Go Back   Wireless and Wifi Forums > News > Newsgroups > alt.internet.wireless
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 04-23-2007, 07:41 PM
ttdifferent@gmail.com
Guest
 
Posts: n/a
Default ZyAir 2000 G Does it support VPN ?

Can I use a VPN connection with a wireless connection through this
router ?
(Vpn passthrough)



G-2000 Plus v2
http://us.zyxel.com/web/product_fami...No=PDCA2007057


Reply With Quote
  #2 (permalink)  
Old 04-23-2007, 10:19 PM
John Navas
Guest
 
Posts: n/a
Default Re: ZyAir 2000 G Does it support VPN ?

On 23 Apr 2007 11:41:06 -0700, "ttdifferent@gmail.com"
<ttdifferent@gmail.com> wrote in
<1177353666.603018.246300@o5g2000hsb.googlegroups. com>:

>Can I use a VPN connection with a wireless connection through this
>router ?
>(Vpn passthrough)
>
>G-2000 Plus v2
>http://us.zyxel.com/web/product_fami...No=PDCA2007057


What does the manual say? ;)

--
Best regards, FAQ for Wireless Internet: <http://Wireless.wikia.com>
John Navas FAQ for Wi-Fi: <http://wireless.wikia.com/wiki/Wi-Fi>
Wi-Fi How To: <http://wireless.wikia.com/wiki/Wi-Fi_HowTo>
Fixes to Wi-Fi Problems: <http://wireless.wikia.com/wiki/Wi-Fi_Fixes>

Reply With Quote
  #3 (permalink)  
Old 04-24-2007, 08:15 AM
ttdifferent@gmail.com
Guest
 
Posts: n/a
Default Re: ZyAir 2000 G Does it support VPN ?

It says nothing about vpn.

So I guess its not possible ?

VPn is just a ssh connection through the router or is it more
complicated ?



Reply With Quote
  #4 (permalink)  
Old 04-24-2007, 09:18 AM
Jeff Liebermann
Guest
 
Posts: n/a
Default Re: ZyAir 2000 G Does it support VPN ?

"ttdifferent@gmail.com" <ttdifferent@gmail.com> hath wroth:

>It says nothing about vpn.


Yeah, I noticed. Nothing in the data sheet, knowledge pile, or docs.
Too bad there's no online emulator to see if there's a setting. Call
or write sales or support?
<http://us.zyxel.com/contactus/contact_sales.php>

>So I guess its not possible ?


No. That just means that they didn't list it as a feature.

>VPn is just a ssh connection through the router or is it more
>complicated ?


It's way more complicated. SSL is just one type of VPN. There's also
PPTP, L2TP, and IPSec with a mess of encryption and authentication
protocols.

The basic problem with shoving a VPN through a router is that NAT
rewrites the header. If the VPN encapsulates the header as well as
the data, as in AH, then the VPN termination will not work and
complain. Most VPN's don't do that, but there are few high security
flavors that do, and they won't go through any form of NAT. The one's
that don't, such as ESP, still encrypt the header, making it rather
difficult for the router to re-write the IP address and header info.
"VPN Passthru" detects this condition and provides special handling to
deal with the encrypted headers.

For most applications, it's safe enough to leave VPN passthrough on
and the user will never notice. So, routers are starting to make that
the default and remove the option to turn it on or off. In other
words, it may work but no guarantee.

A more serious problem is how many VPN tunnels can you open through a
router? Most junk routers will do exactly one. Improved firmware
might crank this up to perhaps 2 tunnels. Cheap routers made to
terminate VPN's can probably do about 10. Real VPN routers can do
hundreds. No clue where the Z-2000 fits. For example:

Comparing NETGEAR's VPN and VPN Passthrough Support
<http://kbserver.netgear.com/kb_web_files/n101222.asp>

Light reading and homework:

Is That a VPN or Is It Just Passing Through?
<http://www.smallbusinesscomputing.com/webmaster/article.php/3501436>

Are IP NAT Traversal and VPN Passthrough the same thing?
<http://expertanswercenter.techtarget.com/eac/knowledgebaseAnswer/0,295199,sid63_gci975019,00.html>

