>>>> On Windows, you'd type:
>>>>
>>>> route add 192.168.200.0 mask 255.255.255.0 192.168.1.1
>>>
>>> 1. I didn't know you could do that.
>>> 2. What does it do?
>>>
>>
>> It tells your PC that there's a network called 192.168.200.0 somewhere
>> voer there, and that to get ot it, you must forward the packets to
>> 192.168.1.1 and he'll take care of them.
>
> Interesting. I didn't know Windows was actually capable of doing that.
> Usually when I need a router in a hurry, I load up Linux and read some
> manpages...
>
> Hmm, I wonder... If my VPN client doesn't route all the subnets I want,
> can I get it to dump the packets onto the wrong LAN segment, and then
> trust the router at that end to take it to the correct place?
>

Assuming your router knows the way and there are no filters or 
restrictions in place, yes.

>>> Incidentally, I gather that there's two ways to control the ASA. One
>>> involves telnet. The other involves a serial cable...
>>
>> Serial cable is required to give the machine its initial barebones
>> config, after that, it's telnet or preferably ssh. Since anyone could
>> sniff the telnet password.
>
> It's neat that you can configure it via IP. Then again, if you configure
> the IP stuff wrong, you need to connect somehow so you can reconfigure
> it. :-}
>
> I wonder what authentication options there are for SSH...
>

Userid / password.  Either local or via an external authentication 
system (TACACS, Radius, Kerberos, RSA SecurID, etc...)

-- 
/*Francois Labreque*/#local a=x+y;#local b=x+a;#local c=a+b;#macro P(F//
/*    flabreque    */L)polygon{5,F,F+z,L+z,L,F pigment{rgb 9}}#end union
/*        @        */{P(0,a)P(a,b)P(b,c)P(2*a,2*b)P(2*b,b+c)P(b+c,<2,3>)
/*   gmail.com     */}camera{orthographic location<6,1.25,-6>look_at a }

Post a reply to this message