[Klug-general] VPN Endpoints

[George Prowse]

James Leighton wrote:
> Hi all,
>
> Quick Background:
>
> I want/need to be able to allow people X, Y, Z to VPN into one of our 
> networks (Network 1), but only access the gateway of said network (to 
> allow them to connect to another remote network (We'll call this 
> network 2) (via VNC) which only allows the first network to connect!
>
> Basically:
>
> X ---> Network 2 (doesn't work due to security on network 2)
> but
> X --> VPN to network 1 --> Vnc to Network 2 is fine
>
> except, we only want them to access the gateway and no local resources 
> on network 1!
>
> Ok, that background wasn't quick! Ah well :)
>
> Anyway, would my best course of action be to set up a VPN box with 2 
> interfaces, acting as a NAT router on one and that terminates the VPN 
> (which I'd forward through the router) on the other? Or is there a 
> simpler solution?
>
> Thanks for any insights :) (And sorry If I made no sense at all!)
>
> James
I, too, would love any ideas into VPN, I have often wanted to set one up 
but never really bothered.