Solved

wan connectivity over internet

Posted on 2004-09-29
6
453 Views
Last Modified: 2010-04-12
We are in the process of moving our offices to our new premises. To enable smooth shifting i am trying to establish a WAN connectivity between these two offices that will enable me to do the shifting gradually.

What I have:

* 256K leased line on both sides with static IP#s
* 2MB DSL connection at the new site with dynamic IP
* Cisco VPN Router - 1 # (I can get one more of this if required)
* Cisco Concentrator - 1 #

Currently I am using the VPN router and the concentrator with citrix server. However this requires installation of ICA client. I would like to establish a WAN between 2 offices and setup a DHCP server in the new office. This way, the users can directly go and plug their equipments in the new premises and log in to my domain - this is the key.

I will give bonus points to anyone who gives me a solution with ways to implement it - THIS IS URGENT. I am also trying to hire a local expert (Dubai) to do this job for us. Any hyperlink that will give instructions would also be helpful.

thanks
kannan
0
Comment
Question by:komandur
  • 4
  • 2
6 Comments
 
LVL 5

Accepted Solution

by:
netspec01 earned 500 total points
Comment Utility
It is unclear exactly what problem you are trying to solve.  It seems that you are already doing VPN.

If you set up a VPN tunnel between your remote site (Cisco router with IPSEC) and a Cisco VPN concentrator, your networks will be connected and appear as a "routed" internetwork.  AT the remote site you can have a DHCP server servicing the local machines.   Citrix clients shouldn't have any diffiult connecting to the main Citrix server at the central site.

The IPSEC security policies on your router can be "tuned" to allow/disallow protocols/ports as your security policy dictates.

I am currently doing this with a Citrix farm at the central site and multiple remote VPN tuinnel connections with varying security policies.  Some are wide open and others are restricted to just Citrix protocols (tcp 1494 and udp 1604).  Tunnels stay up indefinitely.

Does this answer your question or am I missing something?
0
 
LVL 4

Author Comment

by:komandur
Comment Utility
I have actually called a network engineer who has tested something in my office and i am going to try out this on Saturday. I believe he has used IPSEC...and if it works on saturday you will get it anyway for trying to help me.. Otherwise, i will revert with more questions ;o)
0
 
LVL 5

Expert Comment

by:netspec01
Comment Utility
Not a bad idea to bring someone in to help out. Configuring sdsl with authentication an IPSEC VPN tunnels isn't exactly a beginner task.  Good luck in getting your linl up and running.
0
IT, Stop Being Called Into Every Meeting

Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

 
LVL 5

Expert Comment

by:netspec01
Comment Utility
How did you fare on Saturday?
0
 
LVL 4

Author Comment

by:komandur
Comment Utility
sorry friend. After this I had to travel and hence couldn't update. The guy managed to establish the VPN though the speed was painfully slow - You get it for your efforts.

thanks again
0
 
LVL 5

Expert Comment

by:netspec01
Comment Utility
I am glad to see that you had some success!
0

Featured Post

How your wiki can always stay up-to-date

Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
- Increase transparency
- Onboard new hires faster
- Access from mobile/offline

Join & Write a Comment

Sometimes, you want your microsoft VPN to route all the traffic to the remote network. Usually your employer network. This makes it possible to access all the nodes inside this remote LAN, even if they have no "public DNS" entries. To do so, you wo…
For a while, I have wanted to connect my HTC Incredible to my corporate network to take advantage of the phone's powerful capabilities. I searched online and came up with varied answers from "it won't work" to super complicated statements that I did…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

772 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

10 Experts available now in Live!

Get 1:1 Help Now