0

An external company needs vpn access to a specific PC. On this PC (Win10) a program is running which is to be controlled remotely via rdp. This PC then connects to a server (Win10).

I want to avoid any access from this PC into our LAN. Therefore the server got a second network card.

We use a wlan router with SIM card for internet access in the office. Our normal LAN (192.168.1.X) is connected to the Ethernet port of the router.

I have currently created a guest wifi and in this wifi is the RaspberryPi with pivpn. The guest WLAN currently has the same address range as our LAN. But I can disable the communication between WLAN and LAN later.

I can currently connect to the RPI4 from outside via OpenVPN.

WLAN router: 192.168.1.1 LAN: 192.168.1.X

RPI4: wlan0 192.168.1.110 eth0 with static IP: 10.0.10.110

PC: static IP 10.0.10.120 - Windows 10 gateway: 10.0.10.110

Server second network card: 10.0.10.130 - Windows 10 gateway: 10.0.10.110

The RPi4 is connected via eth0 to a switch where also the PC and the server are connected via the second network card.

How to configure access through VPN so that the client can connect to the PC via remote Desktop and the PC have access to the server?

So how does the traffic come from wlan0 via eth0 to the LAN behind the RPi and back again?

KR and sorry for my english - it's not my native language ;)

He Ra
  • 1
  • 1
  • The VPN client connects to the PI, That client needs to have a route to 10.0.10.120 over the VPN connection, you can probably push this. If the RDP PC has a route back to VPN network (which you never documented IPs of) then it should reach both back and forth, you can always use tcpdump to see how far traffic goes in each direction. – NiKiZe Jan 19 '22 at 08:47

0 Answers0