fegul
Premium
join:2004-08-23
united state
| Connecting two LANS over the Internet; Best way?
What would be the best way to connect 2 remote office LAN's together over the internet? (We'll just assume they're offices) over the internet?
Say Office 1 needs access to documents on a server at Office B and vice-versa.
Would a server-to-server VPN be the best way?
--
|My Blog|Fegul.com| |
|
janderso1
Jim
Premium,MVM
join:2000-04-15
Saint Petersburg, FL | I would use a pair of VPN routers such as the Zywall 5.
--
Jim Anderson |
|
fegul
Premium
join:2004-08-23
united state
1 edit | OK, so a VPN would be the best solution over the internet.
While I'm here, I guess I have another question.
Subnets are used to basically segregate network traffic from groups of computers right?
Does this mean that a computer in one subnet cannot access resources on a computer in another subnet?
I guess I've had these questions for a while, and never really asked 
--
|My Blog|Fegul.com| |
|
janderso1
Jim
Premium,MVM
join:2000-04-15
Saint Petersburg, FL
| For a computer in one subnet to access computers in another subnet a router must route traffic between two subnet. My home network has two subnets and my Zywall 5 routes and controls traffic between the subnets.
For a Zywall to Zywall VPN solution the two locations must be on different subnets.
--
Jim Anderson |
|
fegul
Premium
join:2004-08-23
united state
| That was really helpful, thanks a bunch!
I've been googling a bunch about subnets, but it can be difficult to get a good answer sometimes.
--
|My Blog|Fegul.com| |
|
Anav
Sarcastic Llama? Naw, Just Acerbic
Premium
join:2001-07-16
Dartmouth, NS
2 edits | Check out your PM/IMs
Oh yeah and some threads for mind numbing options.
»How to connect remotly to a PC via the Internet
»The most secure way to use Windows Remote Desktop |
|
TerryMiller
Premium
join:2003-10-23
| reply to fegul
A subnet is just another name for network. You can access google even though it's on another network because routers route between the networks. Private subnets on a lan require the same routing. This ip routing takes place on layer 3 of the OSI model, independent of the layers below it (ethernet, fiber, atm).
What a vpn brings to the party is a new virtual route that appears to be directly connecting the two networks. A traceroute between two hosts on the separate networks shows only one hop, the encrypting router even though the packet traverses the public internet to get from place to place.
In most cases the data is encrypted while on public networks, there's a checksum that proves the packet came from the vpn partner and wasn't tampered with in transit.
Server to server VPN's would work, but the server would then have to be the gateway to the other lan. With router to router the whole lan (if allowed) is automatically connected.
|
|
fegul
Premium
join:2004-08-23
united state
| reply to Anav
I was familiar with the SSH tunnelling for Remote Desktop, but wasnt sure how that would work for connecting 2 networks together.
The Router to router VPN solution does make sense, I'm guessing it would IPsec or something like that for security
Thanks for that explanation of subnets TerryMiller  . The OSI model is also something I've been looking at too, so that helped.
--
|My Blog|Fegul.com| |
|
army dude
Premium,MVM
join:2002-12-17
The Internet
| reply to fegul
Another look at subnets. Take this network for example....
172.16.0.0 The subnet mask is 255.255.0.0. This is one huge class B network. It would have roughly 65,000 nodes, or different IP addresses, 172.16.0.1 through 172.16.255.254.
This network is not subnetted. 255.255.0.0 is considered the default subnet mask for a class B network.
(Class A default 255.0.0.0)
(Class C default 255.255.255.0)
In binary, the subnet mask looks like this:
11111111.11111111.00000000.00000000
In order to subnet, we would need to convert some of the bits in the subnet mask. Lets use 8 bits.
So now,
11111111.11111111.11111111.0000000
would give us a subnet mask of 255.255.255.0, and it would subnet our class B network into 254 differnet networks, each one with 254 differnet nodes.
172.16.1.1 - 172.16.1.254
172.16.2.1 - 172.16.2.254
172.16.3.1 - 172.16.3.254 etc,etc,etc.
Although this part isn't etched in stone, you generaly drop each bottom address and top address in each network. The bottom address is considered the network address...
example: 172.16.1.0
and the top address is considered the broadcast address
example: 172.16.1.255
Or in the case of the un-subnetted class B network:
172.16.0.0 is the network address
172.16.255.255 is the broadcast address
Also keep in mind you can use less than 8 bits to subnet with. This is where you see subnet masks like 255.255.224.0, 255.255.240.0, 255.255.248.0,255.255.252.0, etc.
And, you can use more than 8 bits (supernetting).
The more bits you use for the subnet mask, the more subnets are yielded, with fewer hosts per subnet. |
|
RR206
join:2001-12-11
Renton, WA
clubs: | reply to fegul
2 bargain basement Dells, your favorite Linux distro, & »www.ipsec-howto.org/ . |
|
