VPN between 2 remote sites?

Question

Hi,

I'm currently (attempting!) to configure a network for a family buisness of ours,

We have 2 sites (HQ and remote office) and need to bridge the two networks over the internet.

HQ - 10.1.x.x
Remote Office - 10.2.x.x

Both sites will each have a single Windows 2003 Standered server to manage AD, DNS, DHCP etc locally.

What is the best way to go about VPN'ing the two servers? I understand I'll need a site-to-site connection - thus allowing me to share the AD domain & files between the two servers?

Should I stick with the Windows 2003 built-in VPN or opt for something like OpenVPN?

The other issue I have is either one of the servers could be offline whilst the other is online - would the VPN able to re-try connections untill its available? Or would this be a issue?

Also, with the above setup - would it be possible to also run a client-connect VPN along with the site-to-site connection, so remote users can connect in to their local server from home?

Any help is much appreciated!

Answer 1

do a site to site vpn with vpn capable routers. SOnic wall has a great easy to use product line. yu will need static ips or ddns at each site.

Answer 2

I'd spend a little extra and get a couple of vpn enabled hardware routers and save yourself a ton of headaches. OpenVPN works but it's not fun to try and configure. Plus the hardware route would let you do everything you've mentioned above without much hassle aside from a onetime configuration of the routers vpn "wizard"

Answer 3

basically placed: SSL runs ON actual of accepted TCP and UDP protocols, the very similar protocols you employ daily to browse the internet, percentage information, etc. IPSec besides the indisputable fact that, runs below those TCP and UDP protocols. In day by day use this suggests an SSL VPN is way less stressful to apply, as your WiFi router and different kit see it as generic TCP/UDP site visitors for which they were equipped. while IPSec needs particular help contained in the WiFi router and different kit used. word: extra modern-day implementations of IPSec must be tunneled in TCP/UDP similar to SSL VPN's, besides the indisputable fact that it is form of of a hack and could no longer continually paintings besides as a organic SSL VPN.