Re: VPN over wireless

I have no problem with creating a separate network for just the Guests but
why not just let the PIII's connect directly to your LAN throught the AP's
with security enabled? You are essentially doing the same thing with
creating the VPN through the additional internet connection. When they
connect either way, they will still be on your SBS LAN. You can control
access to your SBS LAN AP's with Mac addressing, time schedule, etc. for the
PIII's. This gets them only connected to your SBS LAN, at that point you
can still implement Windows AD Security.

--
John Oliver, Jr
MCSE, MCT, CCNA
Exchange MVP 2008
Microsoft Certified Partner


"Mike Webb" <Mike_Webb@xxxxxxxxxxxxxxxxx> wrote in message
news:OFCDj32YIHA.1532@xxxxxxxxxxxxxxxxxxxxxxx
I've set the AP's and router to WPA2. However, the primary users of this
Guest network are people here for conferences, visitors, grad and
undergrad students in our housing unit during their off time, etc. I
don't want them anywhere NEAR my SBS network, so I don't know how to give
just these 2 PIII's access -- as I think you're suggesting.


"John Oliver, Jr. [MVP]" <jcoliverjr@xxxxxxxxxxx> wrote in message
news:uY7ewu2YIHA.4160@xxxxxxxxxxxxxxxxxxxxxxx
If you are using wireless then enable encryption WEP or WPA (most secure)
on the wireless AP's. No need for VPN.

--
John Oliver, Jr
MCSE, MCT, CCNA
Exchange MVP 2008
Microsoft Certified Partner


"Mike Webb" <Mike_Webb@xxxxxxxxxxxxxxxxx> wrote in message
news:uI%23MMR2YIHA.208@xxxxxxxxxxxxxxxxxxxxxxx
Running SBS 2003 Premium, Exchange, ISA 2004, SQL, 2 NIC's, router,
L2/L3 switch, WSUS.
==================
I am setting up a separate network for Guest access using a wireless
router with a fixed IP conected to the T1 Cisco router. My access
points are in near-by buildings and connectivity is good. Our lab is
busy from Spring to early Fall with undergraduate and graduate students,
and a part of their duties is to input data into Excel sheets and
database forms. I put a couple old PIII's out there with wireless cards
and would like to give them access to the LAN so they can get to those
resources. Money is tight, otherwise I'd set up another wireless
network. Can I use VPN in this scenario? (I've never used it or seen
it in use.) The setup seems pretty simple. We are in a remote rural
area so I'm not worried about anyone else getting in. I'm pretty sure I
can lock the users down with folder/file permissions so they can't stray
where they shouldn't. (GP is probably better, but that's another area
I've never gotten into.)

Any and all suggestions and comments are welcome!

--
Mike Webb
Platte River Whooping Crane Maintenance Trust, Inc.
a 501 (c)(3) conservation non-profit organization







.