Connecting Corp to Branch Office

[Jordan Turner]

VPN Servers are Windows 2003 Standard Servers.

I have been reading several articles on the Net and MS site, and basically
have gotten a bit confused. I am looking for you all's input on my
scenario.

Basically I will have a Corp site (30 users), and a branch office site (5-10
users). They will or should be part of the same internal DNS / AD Domain.
I have T1 at the Corp. site and will have Business DSL or Satellite at the
branch office site.

Goal is to connect the two sites as if they are physically connected - of
course this is VPN. I've read using demand-dial VPN for this. Question
though is the function of having to connect out based on someone trying to
access the other sites resource - what I want is a continous connection.

Ultimate Goal:
--------------------

(1) Continous connection (DC will be at both sites and a VPN gateway/router
server (MS RRAS Windows 2003) for connection)

(2) Have Windows 2003 / RRAS gateway at each site to connect each other - a
continous connection - NOT just on demand.

Question:
--------------

Is this still using demand-dial interface of RRAS?


If you guys have some ideas and suggestions, please provide them. Thank
you.

 

[Robert L [MS-MVP]]

Yes, demand-dial is 24/7.

Site to Site VPN
The username must match the name of a demand-dial interface ... Configure the
Demand-dial Interface on the Answering Router. ...
www.chicagotech.net/site%20to%20site%20vpn.htm

Bob Lin, MS-MVP, MCSE & CNE
Networking, Internet, Routing, VPN Troubleshooting on http://www.ChicagoTech.net
How to Setup Windows, Network, VPN & Remote Access on http://www.HowToNetworking.com
VPN Servers are Windows 2003 Standard Servers.

I have been reading several articles on the Net and MS site, and basically
have gotten a bit confused. I am looking for you all's input on my
scenario.

Basically I will have a Corp site (30 users), and a branch office site (5-10
users). They will or should be part of the same internal DNS / AD Domain.
I have T1 at the Corp. site and will have Business DSL or Satellite at the
branch office site.

Goal is to connect the two sites as if they are physically connected - of
course this is VPN. I've read using demand-dial VPN for this. Question
though is the function of having to connect out based on someone trying to
access the other sites resource - what I want is a continous connection.

Ultimate Goal:
--------------------

(1) Continous connection (DC will be at both sites and a VPN gateway/router
server (MS RRAS Windows 2003) for connection)

(2) Have Windows 2003 / RRAS gateway at each site to connect each other - a
continous connection - NOT just on demand.

Question:
--------------

Is this still using demand-dial interface of RRAS?


If you guys have some ideas and suggestions, please provide them. Thank
you.

 

[Bill Grant]

Just to expand a bit on Bob's comments.

The dial on demand is optional. You can connect manually and configure
it to stay connected. But you still need the demand-dial interfaces. They
are required to allow you to configure the routing. The routes are linked to
the dd interfaces.

You can think of the name of the dd interface as being a symbolic name
for the connection if you like. When you connect, you use the name of the dd
interface (on the answering router) as the username, so that you connect to
the correct interface and set up the correct routes.

 

[Jordan Turner]

Thank you both.

Just to expand a bit on Bob's comments.

The dial on demand is optional. You can connect manually and configure
it to stay connected. But you still need the demand-dial interfaces. They
are required to allow you to configure the routing. The routes are linked
to the dd interfaces.

You can think of the name of the dd interface as being a symbolic name
for the connection if you like. When you connect, you use the name of the
dd interface (on the answering router) as the username, so that you
connect to the correct interface and set up the correct routes.