Jump to content
Search In
  • More options...
Find results that contain...
Find results in...

Need a way to reroute traffic through work internet

Hi guys, I looked through a few pages of threads but couldn't find a fit for my problem. 

 

My job requires me to be available to log in to certain sites at almost all times, regardless of where I am. These sites are management sites for alarm systems in municipal buildings. Some of these sites are starting to get serious about security and as such are now whitelisting IPs and trying to keep that list as short as possible. My office is whitelisted, along with my higher ups office and the municipal building for whatever site it is. 

 

I now need a way to route internet traffic through the internet at my workplace (VPN?) which only my colleagues and I will have access to so we don't have to drive to the office to do small tasks if we are at another building. It can be a 4 hour drive to get back to the office. 

 

At the office we only have a few laptops for work and some real old desktops of questionable performance, and as you might suspect with municipal work, we don't have much of a budget either. I've heard of OpenVPN and WireGuard but those seem to require me to set up a Linux server, and I have minimal experience with that. We've tried just using TeamViewer but with old copper based internet that is too far from the nearest node to get past 20/2 megabit, TeamViewer was very slow and unresponsive, plus I have 3 other colleagues that will need access and TeamViewer's licenses are quite expensive. 

 

If I have to use OpenVPN or WireGuard, so be it. But I can't quite make sense of the setup so it would be great if anyone could clarify it for me. 

 

 

 

TL;DR: I need to reroute traffic from a few laptops through slow office internet, preferrably cheaply and simply. 

Reviews: JBL J33i   M50s   SRH440   Soundmagic PL50           

Link to post
Share on other sites

If your connected to your work VPN, then all your traffic will flow through that VPN. Your company IT should have VPN software available to you or what you should use to connect to there network and what requirements they have. 

PSU Tier List Thread

Please make sure to Quote me or @ me to see your reply!

 

"White Ice"

Ryzen 9 5900x | Asus Crosshair VIII Hero (Wi-Fi) | EVGA RTX 2080ti | Ballistix 32gb 16-18-16-36 3600mhz | Custom Water Cooling Loop | 1tb Samsung 970 Evo

2tb Crucial MX500 SSD | 2x 3tb Seagate Drive | Fractal Design Meshify S2 |  EVGA G2 750w PSU | 3x Corsair LL140 | 3x Corsair LL120

 

Dedicated Streaming Rig

 Ryzen 7 3700x | Asus B450-F Strix | 32gb Gskill Flare X 3200mhz | Corsair RM550x | EVGA GTX 1060 3gb | 250gb 860 Evo m.2

Phanteks Enthoo Evolv |  Elgato HD60 Pro | Avermedia Live Gamer Duo | Avermedia 4k GC573 Capture Card

 

Link to post
Share on other sites

If you're able and there's no wierd IT-related rubberstamping or red tape, OpenVPN would definetley be your best bet if you had to set one up yourself. I would look into if your orginisation already has a vpn service available to other users within the municipality and hook into that. Added benifit of if something goes wrong, it's not your fault.

 

Example:

 

my old work was for local government; we used their VPN solution (Cisco AnyConnect) when working from home to allow us to hook into our support infrastructure on-site.

 

Spoiler
Spoiler

"You know I was taught that if you don't have anything nice to say, don't say anything at all. You feeling me cocksucker?"

Spoiler

"Ethernet is internet juice. You have to press the internet really hard and you will get it."

Spoiler

"My quantum milk machine brings every boy to all the yards." non futuis et sursum

 

PC Specs! | I7-950 | 24GB RAM | 10TB Storage | GTX 970 Strix and a 560TI DCUII for Physx | 120GB 840 + 250GB 850 EVO | Asus xonar DGX

 

 

Please take a moment to look over the forum CoC here.

 

Link to post
Share on other sites
2 minutes ago, Lauen said:

If I have to use OpenVPN or WireGuard, so be it. But I can't quite make sense of the setup so it would be great if anyone could clarify it for me

If you have minimal experience with Linux, it's not going to be an easy or short task to get you up to speed. Wireguard would be the best option, since it's the fastest, most efficient VPN-tech available at the moment, but you'd practically have to know your way around a Linux CLI.

 

What routers do you have at work, though? They may have an option for setting up a VPN-server and that'd possibly be the easiest way of doing it. At least that's where I'd start from. If that's not an option, lemme know.

Hand, n. A singular instrument worn at the end of the human arm and commonly thrust into somebody’s pocket.

Link to post
Share on other sites
8 minutes ago, Lauen said:

Hi guys, I looked through a few pages of threads but couldn't find a fit for my problem. 

 

My job requires me to be available to log in to certain sites at almost all times, regardless of where I am. These sites are management sites for alarm systems in municipal buildings. Some of these sites are starting to get serious about security and as such are now whitelisting IPs and trying to keep that list as short as possible. My office is whitelisted, along with my higher ups office and the municipal building for whatever site it is. 

 

I now need a way to route internet traffic through the internet at my workplace (VPN?) which only my colleagues and I will have access to so we don't have to drive to the office to do small tasks if we are at another building. It can be a 4 hour drive to get back to the office. 

 

At the office we only have a few laptops for work and some real old desktops of questionable performance, and as you might suspect with municipal work, we don't have much of a budget either. I've heard of OpenVPN and WireGuard but those seem to require me to set up a Linux server, and I have minimal experience with that. We've tried just using TeamViewer but with old copper based internet that is too far from the nearest node to get past 20/2 megabit, TeamViewer was very slow and unresponsive, plus I have 3 other colleagues that will need access and TeamViewer's licenses are quite expensive. 

