I think this is what you want.
>Return-path: <[log in to unmask]>
>Date: Tue, 20 Jan 2004 11:35:18 -0500
>Reply-To: Doug Nelson <[log in to unmask]>
>Sender: MSU Network Administrators Group <[log in to unmask]>
>From: Doug Nelson <[log in to unmask]>
>Subject: Re: [MSUNAG] Central VPN access server now available
>To: [log in to unmask]
>
>Jeff Bowes writes:
>
>> At this point I am blocking access to most ports on PCs in my Windows
>> domain from sources outside of a short list of allowed IP ranges. These
>> IP ranges basically consist of Physics and Astronomy "owned" static and
>> DHCP addresses. To help outside users access the domain from a source
>> outside the allowed range I run a VPN server of my own, but I've found
>> that the VPN solution provided by Microsoft is sometimes not as reliable
>> as I'd like.
>>
>> It would be helpful for me if you were to let us know the range of
>> addresses that are assigned by the central VPN server so I can allow
>> them through my IPSec policies. This way I can give my VPN users the
>> option of using the central solution when it goes public.
>>
>> It seemed apparent from discussions at the last NAG meeting that other
>> folks on campus are firewalling or otherwise blocking ports (or planning
>> to do so soon) to machines in their specific departments, and they would
>> also find this information helpful.
>>
>> If this information is already publicly available somewhere then feel
>> free to find me and slap me at your earliest convenience.
>
>No, we haven't published this yet. I should put that on the VPN information
>pages. The VPN service will use IP's in the range 35.12.64.0 through
>35.12.95.255. I'm sure we won't use all of those IP's, but I have reserved
>them for the VPN service.
>
>Doug
>
>
>Doug Nelson [log in to unmask]
>Network Manager Ph: (517) 353-2980
>Computer Laboratory http://www.msu.edu/~nelson/
>Michigan State University
At 10:41 AM 9/30/2004, Lee Duynslager wrote:
>Has anybody out there configured a firewall on a msu server or machine to
>permit access via VPN?
>
>The reason I ask is that if you could provide me with the minimal list or
>range of IP addresses that will have to be added to the firewall rules so
>that users connecting via vpn can access that server?
>
>Thanks,
>
>Lee
--Chris
==============================================
Chris Wolf Computer Service Manager
Agricultural Economics [log in to unmask]
Michigan State University 517 353-5017
|
