• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 293
  • Last Modified:

Site-To-Site VPN question - Site-To-Site VPN Tunnel and local Internet access possible?

Hi, this is a newbie question on site-to-site VPN,

We want to link up two small offices (26 staff in one, 7 in the other) across asia and Europe.  The staff in Europe office will access the file servers in Singapore and both office uses SDSL or VDSL (4Mbps/1Mbps and 20Mbps/2Mbps).

Previously I understand several companies implemented VPN and route all Internet traffic in/out only via one site for security/firewall management.

However we want all Internet traffic to be routed locally (in/out) to local country ISP rather than traversing VPN tunnel and congesting one site.

Can site-to-site VPN tunnel allow local Internet access? or once a site-to-site VPN tunnel is establish, ALL traffic will be routed over the VPN tunnel and out through one gateway.

Many thanks
Joo
0
artradis
Asked:
artradis
  • 2
4 Solutions
 
DewFreakCommented:
Each site will use it's own internet provider unless your specifically configure your networks to funnel all traffic thru the tunnel.  Depending on the gear you use will also determine this as some lower end gear does not even give you the option to force all VPN traffic.  Only the local network traffic will be routed across your VPN tunnel.
0
 
BMPTSCommented:
Yes you can route internet traffic just to the ISP, while routing the "company" traffic via VPN.

The easiest way is by destination, ie network 1 subnet, VPN'd to network 2 subnet (of course the public IP's building the tunnel) and if the destination is not one of your company networks your firewall should simply route to your ISP without encryption for internet traffic.

Just by building a good VPN tunnel with your firewalls Default external route being correct, you should be fine.

I will attach an example network diag asap
0
 
BMPTSCommented:
Here ya go... IP's are just examples.
NetExamp-1.pdf
0
 
devangshroffCommented:
yes do split tunuling on vpn , this will allow vpn as well as internet traffic.
0

Featured Post

Concerto Cloud for Software Providers & ISVs

Can Concerto Cloud Services help you focus on evolving your application offerings, while delivering the best cloud experience to your customers? From DevOps to revenue models and customer support, the answer is yes!

Learn how Concerto can help you.

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now