Solved

Site To Site VPN Connection

Posted on 2004-03-30
3
2,362 Views
Last Modified: 2013-11-16
I just got a project dropped into my lap to setup a Site to Site VPN connection. No Server involved. Currently my client has a Netopia Router that is doing DHCP and a Sonicwall Firewall in place at their HQ. They are currently setup to access the internet and receive their email from there ISP hosted email. Remote users are using Sonicwall VPN client to access their AS400. They are opening a new branch office that needs to have access to their AS400 at the Corp HQ. Branch office will consist of 6 workstations. Again No Server involved. Should I have them purchase another Sonicwall Firewall/VPN appliance? And what would be the best way to have the branch office initiate the VPN connection. Is there someway to have the Sonicwall appliance initiate the connection. If someone can supply me with a diagram would help clear up alot.
0
Comment
Question by:Djrobluv
3 Comments
 
LVL 18

Expert Comment

by:JConchie
ID: 10718037
We run sonicwall appliances at 6 different locations and have several other users coming in using group policy...the sonicwall software client...it all works fine.
I think the decision for you here is financial.......for only 6 users, you could just buy another bunch of vpn licenses for the sonicwall in the HQ and have each user connect via the software client........but for not much more, you could buy a tele 3 for the new branch office and setup a single vpn tunnel that lets all machine have access.....you can put them on the same subnet as the head office if you want......even hand out DHCP from the head office. Personally, I would go with the second appliance.

0
 
LVL 16

Accepted Solution

by:
The--Captain earned 250 total points
ID: 10718038
>Should I have them purchase another Sonicwall Firewall/VPN appliance?

Unfortunately, sonicwalls seem to get along best with other sonicwalls, so I'm say the answer here would be yes (also, then they can't weasel out of tech support calls by saying "it must be the other end of the VPN connection that is giving you problems")
>Is there someway to have the Sonicwall appliance initiate the connection

Of course - just configure the VPN parameters, and it should start working...

Since I'm not sure where your router is in all this (you didn't draw me a diagram), I'm not sure if you'll have to add some static routes someplace...

Cheers,
-Jon

0
 
LVL 5

Expert Comment

by:mrpez1
ID: 10719067
A couple things....The tele3 only allows 5 ip addresses behind it. For 6 users, you'll need an upgrade. Check out the soho3 or tz 170:

http://www.sonicwall.com/products/vpnapp.html

Also, If one of the sites has a dynamic IP address it has to initiate the VPN and the other must have a static IP. Think of it as a moving target. To be the initiator, the target must be static. You can only use aggressive mode (not main mode) in this case. If both are static, there's no problem.
0

Featured Post

Give your grad a cloud of their own!

With up to 8TB of storage, give your favorite graduate their own personal cloud to centralize all their photos, videos and music in one safe place. They can save, sync and share all their stuff, and automatic photo backup helps free up space on their smartphone and tablet.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Google Play app store not being blocked from smartphones 4 30
Creating and Connection two new domains 5 75
network error 8 32
nexus filter logs 3 16
If your business is like most, chances are you still need to maintain a fax infrastructure for your staff. It’s hard to believe that a communication technology that was thriving in the mid-80s could still be an essential part of your team’s modern I…
Data center, now-a-days, is referred as the home of all the advanced technologies. In-fact, most of the businesses are now establishing their entire organizational structure around the IT capabilities.
Here's a very brief overview of the methods PRTG Network Monitor (https://www.paessler.com/prtg) offers for monitoring bandwidth, to help you decide which methods you´d like to investigate in more detail.  The methods are covered in more detail in o…
This video gives you a great overview about bandwidth monitoring with SNMP and WMI with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're looking for how to monitor bandwidth using netflow or packet s…

948 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

22 Experts available now in Live!

Get 1:1 Help Now