Can my linux host "share" a VMware VPN connection?

Hi Folks
I'm sure this can be done but I don't know where to start..
Here's the picture.. I need to be able to access my internal
corporate network through a Contivity securid VPN client,
which I can do no problem with WinXP (and VMWare).
There is no equivalent Contivity VPN client for linux that
works with the 2.6.x kernels (well there is *supposed* to be one but it
locks the machine completely.)
So, is there any way that I can fire up my VMware machine, establish
my VPN connection from this XP guest, and "tunnel" through it
from my linux host? I would *really* like to be able to access
my corporate network from linux.
FreeSwan doesn't (yet) support SecureID connections.
Thanks for any suggestions, apologies for cross-posting but this
is relevant to both groups.

Cheers
Jim

Jim, I would ask this in VMware's newsgroup (news.vmware.com) and its
online forums.


In comp.os.linux.networking Jim Chisholm <(E-Mail Removed)> wrote:
> Hi Folks
> I'm sure this can be done but I don't know where to start..
> Here's the picture.. I need to be able to access my internal
> corporate network through a Contivity securid VPN client,
> which I can do no problem with WinXP (and VMWare).
> There is no equivalent Contivity VPN client for linux that
> works with the 2.6.x kernels (well there is *supposed* to be one but it
> locks the machine completely.)
> So, is there any way that I can fire up my VMware machine, establish
> my VPN connection from this XP guest, and "tunnel" through it
> from my linux host? I would *really* like to be able to access
> my corporate network from linux.
> FreeSwan doesn't (yet) support SecureID connections.
> Thanks for any suggestions, apologies for cross-posting but this
> is relevant to both groups.
--
"We are anthill men upon an anthill world." --Ray Bradbury
/\___/\
/ /\ /\ \ Ant @ The Ant Farm: http://antfarm.ma.cx
| |o o| | Ant's Quality Foraged Links: http://aqfl.net
\ _ / Please remove ANT if replying by e-mail.
( )

Jim Chisholm wrote:
> Hi Folks
> I'm sure this can be done but I don't know where to start..
> Here's the picture.. I need to be able to access my internal
> corporate network through a Contivity securid VPN client,
> which I can do no problem with WinXP (and VMWare).
> There is no equivalent Contivity VPN client for linux that
> works with the 2.6.x kernels (well there is *supposed* to be one but it
> locks the machine completely.)
> So, is there any way that I can fire up my VMware machine, establish
> my VPN connection from this XP guest, and "tunnel" through it
> from my linux host? I would *really* like to be able to access
> my corporate network from linux.
> FreeSwan doesn't (yet) support SecureID connections.
> Thanks for any suggestions, apologies for cross-posting but this
> is relevant to both groups.
>

Probably not.

The commercial VPN clients usually kill all other
network traffic in the host for the duration of
the VPN connection (your XP in this case).

The reason is to prevent sneak paths around
the corporate firewall to/from the Internet
via your other network connection.

In this case, it means that the connection between
the XP and the VmWare virtual host will be broken.

--

Tauno Voipio
tauno voipio (at) iki fi

Jim Chisholm wrote:
> Hi Folks
> I'm sure this can be done but I don't know where to start..
> Here's the picture.. I need to be able to access my internal
> corporate network through a Contivity securid VPN client,
> which I can do no problem with WinXP (and VMWare).
> There is no equivalent Contivity VPN client for linux that
> works with the 2.6.x kernels (well there is *supposed* to be one but it
> locks the machine completely.)
> So, is there any way that I can fire up my VMware machine, establish
> my VPN connection from this XP guest, and "tunnel" through it
> from my linux host? I would *really* like to be able to access
> my corporate network from linux.

I have done that under NT4 using Proxy+ (or a similar application, it's
been a while). I _think_ I've done this using Connection Sharing under
W2K as well, so it should work with XP.

Usual caveats apply, YMMV, past performance is no guarantee of future
returns, etc, etc.


> FreeSwan doesn't (yet) support SecureID connections.
> Thanks for any suggestions, apologies for cross-posting but this
> is relevant to both groups.
>
> Cheers
> Jim
>