Re: NAT rule

[Grant Taylor <gtaylor@xxxxxxxxxxxxxxxxx>]

On 07/16/08 12:18, Taylor, Grant wrote:
> In short, add a new IP to two pieces of equipment, set up the VPN, and 
> add a single route statement to the target server and you are done.

This is what you have now.

+---------+   +--------+           +--------+       +--------+
| Support +---+ Router +===(VPN)===+ Router +---+---+ Server |
+---------+   +--------+           +--------+   L   +--------+
                                                A
                                                N   +-------+
                                                +---+ Other |
                                                    +-------+


This is what I'm proposing.

                                   +--------+       +--------+
+---------+   +--------+           | Router +-<>-<>-+ Server |
| Support +---+ Router +===(VPN)===+        +---+---+        |
+---------+   +--------+           +--------+   L   +--------+
                                                A
                                                N   +-------+
                                                +---+ Other |
                                                    +-------+

In this case the VPN comes in and goes directly to the small network 
that is the router and server, leaving the rest of your LAN alone.



Grant. . . .
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html