Site to Site VPN Query

[snagrat]

So normally I would do a hardware VPN between 2 sites. Do so would allow any client to connect to services at the remote site (firewall permitting)

 

I have one school where a hardware VPN is not possible and so am looking into a software VPN, more than likely Windows RAS.

 

But the more I think about it I feel it won't work. In my mind if I connect two servers together using RAS then only they will be able to talk to each other and not the clients. Am I thinking abut this in the wrong way or would I have to do something else on the network to be able to get any client from any site to be able to communicate?

 

Also at one end I may be able to stick with a hardware VPN. There wouldn't be any limitation with using software VPN at one end and hardware at the other?

[FN-GM]

RAS can do full site to site VPN, the clients should be able to talk to each other if your routes are setup right.

 

Have you considered something like PFsense to create the site to site VPN? This will have a hardware VPN feature but can run it in a VM

[snagrat]

And the routes would be setup in RAS?

[FN-GM]

And the routes would be setup in RAS?

 

Your layer 3 networking equipment will need the routes. Either your L3 switch, Firewall or router maybe. Depends on the topology.