How can I set-up a VPN inside VPN?

VPN
1

I know someone who need help with the following task:

They need to use a VPN to fake that they are in another country and access a service. This wouldn’t be an issue, but the service requires its own VPN (which logs the IP addresses and checks its location, and they have to be in a specific country). The machine is locked and they cannot install 3rd party applications or edit system settings.

They need a way to mask their connection using a VPN (setting it to their old country), and then connect to the network. So far, they’ve tried using another machine, connecting it to a VPN, and then connecting the PC I’m gonna use to the “VPN machine”, but the system’s VPN overrides the VPN of the other computer and the IP is not masked.

I know it’s possible to use a VPN, create a VM and then use another VPN there but again, they can’t install a 3rd party VPN or a VM on the computer.

The only idea we had was to buy a router with built-in VPN support, connect to its Wi-Fi (with an already tunneled IP) and then use the company’s VPN, but we have no idea if that will work or not.

I was wondering if you guys had any other suggestions, because it’s for a really important cause.

2

That is correct.

Since you cannot install anything on the work laptop, or it will be noticed for that matter. You must create the VPN on the network the laptop connects to so the laptop only sees this as a normal home network.

You can setup a router with a VPN and tunnel all traffic through your home network in your home country.
When you connect your work laptop to that router your employer will only see the public IP in your home country in the VPN logs.

3

You can also ask your employer for you to work out of country.

I wonder if you are going to lie on a job application about your location.

4

You want to run the VPN on a router. Ideally, you want to run the VPN server on a residential IP address (e.g., a family member or friend’s house). Using a commercial VPN service might trigger an IT alert (just like how Netflix blocks VPNs).

In order to host your own VPN server, you need a public IP address from the ISP. If you do, most likely the IP address will be dynamic, so you need to set up DDNS and use a domain name to access the VPN server. Here’s an example of the steps involved: https://www.pcwrt.com/2021/01/the-complete-guide-to-setting-up-a-wireguard-vpn-server-at-home-with-pcwrt/.

And, IP address is not the only thing that may reveal your location. WiFi, cellular and bluetooth signals can also be used to locate the device. It’s better that you put the device in airplane mode and use an Ethernet cable to connect to the VPN client router.

5

are you looking for a pure plug and play solution? Try keepmyhomeip.com.

6

Thank you for clearing that up!

7

I’m not, and I don’t even use a VPN, I’m asking this for someone else, who is less tech literate. And no, that’s not what they need it for.

8

Thanks for this great explanation