VPN fråga!

Har lite problem - följ diskussionen nedan:

We want a IPSEC VPN connection to our local office in Sweden.

Our IP: 217.215.xxx.xxx
Our local subnet: 192.168.0.x

We want the server IP to be in the 192.168.2.x subnet range.

We prefer 3DES IPSEC but we can use Blowfish or AES also if that is preferred by you.

We have a local public RSA key (2048bit) and use IPv4 address as a VPN identifier:

--/start public RSA key 2048 bit/ --

xxxxxxxxxxxxxxxxxxx

--/end public RSA key/--

Please configure the firewall accordingly and give us the remote key for it.

Best regards
Martin.

Första svaret:

Please provide the specifications of your enpoint device, as it applies to our future support of this tunnel.

We are not agreeing to build it at this time, and there may be a fee involved.

However, with those specifications we know more about what we are dealing with.

Triple DES is fine, do you want SHA or MD5?

Mitt svar:

We need the tunnel so please tell us how much you charge and how we can pay for it.

We use an Astaro Security Linux firewall, you will find all necessary information above (our public key and IP asf).

We use MD5 and Triple DES.

best regards
/Martin

Deras svar:

We do not support vpn connections to Astaro Security Linux.

Additionally, all of our supported IPSEC VPN tunnels are required to be configured with a shared secret schema, and not an RSA key.

We can proceed with no gurantee of success or completion time at a rate of $75.00/hour.

If you wish to proceed, Please send the shared secret key that you would like to use on the tunnel.

Please be advised that your private network on this end of the tunnel will use 10.0.0.2 - 10.0.0.254 This cannot be changed.

Min fråga till er:

1. Det finns väl inte olika typer av VPN? Om dom har en VPN-lösning som stödjer 2048-bit 3DES IPSEC måste det väl fungera oavsett vilken brandvägg jag har?

2. Finns det olika typer av nycklar? Varför fungerar inte vår publika RSA 2048bit nyckel?

3. Vad är en "shared secret key"?

4. Är det helt enkelt så att dom bara vill ha ryggen fri om det inte fungerar men troligen så fungerar det fint?

Jag förstår hur du gissar, men:

- Det bör väl bara finnas en VPN standard? Jag kan ju ansluta min Powerbook och min XP burk mot samma VPN-lösning utan problem.

- När jag skapar nycklar i brandväggen finns det inte något val att välja "public" eller "private" - man bara skapar en nyckel liksom.

Vi har en SnapGear 630PCI brandvägg i vår server i USA som vi vill koppla ihop med Astaro Security Linux här hemma.