Office VPN Setup: Remote Access and Branch Office Connectivity

An employee travels for work and can’t reach the 1C database. A branch office in another city runs its own isolated network and ships files back and forth over email. Setting up VPN for the office solves both problems at once: staff reach internal resources from anywhere, and offices merge into one network, as if they sat in the next room over.

What’s included

This covers the standard case: giving employees access to work resources and connecting offices together. I do this with WireGuard or IPsec, VPN protocols that build encrypted tunnels between devices.

• VPN server setup on WireGuard or IPsec
• Connecting offices into one network (site-to-site)
• Connection instructions for users

How the work goes

%%{init: {
  'theme': 'base',
  'themeVariables': {
    'primaryColor': '#ffffff',
    'primaryTextColor': '#1e293b',
    'primaryBorderColor': '#94a3b8',
    'lineColor': '#64748b',
    'fontSize': '15px',
    'fontFamily': 'ui-sans-serif, system-ui, sans-serif'
  },
  'flowchart': {'curve': 'linear', 'nodeSpacing': 50, 'rankSpacing': 50}
}}%%
flowchart TD
    S1["1. Gathering requirements"]
    S2["2. Choosing protocol: WireGuard/IPsec/L2TP"]
    S3["3. Setting up VPN server on MikroTik"]
    S4["4. Site-to-site office connection and rollout"]
    S5["5. Testing and instructions"]
    S1 --> S2
    S2 --> S3
    S3 --> S4
    S4 --> S5
    style S1 fill:#f8fafc,stroke:#3b82f6,stroke-width:2px,color:#1e40af
    style S2 fill:#f8fafc,stroke:#94a3b8,stroke-width:2px,color:#1e293b
    style S3 fill:#f8fafc,stroke:#94a3b8,stroke-width:2px,color:#1e293b
    style S4 fill:#f8fafc,stroke:#94a3b8,stroke-width:2px,color:#1e293b
    style S5 fill:#f8fafc,stroke:#22c55e,stroke-width:2px,color:#15803d

1. Gathering requirements. I find out how many employees and offices need connecting, and which resources need access. Without this, you can’t pick the right scheme.
2. Choosing protocol and scheme. I decide what fits: WireGuard, IPsec, or L2TP. Depends on the hardware and speed requirements.
3. Setting up the VPN server. I deploy the server on MikroTik or on a separate server, depending on what’s already in the main office.
4. Connecting offices and issuing profiles. I set up tunnels between offices (site-to-site) and hand out connection profiles to each employee.
5. Testing and instructions. I verify everything works from all devices, and hand over user instructions.

What hardware you’ll need

You need a MikroTik with a public IP in the main office. If there’s no such router, I’ll deploy a server on a VPS as the collection point. Branch offices need routers to set up tunnels. I’ll pick suitable hardware if you don’t have any yet.

What gets deployed

• VPN server
• Profiles for employees: Windows, macOS, iOS, Android
• Tunnels between offices
• Access rules for internal resources

What you get as a result

After setting up VPN for the office, employees get access to internal resources from anywhere, offices work on a single network, and you’re left with user instructions and a list of granted access. You can see exactly who has access to what, no guessing involved.

Pricing

Base price starts at $100, timeline 1-2 days, all remote. Additional branches, two-factor authentication, and AD/LDAP integration are quoted separately.

Not included in the price: VPS rental, ISP fees for a public IP address.

After delivery: 14 days of free fixes for any issues. After that: one-off work at $20/hour, or ongoing support starting at $40/month.

What I need from you

• List of employees and resources that need access
• Access to office routers
• A public IP address, or the ability to get one from your ISP

Frequently asked questions

Is the work done remotely?

Yes, the entire process is remote, no site visit needed.

How long does setup take?

1-2 days from gathering requirements to handing over instructions.

What if we don’t have a MikroTik with a public IP?

I’ll deploy a VPN server on a VPS, which becomes the collection point for all connections.

What do we get after the work is done?

A configured VPN server, employee profiles for every platform, connected offices, user instructions, and a list of granted access.

What if something doesn’t work after delivery?

I fix any issues free of charge for 14 days. After that, one-off fixes are billed separately, or you can get ongoing support.

Can we add another branch office later?

Yes, each additional branch is set up separately, after the base configuration is done.

Related reading

• VPN on MikroTik: complete 2026 guide – WireGuard, L2TP/IPsec, IKEv2, server and client setup
• Remote access in Russia 2026: what actually works, what it costs, and how to replace TeamViewer and AnyDesk