How to set-up a VPN for multiple person access

[200820]

I have been tasked with looking into setting up a central server for the company I work for, so that we can install a database program we use and make it available to all our users that are based in 8-9 seperate offices. I beleive that creating a VPN is possibly the best way to go about this although I'm not totally sure how to implement this. We already have 2 servers but have a limited budget, any advice would be greatly appreciated and also any other ideas apart from a VPN are also welcome.

Thanksssssss

 

[jimbopalmer]

VPN can mean different things. Some VPNs have a computer as a server and use client software on each computer. (this is ideal with a mobile workforce)

I use a VPN that runs from router to router, requiring no changes on the computers at all, but it only works where the routers are configured. If indeed, you have 9 fixed offices, this is ideal. (You can have a router to client VPN, but I have never tried that)

I have used the Linksys RV042 router, the Linksys WRV210 router and the Netopia 3347NWG router. I prefer the Linksys routers, but AT&T provided the Netopias for 'free' with Business DSL. Any router that claims to be a VPN endpoint should do. (VPN tunneling is all you need if you will use a computer as the endpoint)

Non VPN solutions? Citrix, VNC, RDP

I tried to remain child-like, all I acheived was childish.

 

[200820]

Hi Jimbo,

Thanks for your reply. We do have around 9 offices that would need to use the same database on the program which will run on our server although we currently use Netgear routers/Switches and i'm not entirely sure if they can be configured for this. I realise you have never tried the router to client VPN option but would this involve re-configuring all routers in the office or just 1? also do you know if running through a VPN would greatly affect the performance?

Cheers

 

[dberg35]

A site to site VPN would be best I think for your solution. I use for remote sites Netgear FVS318 router and it works quite well. The one question is, your database that is on the server is it goping to be mapped to all sites? If not then the best way for all to access it is Terminal Services.

 

[jimbopalmer]

Netgear has quite a line of VPN routers

http://www.netgear.com/Products/VPNandSSL.aspx

Choose one with over 10 end points for your Hub and at least one endpoint for the spokes.

As an example

http://www.netgear.com/upload/product/fwg114p/enus_ds_fwg114p.pdf

for the spokes, it would allow one link back to the hub and one user signing in from home.

at the Hub

http://www.netgear.com/upload/product/fvs336g/fvs336g_ds_13jun08.pdf

allows 25 remote offices plus 10 remote users (unused offices can be users, as well)

If it was me, I would have all users login to the hub, not the spokes, but long distance rates may change your mind.


I tried to remain child-like, all I acheived was childish.

 

[200820]

At the minute, all of our offices except the one were we wish to set-up the central server have the database program on their site. We want to centralise the program so that all users will be using the same database and have access to the other offices clients on the database if neccesary. Would a site to site VPN not slow the program considerably? With regards to the idea of users logging in to the hubs, we do not have a large budget so this would probably be a 2nd or 3rd choice. Thanks for all your help every1

 

[dberg35]

Yes using a VPN Tunnel for sharing a database would be slow, depending on the connection speed. I understand about a low budget being I have the same issue as well but a Terminal Service server would be best. This way all users would be able to login to the server directly.

If your currently running Win 2000 or 2003 Server Standard then all you need is to activate it and purchase licenses. How many users will need this database?

 

[200820]

At the minute we have a server which is running Win XP (Nothing to do with me lol) The terminal service seems to be sounding like the best option as I don't want to comprimise speed. There would be approx 20-30 users which would need to access the database although not entirely at the same time and most of these would already have licenses for the database program.

 

[dberg35]

TS licenses run about $80 per user but you would still have to purchase a server that has at least Win 2003 Server Standard. Here is a link to check out.

http://technet.microsoft.com/en-us/library/cc783746.aspx

My environment is TS and I have about 50 users at one time using the server, but I speced the server for up to 200 connections. If you do this route do the correct planning and implementation so that all users and Mgt get the best experience.

 

[200820]

Yeah I was planning on doing that anyway. Is this a yearly subscription or a one off payment?

 

[dberg35]

Your paying for the liceneses from MS no yearly fee. If this the route you are planning then again plan it carefully. It took me 2 years here to straighten out the network with a very limited budget.

 

[jimbopalmer]

Even with TS or Citrix, you may want a VPN, allows you to have less paranoid passwords, as encryption has already taken place.

I tried to remain child-like, all I acheived was childish.

 

[200820]

I'm going to try and plan it with the person who set up the network originally. So overall are the main things needed, a terminal server, licences from microsoft and the actual database program? anybody recommend min spec requirements for a terminal server?

 

[dberg35]

You want at least a RAID5 and 2 dual core processors. As for size of hard drives that depends on your needs and how big your database will grow. I currently have 2 Dell PowerEdge 2900,s.

 

[200820]

I wasn't planning on implementing RAID on the terminal server as this would add a lot of extra cost would it not? we currently have a dell poweredge SC420 but I don't think it could handle the sort of performance that a the database program would need so will most likely need to purchase a new one, if you have any reccomendations in the region of about £1000?

 

[burtsbees]

How big is the database? Look into either the Dell or HP/Compaq DL series of servers. You could probably get a decent G3 server from HP, like a DL380G3, with maybe 4GB RAM, two 2.8GHz dual core procs, and fill it with six 72GB U320 10K drives for around that price, and make a mirror for the OS and a RAID 5 with a hot spare for the database, and a fiber HBA for transmission to external storage if need be. That server also has dual gigabit NICs that can be teamed for 2GBps thoughput.

Burt

 

[200820]

thanks Burtsbees I'll look into those ranges. I hope we actually implement the terminal server after all this lol

Pj