VPN What to do ???

emance · ‎02-03-2004

Hi,

I have a W2k network that I must provide VPN access for mobile users(10-15). In place is a Cisco 1720 router. What would be best? Forward IPSec port to W2k server and setup as RRAS server to authenticate and provide access or upgrade router and use Cisco VPN client software? How do you forward ports on the 1720? IOS ver 12.2. I am using the CLI, is it easier to use SDM? I would have to upgrade and load SDM.

The laptops are new Dell XP Pro.

Thanks,

Eric

mostiguy · ‎02-06-2004

I am a MS guy (2 MCSE tracks, admin > 20 MS servers), but I always advocate separating the vpn from the server environment. If your vpn is dependent on a server being up, then when it is down, you cannot remotely diagnose the problem.

You can upgrade the router, or possibly put a pix 501 or 506e behind it. If you have > 1 legitimate ip, I would probably look at using them to route to the pix behind the router.