A VPN lets your team reach the office network securely from home, a client site or on the road, as if they were at their desk, with nothing exposed to the open internet. Omada handles this on the gateway, managed from the OC300 controller, and as a team that sets up secure remote access for businesses every week, here is how we approach it. Labels move between Omada firmware versions, so we have focused on what you are setting up and why.
First, decide what you need
Two common jobs, and they are different. Client-to-site lets individual staff connect back to the office from anywhere. Site-to-site links two offices into one network. Most businesses start with client-to-site, so that is the main focus here.
Step by step
- Pick your VPN type. In the OC300 controller, open Settings → VPN. Choose a Client-to-Site VPN (OpenVPN or L2TP/IPSec) for remote staff, or a Site-to-Site VPN (IPSec, or WireGuard on supported hardware) to link offices.
- Enable the VPN on the gateway. Under Settings → VPN, create the VPN and choose the type you picked.
- Create user accounts. Add each person under Settings → VPN → VPN Users with strong, unique credentials, and give them the connection profile for their device.
- Limit what they can reach. Under Settings → Network Security → ACL, scope the VPN so remote users reach only what they need, not the whole network. Least access protects you if a device is lost.
- Link offices if needed. For two sites, configure a Site-to-Site VPN under Settings → VPN between the Omada gateways.
- Secure and maintain it. Keep firmware current, remove users as soon as they leave, and review access from time to time.
- Test from outside. Connect from a phone on mobile data or an offsite laptop and confirm you can reach what you should, and nothing you should not.
The rule that matters most is least access: give each remote user a route only to what they need. A VPN that drops everyone onto the whole network is convenient until a laptop is lost or an account is compromised.
Stuck at any step? VPNs are simple when they work and baffling when they do not, and you do not need to be a network engineer to get one right. We set up secure remote access for businesses every week, so if a tunnel will not establish or access is not scoped properly, one call and we will take it from here.
Frequently asked questions
Does Omada support VPNs through the OC300?
Yes. Omada gateways provide VPN services managed from the controller, including client-to-site options like OpenVPN and L2TP/IPSec for remote staff, and site-to-site VPNs for linking offices, so you do not need separate VPN hardware.
What is the difference between client-to-site and site-to-site?
Client-to-site connects an individual device (a staff laptop or phone) back to the office. Site-to-site permanently links two office networks so they behave as one. Most businesses start with client-to-site for remote workers.
Can I link two offices with an Omada VPN?
Yes. A site-to-site VPN between two Omada gateways joins the offices into one secure network, so staff and systems at each site can work together seamlessly.
Is an Omada VPN secure enough for remote work?
A properly configured VPN with strong credentials, current firmware and least-access rules is a secure, standard way to support remote work. The security is in the configuration, scoping access and managing users well, which is where we add value.
How Synergy Max helps
Remote access is easy to switch on and easy to leave too open. We set it up properly on your Omada network, the right VPN type for how your team works, access scoped to what each person needs, and a tidy process for adding and removing users. New to the OC300? See our first-time setup guide, and our Omada troubleshooting guide helps when something misbehaves.