vpn + wireless

hi
this is how i understand vpn with wireless works:
wireless client(with VPN client)--AP--VPN gateway--LAN

so VPN doesn't protect transmission between wireless clients?
and all traffic between wireless client (through AP with which they are
associated) isn't encrypted?
VPN protects only the traffic from and to LAN? (or whatever behind VPN
gateway is)
so to protect traffic between wireless clients it has to be WEP/WPA or
something used in addition to VPN ?

thanks

unitis wrote:

> hi
> this is how i understand vpn with wireless works:
> wireless client(with VPN client)--AP--VPN gateway--LAN
>
> so VPN doesn't protect transmission between wireless clients?
> and all traffic between wireless client (through AP with which they are
> associated) isn't encrypted?
> VPN protects only the traffic from and to LAN? (or whatever behind VPN
> gateway is)
> so to protect traffic between wireless clients it has to be WEP/WPA or
> something used in addition to VPN ?
>
> thanks
>
>
>
>
>
>
A VPN is encrypted at the connection points. If your router establishes
a VPN to another network, traffic on the LAN is not protected. If
however, the VPN is established between your computer to another LAN,
the traffic from your computer to that LAN is protected.

"unitis" <(E-Mail Removed)> wrote in news:bvmrk6$5t8$(E-Mail Removed):

> hi
> this is how i understand vpn with wireless works:
> wireless client(with VPN client)--AP--VPN gateway--LAN
>
> so VPN doesn't protect transmission between wireless clients?
> and all traffic between wireless client (through AP with which they are
> associated) isn't encrypted?
> VPN protects only the traffic from and to LAN? (or whatever behind VPN
> gateway is)
> so to protect traffic between wireless clients it has to be WEP/WPA or
> something used in addition to VPN ?
>
> thanks
>
>
>
>
>
>

If the VPN conection is not between two vaild end points there is no VPN
protection. You can be VPN on your side, but if the other network or
machine at the end point is not VPN, there is no protection. You can be in
a VPN conection between machines on the LAN.

Duane

unitis <(E-Mail Removed)> wrote:
> hi
> this is how i understand vpn with wireless works:
> wireless client(with VPN client)--AP--VPN gateway--LAN

Right.

> so VPN doesn't protect transmission between wireless clients?

VPN encrypts everything leaving your computer on the virtual connection.
Once I connect to my company via VPN, I can't connect to other wireless
clients, or my desktop, or print to my LAN-connected printer.
Anything I do has to go into my company network, and is routed out from
there.

> and all traffic between wireless client (through AP with which they are
> associated) isn't encrypted?

I can't talk from one point to another on my network once VPN is turned on.

> VPN protects only the traffic from and to LAN? (or whatever behind VPN
> gateway is)

That's the only direction that any traffic is allowed, so you could still
say that all traffic is encrypted once VPN is turned on.

> so to protect traffic between wireless clients it has to be WEP/WPA or
> something used in addition to VPN ?

I would say instead of VPN.

An alternative might be a router that had a VPN endpoint built in, like
the SMC7004WFW, but then each computer attached would have to join the
same VPN. I'm not sure how that would set up.
http://www.smc.com/index.cfm?sec=Pro...rod=253&site=c

--
---
Clarence A Dold - Hidden Valley (Lake County) CA USA 38.8-122.5

unitis wrote:

> this is how i understand vpn with wireless works:
> wireless client(with VPN client)--AP--VPN gateway--LAN
>
> so VPN doesn't protect transmission between wireless clients?
> and all traffic between wireless client (through AP with which they are
> associated) isn't encrypted?
> VPN protects only the traffic from and to LAN? (or whatever behind VPN
> gateway is)
> so to protect traffic between wireless clients it has to be WEP/WPA or
> something used in addition to VPN ?
>

If all clients are using a VPN, then you can have everything encrypted.

--

Fundamentalism is fundamentally wrong.

To reply to this message, replace everything to the left of "@" with
james.knott.

Duane Arnold wrote:

> If the VPN conection is not between two vaild end points there is no VPN
> protection. You can be VPN on your side, but if the other network or
> machine at the end point is not VPN, there is no protection. You can be
> in a VPN conection between machines on the LAN.
>

If it's set up correctly, the VPN can be used for all traffic. That may be
direct to other users or relayed via the wired network.

--

Fundamentalism is fundamentally wrong.

To reply to this message, replace everything to the left of "@" with
james.knott.