| Bill Davidsen 2006-02-10, 5:47 pm |
| Matty wrote:
> I have done a lot of reading but think I am missing some fundementals.
> If someone could set me straight on these points it would help me a
> lot....
>
> Am I right in thinking that to use a VPN from a remote location to a
> Server then that server must have a been assigned a purchased static IP
> address to an external interface (by purchased I mean registered with
> whatever organisation, a class A,B, or C ip address?).
Let me give a generic answer. The ends of a vpn need to be able to find
each other. One way to do this is to use static IPs, another is to use
dynamic DNS. If you use dynamic DNS you need to (a) keep it updated and
(b) have the client and/or server vpn software know how to use it.
If you control your firewall you can add some port knocking and improve
your security. Note that these measures make it harder to connect from
behind a firewall, such as a laptop being used on customer premises.
I'll stop, this is really not directly related to vpn, it can be used to
pre-validate any access.
--
bill davidsen <davidsen@tmr.com>
CTO TMR Associates, Inc
Doing interesting things with small computers since 1979
|