• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 503
  • Last Modified:

China: Internet Usage

Firewall: Watchguard x55e and x10e

Hi,

I believe I have heard that using Internet in China restricts certain web sites etc. However, would a mobile user have any issues with VPN'ing into a network in Canada from China?

That is, the user would like to be able to go to any internet cafe and use his/her own laptop to VPN from China to Canada to perform administrator tasks, if needed.

BTW, I believe I will also need a european converter for my laptop AC power adapter and Blackberry.

Thanks in advance.
0
TechInNeedmm
Asked:
TechInNeedmm
1 Solution
 
dpk_walCommented:
As long as the traffic flows over the VPN tunnel then there would be no problem; the way VPN can be implemented is:
1. zero-route tunnel or default route tunnel
2. split tunnel

In split tunnel let's say the subnet behind Watchguard is 192.168.1.0/24; and the user is logging in from internet cafe, only the traffic from his laptop destined for 192.168.1.0/24 would flow over the VPN tunnel rest all traffic would continue to go to the internet through the cafe network.

In zero-route or default route tunnel, all the traffic would first come to the WG device and then from there on to the internet. This way there would no restriction but the user would experience a lot of latency as the traffic would be encrypted and on internet for long.

On WG all you need to do is check the box:
All traffic uses tunnel (0.0.0.0/0 IP subnet) under Firebox Users->Username->MUVPN tab.

Please let know if you need more details.

thank you.
0
 
TechInNeedmmAuthor Commented:
This worked np.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Free Tool: ZipGrep

ZipGrep is a utility that can list and search zip (.war, .ear, .jar, etc) archives for text patterns, without the need to extract the archive's contents.

One of a set of tools we're offering as a way to say thank you for being a part of the community.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now