R
Ryan Hanisco
If these are permanent VPNs and they are your main connection to the core,
you would do well to get something that is scaled for that kind of thing --
Cisco 3000 series VPN Concentrator or something of that ilk.
For the DHCP question, the answer is Yes. Just restrict the mask on the
DHCP scope to hand out the IP addresses. It is perfectly fine to have your
DHCP hand out any scope you want. What scope is actually handed to the end
device is determined by the subnet or VLAN requesting the IP address. The
routers will determine this, just make sure you have your IP Helper lines
and NATs configured to make the requests
you would do well to get something that is scaled for that kind of thing --
Cisco 3000 series VPN Concentrator or something of that ilk.
For the DHCP question, the answer is Yes. Just restrict the mask on the
DHCP scope to hand out the IP addresses. It is perfectly fine to have your
DHCP hand out any scope you want. What scope is actually handed to the end
device is determined by the subnet or VLAN requesting the IP address. The
routers will determine this, just make sure you have your IP Helper lines
and NATs configured to make the requests