Advice for Remote Access VPN with WAN optimization

besmart · Post by **besmart** » Mon Sep 26, 2011 2:20 pm

The server in Main office windows 2000 run Oracle database 9i.
The remote clients desktop machines, windows xp run application that connect to the Database server Over ADSL connection.

I plan to make Remote Access VPNs with 5 branches to run the client/server application.

To speed application , WAAS module (Application Acceleration/WAN Optimization) may be added to the router.

The VPN solution may be :
Main Office
-CISCO 2821 with (WAAS module)

branch office
- CISCO877
- Cisco WAAS Software License Options

remote users
- cisco vpn client

Should WAAS Module needed for branch office ?
Can you assist me in that solution ?

besmart · Post by **besmart** » Wed Sep 28, 2011 1:30 pm

no reply ,
still i need your experience for speeding VPN over ADSL (don't care to my solution , it is a suggestion)

You can post your experience for handling performance of VPN either using software or hardware appliaances.

Post by **YeOldeStonecat** » Wed Sep 28, 2011 2:25 pm

What I do is try to have the fastest internet connection available at the central office...specifically the upload.
Say you have a 10,000/2,000 k (or 10 meg/2 meg..depending on how you like to count) connection at the main office..and 5 branches....that's only 400k upload per branch if you divide up the pie. Actually less..as you have your main users at the main office using bandwidth also.

Some VPN appliances allow you to dedicate XX% of your bandwidth to the VPN tunnel...which is good.

How many users at the branch offices?
Will your Oracle LOB app even be supported over a VPN tunnel? If you have a lot of users at the branch offices....you might be better off looking for a terminal server approach, or running remote desktop published apps. Instead of trying to run a fat client through a VPN tunnel. Not to mention additional tunnel traffic like DNS, other AD functions.

besmart · Post by **besmart** » Wed Sep 28, 2011 6:14 pm

YeOldeStonecat wrote: ....you might be better off looking for a terminal server approach, or running remote desktop published apps. Instead of trying to run a fat client through a VPN tunnel. Not to mention additional tunnel traffic like DNS, other AD functions.

Yeeeeeeees
I agree completly with your solution : Using terminal server.
I did a Proof of concept using windows terminal server , and i can say performance was Excellent over adsl with 8M speed

To complete the discussion, i have a question:
Go to windows terminal service or Citrix XenApp?

RaisinCain · Post by **RaisinCain** » Wed Sep 28, 2011 6:32 pm

If you have access to Citrix I would utilize that. Makes management easier. Just need to set up the configuration file to do what you want. I have 31 terminals in a "study room" running from a VM off of the server and rarely encounter problems.