IPSEC To implement VPN

UltraSoul · 08-12-2005, 03:40 PM

I have a Sun WS running Solaris 9 in my lab and a winxp pc in my home.
The local networks in my lab and home is not connected. However, Some
times i want to login my Sun WS for working through telnet or ssh. I wonder if IPsec is the best resolution to implement a VPN for remotely
loginging to my SUN WS. Also, other idears are appreciated. Thanks.

macemoneta · 08-18-2005, 10:37 PM

If you already have ssh, you don't need a VPN for any TCP-based network traffic.

UltraSoul · 08-21-2005, 05:11 AM

My home intranet is not physically connected with my lab intranet. So I think a VPN
solution can let me remotely login my lab SunWS by the PC in my home. Can you tell
me how to resolve the problem by SSH solution. Thank u!

macemoneta · 08-21-2005, 09:06 AM

A VPN doesn't provide connectivity; it provides an encrypted communication path, as does SSH. In both cases, you need a physical path via the Internet or a dialup connection.

What are the connectivity options between your home and lab? Does the lab have an Internet connection? Do you have an Internet connection at home? If not, does your lab have a dial-up server (you will need a telephone modem at home in that case)? If it's dial-up, what transport protocol is used (ppp, telnet-only, etc.).

UltraSoul · 08-21-2005, 09:23 AM

My lab and home have a internet aceess. However, the pc in my home and the sunWS
in my lab are under a firewall which perform router or gateway.

macemoneta · 08-21-2005, 10:20 AM

An Internet connection makes the task easier.

You will need to open a port either on the firewall at work or the firewall at home to allow a connection. Typically, port 22 is used for SSH, but it can be any unused port number. You will need an SSH server running on the port number you have chosen.

UltraSoul · 08-22-2005, 03:00 AM

I wonder how to open port 22 for SSH connection in SunWS.

jlliagre · 08-22-2005, 03:47 AM

UltraSoul, I think I already answered that very same question to you already.
Anyway, this is still true: you do not open or close ports on a workstation, but on a firewall (like macemoneta wrote), which may or may not run on this WS.
So the answer is another question: where is located the firewall blocking port 22, assuming port 22 is blocked ?