Remote site connectivity

[Archipelego1]

Hi all,

 

we have a requirement to connect a remote office to our main network. This office is only used by staff, no students.

 

Currently our laptops/PC's have VPN software installed that connects back to the main firewall. I'd like to look at something a bit more centralised, where client devices don't need individual VPN software. The building we're in has shared internet, so we can't install our own external connection. We'd also like to avoid installing any servers in the office.

 

Has anyone accomplished something similar to this?

 

In the past, I've seen a solution using Meraki AP's. The Meraki AP's would create their own tunnel to a virtual appliance hosted in our central datacentre. Client devices would then connect to the AP though a normal SSID and would have a connection to our LAN, without anything needing to be configured by the user. Does Meraki still offer this as a solution?

[djm968]

Have you had a look at VPN routers? https://uk.pcmag.com/vpn/119259/the-best-vpn-routers-for-2020

[ITGURU]

Connect both to same line provider and have a a site-to-site link which doesn't go over the internet.

[LTurner3692]

Yes, Meraki does still offer this. We use it for multiple sites across the world.

[Archipelego1]

Yes, Meraki does still offer this. We use it for multiple sites across the world.

 

Could you tell me what the product name is. Just been looking for it on their website but not sure of what it's called exactly

[MatthewL]

Aruba have the same functionality as the above and theirs is called a RAP, it just create a VPN tunnel back and broadcasts your WiFi and deals with the VPN itself.

[LTurner3692]

It's just called a Site-to-site VPN, I don't know if all models do it, However, we use switches to do it in some offices, if its a small building an MX64W should do the trick well.

[DrBeaker]

Is it a remote site miles away or just an outbuilding etc of sorts on the premises? It's either fibre or a site-to-site VPN as other posters have already mentioned.

[Archipelego1]

The offices are located in other parts of the country.

 

Our main school sites are connected via VPLS to our main site, it's just that we have a few outlying admin/support offices

[BKGarry]

Is your main firewall a SophosXG by chance, if it is RED is an option for you. It is a site to site VPN kinda tech, but you set it up, send it to the other site, and anything plugged into it works like it is on your main LAN

[Archipelego1]

Fortigate

[SparkySX]

Fortigate

 

Fortigate support site to site:

 

https://cookbook.fortinet.com/site-to-site-ipsec-vpn-two-fortigates/index.html