VPN Help Plzz

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

Hello Ladies and Gents,

It’s been a while since I have posted a question on these here boards. ïŠ

I would like to pick you brains on a VPN access query.

I look after a small office that runs a 2K3 Small business server box and 8
XP workstations. The business is about to open another small office and 2 of
the existing users are moving there. They will be leaving there PC’s behind
and getting 2 new ones.

What is the best way to enable the 2 users in the new office to get access
to all network resource back on the old office.??

I was considering using remote desktop on to their old PC’s. But there must
be something better.??

Is Cisco’s VPN client the way to do it?, Does it matter that they are using
a Non-Cisco router/firewall in the old office? In fact it is a D-link DSL
–G604T.

Any help, assistance and guidance is very much appreciated.

Yours EN4
 
Is Cisco's VPN client the way to do it?, Does it matter that they are using
a Non-Cisco router/firewall in the old office? In fact it is a D-link DSL
-G604T.

A Site-to-Site VPN (different from Remote Access VPN) is the way to go. It
doesn't matter who's product you use for it,...however Cisco tends to be
proprietary and may insist it be a Cisco Product on both ends.

Once the VPN works then you deal with the connectivity just as you would if
they were simply on a different subnet within the same building or same room
(the link is just slower).

--
Phillip Windell [MCP, MVP, CCNA]
www.wandtv.com
-----------------------------------------------------
Understanding the ISA 2004 Access Rule Processing
http://www.isaserver.org/articles/ISA2004_AccessRules.html

Microsoft Internet Security & Acceleration Server: Guidance
http://www.microsoft.com/isaserver/techinfo/Guidance/2004.asp
http://www.microsoft.com/isaserver/techinfo/Guidance/2000.asp

Microsoft Internet Security & Acceleration Server: Partners
http://www.microsoft.com/isaserver/partners/default.asp
-----------------------------------------------------
 
Thanks for that Phil,

What VPN software would you advise on to do the job?

Thanks once again

ppls

Phillip Windell said:
Is Cisco's VPN client the way to do it?, Does it matter that they are using
a Non-Cisco router/firewall in the old office? In fact it is a D-link DSL
-G604T.

A Site-to-Site VPN (different from Remote Access VPN) is the way to go. It
doesn't matter who's product you use for it,...however Cisco tends to be
proprietary and may insist it be a Cisco Product on both ends.

Once the VPN works then you deal with the connectivity just as you would if
they were simply on a different subnet within the same building or same room
(the link is just slower).

--
Phillip Windell [MCP, MVP, CCNA]
www.wandtv.com
-----------------------------------------------------
Understanding the ISA 2004 Access Rule Processing
http://www.isaserver.org/articles/ISA2004_AccessRules.html

Microsoft Internet Security & Acceleration Server: Guidance
http://www.microsoft.com/isaserver/techinfo/Guidance/2004.asp
http://www.microsoft.com/isaserver/techinfo/Guidance/2000.asp

Microsoft Internet Security & Acceleration Server: Partners
http://www.microsoft.com/isaserver/partners/default.asp
 
I can't recommend anything,..I have only used RRAS on Windows Server. We do
have a Watchgaurd box here doing a Site-Site VPN but our Corp HQ maintains
it and I just stay away from it. So all of my own VPN is done with RRAS and
not any kind of special products.

--
Phillip Windell [MCP, MVP, CCNA]
www.wandtv.com
-----------------------------------------------------
Understanding the ISA 2004 Access Rule Processing
http://www.isaserver.org/articles/ISA2004_AccessRules.html

Microsoft Internet Security & Acceleration Server: Guidance
http://www.microsoft.com/isaserver/techinfo/Guidance/2004.asp
http://www.microsoft.com/isaserver/techinfo/Guidance/2000.asp

Microsoft Internet Security & Acceleration Server: Partners
http://www.microsoft.com/isaserver/partners/default.asp
-----------------------------------------------------




PeOpLeS said:
Thanks for that Phil,

What VPN software would you advise on to do the job?

Thanks once again

ppls

Phillip Windell said:
Is Cisco's VPN client the way to do it?, Does it matter that they are using
a Non-Cisco router/firewall in the old office? In fact it is a D-link DSL
-G604T.

A Site-to-Site VPN (different from Remote Access VPN) is the way to go. It
doesn't matter who's product you use for it,...however Cisco tends to be
proprietary and may insist it be a Cisco Product on both ends.

Once the VPN works then you deal with the connectivity just as you would if
they were simply on a different subnet within the same building or same room
(the link is just slower).

