I would like to create the following setup: two remote clients connect to each other from their local network using the VPN server on a public address. That would be a setup like:
[client A] ===> [VPN server] <=== [client B]
The challenge is that client B would use the VPN connection to connect to client A and get internet access through client A. So if client B has a public IP address 1.1.1.1 and would connect to client A with a public IP address 2.2.2.2 then all internet traffic of client B should originate from the public IP address 2.2.2.2
Since port forwarding is not possible on client A and B, it seems logic to install an external VPN server that both can access. If port forwarding would have been possible then I could of course setup a VPN server at client A and the required routing of internet traffic from client B through client A would be standard...
Any suggestions?
connecting 2 remote clients
-
- Posts: 1636
- Joined: Sun Feb 14, 2021 10:31 am
Re: connecting 2 remote clients
There are OS-level rerouting solutions but since you're not telling if client A is on Linux or Windows, here is an OS-agnostic network topology:
[client A + VPN server 2] ===> [VPN server 1] <=== [client B]
VPN server 1
- no bridge
- no SecureNAT
- no L3
- no VPN Azure
- no/yes IPsec/L2TP
- no/yes OpenVPN/MS-SSTP
- add 2 VPN users
VPN server 2
- no bridge
- yes SecureNAT with all defaults
- no L3
- no VPN Azure
- no IPsec/L2TP
- no OpenVPN/MS-SSTP
- add 1 VPN user
CONFIG
- cascade from VPN server 2 to VPN server 1
- set client A's VPN adapter to static IP 192.168.30.2 and no default gateway
- connect client A via "localhost" to VPN server 2
[client A + VPN server 2] ===> [VPN server 1] <=== [client B]
VPN server 1
- no bridge
- no SecureNAT
- no L3
- no VPN Azure
- no/yes IPsec/L2TP
- no/yes OpenVPN/MS-SSTP
- add 2 VPN users
VPN server 2
- no bridge
- yes SecureNAT with all defaults
- no L3
- no VPN Azure
- no IPsec/L2TP
- no OpenVPN/MS-SSTP
- add 1 VPN user
CONFIG
- cascade from VPN server 2 to VPN server 1
- set client A's VPN adapter to static IP 192.168.30.2 and no default gateway
- connect client A via "localhost" to VPN server 2