router to router VPN

Mercutio · 14 Jul 2020 at 00:48

Can... anyone recommend the cheapest setup possible that would allow me to select devices on a local network that would then route all traffic from that device over a VPN tunnel to another network (bi-directional too)?

I... could probably get there with some trial and error (have a bit of networking background and get the basics + a bit more) but some suggested kit and approaches would likely make this rather easier. I'm guessing pfsense can likely do exactly this so... that's my fallback.

Essentially after routing traffic for a certain machine on a friends network so it comes over to mine and leaves my network as general internet traffic for.... reasons.

So... friends device, traffic from that specific machine hits his router, comes over the VPN to mine, leaves my network back to general internet/ISP traffic as being from my network, replies get correctly routed back bouncing through my networks router.

Both routers would be using NAT too so there's a little complication with port mapings/etc.

Bluecube · 14 Jul 2020 at 10:52

What router do you have?

I have WireGuard set up on a Raspberry Pi. This allows me to connect to my home network and route all traffic through my home network and internet.

Janesy B · 14 Jul 2020 at 11:13

Bluecube said:
What router do you have?

I have WireGuard set up on a Raspberry Pi. This allows me to connect to my home network and route all traffic through my home network and internet.

What you describe is a remote access VPN, OP is after a site to site VPN.

Any router that supports site to site IPSEC VPNs will be fine. You might need to setup dynamic DNS if you're on a normal residential connection as IP addresses may change.

One thing to note is that you should be using different LAN subnets on the routers, so one network will be 192.168.0.0/24 and the other 192.168.1.0/24 for example. You'd also need to setup a static default route to the other end of the VPN if you wanted internet traffic to traverse the VPN. You can do this in windows.

https://superuser.com/questions/1021371/in-windows-10-how-do-you-ensure-all-traffic-goes-through-vpn

Bluecube · 14 Jul 2020 at 11:40

@Janesy B you’re right but as the OP only needs a single machine to access his network then what I mentioned is a viable solution.

Mercutio · 16 Jul 2020 at 20:30

I'd need the router to catch it, no software on the machine going over the vpn.
Cheers for some useful bits there Janesy B

Is there anyone needed from the client machine? I literally want to be able to filter by... whatever IP/mac and everything from that machine, when it hits the router goes over to my network.