Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    New to VPN

    Scheduled Pinned Locked Moved Off-Topic & Non-Support Discussion
    22 Posts 3 Posters 3.8k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • P
      phil.davis
      last edited by

      You can make many OpenVPN links between many sites - no problem doing multi-site.

      As the Greek philosopher Isosceles used to say, "There are 3 sides to every triangle."
      If I helped you, then help someone else - buy someone a gift from the INF catalog http://secure.inf.org/gifts/usd/

      1 Reply Last reply Reply Quote 0
      • johnpozJ
        johnpoz LAYER 8 Global Moderator
        last edited by

        "Is openvpn only good for site to site? "

        No openvpn works great for road warrior/client type access as well.  You have to have a client on the client device - but their are clients for pretty much everyone os I can think of.  And they even have a client now for ios and android devices.

        An intelligent man is sometimes forced to be drunk to spend time with his fools
        If you get confused: Listen to the Music Play
        Please don't Chat/PM me for help, unless mod related
        SG-4860 24.11 | Lab VMs 2.8, 24.11

        1 Reply Last reply Reply Quote 0
        • H
          heirkeyso
          last edited by

          Dear All,

          In my set-up, there will be a multiple server but only 1 pc will b accessing it. Example Site-A will access Site-B and Site-C. Base on the reply on this forum this possible. My question is How should I configure the client? Is there a a multiple instance of the client? Or just one instance of client you just configure the client?

          1 Reply Last reply Reply Quote 0
          • H
            heirkeyso
            last edited by

            Dear All,

            What do you my 'Road Warrior'?

            1 Reply Last reply Reply Quote 0
            • H
              heirkeyso
              last edited by

              Dear all,

              Sorry wrong grammer.

              What do you mean by 'Road Warrior'?

              Thank you.

              1 Reply Last reply Reply Quote 0
              • P
                phil.davis
                last edited by

                'Road Warrior' is individual people with laptop that are anywhere on the internet and want to connect in individually from their laptop to the office network VPN server. (Working from home, while traveling…)
                Tell us what offices and users you want to connect and we can suggest better what solution is good. Because almost everything is possible, and there are afew different ways to do it.

                As the Greek philosopher Isosceles used to say, "There are 3 sides to every triangle."
                If I helped you, then help someone else - buy someone a gift from the INF catalog http://secure.inf.org/gifts/usd/

                1 Reply Last reply Reply Quote 0
                • H
                  heirkeyso
                  last edited by

                  Sir,

                  We have a head office and 3 branch office. I want to access the 3 branch office's cctv using the ip address by head office or to view the cctv in browser by head office. I want it to access as if I was just using a LAN connection. With this I'm thinking to use a VPN. Not only the cctv, we want also to access also our biometric in order to get the data from it from the head office.

                  Kindly advise for the recommended solution for this.

                  Thank you in advance.

                  1 Reply Last reply Reply Quote 0
                  • johnpozJ
                    johnpoz LAYER 8 Global Moderator
                    last edited by

                    That is a site to site connection.. So from your head office create site to site to your 3 branch offices.  Make sure you do not use the same address space in each location.

                    Ie if you use say 192.168.0.0/24 in HO, and 192.168.0.0/24 in BO1 your going to have problems.

                    So
                    HO 192.168.0.0/24
                    BO1 192.168.1.0/24
                    BO2 192.168.2.0/24
                    BO3 192.168.3.0/24

                    And your good - or whatever networks you want to use that do not overlap.

                    So this can be setup so HO can access anything in each branch office, you could also allow for BO to access other BO networks if you want, etc.  Connecting 2 different networks via a vpn is called a site to site connection.

                    An intelligent man is sometimes forced to be drunk to spend time with his fools
                    If you get confused: Listen to the Music Play
                    Please don't Chat/PM me for help, unless mod related
                    SG-4860 24.11 | Lab VMs 2.8, 24.11

                    1 Reply Last reply Reply Quote 0
                    • H
                      heirkeyso
                      last edited by

                      Thank you for the response and guides you gave to me.

                      What VPN should I use? OpenVPN or IPSec?

                      What is the difference of the two?

