Secondly, if not, is there a way to set up OpenVPN so that while the server sees the packet sent by client1 to client2, it cannot actually interpret it? (e.g. because it is encrypted with client2's public key)
first,
NONE of the traffic (AFTER the TLS negotiation) is encrypted using clients2 public key.
keep in mind that openvpn uses a symmetric cipher (f.e AES) for data transfer.
second,
encryption-deccryption endpoints are client-server , a packet from clienta to clientb
is encrypted(clienta)-decrypted(server)-encrypted(server)-decrypted(clientb)
so the "it cannot actually interpret it?" is not valid.
Example use case: Two clients that usually are in different offices find themselves at corporate headquarters. Do they still need to go out to the public internet and back in?
ok..let me ask,
there are in corporate headquarters and instead of using their local lan ip to access resources will use their vpn?
Michael.