Troubleshooting VPN passthrough for Home Routers
<http://kbserver.netgear.com/kb_web_files/n101495.asp>


--
Jeff Liebermann jeffl@comix.santa-cruz.ca.us
150 Felker St #D http://www.LearnByDestroying.com
Santa Cruz CA 95060 http://802.11junk.com
Skype: JeffLiebermann AE6KS 831-336-2558

Reply With Quote
  #5 (permalink)  
Old 04-24-2007, 02:50 PM
John Navas
Guest
 
Posts: n/a
Default Re: ZyAir 2000 G Does it support VPN ?

On 24 Apr 2007 00:15:25 -0700, "ttdifferent@gmail.com"
<ttdifferent@gmail.com> wrote in
<1177398925.891539.173320@u32g2000prd.googlegroups .com>:

>It says nothing about vpn.


Actually it does. Page 59.

>So I guess its not possible ?


Read the manual and you won't have to guess.

>VPn is just a ssh connection through the router or is it more
>complicated ?


Different. Wikipedia is a good place to learn about it.

--
Best regards, FAQ for Wireless Internet: <http://Wireless.wikia.com>
John Navas FAQ for Wi-Fi: <http://wireless.wikia.com/wiki/Wi-Fi>
Wi-Fi How To: <http://wireless.wikia.com/wiki/Wi-Fi_HowTo>
Fixes to Wi-Fi Problems: <http://wireless.wikia.com/wiki/Wi-Fi_Fixes>

Reply With Quote
  #6 (permalink)  
Old 04-24-2007, 02:52 PM
John Navas
Guest
 
Posts: n/a
Default Re: ZyAir 2000 G Does it support VPN ?

On Tue, 24 Apr 2007 01:18:23 -0700, Jeff Liebermann
<jeffl@comix.santa-cruz.ca.us> wrote in
<btdr2395ero2j4mouje8i4q8q9k1marbp0@4ax.com>:

>"ttdifferent@gmail.com" <ttdifferent@gmail.com> hath wroth:
>
>>It says nothing about vpn.

>
>Yeah, I noticed. Nothing in the data sheet, knowledge pile, or docs.


Page 59 was missing from the copy you downloaded?

--
Best regards, FAQ for Wireless Internet: <http://Wireless.wikia.com>
John Navas FAQ for Wi-Fi: <http://wireless.wikia.com/wiki/Wi-Fi>
Wi-Fi How To: <http://wireless.wikia.com/wiki/Wi-Fi_HowTo>
Fixes to Wi-Fi Problems: <http://wireless.wikia.com/wiki/Wi-Fi_Fixes>

Reply With Quote
  #7 (permalink)  
Old 04-24-2007, 05:22 PM
Jeff Liebermann
Guest
 
Posts: n/a
Default Re: ZyAir 2000 G Does it support VPN ?

John Navas <spamfilter1@navasgroup.com> hath wroth:

>On Tue, 24 Apr 2007 01:18:23 -0700, Jeff Liebermann
><jeffl@comix.santa-cruz.ca.us> wrote in
><btdr2395ero2j4mouje8i4q8q9k1marbp0@4ax.com>:
>
>>"ttdifferent@gmail.com" <ttdifferent@gmail.com> hath wroth:
>>
>>>It says nothing about vpn.

>>
>>Yeah, I noticed. Nothing in the data sheet, knowledge pile, or docs.

>
>Page 59 was missing from the copy you downloaded?


Yep, I was lazy. The "user guide" is 12MBytes big and I decided that
I didn't want to wait for the download. It was midnight, and the
download was running at 10KBytes/sec. This morning, it's at
25KBytes/sec. Yawn.... I guess I'll wait the 10 minutes.
<http://us.zyxel.com/web/support_download_detail.php?sqno=165848>
I read the "quick start guide" and data sheet, neither of which
mentions VPN. Neither does a search of the knowledge base. However,
I wanna read about their built in RADIUS server, so I might as well
grab the PDF.

10 minutes remaining to download.... this page 59 had better be worth
reading. Maybe a foldout? Pictures of the insides without covers?

