RHEL5 as VPN gateway?

Spetnik · 09-29-2009, 05:54 PM

I have several virtual installations of RHEL5 (2.6.18-028stab056). I would like to be able to create a virtual network (SAMBA, APACHE, etc) with these machines and allow my client companies to access them via VPN (clients are using Windows).

Here is what I am thinking:

1. Machine1 will run a VPN server. Clients can either have their router connect to the VPN (preferred) or run clients on individual machines.
2. Machine2 will be a SAMBA domain controller for Windows; Machine3 will be a SAMBA file server; Machine4 will be an Apache server for intranet sites.
3. Machines2-4 will be firewalled, blocking all inbound access from the internet. Inbound access will only be allowed from Machine1.
4. Clients will log in to the VPN server on Machine1 (as in item 1) and thereby connect to Machines2-3.

Does this make any sense at all and if so what is the best way to go about it? I was looking into ipsec but I am unclear as to the method of installation and configuration. I have also thought about OpenVPN, but I am also concerned about compatibility with my clients' networks (what are my options for OpenVPN routers?).

Thanks
AS

foodown · 09-30-2009, 02:39 AM

This all sounds quite realistic. OpenVPN would be a good choice. It supports multiple tunneling protocols and has a nice, easy-to-use, web-based configuration tool similar to most home routers. It should be compatible with just about any router capable of acting as a VPN endpoint, or any single-host based client.

It also comes with an X-based VPN client for testing; of course you could always have you Windows machines test as well.

Spetnik · 09-30-2009, 03:54 AM

Thank you so much.

What would I do without the internet (though without the internet my question would never exist)?

Spetnik · 09-30-2009, 06:49 AM

Quote:

Originally Posted by foodown

This all sounds quite realistic. OpenVPN would be a good choice. It supports multiple tunneling protocols and has a nice, easy-to-use, web-based configuration tool similar to most home routers. It should be compatible with just about any router capable of acting as a VPN endpoint, or any single-host based client.

It also comes with an X-based VPN client for testing; of course you could always have you Windows machines test as well.

After some research, most of what I have seen seems to indicate that only DD-WRT routers will be able to act as a client for OpenVPN. What did you mean when you said "It should be compatible with just about any router capable of acting as a VPN endpoint, or any single-host based client"?

Thanks
AS