Secure VPN-based access to home server infrastructure from corporate networks behind enterprise proxies (Zscaler, etc.)
This solution enables secure, reliable access to home-based network infrastructure management servers from corporate workstations, bypassing enterprise proxy restrictions while maintaining security and compliance.
- 🔐 Dual VPN Strategy: Tailscale (primary) + ZeroTier (backup) for maximum reliability
- 🌐 Enterprise Proxy Bypass: Specifically designed to work through Zscaler and similar corporate firewalls
- 🤖 AI-Powered Management: Claude Code assistant with persistent memory and automation
- 🏢 Corporate IT Friendly: Security-first approach with compliance considerations
- ⚡ High Performance: Optimized for managing 812+ network devices across multiple organizations
- 🛡️ Network Management Focus: Purpose-built for Fortinet, Cisco Meraki, and multi-vendor environments
FULLY OPERATIONAL - Production-ready corporate network access solution:
- ✅ Battle-tested: Managing 812+ network devices across 7 organizations
- ✅ Dual VPN Strategy: Tailscale (primary) + ZeroTier (172.24.245.58) operational
- ✅ Corporate Compatibility: Proven through Zscaler, Fortinet proxies, and enterprise firewalls
- ✅ AI Assistant: Claude Code integration with persistent memory and automation
- ✅ ZeroTier Network: "Netintegrate Network" (af78bf94368967a6) with 10 connected devices
- ✅ Service Access: All network management services accessible via VPN IPs
- ✅ Documentation: Complete setup guides, troubleshooting, and corporate IT approval templates
Ready for immediate deployment and corporate use.
Corporate Workstation (behind Zscaler)
↓
[Tailscale/ZeroTier VPN]
↓
Home Server (192.168.0.x)
↓
┌─────────────────────────────────────┐
│ Network Management Services │
├─────────────────────────────────────┤
│ • Fortinet Manager (React+Node.js) │
│ • FortiGate Dashboard (FastAPI) │
│ • AI Network Management (Neo4j) │
│ • Network Troubleshooter (AI) │
│ • MCP Servers (Claude Integration) │
└─────────────────────────────────────┘
- Home Server: Linux server with Docker and Docker Compose
- Corporate Workstation: Windows/macOS/Linux with admin rights to install VPN clients
- Network Management Services: Any combination of network management applications
- Corporate IT Policy: Approval for VPN client installation (varies by organization)
# Clone this repository
git clone https://github.com/kmransom56/corporate-network-access-solution.git
cd corporate-network-access-solution
# Run the setup script
./scripts/setup-home-server.sh
# Configure AI assistant
./scripts/setup-claude-ai-assistant.sh# Install Tailscale
curl -fsSL https://tailscale.com/install.sh | sh
# Authenticate and get your server IP
sudo tailscale up
tailscale ip -4# Install ZeroTier
curl -s https://install.zerotier.com | sudo bash
# Create network at my.zerotier.com and join
sudo zerotier-cli join [YOUR-NETWORK-ID]# Install VPN client on corporate workstation
# For Tailscale: Download from tailscale.com/download
# For ZeroTier: Download from zerotier.com/download
# Connect to same network as home server
# Test connectivity: ping [HOME-SERVER-VPN-IP]Via Tailscale:
- Fortinet Manager:
http://100.x.x.x:3002 - FortiGate Dashboard:
http://100.x.x.x:8000 - AI Network Management:
http://100.x.x.x:5000 - SSH Access:
ssh user@100.x.x.x
Via ZeroTier (Currently Active):
- FortiGate Dashboard:
http://172.24.245.58:10000✅ - HAProxy Load Balancer:
http://172.24.245.58:80✅ - SSH Access:
ssh keith@172.24.245.58✅ - HAProxy Statistics:
http://172.24.245.58:8404✅
- FortiGate Management: REST API integration with 246+ endpoints
- FortiSwitch Control: Switch topology and port management
- Security Fabric: Multi-device orchestration
- SNMP Monitoring: Device discovery and status tracking
- Cisco Meraki: Complete API integration
- Generic SNMP: Device discovery for any manufacturer
- Custom Integrations: API abstraction layer for vendor-specific implementations
- Voice Control: Natural language network management
- AutoGen Coordination: Multi-agent system for complex operations
- Neo4j Topology: Graph database for network relationships
- Automated Troubleshooting: AI-powered network diagnostics
This solution includes a sophisticated AI assistant powered by Claude Code with:
- Persistent Context: Tracks project state across sessions
- Learning History: Builds knowledge from analysis patterns
- Task Management: Automated priority tracking and deadlines
/deploy_project [name] [env]- Standardized deployment workflows/analyze_project [name] [type]- Comprehensive health/security analysis/network_health_check [scope]- Infrastructure monitoring/setup_corporate_access [method]- VPN configuration automation
- Scale Awareness: Optimized for 812+ device environments
