access vpn

[tetrabim]

i need some suggestions. there is a vpn project. and i concluded the central design but i could't decide how remote clients will connect. there is no problem with one user site. there are some sites that there are more than one client that must connect to internet as dial-up. i'm thinking to use an ip-sharer device (which is not NAT capable)and connect to the VPN server by NAS initiated.(initiated at local ISP POP with L2TP )

with this scenario i will use terminal services at central site.

is there any problem, or drawbacks with this scenario.

please write your suggestions,and comments.

namik

tetra eng.

[b.speltz]

Well, my first question is what are you using for your VPN tunnel termination point at the main site? They must use real IP addresses, so if it’s just a RAS server you’ll never get the ip-sharer device to work with it. If you’re using a firewall or a router, terminate them firewall to firewall or router to router. If none of the above is possible use VPN client software between the remote user and the main site. You might want to take a look at Cisco’s VPN concentrators. That is what we use and they work great.