                      1 Reply Last reply Reply Quote 0
                      • johnpozJ
                        johnpoz LAYER 8 Global Moderator
                        last edited by

                        Openvpn is easier to setup if you ask me..  And only uses 1 port over jut plain tcp, while ipsec uses other protocols that may or may not be open between your network connections.

                        An intelligent man is sometimes forced to be drunk to spend time with his fools
                        If you get confused: Listen to the Music Play
                        Please don't Chat/PM me for help, unless mod related
                        SG-4860 24.11 | Lab VMs 2.8, 24.11

                        1 Reply Last reply Reply Quote 0
                        • H
                          heirkeyso
                          last edited by

                          Please guide me how to set-up it using the openvpn

                          1 Reply Last reply Reply Quote 0
                          • johnpozJ
                            johnpoz LAYER 8 Global Moderator
                            last edited by

                            https://doc.pfsense.org/index.php/OpenVPN_Site-to-Site_%28Shared_Key,_2.0%29

                            An intelligent man is sometimes forced to be drunk to spend time with his fools
                            If you get confused: Listen to the Music Play
                            Please don't Chat/PM me for help, unless mod related
                            SG-4860 24.11 | Lab VMs 2.8, 24.11

                            1 Reply Last reply Reply Quote 0
                            • H
                              heirkeyso
                              last edited by

                              If I do point to point. Can I access from HO to Branch01 and vice versa?

                              1 Reply Last reply Reply Quote 0
                              • P
                                phil.davis
                                last edited by

                                Yes, site-to-site, peer-to-peer, point-to-point - they all mean the same.

                                As the Greek philosopher Isosceles used to say, "There are 3 sides to every triangle."
                                If I helped you, then help someone else - buy someone a gift from the INF catalog http://secure.inf.org/gifts/usd/

                                1 Reply Last reply Reply Quote 0
                                • H
                                  heirkeyso
                                  last edited by

                                  Where should I put the server? Where should the openvpn client install?

                                  To give you an idea. I have a 3 branches that has a cctv camera. and will access by headoffice. In this scenario how the vpn should be set-up? Should I set-up the vpn of the branch as a server and the headoffice as a client? If the head office is the clien of the 3 branches, should I open 3 openvpn client on the head office pc? Can be the headoffice also access the branch offices? Should I also install the openvpn client on the branch offices in order to access the headoffice?

                                  1 Reply Last reply Reply Quote 0
                                  • johnpozJ
                                    johnpoz LAYER 8 Global Moderator
                                    last edited by

                                    so why do the branch offices not have pfsense?  If they did then your all set.. What routers are at those locations?

                                    An intelligent man is sometimes forced to be drunk to spend time with his fools
                                    If you get confused: Listen to the Music Play
                                    Please don't Chat/PM me for help, unless mod related
                                    SG-4860 24.11 | Lab VMs 2.8, 24.11

                                    1 Reply Last reply Reply Quote 0
                                    • H
                                      heirkeyso
                                      last edited by

                                      I'm planning to have a pfsense of the branch. Please give me advise what should I needs in order to have a VPN.

                                      Thank you in advance

                                      1 Reply Last reply Reply Quote 0
                                      • johnpozJ
                                        johnpoz LAYER 8 Global Moderator
                                        last edited by

                                        Here is what I suggest

                                        https://portal.pfsense.org/

                                        Sign up for some actual hours and they can walk you right through.  You have been given way more than enough info in this thread to move forward.

                                        Or actually hire someone in IT that knows what a VPN is..  Why are you taking on this task when you clearly are in over your head.

                                        An intelligent man is sometimes forced to be drunk to spend time with his fools
                                        If you get confused: Listen to the Music Play
                                        Please don't Chat/PM me for help, unless mod related
                                        SG-4860 24.11 | Lab VMs 2.8, 24.11

                                        1 Reply Last reply Reply Quote 0
                                        • H
                                          heirkeyso
                                          last edited by

                                          Dear All,

                                          I have read the documentation at https://doc.pfsense.org/index.php/OpenVPN_Site-to-Site_%28Shared_Key,_2.0%29 for how to configure the OpenVPN. Kindly assist me for the firewall configuration part. Base on the documentations it need to configure in wan interface. What needs to configure? How to configure it?

                                          Thank you in advance.

                                          1 Reply Last reply Reply Quote 0
                                          • First post
                                            Last post
                                          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.