location A
high speed unlimited internet connection wth static IP
with adsl modem cum router TP-LINK TD-W8968 (VPN Pass-Through==PPTP, L2TP, IPSec)
a good cpu build for server
several computers,laptops,mobile devices and printers networked

location B
several computers,laptops,mobile devices and printer networked+internet access
location C
same enviornment

need to connect all locations to server A through vpn to share files printers etc
bank level high security can be ignored.


My querys
1. Can i Host this like VPN my own? (without commercial services)
2. if so is my mouter TD-W8968 capable for it?
3. will it work if my ip is not static?
4. can my vpn server and voip server-asterisk can be installed on same pc?
5. which distro will be good(newbie to linux...still a hangover of windows for graphicalinterface)
6. IP Address allocation recommendation
7. is it possible to connect ip phones all over vis asterisk installed in vpn server
8. if this set-up stupid,what should be added to make it possible?
Thank you

Yes.
No, not by itself. It supports no VPN protocols (like IPsec or L2TP) and therefore cannot act as a VPN endpoint. "Pass-through" support only means that the PCs behind the routers may use those protocols. However, lack of VPN support in the router doesn't prevent your server from being a VPN endpoint.
A site-to-site VPN will normally need a static IP at one end. Some routers can work around this by using DNS names, and combined with a dynamic DNS service it would work (kinda, sorta), but I really wouldn't recommend it.

Since you already have a static, public IP address at one end, it shouldn't be a problem.
Yes.
For a server or a workstation?
Huh? Can you elaborate?
Yes.
It's not stupid at all, but keep in mind that routers with VPN support (like this one) are quite affordable these days, and usually considerably easier to configure as endpoints than a Linux server.

1 members found this post helpful.

now i see the difference between vpn router and vpn pass-through router
in the image attached i have draw my network scenario

1. server will be my vpn endpoint,so i can use my same router in main office?
2. distro i asked is for server. I used to windows now ubuntu. can ubuntu be used instead of ubuntuserver?i need too see whats going on in the server
3. after installing server os(just desktop ubuntu) what additional things to be installed to use ip phone and sharing via vpn,just open vpn and asterisk?
4. at present my router give ip to all.do i need to change it? both in main office and branch router gives ip which will be same 1921681.x
5. if branch connected to vpn,which country's google will appear in branch computer?google.co.in(main branch) or google.co.ae(branch country itself)?
6 all these will be legal right?only using linux..not any cracked or keygen windows thing,what about ip phones?
7.any additional recommendations?

Attached Thumbnails

 

The main office is the location with the static IP, right? Since the other location will be initiating the VPN connection, you will need to forward certain TCP and/or UDP ports from the router to the server acting as the endpoint. Exactly which ports you have to forward will depend on the VPN technology you wish to use.

If both endpoints are Linux systems, you have a number of different technologies to choose between, IPsec, OpenVPN and L2TP being the most popular. Just make sure you stay clear of PPTP, as it has serious, non-fixable security flaws.

Your VPN endpoint will be behind a NAT router. Plain IPsec is often not possible to use in such scenarios, since IPsec tunneling depends on protocol 51 (Encapsulating Security Payload), which doesn't use TCP or UDP ports (it's an IP protocol all on its own) and hence cannot be forwarded. Some IPsec implementations can use what is known as "IPsec NAT-T" directly, which uses UDP port 4500 by default and can be forwarded, but in many cases IPsec NAT-T will only be used as a fallback after ESP has been tried and rejected because of NAT.

Note that if you cannot use IPsec, that also rules out L2TP. That leaves OpenVPN.
I'm afraid I can't be of much help there, as I tend to stick to the command line. Perhaps someone else can suggest a good GUI-centric server distribution.

(It may be worth mentioning that even on the Windows platform, the GUI now takes a back seat to command line scripting via PowerShell. You should consider familiarizing yourself with the command line, as it offers flexibility and automation not easily accomplished via a GUI.)
If the IP phones use SIP, Asterisk is all you need.
That absolutely will not work. You simply cannot use the same IP network in two different locations. You will need to migrate at least one of the networks to a different IP range, and I'd actually recommend migrating both, as "192.168.1.0/24" is the most overused private network on the planet (with 192.168.0.0/24 and 10.0.0.0/24 sharing second place).
That depends on your tunnel configuration. If you route everything through the tunnel, Internet traffic from the branch office will appear to come from the main office. If you choose to set up so-called "split tunneling" (which is by far the most common configuration), all traffic not destined for the main office will be routed through the local Internet connection as usual.
What about the IP phones? Asterisk doesn't require one to purchase a license, and unless the phones are tied to some peculiar, proprietary software, there should be no issues there either.

What kind of IP phones are we talking about here?
None that I can think of right now.

1 members found this post helpful.