This is my first office-to-office VPN over the Internet setup. I have basic VPN training but… “In theory, there is no difference between Theory and Practice. In practice, there is!” I’ll give points to all responses that offer explainations and/or practical advice about my planned setup.
It is simple. A branch office will intiate a VPN tunnel between the office routers. The branch systems will use an ICA client to login on a NT 4.0 Terminal Server/Metaframe Server domain.
Network:
The routers hold the tunnel. The offices are on different networks. Main is 10.1.1.X and the Branch is 192.168.1.X. Also, the Main has a static IP and the Branch is dynamic. Internet is thru cable modems with 3Mbps download/500KMbps upload.
1. Should I change the Branch network to match the Main or do the routers handle that? Can I just point the ICA client at the Metaframe server on the different network and the client will handle the difference? If both are possible, what differences do I look for when deciding? Do I just add static routes in the router tables?Actually, I don’t really understand this. Can someone walk thru how the client points thru the tunnel and logs in? I’ve looked thru Micosoft website and Googled but it is not clear. Info for NT domain login thru VPN is not extensive or precise.
2. I worked in a shop that had VPNs that were setup so the branch was required to initiate the connection because they had a dynamic IP. It would drop and I would have them restart their router. With these new routers, I haven’t found a setting to specify who initiates but the routers do support DDNS. Is DDNS the way current routers deal with dynamic IP or am I missing something with the initiation setting?