I have the following use case for which I need to figure out a VPN solution.
- 100+ remote locations
- Each remote location has several users that should be able to connect to only that remote location
- Users are not in the same location as the remote location
- Users should have access to the local network of the remote location
- Different locations should not have access to each other
My idea is to have a central VPN server and than have each remote location and all users connect to that and somehow route traffic destined for the remote locations lan from the client, to the server, to the remote location.
I need to use a central vpn server as some of the network infrastructure is outside of my control and won't allow for incoming connections so the VPN has to be initiated from the remote location.
So far I've tried pfsense and openvpn and while I can set up the tunnel I cannot reach the remote lan in a client <--> server <--> client setup (I can in a simpler client <--> server setup). I'm also worried about managing such a large amount of locations and users with pfsense.