Can it be done? 2

[beholder95]

I'm looking to create VPN Tunnels from 3 remote offices to the main offices to allow access to network resources, our Server, and to use IP Phones.
Each office will have their own T1 and i was wondering if there was a way for these offices to use their own T1 for all traffic except for traffic that needs the VPN (So just for the IP Phones, Active Directory, and access to one server). This way they wouldn't be using all of our bandwidth when they have plenty of their own.

Thanks for any ideas.
- Andy

 

[SonicWALLInstructor]

Hi Beholder95 welcome back to the forum,

Yea this "can be done". By the very nature of VPN, it sets up something called "Split Tunnel" which means that all Internet traffic goes out it's own Internet link (T1); while all VPN related traffic (all traffic destined for your local sites) will be directed through the VPN tunnel. Therefore by creating a VPN tunnel with SonicWALL it will automatically set up VPN with the Split Tunnel feature on.



Roger L White CISSP, CISA, CISM, GSEC
Certified SonicWALL Instructor
Security Team
Invenio Technology
(212)244-4994 ext. 715
(917)326-0386
Need Help call anytime.

 

[beholder95]

Really? So if someone puts in a

http://www.address.com

in IE they won't be going through the VPN. SO due to this i'd assume i couldn't use my DHCP server (in the HQ office) to provide IPs could I? Would i have to enable the DHCP server on the sonicwall in each office?

Thanks,
Andy

 

[SonicWALLInstructor]

Hi Andy,

For the best design and trouble free solution you should enable DHCP in each site on the firewall. If you do it the way you suggested then if the DHCP server goes down none of your sites will be able to obtain an IP. This will hinder any network communication via VPN or Internet. I know you don't want that.

Roger L White CISSP, CISA, CISM, GSEC
Certified SonicWALL Instructor
Security Team
Invenio Technology
(212)244-4994 ext. 715
(917)326-0386
Need Help call anytime.

 

[beholder95]

Thanks for your reply. I agree. That's actually how its ran now with the MPLS Vpn, the routers in the remote offices provide DHCP. So i'll keep that same model, just swap the router for sonicwall.

Thanks!
- Andy

 

[SonicWALLInstructor]

Good move Andy. If my post was helpful can you please click on "thank... for this valuable post. That way I and others from SonicWALL can track the how helpful and effective the posts are.

Roger White CISSP, CISA, CISM, GSEC
Certified SonicWALL Instructor
Network Security Team
Invenio Technology
(212)244-4994 ext. 715
(917)326-0386
Need Help call anytime.