DSL Watchguard SOHO and VPN

Greetings,

I need to setup a temporary VPN at one of our offices using a DSL
account.
I am using a watchguard SOHO to establish the VPN tunnel.

The problem I see is.... the ISP issues a router/firewall appliance to
connet to the DSL service. Behind this, I need to setup my WG SOHO. The
ISPs router is set to subnet all PCs behind it, thus subnetting my SOHO
and making my VPN tunnel impossible to setup. (As I understand it, my
SOHO need to be end 'end-point', with an external IP address)

Anybody have any suggestions?
Can the ISP's router be put into a 'passive mode'? Is there a way to
setup MY SOHO so that the VPN tunnel will work running through the ISPs
router?

Confusing enough? ;-)

Thanks!

Re: DSL Watchguard SOHO and VPN

Post removed (X-No-Archive: yes)

Re: DSL Watchguard SOHO and VPN

Great - I will give this a try.

Thanks!

Leythos wrote:
> In article <1169216932.368642.63460@v45g2000cwv.googlegroups.com>,
> frankgrimesjr@gmail.com says...
> > Anybody have any suggestions?
> > Can the ISP's router be put into a 'passive mode'? Is there a way to
> > setup MY SOHO so that the VPN tunnel will work running through the ISPs
> > router?
>
> Get the ISP to set their device to BRIDGE MODE, that will give you a
> public IP on their network - you often have to call for this.
>
> Also, a Dynamic IP is going to cause you problems with a VPN.
>
> --
>
> spam999free@rrohio.com
> remove 999 in order to email me

Re: DSL Watchguard SOHO and VPN

Leythos;995796 Wrote:
> In article <1169216932.368642.63460@v45g2000cwv.googlegroups.com>,
> frankgrimesjr@gmail.com says...
> > Anybody have any suggestions?
> > Can the ISP's router be put into a 'passive mode'? Is there a way to
> > setup MY SOHO so that the VPN tunnel will work running through the
> ISPs
> > router?
>
> Get the ISP to set their device to BRIDGE MODE, that will give you a
> public IP on their network - you often have to call for this.
>
> Also, a Dynamic IP is going to cause you problems with a VPN.

Very true. Make sure that your ISP has given you a static IP, or
establishing a VPN will be very difficult, if not impossible.

Their router/firewall may also have an option for what's called
'Transparent mode' for IPSec, if that's what you're establishing the
VPN with. What that will do is take IPSec packets and pass them on
through without touching them for another program/firewall (such as the
Watchguard) to deal with.

Hope that helps.

Craig


--
crickel
------------------------------------------------------------ ------------
crickel's Profile: http://unixadmintalk.com/884
View this thread: http://unixadmintalk.com/showthread.php?t=259395