tailieunhanh - deploying virtual private networks with microsoft windows server 2003 phần 6

chúng tôi mô tả các yếu tố thiết yếu và cân nhắc cho site-to-site mạng riêng ảo (VPN) bằng cách sử dụng Microsoft Windows Server 2003. Các thành phần của mạng riêng ảo site-to-site có nhiều sự khác biệt từ các thành phần truy cập từ xa trong các hoạt động chức năng, nhưng việc triển khai có nhiều điểm tương đồng. | 205 Chapter 9 Deploying Site-to-Site VPNs In Chapter 8 Site-to-Site VPN Components and Design Points we described the essential elements and considerations for site-to-site virtual private networks VPNs using Microsoft Windows Server 2003. The components of site-to-site VPNs have several differences from the remote access components in functional operations but the deployment has many similarities. If you have read through the chapters on remote access you ll see many similarities between the deployment of site-to-site and remote access but don t take any steps for granted. Pay close attention to the procedures in this chapter to catch all the subtle differences. In this chapter we step through the deployment of Point-to-Point Tunneling Protocol PPTP and Layer Two Tunneling Protocol with Internet Protocol Security L2TP IPSec site-to-site VPN solutions. Where there are identical methods for deploying both options we will point them out and refer to the proper sections. Deploying a Site-to-Site VPN Connection In the remote access solutions section of the book we described how to get remote access clients to connect to a VPN server. That process required the configuring of clients and and associated server settings such as Dynamic Host Configuration Protocol DHCP Domain Name System DNS and Internet Protocol IP filters to maintain the operations and security. Much of the overhead involved with that process goes away in the site-to-site scenario where the configuration stays static and is preconfigured for all connections. This is possible because all endpoints are already known at the time of deployment. Therefore address configuration multiple client authentication and client dial-in scenarios are not issues as they are with remote access solutions. The deployment of PPTP-based or L2TP IPSec-based site-to-site VPN connections using Windows Server 2003 consists of the following steps which we ll explain in detail for you L2TP IPSec vs. PPTP procedures are specified .