Honestly...what would u do

magyartoth · 04-29-2002, 03:27 PM

Scenario:

A company has a main office in one city, and a smaller, branch office in another city.

Problem:

The two offices need to share a common folder where they can store calendar info, meeting requests, and Office docs. This can already be done in the main office via a Samba server running on Linux.

However, how would you include the branch office in this file sharing schema?

Any thoughts?

I've thought of either using a VPN or using SSH to tunnel with Samba over the internet, but both seem complicated.

Norel · 04-29-2002, 04:24 PM

Setup 2 VPN gateway then just set routing policy to have a trasparent secure comunication. I advise to use VPN because this is what VPN is created for, ssh works but for permanent infrastructur it's a hack.

Setting up a VPN gateway can be made a lot easier using a router specific distro with VPN support. I think *BSD today is a better choice but Linux is well placed too.
You have to evaluate if you want setup a dedicated machine or to combine it with router, firewall, ...

magyartoth · 04-29-2002, 09:28 PM

So you would install a machine with VPN installed in both the parent office and the remote office? I thought you only needed VPN on one end.

Norel · 04-30-2002, 06:40 AM

You need 2 VPN gateway, so you can create a protected channel. Packets start from a pc in office A, reach the VPN gateway pc (gwA) where they are put in the protected virtual channel, arrived to the other VPN gateway (gwB) they are checked and rearranged to normal state so they can reach destination pc at office B.

So you need 2 VPN gateway ... or you speak but nobody hear.

magyartoth · 04-30-2002, 07:27 AM

Would this type of setup allow Office B to mount(in Windows NT/2000) a shared drive that is on a linux Samba server in Office A?

Essentially that is what I need to do. Have office A and B both be able to mount a shared drive on a Samba server that is in office A.

Thanks!
M

Norel · 04-30-2002, 08:32 AM

VPN is on IP layer so you work like if office A and B ware on same LAN.

Short:
Yes ... and much more

magyartoth · 04-30-2002, 11:40 AM

Wow, Ok...I'll have to go buy some VPN books.

Thanks!
Chris

growler · 04-30-2002, 03:25 PM

Quote:

Originally posted by magyartoth
Wow, Ok...I'll have to go buy some VPN books.

Thanks!
Chris

check out "Building Linux VPNs" by Kolesnikov & Hatch from New Riders. - It's excellent. also, from what I've heard, the OReilly book on VPNs is terrible.

magyartoth · 04-30-2002, 04:29 PM

Yeah, I was suprised to hear the terrible reviews of the O'Rielly book. But I'll check out the other one.

Thanks guys!