a VPN theory question

[EricT]

Hi all-

I have a cyberguard 530 that I am using as my VPN/gateway router. I have some questions regarding simple PPTP VPNing.

My understanding of how VPNs should work - is that you get a virutal connection to an internal network, but your external traffic - IE internet traffic - should go right around this connection, and not through it.

I jus ttested mine out and it looks like th edefault gateway line overtakes my local default gateway, and thus all traffic flows through the VPN, where I only want mapped drives and server traffic going over that connection.

Am I right in this assumption? I am using the built in XP VPN client to connect. Ask me any more questions if this seems a bit vague at all.

Eric

[crazijoe]

The VPN appliance should come with it's own VPN client software for outside users to connect to your internal network. Normally you would use the built in XP VPN client to connect to a RRAS server.

[EricT]

Thanks Joe-

I havent been through the CD yet, but the instructions on the device state how to set it up via the built in XP stuff - no mention of any appliance specific software-, and the XP setup does specify VPN and not ras. Although I do not know what RRAS is, besides one more R than remote access server, which I am used to seeing as a dial up box.

Still - shouldnt the traffic split, internal over vpn and external over the regular bband connection?

Eric

[crazijoe]

I haven't had too much experience with Cyberguard products. We use SonicWall here. RRAS is Routing and Remote Access Server, which is a service that you can install on a Win Server Box to create VPN tunnels for outside clients.
The way it would normally work is the VPN appliance would build a tunnel in the broadband pipe (whether it's cable, DSL, T1, T3, etc.) Your users outside of the network can access the network through the VPN tunnel. The users inside the network can access the internet outside the VPN tunnel, not though the tunnel.

[gwalchmai]

Originally Posted by EricT

Hi all-

I have a cyberguard 530 that I am using as my VPN/gateway router. I have some questions regarding simple PPTP VPNing.

Hi, Eric. I'm looking to purchase either a 530 or a 550 in order to do the same thing - VPN into a LAN. How has your experience been with Cyberguard? do you like them?

Yes, like Joe says, the VPN should only be routing outside traffic in. It can also be setup to establish a tunnel from your 530 to another, though. Make sure it's setup as a VPN server, and not as a client.