Network security

Hi everybody!

A company has 10 workstations, a server and a switch to which they are
connected.
The task is to modify the network so that all workstations could go on the
internet, and traveling employees could connect to the office network via
VPN.

There are two different solutions:

1. To bay a DSL/VPN router (Linksys for example), connect it to the switch
and configure it to complete the task.

2. To connect the server to Internet with a new NIC. Then, configure the
server to accept incoming VPN connections and make it an internet gateway
for the users on the office network.

The question is which way is better and secure, and why?
Money are out of the question.
Please, if you are have any thoughts about it, please, drop a line!

Thank you!
Andrei.

> 1. To bay a DSL/VPN router (Linksys for example), connect it to the switch
> and configure it to complete the task.
>
> 2. To connect the server to Internet with a new NIC. Then, configure the
> server to accept incoming VPN connections and make it an internet gateway
> for the users on the office network.
>
> The question is which way is better and secure, and why?

There's really no good way to answer that. It all depends on host security,
configuration, services, etc. In general, I would suggest using a cheap
router that has inbound tunnel support, use that as a cheap-o firewall, and
use RRAS.

Note that this is a very sub-optimal way to do this, and you need to read
and understand the security implications and responsibilities related to
your operating system in order to make this stable and effective.