I would appreciate some experienced advice on this so just going to throw points at it for valued opinion and reference back to this setup description.
Two of our offices buildings are connected via a leased line with the unused one having another leased line which all Internet access goes through.
The building with the Internet facing leased line is no longer used by us and leased out to tennants who do not have any access to the network infrastructure other than their own switches linking the existing lan for each building and an adsl connection.
Office2 still tunnels through Office1 to access the Internet.
All Servers, Exchange, Active Dreictory file server etc. are in Office2
Everything has been working spot on and I want to make as little hardware changes as possible.
I have been asked to look into remote access requirements for currently 70 users but would like to base this scenario on up to 100
The remote users need access to one file server to upload files to. Usually files too big to be sent via Outlook. Also to store office documents which they work on.
Basically, Word, Excel, Powerpoint and PDF files.
And Intranet access to diary, timesheet and expense claim forms etc..
Anti Virus updates are via LAN also
This acccess is provided via IPSEC VPN to the Cisco 3030 using Cisco client software
Since the company provided adsl, connectivity has been good.
When using dialup, was not so good.
Only current conection problems would be occasionally large attachments in Outlook and sometimes slowish web browsing.
Dialup acces is still barelyt usable though.
The problem is that they have been using their computers for personaly stuff as well as work.
While work documents would probably a well under 100 MB, their MyDocs and folders are backing up 600Mb, mainly digital camera images.
They also cant be trusted to regularly backup files and occasionally lose things.
Management have asked for offline access to the c drive be blocked completely so all files worked on never leave the server, while still having access to Outlook email.
Here is more or less the current setup
Cisco Client VPN
256k Leased Line
Cisco 3030 Concentrator
Cisco 2611 SRA Router
256k Leased Line
Cisco 2611 SRA Router
24 port Switch
VLAN1 VLAN2 VLAN3
| | |
Firewall ***** *****
| LAN2 LAN3
A Sharepoint or similar document management system will allow them to work on files centrally over the VPN connection but will rely heavily on connection speed and latency.
They are on the road all day and use their broadband mainly in evenings to write up reports and send to server. During the day, notes are taken in word, files copied to their laptop or to the server if this is restricted which will be via GPRS datacard and is more or less 40k dialup speed due to locations they travel to.
I was not part of this setup and will be travelling from Monday on to these locations to research preformance etc... and come up with a solution.
The LAN is running Active Directory 2003 and Exchange 2003 in mixed mode as I believe there is an NT4 domain controller involved for some reason. Hopefully will learn more about this tomorrow when I travel to Office2.
Before I go, I would like some advice on possible areas I should be looking at.
The router model is discontinued and Cisco link above recommends it be replaced with this one, which has updaterd OS and more memory and processing etc.
At £1500 each, would this be value for money per performance increase? Or would the money be best spent elsewhere such as load balancing a central access solution?
If we implemented centralised document management such as Sharepoint. Say 50 simultanous users accessing documents this way.
From what research I have done so far, I feel a hardware solution between the Lan and firewall providing Load Balancing and acceleration may be a netter option than Windows Load Balancing or software only.
What is the best value for money hardare solution to beef up Intranet access if we throw document management and file storage onto it as well?
I won't have more detailed hardware info until early next week infortunately.
I dont skimp on points and will throw additional 500s for any followup info. Really appreciate any advice.