I'm working in a small company that provides helpdesk and development services to various clients, all of whom have their own VPN configurations. We often need to connect to their VPNs to access databases or virtual machines. Here's the catch: we can't set up permanent Site-to-Site (S2S) connections for various reasons.
What I'm looking for is a system that lets us connect to multiple VPNs simultaneously without having to install every VPN client on our local users' machines. I have a few questions about this:
1. How is this typically handled?
2. Is my idea of using LXC/VMs to create a client for each VPN connection viable? I envision a web portal where users can request access to specific customers' VPNs, triggering automatic connections and routing rules.
3. Would you approach this differently?
4. Are there any existing solutions that resemble this setup?
5. What other recommendations would you have for solving this problem?
4 Answers
If you're working with servers rather than on-site end-user support, the method I used was to run a Virtual Machine (VM) for each client on my home server. You can set it up with their specific VPN client, then just RDP into the VM to connect directly to their infrastructure.
You might want to check out Devolutions Remote Desktop Manager. It can configure various VPN profiles and share them with your team. Although it can be complex, it offers customization that can automate your remote connection needs. I've found it useful, although it does require some setup to optimize.
For situations like yours, remote support tools were designed to simplify connection management. Tools like ConnectWise Control can be really helpful. Additionally, if screen sharing tools aren't an option, setting up a jump box with SSH tunneling can provide secure access without direct client installations.
As someone who manages IT internally, I can say that we don't allow external teams unrestricted access to our systems. Instead, we facilitate secure connections through remote sessions, ensuring we terminate those connections once the necessary work is completed. This method protects our security while still providing access for support services.
Related Questions
Can't Load PhpMyadmin On After Server Update
Redirect www to non-www in Apache Conf
How To Check If Your SSL Cert Is SHA 1
Windows TrackPad Gestures