<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 TRANSITIONAL//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; CHARSET=UTF-8">
<META NAME="GENERATOR" CONTENT="GtkHTML/1.1.8">
</HEAD>
<BODY LINK="#0000ff">
On Mon, 2003-04-28 at 05:57, Justin Pember wrote:
<BLOCKQUOTE TYPE=CITE>
<FONT COLOR="#737373" SIZE="2"><I>Any input regarding this situation would be greatly appreciated. J</FONT><BR>
<FONT COLOR="#737373" SIZE="3"></FONT><BR>
<FONT COLOR="#737373" SIZE="2"> </FONT><BR>
<FONT COLOR="#737373" SIZE="3"></FONT><BR>
<FONT COLOR="#737373" SIZE="2">I have two sites, one with a DSL connection with a static IP address, the other with a microwave connection also with a static public IP. A VPN needs to be set up to provide LAN to LAN communication between the sites, as well as allow several remote users to connect to one of the LAN’s via a VPN.<BR>
Would the Linksys BEFVP41 be suitable for this situation with the following considerations?</I></FONT>
</BLOCKQUOTE>
<FONT SIZE="3">the BEFVP41 can not be the endpoint of a IpSec tunnel... it is a client-less VPN start point...<BR>
</FONT><BR>
<FONT SIZE="2"></FONT><BR>
<BLOCKQUOTE TYPE=CITE>
<FONT COLOR="#737373" SIZE="2"><I>1) A server on the LAN that is on the microwave connection needs to provide web and mail services to the internet. Is it easy to setup port forwarding to the server so it can still provide these public services from inside the private network with the BEFVP41? The site only has the single public IP address.</I></FONT>
</BLOCKQUOTE>
<FONT SIZE="2">Unless you have very high budget restraints.. I would not use a the BEFVP41 for something like that... it is very inexpensive, but is very low end... there is no way to actually save your configuration...<BR>
Linksys support is not real good... if you have a problem, the suggest fix is to press the re-set button and start over.<BR>
</FONT><BR>
<BLOCKQUOTE TYPE=CITE>
<FONT COLOR="#737373" SIZE="2"><I>2) Several more sites will eventually be added that will also need a LAN to LAN connection. The BEFVP41 is capable of 70 VPN tunnels, but can it do multiple end to end type tunnels between LAN’s and route any internal traffic to any other point on one of the other LAN’s?</I></FONT>
</BLOCKQUOTE>
<FONT SIZE="3"><BR>
not really, you need a higher end router/firewall/vpn server at your main site... <BR>
I suggest looking at some of the Netscreen products...<BR>
</FONT><BR>
<BLOCKQUOTE TYPE=CITE>
<FONT COLOR="#737373" SIZE="2"><I>3) The BEFVP41 is advertised for cable or DSL connections. Will there be any problems using it on the microwave connection at one of the sites? The microwave connection is a reliable connection to the internet and uses a standard Ethernet connection.</I></FONT>
</BLOCKQUOTE>
<FONT SIZE="3"><BR>
no, I use it for this as well for some Breezecom DS.11 units... I believe the port is just a 10 meg port.</FONT>
<BLOCKQUOTE TYPE=CITE>
<FONT COLOR="#737373" SIZE="2"><I> 4) Does the BEFVP41 only provide a NAT firewall or does it also provide an SPI firewall like the similar BEFSX41?</I></FONT>
</BLOCKQUOTE>
<FONT SIZE="3">no, it is a very basic firewall, and some of the documentation says that you should even run something like zone alarm as well... (yuck)<BR>
if your getting hacked there is no screen, or output that will let you know of any attempted hacks or port scans or anything.</FONT>
<BLOCKQUOTE TYPE=CITE>
<FONT COLOR="#737373" SIZE="2"><I>5) Is this model easy to setup with multiple VPN tunnels connecting the LAN’s together, and is it able to reliably re-establish any dropped connections without assistance.</I></FONT>
</BLOCKQUOTE>
<FONT SIZE="3">I have 7 remote offices using BEFVP41's that connect into a Netscreen appliance, over a 802.11b wireless network... it works pretty well...<BR>
sometimes if you connect to the WAN interface for configuration the BEFVP41's lookup, and we have to physically power them off...<BR>
the DHCP in the units don't work well... I would invest higher on the head end, and lower on the client site... (just my option)<BR>
you can get some Netscreen devices, pretty reasonable with support... I would say that they are way above a Linksys, d-link, or kmart brand,<BR>
without getting into something like a Cisco pix.<BR>
</FONT><BR>
<BLOCKQUOTE TYPE=CITE>
<FONT COLOR="#737373" SIZE="2"><I>Thanks in advance for any help!</I></FONT>
</BLOCKQUOTE>
<FONT SIZE="3"><BR>
<BR>
Pete Jacob<BR>
Fisher-Titus Medical Center</FONT><BR>
<TABLE CELLSPACING="0" CELLPADDING="0" WIDTH="100%">
<TR>
<TD>
<IMG SRC="cid:1051557168.5488.13.camel@Pete.Ftmc.Com" ALIGN="top" ALT="" BORDER="0">
</TD>
</TR>
</TABLE>
</BODY>
</HTML>