alaa.bahrani
Hi
I'm looking for a solution to VPN from one VLAN to another, and I don't know if OpenVPN can be used to do so.
In my current setup, I have multiple VLANs configured. Each with their own subnet.
- VLAN10: IT
- VLAN20: Servers
- VLAN30: Staff
- VLAN40: Wifi
Inter-VLAN routing is configured, and ACLs are in place to control who accesses what. Obviously the IT VLAN has the least restrictions.
When troubleshooting Staff, I would like to VPN from their VLAN to the IT VLAN in order to have proper access to various resources. The more natural solution would be using the Wifi VLAN and VPN into the IT VLAN since the IT Team always carry their laptops with them.
Can I setup an OpenVPN server on the IT VLAN as one interface and the Wifi VLAN as another interface to solve this issue? DHCP server is already setup in our environment, and the defined scopes cover all the needed VLANs including Staff & Wifi.
Appreciate your comments.
Thank You.
raptorjp
My guess is that it is possible. Why openvpn? Why not just add routes between the vlans restricted by ip? I haven't done much in the way with my vlans like that, but I guess that would be my first approach before I went down a vpn route. I use vpn to connect to my work network from the outside.