 |
 |
I have just added this to the published VPN instructions, at: http://network.msu.edu/public/vpn/#Server Doug > I think this is what you want. > > >Return-path: <[log in to unmask]> > >Date: Tue, 20 Jan 2004 11:35:18 -0500 > >Reply-To: Doug Nelson <[log in to unmask]> > >Sender: MSU Network Administrators Group <[log in to unmask]> > >From: Doug Nelson <[log in to unmask]> > >Subject: Re: [MSUNAG] Central VPN access server now available > >To: [log in to unmask] > > > >Jeff Bowes writes: > > > >> At this point I am blocking access to most ports on PCs in my Windows > >> domain from sources outside of a short list of allowed IP ranges. These > >> IP ranges basically consist of Physics and Astronomy "owned" static and > >> DHCP addresses. To help outside users access the domain from a source > >> outside the allowed range I run a VPN server of my own, but I've found > >> that the VPN solution provided by Microsoft is sometimes not as reliable > >> as I'd like. > >> > >> It would be helpful for me if you were to let us know the range of > >> addresses that are assigned by the central VPN server so I can allow > >> them through my IPSec policies. This way I can give my VPN users the > >> option of using the central solution when it goes public. > >> > >> It seemed apparent from discussions at the last NAG meeting that other > >> folks on campus are firewalling or otherwise blocking ports (or planning > >> to do so soon) to machines in their specific departments, and they would > >> also find this information helpful. > >> > >> If this information is already publicly available somewhere then feel > >> free to find me and slap me at your earliest convenience. > > > >No, we haven't published this yet. I should put that on the VPN information > >pages. The VPN service will use IP's in the range 35.12.64.0 through > >35.12.95.255. I'm sure we won't use all of those IP's, but I have reserved > >them for the VPN service. > > > >Doug > > > > > >Doug Nelson [log in to unmask] > >Network Manager Ph: (517) 353-2980 > >Computer Laboratory http://www.msu.edu/~nelson/ > >Michigan State University > > > At 10:41 AM 9/30/2004, Lee Duynslager wrote: > >Has anybody out there configured a firewall on a msu server or machine to > >permit access via VPN? > > > >The reason I ask is that if you could provide me with the minimal list or > >range of IP addresses that will have to be added to the firewall rules so > >that users connecting via vpn can access that server? > > > >Thanks, > > > >Lee > > > --Chris > ============================================== > Chris Wolf Computer Service Manager > Agricultural Economics [log in to unmask] > Michigan State University 517 353-5017 > > Doug Nelson, Network Manager | [log in to unmask] Academic Computing and Network Services | Ph: (517) 353-2980 Michigan State University | http://www.msu.edu/~nelson/