More than 1 VPN

[Cees Beele]

We have a VPN running between a PIX firewall and a W2000
server but we want to work with more branch offices and
therefor need to setup more VPN's. We tried but when
assigning one VPN the other VPN will be disabled.
So the question now is can we have more than 1 VPN active
at the same time and how.

 

[Karl A Mikesell]

Does each office also have a W2000 server, or just client computers, RRAS
(W2K server) allows demand-dial interface, and static route can be
configured for each (i.e. VPN interface). This will require each branch
office have its own subnet for routing purposes, and allow Sites to be setup
in Active Directory.

If branch offices do not have a server, it is more work because each VPN
connections must have an account with the dial-in prosperities configured
with a static IP and static routes. This will be very time consuming
manually setting static routes for each dial-in account that each branch
office uses.

Of course RRAS must be running on the headquarters W2000 server, for each
branch office to connect.

You will get very good with the ROUTE ADD statement in this lesson.

Hope information helps

Karl Mikesell MCSE

 

[Michael Johnston [MSFT]]

This may be caused by the hardware connecting the Server to the Internet. Are you using a NAT router of any type. Depending on the hardware, some
implementations only allow a single connection through at a time. In some cases there were firmware updates that would allow more. In other cases, it was
simply not supported.

Thank you,
Mike Johnston
Microsoft Network Support
--

This posting is provided "AS IS" with no warranties, and confers no rights. Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm

Note: For the benefit of the community-at-large, all responses to this message are best directed to the newsgroup/thread from which they originated.

 

[Cees Beele]

We have one location where we have a W2000 server with ISA
and many locations with a PIX 515 firewall. All the PIX
location are connected to each other with VPN's. Now we
want the PC's on the network where the W2000 server is to
connect to servers which are on 3 different "PIX" sites.
So we set up a VPN (not with ISA) with the 1st and that is
working fine, from both networks they can reach each
other. And then we defined the 2nd VPN (IP Security
Policy) to the next site but when assigning this one the
1st VPN will be disabled.

Cees