Skip to main content

Site to Site VPN Setup

  • Slawcole95
  • Topic Author
  • Visitor
  • Visitor
11 years 6 months ago #38150 by Slawcole95
Site to Site VPN Setup was created by Slawcole95
Hi All.
Just wondering if you can help me. I'm working on an assignment at college where my task is to come up with a solution to connect 2 sites together, 125 staff. 1 is the head office and the other is another branch.

I'm thinking of going down the site to site vpn route. I found an article online which said the main equipment needed would be:
router
concentrator
firewall
client software

But any rough ideas of how much equipment I would need? And how everything would be set up?

Thanks in advance! :)
More
11 years 6 months ago #38154 by pavu
Replied by pavu on topic Re: Site to Site VPN Setup
Hello Slawcole95,

I can help you. But let me know your requirement in more detailed manner.

-Are you going to write the VPN software on your own, or are you going to use open source software for VPN implementation?

-give the diagram of your implementation.

nice day ahead.
More
11 years 6 months ago #38155 by rizin
Replied by rizin on topic Re: Site to Site VPN Setup
i don't think that 125 staffs in total will need VPN in your scenario.

1) Tell us exactly how many people need VPN in both the offices.

2) Currently what type of switches, router in your hand.

3) What sort of Operating system used by your office staffs.

4) Are you totally new to Networking or do you possess some Basic skills.

Known is a drop, unknown is an Ocean
More
11 years 6 months ago #38170 by Chojin
Replied by Chojin on topic Re: Site to Site VPN Setup
Its pretty easy I guess.

You have 2 offices with both connection to the internet.

Say:

[Office]----Internet---[Office]

The next logical step, is that every office has its own Firewall to connect towards the internet. So:

[Office---Firewall]---Internet---[firewall---Office]

Each office has on its turn network equipment for connecting clients and servers...

So lets say you need to have 100 people on the head and 50 on the branch.
With a couple of 48 port switches this would do something like:

Head: 3x 2960 switches. 1x Cisco Asa 5510
Branch: 2x 2960. 1x Cisco Asa 5510

The Cisco Asa 5510 is capable of doing IPSec VPN and even trunking to support 'router on a stick' and redundant interfaces.

IPSec is pretty straight forward.

Configure your phase-I and phase-II the same on both ends with the local and remote subnets mirrored.. and poof.. there is your connection :-).

CCNA / CCNP / CCNA - Security / CCIP / Prince2 / Checkpoint CCSA
Time to create page: 0.143 seconds