sessions? In this scenario the IBM i
machine is the only thing on the remote network needing to be

accessed

from

the Windows/Mac machine.

n1 -

http://www.ibm.com/support/knowledgecenter/ssw_ibm_i_73/rzaja/rzajamobilesteps.htm

Aaron Bartell
litmis.com - Services for open source on IBM i
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L)

mailing

list

To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxx for any subscription related

questions.
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing

list

To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxx for any subscription related
questions.

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing

list

To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxx for any subscription related
questions.

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxx for any subscription related
questions.