Re: Use IBM i VPN

Have you tried Proxifier?

Had not heard of Proxifier.

If you are on Linux you can create a SOCKS proxy (dynamic port tunnel )

and use Proxychains.

Is my understanding correct that each application would need to understand
SOCKS? Is Proxifier basically a way to simplify using ssh from the command
line?

I currently use TN5250j but would like to switch to ACS because their
client is better (i.e. key mappings on the Mac for Copy/Paste are mapped
correctly, and it's faster).



Aaron Bartell
litmis.com - Services for open source on IBM i


On Thu, Jul 28, 2016 at 8:07 AM, Diego Kesselman <diegokesselman@xxxxxxxxx>
wrote:

If you are on Linux you can create a SOCKS proxy (dynamic port tunnel ) and
use Proxychains.
If using Windows, similar with proxifier.

Or you can switch to TN5250j and Filezilla with proxy configuration.

El 28 jul. 2016 07:21, "Aaron Bartell" <aaronbartell@xxxxxxxxx> escribió:

For your specific use case, I think telnet SSL and SSH might be good

enough.

For the most part I agree. But I have neglected to use ACS 5250 because

I

wasn't sure if opening the various ports ACS needs to the internet was a
good idea.

Is the built in VPN IPSec, L2ptp or something else? Then see if PCs and

macs support that.

I see reference to both IPSec and L2ptp in the documentation. Probably
time for me to just try it out and see if I can get it working.

Aaron Bartell
litmis.com - Services for open source on IBM i


On Thu, Jul 28, 2016 at 5:00 AM, Justin Dearing <zippy1981@xxxxxxxxx>
wrote:

Aaron,

For your specific use case, I think telnet SSL and SSH might be good
enough. Actually the two factor authentication methods openssh provides
might be more secure in practice than a VPN.

Is the built in VPN IPSec, L2ptp or something else? Then see if PCs and
macs support that.

Justin


On Wed, Jul 27, 2016 at 8:08 PM Bdietz400 <bdietz400@xxxxxxxxx> wrote:

Why not just setup a ssh tunnel. I've had better luck with that

then

the

VPN.

--
Bryan Dietz

On Jul 27, 2016, at 3:44 PM, Aaron Bartell <aaronbartell@xxxxxxxxx

wrote:

I've been reading up on the VPN included with IBM i(n1) and am

curious

if

anyone has made it work in a scenario similar to the following:

Can the IBM i VPN be setup to allow standard VPN software on

Windows/Mac

to

connect to it for 5250 and SSH sessions? In this scenario the IBM

i

machine is the only thing on the remote network needing to be

accessed

from

the Windows/Mac machine.

n1 -

http://www.ibm.com/support/knowledgecenter/ssw_ibm_i_73/rzaja/rzajamobilesteps.htm

Aaron Bartell
litmis.com - Services for open source on IBM i
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L)

mailing

list

To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxx for any subscription related

questions.
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L)

mailing

list

To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxx for any subscription related
questions.

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing

list

To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxx for any subscription related
questions.

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing

list

To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxx for any subscription related
questions.

--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxx for any subscription related
questions.