Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    New to VPN

    Scheduled Pinned Locked Moved Off-Topic & Non-Support Discussion
    22 Posts 3 Posters 3.8k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • johnpozJ
      johnpoz LAYER 8 Global Moderator
      last edited by

      "Is openvpn only good for site to site? "

      No openvpn works great for road warrior/client type access as well.  You have to have a client on the client device - but their are clients for pretty much everyone os I can think of.  And they even have a client now for ios and android devices.

      An intelligent man is sometimes forced to be drunk to spend time with his fools
      If you get confused: Listen to the Music Play
      Please don't Chat/PM me for help, unless mod related
      SG-4860 24.11 | Lab VMs 2.8, 24.11

      1 Reply Last reply Reply Quote 0
      • H
        heirkeyso
        last edited by

        Dear All,

        In my set-up, there will be a multiple server but only 1 pc will b accessing it. Example Site-A will access Site-B and Site-C. Base on the reply on this forum this possible. My question is How should I configure the client? Is there a a multiple instance of the client? Or just one instance of client you just configure the client?

        1 Reply Last reply Reply Quote 0
        • H
          heirkeyso
          last edited by

          Dear All,

          What do you my 'Road Warrior'?

          1 Reply Last reply Reply Quote 0
          • H
            heirkeyso
            last edited by

            Dear all,

            Sorry wrong grammer.

            What do you mean by 'Road Warrior'?

            Thank you.

            1 Reply Last reply Reply Quote 0
            • P
              phil.davis
              last edited by

              'Road Warrior' is individual people with laptop that are anywhere on the internet and want to connect in individually from their laptop to the office network VPN server. (Working from home, while traveling…)
              Tell us what offices and users you want to connect and we can suggest better what solution is good. Because almost everything is possible, and there are afew different ways to do it.

              As the Greek philosopher Isosceles used to say, "There are 3 sides to every triangle."
              If I helped you, then help someone else - buy someone a gift from the INF catalog http://secure.inf.org/gifts/usd/

              1 Reply Last reply Reply Quote 0
              • H
                heirkeyso
                last edited by

                Sir,

                We have a head office and 3 branch office. I want to access the 3 branch office's cctv using the ip address by head office or to view the cctv in browser by head office. I want it to access as if I was just using a LAN connection. With this I'm thinking to use a VPN. Not only the cctv, we want also to access also our biometric in order to get the data from it from the head office.

                Kindly advise for the recommended solution for this.

                Thank you in advance.

                1 Reply Last reply Reply Quote 0
                • johnpozJ
                  johnpoz LAYER 8 Global Moderator
                  last edited by

                  That is a site to site connection.. So from your head office create site to site to your 3 branch offices.  Make sure you do not use the same address space in each location.

                  Ie if you use say 192.168.0.0/24 in HO, and 192.168.0.0/24 in BO1 your going to have problems.

                  So
                  HO 192.168.0.0/24
                  BO1 192.168.1.0/24
                  BO2 192.168.2.0/24
                  BO3 192.168.3.0/24

                  And your good - or whatever networks you want to use that do not overlap.

                  So this can be setup so HO can access anything in each branch office, you could also allow for BO to access other BO networks if you want, etc.  Connecting 2 different networks via a vpn is called a site to site connection.

                  An intelligent man is sometimes forced to be drunk to spend time with his fools
                  If you get confused: Listen to the Music Play
                  Please don't Chat/PM me for help, unless mod related
                  SG-4860 24.11 | Lab VMs 2.8, 24.11

                  1 Reply Last reply Reply Quote 0
                  • H
                    heirkeyso
                    last edited by

                    Thank you for the response and guides you gave to me.

                    What VPN should I use? OpenVPN or IPSec?

                    What is the difference of the two?

                    1 Reply Last reply Reply Quote 0
                    • johnpozJ
                      johnpoz LAYER 8 Global Moderator
                      last edited by

                      Openvpn is easier to setup if you ask me..  And only uses 1 port over jut plain tcp, while ipsec uses other protocols that may or may not be open between your network connections.

