Hi Swinog
I've noticed that quite a few Firewalls don't support VPN to a DNS name as peer, so you'll have to enter the remote IP , and better having a fixed IP on the remote site :)
Does anyone know whether it's possible to enter a dyndns record as remote side on a Juniper Firewall?
Cheers Josh
Not a good time to trust DNS servers ;-)
-----Original Message----- From: swinog-bounces@lists.swinog.ch [mailto:swinog-bounces@lists.swinog.ch] On Behalf Of Josh Geisser Sent: vendredi, 25. juillet 2008 13:41 To: swinog@swinog.ch Subject: [swinog] Juniper & VPN to a dyndns site
Hi Swinog
I've noticed that quite a few Firewalls don't support VPN to a DNS name as peer, so you'll have to enter the remote IP , and better having a fixed IP on the remote site :)
Does anyone know whether it's possible to enter a dyndns record as remote side on a Juniper Firewall?
Cheers Josh
_______________________________________________ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Hey Josh
Yes, its possible to use a dyndns name. Or its even better, you can configure the Remote Firewall to initalise the tunnel. So the local site does not even need to know the adress of the remote site. We use Juniper sience ages with such tunnels.
Regards Michele
-----Ursprüngliche Nachricht----- Von: swinog-bounces@lists.swinog.ch [mailto:swinog-bounces@lists.swinog.ch] Im Auftrag von Josh Geisser Gesendet: Freitag, 25. Juli 2008 13:41 An: swinog@swinog.ch Betreff: [swinog] Juniper & VPN to a dyndns site
Hi Swinog
I've noticed that quite a few Firewalls don't support VPN to a DNS name as peer, so you'll have to enter the remote IP , and better having a fixed IP on the remote site :)
Does anyone know whether it's possible to enter a dyndns record as remote side on a Juniper Firewall?
Cheers Josh
_______________________________________________ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
___________________________________________________ Unsere kostenlose Fachveranstaltung zu den Themen: Prozessmanagement - Qualitätssicherung - Dokumentenmanagement
«Sind Ihre Unternehmensprozesse effektiv und trotzdem flexibel organisiert?»
- Donnerstag, 11.09.2008, im Hotel Schweizerhof in Luzern oder - Dienstag, 16.09.2008, im Radisson SAS Hotel in St. Gallen
Mehr Infos und das Anmeldeformular finden Sie auf: www.online.ch/veranstaltungen ___________________________________________________
Ah cool thx a lot.
It's a shame that pfSense can't cope with dns peers yet.
I've noticed the 'remote init' setting on a Astaro as well, but never tried it. So with this you can create a tunnel without a remote preer? Having remote network, PSK/cert and the crypt params right and that's it?
Cheers Josh
-----Ursprüngliche Nachricht----- Von: swinog-bounces@lists.swinog.ch [mailto:swinog-bounces@lists.swinog.ch] Im Auftrag von Michele Capobianco Gesendet: Freitag, 25. Juli 2008 14:43 An: 'swinog@swinog.ch' Betreff: Re: [swinog] Juniper & VPN to a dyndns site
Hey Josh
Yes, its possible to use a dyndns name. Or its even better, you can configure the Remote Firewall to initalise the tunnel. So the local site does not even need to know the adress of the remote site. We use Juniper sience ages with such tunnels.
Regards Michele
-----Ursprüngliche Nachricht----- Von: swinog-bounces@lists.swinog.ch [mailto:swinog-bounces@lists.swinog.ch] Im Auftrag von Josh Geisser Gesendet: Freitag, 25. Juli 2008 13:41 An: swinog@swinog.ch Betreff: [swinog] Juniper & VPN to a dyndns site
Hi Swinog
I've noticed that quite a few Firewalls don't support VPN to a DNS name as peer, so you'll have to enter the remote IP , and better having a fixed IP on the remote site :)
Does anyone know whether it's possible to enter a dyndns record as remote side on a Juniper Firewall?
