I have the following scenario that I’d like to see if even my concept is possible.
Two networks A and B. Network A is VLAN 100 provided through esxi, so I don’t even get to choose the vlan as its set on host level. Network B on host level is configured as trunk for clans 200-400.
Network A is a general lan network, but Network B, with each clan from 200 to 400 is a separate network. I’d like the vyos device to serve as a point of contact on each Network B through VPN connection from clients on network A.
I know the IP subnets on Network B VLANs, and I’d like if possible to not have a static interface on any of the VLANs, but rather have a client popup on that (network b specific lan) network once connected.
I know this could be done through routing, but I want to control clients who have access to specific VLANs and only connect when needed.
I was thinking of setting up wireguard on Network A and then providing a VPN connection to each VLAN as needed. The only problem is that I would need static IP’s on each VLAN that I need to connect to. I wondered if there is a way to dynamically add vyos NIC when a client connects on a specific VLAN.
Perhaps there are some other approaches to solve this?