How to set up OpenVPN for multiple people?

Question

openvpn

Hello. Due to some events, the organization decided to transfer employees to remote work. As an option, the organization of a VPN connection from home to a working server is being considered.
The office already has a gateway with an OpenVPN server. At the moment, he provides communication between two branches, that is, he has one client.
So, what is the best way to set up a server so that 5, 10, 15, or more employees can connect to it from their home machines? Is it necessary to generate a key for each? Do I need to prescribe a route for each employee? Is it mandatory for employees at home to use a direct internet connection (not through a router)?

Answer 1

IMHO it is better to raise another one, so that in which case not to compromise the main tunnel in the event of a certificate leak.
You generate a CA certificate, you generate a server certificate, you generate a certificate for clients.
Set up masquerading for the interface with the second server and push routes to internal networks. You do not need to connect two networks, but only let remote clients.
You can connect to them even from a mobile phone, as long as the VPN provider does not block it.