In a project I'm working on I need to connect several small networks to one main network, providing full visibility through hosts. In few words, I need to setup a bridging through several remote networks to one main network.
In detail, I have the following setup:
_ Many 3G industrial routers which are connected to 2 or 3 ethernet devices directly (the router has several LAN ports). Those are all private networks which can be configured as needed. _ One office with a VPN server which must be able to see all the devices inside every router network.
For example, let's say we have a device 'H' connected to a 3G router 'R'. The router must connect to the office through a VPN. From the office I must be able to see H to retrieve data and H to configure it. H must be able to see at least one device inside office network to send some watchdog and some monitoring data.
Main office network is 192.168.168.0/24. I have complete control on how H and R should be configured, which network mask to use. I can use port forwarding on R to forward only needed ports to devices, if needed.
My idea was to make several different subnetworks, (i.e. 192.168.1.0, 192.168.2.0, etc...) one for each remote router and use a VPN server to make those networks visibile from the office. My questions are:
- Is this network layout a good approach or is there a better way to achieve my requirements?
- Can I build this network with a PPTP VPN? If not, which other type of VPN should be used?
I've arranged the following scheme to better represent my actual logical setup:
My goal is to have visibility from 192.168.168.180 to 192.168.2.10 and viceversa.
Since network enegineering is not my job and I'm certainly not an expert on this subject I may have forgot some important detail or maybe VPN is not what I need at all. Please let me know if that's the case.