This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

One NIC...is this possible?

I would only like to use the VPN feature of Astaro to connect 2 sites but only have 1 nic in each of the boxes. The VPN box would sit in back of a CISCO 3640 running the firewall feature pack. I have given my internal address a static NAT address on the 3640. Is it possible to setup Astaro with only one NIC?

Thanks.

[ 18 March 2002: Message edited by: Orcrist ]

This thread was automatically locked due to age.

Parents

0 KKnecht over 23 years ago

Hy Orcrist,

why do you need to do that ??
Just buy another NIC, plug in and you have two physicaly divided networks, which can be routed and protected via ASL !!
In my oppinion, a firewall with only one NIC makes no sense (only for Evaluation purposes).

Regards
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 KKnecht over 23 years ago

Hy Orcrist,

why do you need to do that ??
Just buy another NIC, plug in and you have two physicaly divided networks, which can be routed and protected via ASL !!
In my oppinion, a firewall with only one NIC makes no sense (only for Evaluation purposes).

Regards
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 ollion over 23 years ago in reply to KKnecht

Orcrist,

doesn't make sense, except you only want to use
it as a proxy server.

regards
ollion
Cancel
Vote Up 0 Vote Down

Cancel
0 Guillermo Lovato over 23 years ago in reply to ollion

it does make sense, he doesn't need to isolate not use the ASL as firewall, the Cisco already does that, he only needs that the ASL acts as the bridge for the VPN traffic and the LAN.
there is no point in buying another NIC if you are pluggin them in the same hub(because that's how he operates his net i think).
so the question remains, can you tunnel VPN IN and OUT the same nic?
Cancel
Vote Up 0 Vote Down

Cancel
0 cancer over 23 years ago in reply to Guillermo Lovato

Hi,

as a VPN gateway ??? the clients need knowledge
of the gateway and it has to be assured that
the gateway doesn't send ICMP redirets.

cancer
Cancel
Vote Up 0 Vote Down

Cancel
0 Reactor over 23 years ago in reply to cancer

It should be pretty easy to do what you wanna do. On your cisco router/firewall simple form a conduit(inbound tunnel) from your external ip address to you astaro box on tcp port 1723.

That is if you can setup the astaro box with a single adapter, you should be able to I don;t know I'm still downloading mine.
Cancel
Vote Up 0 Vote Down

Cancel
0 tommo over 23 years ago in reply to Reactor

VPN wont work with NAT.
Cancel
Vote Up 0 Vote Down

Cancel