Advice/Opinions needed: Rewiring my entire network

[nick128]

Current Layout:

DSL comes in through Verizon's Westell modem, out over Cat5e to my DLink DI514. It connects via copper to my roommate's PC (the modem and router are in his room since his computer has no wireless). In my room i have a DLink DWL810+ bridge connecting to the router, and copper from it to a 5 port DLink 10/100 switch that i have my two machines, plus a pigtail for my laptop, plus an extra port for any system i may be working on.

This is going out for three reasons: One Dlink is flaky as hell. Two I'm also buying a Powerbook this summer and i want to be G-capable. Three i'm limited by the current equipment in a few areas (VPN, number of ports, etc) and i want to break at least a few of those limitations.

Here's what i'm thinking right now:

Moving teh modem into my room first off, then from the DSL modem into an SMC Barricade SMCBR18VPN. From that i'd connect each of my computers straight into it, or maybe, if i catch a sale, out from that into a small gigabit switch since my machines all have gig onboard already. I want the 8 port version for expansion possiblities. Also coming out of the router woudl be a Netgear WG602NA .11G Access point for my wireless side. Going netgear here 'cause SMC's wireless stuff is either over the top or under-powered, and none of it matches the looks of the router. That said, i'd have to get another Netgear 602 WAP (In bridge mode) to connect my roommates machine, or make him buy a G-enabled PCI card.

Bill of materials:

1x SMC Barricade VPN Router
2x Netgear 602 Access Points
1x Netgear 5 port gigabit swtich (????)

The router i am pretty sure about, subject to people's reviews of it. It's the cheapest VPN-endpoint router i have seen so far, which both excites me and makes me suspecious. It also supports PPTP which is something rare. Linksys's and Netgear's both make you use their software clients to VPN in via IPSEC, but if i've read this one correctly you can use the PPTP built into windows to connect with no client software needed (a plus especially since i'll be on computers that aren't mine (college) or on an Apple Powerbook). This is one of the major reasons i'm upgrading, because i'm addicted to the idea of being able to connect to my PCs while i'm on campus or at home, etc., and if i make this work i'm going to do the same at my parent's place so when there's computer problems there i can VPN in and use remote desktop to fix the problems that keep cropping up there.

I want a router sans wireless 'casue .11n is right around the corner and i'd like to be able to just jack in a .11n WAP when the time comes. buying two WAPs is probably a waste, since like i said .11n is right around the corner. But a G PCI adapter is only 10 bucks less ( a decent one that i would trust). And i'd think i could do more with a bridge than i coudl with a PCI card. Cat5e is much cheaper but messier and i don't like the idea of stringing that much cable. I'm open to suggestions. I thought about makign him eat the cost of his connectivity and cutting him off otherwise but the DSL is in his name so no dice there Anybody?

Ah, almost forgot, i'm going to keep the 5 port switch for sure, that will always be useful probably in some instance, so i see no reason to ditch it. One other option for connecting my roommate is shutting down DHCP on my DI514, plugging it into the SMC as well, switching channels on it and the 810+ to curb interference and using that hardware to connect his ass. he doesn't game, the msot intensive thing he does as far as bandwidth is download BitTorrent stuff, and he's never bitched about my DLINK stuff before, so i doubt he'd start if i gave him my leftovers. Anyway, that's an option i have considered.

 

[nick128]

bump

 

[Dogma420]

ok, so your major concern is vpn to connect 2 different networks, right? just gotta make sure, cause its hard to discern....you say it is an idea...your whole network kind of hinges on this....

another idea that would work well is to setup a terminal server at your place...and use RDP to connect in...that's just as secure as vpn....the server cost might be a lot more however....

Your ideas sound pretty good....I just bought a wireless G belkin router and a G pc card for my laptop for a total of $20 (after the rebates) on line....you can find real cheap stuff out there (B wireless)....

 

[nick128]

well, here's the deal with VPN: at school i have to do a lot of work that requires me to VPN into my campus to access resources etc. A few of my campus buddies and i are wanting to set up our own private VPN tunnels between each other so we can each share files directly (and securely), think of it as a sercure, private p2p network (streaming only, of course...). ANd the third thing, which is probably the best, is to be able to connect to my network remotely, which will allow me to use RDP to connect. I already have one headless box on my network that thsi works perferctly for, but i wish to do it when i'm offsite too (like to get a document out of a non-shared folder and move it to a shared so i can access it, etc.

As far as the terminal server goes, i have toyed with teh idea of putting a headless box in my DLInk's DMZ. I did it once for a few hours, long enough for me to test it, and i was able to successfuly VPN into it, but WinXP Pro isn't know for its security, and i'm weary of putting it out on the web fully exposed. i'm running Kerio Firewall, but i still don't trust'em.

I have a Powerbook to pay for first, then if i have the money left over i think i'm goign to start ordering networking gear I was worried about SMC but i've been asking aroudn and haven't heard anything bad about them, so i'll give'em a go.