A Site-to-site Vpn

By Author: Shirley Green
Total Articles: 129
Comment this article

To create a site-to-site tunneled connection, you can install a MCSE Certification as a gateway on each of two networks. A demand-dial connection is then configured between the two VPN servers. A demand-dial connection is a connection that is completed when traffic for a specified network is received by one of the gate-way servers. All traffic routed across this connection is encrypted and tunneled through the VPN, while traffic from client computers to the VPN server on one network and between the VPN server on the other network and the data's final destination is not tunneled or encrypted.
See Also For more information about site-to-site VPNs, see the "Lesson 3: Designing Demand-Dial Routing Between Private Networks" topic later in this chapter.
A site-to-site VPN can be created between two Windows Server 2003 servers, between two Windows 2000 computers, and between a combination of the two. This type of VPN is also referred to as a router-to-router VPN or gateway VPN. In this book, the term site-to-site VPN will be used to describe the VPN, and the term VPN router will ...
... be used to describe the configuration of the MCSE Exams computer participating in the connection.
Figure 7-3 shows a site-to-site VPN. In the drawing, the portions of the communication that are tunneled and encrypted, and those that are not, are indicated.

Redundancy is provided by establishing multiple VPN servers. If one VPN server fails, client sessions are disconnected. However, clients can connect again by using a differ?ent VPN server. To reduce the necessity to configure multiple connectoids (one for each VPN server), use Network Load Balancing. However, don't confuse redundancy with load balancing. Load balancing can be provided via round-robin Domain Name System (DNS) or clustering.
Round-robin DNS is configured by entering several weighted host records that use the same DNS name but several IP addresses. This provides load balancing because each request for name resolution will provide one of many IP addresses and thus be directed to a different computer. However, DNS has no way of knowing when a spe?cific VPN server is not available. The IP address for a server that is not available will be provided just as often as one that is.
Network load balancing, a Microsoft clustering technology that spreads requests for a single IP address among several Microsoft Windows servers, can also provide load bal?ancing in addition to scalability and redundancy. If a VPN server fails, client sessions will also fail and the user will be prompted to log on again. The user's new session will be managed by one of the other VPN servers free Cisco practice exam questionsin the cluster. Figure 7-7 shows Microsoft network load balancing