[ previous ] [ next ] [ threads ]
 From:  Chris Buechler <cbuechler at gmail dot com>
 Cc:  m0n0wall at lists dot m0n0 dot ch
 Subject:  Re: [m0n0wall] m0n0wall IPSec-configuration
 Date:  Thu, 18 Aug 2005 11:43:04 -0400
On 8/18/05, Daniel Voelkel <the underscore dna at gmx dot de> wrote:
> Hi,
> I want to do the following. My m0n0 has 3 Interfaces, WAN, LAN and
> VPN_subnet. I want do connect a client in my local VPN_subnet with the
> VPN of my company. Generally ,I have 2 ways to do that
> - VPN-tunnel opened by the m0n0wall
>    means, that the m0n0 opens the tunnel. Al client or a whole subnet is
> connected with the remote vpn.

Yes, but only if the remote site is setup to do site to site with you.  

> - mobile client
>    means, that a client needs a vpn-client to open the tunnel, which the
> m0n0 only passes through.

This is the only feasible way if you have the typical client-based
VPN.  Site to site IPsec has to be specifically configured that way on
each end.