Page 1 of 1

Remote connectivity with outbound VPN

Posted: Tue Feb 23, 2016 7:31 am
by anon123654
My network setup currently looks like:

Code: Select all

Cable Modem -> WNDR3700 -> Gigabit switch -> cabled machines
                                          -> Wireless machine
With the WNDR3700 acting as DHCP server etc.

Previously I had my Gargoyle-based router operating as a VPN server so I could connect to home whilst away. This proved very handy.

Due to changes in local snoopery I have changed to operating the router as a VPN client utilising an external VPN provider. This enables all network connected devices including phones and tablets to benefit from the link and makes it very difficult, if not impossible, for browsing or downloading of emails etc to sneak around the VPN link as can happen when using some PC-based software as an alternative.

However, I'd really like to be able to connect back to my home network. Is it possible to have a dual setup whereby all outbound traffic traverses the VPN but still be able to connect to the home network remotely? The preference would always be to have the router as a VPN client thereby disabling traffic from avoiding the VPN.
Is it possible to pass through external ssh or VPN traffic to an internal server whilst maintaining the outbound VPN connection?
Would I perhaps need instead to have a small box running Pfsense or similar to handle the inbound traffic so the network looks like:

Code: Select all

Cable Modem -> WNDR3700 -> Gigabit switch -> cabled machines
                                          -> Wireless machines
                     -> PfSense/OpenVPN inbound
I'd prefer it if the router could handle everything but I'm open to suggestions as being unable to connect remotely is becoming a real pain.

Re: Remote connectivity with outbound VPN

Posted: Tue Feb 23, 2016 2:09 pm
by ispyisail
I don't believe this is possible with the GUI

maybe with command line (google openvpn etc)

It may be possible using the GUI with a second gargoyle router but I haven't fully thought this through yet.