Home / server / Questions / 238712
In Process
BCS
Asked: 2011-02-23 07:54:20 +0800 CST

VPN only network setup?

  • 772

I'm looking to set up a VPN server and I'm trying to figure out what software to use. My problem is that I have no idea what the term for the arrangement I want is so I can't really google for it. What I want is to have a "virtual" LAN where the only access is by VPN, where having access to the VPN only give you access to other VPN clients; not to the general internet, and not to the server running the VPN.

My primary use case is getting uniform access between clients I own where one or both may be behind a NAT and/or firewall that may not have a consistent IP.

(p.s. Given my budget I'll have to stick with freeware/FOSS.)

Edit: The VPN server is not in the same NAT/Firewall/IP situation. It's able to serve up whatever I want from a static IP.

vpn

2 Answers

  1. I really enjoy working with OpenBSD (PF) along with OpenVPN you can create the type of setup you are looking for...if I understand properly.

    When I fist got my hands on PF I found that documentation very enlightening. http://www.kernel-panic.it/openbsd/vpn/index.html

    • 1

  2. You can do it with OpenVPN.

    There are two gotchas however:

    1. Configure routing/firewall on router in a way that will block packets between tun interface and other interfaces.

    2. enable client-to-client in openvpn config (just add it in .conf file on server)

    OpenVPN by default will provide same IP address to client on reconnect. There are cases where it may not happen: pool running out of IPs, configuration moved to other server without files in /var, etc.

    To assure same IP on reconnects, use client-config-dir directive. In it you create files with the same name as the DN of client's certificate, then it's just add there

    ifconfig-push <ip-of-server-in-vpn> <ip-of-client>

    where server's IP is the one on tun interface (private IP)

    • 0