VPN / Remote Access setup with dynamic IP addressing
I have a client who has an office that uses a Cable internet connection. The ISP provides dynamic IPs. While the IP address is ever changing, I could never fathom how a VPN can be setup in such a manner. However, I believe I have either heard or seen seomewhere that VPN or some kind of remote access capability is possible with this type of configuration.
On the inside, the Internet connection comes across the cable modem and then over a Netgear router (don't know the model off hand, but it's less than a year old). The Netgear router then deploys internal IP addresses to all machines inside the office, one of them being the 2000 Server where the files reside.
Basically, I'm looking for an overview of what is needed to be able to setup any kind of remote access capability in this environment. This is an area that I have never dabbled in, but having been in Technology for a few years now, explanations should come to me pretty well.
Thank you in advance for your assistance.
On the inside, the Internet connection comes across the cable modem and then over a Netgear router (don't know the model off hand, but it's less than a year old). The Netgear router then deploys internal IP addresses to all machines inside the office, one of them being the 2000 Server where the files reside.
Basically, I'm looking for an overview of what is needed to be able to setup any kind of remote access capability in this environment. This is an area that I have never dabbled in, but having been in Technology for a few years now, explanations should come to me pretty well.
Thank you in advance for your assistance.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
The router is a Netgear RP614v2.
The ultimate objective is to have a setup where multiple employees will be able to login from home.
The ultimate objective is to have a setup where multiple employees will be able to login from home.
Re: lrmoore's point #2, have a look at dynamic naming service from http://www.tzo.com or http://www.dyndns.org.
You should try to use a static internal IP address for the server rather than using the Netgear's DHCP service for it, and ensure that the router is set up to passthrough PPTP or L2TP.
You should try to use a static internal IP address for the server rather than using the Netgear's DHCP service for it, and ensure that the router is set up to passthrough PPTP or L2TP.
Also consider running 2x Cisco routers with 3DES feature sets. Full IPSEC failover is supported, so that if one router dies, the other will resume connectivity. These can also be setup with dynamic crypto maps, so that a Netgear or any other VPN router for that matter can use an 'unknown' IP address to create a VPN tunnel, as long as a pre-shared key is known ?
I'm not sure how well the Netgear will respond to dynamic crypto maps, but it is more to do with the type of VPN router you use at the other end, as this is the device that will need to setup the dynamic maps.
So - what device do you have at your end ??