VPN Question(s) - Neophyte

Have a small office Netwrok running W2k3 Small Business server. There is
a need to access the network remotely, so I am looking at possibly a VPN
solution. Is Hardware VPN better (or easier to set up for a neophyte) than
the Windows software VPN? If so, any hardware VPN reccommendations? Is it
OK for the w2k3 server box (also the primary controller) to be the VPN
server, if it's done through software? Finally, is this something that
should not be tackled by someone like me, i.e., without *lots* of
experience?

Thanks

"Gregory" <(E-Mail Removed)> wrote in message
news:a1fed$41d4644b$42a70da1$(E-Mail Removed) ervers.com...
> Have a small office Netwrok running W2k3 Small Business server. There
is
> a need to access the network remotely, so I am looking at possibly a VPN
> solution. Is Hardware VPN better (or easier to set up for a neophyte)
than
> the Windows software VPN?

Probably not -- and it depends much on the hardware.

WHEN hardware is easier for the neophyte it is usually
because the hardware offers LIMITED options, other
most complex hardware solutions may rival or exceed
slightly the cabilities of software solutionss but then
they are as complex.

> If so, any hardware VPN reccommendations? Is it

Price and features have to be decided first.
If you have one you can try it.

If not, and you have an extra Win2000+ server you
can try the software route (pun intended) and will
likely find that after the initial shock the GUI is
pretty easy to use.

Warning: The GUI for RRAS is NOT as easy or
as straightfoward as some of the simpler services
but this is largely due to the fact that RRAS is about
a dozen separate, but related, services controlled
through the same MMC console.

The main trick to RRAS administration, other than
a basic knowledge of routing IP in general, is to
realize what to IGNORE and where to FOCUS
your effort and attention.

> OK for the w2k3 server box (also the primary controller) to be the VPN
> server, if it's done through software? Finally, is this something that
> should not be tackled by someone like me, i.e., without *lots* of
> experience?

Ok? Maybe. Not generally recommended but you
seem to be trying to do this with a single SBS so
that may be your only choice.

One of the big APPARENT advatages of hardware
is that it puts your real machines behind another layer
of defense -- but the same is true if you use a dedicated
server (software) running RRAS.

Note: the distinction between hardware and software
is not a clear as we are presuming but I am trying to
answer the question as you likely intended it.


--
Herb Martin


>
> Thanks
>

"Herb Martin" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> "Gregory" <(E-Mail Removed)> wrote in message
> news:a1fed$41d4644b$42a70da1$(E-Mail Removed) ervers.com...
>> Have a small office Netwrok running W2k3 Small Business server. There
> is
>> a need to access the network remotely, so I am looking at possibly a VPN
>> solution. Is Hardware VPN better (or easier to set up for a neophyte)
> than
>> the Windows software VPN?
>
> Probably not -- and it depends much on the hardware.
>
> WHEN hardware is easier for the neophyte it is usually
> because the hardware offers LIMITED options, other
> most complex hardware solutions may rival or exceed
> slightly the cabilities of software solutionss but then
> they are as complex.
>
>> If so, any hardware VPN reccommendations? Is it
>
> Price and features have to be decided first.
> If you have one you can try it.
>
> If not, and you have an extra Win2000+ server you
> can try the software route (pun intended) and will
> likely find that after the initial shock the GUI is
> pretty easy to use.
>
> Warning: The GUI for RRAS is NOT as easy or
> as straightfoward as some of the simpler services
> but this is largely due to the fact that RRAS is about
> a dozen separate, but related, services controlled
> through the same MMC console.
>
> The main trick to RRAS administration, other than
> a basic knowledge of routing IP in general, is to
> realize what to IGNORE and where to FOCUS
> your effort and attention.
>
>> OK for the w2k3 server box (also the primary controller) to be the VPN
>> server, if it's done through software? Finally, is this something that
>> should not be tackled by someone like me, i.e., without *lots* of
>> experience?
>
> Ok? Maybe. Not generally recommended but you
> seem to be trying to do this with a single SBS so
> that may be your only choice.
>
> One of the big APPARENT advatages of hardware
> is that it puts your real machines behind another layer
> of defense -- but the same is true if you use a dedicated
> server (software) running RRAS.
>
> Note: the distinction between hardware and software
> is not a clear as we are presuming but I am trying to
> answer the question as you likely intended it.

Thank you very much. You've given me lots of things to consider. Indeed, I
can understand how frustrating it can be trying to answer the questions you
think someone is asking, when they don't even know enough to ask the right
questions. That's why your response is double-appreciated :-)

As you correctly surmised, if possible, I'd like to do that usning *the* one
win2k3 server, if possible, that's why I was considering the hardware
option, as an additional insulator, but I'll try to get my hands on some
decent documentation on setting up the software VPN, and will try the
software approach. Any good reference documents?

