Spektyr I've just spent a long day making what will undoubtedly turn out to be stupid mistakes. I'm not a complete rookie (I "run" a different VPN that works fine). But this one is kicking my backside. What I'm trying to do: connect multiple RPi 3's via residential-grade WiFi to an OpenVPN server hosted at DigitalOcean. But wait, there's more. These Pi's need to be able to see each other and talk to each other. And that's not all - anything connected to their Ethernet port should get to come along for the ride (be part of the same WAN via the VPN, see each other, ping, etc.) And there's STILL more - I naturally want a separation between the local LANs and my WAN. Whatever router these Pi's might be connected to on WiFi will have things connected to it that I don't want playing with my WAN (or vice versa). In a perfect world: 1. This works with or without the WiFi adapter on the Pi. 2. Internet traffic forks at the Pi, goes to the local router, and on it's merry way to the web. (But there's so little of it I don't care that much whether it goes through the VPN server or not.) 3. Internal network runs on a 172.16.0.0/16 network. This way I can keep track of all my stuff by 172.16.location#.device# So for example: I send 3 devices that can't do OpenVPN themselves to a client. I pre-configure them to static IP's of 172.16.4.1-3 (location 4, devices 1 through 3). Along with that I send an RPi3 that has a 172.16.4.100 static IP on the Ethernet port, and DHCP on WiFi with the correct SSID/password programmed in. The client should be able to plug everything in and it just start up and run all on its own and I have access to each device via SSH to the relevant IP address (as well as TeamViewer on the Pi for redundancy). I want to be able to assure these folks that my equipment can't mess up their home computer (and I really don't want their home computer messing up my hardware - or getting malware on it that goes sniffing about for things to zombify). I'm sure I'm overlooking something (aside from the stupid mistake I made setting up the dedicated VPN server for this that I'll figure out after I've had a good night's sleep... too many hours, I've got blinders on at this point.) Anyone want to help me out with a checklist of settings I need to make sure are set on the server side and the client side? The other thing I'm not confident on is the configuration of the Pis. I actually need this up and running pretty quick, so pointers are great but if anyone wants to actually set up the server.conf, client.conf, and RPi config instructions/files I would be more than happy to pay for the time (fiat or crypto are options). This is for my business so it's no problem working it as a subcontracting gig. Someone else out there has to have done this before me, but I can't find anything about it online (could be I'm not using the right search terms). I have zero issue with the keys, SSH to the server, etc. The configs and bridging on the Pis are where I'm stuck. Thanks in advance, (hopefully)
Spektyr I've read quite a few How To's, just none that are specific to what I'm trying to do. I've probably made some obvious mistake in trying to combine the configurations of different guides to produce the needed result. If there's something out there that has instructions on doing what I'm trying to do, fantastic. Give me a set of half-way decent instructions and some tools, I'll build anything you like. (I just might not volunteer to be the first one to test a helicopter I built.) I just feel like here I'm trying to build a submarine car using the instructions for building a car, and the instructions for building a submarine.
Spektyr I sent you an email. If you didn't see it, check your spam folder. I'll be out of "the office" most of today at a new site that may have spotty or non-existent cell service, and I don't know whether the owner will be there to give WiFi access. But I will answer as quickly as I'm able. I'm not the only guy around here that thinks he can set up a VPN server, but I'm the most qualified at the company. I need to get this done before someone else tries their hand at it and then drops a mess in my lap to fix.
