W2K3 RRAS P2P Tunnel w/ 3rd Party Appliances

Can anyone provide success stories, or recommendation with regard to setting
up a Point to Point VPN Tunnel Solution with 3rd Party SOHO products at WAN
sites back to a Windows 2003 Server running RRAS as the VPN Host Server?

Thanks, Jeff

Steve
Tue Feb 01 19:01:01 CST 2005

So long as the other device supports PPTP or L2TP+IPsec, interop shouldn't
be a problem. Usually the difficulty is getting the right kind of certificate
(for IPsec) onto the other device. Also, during troubleshooting, enabling
Oakley logging will be tremendous help. See http://support.microsoft.com/default.aspx?scid=kb;en-us;257225.

I have to ask, of course :) ... why not use Windows RRAS at the WAN sites?
Celestix makes a pretty good appliance based on RRAS that's designed for
the kind of deployment you're describing. http://www.celestix.com/products/ras/ras3000/intro.htm

Steve Riley
steriley@microsoft.com



> Can anyone provide success stories, or recommendation with regard to
> setting up a Point to Point VPN Tunnel Solution with 3rd Party SOHO
> products at WAN sites back to a Windows 2003 Server running RRAS as
> the VPN Host Server?
>
> Thanks, Jeff
>

MCSEGURU
Tue Feb 01 21:30:08 CST 2005

I've looked into the Celestix product line. Not exactly Small Busines
pricing minded. I can put a Server in at the remote location cheaper than
that.
I was hoping a SOHO FW/VPN device like a Linksys or Watchguard or something
similar $300ish would interoperate with the Windows Server RRAS. Without
having a product to actually try, and not able to find any documentation
supporting implementation practices, or success stories, I'm left to either
buy and try, or hope someone in the groups can provide some of their
personal experiences.

I've done alot with CheckPoint NG AI in the past, and even with that line it
always seemed there was a certificate or negotiation situation with "other"
manufacture products that hindered implementing them as a solution. Even in
the way the configurable settings actually binded phase I and phase II
negotiations.

So as stated, I'm looking for anyone with actual experiece trying something
like this. Failed attempt stories might solidify that it may be more work
than it's worth, consideirng client RAS is currently working.

Thanks,
Jeff

"Steve Riley [MSFT]" <steriley@microsoft.com> wrote in message
news:64019632428740608699867@news.microsoft.com...
> So long as the other device supports PPTP or L2TP+IPsec, interop shouldn't
> be a problem. Usually the difficulty is getting the right kind of
> certificate (for IPsec) onto the other device. Also, during
> troubleshooting, enabling Oakley logging will be tremendous help. See
> http://support.microsoft.com/default.aspx?scid=kb;en-us;257225.
>
> I have to ask, of course :) ... why not use Windows RRAS at the WAN sites?
> Celestix makes a pretty good appliance based on RRAS that's designed for
> the kind of deployment you're describing.
> http://www.celestix.com/products/ras/ras3000/intro.htm
>
> Steve Riley
> steriley@microsoft.com
>
>
>
>> Can anyone provide success stories, or recommendation with regard to
>> setting up a Point to Point VPN Tunnel Solution with 3rd Party SOHO
>> products at WAN sites back to a Windows 2003 Server running RRAS as
>> the VPN Host Server?
>>
>> Thanks, Jeff
>>
>
>

Rich
Wed May 18 11:41:14 CDT 2005

Hi Jeff,

We are a small-mid size business and have used Trendware TW100-BRV204 V2 vpn
routers to connect several locations around the world. They are cheap - $80
Canadian, hard to find (try TigerDirect). However, these are the most
incredible, flexible devices we've ever found for this application.

The lastest V2 of this product includes all VPN protocols including 3DES,
AES and a Microsoft VPN server. We have successfully connected these devices
to each other, to a CISCO Pix firewall, to clients using windows IPsec
client, and using Windows VPN client.

Check them out - amazing deal and incredible functionality!

Cheers, Rich

"MCSEGURU" wrote:

> Can anyone provide success stories, or recommendation with regard to setting
> up a Point to Point VPN Tunnel Solution with 3rd Party SOHO products at WAN
> sites back to a Windows 2003 Server running RRAS as the VPN Host Server?
>
> Thanks, Jeff
>
>
>