 

If I have to use OpenVPN or WireGuard, so be it. But I can't quite make sense of the setup so it would be great if anyone could clarify it for me. 

 

 

 

TL;DR: I need to reroute traffic from a few laptops through slow office internet, preferrably cheaply and simply. 

What kind of firewall does your office use? (if any) I used to work for an IT firm and we'd use Fortigates for our customers. They can use split tunneling for a VPN connection, so company traffic is routed to the company, other traffic is routed to home ISP. What would also be possible is a full VPN connection for all traffic, you can manually select policies for certain traffic based on destinations.

Link to post
Share on other sites

Who's in charge of the it infrastructure there? I use a watchguard firewall with SSL VPN which has been useful, but I also have a remote desktop server for staff to use.

Why not spin up a remote desktop server if you don't have one, in these trying times its probably going to become necessary anyway.

I'm an IT System Admin with 15+ years worth of XP, plus I've been tinkering computers since I was old enough to hold a screwdriver, so I usually know what I'm talking about.

 

Link to post
Share on other sites
7 minutes ago, Skiiwee29 said:

If your connected to your work VPN,

My company is an independent contractor working with the municipalities in our area. There's no "call IT" as we're just 5 dudes who know how to solder and connect wires better than the janitors. 

5 minutes ago, ixi_your_face said:

If you're able and there's no wierd IT-related rubberstamping or red tape, OpenVPN would definetley be your best bet if you had to set one up yourself. I would look into if your orginisation already has a vpn service available to other users within the municipality and hook into that. Added benifit of if something goes wrong, it's not your fault.

 

Example:

 

my old work was for local government; we used their VPN solution (Cisco AnyConnect) when working from home to allow us to hook into our support infrastructure on-site.

I have complete freedom in HOW I set it up, really. There's no IT department over me. 

5 minutes ago, WereCatf said:

If you have minimal experience with Linux, it's not going to be an easy or short task to get you up to speed. Wireguard would be the best option, since it's the fastest, most efficient VPN-tech available at the moment, but you'd practically have to know your way around a Linux CLI.

 

What routers do you have at work, though? They may have an option for setting up a VPN-server and that'd possibly be the easiest way of doing it. At least that's where I'd start from. If that's not an option, lemme know.

The router is a Zyxel 8702 according to the config page. the config page has nothing about VPNs on it. 

3 minutes ago, Naijin said:

What kind of firewall does your office use? (if any) I used to work for an IT firm and we'd use Fortigates for our customers. They can use split tunneling for a VPN connection, so company traffic is routed to the company, other traffic is routed to home ISP. What would also be possible is a full VPN connection for all traffic, you can manually select policies for certain traffic based on destinations.

Just a built in firewall in the Zyxel 8702 router and whatever Windows 10 calls a firewall. I'm hoping for something so simple on the client end it'll be like PIA / Nord, just click "on" and it's on. 

 

4 minutes ago, ObsidianAura said:

Who's in charge of the it infrastructure there? I use a watchguard firewall with SSL VPN which has been useful, but I also have a remote desktop server for staff to use.

Why not spin up a remote desktop server if you don't have one, in these trying times its probably going to become necessary anyway.

There's no IT department over me. We're independent and have to find solutions on our own.

 

 

If I have to, I will sit down and set up a Linux based server, I just wanna know if I absolutely have to or not. and if I have to, how do I do it? 

Reviews: JBL J33i   M50s   SRH440   Soundmagic PL50           

Link to post
Share on other sites
4 minutes ago, Lauen said:

the Zyxel 8702 router

Oof, that's a pretty awful box. Looks like you'll need to set up a separate VPN-server, yes, though there are about a billion different ways of going about that. Do you have some budget defined? One option would be to just buy an appliance that'd offer VPN-service.

Hand, n. A singular instrument worn at the end of the human arm and commonly thrust into somebody’s pocket.

Link to post
Share on other sites
2 minutes ago, WereCatf said:

Oof, that's a pretty awful box. Looks like you'll need to set up a separate VPN-server, yes, though there are about a billion different ways of going about that. Do you have some budget defined? One option would be to just buy an appliance that'd offer VPN-service.

I don't have a defined budget but as long as it's not in the hundreds of dollars range we could do it. If there's an option to just BUY a VPN service that lets me configure it to send traffic through the office internet without having to install a Linux server, that'd be great. Otherwise, WireGuard seems to be free aside from the labor of setting it up. 

Reviews: JBL J33i   M50s   SRH440   Soundmagic PL50           

Link to post
Share on other sites
3 minutes ago, Lauen said:

I don't have a defined budget but as long as it's not in the hundreds of dollars range we could do it. If there's an option to just BUY a VPN service that lets me configure it to send traffic through the office internet without having to install a Linux server, that'd be great. Otherwise, WireGuard seems to be free aside from the labor of setting it up. 

I'm a DIY kind of a person, all of my servers and the services I run (including both OpenVPN and Wireguard) are all set up by me, so I don't have any off-the-shelf hardware in mind I could recommend, but now that we have some idea of your budget, the other commenters may be able to recommend something. I know there are such options, I just haven't needed any personally, so I don't know any specifics.

Hand, n. A singular instrument worn at the end of the human arm and commonly thrust into somebody’s pocket.

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now

×