08-10-2011
Conceptually, VPN is a few layers down from telnet and ssh, telnet is a client app, because it connects to an already running server on tcp port 23 as I recall, tcp runs over IP. VPN is the creation of an IP device that routing rules can send packets down, and the local IP stack can accept packets from, similar to a NIC card for Ethernet, but the media is software. PacKets that go in are IPSEC encrypted and sent back to the IP stack to be routed out over other networks. VPN occupies the IPSEC protocol, a child of the IP protocol, a brother to TCP, UDP and ICMP. When IP packets arrive that are IPSEC protocol, they go into the VPN driver; it decrypts them and sends them back through the IP stack. So, you can run anything on VPN, but it is a much bigger deal than running scp.
Perhaps the boss needs some education, as you can achieve file transfer just fine with scp (ssh2 or at least ssh). I am on VPN right now, so I can do all protocols from home as if I was on the office LAN. (My bits are worn down by the time they arrive. :-) That is a lot of exposure if it is not a same company secure site. The encryption and compression of scp is about the same as VPN, but is it a trivial client install not a huge issue with routing and all. Routing? Yes, both hosts have to have network routes that get their packets into the VPN pipe end near them. The VPN pipe might be on the same host, like here on my laptop, or it may be on a firewall of DMZ host or intra-net border router (to get on a lan segment where there is routing to the other host).
Setting up the VPN used to be a proprietary process, even though the end product is standard. A VPN might be permanently set up by admins on routers, or it may be dynamically set us like on my laptop this AM, and probably my CISCO VPN setup client, achieves this differently than other brands, or even other CISCO VPNs at other companies. I suspect they use a ssh tcp server to authenticate and negotiate dynamic client VPN setup. There might be standards now, as I have not been in the firewall biz for quite a while.
This User Gave Thanks to DGPickett For This Post:
10 More Discussions You Might Find Interesting
1. Solaris
I would like to setup my solaris 10 x86 system as a vpn server. I can't seem to find any good links on setting it up. Do you guys have some links that could walk me thru on setting up the vpn server so that windows clients can connect to it? (4 Replies)
Discussion started by: kungpow
4 Replies
2. AIX
Hi,
I have xmanager installed on my windows PC. But I am not able to connect to AIX server.
It's giving the error as follows:
The X11 forwarding request was rejected. Graphics mode is not coming up in AIX server.
Please help as I have to install oracle patchset urgently. (1 Reply)
Discussion started by: dwiravi
1 Replies
3. Shell Programming and Scripting
Hi
I am not so good in scripting..trying ot learn it...need guidance of the experts in shell scripting..
Let me explain the scenario first..
a server MX1 is connected to another server MX2 through vpn..every 5 minute a script runs to test vpn connectivity between the 2 servers.when the vpn... (12 Replies)
Discussion started by: renuka
12 Replies
4. Ubuntu
Hi all,
I am trying to configure and connect Cisco VPN on Ubuntu 10.04.
I've imported .pcf file. The new vpn conn appears in the VPN Connections option. Now when I select it, it doesn't connect. Nothing happens.
I am not able to connect to VPN at all. I tried using kvpnc as well but it... (10 Replies)
Discussion started by: morningSunshine
10 Replies
5. AIX
We have a production server at a client site running AIX. And recently when users are trying to connect to it via telnet, it prompts "No more multiple IP addresses to connect".
Can I know what does this error mean? and how to rectify this?
Thanks. (2 Replies)
Discussion started by: a_sim
2 Replies
6. UNIX for Dummies Questions & Answers
Hi there,
Believe it or not, the word VPN doesn't give any search result in the forum.
I'm trying to get started with VPN.
I'm currently in the process of setting up a server.
I found a lot of howtos on the web.
There's still one thing that I'm not sure of.
