DSL-based VPN Implementation

[kevino]

Design:

Hub and spoke VPN

Plan:

To implement a remote access VPN for one of our clients. Initially, we will connect one of the smaller branch offices (2-4 users) to the corporate network. Taking bandwidth requirements into account, we're considering the Cisco 1720 (corporate)and the cisco 806 (branch).

Both ends now have Internet access via DSL. Since this is our first experience with Installing/configuring VPN routers, what's the process of getting the VPN up and running over the existing DSL connections? Once the VPN is in place, they do not want users to have access to the Internet.

Also, what IOS software versions are required and what WAN interface modules must we purchase along with the routers in question (1720 & 806)?

Finally, with respect to security, IPSEC will be used to secure the traffic.

I know this is a lot to digest, but any advice or recommendations anyone might have would be very much appreciated.

Thanks,

KO

[ssoberlik]

There are a number of resources on Cisco’s website to help you configure and setup these routers for IPSEC. To choose the correct IOS version, use IOS planner. Login and go to http://www.cisco.com/cgi-bin/Software/Iosplanner/Planner-tool/iosplanner.cgi?. Choose the router you have, the features you want and choose the latest major release.

The sample configs and other resources are at http://www.cisco.com/cgi-bin/Support/PSP/psp_view.pl?p=Internetworking:IPSec and there is a VPN primer you should read before doing anything at http://www.cisco.com/warp/public/cc/so/neso/vpn/vpne/vpn21_rg.htm

[kevino]

Your suggestions have been very helpful. Thanks for taking the time to respond.