Windows Forum

Ask something
Discussion Locked

Implement vpn over dsl

0 helpful
9 replies

by dellservicepro

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
My employer has two locations. both offices are hooked via high speed dsl to the internet. one office has an nt 4.0 sp5 server. it has a dsl router that issues ip addresses. the other office is peer to peer windows 98 and windows 95. it also has a dsl router that issues ip addresses. what i want to do is to allow the people in the smaller office (10 users) to log into the server (domain) where the other 60 employees operate. there is a simple windows driven database/document processing softwarethat will be the primary application run across the wan.

9 replies

by jcmiller

easyest / cheepest way. (you can download from ms web site)
install RRAS on your nt server, setting up VPN support (channels).
install Dun 1.3 which supports VPN on you 95 clients.
there's lots of documentation on setting up RRAS in TechNet, and when you install Dun 1.3 it will install all the VPN protocol for you. you will need to go into dialup networking and configure you VPN session on your clients and that pretty strait forward.

by juandemarco

The answer that JCMiller gave is pretty much correct. However, I have found that a lot of the DSL companies will use Privet IP Addressing for the LAN. Some of the DSL routers will accept and work with VPN's so that you may use them to connect yourtwo offices. Ramp Networks has one that you can buy that will support this.

by garetjax

John -

You don't mention if you have firewalls in your offices. If not, one HW solution I have successfully implemented is the use of a SonicWall Pro in each office. The SonicWall Pro is a ICSA-certified rackmount firewall "applicance". It would allow you to firewall each office's network from the Internet as a whole. It also supports IPSEC and 3DES VPN tunnels FW to FW and User to FW.

To implement, put on SWPro in each office running NATed (private) addresses each in a different subnet. Use the SWPros as your DHCP servers (instead of DSL routers). Set up VPN tunnel between each office.

You are now ready to run your app remotely over the VPN.

Good luck. Contact me if you have any questions.

by jessed

All the answers given seem to be stable. The only caution I have to having a pipe-VPN (as opposed to individual VPN connections that are OS based to an NT PPTP server) is that if that is your only Internet connection, you'll have to reroute Internettraffic through a different router at the main site or purchase routers that support routing traffic based on zone (internet/intranet, to be microsoft based). Probably the most economical solution (with regard to up front investment) would be to have each machine establish it's own VPN connection to the PPTP server. However, over time, that solution will cost more because of increased administrative overhead for all those individual tunnels.
More confusion for the mix. Figure out exactly what you ant (is it only access to that app or is there exchange email in there, etc.), then determine what you're comfortable with by doing research and make the best choice for you. VPNs can be tricky, particularly with firewalls, if you're not well informed.
-jd

This discussion is closed to new replies.