How can I connect to office network from user's home

Hi everyone,

Because my boss is gonna take vacation soon, and he wanna access office network from his home. Someone told me that I can use VPN. Is there anyone can help me to setup the connection between his home and office or any other easy way to setup ?
We have one public IP from ISP, which is for internet connection, and also one private IP, which is as 192.x.x.x
Really needs help from someone...Thank you.

 

What kind of router do you use ?

For Linksys, you can use they called "Forwarding" function.
For Dlink, there is a setup called "VCN" or something thing similar with linksys' "forwarding "
For Cisco, you can use NAT.

There are also a bunch of software like Zebra ... you can choose.

 

Hi Jason,

The one we use which is FortiGate 60, and I think it always has firewall function. Any idea about this one ?? Thank you.

 

I've heard good things about ...
Hamachi is a zero-configuration virtual private networking application.

 

I never used FortiGate 60.

However, one of my friend is working in FortiNet. I asked him about if this product has NAT function. He said yes and gave me this link:
http://kc.forticare.com/

If you have the manual for your FortiGate 60, that would be easy to find how to set it up.

 

Hi Jason,

Thank you so much to provide me the information.
I'm looking right now. Thank you....

 

Please note that there is a fundimental problem with this suggestion.

Using NAT and port forwarding on their own, to provide external access to internal resources is inherently unsafe. It is quite difficult to secure such a solution and the likely result is that you will not only open up access for your users to access internal systems, but also everyone else on the Internet!

If you want to allow remote access either use a VPN or a dedicated secure remote desktop solution such as GoToMyPc.

If you use VPN, I'd recommend using a hardware firewall and letting that control the VPN. Some routers can also provide this functionality (for example, the DrayTek Vigor2800 is the cheapest firewall/VPN solution I've used successfully). The alternative is to use a VPN service running on a PC or Server inside your network. This is OK, but again requires you to open up a hole in your firewall to pass the VPN traffic through (you can use NAT and Portforwarding to do this), so is less secure than dealing with the VPN at the gateway router.

 

Thanks Reggie!