Perm VPN for 2 Homes - Same ISP - Connection Speeds [100/40-50/30] - Share 720P
-
Please note that this will be a new build out so both ends will be running most up to date PFsense on hardware that I have laying around.
Purpose:
To create a Perm VPN tunnel from my home to my in laws home.Info:
Both home are on the same ISP, I can run some tracert's and report back to get a better idea of hops but normally the ISP does a good job of keeping hops to a min internally from past experiences.Site A is my home with a 101/40 MB connection
Site B is my In Laws with a 50/30 MB connectionThe primary goal for this project would be to share the files on my synology to an XBMC instance I will have running at there home for 720P video.
Secondary goal would be remote access to all of there systems to make administration easier on my part. I want to set up some more security on there end and limit wireless connectivity for the kids and do some DNS based blocking to questionable material but would like to be able to work on that stuff over time from my home as there is no office there to work out of.
Another goal would be to set up VPN access to Site A for me to protect my mobile devices and laptop while out and about but I would work on that part of the project later on but wanted to mention it just in case it affects configurations for the perm site to site VPN.
So my question is, can this be done or should i quit while im ahead? If it can be done, what would be the best configuration for this type of setup? I tried my best to figure it out and it looks like IPsec tunnel would be best for this and I would need to use non overlapping IP ranges.
This would be a work in progress so im not expecting a full answer for total configurations but hoping for some good starter information to help point me in the right direction.
Thanks for all your help in advance.
-
IPSec is what I would look at, as well, but I've never had to use it. Have you read the pfSense VPN IPSec guide?
-
Kom:
Thanks for the feedback,
Yes, I did read that guide and that is where I got my info from and why i believed that IPsec would be the best choice for my situation over the other options.
Hopefully someone with some IPsec info can chime in with some more specifics or maybe I can get the thread moved to the IPsec section if deemed a good fit to be there.