Multiple Remote Site VPN - Low Bandwidth

Posted on 2009-04-22
Last Modified: 2012-05-06

I am wondering if anyone would know a solution to the VPN dilemma I have.

We have 6 remote offices and one main office. The main office has the Servers and 3 of the remote offices connect to a terminal server at the main office using an IPSEC VPN and also use VOIP h.323 between each other using an LG Aria system. I would like to connect all of the remote offices to the main office but the problem is that it has limited bandwidth options because of it's semi-remote location. ADSL2 (getting 800k upload) is the quickest we can get without paying some ridiculous amount per month.

At the moment I am using a SnapGear SG580 at the main office with Dual ADSL2 connections one for web/email traffic and one for the VPN for the largest remote site. We then have an SG560 with one ADSL2 connection for the other 2 remote sites. We then have an SG560 with an ADSL2 connection for the VOIP.

At all 3 remote sites we have SG560's with Dual ADSL2 Connections, one for VPN one for VOIP.

I have a few problems with this setup:

1. It is a spiderweb and it's growing, I would rather have everything consolidated rather than having so many devices at the main office.
2. The SnapGear's don't have integrated ADSL modems, I have brindged ADSL modems to the Firewalls which I find to be unreliable. I have to reset modems and the SnapGear probably once every week or two at one of the locations.
3. If I add 3 more sites it will be a nightmare at the main office.

Does anyone have any suggestions without spending a bucket load or am I in utopia thinking this is possible using ADSL2.

Thanks for any help,

Question by:jayman7
    LVL 10

    Expert Comment

    by:Vince Glisson
    So how are things in Utopia?
    This is a tough one, it was tough to just read about how this is all setup, you have a job on your hands. I have a few questions for you.
    The remote sites - is there a server and each one. How many clients in each site?
    What is the type of traffic that will be going back and forth between the main and the remote site?
    I have been in your shoes before, the problem is basic physics - trying to fit 5 gallons of data down a 1 gallon pipe. The more you add the worse it will get, if you had one or 2 remote sites and the main was ASDL then we can deal with it, but if the remote sites are pushin alot of data to the main and/or back then the only solution is bandwidth.
     My opinion may change a little based on the "what type of traffic" question...

    Author Comment

    HI MesaVince,

    Things not to bad in Utopia :P The remote sites don't have any servers they simply use RDP to connect the Terminal Server at the main site and probably have between 10-15 concurrent connections at one time. They also print back to the remote office which takes up bandwidth and also occasionaly scan pdf files to the head office and that's about it not including the VOIP.
    LVL 10

    Expert Comment

    by:Vince Glisson
    The bottle neck is the 10-15 RDP's coming in at the same time. Depending on how beefy your TS is i'll bet it works fairly well until they print something or scan something and if two people do it at the same time then down down down goes the response time.
    If i had the money i would put in a full T1 24 channel, not sure if you could get one, and another T1 split half for voip and half for data at the main, use the full T1 for the pipe to the remote sites. I have a similar setup at work right now and it works great. T1 is about $500 a month most places not sure if this will work for you...

    Author Comment

    Hi MesaVince,

    Yes I would love a T1 for $500, problem is that i'm in Australia and worse still I am in Tasmania so that would not be possible.
    LVL 10

    Accepted Solution

    Then i would approach your ISP there and see if they have a solution were you could get multiple dsl lines coming in and pipe then into "The Magic Box" and out the other side comes a bigger pipe, similar to load balancing a newtwork, i have done it with satilites where we took 3 of then and chained them together. So i think asking your ISP for some help would be the next step.

    Featured Post

    How to run any project with ease

    Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
    - Combine task lists, docs, spreadsheets, and chat in one
    - View and edit from mobile/offline
    - Cut down on emails

    Join & Write a Comment

    Problem Description:   Couple of months ago we upgraded the ADSL line at our branch office from Home to Business line. The purpose of transforming the service to have static public IP’s. We were in need for public IP’s to publish our web resour…
    Quality of Service (QoS) options are nearly endless when it comes to networks today. This article is merely one example of how it can be handled in a hub-n-spoke design using a 3-tier configuration.
    After creating this article (, I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
    After creating this article (, I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

    734 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    18 Experts available now in Live!

    Get 1:1 Help Now