How to start setting up a secure vpn network?

Question

VPN

Tasks:
1. Hide the real ip and in no case burn it
2. So that all clients on the network work through vpn with a certificate
3. So that the gateway on the network (debian) also connects to the vpn server on vds hosting and when it freezes or a vpn breakage of a PC from the network did not burn in the world on a white ip.

Answer 1

Sergey, the question should be put more broadly. What threat do you specifically want to protect against? Protection against exact determination of the address / location of the office?

Answer 2

completely hide any mention that the office is connected with the Russian Federation, and is located in the Crimea!