VPN between 2 remote offices setup

[nell1]

Planning a VPN solution... think i'm nearly there, would appreciate someone's experience just to check that I'm on the right track

Office 1
ADSL modem / Fixed IP
NetGear FVL328 VPN Firewall router
Switch
Win 2K File server
10 PC's (mostly running 98)

Office 2
ADSL modem / Dynamic IP
NetGear FVL328 VPN Firewall router
Switch
Win 2K File server
6 PC's (mostly running 98)

In order to make each user in both offices able to view/change certain folders in opposite offices... I will need to map network dirves on each machine correct?

In terms of 'tunnels' how would this work? Would I simply create shared folders on each server, then create 1 tunnel between the servers so that each server could see each other's shared folders, map the drives on the server and then map clients machines to those shared folders?

Have I lost the plot? I am confused as to how folders appear on client/server machines when a tunnel is created so that data can be exchanged.

Any help would be gratefully received!

Nell1

 

[MattWray]

When the tunnel is created, the 2 networks essentially become one. Once connected, you can simply put in the IP of the server with the shares you need on the far end to map.
All machines will be accessible from either location, but I would make shares and map them on the servers. It will be a little more challenging with win98, but not too bad...

Thanks,

Matt Wray
MCSE, MCSA, MCP, CCNA

http://www.sss-steel.com

http://www.total-tec.com

 

[markpower]

Are you using Cable Modem or Broadband? The ADSL modem probably uses NAT too so the tunnel won't be able to terminate on the router. The VPN tunnel won't terminate on the VPN router with a dynamic IP either permanently. The IP may change and your tunnel will go. If you are using PPPoA (broadband) I recommend the Cisco SOHO 97 instead. Lot easier to set up.

'Never play leapfrog with a unicorn'

 

[MattWray]

Most ADSL modems don't NAT. They give you an IP from the ISP's pool, and you are public. I have a cable modem at my home, my router NATs, but my cable modem is simply a connection to the cable providers network with a dynamic public IP....

Thanks,

Matt Wray
MCSE, MCSA, MCP, CCNA

http://www.sss-steel.com

http://www.total-tec.com

 

[MattWray]

Or DSL providers network, got a little sidetacked somehow....
(Multitasking)


Thanks,

Matt Wray
MCSE, MCSA, MCP, CCNA

http://www.sss-steel.com

http://www.total-tec.com

 

[nell1]

Hi guys,

Thanks for the reply.. but you've thrown me into slight confusion. Connections on both end are broadband. On one end of the VPN, the IP is dynamic.. have had a look at the documentation of the router that I am thinking of getting and there is a solution when creating an static to dynamic tunnel. I will NAT router wise and port forward for the VPN connection...

As far as I am aware this should work... am confusing myself

 

[MattWray]

You have the right idea. Though, you shouldn't need to port forward. Once your tunnel is established, all ports are open inside it. Other than that, you're on the money...

Thanks,

Matt Wray
MCSE, MCSA, MCP, CCNA

http://www.sss-steel.com

http://www.total-tec.com

 

[dellboy]

I use the FVS318 and while I appreciate thats not the FVL328 that you are using I guess that the config on both will be similar(!!) with both being Netgear products. To that end the documentation on doing static LAN to LAN VPN is very good and setting up the VPN shouldn't cause you too many problems. I found the LAN to LAN works very well, so does the client to LAN (after considerable effort).

The tunnels are created between the 2 firewalls and so once they are connected, when in either location, its just like being on the same network in the same office, if that makes sense.

Cheers

 

[nell1]

Cheers guys fo rthe help. Makes sense to me. Will take the plunge and get configuring soon!

Thanks again!

Nell1

 

[Dwang22]

you should use fixed IP on both router, otherwise the vpn tunnel will disconnect if IP address is change.

 

[MattWray]

Not if it is set up correctly. You only need one static IP. I have set up several IPSec tunnels that were static to Dynamic. True, static is by far the better solution, but Dynamic will work...

Thanks,

Matt Wray
MCSE, MCSA, MCP, CCNA

http://www.sss-steel.com

http://www.total-tec.com