Re: [PLUG] VPN design for home use

[Rich Freeman <r-plug@thefreemanclan.net>]

On Fri, Sep 21, 2012 at 1:39 PM, Paul L. Snyder <plsnyder@drexel.edu> wrote:
> Option 1: Use the server as a VPN gateway. Add a second gigbit NIC and
> hang a switch off of it; connect all the other wired devices to the switch.
> Set up the server as an OpenVPN gateway to the VPN tunnel.

I'd probably just do this.  If you're going to tunnel everything
through a VPN going both ways then it really doesn't matter how many
layers of NAT you have to traverse.  The router doesn't have to do
anything special - it just sees you have one PC on your network and it
just keeps one connection open 24x7.

> And, as a final wrinkle...once all this is set up, I'd like to be able to
> connect my laptop back to my home network when I'm on the road.

I'd think that as long as your remote IP is stable on the other end of
the home VPN that you should be able to tunnel a VPN through that VPN.
 If your VPN provider has some cleaner solution by all means use it,
but if you're running a linux server as a router, then it just runs
two VPN daemons.  One creates an interface that the local LAN NATs
into with firewalling.  The other creates an interface bridged onto
your local network, and it sends its data through the first VPN
interface.

I have little practical experience with VPNs, but I'd think something
like this should be pretty do-able.

Rich
___________________________________________________________________________
Philadelphia Linux Users Group         --        http://www.phillylinux.org
Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
General Discussion  --   http://lists.phillylinux.org/mailman/listinfo/plug