VPN Tunnel to Home - What are my options for setup from home to a domain

Posted on 2005-05-12
Last Modified: 2012-08-13
Ok, So i have bee tasked with settign up a secure IPSec tunnel to one of our VP's homes (due to the fact that he is in a wheelchair and needs to be working from home.) His home connection is a cable modem with a dynamic IP address. On our side we are using Smoothwall Express 2.0 (which is our firewall and VPN solution-so it is also the VPN endpoint.)

Now we are setting up a Windows 2000 computer to put at his house that will have:

a) DynDNS client and DynDNS service to resolve his dynamic IP address to a static hostname

b) SSH Sentinel (an IPSec client that will connect his home computer to our VPN endpoint)

Here at work we are a domain with Server 2003 as PDC, Secondary DNS and Win2k server as File Server, secondary DNS, Primary WINS. My supervisor wants this connection to be totally secure and keeps saying he wants this computer to be a terminal. The only thing that we want the VP to be able to do on this computer is:
1) Email (possibly connected to our internal Exchange server-?)
2) Mapped Network drive from our File Server in the domain to his workstation
3) Deltek Application (accounting software client that connects to our Application server and dumps into database)

Here is where I am confused:
Now as I said my supervisor keeps saying he would like this to be a terminal (such as remote desktop connection or terminal services) inside the IPSec tunnel.
1) The problem is what exactly will he connect to with the terminal connection?
2) Is there some software that will accomodate this situation?

My suervisor is wanting some kind of terminal session. What do I do here and how shall I set this up? Need some good advise here!
Question by:Trihimbulus
    LVL 2

    Accepted Solution

    You can Terminal service (RDP) him into the server or a windows XP pro machine on your network.

    The 2000 box has a built in license for Win2k TS, so I would go with that server.  Put the server in Application Mode. (control Pannel, add/remove programs/windows/Terminal Services)

    Install the programs that he needs on that server.


    Author Comment

    But if I point him towards the server, won't that basically be letting a user use the server as a workstation? Please explain, I am a newb lol

    Featured Post

    Highfive Gives IT Their Time Back

    Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

    Join & Write a Comment

    One of the most often confused topics in the area DNS is the idea of GLUE records. Specifically, what they are, when they are needed, when they are provided, and how they are created. First, WHAT IS GLUE? To understand GLUE, you must first under…
    Occasionally you run into the website or two that will not resolve properly using your own DNS servers.  Some people simply set up global forwarders for their DNS server.  I don’t recommend doing this because it can cause problems resolving addresse…
    After creating this article (, I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
    This video gives you a great overview about bandwidth monitoring with SNMP and WMI with our network monitoring solution PRTG Network Monitor ( If you're looking for how to monitor bandwidth using netflow or packet s…

    729 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    21 Experts available now in Live!

    Get 1:1 Help Now