Networks

Ask something
Question Locked

Connect 2 offices with VPN

0 helpful
4 replies

by edobrzenski

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
I would like some advice on how to set this up. I have 2 offices I want to connect with a VPN connection. The main office has a SBS 2003 server that is the domain controller server. It is setup with 2 nic's and running ISA server, exchange and a static ip address and all the computers internally have private addresses assigned. I want to set this up as a VPN server to connect to location 2 that will have a windows 2003 server and a static ip address. I want to have this server behind a Linksys router with VPN support and setup the vpn through this router and allow all the users to access resources at location 1 including acess to the exchange server and public folders. I want this server to be setup in its own domain incase the link goes down the clients don't freak out and lock up. I also want the users to replicate from location 1 to the server at location 2. The clients will obtain ip addresses from the linksys router. Will this setup work or is there a better way. Thanks in advance.

4 replies

by blairh

There are many ways to setup what you are trying to do. First question is concerning your Linksys router, is this a vpn router that is capable of passing vpn traffic such as IPSec from a desktop client initiated connection or a router capiable of sustaining a static vpn tunnel to another site? I think with what you are trying to do the best bet would be to get two vpn appliances such as sonicwall TZ-150 or Cisco Pix 501 and establish the static vpn. Then your traffic can flow back and forth, one word of advice is to make sure that the networks do not overlap each other meaning if one is a 192.158.1.x then the other should be anything other an .1.x . Also with your use of a small business server it will be impossible to establish any kind of domain trust between that domain and the domain managed by the standard 2003 server. Multiple ways to get around that, including matching user accounts, making people in location B use webmail etc....

by edobrzenski

If I setup one of these at each end can I still have my ISA server on sbs 2003 act as the router at location 1?

Linksys BEFVP41

Can I put this in between my dsl modem and the SBS ISA Firewall and still have the ISA do the routing. I need it to do the routing because of several things on the back end here.

At location 2 I will have the linksys be the router in front of the network. Can I login from location 2 to the sbs domain across the vpn?

by cg it

ISA is a proxy/NAT/firewall and you don't need a router in front of it to do anything. If anything having a router in front of ISA just complicates everything.

At the second location, as long as you pass through pptp or L2TP IPSec,[which ever one your going to use] users should be able to VPN into the SBS box provided that you have setup ISA server properly to allow remote access.

This discussion is closed to new replies.