Site to site VPN
Hello everyone. I have a question, and would be grateful for some help. It's like this.
I inherited a pre-existing condition of network in one company. Company has offices in two locations, and what is been suprising two (separate) domain's with no vpn between them. Domain subnets are different - location 1 is 192.168.1.0/24, and location 2 is 192.168.0.0/24. Location 1 has about 50 clients with one win 2003 DC and one linux gateway/firewall. Location 2 had about 20 clients with only one win2008 DC (was gateway WITHOUT firewall or anything) and i added separate Linux that is now gateway/firewall for that domain. Both locations are behind ADSL modem (no routing or VPN possible) with dynamic public IP (we have dyndns service).
The question is, what would be steps for creating site to site VPN between those two location if possible using only what is already there. I would be more willing to create routers on separate linux machines rather than buying hardware vpn capable routers.
And also, what would be best practice for domains, to leave as they are or to put everything in single domain, or promote location 2 domain as child domain on location 1 domain... Many questions but i draw a diagram below for better realizing, i more or less put everything in it (VPN as it should be is in center of image) as my English is not as good, so me typing this question is pretty challenging.
Thanx in advance.
I inherited a pre-existing condition of network in one company. Company has offices in two locations, and what is been suprising two (separate) domain's with no vpn between them. Domain subnets are different - location 1 is 192.168.1.0/24, and location 2 is 192.168.0.0/24. Location 1 has about 50 clients with one win 2003 DC and one linux gateway/firewall. Location 2 had about 20 clients with only one win2008 DC (was gateway WITHOUT firewall or anything) and i added separate Linux that is now gateway/firewall for that domain. Both locations are behind ADSL modem (no routing or VPN possible) with dynamic public IP (we have dyndns service).
The question is, what would be steps for creating site to site VPN between those two location if possible using only what is already there. I would be more willing to create routers on separate linux machines rather than buying hardware vpn capable routers.
And also, what would be best practice for domains, to leave as they are or to put everything in single domain, or promote location 2 domain as child domain on location 1 domain... Many questions but i draw a diagram below for better realizing, i more or less put everything in it (VPN as it should be is in center of image) as my English is not as good, so me typing this question is pretty challenging.
Thanx in advance.
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Thank you both. You gave me a good place to start.
So long!
So long!
ASKER
1. make different network for two different networks(if possible same subnet)
Does that mean that addresses should be for example Location 1 192.168.0.1-192.168.0.100 and for location 2 192.168.0.101-192.168.0.25
What about domain names (leave like it is..)?
2.go for site to site ipsec based vpn
you can use linux/vpn box/firewall
Do you maybe have some example how to do it behind ADSL with dynamic ip ?
(Should i have static public ip on locations or it would work with dyndns name ?)
Thanks in advance.