Re: RRAS configuration
- From: "Bill Grant" <not.available@online>
- Date: Mon, 19 Dec 2005 12:25:41 +1100
There are lots of different opinions and it depends a bit on how your
network is configured.
My personal opinion is that if all your network is reachable from the
firewall device and this device is capable of acting as a VPN server, do
that. It is the simplest routing setup because the firewall is already the
default gateway for the LAN.
The only thing that would push me to favour the RRAS server on the LAN
would be if you want the remote clients to authenticate against your Windows
user database.
perfimage wrote:
> I have searched the net for a while and am wondering which is
> considered the "best practice"...punching holes in my linux/shorewall
> firewall, DNATing traffic intended for VPN connections to a Win2k3
> RRAS server behind the firewall or making the linux/shorewall box the
> VPN server and connecting to it then the network behind it.
>
> I have seen both scenarios documented, though there doesn't seem to
> be a clearly defined opinion as to which scenario is preferred.
>
> Thanks.
.
- Prev by Date: Re: Network Connections window blank
- Next by Date: Re: RRAS configuration
- Previous by thread: Re: server 2003 and xp pro
- Next by thread: Re: RRAS configuration
- Index(es):
Relevant Pages
|
