Networking Forums

Networking Forums > Computer Networking > Windows Networking > Branch Office/VPN Question

Reply
Thread Tools Display Modes

Branch Office/VPN Question

 
 
melickas@yahoo.com
Guest
Posts: n/a

 
      06-29-2006, 07:53 PM
We are looking for the best recommendation for the following situation
for sharing files on our server across a WAN. In Building A (call it
BA), our server is Windows 2003 Standard Edition and it has (1) network

card with (3) XP client computers and is a DC. We access the Internet
via a cable connection. We do not currently have a Static IP address
from our ISP. We have text documents & a database file for a program we

use on the clients located on this server. We want to access these
documents and database file from Building B (call it BB) which is (2-3)

blocks away from BA and has (3) XP workstations, WITHOUT a server,
currently sharing a cable Internet connection The workstations in BB
run the same programs (software is installed locally) as those in BA,
but need access to the database file and documents in BA.

We are familiar with setting up VPNs using SBS2000 and remotely
accessing workstations on a network using RDC. However, there may be
occasion where users in BA will be using their computers and we would
not want to permit a RDC to those PCs just in order run the approriate
software or open shared documents.

What hardware,setup would be required in BA and BB to configure this
remote/WAN access?
What are the latest,greatest technology options to accomplish this?

We are assuming a Static IP in BA, adding another NIC (to isolate
internal network from external) and new router with VPN support are
necessary?

Would it be necessary for both sites to have a Static IP?
Any recommendations on reading about Branch office setups?

When a Site-to-site VPN is setup, to the branch office users just login
in to the domain and use resources as if they were at the Main Branch??

Thanks!

 
Reply With Quote
 
 
 
 
Neteng
Guest
Posts: n/a

 
      06-29-2006, 09:07 PM
Why not setup your firewall in AB for VPN and have the few users in BB vpn
in and do their work? Every time your IP changes, you'll have to let them
know what it changed to (or setup a dynamic DNS record (see no-imp.com)). If
you really want a site-to-site VPN any decent box can do it (I suggest Cisco
PIX/Router or Netscreen HSC). The dynamic IP's will bite you though. Your
tunnel will drop (but rebuild if configured correctly) every time either one
of the IP's change. That will drive most users crazy (lost data and waiting
for tunnel to build again).

<(E-Mail Removed)> wrote in message
news:(E-Mail Removed) ups.com...
> We are looking for the best recommendation for the following situation
> for sharing files on our server across a WAN. In Building A (call it
> BA), our server is Windows 2003 Standard Edition and it has (1) network
>
> card with (3) XP client computers and is a DC. We access the Internet
> via a cable connection. We do not currently have a Static IP address
> from our ISP. We have text documents & a database file for a program we
>
> use on the clients located on this server. We want to access these
> documents and database file from Building B (call it BB) which is (2-3)
>
> blocks away from BA and has (3) XP workstations, WITHOUT a server,
> currently sharing a cable Internet connection The workstations in BB
> run the same programs (software is installed locally) as those in BA,
> but need access to the database file and documents in BA.
>
> We are familiar with setting up VPNs using SBS2000 and remotely
> accessing workstations on a network using RDC. However, there may be
> occasion where users in BA will be using their computers and we would
> not want to permit a RDC to those PCs just in order run the approriate
> software or open shared documents.
>
> What hardware,setup would be required in BA and BB to configure this
> remote/WAN access?
> What are the latest,greatest technology options to accomplish this?
>
> We are assuming a Static IP in BA, adding another NIC (to isolate
> internal network from external) and new router with VPN support are
> necessary?
>
> Would it be necessary for both sites to have a Static IP?
> Any recommendations on reading about Branch office setups?
>
> When a Site-to-site VPN is setup, to the branch office users just login
> in to the domain and use resources as if they were at the Main Branch??
>
> Thanks!
>



 
Reply With Quote
 
Phillip Windell
Guest
Posts: n/a

 
      06-29-2006, 09:14 PM
1. You want static IP#s at both ends. A simple phone call to the ISP
usually fixes that.

2. You need Internet Sharing Devices to replace you current ones that are
capable of (on their own) establishing a Site-to-Site VPN. This is a
specific type of VPN,...it is *not* the same thing as the human initiated
dial-up based Remote Access VPN.

3. You need a Syncronous Internet Connection (same speed both directions).
Cable internet accounts do not provide this. This can be done with SDSL (not
ADSL), T1 lines, and Frame Relay lines (a T1 refers to speed and can be a
frame relay, DSL, or other).

The reason for #3 is that VPN will always sync up to the slower "upload
speed" of the line which in some cases can be as low as 128mbps but is most
commonly 256 or 512 mbps.

Once everything is done properly it will act as one big happy LAN without
the machines on the LAN even being aware of it. However VPN is alway a poor
performer (don't buy into the "marketing hype"). It will always be painfully
slow over the WAN link with file sharing. Copying files over any kind of
link is the most intensive bandwidth hog that you can ever do. Audio & Video
are not the worst,...that is just a "stereotype" that the average person has
bought into. File copying is the worst.

