+++ Nilesh Chaudhari [13/04/02 22:59 +0100]:
<snip>
> +---------+ +----------+ +---------+ +-------+
> | Home PC |----| Cable GW |---<> Internet <>--| Off. GW |--|Off. PC|
> +---------+ +----------+ +---------+ +-------+
>
> 1. Since both the PCs are on private subnets, even if we managed to
> route the packets from the home PC to the office gateway, the office
> gateway will reject the packets bound for its private subnet because
> they are initiated from an external host. (This is if a firewall has
> been configured properly).
Correct. That is why a VPN is needed. A VPN is an IPSEC tunnel over IP.
This means that the RFC 1918 packet is encapsulated in a valid public IP
packet, which the gateway will accept and the VPN server on the gateway will
deal with.
> 2. IPSEC won't work because the Cable GW does natting on the packets
> originating from the Home PC. And there is not control over the cable
> GW.
BTW, according to the original mail, both PCs are behind a cable modem from
the same provider.
> 3. We can connect to the Office PC with a PPTP connection, but it will
> need a VPN service on the Office GW.
>
> In any case, you'll atleast need a VPN server on your Office GW.
Without a proper diagram of the logical setup, it is hard to guess exactly
what is needed.
<snip>
> He can't do even an ssh/scp without his admin's grace. So Amish, try
> maskaoing your admin. (That'll not help much if he is a good admin)
This will depend in the exact need.
Devdas Bhagat
--
I can't die until the government finds a safe place to bury my liver.
-- Phil Harris
_______________________________________________
http://mm.ilug-bom.org.in/mailman/listinfo/linuxers
