Adding a whole branch office to a vpn

[nicolas]

Hello everyone, i would have some questions.

At The moment our VPN is quite simple:
One Server in a Datacenter as the Main VPN server, and many people with Laptops, connecting with own Certificates with the OpenVPN Client to the Server.

It Looks like this:




Now i want to Connect a whole office with a few Computers to it (there are no servers there, only a cheap router and some notebooks)
so my idea was, i take a router, flash openwrt on it and create following setup:
-every client in the office gets a ip from the vpn
-the router acts as default gateway for every client in the office, but not to the in the rest of the vpn


so it should look like this:


has anyone an idea how this could work ?

[janjust]

this is possible, but why do the clients in the remote office need an IP from the VPN? it's much easier to set up the DD-WRT box to be a local DHCP server AND an OpenVPN client and set up the right routing.
Assigning IPs via the VPN is possible but is trickier and more error prone.

Read up on 'expanding the scope' for details:

http://openvpn.net/index.php/open-sourc ... html#scope