--
Phillip Windell [MCP, MVP, CCNA]
www.wandtv.com
-----------------------------------------------------
Understanding the ISA 2004 Access Rule Processing
http://www.isaserver.org/articles/ISA2004_AccessRules.html

Microsoft Internet Security & Acceleration Server: Guidance
http://www.microsoft.com/isaserver/techinfo/Guidance/2004.asp
http://www.microsoft.com/isaserver/techinfo/Guidance/2000.asp

Microsoft Internet Security & Acceleration Server: Partners
http://www.microsoft.com/isaserver/partners/default.asp
 
Ok cheers Phil.

trying to download and try the free Cisco VPN Client, but the dam site what
let me have it :(

Has anyone got a copy sitting on their PC?

Phillip Windell said:
I can't recommend anything,..I have only used RRAS on Windows Server. We do
have a Watchgaurd box here doing a Site-Site VPN but our Corp HQ maintains
it and I just stay away from it. So all of my own VPN is done with RRAS and
not any kind of special products.

--
Phillip Windell [MCP, MVP, CCNA]
www.wandtv.com
-----------------------------------------------------
Understanding the ISA 2004 Access Rule Processing
http://www.isaserver.org/articles/ISA2004_AccessRules.html

Microsoft Internet Security & Acceleration Server: Guidance
http://www.microsoft.com/isaserver/techinfo/Guidance/2004.asp
http://www.microsoft.com/isaserver/techinfo/Guidance/2000.asp

Microsoft Internet Security & Acceleration Server: Partners
http://www.microsoft.com/isaserver/partners/default.asp
-----------------------------------------------------




PeOpLeS said:
Thanks for that Phil,

What VPN software would you advise on to do the job?

Thanks once again

ppls

Phillip Windell said:
Is Cisco's VPN client the way to do it?, Does it matter that they are
using
a Non-Cisco router/firewall in the old office? In fact it is a D-link DSL
-G604T.

A Site-to-Site VPN (different from Remote Access VPN) is the way to go. It
doesn't matter who's product you use for it,...however Cisco tends to be
proprietary and may insist it be a Cisco Product on both ends.

Once the VPN works then you deal with the connectivity just as you would if
they were simply on a different subnet within the same building or same room
(the link is just slower).

--
Phillip Windell [MCP, MVP, CCNA]
www.wandtv.com
-----------------------------------------------------
Understanding the ISA 2004 Access Rule Processing
http://www.isaserver.org/articles/ISA2004_AccessRules.html

Microsoft Internet Security & Acceleration Server: Guidance
http://www.microsoft.com/isaserver/techinfo/Guidance/2004.asp
http://www.microsoft.com/isaserver/techinfo/Guidance/2000.asp

Microsoft Internet Security & Acceleration Server: Partners
http://www.microsoft.com/isaserver/partners/default.asp
 
You don't use the Cisco Client for a site-to-site VPN,...that is for Remote
Access VPN. Don't confuse the two,..they are not the same thing.

A Site-to-Site VPN is done between two VPN Devices,...there are no
"clients".

--
Phillip Windell [MCP, MVP, CCNA]
www.wandtv.com
-----------------------------------------------------
Understanding the ISA 2004 Access Rule Processing
http://www.isaserver.org/articles/ISA2004_AccessRules.html

Microsoft Internet Security & Acceleration Server: Guidance
http://www.microsoft.com/isaserver/techinfo/Guidance/2004.asp
http://www.microsoft.com/isaserver/techinfo/Guidance/2000.asp

Microsoft Internet Security & Acceleration Server: Partners
http://www.microsoft.com/isaserver/partners/default.asp
-----------------------------------------------------




PeOpLeS said:
Ok cheers Phil.

trying to download and try the free Cisco VPN Client, but the dam site what
let me have it :(

Has anyone got a copy sitting on their PC?

Phillip Windell said:
I can't recommend anything,..I have only used RRAS on Windows Server. We do
have a Watchgaurd box here doing a Site-Site VPN but our Corp HQ maintains
it and I just stay away from it. So all of my own VPN is done with RRAS and
not any kind of special products.

--
Phillip Windell [MCP, MVP, CCNA]
www.wandtv.com
-----------------------------------------------------
Understanding the ISA 2004 Access Rule Processing
http://www.isaserver.org/articles/ISA2004_AccessRules.html

Microsoft Internet Security & Acceleration Server: Guidance
http://www.microsoft.com/isaserver/techinfo/Guidance/2004.asp
http://www.microsoft.com/isaserver/techinfo/Guidance/2000.asp

Microsoft Internet Security & Acceleration Server: Partners
http://www.microsoft.com/isaserver/partners/default.asp
-----------------------------------------------------




PeOpLeS said:
Thanks for that Phil,

What VPN software would you advise on to do the job?