My plan is to setup the VPN... (4 Replies)
Discussion started by: chebarbudo
4 Replies
7. AIX
Hi All,
Im looking for a command that can remotely connect to another AIX machine and execute scripts present in that server(Possible scenarios are a complete a restart of 3 servers in a cluster through a single script execution present in one of the servers). Im relatively new to AIX and... (5 Replies)
Discussion started by: Vishakh
5 Replies
8. AIX
Hello aix community,
After scouring the internet to find a step by step process, I've exhausted my efforts. Although I have learned a lot which brings me to this forum. I'm totally new and hope to ask the right questions.
What is the easiest way to connect to a SQL server from aix?
... (2 Replies)
Discussion started by: TechStudent36
2 Replies
9. AIX
Hi,
I followed this procedure in order to mount in AIX a shared folder in windows server 2000.
https://www-304.ibm.com/support/docview.wss?uid=isg3T1012550
Ive tested the shared folder from other windows Server, and its fine.
What Ive do in AIX is:
Logon as root
Under /Home/spss/ I... (2 Replies)
Discussion started by: trevian3969
2 Replies
10. Shell Programming and Scripting
Hello all,
I am using the VPN provider Private Internet Access.
I am using the Raspberry Pi 4 with 4GB of RAM, performance on this upgraded board is great.
Anyways I am connecting to its service using systemd's openvpn-client @ US_New_York_City.service
I wonder if I can create a... (5 Replies)
Discussion started by: haloslayer255
5 Replies
LEARN ABOUT DEBIAN
gnunet-vpn
GNUNET-VPN(1) General Commands Manual GNUNET-VPN(1)
NAME
gnunet-vpn - manually setup a GNUnet VPN tunnel
SYNOPSIS
gnunet-vpn [options]
DESCRIPTION
gnunet-vpn can be used to manually setup a VPN tunnel via the GNUnet network. There are two main types of tunnels. Tunnels to an exit
node which routes the traffic to the global Internet, and tunnels to a node that runs a service only within GNUnet. Depending on the type
of tunnel, gnunet-vpn takes different options. The "-i" option is required for tunnels to an exit node, whereas the "-p" and "-s" options
in conjunction with either "-u" or "-t" are required for tunnels to services. For exit tunnels, both UDP and TCP traffic will be redi-
rected. For service tunnels, either UDP ("-u") or TCP ("-t") traffic will be redirected.
The tool will display the IP address for this end of the tunnel. The address can be displayed as soon as it has been allocated, or only
after ("-a") the tunnel has been created.
OPTIONS
-4, --ipv4
Desired IP address on this end of the tunnel should be an IPv4 address.
-6, --ipv6
Desired IP address on this end of the tunnel should be an IPv6 address.
-a, --after-connect
Display IP address only after the tunnel is fully connected.
-c FILENAME, --config=FILENAME
Use the configuration file FILENAME.
-d SEC, --duration SEC
The mapping should be established for SEC seconds. Default is 5 minutes.
-h, --help
Print short help on options.
-i IP, --ip IP
Tunnel should be to an exit node and connect to the given IPv4 or IPv6 IP address. Note that you can specify an IPv6 address as the
target here, even in combination with "-4" (4to6) and similarly you can specify an IPv4 address in combination with "-6" (6to4).
-L LOGLEVEL, --loglevel=LOGLEVEL
Use LOGLEVEL for logging. Valid values are DEBUG, INFO, WARNING and ERROR.
-p PEERID, --peer=PEERID
Name of the peer offering the service to connect to. Cannot be used in conjunction with "-i", requires "-s".
-s NAME, --service=NAME
Name of the service running on the target peer. Cannot be used in conjunction with "-i", requires "-p".
-t, --tcp
Service runs TCP. Either "-t" or "-u" must be specified when using "-s".
-u, --udp
Service runs UDP. Either "-t" or "-u" must be specified when using "-s".
-V, --verbose
Be verbose.
-v, --version
Print GNUnet version number.
BUGS
Report bugs by using Mantis <https://gnunet.org/bugs/> or by sending electronic mail to <gnunet-developers@gnu.org>
SEE ALSO
gnunet-setup(1)
GNUnet 25 Feb 2012 GNUNET-VPN(1)