Cisco VPN Client pass-through a Netscreen?

Archived from groups: comp.security.firewalls (More info?)

Hi,

admin too <nguser2u@no.spam.AOL.com> wrote:
> I have a couple clients vesting a site where they have a small Netscreen
> unit and they will need to tunnel through to our home site using the Cisco
> VPN Client software on their laptop. What should I tell the local admin to
> do? Open which ports and how to config VPN pass-through?

http://5xp.support.netscreen.safeh [...] s1177.htm?

I made the assumption, that the netscreen is in NAT mode
Could be in route mode, than you have to work accordingly.
The netscreen knowledgebase is useful.


Why don't you use a site-to-site VPN with the netscreen acting
as a client against you VPN-concentrator?

Then the local admin has a chance to enforce some policy regarding
the connection to your site and does not need to trust the foreign client.

Greetings,
Jens