Hi, i am trying to set an environment...but i am stuck with days. I hope you guys have more experience in setting up lab environments.

I have two computers:

windows server 2003 with static IP(lets say 1.1.1.1), and a virtual machine inside containing linux with with a static IP (192.168.1.100). I can not change any of them, they were given to me.

I have another machine windows XP and a virtual machine containing linux operating system which I can play with.

My goal is:
1. Server side:
I want the server to be available only through VPN. No client should be able to approach the windows server, knowledge of its ports, services etc.. unless it connects through VPN.
When a client connects to the server, it should have access to the virtual machine inside, as well as all the services provided.

This sounds to me like a firewall which exposes only VPN connection. After the VPN connection, it allows seeing the windows server and the virtual machine server...

2. client side.
the client does not see anything untill connects with VPN. After connection, the linux on the virtual machine can access the windows server 2003 (see ports, servicess, addresses etc), and the linux server.


is it possible to set such a lab? If the answer is yes, can you provide me with some advices/links?

Thanks in advance

So as far as the vmware client (pc, not server) configuration goes, if you set the system to use NAT, all of the linux communication will be sourced from the physical IP of the host machine, this will look like legitamte traffic to the server (both the windows side and the linux vm side).

For the firewall/VPN config, you'll need to place the system behind a private vpn (either via software or hardware). Once the vpn session is established, the client will need routes to the linux host on the server (192.168.1.x/24).

As far as what VPN to use, you can place a small ASA in between the server and the rest of the network or something else like that. It really depends on how the rest of your network is built.

Thanks!

Lab Challenges?

Moved to Tech Discussions.

_________________
Reasonably un-nerdy blog:
americanwerewolfinbelgrade.wordpress.com/