point to point vpn

Mercutio · 25 Sep 2022 at 21:13

I'm pretty sure this would be relatively simple. Possibly even a pair of raspberry pi's with OpenVPN simple...

Have a device I can plug a laptop into. ALL traffic from this device is sent via VPN to a static target on another network (port forwarding etc would be needed but that's not hard to sort).
The target device would then pass all traffic back out to it's normal internet gateway.
Replies coming back would obviously need to follow the path back.

Yes I'm essentially after masking the source of my current internet connection.

Anyone got some hints on the easiest way to go about it?

WJA96 · 26 Sep 2022 at 07:32

Two Ubiquiti UniFi USGs. One at either end. They specifically have this functionality. Literally 4 clicks from logging into the controller. And USGs are cheap as chips now.

Or a pair of Mikrotik RB routers with the VPN endpoints set to one another. Not quite as easy as the USG option as you have to type in the IP address of the other router but that’s hardly difficult.

visibleman · 26 Sep 2022 at 12:07

Mercutio said:
I'm pretty sure this would be relatively simple. Possibly even a pair of raspberry pi's with OpenVPN simple...

If you haven't got the hardware on the "host" network to act as VPN server, router, spare system or the "target" device, then an RPI with WireGuard/OpenVPN wouldn't be a bad shout and certainly one of the better inexpensive solutions albeit requiring a little bit of setup (plenty of guides around).
Otherwise if you have the hardware then just use that or alternatively you use a router that supports acting as a VPN server.

"Client" side, if the "device" supports ethernet/WiFi and VPN connections then great but as you've mentioned, you could either use your laptop or another device like an RPI to act as bridge between "Device" and VPN tunnel.

Needed throughput would be the only thing to think about as that would arguably determine what hardware to use.

Caged · 26 Sep 2022 at 13:24

If you use Mikrotik boxes you can utilise ZeroTier which is even easier than setting up IPsec.

bledd · 27 Sep 2022 at 07:44

Raspberry Pi at your 'home' location, with Pi VPN on it. Then on the laptop install Wireguard client.

When you want to VPN to home, open the client and connect.

PIVPN: Simplest way to setup a VPN

pivpn.io

Just need to pick a static IP for the Pi and port forward to it.

Static external IP would make things easier but you could use dynamic DNS to keep your external IP up to date.