                      An intelligent man is sometimes forced to be drunk to spend time with his fools
                      If you get confused: Listen to the Music Play
                      Please don't Chat/PM me for help, unless mod related
                      SG-4860 24.11 | Lab VMs 2.8, 24.11

                      1 Reply Last reply Reply Quote 0
                      • H
                        heirkeyso
                        last edited by

                        Please guide me how to set-up it using the openvpn

                        1 Reply Last reply Reply Quote 0
                        • johnpozJ
                          johnpoz LAYER 8 Global Moderator
                          last edited by

                          https://doc.pfsense.org/index.php/OpenVPN_Site-to-Site_%28Shared_Key,_2.0%29

                          An intelligent man is sometimes forced to be drunk to spend time with his fools
                          If you get confused: Listen to the Music Play
                          Please don't Chat/PM me for help, unless mod related
                          SG-4860 24.11 | Lab VMs 2.8, 24.11

                          1 Reply Last reply Reply Quote 0
                          • H
                            heirkeyso
                            last edited by

                            If I do point to point. Can I access from HO to Branch01 and vice versa?

                            1 Reply Last reply Reply Quote 0
                            • P
                              phil.davis
                              last edited by

                              Yes, site-to-site, peer-to-peer, point-to-point - they all mean the same.

                              As the Greek philosopher Isosceles used to say, "There are 3 sides to every triangle."
                              If I helped you, then help someone else - buy someone a gift from the INF catalog http://secure.inf.org/gifts/usd/

                              1 Reply Last reply Reply Quote 0
                              • H
                                heirkeyso
                                last edited by

                                Where should I put the server? Where should the openvpn client install?

                                To give you an idea. I have a 3 branches that has a cctv camera. and will access by headoffice. In this scenario how the vpn should be set-up? Should I set-up the vpn of the branch as a server and the headoffice as a client? If the head office is the clien of the 3 branches, should I open 3 openvpn client on the head office pc? Can be the headoffice also access the branch offices? Should I also install the openvpn client on the branch offices in order to access the headoffice?

                                1 Reply Last reply Reply Quote 0
                                • johnpozJ
                                  johnpoz LAYER 8 Global Moderator
                                  last edited by

                                  so why do the branch offices not have pfsense?  If they did then your all set.. What routers are at those locations?

                                  An intelligent man is sometimes forced to be drunk to spend time with his fools
                                  If you get confused: Listen to the Music Play
                                  Please don't Chat/PM me for help, unless mod related
                                  SG-4860 24.11 | Lab VMs 2.8, 24.11

                                  1 Reply Last reply Reply Quote 0
                                  • H
                                    heirkeyso
                                    last edited by

                                    I'm planning to have a pfsense of the branch. Please give me advise what should I needs in order to have a VPN.

                                    Thank you in advance

                                    1 Reply Last reply Reply Quote 0
                                    • johnpozJ
                                      johnpoz LAYER 8 Global Moderator
                                      last edited by

                                      Here is what I suggest

                                      https://portal.pfsense.org/

                                      Sign up for some actual hours and they can walk you right through.  You have been given way more than enough info in this thread to move forward.

                                      Or actually hire someone in IT that knows what a VPN is..  Why are you taking on this task when you clearly are in over your head.

                                      An intelligent man is sometimes forced to be drunk to spend time with his fools
                                      If you get confused: Listen to the Music Play
                                      Please don't Chat/PM me for help, unless mod related
                                      SG-4860 24.11 | Lab VMs 2.8, 24.11

                                      1 Reply Last reply Reply Quote 0
                                      • H
                                        heirkeyso
                                        last edited by

                                        Dear All,

                                        I have read the documentation at https://doc.pfsense.org/index.php/OpenVPN_Site-to-Site_%28Shared_Key,_2.0%29 for how to configure the OpenVPN. Kindly assist me for the firewall configuration part. Base on the documentations it need to configure in wan interface. What needs to configure? How to configure it?

                                        Thank you in advance.

                                        1 Reply Last reply Reply Quote 0
                                        • First post
                                          Last post
                                        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.