VPN PC to PC to bypass "home" NAT

[mfran2002]

Hi there,
nothing illegal.
I would like to estabilish a VPN with my PC at home, when I'm away (holiday, work...) with another laptop

My provider at home uses NAT, and when I'm away from home I will use my smartphone as hotspot
I already hve setup a dynamic address with a provider, and that dynamic IP is assigned to my "external" laptop

My idea is to create a VPN with my home PC as client and the external laptop as server.
My home PC will "call" the server to establish the VPN, bypassing the NAT.

One of my million doubts is: "the public dynamic IP" is set to the external laptop or to the smartphone?

I tried this below, but it doesn't work (noting seems to arrive to the external laptop...).
I'm a beginner then I guess there is some mistake around... May someone help me to correct?

thanks!

home PC - client:

Code: Select all

port 1194
dev tun
ifconfig 10.10.0.2 10.10.0.1
secret mysecret.key
cipher AES-256-CBC
remote mydynamicIP.ddns.net
float

external LAPTOP - server:

Code: Select all

port 1194
ncp-disable
dev tun
ifconfig 10.10.0.1 10.10.0.2
secret mysecret.key
cipher AES-256-CBC
float

[TinCanTech]

Your idea will probably never work because your external laptop will always be behind a router which you do not have access to.

[mfran2002]

my external laptop take the line from my smartphone (settled as hotspot)

no router

[TinCanTech]

Your hotspot will also be behind a router which you do not have access to.

[TinCanTech]

I already hve setup a dynamic address with a provider, and that dynamic IP is assigned to my "external" laptop

Maybe I don't understand what you mean here...

[mfran2002]

since my "client" at home has to "calls" the server (the laptop) around the world, I have a dynamic IP (taken from the service "no-IP" for example)

i.e.: mydynamicIP.ddns.net

then I have installed a little "no-IP" client on my laptop to assign that dynamic IP to the laptop

in that way, when the home PC "calls" mydynamicIP.ddns.net, that call arrives to my laptop

what do you suggest to do?

[TinCanTech]

What IP address does your provider assign to your device ?

[mfran2002]

do you want I post the IP address assigned from no-IP?

[TinCanTech]

I want to know the first 3 digits of your IP address not your DDNS name.

eg: 62.63.64.x

[mfran2002]

ok, got it

146.241.36.x

[TinCanTech]

Now make sure your DDNS record is upto date.

[mfran2002]

Finally I was able to raise my VPN bypassing my ISP NAT

the only way, it seems to me, is to go through AZURE using softether VPN client and server

no way to reach DIRECTLY my home laptop in any way (I tried openVPN client/server, softether client/server, native windows vpn....no way)

I sincerely thank you all for your support and help, I will now open a new thread to understand if it is possible to connect a "openVPN client" to a "softether Server" passing from AZURE