asked on
Hi,
I am trying to set up remote access VPN with a 1841 router as the server, but I am having trouble trying to work out what type of VPN connection i need?
Site to site connection I am OK with, this is remote pc's connecting in.
Easy VPN, ipsec L2TP, SSL VPN, SSL VPN web.... this list seems to go on...
In the digram below you can see that i have a 1841 with a number of internal networks. The only one I want the VPN CLIENTS to talk to is the 172.16.1.0 / 24 network. So ideally the VPN host would be assigned a IP address from this range, and run "split tunnel (??).
so any traffic it sends to a 172.16.1.x address is sent over the VPN to the network, and any other traffic is routed as normal out to the internet from the client.
My question is what's the best way to achieve this? I see there is a SSL web client, an SSL secure desk top client, the CISCO VPN client. AS well as the inbuilt windows VPN client?
The inside network is only a test environment that I have my CISCO lab set up in, and a few other staff have AD labs and other test networks. So we are all IT staff who need the VPN access. All I need is some suggesting how to set this up.
And also can I have the Clients assigned a IP address with in the 172.16.1.0/24 network range so the appear to have one connection inside that network (so can talk to the test equipment) and there local connection/wireless left as normal so the client can access there local network and the internet as normal?
The two links below are just some pages I have come across that I am sure I can use but I have to be careful as the 1841 runs a production web serve so I can't afford to get it wrong. This is why I am asking before I make any changes.
Thank you
http://www.cisco.com/en/US/docs/routers/access/1800/1841/software/configuration/guide/ezvpn.html
http://www.cisco.com/en/US/products/sw/secursw/ps2308/products_configuration_example09186a008032b637.shtml
VPN.jpg
I am trying to set up remote access VPN with a 1841 router as the server, but I am having trouble trying to work out what type of VPN connection i need?
Site to site connection I am OK with, this is remote pc's connecting in.
Easy VPN, ipsec L2TP, SSL VPN, SSL VPN web.... this list seems to go on...
In the digram below you can see that i have a 1841 with a number of internal networks. The only one I want the VPN CLIENTS to talk to is the 172.16.1.0 / 24 network. So ideally the VPN host would be assigned a IP address from this range, and run "split tunnel (??).
so any traffic it sends to a 172.16.1.x address is sent over the VPN to the network, and any other traffic is routed as normal out to the internet from the client.
My question is what's the best way to achieve this? I see there is a SSL web client, an SSL secure desk top client, the CISCO VPN client. AS well as the inbuilt windows VPN client?
The inside network is only a test environment that I have my CISCO lab set up in, and a few other staff have AD labs and other test networks. So we are all IT staff who need the VPN access. All I need is some suggesting how to set this up.
And also can I have the Clients assigned a IP address with in the 172.16.1.0/24 network range so the appear to have one connection inside that network (so can talk to the test equipment) and there local connection/wireless left as normal so the client can access there local network and the internet as normal?
The two links below are just some pages I have come across that I am sure I can use but I have to be careful as the 1841 runs a production web serve so I can't afford to get it wrong. This is why I am asking before I make any changes.
Thank you
http://www.cisco.com/en/US/docs/routers/access/1800/1841/software/configuration/guide/ezvpn.html
http://www.cisco.com/en/US/products/sw/secursw/ps2308/products_configuration_example09186a008032b637.shtml
VPN.jpg
Learn from the best
Network and collaborate with thousands of CTOs, CISOs, and IT Pros rooting for you and your success.
Andrew Hancock - VMware vExpert
See if this solution works for you by signing up for a 7 day free trial.
Unlock 1 Answer and 10 Comments.
Try for 7 days”The time we save is the biggest benefit of E-E to our team. What could take multiple guys 2 hours or more each to find is accessed in around 15 minutes on Experts Exchange.
Our community of experts have been thoroughly vetted for their expertise and industry experience.