How to organize VPN access to network resources?

Question

VPN

Gentlemen, the question is this.
There is a router from the kinektik running a VPN with a white ip on it, there are still a number of "subscribers" who sometimes connect to have a locale for some games, but in this case, all traffic from them is wrapped in my channel. I have a normal volume for a dump file, a small collection in the same plex and it can work via the Internet for removal of 400+ km, but I would not like to let it go on the Internet in this form. Actually, what I would like, vpn is enabled on my router, but clients at the level of routers (maybe an additional router on the network?) also had a VPN up to me, but all Internet traffic went as usual, but from their PC / applications, if necessary, access to my pc\file dump, etc., all this would be like a common local network. let's just say vpn would play a role as if there is a patch cord between the networks.

Answer 1

You cannot prevent clients from accessing the Internet through your VPN. But you can use a firewall to block such traffic. Or just disable NAT for them. They will break, but will not reach the goal. Those. The Internet will not be available to them, only your local resources. But for those who are not satisfied with the lack of an Internet, offer instructions on how to properly configure routing (on the client side). Those who do according to the instructions will have it the way you want. Those who do not follow the instructions will not have an Internet until they disconnect from the VPN.