In a VPN LAN-to-LAN setting, is it possible to isolate one site from the other?
I know that we can use a firewall but that would obligate us to manage specific rules in the firewall. I would like to reduce management workload. Do you think that a firewall would be the best solution?
We think that a LAN-to-LAN VPN is the best solution but maybe not. The need is to connect to a cloud IaaS server through the Internet but:
- We want the communication to be encrypted always, probably using unencrypted protocols
- We want that some services in the server to be available only to our IPs
In other words, we don't want the remote LAN to have complete access to the local LAN...the setting we are looking for is similar to the navigation to Internet: local machines exit to Internet using the same public IP and from Internet is not possible to initiate a connection to a internal machine because they have local IP addresses that are not addressable from Internet. In this way, local machines are isolated from Internet because the NAT and not existing forwarded ports.