--
Phillip Windell [MCP, MVP, CCNA]
www.wandtv.com




<(E-Mail Removed)> wrote in message
news:(E-Mail Removed) ups.com...
> We are looking for the best recommendation for the following situation
> for sharing files on our server across a WAN. In Building A (call it
> BA), our server is Windows 2003 Standard Edition and it has (1) network
>
> card with (3) XP client computers and is a DC. We access the Internet
> via a cable connection. We do not currently have a Static IP address
> from our ISP. We have text documents & a database file for a program we
>
> use on the clients located on this server. We want to access these
> documents and database file from Building B (call it BB) which is (2-3)
>
> blocks away from BA and has (3) XP workstations, WITHOUT a server,
> currently sharing a cable Internet connection The workstations in BB
> run the same programs (software is installed locally) as those in BA,
> but need access to the database file and documents in BA.
>
> We are familiar with setting up VPNs using SBS2000 and remotely
> accessing workstations on a network using RDC. However, there may be
> occasion where users in BA will be using their computers and we would
> not want to permit a RDC to those PCs just in order run the approriate
> software or open shared documents.
>
> What hardware,setup would be required in BA and BB to configure this
> remote/WAN access?
> What are the latest,greatest technology options to accomplish this?
>
> We are assuming a Static IP in BA, adding another NIC (to isolate
> internal network from external) and new router with VPN support are
> necessary?
>
> Would it be necessary for both sites to have a Static IP?
> Any recommendations on reading about Branch office setups?
>
> When a Site-to-site VPN is setup, to the branch office users just login
> in to the domain and use resources as if they were at the Main Branch??
>
> Thanks!
>



 
Reply With Quote
 
melickas@yahoo.com
Guest
Posts: n/a

 
      06-29-2006, 09:16 PM
So, should we setup a Static IP with our ISP for the main branch to
avoid the problems related to dynamic?
I assume it would not be necessary, but optional for more security?, to
have a Static IP at the Branch Office???
Note there is no server at the Branch office.

Neteng wrote:
> Why not setup your firewall in AB for VPN and have the few users in BB vpn
> in and do their work? Every time your IP changes, you'll have to let them
> know what it changed to (or setup a dynamic DNS record (see no-imp.com)). If
> you really want a site-to-site VPN any decent box can do it (I suggest Cisco
> PIX/Router or Netscreen HSC). The dynamic IP's will bite you though. Your
> tunnel will drop (but rebuild if configured correctly) every time either one
> of the IP's change. That will drive most users crazy (lost data and waiting
> for tunnel to build again).
>
> <(E-Mail Removed)> wrote in message
> news:(E-Mail Removed) ups.com...
> > We are looking for the best recommendation for the following situation
> > for sharing files on our server across a WAN. In Building A (call it
> > BA), our server is Windows 2003 Standard Edition and it has (1) network
> >
> > card with (3) XP client computers and is a DC. We access the Internet
> > via a cable connection. We do not currently have a Static IP address
> > from our ISP. We have text documents & a database file for a program we
> >
> > use on the clients located on this server. We want to access these
> > documents and database file from Building B (call it BB) which is (2-3)
> >
> > blocks away from BA and has (3) XP workstations, WITHOUT a server,
> > currently sharing a cable Internet connection The workstations in BB
> > run the same programs (software is installed locally) as those in BA,
> > but need access to the database file and documents in BA.
> >
> > We are familiar with setting up VPNs using SBS2000 and remotely
> > accessing workstations on a network using RDC. However, there may be
> > occasion where users in BA will be using their computers and we would
> > not want to permit a RDC to those PCs just in order run the approriate
> > software or open shared documents.
> >
> > What hardware,setup would be required in BA and BB to configure this
> > remote/WAN access?
> > What are the latest,greatest technology options to accomplish this?
> >
> > We are assuming a Static IP in BA, adding another NIC (to isolate
> > internal network from external) and new router with VPN support are
> > necessary?
> >
> > Would it be necessary for both sites to have a Static IP?
> > Any recommendations on reading about Branch office setups?
> >
> > When a Site-to-site VPN is setup, to the branch office users just login
> > in to the domain and use resources as if they were at the Main Branch??
> >
> > Thanks!
> >


 
Reply With Quote
 
Phillip Windell
Guest
Posts: n/a

 
      07-05-2006, 10:41 PM
<(E-Mail Removed)> wrote in message
news:(E-Mail Removed) ups.com...
> So, should we setup a Static IP with our ISP for the main branch to
> avoid the problems related to dynamic?


Static "everywhere" on the outside,...if using Site-to-Site VPN.

> I assume it would not be necessary, but optional for more security?, to
> have a Static IP at the Branch Office???


It is more of a matter of dependability more so than any security issue.
Depends on how much you want to play "babysitter" with the thing.

--
Phillip Windell [MCP, MVP, CCNA]
www.wandtv.com


 
Reply With Quote
 
 
 
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Branch Office Networking Robert Windows Networking 11 06-11-2008 11:52 PM
Site-to-Site VPN client routing question - clients at branch office not able to access network at HQ Hii Sing Chung Windows Networking 13 10-19-2007 10:47 AM
AD and a Branch office ecavedude Windows Networking 2 10-03-2007 01:43 PM
Branch Office Issues it-al Windows Networking 7 07-12-2007 06:14 AM
setup branch office question? HB Windows Networking 1 02-01-2006 02:13 PM



1 2 3 4 5 6 7 8 9 10 11