6 minutes remaining and it's 40% done. The anticipation of success is
making me thirsty. Time for a green tea fix. Maybe if I don't watch,
it will go faster. Bubble, bubble, toil and trouble....

2 minutes remaining and it's 60% done and back down to 10KBytes/sec.
Is it true that one must suffer before enlightenment? Maybe if I add
sugar, it won't taste like green tea.

30 seconds remaining and 98% done and it's down to 5KBytes/sec. No
wireless involved so that's not it. I guess it's just a bad day for
downloading.

Done in 17 minutes. On to page 59 out of 440 pages. Ugh, big. It's
days like this that I really like searchable PDF documentation.

Looks like it has a PPTP client built into the firmware. There may be
other types of clients as there is a pull down box on the menu for
encapsulation type. No foldout. However, a PPTP client does not
answer the original question. This is about VPN passthru.

The index, under "IPSec", points to page 39 which mumbles something
about the router supporting certificates. So, I guess it can do
authentication.

On page 40, it claims support of SSL Passthrough, but in reference to
web pages, not a VPN. However, if it works for web pages, it should
work for a VPN (famous last assumption).

Under firewall rules on Page 160, it mentions a rule set for IPSec
either AH or ESP encapsulation. This implies that the router at least
recognizes IPSec VPN's and can pass them through the firewall.

Nothing else I could find for VPN. From skimming the docs, in about
the same time span that it took to download, I would conclude that
support for VPN passthrough is indeterminate and must be tested first,
especially the number of tunnels supported simultaneously. Since
there is a prefab firewall rule for IPSec for encapsulation type, it's
possible that at least IPSec is supported. It's also possible that
I'm searching for the wrong term. I did read the entire TOC and
index, but found nothing useful.



--
Jeff Liebermann jeffl@comix.santa-cruz.ca.us
150 Felker St #D http://www.LearnByDestroying.com
Santa Cruz CA 95060 http://802.11junk.com
Skype: JeffLiebermann AE6KS 831-336-2558

Reply With Quote
  #8 (permalink)  
Old 04-28-2007, 04:06 AM
John Navas
Guest
 
Posts: n/a
Default Re: ZyAir 2000 G Does it support VPN ?

On Tue, 24 Apr 2007 09:22:37 -0700, Jeff Liebermann
<jeffl@comix.santa-cruz.ca.us> wrote in
<kc9s235mi3mhqfi594kb699k9u5jcqi6l3@4ax.com>:

>Looks like it has a PPTP client built into the firmware. There may be
>other types of clients as there is a pull down box on the menu for
>encapsulation type. No foldout. However, a PPTP client does not
>answer the original question. This is about VPN passthru.


PPTP _is_ (a type of) VPN.

--
Best regards, FAQ for Wireless Internet: <http://Wireless.wikia.com>
John Navas FAQ for Wi-Fi: <http://wireless.wikia.com/wiki/Wi-Fi>
Wi-Fi How To: <http://wireless.wikia.com/wiki/Wi-Fi_HowTo>
Fixes to Wi-Fi Problems: <http://wireless.wikia.com/wiki/Wi-Fi_Fixes>

Reply With Quote
Sponsored Links
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is Off
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On
Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
Fade to Grey Revisited Grinder alt.comp.hardware 11 12-29-2006 09:52 PM
Linksys Hookup Nightmare ralphbowman alt.internet.wireless 14 12-03-2006 07:08 PM
[SSL-Talk List FAQ] Secure Sockets Layer Discussion List FAQ v1.1.1 Shannon Appel comp.security.misc 0 10-19-2005 05:37 AM
[SSL-Talk List FAQ] Secure Sockets Layer Discussion List FAQ v1.1.1 Shannon Appel comp.security.misc 0 08-30-2005 05:26 AM
[SSL-Talk List FAQ] Secure Sockets Layer Discussion List FAQ v1.1.1 Shannon Appel comp.security.misc 0 07-31-2005 05:25 AM


All times are GMT. The time now is 07:06 PM.


Powered by vBulletin® Version 3.7.2
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.2.0

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45