Setting a VPN using ADSL

[Delboy16]

I have 2 cisco 2600 routers and I want to set up a vpn using an ADSL link. At one end I have a w2k pro w/stn, the other has a w2k server and a small network. Where I had a shortfall in my knowledge is configuring the routers. Both ends of the ADSL link have static IP's. Could somebody help me sort out the routers. Does any know what ports need to be open on the ADSL router to allow traffic to & from the 2600's. If you any further info please ask.

Thanks

Del~~

 

[vop]

This may be of some help on the issue of static IPs.

Dynamic IP: Always be in a position to allow others to find your IP address regardless of how often it is subject to change. Use a Dynamic update client such a

http://www.no-ip.com

to create a dynamic DNS update and lookup service. You (and your contacts) setup a URL name such as mycomputer.no-ip.com (theircomputer.no-ip.com) that can then resolve to a current IP address of interest.

Other dynamic client options can be researched here:

http://www.no-ip.com/faq.php

Normally, specific port assignments are application specific.

Port Forwarding: Your router needs to recognize certain external ports for special treatment. Those ports, so designated, must be linked to a specific internal IP address. That is what port forwarding does.

Each PC will need their own set of unique LISTENING ports in order for traffic to be forwarded to that specific computer.

 

[Delboy16]

HI Vop I dont want the world and his wife gaining access to my network hence the reason I use static IP's. There will only be one remote box connecting over the vpn. I need some info from a cisco tecki. Is that your forte? also.

Thanks

Del~~

 

[vop]

They cannot find you if they don't know your domain name. Even if they might find you, they still require a password. Then there is the VPN and firewall issues to overcome. And with physical points of access under your control - mostly wifey to worry about then.

Isn't a constantly changing IP generally a good idea. The ISPs certainly seem to think so. Static IPs may involve more expense and vulnerability. And when some hacker ever locks onto one of your static IP addresses you could be in for systematic major probing or other mischief. Dynamic IPs are more complicated to setup but I prefer them.

I have no specific knowledge on Cisco routers although there are several Cisco model examples in the following link:

http://www.pctechpaltalk.net/FAQ's/Jokers_Tips_Port-Forwarding.htm

Again, all port forwarding (needed ports and protocols)is application specific.