Some other reason I’m not thinking about (please let me know if you have one in the comments!)Įverything will be done with the free community edition of eve-ng.

You have OPNsense/pfSense running at your home and have lots of devices that need to use the tunnel up to GCP.

You want to deep dive into how site-to-site VPN tunnels are setup between a homelab/branch location and GCP.

You want to gain experience setting up GCP VPN Gateway.

You have other instances in GCP that you’d like a site-to-site tunnel into without running your beefy eve-ng instance.

You want to fully automate the setup and teardown of the VPN tunnel using Google’s APIs ( this homelab post covers how to accomplish that in detail).

If you answer no to all of the following, go ahead and do Tony E’s eve-ng + ZeroTier YouTube series instead, you’ll be up and running way faster: If you find yourself answering yes to any of the following questions, you might be better off following this guide.

There’s a really good YouTube walkthrough from NetworkCollective covering exactly that, and I would recommend most people follow Tony E’s GCP eve-ng with ZeroTier instructions in that video instead of all my craziness below in this post. Instead of re-doing that old blog post, I thought it would be more fun to re-build my whole lab using 100% free network device VMs, no need to buy a Cisco ASA or ASAv to tunnel into your homelab this time! My final topology ends up looking like this, you can skip the Microsoft & Cisco ISE stuff if you’d like:ĭoing the OPNsense VPN directly into Google Cloud’s VPN Gateway is a bit difficult, it’s actually way easier to use a service like ZeroTier between your Google Cloud eve-ng instance and your homelab. Most tech blog posts about doing things step-by-step in a public cloud don’t age well, things change very quickly. Regardless of which network or security products you’re tinkering with in eve-ng, I hope you try it out on a public cloud sometime, it’s a real eye-opener as to what’s possible with AWS/GCP/Azure these days.

Ever since then, I’ve sort of turned into an evangelist about how everyone should burn their $300 Google Cloud New Customer Credit on a cloud eve-ng instance if you haven’t done so already, it’s really fun! Today I’ll be rebuilding my GCP eve-ng setup to be more of a “cyber range” I can use to study for the new Cisco ISE Certification Exam. Last year I wrote a long-winded guide on setting up a Cisco ASA site-to-site VPN tunnel into my eve-ng Google Cloud Platform (GCP) instance for my second bedroom homelab. As always, opinions in this post are solely those of my own, and not necessarily those of any organization I am currently affiliated with or have been in the past.

Eve ng connect to real network