Point-to-point T1 connection with Hub & Spoke VPN Network

  • From: "Brian Reeves" <bjr@xxxxxxxxxxxxxx>
  • To: isalist@xxxxxxxxxxxxx
  • Date: Wed, 27 Aug 2003 12:57:13 -0600

        I currently have a ?Hub and Spoke? network setup for my organization
using ISA servers at each of our three sites. (Courtesy of documentation
from isaserver.org, THX!)  Two of these sites are VPN Gateway sites,
connecting to the main site through the Internet over broadband.  Right
now, this works just great for communicating with each site.

        My problem is that now, we are adding another site less than 30 miles
away, but we are running point-to-point T1 lines between the facilities
for communication.

        This site will be as large as our current site (Which has 140 clients,
whereas the two remote sites only have 5 each), and I want to know if it
is possible to connect it over the private T1, using the ISA server as the
hub.  This new site will have its own Domain server and ISA server for
forwarding traffic upstream across the T-1 to our main site.  Clients on
the remote network will be operating in the same domain as everyone else,
just residing in a different subnet.

        This configuration would basically make my main ISA server (The hub) a
tri-homed server.  One connection to the external T-1, one internal
connection, and one connection to the T-1 at our remote site.

        Is there possibly a better way to do this?  I did not want to connect my
routers directly to the switches because I need to be able to control and
regulate traffic going across the T-1.

        Thank you for any help that you can provide!


Other related posts: