New to VPN

johnpoz

That is a site to site connection.. So from your head office create site to site to your 3 branch offices. Make sure you do not use the same address space in each location.

Ie if you use say 192.168.0.0/24 in HO, and 192.168.0.0/24 in BO1 your going to have problems.

So
HO 192.168.0.0/24
BO1 192.168.1.0/24
BO2 192.168.2.0/24
BO3 192.168.3.0/24

And your good - or whatever networks you want to use that do not overlap.

So this can be setup so HO can access anything in each branch office, you could also allow for BO to access other BO networks if you want, etc. Connecting 2 different networks via a vpn is called a site to site connection.

heirkeyso

Thank you for the response and guides you gave to me.

What VPN should I use? OpenVPN or IPSec?

What is the difference of the two?

johnpoz

Openvpn is easier to setup if you ask me.. And only uses 1 port over jut plain tcp, while ipsec uses other protocols that may or may not be open between your network connections.

heirkeyso

Please guide me how to set-up it using the openvpn

johnpoz

https://doc.pfsense.org/index.php/OpenVPN_Site-to-Site_%28Shared_Key,_2.0%29

heirkeyso

If I do point to point. Can I access from HO to Branch01 and vice versa?

phil.davis

Yes, site-to-site, peer-to-peer, point-to-point - they all mean the same.

heirkeyso

Where should I put the server? Where should the openvpn client install?

To give you an idea. I have a 3 branches that has a cctv camera. and will access by headoffice. In this scenario how the vpn should be set-up? Should I set-up the vpn of the branch as a server and the headoffice as a client? If the head office is the clien of the 3 branches, should I open 3 openvpn client on the head office pc? Can be the headoffice also access the branch offices? Should I also install the openvpn client on the branch offices in order to access the headoffice?

johnpoz

so why do the branch offices not have pfsense? If they did then your all set.. What routers are at those locations?

heirkeyso

I'm planning to have a pfsense of the branch. Please give me advise what should I needs in order to have a VPN.

Thank you in advance

johnpoz

Here is what I suggest

https://portal.pfsense.org/

Sign up for some actual hours and they can walk you right through. You have been given way more than enough info in this thread to move forward.

Or actually hire someone in IT that knows what a VPN is.. Why are you taking on this task when you clearly are in over your head.

heirkeyso

Dear All,

I have read the documentation at https://doc.pfsense.org/index.php/OpenVPN_Site-to-Site_%28Shared_Key,_2.0%29 for how to configure the OpenVPN. Kindly assist me for the firewall configuration part. Base on the documentations it need to configure in wan interface. What needs to configure? How to configure it?

Thank you in advance.