So how do i create a virtual network bridge over the internet??

[Cole123456]

So.. i have a home network with a cable modem and a RT-AC86U with the merlin firmware.

I need to create a device with an ethernet port for a computer to plug into that ideally can either plug into uplink or connect to a wifi network. Ideally, these ethernet ports would just "be on" my local home network?

Does this make sense?

How would i go about this? What sort of device should i buy as my remote device...

I assume i need to setup a VPN server on my home RT-AC86U device... and a VPN client on the remote device? Any suggestions on which or what settings? etc.

 

[ColinTaylor]

Does this make sense?

Not really. Can you give an example of situation where you would want to do this? It sounds like you're talking about a VPN client but the scenario is not clear. If the remote client has internet connectivity you just need to install the VPN software on it. If the client doesn't have internet connectivity you need to get it via something like an LTE modem.

 

[Cole123456]

Not really. Can you give an example of situation where you would want to do this? It sounds like you're talking about a VPN client but the scenario is not clear. If the remote client has internet connectivity you just need to install the VPN software on it. If the client doesn't have internet connectivity you need to get it via something like an LTE modem.

See attached picture. I can't install software on the computer, i need it to act like its on my home network.

if my new device can offer both wireless and wired connectivity to my home network via either wired or wireless uplink, that would be ideal, but my bare minimum requirements are "wireless uplink" and "wired to device"

the wifi hotspot might be something I own like a LTE mobile hotspot... or someones house, etc.

 

[ColinTaylor]

These devices (travel routers) are designed for this kind of job. I don't know whether they support TAP mode or just TUN, you'd have to check the documentation.

GL-MT1300 / Beryl

Beryl (GL-MT1300) is a high-performance pocket-sized router that offers a powerful CPU and top-notch cybersecurity protocol at affordable price.

www.gl-inet.com

GL-AR750S-Ext / Slate

For the frequent travellers, Slate is the perfect portable Wi-Fi router, keeping your connection private & secure, supported by multiple VPN services.

www.gl-inet.com

 

[Cole123456]

These devices (travel routers) are designed for this kind of job. I don't know whether they support TAP mode or just TUN, you'd have to check the documentation.

What is TAP vs TUN? Sorry.

 

[somms]

not sure if this is what you are looking for but I have used the above site-to-site OpenVPN configs on 2 merlin ASUS wireless routers to accomplish bridging between two remote locations

Only caveat for this TAP setup is the following firewall-start script I am running on each router to prevent opposite router from attempting to hand out DHCP leases to devices parked at remote location...

#!/bin/sh
logger "firewall" "applying firewall-start rules"

ebtables -D INPUT --in-interface tap+ --protocol ipv4 --ip-protocol udp --ip-destination-port 67:68 -j DROP
ebtables -D INPUT --in-interface tap+ --protocol ipv4 --ip-protocol udp --ip-source-port 67:68 -j DROP
ebtables -D FORWARD --out-interface tap+ --protocol ipv4 --ip-protocol udp --ip-destination-port 67:68 -j DROP
ebtables -D FORWARD --out-interface tap+ --protocol ipv4 --ip-protocol udp --ip-source-port 67:68 -j DROP
ebtables -I INPUT --in-interface tap+ --protocol ipv4 --ip-protocol udp --ip-destination-port 67:68 -j DROP
ebtables -I INPUT --in-interface tap+ --protocol ipv4 --ip-protocol udp --ip-source-port 67:68 -j DROP
ebtables -I FORWARD --out-interface tap+ --protocol ipv4 --ip-protocol udp --ip-destination-port 67:68 -j DROP
ebtables -I FORWARD --out-interface tap+ --protocol ipv4 --ip-protocol udp --ip-source-port 67:68 -j DROP

 

[ColinTaylor]

What is TAP vs TUN? Sorry.

They're the two different types of tunnelling interface used by OpenVPN. TAP it a "bridged" connection so the client behaves just like any other client on the remote LAN. TUN is a "routed" connection. It has a lower network overhead and tends to be more reliable but the client is on a different subnet. This means that you can't "browse" the remote network and might have to make some firewall changes on devices you want to connect to.

 

[Cole123456]

thanks for the help thus far... one other quesiton.. if that computer is a corporate device and has to use some sort of VPN... will the vpn run over the vpn? any particular thoughts on if this will work?

basically the corporate device needs to look like it is running at my house... I can get details about the corporate devices Vpn... (it isn't mine.. its a relatives)

there is less of a need for remote devices to access things on my LAN, it is more they need access to the internet.
Does that mean TUN will be good enough?

 

[ColinTaylor]

thanks for the help thus far... one other quesiton.. if that computer is a corporate device and has to use some sort of VPN... will the vpn run over the vpn? any particular thoughts on if this will work?

It might work but I'd expect it to be dog-slow, especially with those travel routers mentioned above which already have low VPN throughput.

basically the corporate device needs to look like it is running at my house... I can get details about the corporate devices Vpn... (it isn't mine.. its a relatives)

I can't say I understand the need for your relative to pretend to be at your home when they really aren't. It sounds like he's deceiving his employer which is always a bad idea.

there is less of a need for remote devices to access things on my LAN, it is more they need access to the internet.
Does that mean TUN will be good enough?

TUN is usually a better choice if you're just doing regular internet browsing.

 

[Cole123456]

would a more powerful asus router setup in repeater mode with a VPN client work better then those travel routers?

 

[ColinTaylor]

The VPN client isn't available in repeater mode, it needs to be in router mode.

 

[Cole123456]

oh ok. and in router mode, there isn't a way to have a wifi connection as my wan, correct?

 

[ColinTaylor]

oh ok. and in router mode, there isn't a way to have a wifi connection as my wan, correct?

Correct.