Best practice for VPN & NAT server

[Thomas Brooks]

I want to use my Win2003 RRAS server as a gateway server. It will handle
incoming VPN connections and outgoing Internet requests. I have Symantec
Web Security installed on the box that my clients all point to for web and
ftp. I have three nics on the box.

For the best performance would you recommend using one nic for the internet
connection, one nic for the VPN connection to the rest of the LAN, and one
nic for the LAN to internet connection? I want to have the best performance
for my VPN users and the outgoing traffic for my users browsing the
internet.

 

[Bill Grant]

I doubt if you will be able to set up separate gateways for Internet
access and VPN. The problem is that both need to have default routes to the
Internet! There isn't really any way to do that successfully.