[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now

x
?
Solved

What are the standards these days in setting up a VPN tunnel?

Posted on 2007-08-09
4
Medium Priority
?
258 Views
Last Modified: 2013-11-05
We have now had several companies require that we use Public IP addresses inside VPN tunnels when setting them up.  We are not a large company and may not be able to afford purchasing a bunch of Public IP addresses for this purpose.  What happened to agreeing on an intermediate Private IP range using NAT or even using one side or the other's Private IP range and NAT?  Are the times changing and we are falling behind?  Should we be changing our standards or are these isolated companies that aren't playing nice?  What are the standards these days?
0
Comment
Question by:denverjaye
  • 3
4 Comments
 
LVL 78

Expert Comment

by:Rob Williams
ID: 19665813
For a VPN to work it usually requires that at least one end has a static Public IP. However, if you are installing a VPN router you can establish any number of tunnels using that one static IP. The remote end, if a VPN software client can use any IP static or dynamic, and if it is another VPN router, many (not all) can be used with a DDNS (Dynamic Domain Name Service) and a dynamic IP.
0
 

Author Comment

by:denverjaye
ID: 19667376
I know that you need both ends to have a Public IP endpoint for the VPN routers to be able to communicate with each other.  What I am finding is that a few companies are requiring that the addresses used inside the tunnel are Public IP addresses as well.  One of the nice things about a VPN tunnel is that you CAN connect two Private IP ranges over the internet using one.  All you have to do is either make sure the both companies are not using the same subnets or set up an intermediate network and use NAT.  There is no need for wasting costly Public IP addresses inside the tunnel.  My question is is this a new trend or are these few companies being unreasonable in their requirements?
0
 
LVL 78

Accepted Solution

by:
Rob Williams earned 375 total points
ID: 19667400
>>"you CAN connect two Private IP ranges over the internet using one.  All you have to do is either make sure the both companies are not using the same subnets or set up an intermediate network and use NAT."
Correct, and that is the norm. However, I too have run into a few situations, mostly with the automotive industry, that require all machines have a public IP as you have stated. I certainly wouldn't call it a new trend, as a matter of fact the ones I have run into are rather antiquated. This is why we are having to adopt IPV6, as you say we are running out of public IP's due to this. I suspect with IPV6 you may see more of it. Every device including your refrigerator may have it's own public IP. According to a recent Cisco web session I saw, IPV6 will allow every person on earth to have more than 1000 public IP's. Manage those <G>.
0
 
LVL 78

Expert Comment

by:Rob Williams
ID: 20881258
Thanks denverjaye.
Cheers !
--Rob
0

Featured Post

 The Evil-ution of Network Security Threats

What are the hacks that forever changed the security industry? To answer that question, we created an exciting new eBook that takes you on a trip through hacking history. It explores the top hacks from the 80s to 2010s, why they mattered, and how the security industry responded.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Sometimes, you want your microsoft VPN to route all the traffic to the remote network. Usually your employer network. This makes it possible to access all the nodes inside this remote LAN, even if they have no "public DNS" entries. To do so, you wo…
I recently attended Cisco Live! in Las Vegas, a conference that boasted over 28,000 techies in attendance, and a week of hands-on learning hosted by a solid partner with which Concerto goes to market.  Every year, Cisco displays cutting-edge technol…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
Suggested Courses

872 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question