Ip addressing over 3 lans using IPVPN technology?

[Brandon779978]

hi... i'm currently creating a fictional network diagram for school...

the requirements are pretty minimal but i do alot of extra studying and whatnot... tryin' to get my head around all this stuff ... forgive me if i sound like a retard... i'm in a very basic data/tele communications class and we just aren't touching ANY of this stuff yet... just tryin' to get ahead on some real world knowledge...

my question is does anybody have any tips on ip addressing over 3 separate lans while implementing site-to-site VPN's to serve as the "WAN"?... the lans are running ethernet w/star topology with one server at each facility... i planned on just doing a couple subnets for each LAN and using private IP addressing at each site...

now, each site would need to have its own static ip address for the proxy server... then i could use private ip addressing throughout each... as i've understood so far, each node within each facility could communicate with any other node in either of the two lans via: first the network portion of the static ip(that would get the data to that particular lan)... then it would look further into the packets at the mac address to deliver data to an individual node... am i close?

so if this is true... what other things come into play when setting up site-to-site vpn's as far as the ip addressing goes... i know i would need to implement VPN capable routers, how about switches?

also, if anybody has any links or info they could share on this subject that would be great... i keep finding general info on what a vpn is as opposed to detailed info...

thanks for any help, B

 

[fs483]

Well one way would be to use routers and have configure routing between them (BGP or something). I've never done it but it should work. You can also use Cisco Pix firewalls at the 3 sites and have 2 vpn tunnels from each pix to the other 2 pixes in a meshed network. I've done it but only with 2 sites, 2 or more sites is the same thing, just different IPs for the configs. In your case, it would be in a triangle configuration. It also depends on the fictional budget you wish to put on it. Your switches would only be in the "inside part" of your lan. I can be directly after the router/firewall. If you have a proxy with 1 network card then nothing special, just connect all your devices to your switch and configure all your devices to have all Internet data go through the proxy server. If you have 2 nics in your proxy, then connect the router/firewall to one nic of your proxy, then connect the second nic of the proxy to your switch and also connect your other hosts to your switch. Go to Cisco's website and do a search for "example site to site vpn", they have examples of configurations, equipment needed and pictures explaining everything.