How to use two DSL Internet connections for VPN and Terminal Server access - for load splitting
Posted on 2006-05-28
Wanting to provide good performance for outside users accessing the Terminal Server, I have provisioned two 1+ meg DSL Internet lines with static IP and connected each to a VPN Router (Netgear FVS338). The intention is to provide Terminal Server access to about 25 outside users - splitting them into two groups and providing a different static IP address to each group - but both will access the same Terminal Server. In addition, inside users (on the office LAN) also use the Terminal Server and have the regular email and Internet browser traffic needs of an office user. The Terminal Server is Windows 2003 Enterprise with gigabit NIC.
Things are presently set up with VPN Router A providing service to some external users already, and the second Router B is only providing default-route NAT access to the Internet for the inside users email and web browsing. Before this scheme was set up, there was only one DSL connection for both VPN and inside users and the conflicting traffic needs of each group caused a lot of grumbling.
Now I would like to start using the second DSL Internet (Router B) and provide its static IP to the second group of outside users. But initial tests have failed to achieve a connection to the Terminal Server through the second IP - I guess it is a routing or default route issue, because the Terminal Server has to be able to route it's reply traffic back through the router the connection came in on.
I've researched this enough to realize that maybe I need to have a dual-WAN router, but surely I could add a third router between the Terminal Server and the two Netgears to accomplish the same thing? I favour this approach, because actually I would like to provide a *third* DSL Internet connection for the inside-originated Internet traffic, and restrict the other two routers to incoming Terminal Server traffic only.
There are other networking requirements including some Frame Relay in the mix too, but I am leaving that out for simplicity.
I would love some advice on setting this up!