IP to IP Tunneling Software?

[MarkJ]

Hi,
I've recently set up a VPN connection for users to connect in from home. They connect to the office network and then work on a computer with terminal services on it.

I want to create an encrypted tunnel between the user at home (on a work laptop) and the terminal services box at work. I had in mind that there's some software where you install the server and create a password/key/certificate, then install the software on the client and specify said password/key/certificate along with the IP address of the server and from then on all traffic is encrypted. I can't seem to find any software like this (might be searching the wrong keywords though).

Has anyone ever used anything like this before?

[sweetleaf]

It's been a while since I've done anything with VPNs so may be getting the wrong end of the stick, but surely that's the job of the VPN client software. Although when you say IP to IP it kinda implies to me that you've got host to host VPN rather than client to host?

[MarkJ]

Kind of, we're on a massive WAN. The VPN software gives the client an IP on the inside network, but on a different subnet to our office subnet (which is behind a firewall). Traffic to this internal subnet is encrypted by the VPN software, but the final hop from this subnet to our office's subnet is unencrypted.

Supposedly the terminal services client auto negotiates an encrypted session, but I don't particularly trust this, so wanted to create a tunnel so that I know that the final hop from internal subnet > office subnet is encrypted.

[Hetzer]

Logmein Hamachi is pretty good, me and my brother have used it for a few games.
____________________
"There's the horizon! Ride hard, ride fast and cut down all who stand in your way!"

[chrisw]

[MarkJ]

It's not inside my network though. I work for a very large company who's WAN cover the entire UK and the VPN client gets an IP which can be contacted by thousands of computers on this internal WAN. I can't control this subnet so wanted to encrypt the data as it's sensitive stuff.

[chrisw]

[MarkJ]

It's the NHS, and I work for a trust. The WAN is not encrypted (god knows why) so we have to make sure any data going across it is secure enough.

Tis a right PITA sometimes.

[chrisw]

[djr]

Simple soloution - you can setup a vpn server on windows 2000 onwards server, Put that on your internal network, Users then connect from vpn network into your network secure, then they'll be able to access your servers within that and if nessacery get into terminal server.