I
I
Ivan2020-05-17 18:42:03
openvpn
Ivan, 2020-05-17 18:42:03

Setting up OpenVPN site-to-site for multiple networks: how to do it right?

Good afternoon.

I'm trying to work with setting up networks through openvpn, but it doesn't work.

What is given (also see attached diagram ):

  • Several locations. The entry point to the location is the router on which the OpenVPN client will be launched.
    Network l1: 10.59.1.0/32
    Network l2: 10.59.2.0/32
    Network l3: 10.77.1.0/32
    Network l4: 10.77.2.0/32
  • Portable devices - constantly moving devices (laptops, smartphones). The devices must be on the 10.10.0.0/32 network.
  • There is a VPS on which it is planned to install an OpenVPN server, and several secondary services.


What task:
  1. Devices in networks l1, l2, l3, l4 see each other and portable devices can exchange data. The same devices see the services located behind the OpenVPN server. Internet access, while each network has its own (not through a server).
  2. Portable devices see devices in networks l1, l2, l3, l4, can exchange data. Devices have access to services located behind the OpenVPN server. Internet access is through an OpenVPN server.
  3. The server sees all networks and portable devices and can exchange data with them.
  4. Several services run on the server that have access to the Internet, but only clients who come through OpenVPN can connect. That is, there is no access to services from the external Internet.

I also tried to depict all of the above on the diagram
Question :
How and what to prescribe in the server configs so that this scheme starts working?
A consequence of the previous question: is it possible to configure the server so that clients receive all the necessary network parameters from the server?

Answer the question

In order to leave comments, you need to log in

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question