Vpn between main office and subsidiaries?

Question

VPN

Good afternoon!
In general, there is a "main office". The Internet is connected through 2 providers (for reliability) to the TL-R470T + from it already to a common grid and DC.
It is planned to open about 5 subsidiary offices.
Providers vary from place to place.
Need to set up a common network between the main offices and subsidiaries? Please tell me the options, share your experience?
What hardware is better to use for a hardware VPN with support for multiple wan ports for the Internet?
Thanks in advance!

Answer 1

1. Cheap and stable.
Mikrotik 951 + OpenVPN, star connection.
Pluses there is thedude for building an interactive network map and managing each switch.
You can write a script for switching providers or LoadBalance.
Minus, a transparent proxy server for logging connections must be installed separately.
2. Average level.
LinuxRouter (iptables + route) + OpenVPN
Pros, great functionality for testing and diagnosing connections,
You can put a transparent proxy and a bunch of other bells and whistles, in the future you can deploy asterisk for SIP telephony on it and connect branches with trunks. Than save a lot of money for the company. Since virtual PBX is a subscriber.
You can install Zabbix to diagnose all computers in child structures.
Channel switching and channel balancing can be configured.
Minuses. Difficult to master, you have to get your ass off the couch and start technical literature. The possibilities are endless.
The solution is not out of the box and it will have to be designed, ideally there should be a NORMAL linux and network guru.
You will have to write a single control center yourself, but you can use Ajenti at the start.
3. Expensive and stupid.
Order implementation from the Integrator. And he can already stuff Tsisok and other garbage that is not needed for traffic pumping.

Answer 2

Mikrotiki
They have a vpn server and clients, you can also use eoip if you need l2