VPN to SBS network from Branch Office

[Magic427]

I have a client who has 3 offices setup all with SBS 2000, which hopefully may get upgraded to 2003.

All 3 have the same routers and access the internet the same way.

I appreciate that the 3 branches cannot be linked as a network via the ISA or firewall VPN to VPN link, however, if all three are setup with their own subnet, is it possible to create a VPN link from a Workstation to a different branch successfully?

Ideally they need to do this for administration, but also for periodic data updates and Terminal Services at the main branch.

Thanks

 

[1DMF]

I appreciate that the 3 branches cannot be linked as a network via the ISA or firewall VPN to VPN link

Why not? we have our inhouse SBS2003 linked to our 3rd party hosted web server via a VPN DES encrtypted tunnel.

ok as only one firewall is a sonic wall, if the VPN goes down I have to manually re-negotiate the tunnel, where as fully compatible firewalls would auto-renegotiate.

But that's the only down side that i've noticed.

"In complete darkness we are all the same, only our knowledge and wisdom separates us, don't let your eyes deceive you."

"If a shortcut was meant to be easy, it wouldn't be a shortcut, it would be the way!

 

[Magic427]

Mmmm. Not really what I meant - I meant that I can't link the 3 SBS networks together as that would surely break the SBS rules.

What I want to do is to see if any one workstation can use a local VPN to one of the other branches without causing problems.

 

[1DMF]

I dont' see why not , you simply need to set up VPN and enable remote users on the SBS boxes.

They can then use MS built in VPN to connect to the IP of the required box.

That's how we do it to ours, so having 3 shouldn't make a difference, you'll just have 3 VPN conectors configured.

If you need to access the server to do maintenance , who not just use RDP (Remote Desktop Protocol) to connect or VNC viewer, which is what the missus uses.

"In complete darkness we are all the same, only our knowledge and wisdom separates us, don't let your eyes deceive you."

"If a shortcut was meant to be easy, it wouldn't be a shortcut, it would be the way!

 

[Magic427]

That is what I hoped would be possible, I just wanted to ensure that it wouldn't cause any problems being a link between SBS networks, albeit at a client level.

I do it all the time for our single SBS from home etc.

They might get migrated in the end to Standard Windows Server, so the problem will go away, but that is a LONG way off!