Virtual Private Networks, Second Edition

Large Branch Office

Other Internet services are maintained at some of the large branch offices, such as web and FTP servers.

Connection

Large branch offices around the country are connected to the Internet via fractional T1 or full T1, depending on the size of their networks and the level of network activity. Their network connections are through one of the two national providers that connect the central office to the Internet. This allows for a faster connection to the central office. This strategy lessens the amount of “hops” necessary to reach corporate office Internet connections.

Hardware and Operating System

A Cisco 2500 router is needed to support fractional to full T1 connections for these networks. Sites use PPTP and Windows NT or Unix servers for dial-up users and smaller connecting networks.

VPN Package

The Cisco PIX Firewall is implemented at these locations for connections to the central office and to provide network security against Internet-based attacks. These branch offices also use PPTP for their remote access users, and for incoming connections from the small branch offices. Users run PPTP client on their Windows NT, Windows 95, or Macintosh workstations.