What would be better choose: C2S or S2S VPN?

[jan.mierczi]

Hi,

I am designing a site and need decide what type VPN use.

What VPN type would be better choose so that users and admins leaverage maximum benefits from this design? And why?

I uderstand diference between how both work but do not see advantages or criteria when we need to use which one. 

[Karsten Iwen]

You better use S2S VPNs when you need to control/manage the whole network where the remote users reside. If you only have C2S VPN, you are not able to send printjobs to local printers from the main site or login to network equipment.

[jan.mierczi]

Hi,

Thank you so much for your answer! :)

However, your words sounds strange. We have huge sites on C2S. When tunnel has been established your can get access to rest of switches by internal, loopback, IP-addressing. Right?

You need management IP falls down in crypto-map.

One difference: C2S is disconnected often due to loose pubic IP from DHCP pool.

Second tiebreaker: if ISP provided static IP.

As far as I know S2S is more stable due to static IP manually configured on the WAN interface.

Any other design concerns, conditions, tie-breaker?