Re: Config TCP Gateway

Diane,

If it's a VPN, wouldn't the supplier get assigned an IP address from
your WAN range? That's what normally happens with VPN; the remote device
operates as if it were part of your LAN/WAN. In that case, there should
not need to be a seperate route for this supplier.

If I understand you correctly that all remote traffic (your remote sites
as well as this supplier) is routed through this 192.168.255.8 gateway,
you should not need to do anything, since all non-LAN traffic is routed
to that gateway/firewall anyway.

Regards,
René
--

"LDL" <diane@xxxxxxxxxxxx> schreef in bericht
news:nsOdnTvnOuaL3CLcRVn-2Q@xxxxxxxxxxxxxxx
Rene, What we're doing is allowing a software provider to access our
AS400
to perform software upgrades. I have created a VPN on our firewall
(we have
one firewall for all the WAN) to allow the remote provider to access
our PC
network. My understanding is that the AS400 needs to use the firewall
as a
gateway to the outside (internet). Apparently, not only will they
access
our AS400 we may send files to them. Hope this is detailed enough. I
can't
find anyone who understands these basic needs. Thanks for your reply.
Diane

"René H. Hartman" <sorry@xxxxxxxxxxx> wrote in message
news:41bf3dd5$0$44106$5fc3050@xxxxxxxxxxxxxxxxxxxxxxxxxxx
Diane,

Pity you didn't list the requirements for the new gateway as well.
Anyway, you cannot have two default routes, so I guess you need a
route
to a specific network id.
If that's the case, just add a route specifying that network as the
route destination, with the appropriate subnet mask, and the address
of
the router connecting to that network as your next hop. Leave the
rest
to their defaults, unless you have specific needs not to.

Alternatively, if all remote sites on your WAN are in the
192.168.0.0
network, and your new route should connect to unknown destinations
(like
the internet), you should set your default route to point to the new
gateway and make your current default route a specific one with
route
destination 192.168.0.0, subnet mask 255.255.0.0 and next hop
192.168.255.8.

Hope this helps. If you're still not clear, it will help if you post
the
requirements for the new route and we may be able to give you the
proper
details.

Regards,
René

--

"LDL" <diane@xxxxxxxxxxxx> schreef in bericht
news:AIydnZMov6c7iCLcRVn-iw@xxxxxxxxxxxxxxx
I need to add a gateway on our AS400 to our network firewall.
Currently
there is one entry in the TCP Route. It's the address for a router
that
connects our main network to all our remote sites on our WAN via
frame-relay
. I've listed the config below. I don't know how to add the
additional
gateway. Can someone please help a novice? Thanks, Diane


route destination: *dftroute
subnet mask: *none
type of service: *mindelay
next hop: 192.168.255.8
preferred binding interface: *none
max transmission unit: *ifc
duplicate route priority: 5
route metric: 1
route redistribution: *no












.

Relevant Pages

  • Re: Two Gateways On Same Subnet
    ... firewall which would be the default route for the LAN machines. ... Another way to solve remote access problems is to have the remote access ... and encapsulated) it continues to the Internet gateway device. ... mention) are not also using the firewall as their default gateway. ...
    (microsoft.public.windows.server.networking)
  • Re: VPN & FTP Question
    ... that the remote client is XP Pro SP2. ... I'm guessing that it is somethint to do with retaining the "route add" ... > default gateway will be changed to the VPN connection once the VPN ... > simply turn off the Use default gateway on remote host in the TCP/IP ...
    (microsoft.public.windows.server.sbs)
  • Re: win2000as routing
    ... If you are trying to use this method to route between the two sites, ... You do not need to configure routing manually. ... the remote site dials in, it connects to the demand-dial interface and the ... Ethernet card IP address is 192.168.0.2 with default gateway on ...
    (microsoft.public.win2000.ras_routing)
  • Re: SBS 2003 RRAS VPN - print to local network
    ... As a general VPN idea remote systems should _never_ be in the same subnet. ... It is routing on the RRAS ... RRAS is then told to static route traffic for 27.x ...
    (microsoft.public.windows.server.sbs)
  • Re: Config TCP Gateway
    ... wouldn't the supplier get assigned an IP address from ... If I understand you correctly that all remote traffic (your remote sites ... Pity you didn't list the requirements for the new gateway as well. ... just add a route specifying that network as the ...
    (comp.sys.ibm.as400.misc)