VPN question

[Fat Tone]

So I've set up the new place with a new 2008 Server and Exchange 2007, and a Draytek 2820 router configured accounts for vpn access to shares and to allow Outlook to connect.

From staff's homes, it seems invariably they are using the same 192.168.1.x subnet as the office. Conventional wisdom is that they must be on different subnets but recofiguring the home routers for all users spread across the country is difficult and reconfiguring the server is not something I want to think about.

Any thoughts/suggestions please?

Ta,

T.

[cjolley]

I've got a thought.
leave it for the next guy

[KRSESQ]

Web portal?

Kevin

[Fat Tone]

I've got a thought.
leave it for the next guy

ROFL! Sadly (in this instance) I am the next guy. I've been p/t for a while and going full time in a few weeks.

Web portal?

Kevin

Not sure I fully understand, but I guess the implication is the subnet conflict has to be sorted.

Cheers,

T.

[KRSESQ]

Sorry. I meant that the staff already has internet access. Could you not set up a website for them to log into the network and access what they need? Or do they need real-time access to their office workstation's desktop from home?

Or am I misunderstanding what it is you want to do?

Kevin

[MultimediaMan]

I'm not a network engineer, but I think you're going to run into some problems with scalability

It would probably be a better idea to use the 172.16.xxx.xxx Class B network for your office network, as these are designated as private addresses in the IPv4 Protocol. It makes you a bit more future proof, and allows differentiation for your external customers without resorting to IP Helpers (which can be tough to maintain) within your network.

I have no idea how large your environment is, but if it is using a Class C network (as you indicated), it can't be that big. That said, switching everything over shouldn't be too bad. Take the time to look your DNS naming and other dependencies at the same time and come up with a plan for the transition.

Where I work, every so often we have to flip a half dozen subnets in one night at one site and only rarely do we get an exception.