Link to home
Start Free TrialLog in
Avatar of gbrown08
gbrown08

asked on

Questions from a beginner........

I am just starting out in networking and have a few questions that are bugging me....

1) Say I was subnetting a company and the company had ten offices. Each office has its own network because I subnetted it that way. Each office is set up with a VPN and is connected to the central headquarters. DO I need a DHCP server for each office? Or can I just have one DHCP server at the central office and make 10 seperate pools in it that the offices can subscribe to depending on what network they are in?


2) Also, the central office has a T1 connection to the internet, and the VPN is connected with ISDN. do I need a border router with 11 WAN connections, (10 for the ISDN lines, and 1 for the T1?) or do the ISDN lines just go into one slot on the router and then the T1 goes into another? I am a little confused so thatks for the help.
ASKER CERTIFIED SOLUTION
Avatar of scraig84
scraig84

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of Les Moore
scraig84 made some good points.
1. I agree that you really only need one, two at most, DHCP servers. I have a network with 65 remote offices and only one DHCP server. With a lease of 30 days, the server can be offline for several days and nobody would notice. I also do not think the PIX will forward a BOOTP broadcast at all, whereas a router certainly can.

2. I don't quite follow as to why your VPN's are coming in over ISDN, but if you do have 10 separate ISDN BRI circuits, then yes, you would need a router with 10 BRI ports plus the T1. If, however, your ISDN circuit is a PRI, then you only need one port to service all of your remotes.

I would re-consider having my Internet router also handle communications directly between my corporate LAN and the remotes - VPN's or not. I would use a routerA with T1 port to the Internet--firewall1--routerB with ISDN dial-in--(maybe)firewal2--corporate LAN. FW1 and FW2 can be the same box, but I would definately split the routers into two boxes with a firewall between them.
Avatar of gbrown08
gbrown08

ASKER

What I was thinking was to have a T1 going out for headquarters to have a T1 internet connection, and the 9 other satellite offices connected to the VPN would have ISDN connection. I would be way to costly to have a T1 for every office. I understand now that the router would only need the T1 connection and the ISDN connection and that would really be all it needed. This is all just theory. So you think that I would just need one DHCP server and a backup one just in case and that should be fine for my entire VPN?

Thanks
Yes - as long as something can forward the request!