Is this type of VPN secure enough??

[hummer3331973]

Hi-

Assuming 1.1.1.0 and 2.2.2.0 are all public routable IP adds. Is this type of IPSec VPN secure enough?

PC -------- router --- IPSec VPN (WWW) --- router ------- PC
1.1.1.2    1.1.1.1                       2.2.2.1     2.2.2.2

Some in here says it is not since the PCs are using public adds. Some are saying it's ok since ths PCs are connected via Cat6 cable to the routers.

Sorry for this silly question. We're a bunch of VB programmers here and not we'll verse with Cisco and VPN.

Thanks.

 

[North323]

you want your routers to NAT or mask your internal address to something else other than public IP. it would make it easier to get p0wned

 

[burtsbees]

I second that. The VPN will protect the endpoints only---but the routable IP addresses are trouble. You need NAT!

What are the edge devices? You should also have acl's in place...

/

tim@tim-laptop ~ $ sudo apt-get install windows
Reading package lists... Done
Building dependency tree
Reading state information... Done
E: Couldn't find package windows...Thank Goodness!