Hi there. I am having doubts about this.

I have 2 nets (Headquarters and branch office) linked by a high speed internet connection.

Each net have a linux box acting as routers.
Each linux box have 2 NICs, one public and one private.

A kinda resume of this config:

Headquarters Linux Router HQ
10.x.x.x 10.0.0.1 (Priv) / 200.69.208.109 (Pub)
255.0.0.0 255.0.0.0 / 255.255.255.252

Branch Office Linux Router BO
90.x.x.x 90.0.0.1 (Priv) / 200.69.218.193 (Pub)
255.255.0.0 255.255.0.0 / 255.255.255.252

BO Clients access resources in machines inside Headquarter net.

I need to know if I can make a VPN connection between 200.69.208.109 and 200.69.218.193, making Linux Router HQ VPN Server and Linux Router BO VPN Client, and make this transparent to clients in Branch Office net, and force remote users (From everywhere except Local Headquarter and Branch Office) to connect HQ VPN Server with VPN Client software.

If this is possible, please recommend me a Linux VPN Server software.

Recomendations/suggestions/insults of every king will be welcome

Thanks in advance

Yes, It is possible.

IPsec will be the right choice for your network design. I deduced that you need to configure two types of VPN..namely..Network - to - Network and Road Warrior(For remote users) configurations.

I suggest you to read Building Linux Virtual Private Networks by Oleg Kolesnikov and Brian Hatch. You will find a step by step procedure for Network to Network and Road warrior configurations from Chapter 5.



Smooth

Smooth, thanks for answer. I will read what you suggest.

BTW, I think (tell me if I am wrong) that the IPSec solution for Linux is named Free/Swan, isn't it?

Thanks again!

Chris

If you have any queries, dont hesitate to msg me.

Your right about the Swan.