GyroTech
Hello all, I am trying to work up a 2 part system and I'm not sure of the best way to proceed with it. I shall begin with explaining cur current setup and what I'd like to achieve.
LAN: 192.168.125.0/24
Router - pfSense 2.0 box with ADSL + dynamic IP
Mobile units:
Various devices (laptops, tablets, mobile phones)
VPS:
A virtual private server with a single public IP
The setup:
Primarily I want a VPN between the LAN and the VPS, so that I can access the VPS as if it were on the LAN (or at least a private route-able subnet). The VPS will run configuration\access\monitoring services listening only on the VPN not on the public IP. The VPS has to be able to initiate communication to the LAN rather than just respond. The VPS will also need to accept 'roadwarrior' type connections from the various mobile devices. The VPS should not act as a default gateway to connected devices, only access to the VPS need be routed through the VPN.
The LAN should also be able to 'host' a VPN, with the mobiles connecting to it and communication with the various servers on the LAN, including Samba, WINS, and DNS - though again only connections destined for the LAN\other VPN clients should be routed, any connections to public devices should be routed via the road-warriors default gateway. Ultimately the mobile devices should be able to communicate with the VPS via the VPN into the LAN, then from LAN to VPS.
Would it better to just have pfSense router running OpenVPN server with the VPS connecting to that as a client - or is it still feasabile (and not overly complicated) to run an OpenVPN server on both the VPs and pfSense?
My thanks in advance for any suggestions you may have