Weird VPN config - can it work?

[Patrick9876]

I have a simple VPN setup: OpenVPN server on a NAS; open port on a router; DDSN. Works fine for accessing a share on the NAS remotely from computers running the OpenVPN client. But one of the users needing access has difficult configuration:

1. The user has a laptop running an unsupported version of Windows that cannot (safely) be connected to the internet.
2. The user needs to connect from multiple locations using whatever wireless network is available.
3. The user is not a technical wizard. I will have to provide a black-box solution - hardware and/or software.

Point #2 means the solution can't depend on any special configuration in the remote router(s).
Point #3 means I can't use a VM solution with a Linux-based firewall and a virtual LAN connecting to a Windows "machine".

As near as I can tell I need something with a WiFi adapter, an OpenVPM client, an Ethernet (or "Ethernet over USB") output. Or maybe the "something" could have a WiFi adapter, a firewall, an Ethernet output, and the OpenVPN client could be on the laptop ... but then the firewall would have to be reconfigured whenever my ISP gives me a new IP address.

I know that wireless routers have all the parts necessary for this, but it seems like a nonstandard configuration. Would an OpenVPN client work on a router configured as a wireless bridge?

 

[ColinTaylor]

Given point #1 I suggest you use one of the GL.iNet travel routers that has been preconfigured as a VPN client. The laptop side should be plug and play for the end user. Not sure how you're going to manage connecting any device to whatever Wi-Fi network is available. Sounds like that part could vary depending on the location. So unless the Wi-Fi in each location is always the same and the SSID and login method/credentials never change...

 

[Patrick9876]

Given point #1 I suggest you use one of the GL.iNet travel routers that has been preconfigured as a VPN client. The laptop side should be plug and play for the end user. Not sure how you're going to manage connecting any device to whatever Wi-Fi network is available. Sounds like that part could vary depending on the location. So unless the Wi-Fi in each location is always the same and the SSID and login method/credentials never change...

Hmm. I didn't know the GL.iNet could be configured as a VPN client - never thought to look. Thanks for mentioning it.

The SSID and credentials would have to be set in the laptop if it were allowed to connect to the internet. Changing the same information in the router shouldn't be too difficult if it have a reasonable admin GUI. I've been thinking of getting a travel router anyway. If I get the GL.iNet and find it too difficult for this user to configure, I can use it myself for its more traditional use.