localzuk Posted May 10, 2016 Posted May 10, 2016 I have a need to relatively quickly get a temporary site-to-site VPN in place between a few schools. Eventually we'll implement a proper WAN but in the short term, we're likely going to be buying a box for each school and VPN'ing between the schools. I just want to confirm something before I go all gung-ho and start. All the cross-site traffic is going to be between servers (even RDS traffic, as RD Gateway is going to be setup to do the job at each site). To handle the routing, would putting in a static route on each server do the trick?
FN-GM Posted May 10, 2016 Posted May 10, 2016 (edited) You can do, but you will be better off putting the static routes on your Layer 3 switches (or router). It is also much quicker and easier to setup. Edited May 10, 2016 by FN-GM
localzuk Posted May 10, 2016 Author Posted May 10, 2016 You can do, but you will be better off putting the static routes on your Layer 3 switches (or router). It is also much quicker to setup. Small schools don't have Layer 3 routing of their own, and the edge router is a managed device and such a charge would be chargeable (one of the reasons we're looking at doing this in the short-term until we get a proper WAN sorted).
FN-GM Posted May 10, 2016 Posted May 10, 2016 (edited) What are you using for the VPN? If you use something like PFSense it will act a router anyway. Use that as your default gateway for clients etc, it will do the routing the VPN's and then set the gateway of last resort on the PFsense as the managed router for the rest of it. You get the best of both worlds and no additional cost. If you don't want to do that, static routes on servers are possible. Edited May 10, 2016 by FN-GM
localzuk Posted May 10, 2016 Author Posted May 10, 2016 We'll be putting in some form of appliance. Either a Meraki MX unit, or as its a very short term project, something cheaper (Something like the TP-LINK TL-R600VPN).
localzuk Posted May 10, 2016 Author Posted May 10, 2016 Somerset is different I'm afraid, so I don't believe they can.
snagrat Posted May 10, 2016 Posted May 10, 2016 I would check with them as I had this discussion recently with them and they could do it and that was for two Somerset schools
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now