Three 15 hour days later... battling weekend support folks at local ISPs, telco, and router vendor, web sites, etc... I finally have this old router connecting successfully and passing traffic from internal ethernet LAN to ISP over dynamic IP ISDN connection. The DSL line I ordered did not work out and we had to revert to this old technology just to get the office up and running. Remote offices in the boonies. Always an adventure. Next piece of this puzzle will be to secure their connection with Astaro firewall and IPSEC. My question: How? I have set up Astaro firewalls with IPSEC on T1s, frame relay, DSL, cable service. But now that I finally have the damn Internet connection up and running, I am left scratching my head on this. Could be the 50 hour weekend I just worked, but my brain isn't producing solutions just at the moment. Can somebody out there help me out with this? Mapped out logically, this is what I am looking at here:
Main office --> eth-Astaro-eth --> Internet --> bri/dynIP-Router-eth --> eth-Astaro-eth --> remote site
I am thinking I might need to use IPSec in Transport mode from the remote site's internal LAN to the ISDN router, and then do NAT on the router. Except Astaro doesn't do Transport IPSEC, and I have no idea how I would configure the Astaro box at the main office to deal with the dynamic IP anyway. Would this be better suited for something like OpenVPN? I really don't want to have to add another VPN solution from what we already use. We have five sites running Astaro IPSEC. Like to keep it that way. I am going to look into dedicated address on this ISDN line tomorrow. Unfortunately, the ISP could not set me up with a static IP due to 'weekend support restrictions'. If anyone has any ideas that will make my Monday easier, please PLEASE PLEASE share. I will send you roses, beer, pizza, property on Mars, whatever. I am a lone ranger IT guy for my company and I am way over-taxed. Needing some help in a bad way! Thanks in advance for any you can provide. I would be eternally grateful. [:S]
This thread was automatically locked due to age.
