How to allow access on an Openvpn subnet only to certain clients?

Question

openvpn

Tell me how to allow access to the entire subnet and to other Openvpn clients only to certain clients? It is necessary that everyone has access only to the Openvpn server, and a few clients have access to all.
Removed the "client-to-client" line from the server config - everyone got access only to the server.
I added "client-config-dir /etc/openvpn/ccd", created a file inside with the client's name and wrote "client-to-client" inside, but it didn't work, I wrote "Options error: option 'client-to-" in the logs client' cannot be used in this context (/etc/openvpn/ccd/client1)". How can such a setting be made? And is it possible?

Answer 1

This is resolved by the firewall at the server level. Even if you make separate configs for clients, nothing will stop them from adding routes to other subnets by hand.