How to get access from outside to the local network, inside the local network?

Question

Computer networks

Good afternoon.
There is a large office center, inside which an office is rented.
In this office, the employees of the office center brought a communication channel with ip 10.xxx
On it, respectively, I hung up my d-link 192.168.1.1.
How can I get access to d-link from outside, so that in the future I can already get access to the entire network of my office. Or maybe the VPN rises somehow .... but how to organize a connection from home to the office ...

Answer 1

The employees of the office center have brought a communication channel with ip 10.xxx to this office

it's already an intranet .
forwarding is not possible, more precisely possible, but only double * forwarding - you need to forward ports from the router to the target machine in your office + persuade office IT to forward prots from their router to your office one (which is usually unlikely).
you can use two methods yourself:
- VPN through an external host, or your own (Google has a lifetime free option, read here and try , or buy vps) upd if you can raise an external ip at home, then you can raise a VPN host at home
- https: //ngrok.comsimple, free, but with a moderate lag. all single-port protocols (http, rdp, ssh) are easy to configure, but ftp, for example, turns out to use dynamic ports after authorization. I was unable to set up
ps * - if the office complex is large, 10.xxx can be chopped into subnets, then there can be more than two routers in the chain (one of yours and one that actually goes online, there are definitely two already) routers. you can check with the tracert command, if office workers have router pings allowed, you will see the entire intranet chain

Answer 2

This is called port forwarding.
Yes, a VPN is a smarter solution. It's easier, it's comfortable work.
If employees have 10.*.*.* this is external, then on the side of employees you set up VPN at the addresses 192.168.2.*, and connect to their server.

Answer 3

These are already sitting behind NAT - ip 10.xxx
This one is also -d-link 192.168.1.1. , but at the entrance to the WAN port, it takes the ip from the network 10.xxx
Alternatively, configure between 192.168.1.100, for example, the IP of your computer behind your delink, and here 10.xx10, for example, the ip of your long line at the entrance, configure between them DNZ demilitarized zone.
If access is direct to the entire network, then a VPN server is better if your dlink supports such a connection.
But do not forget that everyone from the 192.168.2.* network will go to the Internet through a VPN connection by default.
And it is far from a fact that when you connect from outside to a network that leads to 10.*.*.*, then the rules of that router will allow connection to certain ports using certain protocols.