VPN access to single computer on network

[sladans]

Thank you very much ColinTaylor and Maverickcdn. You have been very helpful! I am going to set this up and I will report back.

 

[Maverickcdn]

I understand the first part of this, but I do not understand what you mean by "And then disallow client -client so the VPN cant access primary clients"

Ya, ignore that, guess I didnt edit that post fast enough

Was thinking of ways you can run the VPN on the primary router for performance, forgot your secondary router WOULD be a client so setting the disallow would be no bueno

 

[Maverickcdn]

Thank you very much ColinTaylor and Maverickcdn. You have been very helpful! I am going to set this up and I will report back.

Have fun experimenting, I guarantee you'll learn something

 

[Mike S]

I am trying to enable a remote user (my accountant) to access Quickbooks by logging onto my AC88U via OpenVPN and then using Remote Desktop to access a single computer running Quickbooks.

I am using Merlin firmware and am currently able to run OpenVPN server on my AC88U and use the OpenVPN client to log into the entire network and then use Remote desktop to access any of the computers on the network.

Is it possible to configure OpenVPN/AC88U to only provide a specific user with access to a single IP address/computer on the network (versus all of the computers on the network)? Is there some other way to accomplish this?

A simpler way to do this is to not use a VPN connection at all. I setup port forwarding in my router to forward the RDP ports to the PC you want to access. You still have the problem that the accountant has full access to your network after he connects to your Quickbooks PC.

Note: You can use the same approach to provide RDP connections to multiple PCs on your LAN. Just use different custom ports on your Remote Desktop Client computer for each seperate PC you want to connect to, and then map each of those unique ports to the standard RDP port on the IP address of the PC on your LAN that you are trying to connect to.