New to VPN

heirkeyso

Thank you for the response and guides you gave to me.

What VPN should I use? OpenVPN or IPSec?

What is the difference of the two?

johnpoz

Openvpn is easier to setup if you ask me.. And only uses 1 port over jut plain tcp, while ipsec uses other protocols that may or may not be open between your network connections.

heirkeyso

Please guide me how to set-up it using the openvpn

johnpoz

https://doc.pfsense.org/index.php/OpenVPN_Site-to-Site_%28Shared_Key,_2.0%29

heirkeyso

If I do point to point. Can I access from HO to Branch01 and vice versa?

phil.davis

Yes, site-to-site, peer-to-peer, point-to-point - they all mean the same.

heirkeyso

Where should I put the server? Where should the openvpn client install?

To give you an idea. I have a 3 branches that has a cctv camera. and will access by headoffice. In this scenario how the vpn should be set-up? Should I set-up the vpn of the branch as a server and the headoffice as a client? If the head office is the clien of the 3 branches, should I open 3 openvpn client on the head office pc? Can be the headoffice also access the branch offices? Should I also install the openvpn client on the branch offices in order to access the headoffice?

johnpoz

so why do the branch offices not have pfsense? If they did then your all set.. What routers are at those locations?

heirkeyso

I'm planning to have a pfsense of the branch. Please give me advise what should I needs in order to have a VPN.

Thank you in advance

johnpoz

Here is what I suggest

https://portal.pfsense.org/

Sign up for some actual hours and they can walk you right through. You have been given way more than enough info in this thread to move forward.

Or actually hire someone in IT that knows what a VPN is.. Why are you taking on this task when you clearly are in over your head.

heirkeyso

Dear All,

I have read the documentation at https://doc.pfsense.org/index.php/OpenVPN_Site-to-Site_%28Shared_Key,_2.0%29 for how to configure the OpenVPN. Kindly assist me for the firewall configuration part. Base on the documentations it need to configure in wan interface. What needs to configure? How to configure it?

Thank you in advance.