Site-to-site VPN solution (software) in VMWare ESX/Vsphere4

Posted on 2010-01-01
Last Modified: 2012-06-27
I have the following situation:

A clothingstore chain that has several stores, and a headquarters.
At the headquaters there is a ZyXeL USG100 with dual WAN. The stores connect through VPN (built in modem). This works fine.

They want to expand, and I have offered them a hosted exchange solution. This will be placed on our VMware Vsphere/ESX4 solution in a datacenter.
Since this is a virtual solution, I need a software solution (site-to-site) to connect to the USG at the headquarters. I can obtain singlepoint-to-site using the Greenbow VPN client, but this limits me. It will only allow me to reach the network FROM the VPN, and not TO the VPS from the network.

How do I make a site-to-site connection, using software clients? Preferently a freeware version, but this is not essential... (These are IPSec tunnels)

Question by:redworks
    LVL 22

    Accepted Solution

    I would have a look at the following article:

    This particular document is for connecting a Windows Server 2003 machine to a non-Windows device via an IPsec tunnel, which should fit the bill if you're just trying to establish a link to the USG100's LAN.
    LVL 4

    Expert Comment

    Do you need a VPN ? .. if it's just hosted exchange can't you do outlook with RPC over https ?

    Author Comment

    Yes I need VPN.
    LVL 22

    Expert Comment

    by:Jody Lemoine
    Did that Microsoft article help at all?  You should just be able to use the Windows Server's internal IPsec capabilities to accomplish this.
    LVL 22

    Expert Comment

    by:Jody Lemoine
    Did this work for you?

    Author Comment

    I've tried everything the article describes, but I can not get this to run.
    My situation:

    I have a network at the company headquarters (HQ), and I have stores (ST1, ST2, etc).
    At the HQ, I have a ZyXEL USG100. The stores (ST1, ST2, ... ST11, etc) connect to the USG100 using IPSec.

    The HQ has
    and the stores have and (and so on).
    This works great. I can reach all subnets from HQ and vice-versa.

    Now, the problem comes in here:
    I have a VPS in a datacenter, remote (not in a store or HQ), that runs Windows 2003 Small Business edition. I installed it with 2 NICs. 1 LAN side, 1 WAN side.
    I ran the wizard using the option "direct broadband connection". This way, the SBS2003 server also works as a gateway/firewall.
    I have setup the WAN side with an IP XXX.XXX.XXX.XXX / (outside, internet IP address) and the LAN side /

    I follow this guide exactly, but I still can not ping (USG100 @ HQ) from the SBS2003 server (

    Can someone please take me through a step by step instruction with these values? I have been working on this for ever...

    Note: I use DES/SHA1/DH1 for both Phase 1 and 2. I use a pre-shared key to authenticate.

    Thank you!!

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Maximize Your Threat Intelligence Reporting

    Reporting is one of the most important and least talked about aspects of a world-class threat intelligence program. Here’s how to do it right.

    #Citrix #Citrix Netscaler #HTTP Compression #Load Balance
    Don’t let your business fall victim to the coming apocalypse – use our Survival Guide for the Fax Apocalypse to identify the risks and signs of zombie fax activities at your business.
    Teach the user how to install and configure the vCenter Orchestrator virtual appliance Open vSphere Web Client: Deploy vCenter Orchestrator virtual appliance OVA file: Verify vCenter Orchestrator virtual appliance boots successfully: Connect to the …
    After creating this article (, I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

    779 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    9 Experts available now in Live!

    Get 1:1 Help Now