Does OpenVPN support P2P access from outside company network?

Site Feedback
1

My small office has been using openvpn for remote worker to access their works from outside. However, since we change ISP, who implemented dpuble layered private IP, we are unable to access our OpenVPN server from outside.

What I mean by double layered private IP is, my miden received a private IP from a gateway who also under another gateway who also uses private IP from the main gateway that uses public IP. When I check my ip address with whatsmyip.org, the IP turns out to be not a public one. I forgot the term for that.

But when I use anydesk, it works from outside, but I am very anxious using anydesk.

Does OpenVPN has a solution like anydesk where we can do VPN connection with P2P?

I am trying to get around the private IP to be able to connect my network with OpenVPN.

2

I am guessing you need to ask them (ISP) to forward any ports needed through (or new ones if they are already 1194). So your external endpoint, they provide, can “bind” to ports and forward that you your ports.

3

Sounds like you have CG-NAT which is the pain for anyone ever trying to get into a network. You need to look up services like CloidFlare Tunnel which originates within the network punching a pin hole through the CG-NAT allowing further communications back into the network.

4

Check out Tailscale… might be a good alternative for you.

5

use a VPS as an external nexus point.

6

I did that, but their policy does not allow them to do that.

7

Yes, you are right CG-NAT. Do you have any info on cloud flare tunnel, especially how to set it to our pfsense.

8

Thanks, I am learning about this as well. Thank you.

9

It won’t work directly with pfSense, I use another storage OS called Unraid that lets me run Dockers, I have the tunnel running in a Docker then pointing to a reverse proxy which splits it out from there, but saying that you can actually setup the tunnel to work like a reverse proxy as well. So long story short you really need to run it through a Docker container. If you have a Docker service then there’s lots of tutorials on YT and online.

10

Thanks. I’ll check it

11

I tried, but they just refuse. I admit it is like you say. Good for security and bad for app and remote working.

12

Do you have the option to switch back to your old ISP or are you stuck with the new one?

13

I am pretty much stuck. The old ISP enforced FUP, which is an issue for us. They say “UNLIMITED” but in the small print T&C there is a 800GB FUP per month.