Need info on setting up VPN

[mkirros]

We're a non-profit with a very tight budget. We have a Win2K AD server (our only server) which is the Domain Controller and DNS server. Our Internet is provided by Qwest, with an Actiontec 701 modem which also serves as the router and DHCP server. We need to set up a VPN to allow for about 10 connections. Can anyone point me to some really specific information about things like - Should we add a more robust router and just use the Actiontec as a modem? Should the server be doing the DHCP instead of the Actiontec? What IP address ranges should we be using? Thanks for any help.

 

[JOAMON]

My two cents.....

I would have the 2K server handle DHCP and DNS for the Domain. If these are not full time VPN connections but VPN connections for remote users then you could configure the actiontec to work as just a modem and disable the wireless. A Cisco 831 router can be configured to work as a VPN server for remote client connections with the use of Cisco VPN client software. Following is a direct statement from the client software EULA which indicates that you do not need to purchase this software just the Cisco device they connect to:

Grant of License:
2. Cisco systems hereby grants to you the right to install and use the software on an unlimited number of computers, provided that each of those computers must use the software only to connect to Cisco systems products, and subject to export restrictions in paragraph 4 hereof. You may make one copy of the software for each such computer for the purpose of installing the software on that computer. The software is licensed for use only with Cisco systems products, and for no other use.

You will of course need a static IP address in order for this to work properly.

 

[countrypaul]

Given that you are on a very tight budget, you may wish to use the W2K server as the VPN server - at least to start with. The software etc. is all part of W2K. You say 10 connections, if these are all simultaneous then you might be better off with a router, or a firewall such as a Cisco PIX 501.