- Security First: Never compromises network security or exposes credentials
- Performance Priority: Real-time responsiveness for network operations
- ✅ VPN Encryption: All traffic encrypted end-to-end (WireGuard/AES-256)
- ✅ Identity Integration: SSO support for enterprise authentication
- ✅ Audit Logging: Comprehensive access and activity logging
- ✅ Network Isolation: VPN traffic isolated from corporate network
- ✅ Policy Alignment: Designed to comply with corporate IT policies
- 🔑 SSH Key Authentication: No password-based access
- 🛡️ Firewall Rules: Restrictive access controls
- 📊 Monitoring: Real-time access monitoring and alerting
- 🔄 Regular Updates: Automated security patch management
- 📋 Access Reviews: Regular audit of connected devices
- Devices Managed: 812+ network devices across 7 organizations
- Concurrent Users: Multiple simultaneous corporate access sessions
- Response Time: <2 second dashboard loads for 1000+ devices
- Uptime: 99.9% availability for critical network operations
- Redis Caching: Frequently accessed device data
- MongoDB Indexing: Optimized queries for large device inventories
- WebSocket Updates: Real-time status updates without polling
- Container Resources: Right-sized Docker resource allocation
claude-ai/
├── memory/
│ ├── project_context.md # Central project state
│ ├── corporate_network_access_analysis.md
│ └── tailscale_vs_zerotier_comparison.md
├── commands/
│ ├── setup_corporate_access.md # VPN setup automation
│ ├── network_health_check.md # Infrastructure monitoring
│ └── deploy_project.md # Deployment workflows
└── agents/
└── research_agent.md # Specialized planning agent
config/
├── tailscale/
│ ├── acl.hujson # Tailscale access control
│ └── device-authorization.json # Device management
├── zerotier/
│ ├── network-config.json # ZeroTier network settings
│ └── flow-rules.json # Traffic control rules
└── nginx/
└── corporate-proxy.conf # Reverse proxy configuration
- Corporate IT Approval Guide - Getting VPN solutions approved
- Zscaler Bypass Techniques - Technical approaches for enterprise proxies
- Multi-VPN Strategy - Implementing redundant access methods
- Security Hardening - Enterprise security best practices
- Fortinet Integration - FortiGate/FortiSwitch configuration
- Cisco Meraki Setup - API configuration and management
- AI Assistant Configuration - Setting up intelligent automation
- Troubleshooting Guide - Common issues and solutions
# Add your own network management application
./scripts/add-custom-service.sh \
--name "my-network-app" \
--port 8080 \
--docker-compose "./my-app/docker-compose.yml"
# Configure AI assistant for your service
./scripts/configure-ai-assistant.sh \
--service "my-network-app" \
--api-docs "http://localhost:8080/docs"# Configure corporate SSO
./scripts/setup-enterprise-sso.sh \
--provider "azure-ad" \
--tenant-id "your-tenant-id"
# Set up monitoring integration
./scripts/setup-monitoring.sh \
--prometheus-url "http://prometheus:9090" \
--grafana-url "http://grafana:3000"- Remote NOC Access: Secure access to network management tools from any location
- Incident Response: 24/7 access to critical network infrastructure
- Multi-Site Management: Centralized control of distributed network assets
- Client Network Management: Secure access to customer network infrastructure
- Technical Support: Remote troubleshooting and configuration
- Scalable Operations: Support for hundreds of client networks
- Work From Home: Secure access to internal network management tools
- Vendor Management: Controlled access for network equipment vendors
- Compliance: Audit-ready access logs and security controls
We welcome contributions! Please see our Contributing Guide for details.
- Additional VPN Solutions: Support for other enterprise VPN solutions
- Network Vendor Integrations: New device manufacturer support
- Security Enhancements: Advanced security features and compliance
- AI Assistant Improvements: Enhanced automation and intelligence
- Documentation: Improved guides and troubleshooting content
This project is licensed under the MIT License - see the LICENSE file for details.
- Documentation: Full documentation
- Issues: GitHub Issues
- Discussions: GitHub Discussions
- Tailscale: For excellent corporate-friendly VPN technology
- ZeroTier: For flexible software-defined networking
- Anthropic Claude: For AI-powered network management automation
- Fortinet: For comprehensive network security solutions
- Cisco Meraki: For cloud-managed networking platform
Built for enterprise network professionals who need reliable, secure access to home-based infrastructure from corporate environments.
⭐ Star this repository if it helps you achieve secure corporate network access!