On 07/16/08 12:18, Taylor, Grant wrote:
In short, add a new IP to two pieces of equipment, set up the VPN, and
add a single route statement to the target server and you are done.
This is what you have now.
+---------+ +--------+ +--------+ +--------+
| Support +---+ Router +===(VPN)===+ Router +---+---+ Server |
+---------+ +--------+ +--------+ L +--------+
A
N +-------+
+---+ Other |
+-------+
This is what I'm proposing.
+--------+ +--------+
+---------+ +--------+ | Router +-<>-<>-+ Server |
| Support +---+ Router +===(VPN)===+ +---+---+ |
+---------+ +--------+ +--------+ L +--------+
A
N +-------+
+---+ Other |
+-------+
In this case the VPN comes in and goes directly to the small network
that is the router and server, leaving the rest of your LAN alone.
Grant. . . .
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html