Virtual Private Networks VPN: Router-to-Router or Client-to-Router??

Bookmark this page:  YahooMyWeb Yahoo!  Google Google  Windows Live Favorites Windows Live  del.icio.us del.icio.us  digg digg  Add to Netscape Netscape
Subject Author Date
VPN: Router-to-Router or Client-to-Router?? Jester 11-30-05
Posted by Jester on November 30, 2005, 12:04 pm
Please log in for more thread options
Hi all,

Want to set up a VPN between a small peer-to-peer lan and two other home
users. Two sites are on DSL, third is FiOS... all have dynamic IPs. I'm
quite familiar with D-Link products, so I'll be using these models for
reference, but feel free to suggest other options (but tell me why
please)... here are my brainstorming results...

1- Three inexpensive DI-804HVs... One at each site... using best security
available between them.

PROS (As I perceive them):
- Possibly better security than using XP client??
- If any site expands, can just plug in additional PCs to to local lans and
not bother with additional connections on PC. Not a big deal, but hey.
- Dial-up access to each site through modem plugged into DB9 port on
DI-804HV (Don't need it right now, but easily might in future)

CONS:
- "Always on" VPN between sites. Greater possibility of attack??

2- One inexpensive DI-804HV at main site... XP client at each remote PC.
PROS:
- Least expensive option.
- When remote PCs are off, there's no tunnel active. Although I realize the
router would be willing to "accept" a potential connection. So I don;t knwo
if my "always on" fear is valid.
- Dial-up access to main site through DB9 port.
CONS:
- Limits me to PPTP.
- Any other security/performance concerns I might be missing.

3- One DFL-200 at main site, NETDEFEND client or DI_804HVs at remotes.
PROS:
- Faster VPN performance (supposedly) I know the "A" in ADSL will affect
speed more than anything.
- Can use NETDEFEND client at remote sites for more robust security.
- Can manage bandwidth to each tunnel.
- Can also use XP client in a pinch.
- Also has DB9 port
CONS:
- A bit more money than I planned.


So basically, my main question is: What are the advantages/disadvantages
of router-to-router vs. client-to-router setups??
Which of the above is best for simple file-sharing between sites? Each site
has net access, each site has printers. We just need some very simple
50-100k files accessed every now and then, and at worst, a 1-2mb PDF might
have to be opened on occasion.

Thanks in advance!

Jester