Answer the question
In order to leave comments, you need to log in
VPN and remote work
Greetings!
Now I work remotely and access the company network via VPN. The problem is that I have more than one computer (mostly virtual machines), and from each of them I need access to the office network. Now I manually configure the VPN on each of the computers. But this is inconvenient, so I'm thinking about optimizing my infrastructure.
What is the best way to solve my problem?
I see two possible solutions. The first option is to set up a VPN client on the router, and let my subnet into the office network through NAT. In this solution, I see one significant disadvantage - it will not be possible to establish a connection from the office network to my machine (sometimes it is necessary).
The second option requires the installation of an additional device in the office. For example, you can use EoIP. Cons - you have to negotiate with the admins.
You also need to somehow prevent "household" devices (ex: wife's laptop) from entering the working network. At the same time, communication in the direction of I — other household devices and vice versa is sometimes needed. Split into separate subnets/VLANs?
I feel it will be very difficult to persuade the admins.
To top it all off, I'm a complete lamer when it comes to setting up networks.
Answer the question
In order to leave comments, you need to log in
If you have about 10 virtual machines, it's easier to manually configure VPN on each. You can write a bash script that will make your life easier, unless of course the same operating systems.
When there are about 50-100 virtual machines, then it’s worth thinking about automation, and what are 10 systems to set up, business for 10-30 minutes.
Raising a VPN client on the router and forwarding the necessary (or all, by setting up DMZ) ports to your computer is not an option?
VPN can not only distribute addresses, but also subnets.
if the router is smart enough, then you can raise a VPN connection from it and configure routing so that all machines in the local area are accessible via VPN
Will port forwarding on a router with a vpn client not work?
And the model of the router would be indicated.
We use OpenVPN. You do not need to configure anything by hand on a specific machine, everything including network routing, logins / passwords arrives with a config.
Didn't find what you were looking for?
Ask your questionAsk a Question
731 491 924 answers to any question