Page 1 of 1

OpenVPN Access Server client gateway hardware device recommendations

Posted: Mon Dec 07, 2020 11:13 pm
by johnnyboy1981
Hey everyone.

I've got an access server set up at our company's headquarters.

My plan is to get all the satellite branches connected using client gateways to achieve a site -> site style configuration.

This is working great when I install the client on my laptop and can connect to my headquarters site and my headquarters site can connect to my local subnet at a satellite site.

Now I want to make the next step and actually deploy an OpenVPN capable router at each satellite site.

What hardware devices would you recommend that support being client gateways?

Thanks for any assistance in advance.

Re: OpenVPN Access Server client gateway hardware device recommendations

Posted: Thu Dec 24, 2020 6:21 pm
by johnnyboy1981
Well thanks for the overwhelming response guys!

I took a chance and ordered a Ubiquiti EdgeRouter X Series. Super cheap (like around $60). It works like a charm.

You just need to upload the config file (ovpn file) to the config folder of the router using WinSCP or SSH. Then SSH to the router again and run these commands:

# configure
# set interfaces openvpn vtun0 config-file /config/nameofyourconnection.ovpn
# commit
# save

Then set up the router to masquerade for the VTUN0 interface, add some firewall rules to allow the traffic to pass and away it goes. Could not be simpler.

If anyone finds this post and needs help email me at: john (at) thegreenroom dot org dot nz

Regards, John.

Re: OpenVPN Access Server client gateway hardware device recommendations

Posted: Thu Dec 24, 2020 6:25 pm
by TinCanTech
You specifically asked about Access Server .. those guys don't read these forums very often ..

Now it looks like you are using OpenVPN FOSS ..

We don't really know what you are doing ..

Re: OpenVPN Access Server client gateway hardware device recommendations

Posted: Thu Dec 24, 2020 8:57 pm
by johnnyboy1981
No I'm still using OpenVPN AS.

I was only being facetious about the lack of response. I realize it's a somewhat free product and as such you have to work these things out for yourself from time to time.

Regards, John.