Adding remote site... do i have to add it to each site?

[reynolwi]

Ok im going to be adding a remote site into our enterprise and i use hardware vpn routers. Do i have to create a tunnel from each site to the one im adding or just from corporate. I currently have 2 sites (corporate, and 1 remote site) and they have a tunnel between them. I was thinking i had to go into each vpn router and create a tunnel to the new site so it forms a "circle" or whatever or if i just had to do it from corporate only.

So... i have it planned like this right now.

Corporate -- -- Remote Site 1
Remote Site 1 -- -- Corporate

Then i would do this?

Corporate -- -- Remote Site 1
remote site 1 -- -- corporate

corporate -- -- remote site 2
remote site 2 -- -- corporate

remote site 1 -- -- remote site 2
remote site 2 -- -- remote site 1

Wm. Reynolds
RRWDS | TxPSS

http://www.rrwds.com

http://www.txpubsafety.com

- - - - - - - - - - - - -
Network Error:
Hit any user to continue

 

[brianinms]

If Remote site 1 needs to talk to Remote site 2 then yes you would need a tunnel if you didn't want to depend on the corporate site to be the spoke. The other option is to configure DMVPN.

http://www.cisco.com/en/US/docs/ios/12_2t/12_2t13/feature/guide/ftgreips.html

 

[reynolwi]

so if i want like a full "mesh" kind of topology then creating a tunnel from corporate and also remote site 1 to remote site 2 is what i have to do right? that is not going to screw anything up is it having it like that?

Wm. Reynolds
RRWDS | TxPSS

http://www.rrwds.com

http://www.txpubsafety.com

- - - - - - - - - - - - -
Network Error:
Hit any user to continue

 

[burtsbees]

Have you thought about an MPLS backbone through the telco?

Burt

 

[reynolwi]

can't because our local is verizon, and the local where the new site is would be at&t. we use cable modems at the 2 current sites and will be having to use dsl at the new site. im talking with our cable provider about gettibg atleast the corporate location on their fiber network which happens to run right past us on the utility pole. it would aleviate some of my bandwidth issues because then id be 8dwn/8up instead of the 6dwn/1up we have.

the new site also happens to be 3.5 hrs from corporate so im going to end up having to stick a domain controller in down there just for the 1 or 2 workstations that are going to be there. it will prolly end up being a child domain of the parent domain.

would it create any problems to link all the sites together like i originally posted? if its going to cause a traffic issue then i wont do it and just link it to corporate only. i was just thinking of linking them all together for a "mesh" like topology for redundency more or less. in case one tunnel goes down the other will still be there.

Wm. Reynolds
RRWDS | TxPSS

http://www.rrwds.com

http://www.txpubsafety.com

- - - - - - - - - - - - -
Network Error:
Hit any user to continue