Subject: Re: Recommendations about tunnels?
To: Lista de NetBSD Users <list10@sepc.edu.mx>
From: Manuel Bouyer <bouyer@antioche.eu.org>
List: netbsd-users
Date: 05/22/2002 00:11:42
On Tue, May 21, 2002 at 10:59:05AM -0500, Lista de NetBSD Users wrote:
> Hello
> 
> ADSL is new in Mexico and some of our public schools
> in our state are adquiing these lines in order to
> have internet access in the school LAN.
> 
> With an old computer, I am preparing a schoolserver
> prototype to give firewall protection to a LAN,
> dhcp and dns service and others. A *strong wish* is
> to do a tunnel between the schoolserver and our central
> site in order to do routing and offer our intranet
> services to the kids. All our infrastructure is
> NetBSD/i386 based.
> 
> My experience in tunnels is limited to ipv6/gif tunnels
> and a *successfull* installation of a NetBSD server/firewall
> to our new ADSL line (rp-pppoe based :).
> 
> Question1:
> What kind of tunnel is better for this case?

Well, if you want some security you'll have to setup a ipsec tunnel.
I've never done it so I can't help much

> 
> Question2:
> How to know (at central site) the IP address of the school
> server when it starts pppoe sucessfully (or speedtouch/userppp).
> Or when pppoe restarts obtaining a different IP number?.

I would write a small UDP-based daemon on the server, with the clients
periodically sending their IPs. Should be easy to write.

-- 
Manuel Bouyer <bouyer@antioche.eu.org>
--