ADSL and VPN

[cm.leung]

Dear Sir,

We would like to link up all branch offices in China (about eight offices) and make use of ADSL and cisco VPN. Which model is suitable for it? there are about 30 - 50 staff in each site. we would like to have following services:

1. full mesh of VPN connections among each office

2. support in/out internal traffic (via VPN)

3. Watch guard firewall in between internal network and cisco router

4. circuit is using ADSL

5. cisco route supports ADSL and VPN

the diagram is as following:

internat network -----firewall -------cisco router ----- ADSL -------Internet

+---- DMZ (one web server, connected to firewal DMZ)

Could you enlighten me or advise me how to build the network? Thank you very much.

Best regards,

CM Leung

[p-hogan]

Hi

You could use a 1700 router with ADSL capability, but if you want to deploy VPNs you would want to terminate them on the firewall (not outside - assuming you also used the 1700 for VPN functionality)

The VPNs could be terminated on the Watchguard or you could buy a PIX 515E (DMZ bundle with 3 interfaces and having VPN hardware module built-in) for each site and place them inside the 1700. The PIXs could run VPN tunnels to each remote site.

[cm.leung]

Dear p-hogan,

Thank you for your mail and advice. Does it support a web server in DMZ for public users to access? The circuit is using China Telecom ADSL with dynamic IP address. BTW, could you send me the sample configuration for VPN? what encryption method do we use? how do we enable it? Thank you for your advice.

Best regards,

CM Leung