Solved

Tieing two networks together using VPN

Posted on 2007-11-24
1
316 Views
Last Modified: 2010-04-12
Hello,
I am trying to tie two networks together via VPN over two T1's. This has not been implemented yet and want to see if there is something I am missing/overlooking in my design. Just curious if anyone can analyze it and tell me I am a complete idiot or genious.

The basics of it is that I have a server sitting in the company HQ that hosts the POS system, Domain Controller and Exchange server. I have another point two cities over that need to use the POS System and Domain controller. I plan on using Cisco 1721 Routers to establish an L2TP VPN Connection between the two sites. Our shipping and receiving department, and a few company directors are moving to the Lynnwood branch, so this solution needs to work 24/7/365.

My concerns are the reliability of L2TP VPN being used 24/7, and proper configuration of the Cisco routers. I have a 1721 in the mail for me to play with before this whole thing gets implemented.

View my system design here: http://caseystrom.com/media/topog/

Thanks for your help in advance!
-Casey Strom
0
Comment
Question by:klo555
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
1 Comment
 
LVL 79

Accepted Solution

by:
lrmoore earned 125 total points
ID: 20342786
> this solution needs to work 24/7/365.
>I plan on using Cisco 1721
>My concerns are the reliability of L2TP VPN being used 24/7

I think these are the main points here. You need a reliable solution, but the 1721 is end-of-lifed product and I would not recommend them. I would recommend the newer 1841 T1 bundle with security features.

Generally speaking, the Cisco products and IPSEC VPN tunnels are extremely reliable, and the 1841's are particularly good.

There are many different points of failure where you need resiliency and dependability.
Power - make sure you have good UPS's on both ends. Make sure you have T1 surge protectors on the T1 lines on both ends

If you only have a single T1, then it is also a point of failure. Do you need a backup routing solution like DSL, or a 2nd T1? You need to monitor it for error conditions and be proactive with the telco at first signs of distress (errors or line resets).

If these are Internet T1's, then you are also at the mercy of many different providers and no Quality of Service guarantee, ever. There are issues outside your control if you rely on Internet for connectivity.

I would recommend going with a MPLS WAN connection from your telco. Or dedicated point to point T1. Since it would be a private network, it costs a bit more, but comes with Service Level Agreements that hold the telcos feet to the fire to be proactive on their own.

How redundant you make it is up to your budget. How much you budget depends on how much it costs per hour of downtime.
0

Featured Post

Ready to trade in that old firewall?

Whether you need to trade-up to a shiny new Firebox or just ready to upgrade from whatever appliance you're using now, WatchGuard has the right appliance for you! Find your perfect Firebox today with appliance sizing tool!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Secure VPN Connection terminated locally by the Client.  Reason 442: Failed to enable Virtual Adapter. If you receive this error on Windows 8 or Windows 8.1 while trying to connect with the Cisco VPN Client then the solution is a simple registry f…
I recently attended Cisco Live! in Las Vegas, a conference that boasted over 28,000 techies in attendance, and a week of hands-on learning hosted by a solid partner with which Concerto goes to market.  Every year, Cisco displays cutting-edge technol…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
Windows 10 is mostly good. However the one thing that annoys me is how many clicks you have to do to dial a VPN connection. You have to go to settings from the start menu, (2 clicks), Network and Internet (1 click), Click VPN (another click) then fi…
Suggested Courses

626 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question