site to site VPN's and DHCP question

Hello all

I am about to connect two remote sites to the central office via site to
site VPN. We are using Sonicwall Tz170's at the remote sites to acomplish
this. My question is regarding the proper use of DHCP. I would like all the
machines that are in the remote sites to pick up an ip address from a central
DHCP server that is at the central office.

The internal ip address scheme on the remote networks is as follows

Site1 is 192.168.2.x
Site2 is 192.168.3.x
Central office is 192.168.1.x

In oder for machines that are on there site to get the proper ip address
from the DHCP server, do i need to creat 3 scopes one for each site? and if
so how does a machine on site1 for example know that it must pick up an ip
address of 192.168.2.x ?

Thanks for any help

Yes, create 3 scopes. Your Sonicwalls may or may not support what your
trying to do. You'll be setting up ip helpers (Cisco term) on each remote
router. You'll have to see if they support it. It knows which subnet to get
by the default gateway of the clients local LAN (first hop).

"skip" <(E-Mail Removed)> wrote in message
news:5F43FC62-9C23-4EE7-8FD5-(E-Mail Removed)...
> Hello all
>
> I am about to connect two remote sites to the central office via site to
> site VPN. We are using Sonicwall Tz170's at the remote sites to acomplish
> this. My question is regarding the proper use of DHCP. I would like all
the
> machines that are in the remote sites to pick up an ip address from a
central
> DHCP server that is at the central office.
>
> The internal ip address scheme on the remote networks is as follows
>
> Site1 is 192.168.2.x
> Site2 is 192.168.3.x
> Central office is 192.168.1.x
>
> In oder for machines that are on there site to get the proper ip address
> from the DHCP server, do i need to creat 3 scopes one for each site? and
if
> so how does a machine on site1 for example know that it must pick up an ip
> address of 192.168.2.x ?
>
> Thanks for any help

VPN (and the Internet in general) is "unreliable".
Internet goes down,...or the VPN goes,...which is extremely common,...the
machines cannot get their address on startup and so the whole Site(s) is
crippled and non-functional.

Do you really want that?

Setup a DHCP at each site.
Sites will continue to function even if the outside connection goes down.
They won't be able to access remote resources until the connection is
restored but at least they can still function within their own "area".

--
Phillip Windell [MCP, MVP, CCNA]
www.wandtv.com
-----------------------------------------------------
Understanding the ISA 2004 Access Rule Processing
http://www.isaserver.org/articles/IS...cessRules.html

Microsoft Internet Security & Acceleration Server: Guidance
http://www.microsoft.com/isaserver/t...dance/2004.asp
http://www.microsoft.com/isaserver/t...dance/2000.asp

Microsoft Internet Security & Acceleration Server: Partners
http://www.microsoft.com/isaserver/partners/default.asp

Deployment Guidelines for ISA Server 2004 Enterprise Edition
http://www.microsoft.com/technet/pro...isaserver.mspx
-----------------------------------------------------


"skip" <(E-Mail Removed)> wrote in message
news:5F43FC62-9C23-4EE7-8FD5-(E-Mail Removed)...
> Hello all
>
> I am about to connect two remote sites to the central office via site to
> site VPN. We are using Sonicwall Tz170's at the remote sites to acomplish
> this. My question is regarding the proper use of DHCP. I would like all
the
> machines that are in the remote sites to pick up an ip address from a
central
> DHCP server that is at the central office.
>
> The internal ip address scheme on the remote networks is as follows
>
> Site1 is 192.168.2.x
> Site2 is 192.168.3.x
> Central office is 192.168.1.x
>
> In oder for machines that are on there site to get the proper ip address
> from the DHCP server, do i need to creat 3 scopes one for each site? and
if
> so how does a machine on site1 for example know that it must pick up an ip
> address of 192.168.2.x ?
>
> Thanks for any help

yea that does make sence, I can configure the Sonicwall to be a DHCP server
to the site its connected to, so this will work

"Phillip Windell" wrote:

> VPN (and the Internet in general) is "unreliable".
> Internet goes down,...or the VPN goes,...which is extremely common,...the
> machines cannot get their address on startup and so the whole Site(s) is
> crippled and non-functional.
>
> Do you really want that?
>
> Setup a DHCP at each site.
> Sites will continue to function even if the outside connection goes down.
> They won't be able to access remote resources until the connection is
> restored but at least they can still function within their own "area".
>
> --
> Phillip Windell [MCP, MVP, CCNA]
> www.wandtv.com
> -----------------------------------------------------
> Understanding the ISA 2004 Access Rule Processing
> http://www.isaserver.org/articles/IS...cessRules.html
>
> Microsoft Internet Security & Acceleration Server: Guidance
> http://www.microsoft.com/isaserver/t...dance/2004.asp
> http://www.microsoft.com/isaserver/t...dance/2000.asp
>
> Microsoft Internet Security & Acceleration Server: Partners
> http://www.microsoft.com/isaserver/partners/default.asp
>
> Deployment Guidelines for ISA Server 2004 Enterprise Edition
> http://www.microsoft.com/technet/pro...isaserver.mspx
> -----------------------------------------------------
>
>
> "skip" <(E-Mail Removed)> wrote in message
> news:5F43FC62-9C23-4EE7-8FD5-(E-Mail Removed)...
> > Hello all
> >
> > I am about to connect two remote sites to the central office via site to
> > site VPN. We are using Sonicwall Tz170's at the remote sites to acomplish
> > this. My question is regarding the proper use of DHCP. I would like all
> the
> > machines that are in the remote sites to pick up an ip address from a
> central
> > DHCP server that is at the central office.
> >
> > The internal ip address scheme on the remote networks is as follows
> >
> > Site1 is 192.168.2.x
> > Site2 is 192.168.3.x
> > Central office is 192.168.1.x
> >
> > In oder for machines that are on there site to get the proper ip address
> > from the DHCP server, do i need to creat 3 scopes one for each site? and
> if
> > so how does a machine on site1 for example know that it must pick up an ip
> > address of 192.168.2.x ?
> >
> > Thanks for any help
>
>
>