Point to Point T1 and VPN

[Murugs]

We have a simple setup here in the office.
Internet - ISP Router - Firewall - SWITCHES - Internal LAN

Now a new company brought us and we need to access their ERP application.
So the internet and router above is replaced by a Point to Point T1 and router from our parent company.
They are going to issue a IP addressing scheme to our internal network.

We now have users connecting to our network thru the firewall using VPN.
Will this change after we merge the 2 companies network.

What sort of questions and concerns should come to my mind when merging two networks as I am not aware of all these.

Any help is appreciated.

 

[HungryHouse]

Basically, its about permissions and trust boundaries. Routed networks can be allowed across the soon-to-be-built VPN tunnel, and then you need to deal with authentication on both sides for what you will need access to.
If all users from your side are allowed across, once the tunnel is built, I'm sure all they need to do is give your users RADIUS accounts (ow whatever auth method they use), and boom you can log-in to them like everyone else in their LAN does.
The only thing that is confusing me a bit is when you said that "We now have users connecting to our network thru the firewall using VPN." Are you talking about users on the new corporate parent or remote users from your own company?
If the latter, how is that happening if Internet access if through the parent? Help me out on that one.

I hope this is helpful.

-HH

 

[Murugs]

We now have users connecting to our network thru the firewall using VPN." means

remote users of our own company.

I think my parent company should provide some sort of a publci IP which will solve this problem

 

[HungryHouse]

How are they getting to the VPN/firewall device if Internet access is through the corporate? You had mentioned your Internet connection was replaced with a point-to-point through to corporate... ?

 

[Murugs]

First thanks for responding. I am not sure how they are going to work this. Yes it is a point to point network.

I think below are 2 options

1) give a public ip from the point to point t1 isp to the firewall and internal netowrk remains the same
2)remove the firewall and connect it directly to the parent company network.

If I am confusing you I am sorry..Thanks for the help.

 

[HungryHouse]

Hi Murugs,

Typically a point-to-point T1 is private- hence there is no public IP. This is where the confusion lies. Typically on a WAN link from one office to another, there is no need for firewalling. IN your case, however, since there may be proprietary info from on one side or another, this may be a migration. Your firewall admin may want to sit down with the security admin of the parent company to discuss rule sets..it is possible that they will do away with your firewall altogether (your option 2). The option 1 doesnt make sense to me based on above. If there are other questions or thoughts, please feel free to share.
Have a great weekedn murugs and good luck.
-HH

 

[Murugs]

Typically a point-to-point T1 is private- hence there is no public IP.--

Yes you are right with this. But seems this is a special T1 and we can assign a public ip. This I got from my parent company.