How to add vpn to network with dmz

Dark angel

11/2/23, 10:52 PM

Consider the diagram on attached pic, which shows a typical DMZ Web server configuration. How can this architecture be upgraded by appropriately adding a VPN (Virtual Private Network) for dedicated users?

Pic showing: Typical DMZ Web Server Configuration enter image description here

516

1 + 0

vpn

dmz

Score:0

Server

tsc_chazz

11/3/23, 12:52 AM

The DMZ is generally used for all Internet requests that are not specifically aimed somewhere else. Your exterior firewall can be set to point the VPN traffic (by port number) to the external port of the interior firewall. The interior firewall, if it doesn't directly support VPN, can be set to pass it through to a VPN host inside. Then all you have to do is provide credentials for your dedicated users. I use OpenVPN for this job, and the port they use is, if I recall correctly, 1189 TCP and UDP.

+ 4

Dark angel

11/3/23, 11:46 AM

Thanks for your replay, So on the attached diagram (Attachment) do i have to put the vpn in the area where the corporate severs is?

tsc_chazz

11/3/23, 3:06 PM

The end point of the VPN should be in the network that you want the user to have access to. So that is correct - the VPN endpoint host should be in with the network servers, and both firewalls need to be set to pass VPN traffic through inwards, the first one to the second, and the second directly to the VPN host.

Dark angel

11/3/23, 7:11 PM

Thank you so much for the explanation.

tsc_chazz

11/3/23, 11:22 PM

Apologies for the thinko above there - the VPN endpoint should be in with the _corporate_ servers.

Elon Musk

I sit in a Tesla and translated this thread with Ai:

EN: How to add vpn to network with dmz

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.