Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    New to VPN

    Scheduled Pinned Locked Moved Off-Topic & Non-Support Discussion
    22 Posts 3 Posters 3.8k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • H
      heirkeyso
      last edited by

      Dear All,

      In my set-up, there will be a multiple server but only 1 pc will b accessing it. Example Site-A will access Site-B and Site-C. Base on the reply on this forum this possible. My question is How should I configure the client? Is there a a multiple instance of the client? Or just one instance of client you just configure the client?

      1 Reply Last reply Reply Quote 0
      • H
        heirkeyso
        last edited by

        Dear All,

        What do you my 'Road Warrior'?

        1 Reply Last reply Reply Quote 0
        • H
          heirkeyso
          last edited by

          Dear all,

          Sorry wrong grammer.

          What do you mean by 'Road Warrior'?

          Thank you.

          1 Reply Last reply Reply Quote 0
          • P
            phil.davis
            last edited by

            'Road Warrior' is individual people with laptop that are anywhere on the internet and want to connect in individually from their laptop to the office network VPN server. (Working from home, while traveling…)
            Tell us what offices and users you want to connect and we can suggest better what solution is good. Because almost everything is possible, and there are afew different ways to do it.

            As the Greek philosopher Isosceles used to say, "There are 3 sides to every triangle."
            If I helped you, then help someone else - buy someone a gift from the INF catalog http://secure.inf.org/gifts/usd/

            1 Reply Last reply Reply Quote 0
            • H
              heirkeyso
              last edited by

              Sir,

              We have a head office and 3 branch office. I want to access the 3 branch office's cctv using the ip address by head office or to view the cctv in browser by head office. I want it to access as if I was just using a LAN connection. With this I'm thinking to use a VPN. Not only the cctv, we want also to access also our biometric in order to get the data from it from the head office.

              Kindly advise for the recommended solution for this.

              Thank you in advance.

              1 Reply Last reply Reply Quote 0
              • johnpozJ
                johnpoz LAYER 8 Global Moderator
                last edited by

                That is a site to site connection.. So from your head office create site to site to your 3 branch offices.  Make sure you do not use the same address space in each location.

                Ie if you use say 192.168.0.0/24 in HO, and 192.168.0.0/24 in BO1 your going to have problems.

                So
                HO 192.168.0.0/24
                BO1 192.168.1.0/24
                BO2 192.168.2.0/24
                BO3 192.168.3.0/24

                And your good - or whatever networks you want to use that do not overlap.

                So this can be setup so HO can access anything in each branch office, you could also allow for BO to access other BO networks if you want, etc.  Connecting 2 different networks via a vpn is called a site to site connection.

                An intelligent man is sometimes forced to be drunk to spend time with his fools
                If you get confused: Listen to the Music Play
                Please don't Chat/PM me for help, unless mod related
                SG-4860 24.11 | Lab VMs 2.8, 24.11

                1 Reply Last reply Reply Quote 0
                • H
                  heirkeyso
                  last edited by

                  Thank you for the response and guides you gave to me.

                  What VPN should I use? OpenVPN or IPSec?

                  What is the difference of the two?

                  1 Reply Last reply Reply Quote 0
                  • johnpozJ
                    johnpoz LAYER 8 Global Moderator
                    last edited by

                    Openvpn is easier to setup if you ask me..  And only uses 1 port over jut plain tcp, while ipsec uses other protocols that may or may not be open between your network connections.

                    An intelligent man is sometimes forced to be drunk to spend time with his fools
                    If you get confused: Listen to the Music Play
                    Please don't Chat/PM me for help, unless mod related
                    SG-4860 24.11 | Lab VMs 2.8, 24.11

                    1 Reply Last reply Reply Quote 0
                    • H
                      heirkeyso
                      last edited by

                      Please guide me how to set-up it using the openvpn

                      1 Reply Last reply Reply Quote 0
                      • johnpozJ
                        johnpoz LAYER 8 Global Moderator
                        last edited by

                        https://doc.pfsense.org/index.php/OpenVPN_Site-to-Site_%28Shared_Key,_2.0%29

                        An intelligent man is sometimes forced to be drunk to spend time with his fools
                        If you get confused: Listen to the Music Play
                        Please don't Chat/PM me for help, unless mod related
                        SG-4860 24.11 | Lab VMs 2.8, 24.11

                        1 Reply Last reply Reply Quote 0
                        • H
                          heirkeyso
                          last edited by

                          If I do point to point. Can I access from HO to Branch01 and vice versa?

                          1 Reply Last reply Reply Quote 0
                          • P
                            phil.davis
                            last edited by

                            Yes, site-to-site, peer-to-peer, point-to-point - they all mean the same.

                            As the Greek philosopher Isosceles used to say, "There are 3 sides to every triangle."
                            If I helped you, then help someone else - buy someone a gift from the INF catalog http://secure.inf.org/gifts/usd/

                            1 Reply Last reply Reply Quote 0
                            • H
                              heirkeyso
                              last edited by

                              Where should I put the server? Where should the openvpn client install?

                              To give you an idea. I have a 3 branches that has a cctv camera. and will access by headoffice. In this scenario how the vpn should be set-up? Should I set-up the vpn of the branch as a server and the headoffice as a client? If the head office is the clien of the 3 branches, should I open 3 openvpn client on the head office pc? Can be the headoffice also access the branch offices? Should I also install the openvpn client on the branch offices in order to access the headoffice?

                              1 Reply Last reply Reply Quote 0
                              • johnpozJ
                                johnpoz LAYER 8 Global Moderator
                                last edited by

                                so why do the branch offices not have pfsense?  If they did then your all set.. What routers are at those locations?

                                An intelligent man is sometimes forced to be drunk to spend time with his fools
                                If you get confused: Listen to the Music Play
                                Please don't Chat/PM me for help, unless mod related
                                SG-4860 24.11 | Lab VMs 2.8, 24.11

                                1 Reply Last reply Reply Quote 0
                                • H
                                  heirkeyso
                                  last edited by

                                  I'm planning to have a pfsense of the branch. Please give me advise what should I needs in order to have a VPN.

                                  Thank you in advance

                                  1 Reply Last reply Reply Quote 0
                                  • johnpozJ
                                    johnpoz LAYER 8 Global Moderator
                                    last edited by

                                    Here is what I suggest

                                    https://portal.pfsense.org/

                                    Sign up for some actual hours and they can walk you right through.  You have been given way more than enough info in this thread to move forward.

                                    Or actually hire someone in IT that knows what a VPN is..  Why are you taking on this task when you clearly are in over your head.

                                    An intelligent man is sometimes forced to be drunk to spend time with his fools
                                    If you get confused: Listen to the Music Play
                                    Please don't Chat/PM me for help, unless mod related
                                    SG-4860 24.11 | Lab VMs 2.8, 24.11

                                    1 Reply Last reply Reply Quote 0
                                    • H
                                      heirkeyso
                                      last edited by

                                      Dear All,

                                      I have read the documentation at https://doc.pfsense.org/index.php/OpenVPN_Site-to-Site_%28Shared_Key,_2.0%29 for how to configure the OpenVPN. Kindly assist me for the firewall configuration part. Base on the documentations it need to configure in wan interface. What needs to configure? How to configure it?

                                      Thank you in advance.

                                      1 Reply Last reply Reply Quote 0
                                      • First post
                                        Last post
                                      Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.