Yes, I would look at upgrading the firewall/routers. Offloading the
site-to-site VPN function to Windows servers on the LAN is not a reasonable
option.
"Scott Micale" <(E-Mail Removed)> wrote in message
news:%23eG%23%(E-Mail Removed).. .
> Bill,
>
> So would you nix the Netgear routers? My problem is they are not handling
> the VPN's, but they work fine as a firewall.
>
> Thanks
>
> "Bill Grant" <not.available@online> wrote in message
> news:(E-Mail Removed)...
>> That sounds pretty silly to me. You would be making everything more
>> complicated than necessary. The obvious endpoint for the VPN is at the
>> perimiter of each site, which is the router/firewall.
>>
>> You would have to forward the encrypted traffic from the
>> router/firewall to the VPN server on the LAN. In the other direction you
>> would need to route the traffic for the other site to the VPN server on
>> the LAN so that it was encrypted and encapsulated before it reached the
>> gateway.
>>
>> "Scott Micale" <(E-Mail Removed)> wrote in message
>> news:C02326F9-D4D0-410C-BB28-(E-Mail Removed)...
>>>I need some help setting a VPN between 2 remote offices. Currently each
>>>site
>>> has a Netgear FVS318v1 and a FVS318v3 router that was doing the VPN
>>> between
>>> the 2 sites, but lately I am having problems with it. What my plan was
>>> to do
>>> was use my Windows 2003 servers at each location to do the VPN between
>>> sites.
>>> Is this possible to do with the Netgear routers still in place, but
>>> turning
>>> off the VPN's on them and letting windows do it for me? i also need all
>>> systems at each loaction to be able to access resources at the remote
>>> locations. I will continue to use the netgear routers as my firewall
>>> also.
>>> Both Windows servers also only have one NIC card in them and I plan to
>>> leave
>>> it that way if possible.
>>>
>>> Thanks
>>
|