Thanks once again

ppls

:


Is Cisco's VPN client the way to do it?, Does it matter that they are
using
a Non-Cisco router/firewall in the old office? In fact it is a
D-link
DSL
-G604T.

A Site-to-Site VPN (different from Remote Access VPN) is the way to
go.
It
doesn't matter who's product you use for it,...however Cisco tends to be
proprietary and may insist it be a Cisco Product on both ends.

Once the VPN works then you deal with the connectivity just as you
would
if
they were simply on a different subnet within the same building or
same
room
(the link is just slower).

--
Phillip Windell [MCP, MVP, CCNA]
www.wandtv.com
-----------------------------------------------------
Understanding the ISA 2004 Access Rule Processing
http://www.isaserver.org/articles/ISA2004_AccessRules.html

Microsoft Internet Security & Acceleration Server: Guidance
http://www.microsoft.com/isaserver/techinfo/Guidance/2004.asp
http://www.microsoft.com/isaserver/techinfo/Guidance/2000.asp

Microsoft Internet Security & Acceleration Server: Partners
http://www.microsoft.com/isaserver/partners/default.asp
 
You got me stumped now.. Could you explain the difference between the two plz
and where does windows remote desktop sit between the two??

Cheers Phil

Phillip Windell said:
You don't use the Cisco Client for a site-to-site VPN,...that is for Remote
Access VPN. Don't confuse the two,..they are not the same thing.

A Site-to-Site VPN is done between two VPN Devices,...there are no
"clients".

--
Phillip Windell [MCP, MVP, CCNA]
www.wandtv.com
-----------------------------------------------------
Understanding the ISA 2004 Access Rule Processing
http://www.isaserver.org/articles/ISA2004_AccessRules.html

Microsoft Internet Security & Acceleration Server: Guidance
http://www.microsoft.com/isaserver/techinfo/Guidance/2004.asp
http://www.microsoft.com/isaserver/techinfo/Guidance/2000.asp

Microsoft Internet Security & Acceleration Server: Partners
http://www.microsoft.com/isaserver/partners/default.asp
-----------------------------------------------------




PeOpLeS said:
Ok cheers Phil.

trying to download and try the free Cisco VPN Client, but the dam site what
let me have it :(

Has anyone got a copy sitting on their PC?

Phillip Windell said:
I can't recommend anything,..I have only used RRAS on Windows Server. We do
have a Watchgaurd box here doing a Site-Site VPN but our Corp HQ maintains
it and I just stay away from it. So all of my own VPN is done with RRAS and
not any kind of special products.

--
Phillip Windell [MCP, MVP, CCNA]
www.wandtv.com
-----------------------------------------------------
Understanding the ISA 2004 Access Rule Processing
http://www.isaserver.org/articles/ISA2004_AccessRules.html

Microsoft Internet Security & Acceleration Server: Guidance
http://www.microsoft.com/isaserver/techinfo/Guidance/2004.asp
http://www.microsoft.com/isaserver/techinfo/Guidance/2000.asp

Microsoft Internet Security & Acceleration Server: Partners
http://www.microsoft.com/isaserver/partners/default.asp
-----------------------------------------------------




Thanks for that Phil,

What VPN software would you advise on to do the job?

Thanks once again

ppls

:


Is Cisco's VPN client the way to do it?, Does it matter that they are
using
a Non-Cisco router/firewall in the old office? In fact it is a D-link
DSL
-G604T.

A Site-to-Site VPN (different from Remote Access VPN) is the way to go.
It
doesn't matter who's product you use for it,...however Cisco tends to be
proprietary and may insist it be a Cisco Product on both ends.

Once the VPN works then you deal with the connectivity just as you would
if
they were simply on a different subnet within the same building or same
room
(the link is just slower).

--
Phillip Windell [MCP, MVP, CCNA]
www.wandtv.com
-----------------------------------------------------
Understanding the ISA 2004 Access Rule Processing
http://www.isaserver.org/articles/ISA2004_AccessRules.html

Microsoft Internet Security & Acceleration Server: Guidance
http://www.microsoft.com/isaserver/techinfo/Guidance/2004.asp
http://www.microsoft.com/isaserver/techinfo/Guidance/2000.asp

Microsoft Internet Security & Acceleration Server: Partners
http://www.microsoft.com/isaserver/partners/default.asp
 
PeOpLeS said:
You got me stumped now.. Could you explain the difference between the two plz
and where does windows remote desktop sit between the two??

