Want to win a PS4? Go Premium and enter to win our High-Tech Treats giveaway. Enter to Win

x
?
Solved

VPN Domain Access over pptp

Posted on 2006-07-11
7
Medium Priority
?
271 Views
Last Modified: 2010-03-19
Hi,

One of our offices is using RAS dialup into a Small Business Server 2000.
Problems include connection dropping, failing to call back and limited to the 2 ISDN channels for 5 staff.  Also problems copying files to local computer.

Router
  |
Switch
  |
SBS2000, Workstations
  |
RAS

I am considering changing this as follows as well as upgrade to SBS 2003

Router
  |
VPN Firewall
  |
Switch
  |
SBS2000, Workstations

Users will connect mainly via ISP dialup but hopefully later broadband, and need to authenticate onto active directory to have their home drive mapped.

Considering one of the Cisco PIX firewalls and the following setup.

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00800b6099.shtml

Is this the best way to do this and if so, which PIX or other hardware offer the best value for money.  There are currently 5 users.  Not sure if this is likely to increase in the near future at least.

Any advice appreciated.

Jess
0
Comment
Question by:jessmca
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 5
  • 2
7 Comments
 
LVL 22

Expert Comment

by:Rick Hobbs
ID: 17086373
With so few users, you would be fine with PIX-501-50-BUN-K9.  
0
 
LVL 22

Accepted Solution

by:
Rick Hobbs earned 2000 total points
ID: 17086390
Sorry, hit 'Submit' too fast.   Wanted to add that Cisco is the gold standard for Network hardware in a business environment.   You could use Netgear, Linksys, D-link, Sonicwall and many other excellent products, but there are more engineers familiar with the Cisco products than any other. The PIX-501 bundle includes licensing for 50 users.  So you have more than enough growth capability.
0
 
LVL 8

Author Comment

by:jessmca
ID: 17086564
Thanks rickhobbs

Are you aware of any problems with the AD remote authentication using the client software with the 501?
Probably the following would be the best configuration using the PIX DMZ.

ADSL Router
  |
VPN Firewall
  |
SBS2003 ISA 2004
  |
Switch
  |
Workstations
0
Efficient way to get backups off site to Azure

This user guide provides instructions on how to deploy and configure both a StoneFly Scale Out NAS Enterprise Cloud Drive virtual machine and Veeam Cloud Connect in the Microsoft Azure Cloud.

 
LVL 22

Expert Comment

by:Rick Hobbs
ID: 17086723
None at all.  It is easy to setup and maintain the VPN for either group or individual user access.
0
 
LVL 22

Expert Comment

by:Rick Hobbs
ID: 17086755
As for the config, you can:

ADSL Router
  |
VPN Firewall
  |
SBS2003 ISA 2004
  |
Switch
  |
Workstations

or

ADSL Router
  |
VPN Firewall
  |
Switch-----------------------------
 |                                           |
SBS2003 ISA 2004             Workstations

Either will work fine.  If you have daul LAN cards in the server, either use the first or, if possible, team the NICs and use the second.
0
 
LVL 8

Author Comment

by:jessmca
ID: 17088196
Thanks Rick,

Have never considered teaming network cards before.
Is there a security benefit or just performance increase?

Jess
0
 
LVL 22

Expert Comment

by:Rick Hobbs
ID: 17091063
Performance and failover.  If one fails, the other should keep working.
0

Featured Post

Get free NFR key for Veeam Availability Suite 9.5

Veeam is happy to provide a free NFR license (1 year, 2 sockets) to all certified IT Pros. The license allows for the non-production use of Veeam Availability Suite v9.5 in your home lab, without any feature limitations. It works for both VMware and Hyper-V environments

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I had an issue with InstallShield not being able to use Computer Browser service on Windows Server 2012. Here is the solution I found.
A 2007 NCSA Cyber Security survey revealed that a mere 4% of the population has a full understanding of firewalls. As business owner, you should be part of that 4% that has a full understanding.
Monitoring a network: why having a policy is the best policy? Michael Kulchisky, MCSE, MCSA, MCP, VTSP, VSP, CCSP outlines the enormous benefits of having a policy-based approach when monitoring medium and large networks. Software utilized in this v…
In this brief tutorial Pawel from AdRem Software explains how you can quickly find out which services are running on your network, or what are the IP addresses of servers responsible for each service. Software used is freeware NetCrunch Tools (https…
Suggested Courses

636 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question