RE: Novell Bordermanager VPN client

  • From: "Stefaan Pouseele" <stefaan.pouseele@xxxxxxx>
  • To: "'[ISAserver.org Discussion List]'" <isalist@xxxxxxxxxxxxx>
  • Date: Tue, 2 Sep 2003 23:37:29 +0200

Hi Mark,

if the VPN protocol is not IPSec NAT-T or PPTP based you are out of luck
because IP packet filters will not give you outbound access for LAT to
non-LAT traffic. 

HTH, 
Stefaan

-----Original Message-----
From: Mark Hippenstiel [mailto:M.Hippenstiel@xxxxxxxxxxxx]
Sent: dinsdag 2 september 2003 23:19
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Novell Bordermanager VPN client


http://www.ISAserver.org


Hi Stefaan,

Ha! I've seen this article before - what get's me is Novell's
documentation: they say that I'd have to allow IP protocol number 57.
Which is related to a thingy called SKIP... 

I might be far off the line here, but if I need a custom IP protocol
enabled, I'd have to do this with packet filtering, yes? Wouldn't that
mean that I could only use the Bordermanager client from within the DMZ?
Or, put another way, packet filtering relies on normal IP routing
functionality, so I couldn't possibly enter an internal network address
in a packet filtering rule, right? 

Thanks,
Mark

> -----Original Message-----
> From: Stefaan Pouseele [mailto:stefaan.pouseele@xxxxxxx] 
> Sent: Tuesday, September 02, 2003 8:26 PM
> To: [ISAserver.org Discussion List]
> Subject: [isalist] RE: Novell Bordermanager VPN client
> 
> 
> Hi Mark, 
> 
> I haven't, but you can use my article 
> http://www.isaserver.org/articles/IPSec_Passth> rough.html as 
> baseline ;-)
> 
> HTH, 
> Stefaan
> 
> -----Original Message-----
> From: Mark Hippenstiel [mailto:M.Hippenstiel@xxxxxxxxxxxx]
> Sent: dinsdag 2 september 2003 20:21
> To: [ISAserver.org Discussion List]
> Subject: [isalist] Novell Bordermanager VPN client
> 
> 
http://www.ISAserver.org


Hi,

Has anybody eventually happened to use this VPN behind ISA?

Thanks
Mark

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com No.1
Exchange Server Resource Site: http://www.msexchange.org Windows
Security Resource Site: http://www.windowsecurity.com/ Network Security
Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions:
http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
stefaan.pouseele@xxxxxxx To unsubscribe send a blank email to
$subst('Email.Unsub')

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
stefaan.pouseele@xxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')

Other related posts: