I have a server which will hold some sensitive data. At the moment, access to the server is restricted via SSH and only to a single person. The server is however on the same network that many other computers are and has an IP from the same range (albeit protected by a firewall).
I have read that an added measure of security would be to connect to the server via a encrypted VPN and thus not have the server on the same network as other computers. Should we in the future want to expand the security, we could add token authentications.
Could anybody please tell me if the above is feasible and if it makes sense to set up? I cannot put my head around how the VPN would work short of getting an VPN router and connect via that.
Any feedback and pointers would be helpful.