You can set up vpn. That works fine. In order to do administration, you must have at least SQL*Plus (or something like it) installed. You can, however also use Enterprise Manager remotely as well. You can log in as normal, sysop or sysdba and do everything you would do locally as a remote. I do this daily and it works fine as long as you have a pretty quick connection.