VPN Question....

  • Thread starter Thread starter Ken Lee
  • Start date Start date
K

Ken Lee

Greetings, all

I have read Microsoft Knowledge of how to set up a VPN connection. It looks like there is unnecessary to buy any extra hardware to get it working. However, when i contact my supplier, they told me if i wanted VPN connection, i needed to buy a VPN/Firewall Router... Please advise me which way i should go....

TKs!

Ken Lee
 
Which way you >can< go and which way you >should< go
are two different ways.

You can implement a fully software-based VPN with
what ships with Win2k. It does not require any additional
hardware. If your supplier told you that, they are mistaken.
Of course if they're a supplier, they have to supply something
I guess. You should be able to get a PPTP VPN turned up
in less than an hour with Win2K Server.

However, the performance and effective bandwidth will be very
poor relative to what you can achieve with a hardware-based
firewall, and it also is more difficult to manage a software-based
VPN.

As you can now purchase very inexpensive hardware VPN-capable
routers and firewalls (even some "home" and "SOHO" routers have IPSec
capabillity), I personally see no reason to use a software-based VPN,
except perhaps as a learning tool.

Steve Duff, MCSE
Ergodic Systems, Inc.
Greetings, all

I have read Microsoft Knowledge of how to set up a VPN connection. It looks like there is unnecessary to buy any extra hardware to get it working. However, when i contact my supplier, they told me if i wanted VPN connection, i needed to buy a VPN/Firewall Router... Please advise me which way i should go....

TKs!

Ken Lee
 
To add to all the useful info below, Win2K does not support IPSec NAT Traversal (Win 2003 does) and so if you plan to use NAT on your Win2K server, you will need a router that supports IPSec NAT Traversal to terminate the client IPSec tunnels, ie if you plan to use IPSec and NAT.

--
Thanks

- Reni
Which way you >can< go and which way you >should< go
are two different ways.

You can implement a fully software-based VPN with
what ships with Win2k. It does not require any additional
hardware. If your supplier told you that, they are mistaken.
Of course if they're a supplier, they have to supply something
I guess. You should be able to get a PPTP VPN turned up
in less than an hour with Win2K Server.

However, the performance and effective bandwidth will be very
poor relative to what you can achieve with a hardware-based
firewall, and it also is more difficult to manage a software-based
VPN.

As you can now purchase very inexpensive hardware VPN-capable
routers and firewalls (even some "home" and "SOHO" routers have IPSec
capabillity), I personally see no reason to use a software-based VPN,
except perhaps as a learning tool.

Steve Duff, MCSE
Ergodic Systems, Inc.
Greetings, all

I have read Microsoft Knowledge of how to set up a VPN connection. It looks like there is unnecessary to buy any extra hardware to get it working. However, when i contact my supplier, they told me if i wanted VPN connection, i needed to buy a VPN/Firewall Router... Please advise me which way i should go....

TKs!

Ken Lee
 
Reni:

I believe there was a post-SP3 windowsupdate that
adds NAT-T/UDP tunneling.

I'm not that sure of my facts here because I haven't
looked in to it much; perhaps you can enlighten me?

Steve Duff, MCSE
Ergodic Systems, Inc.
To add to all the useful info below, Win2K does not support IPSec NAT Traversal (Win 2003 does) and so if you plan to use NAT on your Win2K server, you will need a router that supports IPSec NAT Traversal to terminate the client IPSec tunnels, ie if you plan to use IPSec and NAT.

--
Thanks

- Reni
Which way you >can< go and which way you >should< go
are two different ways.

You can implement a fully software-based VPN with
what ships with Win2k. It does not require any additional
hardware. If your supplier told you that, they are mistaken.
Of course if they're a supplier, they have to supply something
I guess. You should be able to get a PPTP VPN turned up
in less than an hour with Win2K Server.

However, the performance and effective bandwidth will be very
poor relative to what you can achieve with a hardware-based
firewall, and it also is more difficult to manage a software-based
VPN.

As you can now purchase very inexpensive hardware VPN-capable
routers and firewalls (even some "home" and "SOHO" routers have IPSec
capabillity), I personally see no reason to use a software-based VPN,
except perhaps as a learning tool.

Steve Duff, MCSE
Ergodic Systems, Inc.
Greetings, all

I have read Microsoft Knowledge of how to set up a VPN connection. It looks like there is unnecessary to buy any extra hardware to get it working. However, when i contact my supplier, they told me if i wanted VPN connection, i needed to buy a VPN/Firewall Router... Please advise me which way i should go....

TKs!

Ken Lee
 
Back
Top