Hi All,
I am looking at using OpenVPN as a solution for our company (the paid version, not the community) and I am going through their website to learn as much as I can. As I have never setup a VPN solution before, it is starting to feel a little overwhelming. I would like to outline what I want to accomplish and get some feedback on if it is possible with this product and what level of effort is needed to do so.
For starters, I want to deploy the Virtual Appliance on an ESX host at a remote office (try there first and perhaps use at HQ if it works well) and it will handle connections from 2 remote PC's located at aggregate pits. The purpose of the link will be so as to allow a piece of software that uses local SQL databases to do sync's between the pit computers and the main database at the office. That plus make administration\updating of the pit computers easier. Now for the questions:
1)I would like this LDAP integrated and from what I read, this is possible. It also looks like I can set things up on the client to auto connect to VPN when a specific user logs in. Is my understanding correct?
2)For the Virtual Appliance, is it better to use two vNIC's instead of one, one publicly facing and the other internally facing? I see that using a single NIC is possible but would I see better performance, more flexibility using two? Should I actually add a physical NIC to the host for linking to the router for the public traffic?
3)I already have a Server 2012 certificate authority setup and I would like to leverage this. All my client computers, even remote, are domain joined and get certificates. Can I setup the Virtual Appliance to use the CA or do I need to use a Windows version? Can I also have things set so that the only devices that can connect using VPN are ones with a valid cert from my CA?
I'm sure I'll have other questions with this as time goes on but for now, that's all I have. Thanks!