Using openvpn only you could do this:
- Server config do not use --duplicate-cn:
- Client A:
- Has only one cert/key pair used on both devices. 1x cert/key on 2x devices
The server will allow only one connection at a time from this client.
- Client B:
- Has a unique cert/key pair per device. 3x certs/keys on 3x devices
The server will allow all three devices to connect at the same time