Once again, thanks.

> Thank you very much. You've given me lots of things to consider. Indeed,
I
> can understand how frustrating it can be trying to answer the questions
you
> think someone is asking, when they don't even know enough to ask the right
> questions. That's why your response is double-appreciated :-)

You are welcome. It is actually my specialty
so I appreciate it being noticed.

> As you correctly surmised, if possible, I'd like to do that usning *the*
one
> win2k3 server, if possible, that's why I was considering the hardware
> option, as an additional insulator, but I'll try to get my hands on some
> decent documentation on setting up the software VPN, and will try the
> software approach. Any good reference documents?

Using one server is not generally recommended, except
that is pretty much the way that SBS is sold and marketed.

So, you can either buy a little hardware device or get an
older machine for $200 books (or out of the closet) and
use it for the router.

Most any Pentium will run Win2000 or Win2003 server
(if the BIOS is up to date) and contrary to the misconceptions,
even 128 Meg and 5 gig of drive space works really well
for such things.

Those little hardware routers may help but they seldom
have RICH CHOICES in the setup.



--
Herb Martin


"Gregory" <(E-Mail Removed)> wrote in message
news:540b1$41d571fc$42a70da1$(E-Mail Removed) ervers.com...
>
> "Herb Martin" <(E-Mail Removed)> wrote in message
> news:(E-Mail Removed)...
> > "Gregory" <(E-Mail Removed)> wrote in message
> > news:a1fed$41d4644b$42a70da1$(E-Mail Removed) ervers.com...
> >> Have a small office Netwrok running W2k3 Small Business server.
There
> > is
> >> a need to access the network remotely, so I am looking at possibly a
VPN
> >> solution. Is Hardware VPN better (or easier to set up for a neophyte)
> > than
> >> the Windows software VPN?
> >
> > Probably not -- and it depends much on the hardware.
> >
> > WHEN hardware is easier for the neophyte it is usually
> > because the hardware offers LIMITED options, other
> > most complex hardware solutions may rival or exceed
> > slightly the cabilities of software solutionss but then
> > they are as complex.
> >
> >> If so, any hardware VPN reccommendations? Is it
> >
> > Price and features have to be decided first.
> > If you have one you can try it.
> >
> > If not, and you have an extra Win2000+ server you
> > can try the software route (pun intended) and will
> > likely find that after the initial shock the GUI is
> > pretty easy to use.
> >
> > Warning: The GUI for RRAS is NOT as easy or
> > as straightfoward as some of the simpler services
> > but this is largely due to the fact that RRAS is about
> > a dozen separate, but related, services controlled
> > through the same MMC console.
> >
> > The main trick to RRAS administration, other than
> > a basic knowledge of routing IP in general, is to
> > realize what to IGNORE and where to FOCUS
> > your effort and attention.
> >
> >> OK for the w2k3 server box (also the primary controller) to be the VPN
> >> server, if it's done through software? Finally, is this something that
> >> should not be tackled by someone like me, i.e., without *lots* of
> >> experience?
> >
> > Ok? Maybe. Not generally recommended but you
> > seem to be trying to do this with a single SBS so
> > that may be your only choice.
> >
> > One of the big APPARENT advatages of hardware
> > is that it puts your real machines behind another layer
> > of defense -- but the same is true if you use a dedicated
> > server (software) running RRAS.
> >
> > Note: the distinction between hardware and software
> > is not a clear as we are presuming but I am trying to
> > answer the question as you likely intended it.
>
> Thank you very much. You've given me lots of things to consider. Indeed,
I
> can understand how frustrating it can be trying to answer the questions
you
> think someone is asking, when they don't even know enough to ask the right
> questions. That's why your response is double-appreciated :-)
>
> As you correctly surmised, if possible, I'd like to do that usning *the*
one
> win2k3 server, if possible, that's why I was considering the hardware
> option, as an additional insulator, but I'll try to get my hands on some
> decent documentation on setting up the software VPN, and will try the
> software approach. Any good reference documents?
>
> Once again, thanks.
>

Gregory wrote:
> Have a small office Netwrok running W2k3 Small Business server.

That's because you are a *SMALL-TIME* trolling Grik arsebandit Greg !

Mewhahahahahahahahhaharrr

I thought you told everyone you were *CLEVER* greg the girik ?

How come you need help on such a simple issue ?
*LMFAOAY*

PS http://snipurl.com/bwdp BUSTED !