From: simon@not-here.com   
      
   Matty wrote:   
   > I have done a lot of reading but think I am missing some fundementals.   
   > If someone could set me straight on these points it would help me a   
   > lot....   
   >   
   > Am I right in thinking that to use a VPN from a remote location to a   
   > Server then that server must have a been assigned a purchased static IP   
   > address to an external interface (by purchased I mean registered with   
   > whatever organisation, a class A,B, or C ip address?).  To elaborate,   
   > if I was to try and use Windows 2000 SBS as the server for the VPN,   
   > then this server would need to two physical network cards - one with   
   > the external ip address that the world can see (the purchased static   
   > ip) and an internal one that it routes to.   
   >   
   > If I used a router instead then the router would have this purchased IP   
   > address?   
   >   
   > Is it because you need a static IP on either a router/external server   
   > interface that you could never VPN between two "home" machines that are   
   > assigned IP addresses from ADSL modems by there ISP?  Or am I mistaken   
   > and provided one of the machines had VPN server software and one had   
   > client then they could establish a VPN?   
   >   
   > After all that, it might be clearer if I indicate the specific job...   
   >   
   > What I would like to do is VPN from 3 "home" ADSL connections to an   
   > office machine running SBS 2000.  The business doeshave it's own domain   
   > so I think it has a "purchased" IP (but am curious if this is   
   > nescessary?)  Am I better off using the Windows VPN with routing and   
   > remote access (In which case I need another network card?) or puchasing   
   > a VPN capable router?   
   >   
   You can away without a fixed address if you use a vpn router that   
   supports dynamic dns, then users connect to the dynamic dns name and   
   should the IP address change the router updates the dynamic dns server   
   of this fact.   
   If you go down the windows route can can use a single nic in the server,   
   keep it on the lan and direct the inbound vpn connections to it using   
   port mapping on the router.   
   simon   
      
   --- SoupGate-Win32 v1.05   
    * Origin: you cannot sedate... all the things you hate (1:229/2)