Cheers Josh
_______________________________________________ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
___________________________________________________ Unsere kostenlose Fachveranstaltung zu den Themen: Prozessmanagement - Qualitätssicherung - Dokumentenmanagement
«Sind Ihre Unternehmensprozesse effektiv und trotzdem flexibel organisiert?»
- Donnerstag, 11.09.2008, im Hotel Schweizerhof in Luzern oder - Dienstag, 16.09.2008, im Radisson SAS Hotel in St. Gallen
Mehr Infos und das Anmeldeformular finden Sie auf: www.online.ch/veranstaltungen ___________________________________________________ _______________________________________________ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
Exact!
-----Ursprüngliche Nachricht----- Von: swinog-bounces@lists.swinog.ch [mailto:swinog-bounces@lists.swinog.ch] Im Auftrag von Josh Geisser Gesendet: Freitag, 25. Juli 2008 15:05 An: swinog@swinog.ch Betreff: Re: [swinog] Juniper & VPN to a dyndns site
Ah cool thx a lot.
It's a shame that pfSense can't cope with dns peers yet.
I've noticed the 'remote init' setting on a Astaro as well, but never tried it. So with this you can create a tunnel without a remote preer? Having remote network, PSK/cert and the crypt params right and that's it?
Cheers Josh
-----Ursprüngliche Nachricht----- Von: swinog-bounces@lists.swinog.ch [mailto:swinog-bounces@lists.swinog.ch] Im Auftrag von Michele Capobianco Gesendet: Freitag, 25. Juli 2008 14:43 An: 'swinog@swinog.ch' Betreff: Re: [swinog] Juniper & VPN to a dyndns site
Hey Josh
Yes, its possible to use a dyndns name. Or its even better, you can configure the Remote Firewall to initalise the tunnel. So the local site does not even need to know the adress of the remote site. We use Juniper sience ages with such tunnels.
Regards Michele
-----Ursprüngliche Nachricht----- Von: swinog-bounces@lists.swinog.ch [mailto:swinog-bounces@lists.swinog.ch] Im Auftrag von Josh Geisser Gesendet: Freitag, 25. Juli 2008 13:41 An: swinog@swinog.ch Betreff: [swinog] Juniper & VPN to a dyndns site
Hi Swinog
I've noticed that quite a few Firewalls don't support VPN to a DNS name as peer, so you'll have to enter the remote IP , and better having a fixed IP on the remote site :)
Does anyone know whether it's possible to enter a dyndns record as remote side on a Juniper Firewall?
Cheers Josh
_______________________________________________ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
___________________________________________________ Unsere kostenlose Fachveranstaltung zu den Themen: Prozessmanagement - Qualitätssicherung - Dokumentenmanagement
«Sind Ihre Unternehmensprozesse effektiv und trotzdem flexibel organisiert?»
- Donnerstag, 11.09.2008, im Hotel Schweizerhof in Luzern oder - Dienstag, 16.09.2008, im Radisson SAS Hotel in St. Gallen
Mehr Infos und das Anmeldeformular finden Sie auf: www.online.ch/veranstaltungen ___________________________________________________ _______________________________________________ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog _______________________________________________ swinog mailing list swinog@lists.swinog.ch http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
___________________________________________________ Unsere kostenlose Fachveranstaltung zu den Themen: Prozessmanagement - Qualitätssicherung - Dokumentenmanagement
«Sind Ihre Unternehmensprozesse effektiv und trotzdem flexibel organisiert?»
- Donnerstag, 11.09.2008, im Hotel Schweizerhof in Luzern oder - Dienstag, 16.09.2008, im Radisson SAS Hotel in St. Gallen
Mehr Infos und das Anmeldeformular finden Sie auf: www.online.ch/veranstaltungen ___________________________________________________
-
Christian Jouas -
Josh Geisser -
Michele Capobianco