Remote Desktop has absolutely nothing to do with VPN.

Remote Access VPN connects a User to a Network. It works on the same idea as
the old modem dialup connections.

Site-to-Site VPN connects to Networks with an "always on" WAN link using a
VPN Routing Server at each end of the Link. It more closely compares to a
private WAN link like a Private Non-Internet T1 line.

[Site-to-Site VPN]
Virtual Private Networking with Windows Server 2003: Deploying Site-to-Site
VPNs
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/networking/vpndpls2.mspx

[Remote Access VPN]
Microsoft Windows Server 2003 Remote Access/VPN Server Role
http://www.microsoft.com/technet/pr...elp/00c498a8-95e7-4780-942e-c4594b01f615.mspx

--
Phillip Windell [MCP, MVP, CCNA]
www.wandtv.com
-----------------------------------------------------
Understanding the ISA 2004 Access Rule Processing
http://www.isaserver.org/articles/ISA2004_AccessRules.html

Microsoft Internet Security & Acceleration Server: Guidance
http://www.microsoft.com/isaserver/techinfo/Guidance/2004.asp
http://www.microsoft.com/isaserver/techinfo/Guidance/2000.asp

Microsoft Internet Security & Acceleration Server: Partners
http://www.microsoft.com/isaserver/partners/default.asp
-----------------------------------------------------
 
Great links Phil, thanx. Only just started reading them and unstanding the
concepts better already.

Thank You .

ppls

PeOpLeS said:
Thanks for that Phil,

What VPN software would you advise on to do the job?

Thanks once again

ppls

Phillip Windell said:
Is Cisco's VPN client the way to do it?, Does it matter that they are using
a Non-Cisco router/firewall in the old office? In fact it is a D-link DSL
-G604T.

A Site-to-Site VPN (different from Remote Access VPN) is the way to go. It
doesn't matter who's product you use for it,...however Cisco tends to be
proprietary and may insist it be a Cisco Product on both ends.

Once the VPN works then you deal with the connectivity just as you would if
they were simply on a different subnet within the same building or same room
(the link is just slower).

--
Phillip Windell [MCP, MVP, CCNA]
www.wandtv.com
-----------------------------------------------------
Understanding the ISA 2004 Access Rule Processing
http://www.isaserver.org/articles/ISA2004_AccessRules.html

Microsoft Internet Security & Acceleration Server: Guidance
http://www.microsoft.com/isaserver/techinfo/Guidance/2004.asp
http://www.microsoft.com/isaserver/techinfo/Guidance/2000.asp

Microsoft Internet Security & Acceleration Server: Partners
http://www.microsoft.com/isaserver/partners/default.asp
 
1. you can do router to router VPN if your routers support it.

2. You can setup windows site to site VPN

Check these pages for more details,

vpn solutions VPN Solutions. 1. Peer to Peer VPN 2. Client to Server VPN 3. Site to Site VPN 4. IPSec VPN 5. Exporting VPN Client Settings ...
www.chicagotech.net/vpnsolutions.htm

Microsoft site to sie vpn
Step-by-Step Guide for Setting Up a PPTP-based Site-to-Site VPN Connection using
2003, Step-by-Step Guide for Setting Up a PPTP-based Site-to-Site VPN ...
www.howtonetworking.com/articles/mssitetositevpn.htm



Bob Lin, MS-MVP, MCSE & CNE
How to Setup Windows, Network, VPN & Remote Access on http://www.HowToNetworking.com
Networking, Internet, Routing, VPN Troubleshooting on http://www.ChicagoTech.net
This posting is provided "AS IS" with no warranties.
Don't send e-mail or reply to me except you need consulting services. Posting on MS newsgroup will benefit all readers and you may get more help.
Hello Ladies and Gents,

It’s been a while since I have posted a question on these here boards. ïŠ

I would like to pick you brains on a VPN access query.

I look after a small office that runs a 2K3 Small business server box and 8
XP workstations. The business is about to open another small office and 2 of
the existing users are moving there. They will be leaving there PC’s behind
and getting 2 new ones.

What is the best way to enable the 2 users in the new office to get access
to all network resource back on the old office.??

I was considering using remote desktop on to their old PC’s. But there must
be something better.??

Is Cisco’s VPN client the way to do it?, Does it matter that they are using
a Non-Cisco router/firewall in the old office? In fact it is a D-link DSL
–G604T.

Any help, assistance and guidance is very much appreciated.

Yours EN4
 
Back
Top