[isalist] Re: Endpoint IPSEC with DHCP assinged address.

  • From: "Thomas W Shinder" <tshinder@xxxxxxxxxxx>
  • To: <isalist@xxxxxxxxxxxxx>
  • Date: Sat, 15 Mar 2008 23:25:19 -0500

You have to be kidding? Right?

 

Don't you take responsibility for the security of your business?

 

If you can 't provide at least 10 valid security reasons for not honoring this 
request, you might want to consider Wally Thor's truck driving school as an 
alternate line of business. You put yourself in harm's why with this type of 
naïve security configuration and if you have any assets, I'm sure an atty would 
love to take them from you for allowing this type config.

 

Be responsible and aware.

 

From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On 
Behalf Of William T. Holmes
Sent: Saturday, March 15, 2008 8:24 PM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: Endpoint IPSEC with DHCP assinged address.

 

The person in question wants an always on connection from their home.

 

Bill

 

From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On 
Behalf Of Thor (Hammer of God)
Sent: Saturday, March 15, 2008 5:55 PM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: Endpoint IPSEC with DHCP assinged address.

 

An IPSec tunnel will need to know both end's IP in order to set up the tunnel, 
match rules, and route properly...

 

What's wrong with an old-fashioned VPN from his/her computer?  And can the 
router not act as a VPN client?

 

t

 

From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On 
Behalf Of William T. Holmes
Sent: Saturday, March 15, 2008 2:30 PM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: Endpoint IPSEC with DHCP assinged address.

 

Hi,

 

Can anyone give me a pointer on this one?


Thanks

 

Bill

 

From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On 
Behalf Of William Holmes
Sent: Friday, March 14, 2008 12:54 PM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Endpoint IPSEC with DHCP assinged address.

 

Hi,

 

I would like to deploy a router in one of our Executive's home. The router I 
have can be configured with IPSEC tunneling. I am only interested in having the 
IPSEC tunnel startup from the endpoint not from the ISA2004 Server. Is there a 
document on setting up?  I looked at 
http://www.isaserver.org/articles/2004isadlink.html but that indicates I need a 
fixed IP address at each end of the tunnel.  Can this same thing be 
accomplished with a dynamic IP address on the endpoint so long as I don't wish 
to establish the tunnel from the ISA server's side?

 

Thanks


Bill

Other related posts: