Point-to-Point VPN - both ends behind NAT Router

[komobo]

My office has a Vodafone Mobile 4G/5G internet connection so it don't have a public IP address - the modem/router picks up a10.x.y.z address from Voda's private DHCP pool, and any time I connect to a server on the internet I get NATed through one of Voda’s gateways and pick up its IP address, so I can’t make inbound connections to my router as Voda’s gateway won’t do port forwarding for me (I believe).

I have an EdgeRouter X that I want to set up as an OpenVPN server so I can get into my office LAN from outside, but that would appear to be impossible as I don’t have a public IP address.

My home internet connection is through Virgin Media and this does have a real public IP address (and actually a static one because it’s a business account) so I could put a second EdgeRouter X there running OpenVPN with “client-to-client” enabled, set up the Office ERX as a client, then connect into my Home ERX from a laptop running OpenVPN client, leapfrog from there to the Office ERX and from there access the office LAN. The downside of this approach is that all traffic will be travelling through my Home ERX and my home internet connection where what I really want is for the laptop to have a point-to-point connection to the Office ERX, only using my Home ERX as a rendezvous with a public IP addresses to get things started.

I’ve read of techniques such as “hole punching” that allow peer-to-peer connections to be set up with devices behind NAT routers. Can I do this with the two ERXs that I have in my possession? If so, how?

In a nutshell, my goal is to allow a laptop to connect to the office LAN without all the traffic bouncing through my home network.

[TinCanTech]

Try OpenVPN Cloud.