Welcome to ISAserver.org

Site-to-Site VPN with 2 WAN links

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA 2006 Firewall] >> Branch Office >> Site-to-Site VPN with 2 WAN links

Page: [1]

Message

<< Older Topic Newer Topic >>

Site-to-Site VPN with 2 WAN links - 8.Mar.2007 7:45:33 AM

eruc

Posts: 1
Joined: 8.Mar.2007
Status: offline

http://www.theimageplace.net/uploads/8fc59d8ce6.jpg

This scenario possible (see picture above)?? Or I must use 2 ISA servers for access Internet (and "Satellite" Internet) and separately 2 ISA Servers for Site-to-Site VPN ???

Client computers from MainOffice1 can accessing Internet Sites through MainOffice2 ISA Server WAN link ???
Client computers from MainOffice2 can accessing Internet Sites through MainOffice1 ISA Server WAN link ???

Post #: 1

Featured Links*

RE: Site-to-Site VPN with 2 WAN links - 20.Mar.2007 11:42:25 PM

habibalby

Posts: 126
Joined: 20.May2006
From: Kingdom of Bahrain
Status: offline

Hi,
With this Setup, have u tried disconnecting 1 of the WAN links? and to see the internet working or not.

ISA doesn't provide WAN links rudundency, instead use a Cisco Router that has the cabaplity of connecting two WAN links into onr Box and output represting one WAN connection which will link to ISA Server "External Interface".

For the Site-to-Site VPN Connection, you can link with another ISA Server located in the Branch office and all the Connectivity will be done via the External Interface of ISA Server located in the Main Office.

In this scenario, you cannot control the security aspects between the two offices since both offices has got WAN Connection "Specially the Branch office". Instead, let the Branch office and other Banches "If you have" Connecting to the internet all via the the Main office, and all the Access Rules and Policies are inheretance from the Main office Enterprise Policies.

Hope it helps!
Habibalby

_____________________________

For online help with ISA Server 2004 & 2006 SE or EE. Please call on +973-39228431

(in reply to eruc)

Post #: 2