| Author |
Keep same LAN IP over VPN
|
|
| johnny021@hotmail.com 2006-12-14, 1:14 am |
| We have four office locations that we need to VPN together all of them
have NS5GT Firewalls. What we want at all four location is the same LAN
IP scheme.
For eg; 10.1.2.x scheme
All locations have static WAN IP. What kind of VPN would be recommended
and if possible steps to implement them at all four locations.
Thanks
| |
|
| johnny021@hotmail.com wrote:
> We have four office locations that we need to VPN together all of them
> have NS5GT Firewalls. What we want at all four location is the same LAN
> IP scheme.
>
> For eg; 10.1.2.x scheme
>
> All locations have static WAN IP. What kind of VPN would be recommended
> and if possible steps to implement them at all four locations.
>
> Thanks
>
Why do you want the same subnet at each location ?
| |
| johnny021@hotmail.com 2006-12-14, 1:15 pm |
| We would like to share resources at each of the location like
printers/servers so on and so forth and would like all of them to have
the same IP scheme at each location making it one big VLAN.
Simon wrote:
> johnny021@hotmail.com wrote:
> Why do you want the same subnet at each location ?
| |
|
| johnny021@hotmail.com wrote:
> We would like to share resources at each of the location like
> printers/servers so on and so forth and would like all of them to have
> the same IP scheme at each location making it one big VLAN.
>
>
> Simon wrote:
>
Not a good idea even if you could even get it working, which I doubt. A
different subnet at each site like 10.1.2.x 10.1.3.x etc all subnetted
to a class C 255.255.255.0 is the way to do this. Whatever VPN device
you choose will be able to route between the sites. If you got it
working then the broadcast traffic would swamp the wan links anyway.
simon
| |
| johnny021@hotmail.com 2006-12-14, 7:15 pm |
| Simon,
Thank you for your response, what kind of VPN would you recommend
between all these four sites, the major application we require to
access on all the location is pretty huge and runs off of an extensive
oracle database. So we need to maximize on the T1 bandwidth, would you
recommend site-to-site VPN policy based or router based, or any other
form of VPN?
John
Simon wrote:
> johnny021@hotmail.com wrote:
> Not a good idea even if you could even get it working, which I doubt. A
> different subnet at each site like 10.1.2.x 10.1.3.x etc all subnetted
> to a class C 255.255.255.0 is the way to do this. Whatever VPN device
> you choose will be able to route between the sites. If you got it
> working then the broadcast traffic would swamp the wan links anyway.
> simon
| |
|
| Hi,
without knowing the details, I'd go for the central site (one with the
database) as a hub, each remote site going into that with a vpn tunnel.
Then a terminal server at the central site to service the remote users.
MPLS might be worth a look, depending on size.
johnny021@hotmail.com wrote:
> Simon,
>
> Thank you for your response, what kind of VPN would you recommend
> between all these four sites, the major application we require to
> access on all the location is pretty huge and runs off of an extensive
> oracle database. So we need to maximize on the T1 bandwidth, would you
> recommend site-to-site VPN policy based or router based, or any other
> form of VPN?
>
> John
>
>
> Simon wrote:
>
|
|
|
|