Koozali.org: home of the SME Server

Obsolete Releases => SME 7.x Contribs => Topic started by: alext on September 14, 2006, 04:19:38 PM

Title: How do I implement Site-toSite VPN (SME to Win2003)?
Post by: alext on September 14, 2006, 04:19:38 PM

I need to make a site-to-site VPN connection between an SME 7.0 server and a Windows 2003 server.  

I have read the HOW TO article by Hans-Cees but it always refers to a configuration between two SME servers.

Will this work between SME and non-SME servers?

If not, does anybody have any ideas on implemetation?

Thanks
Alex

Title: How do I implement Site-toSite VPN (SME to Win2003)?
Post by: jonroberts on September 18, 2006, 11:11:37 AM

I'm no expert on this, but know enough to think that unless you are, you may want to avoid this.

The VPN connections on SME will mostly use IPSEC security, Windows 2003 (without add ons) doesn't.

In my (limited) experience, creating VPNs can be interesting enough when both ends of the tunnel are the same, if they're different, you can have all sorts of 'fun' trying to match the settings.  Of course its possible & I'm sure there are lots of folk in this forum who can do it, but it depends on how you value your time and the 'learning opportunity'.

Could you find an old PC to build as an SME server at the Win2003 end & then use one of the well documented SME contribs at both ends?  Alternatively, as a pair of decent VPN routers are likely to cost around £250 - £300 (GBP), is this an expence that you can justify?

Title: How do I implement Site-toSite VPN (SME to Win2003)?
Post by: duncan on September 19, 2006, 03:16:32 AM

If the howto was for openvpn then it shouldn`t be too hard. There are openvpn installers for both linux and windows.

As jon said (and I tend to agree) plenty of modems now come with some form of Vpn capability. Zyxel are fully featured and really quite price effective.

Title: How do I implement Site-toSite VPN (SME to Win2003)?
Post by: jonroberts on September 19, 2006, 10:46:46 AM

Quote from: "duncan"

If the howto was for openvpn then it shouldn`t be too hard. There are openvpn installers for both linux and windows.

This is good advice.  I didn't realise there was an OpenVPN solution for Windows too.  My point was that its much easier to configure a VPN if you are using the same system at both ends & so OpenVPN looks like its worth a try.